last executing test programs: 6m2.968784067s ago: executing program 0 (id=1031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x600, 0x0) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x12, 0x0, r4, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfa79607a58ec9110}) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m2.393663739s ago: executing program 0 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = creat(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000340)={0x0, 0x1, 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000"], 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d1}, 0x4008840) 6m0.536295396s ago: executing program 0 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = creat(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000340)={0x0, 0x1, 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000"], 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d1}, 0x4008840) 5m58.88498068s ago: executing program 0 (id=1040): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) 5m52.42415158s ago: executing program 0 (id=1050): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006400)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000daffff", @ANYRES64=r0], 0x10) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 5m51.241700034s ago: executing program 0 (id=1059): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) 5m35.866604528s ago: executing program 32 (id=1059): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) 13.541963504s ago: executing program 2 (id=2006): unshare(0x24060400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f00000002c0)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x10080) recvmmsg(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f00000007c0)=""/23, 0x17}], 0x8}, 0x40}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/14, 0xe}], 0x2, &(0x7f0000000a40)=""/4, 0x4}, 0x9}, {{&(0x7f0000000a80)=@llc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/58, 0x3a}], 0x1, &(0x7f0000000b80)=""/219, 0xdb}, 0x341}, {{&(0x7f0000000c80), 0x80, &(0x7f0000000d80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/134, 0x86}, {&(0x7f0000001e40)=""/239, 0xef}, {&(0x7f0000001f40)=""/234, 0xea}, {&(0x7f0000002040)=""/185, 0xb9}], 0x5, &(0x7f0000002140)=""/72, 0x48}, 0x3}, {{&(0x7f00000021c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003300)=""/201, 0xc9}, {&(0x7f0000003400)=""/181, 0xb5}, {&(0x7f00000034c0)=""/220, 0xdc}, {&(0x7f00000035c0)=""/228, 0xe4}], 0x7, &(0x7f0000002240)=""/20, 0x14}, 0x4}], 0x5, 0x40000040, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) setxattr$security_capability(0x0, 0x0, 0x0, 0xffffffffffffffdb, 0x3) creat(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x10002, 0x0, 0x1, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000500)='./file0\x00', 0xd4000121) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) write$dsp(r6, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 5.157817319s ago: executing program 2 (id=2024): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000100)="0f8177", 0x3, 0x48000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xff}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x20c12, 0x0, 0x1, 0x0, 0x0) chown(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r5 = io_uring_setup(0x1e54, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0x72, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r7, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 4.446633722s ago: executing program 4 (id=2027): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(r2, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x5, 0xd}) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "3259ef7e4361f87123f4c262708a82815ca93a3f31170566499a195f2bf9cd9b9fdffb823bc7c9170fb5b8d8ffd8c83472f451bcc533e5f7a55d4adbdcabcf0f", 0x1e}, 0x48, 0xfffffffffffffffb) r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r8, &(0x7f00000001c0)="a5", 0x1) keyctl$instantiate(0xc, r7, &(0x7f0000000140)=@encrypted_new={'new ', 'default', 0x20, 'user:', '/dev/kvm\x00', 0x20, 0x3}, 0x30, r8) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009802"]) r9 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r9, 0x6a, 0x4, 0x1, 0x4) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x344, &(0x7f0000000200)=ANY=[@ANYBLOB="d700004e474da80cd35a548252f12fde36777dd581b1a4de07a37768c269ceccc2748ff3b8818e184241f0580be66b6c449f95b15819621ae31f6755816ff3f4c966efb4cb781e2057bda0e683d9aa4152e354eb822dfd8b32a1300496b073f894a8dc069855f9aa73da8f4562bbef58173c9a7be8890981b78f42786258357332231bdab38cf9b50132fe7f624d7977efb0b41e9f3b4ce84fdd248a6cb6a4f1e5e8f6e1d38dbaf2187ade748844806e7d01dc043a8c644d43fbb356634937139b9df9f70998be275a6df990d65bc42fe38d903d3a582e3e5f306000f800004e2d63"]) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x3c, r12, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x2, 0x147e00) 4.160385408s ago: executing program 3 (id=2030): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 3.890166133s ago: executing program 3 (id=2032): socket$caif_seqpacket(0x25, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.674767388s ago: executing program 3 (id=2033): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r0) 3.418180673s ago: executing program 2 (id=2034): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, &(0x7f00000002c0), &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) poll(&(0x7f0000000a00)=[{0xffffffffffffffff, 0x2080}], 0x1, 0x10) lseek(0xffffffffffffffff, 0x5, 0x2) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x8400, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) socket$packet(0x11, 0x2, 0x300) 1.965756581s ago: executing program 3 (id=2037): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) 1.272629455s ago: executing program 1 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.025415859s ago: executing program 1 (id=2040): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xa) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) tee(r0, r3, 0x8, 0xa) 710.019056ms ago: executing program 3 (id=2041): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f00"], 0x6c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 709.776056ms ago: executing program 1 (id=2042): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) 689.507926ms ago: executing program 4 (id=2043): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 525.696139ms ago: executing program 4 (id=2044): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f00000005c0)=""/86, 0x56) getdents(0xffffffffffffffff, 0x0, 0x58) 478.11896ms ago: executing program 3 (id=2045): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r0) 411.167382ms ago: executing program 1 (id=2046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 396.237722ms ago: executing program 4 (id=2047): unshare(0x24060400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f00000002c0)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x10080) recvmmsg(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f00000007c0)=""/23, 0x17}], 0x8}, 0x40}, {{&(0x7f0000000dc0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/14, 0xe}], 0x2, &(0x7f0000000a40)=""/4, 0x4}, 0x9}, {{&(0x7f0000000a80)=@llc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/58, 0x3a}], 0x1, &(0x7f0000000b80)=""/219, 0xdb}, 0x341}, {{&(0x7f0000000c80), 0x80, &(0x7f0000000d80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/134, 0x86}, {&(0x7f0000001e40)=""/239, 0xef}, {&(0x7f0000001f40)=""/234, 0xea}, {&(0x7f0000002040)=""/185, 0xb9}], 0x5, &(0x7f0000002140)=""/72, 0x48}, 0x3}, {{&(0x7f00000021c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003300)=""/201, 0xc9}, {&(0x7f0000003400)=""/181, 0xb5}, {&(0x7f00000034c0)=""/220, 0xdc}, {&(0x7f00000035c0)=""/228, 0xe4}], 0x7, &(0x7f0000002240)=""/20, 0x14}, 0x4}], 0x5, 0x40000040, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) setxattr$security_capability(0x0, 0x0, 0x0, 0xffffffffffffffdb, 0x3) creat(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x10002, 0x0, 0x1, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000500)='./file0\x00', 0xd4000121) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 250.009535ms ago: executing program 4 (id=2048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 240.340245ms ago: executing program 1 (id=2049): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) 0s ago: executing program 2 (id=2052): r0 = inotify_init() r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x649601) r2 = fcntl$dupfd(r1, 0x0, r0) fcntl$dupfd(r2, 0x0, r0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x14, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac193400", "f4bd0000008019000e000000000000f400", [0x6, 0x2000000000001]}}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f000840031b000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket(0x22, 0x2, 0x3) accept4$packet(r8, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x80, 0x0, 0x1d8}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x5}) close(r5) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r11, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r11) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): alid interface number: 16 but max is 0 [ 609.043021][ T23] usb 3-1: config 0 has no interface number 0 [ 609.049378][ T23] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.060470][ T23] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.090217][ T23] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 609.112168][ T23] usb 3-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 609.823182][ T23] usb 3-1: Product: syz [ 609.843506][ T23] usb 3-1: config 0 descriptor?? [ 610.365428][ T8709] IPVS: starting estimator thread 0... [ 610.525350][T10288] IPVS: using max 26 ests per chain, 62400 per kthread [ 611.015016][T10293] ptrace attach of "./syz-executor exec"[5787] was attempted by "./syz-executor exec"[10293] [ 612.838896][ T786] usbhid 2-1:0.16: can't add hid device: -71 [ 612.849027][ T786] usbhid: probe of 2-1:0.16 failed with error -71 [ 612.920082][ T786] usb 2-1: USB disconnect, device number 32 [ 613.173690][ T5888] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 613.511513][ T5888] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 613.945217][ T5888] usb 4-1: config 0 has no interface number 0 [ 613.951575][ T5888] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.025489][ T5888] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.071011][ T5888] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 614.114974][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 614.143872][ T5888] usb 4-1: Product: syz [ 614.150490][T10320] tipc: Enabling of bearer rejected, failed to enable media [ 614.180051][T10320] syzkaller0: entered promiscuous mode [ 614.196335][T10320] syzkaller0: entered allmulticast mode [ 614.210560][ T5888] usb 4-1: config 0 descriptor?? [ 616.345013][T10335] Unsupported ieee802154 address type: 0 [ 616.657728][ T23] usbhid 3-1:0.16: can't add hid device: -32 [ 616.665078][ T23] usbhid: probe of 3-1:0.16 failed with error -32 [ 617.015142][ T23] usb 3-1: USB disconnect, device number 44 [ 618.464989][ T8709] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 618.667313][ T8709] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 618.726833][ T8709] usb 2-1: config 0 has no interface number 0 [ 619.033286][ T8709] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.060106][ T8709] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.074027][ T8709] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 619.083726][ T8709] usb 2-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 619.097677][ T8709] usb 2-1: Product: syz [ 619.112062][ T5888] usbhid 4-1:0.16: can't add hid device: -71 [ 619.130203][ T8709] usb 2-1: config 0 descriptor?? [ 619.152883][ T5888] usbhid: probe of 4-1:0.16 failed with error -71 [ 619.309584][ T5888] usb 4-1: USB disconnect, device number 37 [ 620.743323][T10380] ptrace attach of "./syz-executor exec"[9926] was attempted by "./syz-executor exec"[10380] [ 621.616005][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1148'. [ 623.695268][ T5888] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 623.910312][ T5888] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 623.925073][ T5888] usb 3-1: config 0 has no interface number 0 [ 623.951710][ T5888] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.004112][ T5888] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.229871][ T5888] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 624.265381][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 624.273543][ T5888] usb 3-1: Product: syz [ 624.490002][ T8709] usbhid 2-1:0.16: can't add hid device: -32 [ 624.546104][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.552580][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.610765][ T8709] usbhid: probe of 2-1:0.16 failed with error -32 [ 624.968712][ T5888] usb 3-1: config 0 descriptor?? [ 625.520233][T10407] ptrace attach of "./syz-executor exec"[5787] was attempted by "./syz-executor exec"[10407] [ 625.563776][ T5860] usb 2-1: USB disconnect, device number 33 [ 625.913283][ T5888] usbhid 3-1:0.16: can't add hid device: -71 [ 625.927729][ T5888] usbhid: probe of 3-1:0.16 failed with error -71 [ 625.955894][ T5888] usb 3-1: USB disconnect, device number 45 [ 626.495213][ T5888] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 626.625123][ T5860] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 626.740103][ T5888] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 626.755067][ T5888] usb 2-1: config 0 has no interface number 0 [ 626.772054][ T5888] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.793607][ T5888] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.826555][ T5888] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 626.847706][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 626.870025][ T5888] usb 2-1: Product: syz [ 626.890110][ T5888] usb 2-1: config 0 descriptor?? [ 626.978868][ T5860] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 626.987192][ T5860] usb 5-1: config 0 has no interface number 0 [ 626.993411][ T5860] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.004607][ T5860] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.408663][ T5860] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 627.437123][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 627.455840][ T5860] usb 5-1: Product: syz [ 627.469709][ T5860] usb 5-1: config 0 descriptor?? [ 629.501374][T10466] ptrace attach of "./syz-executor exec"[9926] was attempted by "./syz-executor exec"[10466] [ 629.611162][ T5888] usbhid 2-1:0.16: can't add hid device: -71 [ 629.627367][ T5888] usbhid: probe of 2-1:0.16 