last executing test programs: 3m50.62072954s ago: executing program 3 (id=7038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa0, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c6"}) 3m49.653819616s ago: executing program 3 (id=7043): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r1, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(0xffffffffffffffff) 3m49.472634078s ago: executing program 3 (id=7045): syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x9) 3m49.415929813s ago: executing program 3 (id=7048): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(&(0x7f0000000040)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 3m49.246211162s ago: executing program 3 (id=7049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3m48.907143734s ago: executing program 3 (id=7052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3m48.476293268s ago: executing program 32 (id=7052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.610671139s ago: executing program 2 (id=8443): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 5.484571886s ago: executing program 2 (id=8444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044146, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.797481822s ago: executing program 2 (id=8449): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.490466694s ago: executing program 2 (id=8451): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000180)={0x0, 0x1c0, 0x380, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8907, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_emit_vhci(0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3.994066856s ago: executing program 4 (id=8453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0x16, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0x7, 0x3, 0x81}, {0x8080000, 0xdddd1000, 0xb, 0x10, 0x2, 0x4, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x80a0000, 0x58000, 0x9, 0x1, 0x3, 0xa, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x2, 0xfc}, {0x6000, 0x58000, 0x0, 0xff, 0x3, 0xff, 0x0, 0x7, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xa, 0x5, 0x2b, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xeeef0000, [0x3, 0x401, 0x7, 0xc5]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) 3.744154516s ago: executing program 4 (id=8455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000ec0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa8) 3.508047167s ago: executing program 4 (id=8457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044146, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.542997147s ago: executing program 0 (id=8460): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x19) 2.287600255s ago: executing program 4 (id=8462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x27, 0x0, 0x2, 0x5, 0x3, 0x8, 0x2, 0x9, 0x2, 0x7, 0x0, 0x96a9, 0x7, 0x6, 0x27, 0x8, 0x3, '\x00', 0x8, 0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x7, 0x0, 0xdc, 0x4, 0x6, 0x7, 0x7, 0x9, 0x3, 0x9, 0x0, 0x7, 0x100, 0xf7, 0x5, 0xf4, 0xc, '\x00', 0xfe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.280357574s ago: executing program 2 (id=8463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0x16, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0x7, 0x3, 0x81}, {0x8080000, 0xdddd1000, 0xb, 0x10, 0x2, 0x4, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x80a0000, 0x58000, 0x9, 0x1, 0x3, 0xa, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0x3, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x2, 0xfc}, {0x6000, 0x58000, 0x0, 0xff, 0x3, 0xff, 0x0, 0x7, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xa, 0x5, 0x2b, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xeeef0000, [0x3, 0x401, 0x7, 0xc5]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) 2.188569956s ago: executing program 0 (id=8464): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000007c0)={"200208d5", 0xc5b2, 0x6, 0x4, 0xc4, 0x8000003, '\x00', "0000d62e", "0200", "05ffff9f", ["c386eefff8ffffff7eec0100", '\x00', "65f98112ac3d7ec700"]}) 2.105781376s ago: executing program 0 (id=8465): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x6, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, r2) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 1.981557456s ago: executing program 2 (id=8466): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000400000040010500fcfec454d7c57ef704b125459f3fb936b199bea7b6ff0e4773c0cd324867d6cbb8faeae029cab2d1db41d7898114b2b94779000aaf2d4c3ea0601515921bb69993c6fff632dbac133b2b4a8cb53a7a00bc34"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.93456298s ago: executing program 4 (id=8467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa0, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c6"}) 1.285535479s ago: executing program 1 (id=8468): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0xfffffdde}]) 1.132052766s ago: executing program 0 (id=8469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.131807004s ago: executing program 1 (id=8470): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f198853", 0x88}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.085340088s ago: executing program 0 (id=8471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044146, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.035532806s ago: executing program 4 (id=8472): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000180)={0x0, 0x1c0, 0x380, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8907, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_emit_vhci(0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 944.436198ms ago: executing program 1 (id=8473): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000007c0)={"200208d5", 0xc5b2, 0x6, 0x4, 0xc4, 0x8000003, '\x00', "0000d62e", "0200", "05ffff9f", ["c386eefff8ffffff7eec0100", '\x00', "65f98112ac3d7ec700"]}) 870.954265ms ago: executing program 1 (id=8474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) 527.857352ms ago: executing program 1 (id=8475): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 149.162572ms ago: executing program 0 (id=8476): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="b1d7bc23a4eaafcb0ecb2fe534ca4c2ea1abfd97090687e597f7514d2a09ae2eedca3e2c29a63cd8715c12fb42baf54ae72212272956c1995552d1699ef48de5f8cb52e816fac4e02b933fc5aaed49", 0x4f, 0x40000, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendfile(r2, r2, 0x0, 0x2000fb) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=8477): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x6, 0x4}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r3, 0xffffffffffffffff) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) kernel console output (not intermixed with test programs): 'syz.0.7184': attribute type 10 has an invalid length. [ 1026.542197][T28325] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1026.679324][ T29] audit: type=1326 audit(1773751860.030:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28329 comm="syz.4.7177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x0 [ 1026.823048][ T5856] block nbd4: Receive control failed (result -32) [ 1026.833652][ T5162] block nbd4: Receive control failed (result -32) [ 1026.886273][T28332] block nbd4: shutting down sockets [ 1027.020071][ T5162] Bluetooth: hci3: command tx timeout [ 1029.102007][ T5162] Bluetooth: hci3: command tx timeout [ 1030.894800][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1030.909459][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1030.921626][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1030.935169][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1030.945413][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1031.956592][T28450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.078399][T28450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.655416][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.756631][T28438] chnl_net:caif_netlink_parms(): no params data found [ 1032.878914][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.034526][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.044937][T20180] Bluetooth: hci4: command tx timeout [ 1033.133373][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.150714][T28438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.158358][T28438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.165878][T28438] bridge_slave_0: entered allmulticast mode [ 1033.177098][T28438] bridge_slave_0: entered promiscuous mode [ 1033.191812][T28438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.199227][T28438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.206675][T28438] bridge_slave_1: entered allmulticast mode [ 1033.215837][T28438] bridge_slave_1: entered promiscuous mode [ 1033.275399][T28438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.291450][T28438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.383865][T28438] team0: Port device team_slave_0 added [ 1033.401232][T28438] team0: Port device team_slave_1 added [ 1033.492307][ T5856] block nbd2: Receive control failed (result -32) [ 1033.510917][ T5162] block nbd2: Receive control failed (result -32) [ 1033.517530][T28479] block nbd2: shutting down sockets [ 1033.521813][T28438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.529724][T28438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.556766][T28438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.592668][T28438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.599678][T28438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.630347][T28438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.738363][T28493] binder: 28492:28493 ioctl c0306201 0 returned -14 [ 1033.753795][ T1164] bridge_slave_1: left allmulticast mode [ 1033.762435][ T1164] bridge_slave_1: left promiscuous mode [ 1033.768348][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.780012][ T1164] bridge_slave_0: left allmulticast mode [ 1033.786448][ T1164] bridge_slave_0: left promiscuous mode [ 1033.794320][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.821733][T28496] binder_alloc: 28495: binder_alloc_buf, no vma [ 1034.024159][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.037305][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.049004][ T1164] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1034.078915][ T1164] bond0 (unregistering): Released all slaves [ 1034.099398][T28438] hsr_slave_0: entered promiscuous mode [ 1034.110374][T28438] hsr_slave_1: entered promiscuous mode [ 1034.119662][T28438] debugfs: 'hsr0' already exists in 'hsr' [ 1034.125741][T28438] Cannot create hsr debugfs directory [ 1034.427967][ T1164] hsr_slave_0: left promiscuous mode [ 1034.437273][ T1164] hsr_slave_1: left promiscuous mode [ 1034.444274][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.452165][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.463011][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1034.472848][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.488079][ T1164] veth1_macvtap: left promiscuous mode [ 1034.494170][ T1164] veth0_macvtap: left promiscuous mode [ 1034.500071][ T1164] veth1_vlan: left promiscuous mode [ 1034.505494][ T1164] veth0_vlan: left promiscuous mode [ 1035.066452][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 1035.088570][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 1035.116724][T20180] Bluetooth: hci4: command tx timeout [ 1035.745674][T28532] binder_alloc: 28531: binder_alloc_buf, no vma [ 1035.786372][ T5856] block nbd2: Receive control failed (result -32) [ 1035.796385][T28518] block nbd2: shutting down sockets [ 1035.814766][ T1164] IPVS: stop unused estimator thread 0... [ 1036.525864][T28438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1036.552733][T28438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1036.583585][T28438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1036.604038][T28438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1036.817653][T28438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.876944][T28438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.914606][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.922099][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.976449][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.983764][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.181113][T20180] Bluetooth: hci4: command tx timeout [ 1037.592088][T28438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.605814][ T5162] block nbd2: Receive control failed (result -32) [ 1037.607465][ T5856] block nbd2: Receive control failed (result -32) [ 1037.619023][T28572] block nbd2: shutting down sockets [ 1037.801818][T28605] binder_alloc: 28604: binder_alloc_buf, no vma [ 1037.859313][T28438] veth0_vlan: entered promiscuous mode [ 1037.905776][T28438] veth1_vlan: entered promiscuous mode [ 1038.025066][T28438] veth0_macvtap: entered promiscuous mode [ 1038.066018][T28438] veth1_macvtap: entered promiscuous mode [ 1038.156886][T28438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.208338][T28438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.274942][ T116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.284366][ T116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.294683][ T116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.317116][ T116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.556705][T27849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.584213][T27849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.646415][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.655591][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.973783][ T43] IPVS: starting estimator thread 0... [ 1039.111113][T28646] IPVS: using max 30 ests per chain, 72000 per kthread [ 1039.262157][ T5856] Bluetooth: hci4: command tx timeout [ 1039.558302][ T5926] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1039.583296][ T5926] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1039.776592][T28673] fido_id[28673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1040.910366][T28704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.979571][T28704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.187613][ T29] audit: type=1326 audit(1773751874.540:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28702 comm="syz.1.7278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d2b9c799 code=0x0 [ 1041.740596][T28706] block nbd1: shutting down sockets [ 1042.236101][ T5926] IPVS: starting estimator thread 0... [ 1042.351396][T28719] IPVS: using max 26 ests per chain, 62400 per kthread [ 1042.490890][T28725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7286'. [ 1042.719624][T28677] Set syz1 is full, maxelem 65536 reached [ 1042.788379][ T29] audit: type=1326 audit(1773751876.130:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28728 comm="syz.2.7288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f373a59c799 code=0x0 [ 1042.902584][T28732] netlink: 'syz.1.7289': attribute type 10 has an invalid length. [ 1043.108867][T28742] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.115336][T28742] binder: 28741:28742 ioctl 4018620d 200000004a80 returned -16 [ 1043.468319][ T5162] block nbd2: Receive control failed (result -32) [ 1043.483225][ T5856] block nbd2: Receive control failed (result -32) [ 1043.497692][T28729] block nbd2: shutting down sockets [ 1044.154963][T28765] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1044.402255][T28770] netlink: 'syz.0.7304': attribute type 10 has an invalid length. [ 1044.423770][T28770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1044.677821][ T29] audit: type=1326 audit(1773751878.030:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28773 comm="syz.0.7306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x0 [ 1044.823364][T28782] binder: BINDER_SET_CONTEXT_MGR already set [ 1044.836303][T28782] binder: 28781:28782 ioctl 4018620d 200000004a80 returned -16 [ 1045.782584][T28775] block nbd0: shutting down sockets [ 1046.146001][T28800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.215346][T28800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.968314][T28843] netlink: 'syz.2.7334': attribute type 10 has an invalid length. [ 1047.987712][T28843] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1048.032479][T28846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.121544][T28851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.501238][T28873] netlink: 'syz.1.7347': attribute type 10 has an invalid length. [ 1049.737809][ T29] audit: type=1326 audit(1773751883.090:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28875 comm="syz.4.7348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x0 [ 1050.441228][ T5856] block nbd4: Receive control failed (result -32) [ 1050.460968][ T5162] block nbd4: Receive control failed (result -32) [ 1050.756493][T28877] block nbd4: shutting down sockets [ 1050.887491][T28900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.977080][T28902] netlink: 'syz.4.7358': attribute type 10 has an invalid length. [ 1050.994209][T28902] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1051.851385][T28928] netlink: 'syz.2.7369': attribute type 10 has an invalid length. [ 1054.105620][ T5856] block nbd1: Receive control failed (result -32) [ 1054.148519][ T5162] block nbd1: Receive control failed (result -32) [ 1054.216029][T28959] block nbd1: shutting down sockets [ 1054.694315][T28986] binder: BINDER_SET_CONTEXT_MGR already set [ 1054.705652][T28986] binder: 28985:28986 ioctl 4018620d 200000004a80 returned -16 [ 1054.866428][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.874073][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.631626][ T5856] block nbd0: Receive control failed (result -32) [ 1055.670949][ T5162] block nbd0: Receive control failed (result -32) [ 1055.774988][T28996] block nbd0: shutting down sockets [ 1056.595964][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.612890][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.624691][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.638488][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.646448][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1056.814221][T29024] netlink: 'syz.0.7404': attribute type 10 has an invalid length. [ 1057.095836][ T29] audit: type=1326 audit(1773751890.450:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29031 comm="syz.0.7406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x0 [ 1057.168999][T27659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.226416][ T5162] block nbd0: Receive control failed (result -32) [ 1057.257190][T29032] block nbd0: shutting down sockets [ 1057.320190][T27659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.476494][T27659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.517494][T29018] chnl_net:caif_netlink_parms(): no params data found [ 1057.588539][T27659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.753592][T29046] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.759675][T29046] binder: 29044:29046 ioctl 4018620d 200000004a80 returned -16 [ 1057.797944][T29018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.805804][T29018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.813362][T29018] bridge_slave_0: entered allmulticast mode [ 1057.824512][T29018] bridge_slave_0: entered promiscuous mode [ 1057.835713][T29018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.845019][T29018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.852589][T29018] bridge_slave_1: entered allmulticast mode [ 1057.862109][T29018] bridge_slave_1: entered promiscuous mode [ 1057.998956][T29018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.073525][T29018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.190136][T29018] team0: Port device team_slave_0 added [ 1058.202255][T29018] team0: Port device team_slave_1 added [ 1058.223353][T27659] bridge_slave_1: left allmulticast mode [ 1058.232070][T27659] bridge_slave_1: left promiscuous mode [ 1058.239023][T27659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.311425][T27659] bridge_slave_0: left allmulticast mode [ 1058.318087][T27659] bridge_slave_0: left promiscuous mode [ 1058.337177][T27659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.714208][ T5162] Bluetooth: hci2: command tx timeout [ 1059.294387][T27659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.318076][T27659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.351533][T27659] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1059.374269][T27659] bond0 (unregistering): Released all slaves [ 1059.434759][T29018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.458065][T29018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.520996][T29018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.537687][T29018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.545659][T29018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.573368][T29018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.810101][T29018] hsr_slave_0: entered promiscuous mode [ 1059.850965][T29018] hsr_slave_1: entered promiscuous mode [ 1059.910418][T29079] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.922717][T29079] binder: 29078:29079 ioctl 4018620d 200000004a80 returned -16 [ 1060.102378][T27659] hsr_slave_0: left promiscuous mode [ 1060.114156][T27659] hsr_slave_1: left promiscuous mode [ 1060.123762][T27659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.132235][T27659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.153721][T27659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.169913][T27659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.210495][T27659] veth1_macvtap: left promiscuous mode [ 1060.224663][T27659] veth0_macvtap: left promiscuous mode [ 1060.237917][T27659] veth1_vlan: left promiscuous mode [ 1060.252624][T27659] veth0_vlan: left promiscuous mode [ 1060.714404][T27659] team0 (unregistering): Port device team_slave_1 removed [ 1060.749736][T27659] team0 (unregistering): Port device team_slave_0 removed [ 1060.780092][ T5162] Bluetooth: hci2: command tx timeout [ 1061.098321][T29113] netlink: 'syz.4.7423': attribute type 10 has an invalid length. [ 1061.257941][T29115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7425'. [ 1061.272245][T29115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7425'. [ 1062.465319][T29153] netlink: 'syz.2.7434': attribute type 10 has an invalid length. [ 1062.541497][T29018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1062.566159][T29018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1062.594487][T29018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1062.627612][T29018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1062.667650][T29159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7435'. [ 1062.677773][T29159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7435'. [ 1062.861056][ T5162] Bluetooth: hci2: command tx timeout [ 1063.028192][T29018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.124620][T29018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.153381][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.160671][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.208953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.216232][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.628103][T29200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7443'. [ 1063.654357][T29200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7443'. [ 1063.782220][ T5899] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1064.015455][ T5899] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1064.042464][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1064.077206][T29018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.117791][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1064.142310][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.170913][ T5899] usb 3-1: Product: 뭺ṷ鶒頙潚밿鮷蛏ᾓগ彇圊ऎḑ℔ﰀ緽쟳▂ௌ櫓菇鹓셨횵ϕ㼷鸤杂迧㔚⬍⪭虼窕鮽叕డ厶蔿這匘᡾楃గꭐˉ㡌ⶂ鿏ﳐ堤謁ᖐꩮ㠮ʹ끴헧⿝䨝锪暸鿨䆻쪸遘퇦≴ [ 1064.236628][ T5899] usb 3-1: Manufacturer: 鼰賍‎脙횳狝ᐉ镲⼣㳞㴛蒛宗ඡ堌즱椩貚莤흳᛻簉섽馃?頮䥌댗䷞꫾녢涧㑶俁嚆ज喛ね禑蒱樃ᵗ육⧖䏜寷ꏷ뭣泗膚㜹ܹ圮⢩઺燇謍鳜Ｎ맼蒆唥鏍最꿙嫧튖ࠤႇ긐͙畬㢡ŝ࿸눵羭ꎗ盙ᘈ롒㉲霰䰪斯鶬眖ᢤ⿊靖湪볂橃늼쓢扚 [ 1064.359628][ T5899] usb 3-1: SerialNumber: 䪯ꘈ⃩鲃ᏻ湖⥪쥖跂ꚶ塰㲧譧⍧톱틯澐畒嬢욪梳踴閲࿠襑砒벖恷ᬆ픫沼恶嶖㓒贳硋菪햣⽾⩏䳅蹫쫳푖릉裂ᳲٔᯚⱓ᪶彽ᬡᢕ☍ꜘ露싎䟻⣻吟䣦Ȼጴ껑슧⥆缐 [ 1064.437665][T29195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1064.577669][T29018] veth0_vlan: entered promiscuous mode [ 1064.626608][T29018] veth1_vlan: entered promiscuous mode [ 1064.786363][T29018] veth0_macvtap: entered promiscuous mode [ 1064.950515][ T5162] Bluetooth: hci2: command tx timeout [ 1065.025371][T29018] veth1_macvtap: entered promiscuous mode [ 1065.186912][T29195] kAFS: unable to lookup cell '(,cL' [ 1065.210269][ T5899] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1065.259913][ T5899] usb 3-1: USB disconnect, device number 68 [ 1065.306068][T29018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.366969][T29018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.442717][ T759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.460718][ T759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.484738][ T759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.506892][ T759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.926342][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.953972][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.072491][ T759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.098978][ T759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.523919][T29247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7451'. [ 1066.533781][T29247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7451'. [ 1067.317898][T29272] binder: BINDER_SET_CONTEXT_MGR already set [ 1067.336753][T29272] binder: 29270:29272 ioctl 4018620d 200000004a80 returned -16 [ 1067.621143][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7462'. [ 1067.645570][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7462'. [ 1068.424372][T29309] netlink: 'syz.2.7469': attribute type 10 has an invalid length. [ 1068.735785][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7473'. [ 1068.746656][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7473'. [ 1068.976534][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1069.736401][T29338] netlink: 'syz.1.7479': attribute type 10 has an invalid length. [ 1069.752419][T29338] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1069.917155][T29344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1069.974805][T29344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1070.421609][T29366] netlink: 