failed with error -71 [ 629.651933][ T5888] usb 2-1: USB disconnect, device number 34 [ 630.967539][T10482] ptrace attach of "./syz-executor exec"[5787] was attempted by "./syz-executor exec"[10482] [ 631.235489][T10490] tipc: Enabling of bearer rejected, failed to enable media [ 631.273369][T10482] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 631.284219][T10493] syzkaller0: entered promiscuous mode [ 631.296680][T10493] syzkaller0: entered allmulticast mode [ 631.365131][T10482] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 631.383230][T10482] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 631.414489][T10482] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 631.447281][T10482] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 631.462167][T10482] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 631.473695][T10482] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 631.482588][T10482] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 631.490834][T10482] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 631.511716][T10482] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 632.925932][ T5860] usbhid 5-1:0.16: can't add hid device: -71 [ 632.946589][ T5860] usbhid: probe of 5-1:0.16 failed with error -71 [ 632.975265][ T5860] usb 5-1: USB disconnect, device number 2 [ 637.292837][T10540] netlink: 'syz.4.1175': attribute type 4 has an invalid length. [ 638.325512][T10548] tipc: Enabling of bearer rejected, failed to enable media [ 638.385223][T10551] syzkaller0: entered promiscuous mode [ 638.408561][T10551] syzkaller0: entered allmulticast mode [ 638.765168][ T23] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 638.968719][ T23] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 638.989661][ T23] usb 4-1: config 0 has no interface number 0 [ 639.009133][ T23] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.028132][ T23] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.045522][ T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 639.059519][ T23] usb 4-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 639.085014][ T23] usb 4-1: Product: syz [ 639.092858][ T23] usb 4-1: config 0 descriptor?? [ 639.234278][T10564] tipc: Enabling of bearer rejected, failed to enable media [ 639.275860][T10564] syzkaller0: entered promiscuous mode [ 639.281631][T10564] syzkaller0: entered allmulticast mode [ 639.623443][T10572] ptrace attach of "./syz-executor exec"[5785] was attempted by "./syz-executor exec"[10572] [ 640.571990][T10581] ptrace attach of "./syz-executor exec"[5783] was attempted by "./syz-executor exec"[10581] [ 641.685471][T10600] netlink: 'syz.4.1184': attribute type 4 has an invalid length. [ 642.234207][T10608] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 643.239749][T10608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.284086][T10608] team0: Port device bond0 added [ 643.316108][T10613] netlink: 'syz.2.1185': attribute type 4 has an invalid length. [ 644.380169][ T23] usbhid 4-1:0.16: can't add hid device: -32 [ 644.398674][ T23] usbhid: probe of 4-1:0.16 failed with error -32 [ 646.350088][ T786] usb 4-1: USB disconnect, device number 38 [ 646.631327][T10652] syzkaller0: entered promiscuous mode [ 646.647158][T10652] syzkaller0: entered allmulticast mode [ 647.480162][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1197'. [ 649.045567][T10684] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 650.060775][T10691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1210'. [ 650.074422][T10688] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 650.131080][T10688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.428515][T10688] team0: Port device bond0 added [ 650.446169][T10697] ptrace attach of "./syz-executor exec"[5783] was attempted by "./syz-executor exec"[10697] [ 651.392459][T10704] netlink: 'syz.4.1204': attribute type 4 has an invalid length. [ 651.453741][T10700] syzkaller0: entered promiscuous mode [ 651.565059][T10700] syzkaller0: entered allmulticast mode [ 654.285877][T10740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1214'. [ 655.340870][T10757] netlink: 'syz.3.1215': attribute type 4 has an invalid length. [ 656.207040][T10760] netlink: 'syz.2.1217': attribute type 10 has an invalid length. [ 656.401139][T10760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.410813][T10760] team0: Port device bond0 added [ 657.382214][T10769] syzkaller0: entered promiscuous mode [ 657.389937][T10769] syzkaller0: entered allmulticast mode [ 658.235034][ T23] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 658.469437][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.524954][ T23] usb 3-1: config 0 has no interfaces? [ 658.553357][ T23] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 658.762761][ T23] usb 3-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 658.794915][ T23] usb 3-1: Product: syz [ 658.876496][T10792] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 659.029192][ T23] usb 3-1: config 0 descriptor?? [ 661.126941][T10820] ptrace attach of "./syz-executor exec"[5787] was attempted by "./syz-executor exec"[10820] [ 661.427614][T10822] netlink: 'syz.4.1229': attribute type 4 has an invalid length. [ 662.029529][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.041597][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.054979][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.069102][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.080025][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.091257][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.101539][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.112338][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.126203][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.144800][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 662.742773][T10832] syzkaller0: entered promiscuous mode [ 662.758057][T10832] syzkaller0: entered allmulticast mode [ 665.062378][ T8] usb 3-1: USB disconnect, device number 46 [ 667.107685][T10885] netlink: 'syz.2.1242': attribute type 4 has an invalid length. [ 668.115620][T10893] netlink: 'syz.2.1244': attribute type 10 has an invalid length. [ 668.243820][T10895] syzkaller0: entered promiscuous mode [ 668.255046][T10895] syzkaller0: entered allmulticast mode [ 670.162398][T10918] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 671.160229][T10931] netlink: 'syz.3.1254': attribute type 4 has an invalid length. [ 672.163555][T10940] netlink: 'syz.3.1257': attribute type 4 has an invalid length. [ 677.605098][T10986] netlink: 'syz.2.1272': attribute type 4 has an invalid length. [ 679.685093][T10685] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 679.983647][T10685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.064035][T10685] usb 2-1: config 0 has no interfaces? [ 680.139156][T10685] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 680.364670][T10685] usb 2-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 680.415038][T10685] usb 2-1: Product: syz [ 680.475896][T10685] usb 2-1: config 0 descriptor?? [ 681.657720][T11033] ptrace attach of "./syz-executor exec"[5785] was attempted by "./syz-executor exec"[11033] [ 685.191923][ T8] usb 2-1: USB disconnect, device number 35 [ 685.565771][T11062] netlink: 'syz.2.1291': attribute type 4 has an invalid length. [ 686.015468][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.030738][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.446065][T11084] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 689.554975][T11090] netlink: 'syz.3.1302': attribute type 4 has an invalid length. [ 693.470804][T11129] netlink: 'syz.3.1315': attribute type 4 has an invalid length. [ 694.445787][T11132] syzkaller0: entered promiscuous mode [ 694.465012][T11132] syzkaller0: entered allmulticast mode [ 695.726746][T11141] __nla_validate_parse: 44 callbacks suppressed [ 695.726765][T11141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1318'. [ 696.993533][T11161] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 697.534810][T11162] netlink: 'syz.3.1320': attribute type 4 has an invalid length. [ 698.855645][T11177] syzkaller0: entered promiscuous mode [ 698.867036][T11177] syzkaller0: entered allmulticast mode [ 700.573218][T11198] netlink: 'syz.3.1334': attribute type 4 has an invalid length. [ 702.801199][T11217] netlink: 'syz.3.1339': attribute type 4 has an invalid length. [ 703.421892][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 703.667459][T11224] syzkaller0: entered promiscuous mode [ 703.716925][T11224] syzkaller0: entered allmulticast mode [ 704.805419][T11233] comedi comedi0: Minor 3 specified more than once! [ 708.079724][T11235] comedi comedi0: Minor 3 specified more than once! [ 708.499729][T11259] netlink: 'syz.3.1350': attribute type 4 has an invalid length. [ 710.919897][T11274] comedi comedi0: Minor 3 specified more than once! [ 712.372690][T11280] overlayfs: failed to resolve './file0': -2 [ 713.389284][T11293] netlink: 'syz.1.1357': attribute type 4 has an invalid length. [ 713.507849][T11297] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1362'. [ 714.555048][T11301] comedi comedi0: Minor 3 specified more than once! [ 715.525345][T11311] comedi comedi0: Minor 3 specified more than once! [ 717.487739][T11325] syzkaller0: entered promiscuous mode [ 717.493361][T11325] syzkaller0: entered allmulticast mode [ 717.509768][T11327] overlayfs: failed to resolve './file0': -2 [ 721.305183][T11355] comedi comedi0: Minor 3 specified more than once! [ 724.511627][T11368] tipc: Enabled bearer , priority 0 [ 724.542468][T11370] overlayfs: failed to resolve './file0': -2 [ 724.754733][T11368] tipc: Resetting bearer [ 724.996241][T11367] tipc: Disabling bearer [ 725.853014][T11378] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1383'. [ 727.282597][T11390] comedi comedi0: Minor 3 specified more than once! [ 727.422522][T11393] comedi comedi0: Minor 3 specified more than once! [ 730.498152][T11405] overlayfs: failed to resolve './file1': -2 [ 731.733552][T11413] tipc: Enabled bearer , priority 0 [ 731.848094][T11413] tipc: Resetting bearer [ 732.031410][T11412] tipc: Disabling bearer [ 733.940632][T11432] syz.3.1397 uses obsolete (PF_INET,SOCK_PACKET) [ 733.999268][T11432] loop3: detected capacity change from 0 to 128 [ 734.019695][T11432] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 734.033944][T11432] hpfs: filesystem error: improperly stopped [ 734.043907][T11432] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 734.084259][T11432] hpfs: You really don't want any checks? You are crazy... [ 734.102406][T11432] hpfs: hpfs_map_sector(): read error [ 734.108423][T11432] hpfs: code page support is disabled [ 734.117789][T11432] hpfs: hpfs_map_4sectors(): unaligned read [ 734.124240][T11432] hpfs: hpfs_map_4sectors(): unaligned read [ 734.130862][T11432] hpfs: filesystem error: unable to find root dir [ 735.478369][T11434] loop2: detected capacity change from 0 to 32768 [ 735.560654][T11434] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1398 (11434) [ 735.739824][T11434] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 735.790071][T11434] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 735.809439][T11434] BTRFS info (device loop2): enabling disk space caching [ 735.817144][T11434] BTRFS info (device loop2): disabling disk space caching [ 735.824369][T11434] BTRFS info (device loop2): unrecognized rescue option 'ignoresuperflags' [ 735.849566][T11434] BTRFS error (device loop2): unrecognized rescue value ignoresuperflags [ 735.884985][T11434] BTRFS error (device loop2): cannot disable free space tree [ 735.928788][T11434] BTRFS error (device loop2): open_ctree failed: -22 [ 736.234935][ T23] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 736.253553][ T9108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 736.449639][ T23] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 736.478481][ T23] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 736.505228][ T9108] usb 5-1: Using ep0 maxpacket: 8 [ 736.519398][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 736.577205][ T9108] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 736.597566][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.612799][ T9108] usb 5-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 32 [ 736.638219][ T9108] usb 5-1: config 1 interface 0 has no altsetting 0 [ 736.676710][ T9108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 736.688802][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 736.705624][ T9108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.734286][ T9108] usb 5-1: Product: ï¦ãµ²ã®‚렻嘦렩ⲵ㓳䷆멿㣗බ䫣쿫嫛麘ï§â€¢Ã„懆朑䜣哾蜼왡暲Ċâ²ì«›á •ä“¸ìŸ¥î•„쨞猉ë§ã±‘뢕₨⮿ãŽí†¥î¥…挀ᴲ࠱⨗炮死èŒå©¿ì‰¤æ¼±é’ˆç†³ä†â‚ªç‚°ã¿¸ë©¯æ•Ÿç¸¼ç¹«ä““ä³á«¸æ—‘ꔎçŸé‚¾ã§®ê¹«â–燇î¨î¤è‡™ [ 736.793454][ T9108] usb 5-1: Manufacturer: â°‹ [ 736.798842][ T9108] usb 5-1: SerialNumber: Р [ 736.834244][T11451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 736.875767][ T23] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 737.287707][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.331160][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.517725][T11451] netlink: 'syz.4.1404': attribute type 1 has an invalid length. [ 737.673013][T11451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.854108][T11470] bond1: (slave geneve2): making interface the new active one [ 737.883503][T11470] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 737.992089][T11472] bond1: entered promiscuous mode [ 737.999378][T11472] geneve2: entered promiscuous mode [ 738.035281][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'. [ 738.087694][ T9108] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 738.100520][ T9108] usb 5-1: USB disconnect, device number 3 [ 740.286615][ T23] usb 2-1: USB disconnect, device number 36 [ 740.555228][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 740.747224][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 740.778827][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 740.814061][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 740.843698][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 740.919269][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 740.947393][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 740.956848][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 740.989170][ T8] usb 3-1: Product: syz [ 740.993410][ T8] usb 3-1: Manufacturer: syz [ 741.028661][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 741.044308][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 741.064922][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 741.082516][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 741.173303][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'. [ 741.213317][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 741.396497][ T8] usb 3-1: USB disconnect, device number 47 [ 741.534597][T11527] netlink: 'syz.1.1422': attribute type 4 has an invalid length. [ 741.544593][T11527] netlink: 'syz.1.1422': attribute type 4 has an invalid length. [ 742.524710][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 742.594918][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 744.189879][T11570] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 745.339112][ T9928] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 745.384659][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 745.407601][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 745.965549][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 746.054948][T11606] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 746.164934][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 746.173985][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 746.238661][ T23] usb 2-1: config 4 interface 0 has no altsetting 0 [ 746.271188][ T23] usb 2-1: string descriptor 0 read error: -22 [ 746.281119][ T23] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 746.298593][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.339510][ T23] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 746.374667][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 746.406751][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 746.423333][ T23] usb 2-1: media controller created [ 746.471237][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 747.430246][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.436797][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.213511][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 748.234375][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 748.259332][ T23] usb 2-1: USB disconnect, device number 37 [ 748.634952][ T9108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 748.955102][ T9108] usb 5-1: config 0 has no interfaces? [ 748.975756][ T9108] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 749.006437][ T9108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.169697][ T9108] usb 5-1: Product: syz [ 749.173935][ T9108] usb 5-1: Manufacturer: syz [ 749.254481][ T9108] usb 5-1: SerialNumber: syz [ 749.280659][ T9108] usb 5-1: config 0 descriptor?? [ 749.327148][T11631] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 749.334132][T11631] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 749.456331][T11631] vhci_hcd vhci_hcd.0: Device attached [ 749.551179][T11625] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 749.557784][T11625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 749.597190][T11628] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 749.603858][T11628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 749.646916][T11628] vhci_hcd vhci_hcd.0: Device attached [ 749.649038][T11625] vhci_hcd vhci_hcd.0: Device attached [ 749.665062][T10685] vhci_hcd: vhci_device speed not set [ 749.688143][T11631] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 749.694821][T11631] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 749.711243][T11631] vhci_hcd vhci_hcd.0: Device attached [ 749.745342][T10685] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 749.754602][T11636] vhci_hcd: connection closed [ 749.754609][T11632] vhci_hcd: connection closed [ 749.759505][T11640] vhci_hcd: connection closed [ 749.759866][T11634] vhci_hcd: connection closed [ 749.766158][ T42] vhci_hcd: stop threads [ 749.805007][ T42] vhci_hcd: release socket [ 749.851726][ T42] vhci_hcd: disconnect device [ 749.881209][ T42] vhci_hcd: stop threads [ 749.906315][ T42] vhci_hcd: release socket [ 749.934981][ T42] vhci_hcd: disconnect device [ 749.944345][ T42] vhci_hcd: stop threads [ 749.953821][ T42] vhci_hcd: release socket [ 749.961605][ T42] vhci_hcd: disconnect device [ 749.970989][ T42] vhci_hcd: stop threads [ 749.980028][ T42] vhci_hcd: release socket [ 749.984792][ T42] vhci_hcd: disconnect device [ 750.714998][ T9108] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 750.908622][ T9108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 750.923444][ T9108] usb 4-1: config 2 has an invalid interface number: 114 but max is 0 [ 750.932683][ T9108] usb 4-1: config 2 has no interface number 0 [ 750.945047][ T9108] usb 4-1: config 2 interface 114 altsetting 244 has an invalid endpoint with address 0x80, skipping [ 750.959340][ T9108] usb 4-1: config 2 interface 114 has no altsetting 0 [ 750.972022][ T9108] usb 4-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=da.8c [ 750.988305][ T9108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.999236][ T9108] usb 4-1: Product: syz [ 751.003548][ T9108] usb 4-1: Manufacturer: syz [ 751.010989][ T9108] usb 4-1: SerialNumber: syz [ 751.236534][ T9108] usb 4-1: USB disconnect, device number 39 [ 751.843851][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 751.871534][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 752.344070][ T23] usb 5-1: USB disconnect, device number 4 [ 752.484946][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 752.827285][ T9] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 752.835767][ T9] usb 2-1: config 0 has no interface number 0 [ 752.924461][ T9] usb 2-1: config 0 interface 113 has no altsetting 0 [ 753.042347][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 753.079297][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.103199][ T9] usb 2-1: Product: syz [ 753.116669][T11672] syz.3.1470 (11672): drop_caches: 2 [ 753.117896][ T9] usb 2-1: Manufacturer: syz [ 753.177011][ T9] usb 2-1: SerialNumber: syz [ 753.199345][ T9] usb 2-1: config 0 descriptor?? [ 753.292837][ T9] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 754.818528][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 754.818539][ T28] audit: type=1326 audit(1757288443.998:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.4.1475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2811b8ebe9 code=0x0 [ 754.965226][T10685] vhci_hcd: vhci_device speed not set [ 755.367017][T11700] input: syz0 as /devices/virtual/input/input46 [ 756.005970][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1478'. [ 757.896699][ T8] usb 2-1: USB disconnect, device number 38 [ 758.195620][T11702] syz.2.1476 (11702): drop_caches: 2 [ 758.654019][T11722] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1480'. [ 759.025514][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 759.284985][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 759.315552][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 759.345199][ T5840] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 759.354535][ T8] usb 5-1: config 7 has an invalid interface number: 48 but max is 0 [ 759.385096][ T8] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 759.429595][ T8] usb 5-1: config 7 has no interface number 0 [ 759.464492][ T8] usb 5-1: config 7 interface 48 has no altsetting 0 [ 759.504110][ T8] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 759.525412][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 759.528466][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.551544][ T5840] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 759.554791][ T8] usb 5-1: Product: syz [ 759.578693][ T8] usb 5-1: Manufacturer: syz [ 759.588416][ T8] usb 5-1: SerialNumber: syz [ 759.595121][ T5840] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 759.631100][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 759.636209][T11732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1486'. [ 759.641605][ T5840] usb 3-1: Product: syz [ 759.675233][ T5840] usb 3-1: Manufacturer: syz [ 759.680019][ T5840] usb 3-1: SerialNumber: syz [ 759.702307][ T5840] usb 3-1: config 0 descriptor?? [ 759.721797][T11729] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 760.160445][ T8] cdc_phonet: probe of 5-1:7.48 failed with error -22 [ 760.200949][ T8] usb 5-1: USB disconnect, device number 5 [ 761.002476][T11741] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 762.212746][ T8] usb 3-1: USB disconnect, device number 48 [ 763.875034][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 764.074933][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 764.093455][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 764.106444][ T23] usb 4-1: config 4 interface 0 has no altsetting 0 [ 764.135154][ T23] usb 4-1: string descriptor 0 read error: -22 [ 764.141851][ T23] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 764.174898][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.221465][ T23] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 764.276266][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 764.305930][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 764.347480][ T23] usb 4-1: media controller created [ 764.414631][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.540198][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 764.720915][ T23] usb 4-1: USB disconnect, device number 40 [ 766.237478][T11816] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 766.255076][T10685] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 766.484373][T10685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.532810][T10685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.583992][T10685] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 766.616974][T10685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.718538][T10685] usb 5-1: config 0 descriptor?? [ 767.143961][T10685] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x1 [ 767.157823][T10685] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x3 [ 767.555939][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1507'. [ 767.581741][T10685] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 767.622810][T10685] usb 5-1: USB disconnect, device number 6 [ 768.587659][ T28] audit: type=1326 audit(1757288457.768:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98ebe9 code=0x7ffc0000 [ 768.610697][ T28] audit: type=1326 audit(1757288457.788:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98ebe9 code=0x7ffc0000 [ 768.682747][ T28] audit: type=1326 audit(1757288457.818:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 768.765458][T11846] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 768.802744][ T28] audit: type=1326 audit(1757288457.818:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 768.833558][ T28] audit: type=1326 audit(1757288457.818:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 768.950620][ T28] audit: type=1326 audit(1757288457.818:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 768.994617][ T28] audit: type=1326 audit(1757288457.818:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 769.021722][ T28] audit: type=1326 audit(1757288457.818:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 769.061293][ T28] audit: type=1326 audit(1757288457.818:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 769.209070][ T28] audit: type=1326 audit(1757288457.818:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f723c92adb9 code=0x7ffc0000 [ 769.643097][T11857] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 769.658528][T11857] netlink: 'syz.1.1522': attribute type 9 has an invalid length. [ 769.667475][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 770.141600][T11861] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 771.210230][T11881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 771.316007][T11882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1528'. [ 771.478162][T11881] capability: warning: `syz.3.1526' uses deprecated v2 capabilities in a way that may be insecure [ 772.155770][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 772.291367][T11889] bridge2: port 1(veth3) entered blocking state [ 772.305355][T11889] bridge2: port 1(veth3) entered disabled state [ 772.315142][T11889] veth3: entered allmulticast mode [ 772.332959][T11889] veth3: entered promiscuous mode [ 773.887063][T11913] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 773.901917][T11913] netlink: 'syz.1.1537': attribute type 2 has an invalid length. [ 773.924987][ T8] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 774.113455][ T8] usb 4-1: device descriptor read/64, error -71 [ 774.405101][ T8] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 774.665120][ T8] usb 4-1: device descriptor read/64, error -71 [ 774.829567][ T8] usb usb4-port1: attempt power cycle [ 775.264921][ T8] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 775.368200][ T8] usb 4-1: device descriptor read/8, error -71 [ 775.464954][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 775.665104][ T8] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 775.675958][ T9] usb 5-1: config 0 has no interfaces? [ 775.707090][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 775.737022][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.790151][ T8] usb 4-1: device descriptor read/8, error -71 [ 775.802627][ T9] usb 5-1: Product: syz [ 775.836999][ T9] usb 5-1: Manufacturer: syz [ 775.841659][ T9] usb 5-1: SerialNumber: syz [ 775.871079][ T9] usb 5-1: config 0 descriptor?? [ 775.947286][ T8] usb usb4-port1: unable to enumerate USB device [ 776.692161][T11937] batman_adv: batadv0: Adding interface: ip6gretap1 [ 776.701083][T11937] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.728020][T11937] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 776.934255][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 776.934286][ T28] audit: type=1326 audit(1757288466.108:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecd58ebe9 code=0x7ffc0000 [ 776.975868][ T28] audit: type=1326 audit(1757288466.148:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faecd52adb9 code=0x7ffc0000 [ 777.036454][ T28] audit: type=1326 audit(1757288466.148:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faecd52adb9 code=0x7ffc0000 [ 777.124938][ T28] audit: type=1326 audit(1757288466.148:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faecd52adb9 code=0x7ffc0000 [ 777.224667][ T28] audit: type=1326 audit(1757288466.148:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecd58ebe9 code=0x7ffc0000 [ 777.318603][ T28] audit: type=1326 audit(1757288466.148:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faecd52adb9 code=0x7ffc0000 [ 777.412688][ T28] audit: type=1326 audit(1757288466.148:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecd58ebe9 code=0x7ffc0000 [ 777.482252][ T28] audit: type=1326 audit(1757288466.148:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecd58ebe9 code=0x7ffc0000 [ 777.561111][ T28] audit: type=1326 