'syz.2.7490': attribute type 10 has an invalid length. [ 1071.143027][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7495'. [ 1071.487367][T29392] netlink: 'syz.4.7499': attribute type 10 has an invalid length. [ 1071.707974][T29405] __nla_validate_parse: 1 callbacks suppressed [ 1071.708032][T29405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7504'. [ 1071.729919][T29405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7504'. [ 1072.002221][T29414] input: syz0 as /devices/virtual/input/input63 [ 1073.047298][T29426] netlink: 'syz.1.7512': attribute type 10 has an invalid length. [ 1073.189093][T29431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.246264][T29434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1073.286277][T29436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.308926][T29439] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1074.428066][T29459] netlink: 'syz.1.7524': attribute type 10 has an invalid length. [ 1074.497187][T29463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7527'. [ 1074.623247][T29469] fuse: Bad value for 'fd' [ 1074.921345][T29479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.989758][T29479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.159488][T29487] netlink: 'syz.1.7538': attribute type 10 has an invalid length. [ 1075.491421][T29498] fuse: Bad value for 'fd' [ 1075.967310][T29507] netlink: 'syz.0.7547': attribute type 10 has an invalid length. [ 1076.081082][T29511] binder: 29510:29511 ioctl 4018620d 0 returned -22 [ 1076.223292][T29515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7549'. [ 1076.304342][T29518] binder: 29517:29518 ioctl c0306201 0 returned -14 [ 1076.315239][T29518] binder: 29517:29518 ioctl c0306201 2000000004c0 returned -14 [ 1076.398980][T29525] fuse: Bad value for 'fd' [ 1076.790040][ T43] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1076.950720][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1076.963321][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1076.984186][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1077.025244][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1077.056221][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.073221][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1077.082743][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.221874][T29535] netlink: 'syz.4.7557': attribute type 10 has an invalid length. [ 1077.325146][T29537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.343824][T29537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.610869][T29541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7560'. [ 1078.139315][T29548] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7563'. [ 1078.211061][T29550] binder: 29549:29550 ioctl 4018620d 0 returned -22 [ 1078.532887][T29555] binder: 29554:29555 ioctl c0306201 2000000004c0 returned -14 [ 1078.725815][T29558] netlink: 'syz.1.7567': attribute type 10 has an invalid length. [ 1079.511546][T29574] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7573'. [ 1079.754151][ T43] usb 3-1: usb_control_msg returned -71 [ 1079.783998][ T43] usbtmc 3-1:16.0: can't read capabilities [ 1079.842443][ T43] usb 3-1: USB disconnect, device number 69 [ 1079.910365][T29579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.944199][T29579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.623008][T29587] binder: 29586:29587 ioctl 4018620d 0 returned -22 [ 1080.897221][T29598] binder: 29597:29598 ioctl c0306201 2000000004c0 returned -14 [ 1081.227355][T29602] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7583'. [ 1081.881561][T29615] netlink: 'syz.2.7588': attribute type 10 has an invalid length. [ 1082.227571][T29624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.244120][T29624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.428048][T29631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7593'. [ 1082.569626][T29633] binder: BINDER_SET_CONTEXT_MGR already set [ 1082.583185][T29633] binder: 29632:29633 ioctl 4018620d 200000004a80 returned -16 [ 1082.802430][T29638] binder: 29637:29638 ioctl c0306201 2000000004c0 returned -14 [ 1083.065187][T29641] netlink: 'syz.0.7597': attribute type 10 has an invalid length. [ 1083.356007][T29652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1083.552697][T29660] binder: 29653:29660 ioctl c0306201 0 returned -14 [ 1084.196883][T29665] netlink: 'syz.1.7607': attribute type 10 has an invalid length. [ 1084.673257][T29677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7611'. [ 1084.773790][T29679] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.800238][T29679] binder: 29678:29679 ioctl 4018620d 200000004a80 returned -16 [ 1085.639966][T28629] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1085.670836][T29692] netlink: 'syz.4.7617': attribute type 10 has an invalid length. [ 1085.810020][T28629] usb 1-1: Using ep0 maxpacket: 8 [ 1085.822737][T28629] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.846732][T28629] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1085.867939][T28629] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1085.897802][T28629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.037371][T29660] syz.2.7603 (29660): drop_caches: 2 [ 1087.660097][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1087.820185][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1087.830278][ T24] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1087.839494][ T24] usb 3-1: config 0 has no interface number 0 [ 1087.846252][ T24] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.864056][ T24] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.885134][ T24] usb 3-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1087.919898][ T24] usb 3-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1087.941457][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.965826][ T24] usb 3-1: config 0 descriptor?? [ 1088.113995][ T29] audit: type=1326 audit(1773751921.470:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29738 comm="syz.4.7633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x0 [ 1088.373241][ T24] usbhid 3-1:0.128: can't add hid device: -71 [ 1088.390239][ T24] usbhid 3-1:0.128: probe with driver usbhid failed with error -71 [ 1088.409079][ T24] usb 3-1: USB disconnect, device number 70 [ 1088.440094][ T5926] usb 1-1: USB disconnect, device number 115 [ 1088.821636][ T5926] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1088.983280][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 1089.011179][ T5926] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1089.042294][ T5926] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1089.052999][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.073930][ T5926] usb 1-1: Product: syz [ 1089.082587][ T5926] usb 1-1: Manufacturer: syz [ 1089.092708][ T5926] usb 1-1: SerialNumber: syz [ 1089.106154][ T5926] usb 1-1: config 0 descriptor?? [ 1089.126655][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1089.145266][ T5926] usb 1-1: setting power ON [ 1089.152234][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 1089.199056][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1089.199654][T29757] binder: 29756:29757 ioctl c0306201 0 returned -14 [ 1089.221113][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1089.231964][ T5926] usb 1-1: media controller created [ 1089.281236][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.329752][T29746] dvb-usb: bulk message failed: -22 (3/0) [ 1089.341853][T29746] cxusb: i2c rd: len=104 is too big! [ 1089.341853][T29746] [ 1089.355491][ T5926] usb 1-1: selecting invalid altsetting 6 [ 1089.363879][ T5926] usb 1-1: digital interface selection failed (-22) [ 1089.383290][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1089.393571][ T5926] usb 1-1: setting power OFF [ 1089.404264][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 1089.411863][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1089.422019][ T5926] (NULL device *): no alternate interface [ 1089.468382][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1089.492948][ T5926] usb 1-1: USB disconnect, device number 116 [ 1090.091443][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7646'. [ 1090.260517][T28629] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1090.439915][T28629] usb 3-1: Using ep0 maxpacket: 8 [ 1090.448096][T28629] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.459552][T28629] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1090.469465][T28629] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1090.479041][T28629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.927020][T29780] block nbd0: shutting down sockets [ 1091.085421][T29803] binder: 29802:29803 ioctl c0306201 0 returned -14 [ 1092.500028][ T5899] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1092.659969][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 1092.672427][ T5899] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1092.688855][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.698991][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.707951][ T5899] usb 1-1: Product: syz [ 1092.712633][ T5899] usb 1-1: Manufacturer: 绸흦훪綾︅ࣲ㎨耆㻠✂뻄銬浙渿엥㩝祽ቊ⨞엻짂溎闉䡟៱ᐦꙩꃫ櫑ᯪ妐柫킓᠒綬⚿揗ꇆ噿뜎쫕螫ᶭ蟏茢펈蠬㍟蘞ﺰ澻朼죴哗䗢㇅챈촌궆퀝걄⳶쉆凣抔꛽蝗ᦝ돵戮ਤ匀寡琢䥒䳔핟뭐診°頸킠₳怚퀝뻚䑎 [ 1092.745121][ T5899] usb 1-1: SerialNumber: syz [ 1093.097754][T28629] usb 3-1: USB disconnect, device number 71 [ 1094.185366][T29827] block nbd1: shutting down sockets [ 1094.422821][T29843] binder: 29840:29843 ioctl c0306201 0 returned -14 [ 1094.486840][T29845] netlink: 'syz.2.7668': attribute type 10 has an invalid length. [ 1094.869979][ T43] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1095.039913][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1095.053308][ T43] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.079005][ T43] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.106867][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1095.122738][ T43] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1095.139019][ T43] usb 2-1: Product: syz [ 1095.147691][ T43] usb 2-1: Manufacturer: syz [ 1095.191134][ T43] hub 2-1:4.0: USB hub found [ 1095.400339][T29850] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1095.400339][T29850] program syz.1.7669 not setting count and/or reply_len properly [ 1095.478595][ T43] hub 2-1:4.0: 2 ports detected [ 1095.678519][ T5899] cdc_ncm 1-1:1.0: bind() failure [ 1095.743836][ T5899] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1095.759464][ T5899] cdc_ncm 1-1:1.1: bind() failure [ 1095.795435][ T5899] usb 1-1: USB disconnect, device number 117 [ 1096.754536][T29850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.775594][T29850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.798170][ T43] hub 2-1:4.0: activate --> -90 [ 1096.970166][ T5926] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1097.129969][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1097.141513][ T5926] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1097.161915][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.177785][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.195121][ T5926] usb 3-1: Product: syz [ 1097.203226][ T5926] usb 3-1: Manufacturer: 绸흦훪綾︅ࣲ㎨耆㻠✂뻄銬浙渿엥㩝祽ቊ⨞엻짂溎闉䡟៱ᐦꙩꃫ櫑ᯪ妐柫킓᠒綬⚿揗ꇆ噿뜎쫕螫ᶭ蟏茢펈蠬㍟蘞ﺰ澻朼죴哗䗢㇅챈촌궆퀝걄⳶쉆凣抔꛽蝗ᦝ돵戮ਤ匀寡琢䥒䳔핟뭐診°頸킠₳怚퀝뻚䑎 [ 1097.262840][ T5899] usb 2-1: USB disconnect, device number 96 [ 1097.271730][ T5926] usb 3-1: SerialNumber: syz [ 1097.586430][ T5162] block nbd0: Receive control failed (result -32) [ 1097.596111][T29885] block nbd0: shutting down sockets [ 1099.734183][ T5162] block nbd4: Receive control failed (result -32) [ 1099.737151][T29919] block nbd4: shutting down sockets [ 1099.869947][ T43] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1100.008421][ T5926] cdc_ncm 3-1:1.0: bind() failure [ 1100.035509][ T5926] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1100.047008][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1100.052403][ T5926] cdc_ncm 3-1:1.1: bind() failure [ 1100.061071][ T43] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.079008][ T5926] usb 3-1: USB disconnect, device number 72 [ 1100.085421][ T43] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.110839][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1100.133084][ T43] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1100.155746][ T43] usb 1-1: Product: syz [ 1100.160486][ T43] usb 1-1: Manufacturer: syz [ 1100.183696][ T43] hub 1-1:4.0: USB hub found [ 1100.393803][T29928] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1100.393803][T29928] program syz.0.7696 not setting count and/or reply_len properly [ 1100.455250][ T43] hub 1-1:4.0: 2 ports detected [ 1101.710409][T29928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.730564][T29928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.759251][ T43] hub 1-1:4.0: activate --> -90 [ 1102.172105][ T43] usb 1-1-port2: cannot warm reset (err = -71) [ 1102.172320][T28629] usb 1-1: USB disconnect, device number 118 [ 1103.790429][T30006] netlink: 'syz.0.7724': attribute type 10 has an invalid length. [ 1103.933055][ T5899] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1104.089946][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 