audit(1757288466.148:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faecd52adb9 code=0x7ffc0000 [ 777.687096][ T28] audit: type=1326 audit(1757288466.148:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11941 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faecd58ebe9 code=0x7ffc0000 [ 778.080925][ T5789] usb 5-1: USB disconnect, device number 7 [ 778.238469][T11952] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 778.246972][T11952] netlink: 'syz.4.1551': attribute type 2 has an invalid length. [ 778.404928][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 778.677890][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.703875][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.734564][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 778.757295][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.971536][ T9] usb 4-1: usb_control_msg returned -32 [ 778.977573][ T9] usbtmc 4-1:16.0: can't read capabilities [ 779.600408][ T5789] usb 4-1: USB disconnect, device number 45 [ 780.884930][ T5840] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 781.055751][ T5840] usb 2-1: device descriptor read/64, error -71 [ 781.335309][ T5840] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 781.495293][ T5840] usb 2-1: device descriptor read/64, error -71 [ 781.669056][ T5840] usb usb2-port1: attempt power cycle [ 782.017960][T11986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1559'. [ 782.114981][ T5840] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 782.262289][ T5840] usb 2-1: device descriptor read/8, error -71 [ 782.595011][T10685] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 782.657248][ T5840] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 782.789691][T10685] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 782.844985][T10685] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 782.925464][T10685] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 782.968079][T10685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 783.000190][T10685] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 783.042627][T10685] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 783.068503][T10685] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 783.135035][T10685] usb 4-1: Product: syz [ 783.145161][T10685] usb 4-1: Manufacturer: syz [ 783.201113][T10685] cdc_wdm 4-1:1.0: skipping garbage [ 783.220554][T10685] cdc_wdm 4-1:1.0: skipping garbage [ 783.237499][T10685] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 783.250468][T10685] cdc_wdm 4-1:1.0: Unknown control protocol [ 784.111919][ T5840] usb 2-1: device descriptor read/8, error -71 [ 784.235331][ T5840] usb usb2-port1: unable to enumerate USB device [ 785.384624][T10685] usb 4-1: USB disconnect, device number 46 [ 785.504665][T11999] syz.4.1561 (11999): drop_caches: 2 [ 785.769628][T12019] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 785.783251][T12019] netlink: 'syz.3.1570': attribute type 2 has an invalid length. [ 786.314957][T10685] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 786.518819][T10685] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 191 [ 786.537119][T10685] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.646448][T10685] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 786.701437][T10685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 786.712686][T10685] usb 3-1: Product: syz [ 786.721444][T10685] usb 3-1: Manufacturer: syz [ 786.726240][T10685] usb 3-1: SerialNumber: syz [ 786.744515][T12025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 786.991891][T10685] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 787.186075][ C1] usblp0: nonzero write bulk status received: -71 [ 787.211225][ T5840] usb 3-1: USB disconnect, device number 49 [ 787.235607][ T5840] usblp0: removed [ 787.245892][T12038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1575'. [ 787.794960][ T5840] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 787.996479][ T5840] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 788.009576][ T5840] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 788.020968][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 788.034325][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 788.067301][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 788.086457][ T5840] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 788.110131][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 788.119893][ T5840] usb 4-1: Product: syz [ 788.124234][ T5840] usb 4-1: Manufacturer: syz [ 788.162703][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 788.178071][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 788.199931][ T5840] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 788.209905][ T5840] cdc_wdm 4-1:1.0: Unknown control protocol [ 790.566635][ T9] usb 4-1: USB disconnect, device number 47 [ 790.969750][T12075] netlink: 'syz.4.1588': attribute type 11 has an invalid length. [ 790.989822][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 791.126041][T12074] bond_slave_0: entered promiscuous mode [ 791.132136][T12074] bond_slave_1: entered promiscuous mode [ 791.229766][T12074] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 791.290918][T12076] tipc: Started in network mode [ 791.309277][T12076] tipc: Node identity 9e318afaf43e, cluster identity 4711 [ 791.319430][T12076] tipc: Enabled bearer , priority 0 [ 791.330099][T12077] syzkaller0: entered promiscuous mode [ 791.357774][T12077] syzkaller0: entered allmulticast mode [ 791.435658][T12080] tipc: Resetting bearer [ 791.583408][T12073] tipc: Resetting bearer [ 791.645306][T12073] tipc: Disabling bearer [ 791.803579][T12085] netlink: 'syz.2.1590': attribute type 10 has an invalid length. [ 791.845824][T12085] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 791.902343][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.920900][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.487536][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 792.487552][ T28] audit: type=1326 audit(1757288481.668:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.528401][ T28] audit: type=1326 audit(1757288481.668:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.559046][ T28] audit: type=1326 audit(1757288481.668:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.594525][ T28] audit: type=1326 audit(1757288481.668:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.665124][ T28] audit: type=1326 audit(1757288481.668:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.710122][ T28] audit: type=1326 audit(1757288481.668:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.734991][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 792.740118][ T28] audit: type=1326 audit(1757288481.668:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.811999][ T28] audit: type=1326 audit(1757288481.668:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.874974][ T28] audit: type=1326 audit(1757288481.668:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.900950][ T28] audit: type=1326 audit(1757288481.668:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12094 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2260f2adb9 code=0x7ffc0000 [ 792.923356][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.966762][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 792.975701][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 792.992265][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 793.013990][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 793.031840][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 793.049228][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 793.065168][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 793.073715][ T8] usb 5-1: Product: syz [ 793.078804][ T8] usb 5-1: Manufacturer: syz [ 793.119247][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 793.134046][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 793.135018][ T5789] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 793.154305][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 793.162002][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 793.335179][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 793.347702][ T5789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.367575][ T5789] usb 4-1: config 0 has no interfaces? [ 793.380204][ T5789] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 793.399428][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.412248][ T5789] usb 4-1: Product: syz [ 793.422817][ T5789] usb 4-1: Manufacturer: syz [ 793.429762][ T5789] usb 4-1: SerialNumber: syz [ 793.442525][ T5789] r8152-cfgselector 4-1: config 0 descriptor?? [ 795.596843][ T5840] usb 5-1: USB disconnect, device number 8 [ 795.616497][ T5789] r8152-cfgselector 4-1: Unknown version 0x0000 [ 795.674988][ T5789] r8152-cfgselector 4-1: USB disconnect, device number 48 [ 797.415039][ T5789] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 797.611050][ T5789] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.625547][ T5789] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 797.644982][ T5789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 797.665084][ T5789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 797.686633][ T5789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 797.713682][ T5789] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 797.725214][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 797.736037][ T5789] usb 2-1: Product: syz [ 797.748093][ T5789] usb 2-1: Manufacturer: syz [ 797.771664][ T5789] cdc_wdm 2-1:1.0: skipping garbage [ 797.777253][ T5789] cdc_wdm 2-1:1.0: skipping garbage [ 797.788872][ T5789] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 797.795139][ T5789] cdc_wdm 2-1:1.0: Unknown control protocol [ 799.527776][T12156] mmap: syz.2.1615 (12156) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 799.844990][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 800.024945][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 800.037360][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 800.046678][ T9] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 800.055583][ T9] usb 3-1: Product: syz [ 800.060587][ T9] usb 3-1: Manufacturer: syz [ 800.065411][ T9] usb 3-1: SerialNumber: syz [ 800.073158][ T9] usb 3-1: config 0 descriptor?? [ 800.090146][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 800.143345][ T786] usb 2-1: USB disconnect, device number 43 [ 800.516361][ T9] gspca_zc3xx: reg_r err -71 [ 800.536920][ T9] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 800.551815][ T9] usb 3-1: USB disconnect, device number 50 [ 800.815012][ T23] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 800.995383][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 801.006863][ T23] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 801.016470][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.029697][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.046186][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.062433][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.079287][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.091151][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.116456][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.149709][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.167691][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 801.193724][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 801.202246][ T23] usb 2-1: SerialNumber: syz [ 801.225150][ T23] usb 2-1: config 0 descriptor?? [ 801.239362][ T23] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 801.437117][ T28] kauditd_printk_skb: 360 callbacks suppressed [ 801.437133][ T28] audit: type=1326 audit(1757288490.618:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.1623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2260f8ebe9 code=0x0 [ 801.695049][ T786] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 801.890475][ T786] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 801.899264][ T786] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 801.910330][ T786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 801.919457][ T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 801.931131][ T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 801.944570][ T786] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 801.953757][ T786] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 801.961837][ T786] usb 5-1: Product: syz [ 801.966124][ T786] usb 5-1: Manufacturer: syz [ 801.986330][ T786] cdc_wdm 5-1:1.0: skipping garbage [ 801.992786][ T786] cdc_wdm 5-1:1.0: skipping garbage [ 801.999795][ T786] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 802.006126][ T786] cdc_wdm 5-1:1.0: Unknown control protocol [ 802.347997][T12182] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1625'. [ 803.588403][ T5140] bcm5974 2-1:0.0: could not read from device [ 803.607241][ T5140] bcm5974 2-1:0.0: could not read from device [ 803.624379][ T5140] bcm5974 2-1:0.0: could not read from device [ 803.638734][ T23] usb 2-1: USB disconnect, device number 44 [ 803.647588][ T5140] bcm5974 2-1:0.0: could not read from device [ 804.462059][ T786] usb 5-1: USB disconnect, device number 9 [ 804.810756][T12211] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 804.980787][T12211] netlink: 'syz.4.1634': attribute type 4 has an invalid length. [ 805.733166][T12206] syz.3.1633 (12206): drop_caches: 2 [ 807.285099][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 807.489077][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 807.513051][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 807.538505][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 807.552477][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 807.568389][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 807.601419][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 807.614861][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 807.626289][ T9] usb 2-1: Product: syz [ 807.630563][ T9] usb 2-1: Manufacturer: syz [ 807.656386][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 807.662252][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 807.680711][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 807.688668][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 808.536525][T12265] ptrace attach of "./syz-executor exec"[9926] was attempted by "./syz-executor exec"[12265] [ 808.875195][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.881548][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.999063][ T9] usb 2-1: USB disconnect, device number 45 [ 810.565005][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 810.764903][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 810.774085][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 810.787087][ T9] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 810.796006][ T9] usb 4-1: Product: syz [ 810.801838][ T9] usb 4-1: Manufacturer: syz [ 810.814665][ T9] usb 4-1: SerialNumber: syz [ 810.843823][ T9] usb 4-1: config 0 descriptor?? [ 810.871396][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 811.347865][ T9] gspca_zc3xx: reg_r err -71 [ 811.380532][ T9] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 811.402661][ T9] usb 4-1: USB disconnect, device number 49 [ 813.024955][T10685] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 813.207444][T10685] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 813.220581][T10685] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 813.267757][T10685] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 813.287820][T10685] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 813.305046][ T23] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 813.325423][T10685] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 813.346845][T10685] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 813.371860][T10685] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 813.390161][T10685] usb 5-1: Product: syz [ 813.395284][T10685] usb 5-1: Manufacturer: syz [ 813.435274][T10685] cdc_wdm 5-1:1.0: skipping garbage [ 813.440518][T10685] cdc_wdm 5-1:1.0: skipping garbage [ 813.497417][T10685] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 813.514110][T10685] cdc_wdm 5-1:1.0: Unknown control protocol [ 813.611606][ T23] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 813.652076][ T23] usb 4-1: config 0 has no interface number 0 [ 813.688293][ T23] usb 4-1: config 0 interface 160 has no altsetting 0 [ 813.758000][ T23] usb 4-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 813.799642][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.822250][ T23] usb 4-1: Product: syz [ 813.834987][ T23] usb 4-1: Manufacturer: syz [ 813.839761][ T23] usb 4-1: SerialNumber: syz [ 813.848729][ T23] usb 4-1: config 0 descriptor?? [ 813.933818][ T23] usb-storage 4-1:0.160: USB Mass Storage device detected [ 814.446030][T12315] vivid-000: ================= START STATUS ================= [ 814.458581][T12315] vivid-000: Test Pattern: 75% Colorbar [ 814.464699][T12315] vivid-000: Fill Percentage of Frame: 100 [ 814.478305][T12315] vivid-000: Horizontal Movement: No Movement [ 814.486309][T12315] vivid-000: Vertical Movement: No Movement [ 814.493528][T12315] vivid-000: OSD Text Mode: All [ 814.504146][T12315] vivid-000: Show Border: false [ 814.511041][T12315] vivid-000: Show Square: false [ 814.517143][T12315] vivid-000: Sensor Flipped Horizontally: false [ 814.529473][T12315] vivid-000: Sensor Flipped Vertically: false [ 814.542918][T12315] vivid-000: Insert SAV Code in Image: false [ 814.553121][T12315] vivid-000: Insert EAV Code in Image: false [ 814.566459][T12315] vivid-000: Insert Video Guard Band: false [ 814.575776][T12315] vivid-000: Reduced Framerate: false [ 814.582149][T12315] vivid-000: Enable Capture Cropping: true grabbed [ 814.598604][T12315] vivid-000: Enable Capture Composing: true grabbed [ 814.612112][T12315] vivid-000: Enable Capture Scaler: true grabbed [ 814.631769][T12315] vivid-000: Timestamp Source: End of Frame [ 814.642541][T12315] vivid-000: Colorspace: sRGB [ 814.650718][T12315] vivid-000: Transfer Function: Default [ 814.658261][T12315] vivid-000: Y'CbCr Encoding: Default [ 814.669285][T12315] vivid-000: HSV Encoding: Hue 0-179 [ 814.676679][T12315] vivid-000: Quantization: Default [ 814.684400][T12315] vivid-000: Apply Alpha To Red Only: false [ 814.692558][T12315] vivid-000: Standard Aspect Ratio: 4x3 [ 814.703740][T12315] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 814.729110][T12315] vivid-000: DV Timings: 640x480p59 inactive [ 814.739920][T12315] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 814.753246][T12315] vivid-000: Maximum EDID Blocks: 2 [ 814.770863][T12315] vivid-000: Limited RGB Range (16-235): false [ 814.794170][T12315] vivid-000: Rx RGB Quantization Range: Automatic [ 814.803051][T12315] vivid-000: Power Present: 0x00000001 [ 814.814449][T12315] tpg source WxH: 640x360 (Y'CbCr) [ 814.822659][T12315] tpg field: 1 [ 814.837804][T12315] tpg crop: 640x360@0x0 [ 814.842772][T12315] tpg compose: 640x360@0x0 [ 814.853220][T12315] tpg colorspace: 8 [ 814.863438][T12315] tpg transfer function: 0/0 [ 814.873454][T12315] tpg Y'CbCr encoding: 0/0 [ 814.880930][T12315] tpg quantization: 0/0 [ 814.890114][T12315] tpg RGB range: 0/2 [ 814.902079][T12315] vivid-000: ================== END STATUS ================== [ 815.793755][T10685] usb 5-1: USB disconnect, device number 10 [ 816.003716][ T23] usb 4-1: USB disconnect, device number 50 [ 818.469207][T12343] binder: 12342:12343 unknown command 0 [ 818.475264][T12343] binder: 12342:12343 ioctl c0306201 200000000080 returned -22 [ 818.487332][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 818.585186][ T5840] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 818.714893][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 818.790971][ T5840] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 818.804622][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.814955][ T5840] usb 5-1: Product: syz [ 818.819457][ T5840] usb 5-1: Manufacturer: syz [ 818.824132][ T5840] usb 5-1: SerialNumber: syz [ 818.836843][ T5840] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 818.927775][ T23] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 818.927783][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 818.927837][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 818.961703][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 818.973480][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 818.989315][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 819.009076][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 819.051042][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 819.076093][ T9] usb 2-1: Product: syz [ 819.080346][ T9] usb 2-1: Manufacturer: syz [ 819.102915][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 819.125233][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 819.132822][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 819.154960][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 819.253606][T12363] netlink: 'syz.3.1683': attribute type 4 has an invalid length. [ 820.055163][ T23] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 820.132461][ T23] ath9k_htc: Failed to initialize the device [ 820.203974][ T23] usb 5-1: ath9k_htc: USB layer deinitialized [ 821.557496][ T5840] usb 2-1: USB disconnect, device number 46 [ 821.966011][T12379] binder: 12378:12379 unknown command 0 [ 821.971873][T12379] binder: 12378:12379 ioctl c0306201 200000000080 returned -22 [ 822.009683][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 822.503676][ T5789] usb 5-1: USB disconnect, device number 11 [ 822.615450][ T5840] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 822.817947][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 822.829005][ T5840] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 822.855824][ T5840] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.874858][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.909355][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.953958][ T5840] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.039332][ T5840] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 823.098578][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.268315][T12397] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 823.361917][T12397] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.368715][ T5840] usb 4-1: usb_control_msg returned -32 [ 823.368764][ T5840] usbtmc 4-1:16.0: can't read capabilities [ 823.409428][ T5840] usb 4-1: USB disconnect, device number 51 [ 823.754902][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 823.992809][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 824.020683][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 824.044850][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 824.054169][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 824.098682][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 824.117475][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 824.128639][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 824.142804][ T9] usb 5-1: Product: syz [ 824.164559][ T9] usb 5-1: Manufacturer: syz [ 824.181541][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 824.196500][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 824.204727][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 824.211335][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 824.335101][ T5789] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 824.410413][ T9] usb 5-1: USB disconnect, device number 12 [ 824.541073][ T5789] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 824.575054][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.583391][ T5789] usb 3-1: Product: syz [ 824.594124][T12414] binder: 12413:12414 unknown command 0 [ 824.600293][T12414] binder: 12413:12414 ioctl c0306201 200000000080 returned -22 [ 824.605658][ T5789] usb 3-1: Manufacturer: syz [ 824.612608][ T5789] usb 3-1: SerialNumber: syz [ 824.614584][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 824.645862][ T5789] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 824.673885][ T5840] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 825.753050][ T5840] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 825.779297][ T5840] ath9k_htc: Failed to initialize the device [ 825.878216][ T5840] usb 3-1: ath9k_htc: USB layer deinitialized [ 825.931519][T12439] vivid-000: ================= START STATUS ================= [ 826.117052][T12439] vivid-000: Test Pattern: 75% Colorbar [ 826.176666][T12439] vivid-000: Fill Percentage of Frame: 100 [ 826.295682][T12439] vivid-000: Horizontal Movement: No Movement [ 826.318223][T12439] vivid-000: Vertical Movement: No Movement [ 826.325889][T12439] vivid-000: OSD Text Mode: All [ 826.344120][T12439] vivid-000: Show Border: false [ 826.349699][T12439] vivid-000: Show Square: false [ 826.378328][T12439] vivid-000: Sensor Flipped Horizontally: false [ 826.393567][T12439] vivid-000: Sensor Flipped Vertically: false [ 826.411874][T12439] vivid-000: Insert SAV Code in Image: false [ 826.423268][T12439] vivid-000: Insert EAV Code in Image: false [ 826.432958][T12439] vivid-000: Insert Video Guard Band: false [ 826.439686][T12439] vivid-000: Reduced Framerate: false [ 826.445618][T12439] vivid-000: Enable Capture Cropping: true grabbed [ 826.458182][T12439] vivid-000: Enable Capture Composing: true grabbed [ 826.467464][T12439] vivid-000: Enable Capture Scaler: true grabbed [ 826.512437][T12439] vivid-000: Timestamp Source: End of Frame [ 826.543275][T12439] vivid-000: Colorspace: sRGB [ 826.572249][T12439] vivid-000: Transfer Function: Default [ 826.610979][T12439] vivid-000: Y'CbCr Encoding: Default [ 826.636345][T12439] vivid-000: HSV Encoding: Hue 0-179 [ 826.642159][T12439] vivid-000: Quantization: Default [ 826.649623][T12439] vivid-000: Apply Alpha To Red Only: false [ 826.662690][T12439] vivid-000: Standard Aspect Ratio: 4x3 [ 826.670899][T12439] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 826.679277][T12439] vivid-000: DV Timings: 640x480p59 inactive [ 826.685814][T12439] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 826.693561][T12439] vivid-000: Maximum EDID Blocks: 2 [ 826.773520][T12439] vivid-000: Limited RGB Range (16-235): false [ 826.780132][ T5789] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 826.829699][T12439] vivid-000: Rx RGB Quantization Range: Automatic [ 826.836969][T12439] vivid-000: Power Present: 0x00000001 [ 826.843861][T12439] tpg source WxH: 640x360 (Y'CbCr) [ 826.851162][T12439] tpg field: 1 [ 826.854760][T12439] tpg crop: 640x360@0x0 [ 826.877097][T12439] tpg compose: 640x360@0x0 [ 826.882248][T12439] tpg colorspace: 8 [ 826.886959][T12439] tpg transfer function: 0/0 [ 826.900730][T12439] tpg Y'CbCr encoding: 0/0 [ 826.905754][T12439] tpg quantization: 0/0 [ 826.951499][T12439] tpg RGB range: 0/2 [ 826.997309][T12439] vivid-000: ================== END STATUS ================== [ 827.025108][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 827.780924][T12454] binder: 12453:12454 unknown command 0 [ 827.798677][T12454] binder: 12453:12454 ioctl c0306201 200000000080 returned -22 [ 828.664037][ T786] usb 3-1: USB disconnect, device number 51 [ 828.735002][ T9108] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 828.931222][ T9108] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 828.959830][ T9108] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 829.014901][ T9108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 829.046676][ T9108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 829.127616][ T9108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 829.184623][ T9108] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 829.244012][ T9108] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 829.264583][ T9108] usb 2-1: Product: syz [ 829.277783][ T9108] usb 2-1: Manufacturer: syz [ 829.319793][ T9108] cdc_wdm 2-1:1.0: skipping garbage [ 829.361485][ T9108] cdc_wdm 2-1:1.0: skipping garbage [ 829.414445][ T9108] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 829.446163][ T9108] cdc_wdm 2-1:1.0: Unknown control protocol [ 829.528835][ T786] usb 2-1: USB disconnect, device number 47 [ 830.060428][ T5789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 830.084979][ T5789] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 830.115246][ T5789] usb 4-1: can't read configurations, error -71 [ 830.204120][T12470] netlink: 'syz.4.1717': attribute type 10 has an invalid length. [ 830.284000][T12470] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.509346][T12470] syz.4.1717 (12470) used greatest stack depth: 19752 bytes left [ 830.747420][T12479] binder: 12478:12479 unknown command 0 [ 830.763728][T12479] binder: 12478:12479 ioctl c0306201 200000000080 returned -22 [ 831.499641][T12475] syz.1.1716 (12475): drop_caches: 2 [ 831.866851][T12495] vivid-000: ================= START STATUS ================= [ 831.876567][T12495] vivid-000: Test Pattern: 75% Colorbar [ 831.883283][T12495] vivid-000: Fill Percentage of Frame: 100 [ 831.889628][T12495] vivid-000: Horizontal Movement: No Movement [ 831.896730][T12495] vivid-000: Vertical Movement: No Movement [ 831.903848][T12495] vivid-000: OSD Text Mode: All [ 831.908876][T12495] vivid-000: Show Border: false [ 831.923370][T12495] vivid-000: Show Square: false [ 831.930479][T12495] vivid-000: Sensor Flipped Horizontally: false [ 831.938685][T12495] vivid-000: Sensor Flipped Vertically: false [ 831.946193][T12495] vivid-000: Insert SAV Code in Image: false [ 831.953168][T12495] vivid-000: Insert EAV Code in Image: false [ 831.959659][T12495] vivid-000: Insert Video Guard Band: false [ 832.041086][T12495] vivid-000: Reduced Framerate: false [ 832.047109][T12495] vivid-000: Enable Capture Cropping: true grabbed [ 832.056474][T12495] vivid-000: Enable Capture Composing: true grabbed [ 832.064504][T12495] vivid-000: Enable Capture Scaler: true grabbed [ 832.072405][T12495] vivid-000: Timestamp Source: End of Frame [ 832.079906][T12495] vivid-000: Colorspace: sRGB [ 832.089926][T12495] vivid-000: Transfer Function: Default [ 832.097259][T12495] vivid-000: Y'CbCr Encoding: Default [ 832.130896][T12495] vivid-000: HSV Encoding: Hue 0-179 [ 832.230372][T12495] vivid-000: Quantization: Default [ 832.236195][T12495] vivid-000: Apply Alpha To Red Only: false [ 832.242285][T12495] vivid-000: Standard Aspect Ratio: 4x3 [ 832.248151][T12495] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 832.258515][T12495] vivid-000: DV Timings: 640x480p59 inactive [ 832.264872][T12495] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 832.273672][T12495] vivid-000: Maximum EDID Blocks: 2 [ 832.280343][T12495] vivid-000: Limited RGB Range (16-235): false [ 832.287972][T12495] vivid-000: Rx RGB Quantization Range: Automatic [ 832.313123][T12495] vivid-000: Power Present: 0x00000001 [ 832.347184][T12495] tpg source WxH: 640x360 (Y'CbCr) [ 832.353958][T12495] tpg field: 1 [ 832.359554][T12495] tpg crop: 640x360@0x0 [ 832.363779][T12495] tpg compose: 640x360@0x0 [ 832.368356][T12495] tpg colorspace: 8 [ 832.372483][T12495] tpg transfer function: 0/0 [ 832.380957][T12495] tpg Y'CbCr encoding: 0/0 [ 832.396959][T12495] tpg quantization: 0/0 [ 832.403387][T12495] tpg RGB range: 0/2 [ 832.408029][T12495] vivid-000: ================== END STATUS ================== [ 833.068841][ C1] sd 0:0:1:0: [sda] tag#6529 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 833.079486][ C1] sd 0:0:1:0: [sda] tag#6529 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 01 00 00 [ 833.514997][ T5789] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 833.578364][T12517] binder: 12516:12517 unknown command 0 [ 833.591343][T12517] binder: 12516:12517 ioctl c0306201 200000000080 returned -22 [ 833.705015][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 833.782283][ T5789] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 833.793603][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.809547][ T5789] usb 3-1: Product: syz [ 833.819896][ T5789] usb 3-1: Manufacturer: syz [ 833.827982][ T5789] usb 3-1: SerialNumber: syz [ 833.836911][ T5789] usb 3-1: config 0 descriptor?? [ 833.846909][ T5789] usb 3-1: bad CDC descriptors [ 834.118158][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.134259][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.954938][ T786] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 836.157304][ T786] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 836.184976][ T786] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 836.262529][ T786] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 836.368346][T12549] syz.3.1740 (12549): drop_caches: 2 [ 836.391905][ T9] usb 3-1: USB disconnect, device number 52 [ 836.399364][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.446632][ T786] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 836.556515][ T786] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 838.849381][T12577] process 'syz.2.1750' launched './file1' with NULL argv: empty string added [ 839.181913][ T786] usb 5-1: USB disconnect, device number 13 [ 839.738305][ T5840] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 839.947066][ T5840] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 840.012229][ T5840] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 840.028638][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 840.047310][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 840.094439][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 840.123496][ T5840] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 840.133045][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 840.154310][ T5840] usb 2-1: Product: syz [ 840.165664][ T5840] usb 2-1: Manufacturer: syz [ 840.189072][ T5840] cdc_wdm 2-1:1.0: skipping garbage [ 840.210673][ T5840] cdc_wdm 2-1:1.0: skipping garbage [ 840.235276][ T5840] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 840.279574][ T5840] cdc_wdm 2-1:1.0: Unknown control protocol [ 840.392933][ T5840] usb 2-1: USB disconnect, device number 48 [ 840.943253][T12594] syz.2.1756 (12594): drop_caches: 2 [ 841.293493][T12599] binder: 12598:12599 unknown command 0 [ 841.307960][T12599] binder: 12598:12599 ioctl c0306201 200000000080 returned -22 [ 841.328265][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 843.037930][T12617] netlink: 'syz.4.1764': attribute type 10 has an invalid length. [ 843.055687][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.428340][ T9108] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 843.829322][T12627] binder: 12626:12627 unknown command 0 [ 843.837741][T12627] binder: 12626:12627 ioctl c0306201 200000000080 returned -22 [ 843.858632][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 844.013255][ T9108] usb 3-1: config 0 has no interfaces? [ 844.036316][ T9108] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 844.050905][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 844.067720][ T9108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.110842][ T9108] usb 3-1: Product: syz [ 844.144149][ T9108] usb 3-1: Manufacturer: syz [ 844.185072][ T9108] usb 3-1: SerialNumber: syz [ 844.206113][ T9108] usb 3-1: config 0 descriptor?? [ 844.347989][T12629] syz.4.1766 (12629): drop_caches: 2 [ 845.308687][T12643] syz.3.1771 (12643): drop_caches: 2 [ 846.168371][T12654] binder: 12653:12654 unknown command 0 [ 846.200256][T12654] binder: 12653:12654 ioctl c0306201 200000000080 returned -22 [ 846.247543][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 846.539374][ T9] usb 3-1: USB disconnect, device number 53 [ 847.476518][T12673] loop6: detected capacity change from 0 to 524287999 [ 848.204476][T12678] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1783'. [ 848.219775][T12678] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 848.435295][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 848.647523][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 848.656511][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 848.682081][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 848.714862][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 848.749068][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 848.770133][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 848.779742][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 848.800052][ T9] usb 5-1: Product: syz [ 848.804285][ T9] usb 5-1: Manufacturer: syz [ 848.857842][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 848.875319][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 848.897764][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 848.916760][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 848.965186][T12685] binder: 12684:12685 unknown command 0 [ 848.984888][T12685] binder: 12684:12685 ioctl c0306201 200000000080 returned -22 [ 849.002479][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 849.030493][T12685] binder_alloc: 12684: binder_alloc_buf, no vma [ 849.095901][ T9] usb 5-1: USB disconnect, device number 14 [ 850.804897][ T9108] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 850.994857][ T9108] usb 4-1: Using ep0 maxpacket: 32 [ 851.021991][ T9108] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 851.051356][ T9108] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 851.074922][ T9108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 851.084391][ T9108] usb 4-1: config 1 has no interface number 0 [ 851.092438][ T9108] usb 4-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 851.116047][ T9108] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 851.130073][T12715] netlink: 'syz.4.1796': attribute type 10 has an invalid length. [ 851.140248][T12715] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.147189][ T9108] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 851.160065][ T9108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.194483][ T9108] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 851.425691][ T9108] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 851.443595][ T9108] snd_usb_pod 4-1:1.1: invalid control EP [ 851.455017][ T9108] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 851.467564][ T9108] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 851.479022][ T9108] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 851.682959][T12723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 851.690907][T12723] IPv6: NLM_F_CREATE should be set when creating new route [ 851.765690][T12723] lo: entered allmulticast mode [ 851.780440][T12723] tunl0: entered allmulticast mode [ 851.824357][ T9] usb 4-1: USB disconnect, device number 54 [ 851.844747][T12723] gre0: entered allmulticast mode [ 851.965500][T12723] gretap0: entered allmulticast mode [ 852.003562][T12723] erspan0: entered allmulticast mode [ 852.049750][T12723] ip_vti0: entered allmulticast mode [ 852.102536][T12723] ip6_vti0: entered allmulticast mode [ 852.137821][T12723] sit0: entered allmulticast mode [ 852.191941][T12723] ip6tnl0: entered allmulticast mode [ 852.281735][T12723] ip6gre0: entered allmulticast mode [ 852.370190][T12723] syz_tun: entered allmulticast mode [ 852.484292][T12723] ip6gretap0: entered allmulticast mode [ 852.547359][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.555314][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.574314][T12723] bridge0: entered allmulticast mode [ 852.581259][T12731] binder: 12729:12731 unknown command 0 [ 852.598895][T12731] binder: 12729:12731 ioctl c0306201 200000000080 returned -22 [ 852.627422][T12723] vcan0: entered allmulticast mode [ 852.652517][T12723] bond_slave_0: left promiscuous mode [ 852.665552][T12723] bond_slave_1: left promiscuous mode [ 852.671246][T12723] bond0: entered allmulticast mode [ 852.681405][T12723] bond_slave_0: entered allmulticast mode [ 852.691877][T12723] bond_slave_1: entered allmulticast mode [ 852.693009][T12731] binder_alloc: 12729: binder_alloc_buf, no vma [ 852.747259][T12723] team0: entered allmulticast mode [ 852.756827][T12723] team_slave_0: entered allmulticast mode [ 852.762752][T12723] team_slave_1: entered allmulticast mode [ 852.801834][T12723] dummy0: entered allmulticast mode [ 852.863768][T12723] nlmon0: entered allmulticast mode [ 852.886169][T12723] caif0: entered allmulticast mode [ 852.900303][T12723] batadv0: entered allmulticast mode [ 852.968205][T12723] vxcan0: entered allmulticast mode [ 852.997680][T12723] vxcan1: entered allmulticast mode [ 853.016117][T12723] veth0: entered allmulticast mode [ 853.134706][T12723] veth1: entered allmulticast mode [ 853.182714][T12723] wg0: entered allmulticast mode [ 853.205116][T12723] wg1: entered allmulticast mode [ 853.227345][T12723] wg2: entered allmulticast mode [ 853.264579][T12723] veth0_to_bridge: entered allmulticast mode [ 853.288631][T12723] veth1_to_bridge: entered allmulticast mode [ 853.322882][T12723] veth0_to_bond: entered allmulticast mode [ 853.339445][T12723] veth1_to_bond: entered allmulticast mode [ 853.360946][T12723] veth0_to_team: entered allmulticast mode [ 853.459624][T12723] veth1_to_team: entered allmulticast mode [ 853.509159][T12723] veth0_to_batadv: entered allmulticast mode [ 853.520054][T12723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.532097][T12723] batadv_slave_0: entered allmulticast mode [ 853.551447][T12723] veth1_to_batadv: entered allmulticast mode [ 853.562939][T12723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.572395][T12723] batadv_slave_1: entered allmulticast mode [ 853.589511][T12723] xfrm0: entered allmulticast mode [ 853.605482][T12723] veth0_to_hsr: entered allmulticast mode [ 853.624417][T12723] hsr_slave_0: entered allmulticast mode [ 853.636613][T12723] veth1_to_hsr: entered allmulticast mode [ 853.647662][T12723] hsr_slave_1: entered allmulticast mode [ 853.659381][T12723] hsr0: entered allmulticast mode [ 853.671762][T12723] veth1_virt_wifi: entered allmulticast mode [ 853.694142][T12723] veth0_virt_wifi: entered allmulticast mode [ 853.712480][T12723] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 853.722934][T12723] veth1_vlan: entered allmulticast mode [ 853.750052][T12723] veth0_vlan: entered allmulticast mode [ 853.793782][T12723] vlan0: entered allmulticast mode [ 853.800161][T12723] vlan1: entered allmulticast mode [ 853.810878][T12723] macvlan0: entered allmulticast mode [ 853.826794][T12723] macvlan1: entered allmulticast mode [ 853.837064][T12723] ipvlan0: entered allmulticast mode [ 853.843763][T12723] ipvlan1: entered allmulticast mode [ 853.857721][T12723] veth1_macvtap: entered allmulticast mode [ 853.874540][T12723] veth0_macvtap: entered allmulticast mode [ 853.889081][T12723] macvtap0: entered allmulticast mode [ 853.927365][T12723] macsec0: entered allmulticast mode [ 853.945427][T12723] geneve0: entered allmulticast mode [ 853.963369][T12723] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.972904][T12723] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.982410][T12723] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.998134][T12723] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.007580][T12723] geneve1: entered allmulticast mode [ 854.018291][T12723] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 854.029477][T12723] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 854.042074][T12723] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 854.061174][T12723] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 854.074063][T12723] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 854.081958][T12723] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 854.095889][T12723] ip6erspan0: entered allmulticast mode [ 854.101611][T12723] syztnl1: entered allmulticast mode [ 854.107604][T12723] ip6gretap1: entered allmulticast mode [ 854.115875][T12723] macvtap1: entered allmulticast mode [ 854.135806][T12723] gretap1: entered allmulticast mode [ 854.155016][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 854.605110][ T3060] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 