1104.102211][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.129882][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1104.140170][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1104.154644][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1104.169022][ T5899] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1104.178666][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.201302][ T5899] hub 3-1:1.0: bad descriptor, ignoring hub [ 1104.214293][ T5899] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1104.228457][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1104.234712][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1104.249578][ T5899] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1104.263982][ T5899] cdc_wdm 3-1:1.0: Unknown control protocol [ 1104.512541][T30030] netlink: 'syz.4.7733': attribute type 10 has an invalid length. [ 1104.686574][T30036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7735'. [ 1104.879924][ T43] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1104.952849][T30000] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 1105.060182][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1105.093947][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1105.106519][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1105.117288][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1105.127637][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1105.170036][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1105.193813][T30000] usb 3-1: device firmware changed [ 1105.200274][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.219366][ T5899] usb 3-1: USB disconnect, device number 73 [ 1105.220787][T30000] cdc_wdm 3-1:1.0: Error autopm - -16 [ 1105.430311][ T5899] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1105.460801][T30053] netlink: 'syz.4.7743': attribute type 10 has an invalid length. [ 1105.556667][T30031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.569517][T30031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.594373][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 1105.601421][ T43] usbtmc 1-1:16.0: can't read capabilities [ 1105.630036][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 1105.642589][ T5899] usb 3-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1105.661669][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1105.680882][ T5899] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1105.695754][ T5899] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1105.714230][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.761134][ T5899] hub 3-1:1.0: bad descriptor, ignoring hub [ 1105.774932][ T5899] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1105.799612][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1105.810521][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1105.821997][ T5899] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1106.091838][ T5899] usb 3-1: USB disconnect, device number 74 [ 1106.903172][ T5899] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1107.079891][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 1107.092406][ T5899] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1107.111133][ T5899] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1107.127257][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.141011][ T5899] usb 2-1: Product: syz [ 1107.148240][ T5899] usb 2-1: Manufacturer: syz [ 1107.156474][ T5899] usb 2-1: SerialNumber: syz [ 1107.178243][ T5899] usb 2-1: config 0 descriptor?? [ 1107.195922][ T5899] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1107.209430][ T5899] usb 2-1: setting power ON [ 1107.217250][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 1107.240760][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1107.258365][ T5899] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1107.269992][ T5899] usb 2-1: media controller created [ 1107.301477][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.353091][ T5899] usb 2-1: selecting invalid altsetting 6 [ 1107.364366][ T5899] usb 2-1: digital interface selection failed (-22) [ 1107.375948][ T5899] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1107.390809][ T5899] usb 2-1: setting power OFF [ 1107.403904][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 1107.417624][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1107.427263][ T5899] (NULL device *): no alternate interface [ 1107.504014][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1107.545707][ T5899] usb 2-1: USB disconnect, device number 97 [ 1108.050214][T30095] fuse: Bad value for 'fd' [ 1108.139589][T27600] usb 1-1: USB disconnect, device number 119 [ 1108.237330][T30098] fuse: Bad value for 'group_id' [ 1108.242818][T30098] fuse: Bad value for 'group_id' [ 1108.279933][ T5899] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1108.440084][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 1108.447235][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.458043][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1108.471006][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1108.482764][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1108.494864][ T5899] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1108.504228][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.519949][ T5899] hub 2-1:1.0: bad descriptor, ignoring hub [ 1108.526065][ T5899] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1108.534283][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 1108.539696][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 1108.549257][ T5899] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1108.556590][ T5899] cdc_wdm 2-1:1.0: Unknown control protocol [ 1109.059267][T30117] fuse: Bad value for 'fd' [ 1109.413275][T30093] usb 2-1: reset high-speed USB device number 98 using dummy_hcd [ 1109.520209][T27600] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1109.582116][T30093] usb 2-1: device firmware changed [ 1109.594092][T30093] cdc_wdm 2-1:1.0: Error autopm - -16 [ 1109.594583][ T5899] usb 2-1: USB disconnect, device number 98 [ 1109.719886][T27600] usb 1-1: Using ep0 maxpacket: 32 [ 1109.736866][T27600] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.759117][T27600] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.781205][T27600] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1109.794992][T27600] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1109.812023][ T5899] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1109.820106][T27600] usb 1-1: Product: syz [ 1109.830960][T27600] usb 1-1: Manufacturer: syz [ 1109.853450][T27600] hub 