854.787602][ T3060] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 854.796521][ T3060] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 854.806877][ T3060] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 854.815941][ T3060] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 854.829807][ T3060] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 854.842562][ T3060] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 854.852004][ T3060] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 854.860259][ T3060] usb 4-1: Product: syz [ 854.864732][ T3060] usb 4-1: Manufacturer: syz [ 854.878285][ T3060] cdc_wdm 4-1:1.0: skipping garbage [ 854.883548][ T3060] cdc_wdm 4-1:1.0: skipping garbage [ 854.890486][ T3060] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 854.896539][ T3060] cdc_wdm 4-1:1.0: Unknown control protocol [ 855.089561][ T8709] usb 4-1: USB disconnect, device number 55 [ 856.717404][T12785] netlink: 'syz.4.1819': attribute type 10 has an invalid length. [ 856.727745][T12785] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.924904][ T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 857.108209][ T23] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 857.123198][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 857.140845][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 857.151403][ T23] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 857.160251][ T23] usb 4-1: Product: syz [ 857.169575][ T23] usb 4-1: Manufacturer: syz [ 857.174332][ T23] usb 4-1: SerialNumber: syz [ 857.185640][ T23] usb 4-1: config 0 descriptor?? [ 857.207480][ T23] usb 4-1: selecting invalid altsetting 0 [ 857.307738][T12788] binder: 12787:12788 ioctl c0306201 200000000440 returned -14 [ 857.386414][T12788] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 857.468485][ T8709] usb 4-1: USB disconnect, device number 56 [ 857.729512][T12796] syz.4.1813 (12796): drop_caches: 2 [ 858.329406][T12803] @: renamed from vlan0 [ 858.396259][ T8] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 858.602195][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 858.624893][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 858.646473][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 858.664937][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 858.695157][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 858.726852][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 858.736256][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 858.744386][ T8] usb 3-1: Product: syz [ 858.800214][ T8] usb 3-1: Manufacturer: syz [ 858.829893][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 858.845170][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 858.860904][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 858.873106][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 859.042851][ T23] usb 3-1: USB disconnect, device number 54 [ 859.285494][T12825] netlink: 'syz.3.1826': attribute type 10 has an invalid length. [ 859.294064][T12825] team0: left allmulticast mode [ 859.307328][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.321212][T12825] team0: entered allmulticast mode [ 859.329172][T12825] bond0: (slave team0): Enslaving as an active interface with an up link [ 859.724888][ T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 859.914924][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 859.936158][ T23] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 859.944233][ T23] usb 4-1: config 0 has no interface number 0 [ 859.967832][ T23] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 859.977426][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.995192][ T23] usb 4-1: Product: syz [ 859.999524][ T23] usb 4-1: Manufacturer: syz [ 860.004190][ T23] usb 4-1: SerialNumber: syz [ 860.027491][ T23] usb 4-1: config 0 descriptor?? [ 860.050638][ T23] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 860.240119][ T23] usb 4-1: USB disconnect, device number 57 [ 860.764356][T12840] syz.2.1831 (12840): drop_caches: 2 [ 862.515329][ T5789] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 862.718035][ T5789] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 862.730567][ T5789] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 862.741538][ T5789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 862.751013][ T5789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 862.762408][ T5789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 862.792156][ T5789] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 862.814533][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 862.826319][ T5789] usb 3-1: Product: syz [ 862.830563][ T5789] usb 3-1: Manufacturer: syz [ 862.853935][ T5789] cdc_wdm 3-1:1.0: skipping garbage [ 862.872766][ T5789] cdc_wdm 3-1:1.0: skipping garbage [ 862.880007][ T5789] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 862.886784][ T5789] cdc_wdm 3-1:1.0: Unknown control protocol [ 863.066726][ T5789] usb 3-1: USB disconnect, device number 55 [ 864.580191][T12865] binder: 12864:12865 unknown command 0 [ 864.592648][T12865] binder: 12864:12865 ioctl c0306201 200000000080 returned -22 [ 864.603712][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 864.661391][T12865] binder: BINDER_SET_CONTEXT_MGR already set [ 864.669972][T12865] binder: 12864:12865 ioctl 4018620d 200000000040 returned -16 [ 864.899061][T12878] syz.1.1844 (12878): drop_caches: 2 [ 865.316039][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 865.520040][ T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 865.567970][ T23] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 865.583604][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 865.599462][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 865.612912][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 865.634194][ T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 865.652013][ T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 865.683805][ T23] usb 5-1: Product: syz [ 865.698587][ T23] usb 5-1: Manufacturer: syz [ 865.747179][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 865.752477][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 865.839126][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 865.857942][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 865.953146][ T23] usb 5-1: USB disconnect, device number 15 [ 866.895306][ T23] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 867.003401][T12912] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 867.104991][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 867.121862][ T23] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 867.133329][ T23] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 867.150451][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 867.179277][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 867.194599][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 867.205501][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 867.219697][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 867.229388][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.241481][ T23] usb 3-1: config 0 descriptor?? [ 867.460931][ T23] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 867.509906][ T23] usb 3-1: USB disconnect, device number 56 [ 867.537436][ T23] usblp0: removed [ 868.035098][ T23] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 868.235406][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 868.248624][ T23] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 868.274076][ T23] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 868.292974][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 868.304367][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 868.319554][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 868.330206][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 868.389140][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 868.411934][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.442925][ T23] usb 3-1: config 0 descriptor?? [ 868.622664][T12931] binder: 12930:12931 unknown command 0 [ 868.636284][T12931] binder: 12930:12931 ioctl c0306201 200000000080 returned -22 [ 868.664636][ T23] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 868.884516][ T8709] usb 3-1: USB disconnect, device number 57 [ 868.911265][ T8709] usblp0: removed [ 870.300158][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.306878][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.729573][T12953] netlink: 'syz.4.1871': attribute type 10 has an invalid length. [ 870.740417][T12953] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.277201][ T5789] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 871.467411][ T5789] usb 4-1: config 252 has an invalid interface number: 73 but max is 0 [ 871.475883][ T5789] usb 4-1: config 252 has no interface number 0 [ 871.482393][ T5789] usb 4-1: config 252 interface 73 altsetting 122 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 871.493837][ T5789] usb 4-1: config 252 interface 73 has no altsetting 0 [ 871.503042][ T5789] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=b8.e5 [ 871.512241][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.520336][ T5789] usb 4-1: Product: syz [ 871.524561][ T5789] usb 4-1: Manufacturer: syz [ 871.529334][ T5789] usb 4-1: SerialNumber: syz [ 871.749786][ T5789] ti_usb_3410_5052 4-1:252.73: required endpoints missing [ 871.761547][ T5789] usb 4-1: USB disconnect, device number 58 [ 871.944010][T12967] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1877'. [ 871.959749][T12967] netlink: 'syz.4.1877': attribute type 10 has an invalid length. [ 871.970233][T12967] syz_tun: entered promiscuous mode [ 872.000216][T12967] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 872.421415][T12979] syz.4.1880 (12979): drop_caches: 2 [ 876.649857][T13039] lo: left allmulticast mode [ 876.660122][T13039] tunl0: left allmulticast mode [ 876.692087][T13039] gre0: left allmulticast mode [ 876.742273][T13039] gretap0: left allmulticast mode [ 876.780219][T13039] erspan0: left allmulticast mode [ 876.801779][T13039] ip_vti0: left allmulticast mode [ 876.827491][T13044] sg_read: process 642 (syz.4.1899) changed security contexts after opening file descriptor, this is not allowed. [ 876.831424][T13039] ip6_vti0: left allmulticast mode [ 876.881748][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1901'. [ 876.890769][T13039] sit0: left allmulticast mode [ 876.928849][T13039] ip6tnl0: left allmulticast mode [ 876.952146][T13039] ip6gre0: left allmulticast mode [ 876.981616][T13039] syz_tun: left allmulticast mode [ 877.060963][T13039] ip6gretap0: left allmulticast mode [ 877.106028][T13039] bridge0: left allmulticast mode [ 877.123149][T13039] vcan0: left allmulticast mode [ 877.139248][T13039] bond0: left allmulticast mode [ 877.147652][T13039] team0: left allmulticast mode [ 877.173668][T13039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.198556][T13039] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.211836][T13039] dummy0: left allmulticast mode [ 877.230590][T13039] nlmon0: left allmulticast mode [ 877.267074][T13039] caif0: left allmulticast mode [ 877.272152][T13039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.011490][T13055] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 878.068094][T13055] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.318380][T13057] binder: BINDER_SET_CONTEXT_MGR already set [ 878.326935][T13057] binder: 13056:13057 ioctl 4018620d 200000000040 returned -16 [ 879.118289][T13079] binder: BINDER_SET_CONTEXT_MGR already set [ 879.124490][T13079] binder: 13078:13079 ioctl 4018620d 200000000040 returned -16 [ 881.503252][T13105] syz.2.1920 (13105): drop_caches: 2 [ 881.584468][T13109] trusted_key: encrypted_key: insufficient parameters specified [ 881.802760][T13111] binder: BINDER_SET_CONTEXT_MGR already set [ 881.826666][T13111] binder: 13110:13111 ioctl 4018620d 200000000040 returned -16 [ 883.703191][T13135] binder: 13134:13135 unknown command 0 [ 883.715153][T13135] binder: 13134:13135 ioctl c0306201 200000000080 returned -22 [ 884.185102][ T23] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 884.399303][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.413557][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.429659][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.444433][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 884.463058][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.475426][ T23] usb 3-1: config 0 descriptor?? [ 884.526830][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 884.893632][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 884.900004][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 884.909637][ T23] usb 3-1: USB disconnect, device number 58 [ 885.564291][T13166] binder: 13165:13166 unknown command 0 [ 885.570318][T13166] binder: 13165:13166 ioctl c0306201 200000000080 returned -22 [ 886.620989][T13178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 886.711042][T13178] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 886.764321][T13178] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 886.773438][T13178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 886.780219][T13178] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 886.810658][T13178] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 886.847621][T13178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 886.853803][T13178] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 886.870867][T13178] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 886.898334][T13178] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 886.927820][T13178] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 887.852262][T13196] binder: 13195:13196 unknown command 0 [ 887.873506][T13196] binder: 13195:13196 ioctl c0306201 200000000080 returned -22 [ 888.135148][ T9928] Bluetooth: hci3: command 0x0406 tx timeout [ 888.804866][ T9928] Bluetooth: hci2: command 0x0406 tx timeout [ 888.855115][ T9928] Bluetooth: hci1: command 0x0406 tx timeout [ 888.876919][T13202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.934972][ T9928] Bluetooth: hci4: command 0x0406 tx timeout [ 890.031938][T13226] binder: 13224:13226 unknown command 0 [ 890.041187][T13226] binder: 13224:13226 ioctl c0306201 200000000080 returned -22 [ 890.215025][ T9928] Bluetooth: hci3: command 0x0406 tx timeout [ 890.295051][ T8709] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 890.421522][T13236] syz.3.1967 (13236): drop_caches: 2 [ 890.546701][ T8709] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 890.565967][ T8709] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.624264][ T8709] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 890.642470][ T8709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.685174][T13246] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10804, id = 0 [ 890.714158][ T8709] usbtmc 5-1:16.0: bulk endpoints not found [ 890.855316][ T9928] Bluetooth: hci2: command 0x0406 tx timeout [ 890.935152][ T9928] Bluetooth: hci1: command 0x0406 tx timeout [ 891.014999][ T9928] Bluetooth: hci4: command 0x0406 tx timeout [ 891.650691][T13253] netlink: 'syz.3.1970': attribute type 9 has an invalid length. [ 891.665008][T13253] netlink: 'syz.3.1970': attribute type 7 has an invalid length. [ 891.674042][T13253] netlink: 'syz.3.1970': attribute type 8 has an invalid length. [ 892.230894][T13264] binder: 13263:13264 unknown command 0 [ 892.236843][T13264] binder: 13263:13264 ioctl c0306201 200000000080 returned -22 [ 892.294955][ T9928] Bluetooth: hci3: command 0x0406 tx timeout [ 892.387186][T13268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'. [ 892.398220][T13268] bridge_slave_0: default FDB implementation only supports local addresses [ 892.934984][ T9928] Bluetooth: hci2: command 0x0406 tx timeout [ 893.025025][ T9928] Bluetooth: hci1: command 0x0406 tx timeout [ 893.117035][ T23] usb 5-1: USB disconnect, device number 16 [ 894.007794][T13287] binder: 13286:13287 unknown command 0 [ 894.014652][T13287] binder: 13286:13287 ioctl c0306201 200000000080 returned -22 [ 894.474882][ T8] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 894.667026][ T8] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 894.684682][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.704299][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 894.719380][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.735741][ T8] usbtmc 5-1:16.0: bulk endpoints not found [ 894.922152][T13309] netlink: 'syz.3.1992': attribute type 10 has an invalid length. [ 895.071193][T13311] binder: 13310:13311 unknown command 0 [ 895.085965][T13311] binder: 13310:13311 ioctl c0306201 200000000080 returned -22 [ 895.739740][T13322] syz.1.1996 (13322): drop_caches: 2 [ 897.243833][T12736] usb 5-1: USB disconnect, device number 17 [ 897.320684][T13339] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 897.333735][T13339] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.465439][ T8] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 897.717808][T13346] usb usb8: usbfs: process 13346 (syz.2.2005) did not claim interface 0 before use [ 897.735267][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 897.759195][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.765223][ T23] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 897.779955][ T8] usb 4-1: config 0 has no interfaces? [ 897.804650][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 897.838895][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.862213][ T8] usb 4-1: Product: syz [ 897.872392][ T8] usb 4-1: Manufacturer: syz [ 897.879710][ T8] usb 4-1: SerialNumber: syz [ 897.903739][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 898.021968][ T23] usb 2-1: config 0 has no interfaces? [ 898.044050][ T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 898.054138][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.062849][ T23] usb 2-1: Product: syz [ 898.067558][ T23] usb 2-1: Manufacturer: syz [ 898.072360][ T23] usb 2-1: SerialNumber: syz [ 898.095697][ T23] usb 2-1: config 0 descriptor?? [ 900.048881][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 900.092842][ T8] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 900.293350][T12736] usb 2-1: USB disconnect, device number 49 [ 900.528840][T13369] syz.4.2009 (13369): drop_caches: 2 [ 901.917791][T13374] binder: 13373:13374 unknown command 0 [ 901.923435][T13374] binder: 13373:13374 ioctl c0306201 200000000080 returned -22 [ 903.289842][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 904.384928][T12736] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 904.604865][T12736] usb 2-1: Using ep0 maxpacket: 32 [ 904.618894][T12736] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 904.655765][T12736] usb 2-1: config 0 has no interface number 0 [ 904.684870][T12736] usb 2-1: config 0 interface 184 has no altsetting 0 [ 904.708098][T12736] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 904.724361][T12736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.733716][T12736] usb 2-1: Product: syz [ 904.742949][T12736] usb 2-1: Manufacturer: syz [ 904.758399][T12736] usb 2-1: SerialNumber: syz [ 904.841658][T12736] usb 2-1: config 0 descriptor?? [ 904.858376][T12736] smsc75xx v1.0.0 [ 904.889919][T12736] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 904.925264][T12736] smsc75xx: probe of 2-1:0.184 failed with error -22 [ 905.283407][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.374581][T13392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.759094][T13405] syz.3.2020 (13405): drop_caches: 2 [ 905.863345][T13407] binder: 13406:13407 unknown command 0 [ 905.878004][T13407] binder: 13406:13407 ioctl c0306201 200000000080 returned -22 [ 907.128006][ T8709] usb 2-1: USB disconnect, device number 50 [ 907.666898][T13435] trusted_key: encrypted_key: insufficient parameters specified [ 907.689067][T13437] binder: 13436:13437 unknown command 0 [ 907.703284][T13437] binder: 13436:13437 ioctl c0306201 200000000080 returned -22 [ 908.054949][ T23] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 908.185074][T13446] x_tables: ip_tables: physdev.0 match: invalid size 72 (kernel) != (user) 80 [ 908.245168][ T8709] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 908.276377][ T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 908.312599][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.342530][ T23] usb 5-1: Product: syz [ 908.351776][ T23] usb 5-1: Manufacturer: syz [ 908.373683][ T23] usb 5-1: SerialNumber: syz [ 908.420853][ T23] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 908.437844][ T8709] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 908.463537][ T8709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.481260][ T8709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 908.502421][T12727] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 908.525450][ T8709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.586648][ T8709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.618436][ T8709] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 908.650655][ T8709] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 908.705249][ T8709] usb 4-1: Product: syz [ 908.729890][ T8709] usb 4-1: Manufacturer: syz [ 908.767806][ T8709] cdc_wdm 4-1:1.0: skipping garbage [ 908.785164][ T8709] cdc_wdm 4-1:1.0: skipping garbage [ 908.806181][ T8709] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 908.855105][ T8709] cdc_wdm 4-1:1.0: Unknown control protocol [ 908.975204][T13444] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 908.990961][ T5789] usb 4-1: USB disconnect, device number 60 [ 909.575137][T12727] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 909.587390][T12727] ath9k_htc: Failed to initialize the device [ 909.656842][T12727] usb 5-1: ath9k_htc: USB layer deinitialized [ 909.758018][T13454] syz.3.2037: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 909.790036][T13454] CPU: 1 PID: 13454 Comm: syz.3.2037 Not tainted syzkaller #0 [ 909.797570][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 909.807685][T13454] Call Trace: [ 909.811097][T13454] [ 909.814071][T13454] dump_stack_lvl+0x16c/0x230 [ 909.818808][T13454] ? show_regs_print_info+0x20/0x20 [ 909.824065][T13454] ? load_image+0x3b0/0x3b0 [ 909.828613][T13454] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 909.835079][T13454] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 909.842186][T13454] warn_alloc+0x210/0x300 [ 909.846701][T13454] ? stack_trace_save+0x9c/0xe0 [ 909.851705][T13454] ? zone_watermark_ok_safe+0x230/0x230 [ 909.858279][T13454] ? kasan_set_track+0x5f/0x70 [ 909.863368][T13454] ? kasan_set_track+0x4e/0x70 [ 909.868195][T13454] ? __kasan_kmalloc+0x8f/0xa0 [ 909.873429][T13454] ? xsk_init_queue+0xb0/0x110 [ 909.878699][T13454] ? xsk_setsockopt+0x43c/0x6f0 [ 909.884048][T13454] ? do_sock_setsockopt+0x175/0x1a0 [ 909.889346][T13454] ? __x64_sys_setsockopt+0x184/0x200 [ 909.894778][T13454] __vmalloc_node_range+0x126/0x1320 [ 909.900149][T13454] ? free_vm_area+0x50/0x50 [ 909.904711][T13454] vmalloc_user+0x74/0x80 [ 909.909087][T13454] ? xskq_create+0xbf/0x170 [ 909.913646][T13454] xskq_create+0xbf/0x170 [ 909.918021][T13454] xsk_init_queue+0xb0/0x110 [ 909.922655][T13454] xsk_setsockopt+0x43c/0x6f0 [ 909.927472][T13454] ? xsk_poll+0x670/0x670 [ 909.931853][T13454] ? __fget_files+0x28/0x4d0 [ 909.936500][T13454] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 909.942409][T13454] ? security_socket_setsockopt+0x7e/0xa0 [ 909.948470][T13454] ? xsk_poll+0x670/0x670 [ 909.952857][T13454] do_sock_setsockopt+0x175/0x1a0 [ 909.958326][T13454] ? __fdget+0x180/0x210 [ 909.962905][T13454] __x64_sys_setsockopt+0x184/0x200 [ 909.968266][T13454] do_syscall_64+0x55/0xb0 [ 909.973030][T13454] ? clear_bhb_loop+0x40/0x90 [ 909.977941][T13454] ? clear_bhb_loop+0x40/0x90 [ 909.983895][T13454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.990638][T13454] RIP: 0033:0x7faecd58ebe9 [ 909.995134][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.014793][T13454] RSP: 002b:00007faecb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 910.023280][T13454] RAX: ffffffffffffffda RBX: 00007faecd7c5fa0 RCX: 00007faecd58ebe9 [ 910.031300][T13454] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 910.040361][T13454] RBP: 00007faecd611e19 R08: 0000000000000052 R09: 0000000000000000 [ 910.048933][T13454] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.058606][T13454] R13: 00007faecd7c6038 R14: 00007faecd7c5fa0 R15: 00007fffdccd41c8 [ 910.066827][T13454] [ 910.079612][T13454] Mem-Info: [ 910.083128][T13454] active_anon:7389 inactive_anon:0 isolated_anon:0 [ 910.083128][T13454] active_file:10920 inactive_file:40170 isolated_file:0 [ 910.083128][T13454] unevictable:3 dirty:67 writeback:0 [ 910.083128][T13454] slab_reclaimable:6030 slab_unreclaimable:96428 [ 910.083128][T13454] mapped:28799 shmem:1374 pagetables:674 [ 910.083128][T13454] sec_pagetables:0 bounce:0 [ 910.083128][T13454] kernel_misc_reclaimable:0 [ 910.083128][T13454] free:1353565 free_pcp:8275 free_cma:0 [ 910.128763][T13454] Node 0 active_anon:28020kB inactive_anon:0kB active_file:43672kB inactive_file:160476kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:113692kB dirty:268kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12432kB pagetables:2696kB sec_pagetables:0kB all_unreclaimable? no [ 910.198534][T13454] Node 1 active_anon:1536kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1504kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 910.234794][T13454] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.270975][T13454] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 910.278956][T13454] Node 0 DMA32 free:1511652kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:28004kB inactive_anon:0kB active_file:43672kB inactive_file:159144kB unevictable:12kB writepending:272kB present:3129332kB managed:2589592kB mlocked:12kB bounce:0kB free_pcp:9044kB local_pcp:5536kB free_cma:0kB [ 910.316804][T13454] lowmem_reserve[]: 0 0 1 1 1 [ 910.321809][T13454] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 910.368323][T13454] lowmem_reserve[]: 0 0 0 0 0 [ 910.380535][T13454] Node 1 Normal free:3886992kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24520kB local_pcp:11272kB free_cma:0kB [ 910.429302][T13454] lowmem_reserve[]: 0 0 0 0 0 [ 910.436483][T13454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 910.471061][T13454] Node 0 DMA32: 463*4kB (UM) 1163*8kB (UME) 873*16kB (UME) 630*32kB (UME) 666*64kB (UME) 263*128kB (UME) 64*256kB (UME) 19*512kB (UME) 6*1024kB (UME) 11*2048kB (UME) 326*4096kB (UM) = 1511652kB [ 910.521652][T13454] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 910.560404][T13454] Node 1 Normal: 264*4kB (U) 64*8kB (UME) 41*16kB (UME) 69*32kB (UME) 23*64kB (UME) 11*128kB (UME) 3*256kB (UME) 2*512kB (UE) 1*1024kB (E) 1*2048kB (E) 946*4096kB (M) = 3886992kB [ 910.602428][T13454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 910.613488][T13454] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 910.640077][T13454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 910.653769][T13454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 910.670416][T13454] 52466 total pagecache pages [ 910.675926][T13454] 0 pages in swap cache [ 910.680250][T13454] Free swap = 124728kB [ 910.684683][T13454] Total swap = 124996kB [ 910.691931][T13454] 2097051 pages RAM [ 910.698521][T13454] 0 pages HighMem/MovableOnly [ 910.703359][T13454] 416139 pages reserved [ 910.710338][T13454] 0 pages cma reserved [ 910.732928][ T8709] usb 5-1: USB disconnect, device number 18 [ 910.881301][T13462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2041'. [ 910.907751][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 911.336798][T12727] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 911.350441][T13481] x_tables: ip_tables: physdev.0 match: invalid size 72 (kernel) != (user) 80 [ 911.387872][T13483] IPv6: NLM_F_CREATE should be specified when creating new route [ 911.528043][T12727] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 911.548442][T12727] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 911.581082][T12727] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 911.595056][T13492] [ 911.597457][T13492] ================================================ [ 911.603977][T13492] WARNING: lock held when returning to user space! [ 911.610355][T12727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 911.610488][T13492] syzkaller #0 Not tainted [ 911.625895][T13492] ------------------------------------------------ [ 911.632424][T13492] syz.2.2052/13492 is leaving the kernel with locks still held! [ 911.636774][T12727] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 911.640497][T13492] 1 lock held by syz.2.2052/13492: [ 911.640513][T13492] #0: ffff888021777b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 911.655530][T12727] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 911.681405][T12727] usb 4-1: Product: syz [ 911.686728][T12727] usb 4-1: Manufacturer: syz [ 911.710412][T12727] cdc_wdm 4-1:1.0: skipping garbage [ 911.721734][T13492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2052'. [ 911.731563][T12727] cdc_wdm 4-1:1.0: skipping garbage [ 911.738162][T12727] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 911.913711][ T8] usb 4-1: USB disconnect, device number 61