1-1:4.0: USB hub found [ 1109.990030][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 1110.003024][ T5899] usb 2-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1110.014224][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1110.056355][ T5899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1110.103866][ T5899] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1110.118302][T27600] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 1110.126313][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.153735][ T5899] hub 2-1:1.0: bad descriptor, ignoring hub [ 1110.163790][ T5899] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1110.173066][T27600] usb 1-1: USB disconnect, device number 120 [ 1110.213087][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 1110.242856][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 1110.266263][ T5899] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1110.490836][T27600] usb 2-1: USB disconnect, device number 99 [ 1110.934462][T30142] fuse: Bad value for 'group_id' [ 1110.955071][T30142] fuse: Bad value for 'group_id' [ 1111.033717][T30144] fuse: Bad value for 'fd' [ 1111.595632][T30159] netlink: 'syz.1.7784': attribute type 10 has an invalid length. [ 1111.706262][T30161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.773845][T30161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.001075][T30167] binder: 30166:30167 unknown command 1074553622 [ 1112.007898][T30167] binder: 30166:30167 ioctl c0306201 200000000640 returned -22 [ 1112.289465][T30173] binder: 30172:30173 ioctl 4018620d 0 returned -22 [ 1112.799975][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1112.949921][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1112.956798][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.968213][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.980320][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1112.989912][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1112.998309][ T24] usb 3-1: Product: syz [ 1113.002698][ T24] usb 3-1: Manufacturer: syz [ 1113.015800][ T24] hub 3-1:4.0: USB hub found [ 1113.110711][T30185] netlink: 'syz.1.7795': attribute type 10 has an invalid length. [ 1113.222660][T30178] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1113.222660][T30178] program syz.2.7793 not setting count and/or reply_len properly [ 1113.267526][ T24] hub 3-1:4.0: 2 ports detected [ 1113.379961][T30196] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7800'. [ 1113.612689][T30204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.677450][T30204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.271677][T30209] binder: 30207:30209 ioctl 4018620d 0 returned -22 [ 1114.485861][T30178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.496147][T30178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.507159][ T24] hub 3-1:4.0: activate --> -90 [ 1114.689958][T27600] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1114.712202][ T24] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 1114.712911][ T5899] usb 3-1: USB disconnect, device number 75 [ 1114.870216][T27600] usb 2-1: Using ep0 maxpacket: 8 [ 1114.894754][T27600] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1114.912479][T27600] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1114.923278][T27600] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1114.934800][T27600] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.026008][T27600] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1115.038724][T27600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.318643][T30215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.366985][T30215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.380632][T27600] usb 2-1: GET_CAPABILITIES returned 0 [ 1115.387582][T27600] usbtmc 2-1:16.0: can't read capabilities [ 1116.137012][T30238] netlink: 'syz.0.7814': attribute type 10 has an invalid length. [ 1116.245193][T30240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.307591][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.314625][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.324100][T30240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.390942][T30246] binder: 30245:30246 ioctl 4018620d 0 returned -22 [ 1116.842937][ T5899] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1116.999967][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1117.007130][ T5899] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.018413][ T5899] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.029958][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1117.039299][ T5899] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1117.048157][ T5899] usb 3-1: Product: syz [ 1117.053297][ T5899] usb 3-1: Manufacturer: syz [ 1117.067163][ T5899] hub 3-1:4.0: USB hub found [ 1117.269020][T30253] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1117.269020][T30253] program syz.2.7821 not setting count and/or reply_len properly [ 1117.292003][ T5899] hub 3-1:4.0: 2 ports detected [ 1117.384251][ T24] usb 2-1: USB disconnect, device number 100 [ 1117.476285][T30261] netlink: 'syz.1.7824': attribute type 10 has an invalid length. [ 1117.499935][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1117.660543][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1117.667766][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.678377][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1117.687413][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1117.698883][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1117.716153][ T43] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1117.725522][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.742730][ T43] hub 5-1:1.0: bad descriptor, ignoring hub [ 1117.753287][ T43] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1117.761804][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 1117.767175][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 1117.775518][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1117.782755][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 1118.171572][ T43] usb 5-1: USB disconnect, device number 2 [ 1118.515394][T30253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.528888][T30253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.764077][ T24] usb 3-1: USB disconnect, device number 76 [ 1119.196495][T30284] binder: 30283:30284 ioctl c0306201 0 returned -14 [ 1119.516610][T30287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.588120][T30287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.600148][T30289] netlink: 'syz.1.7833': attribute type 10 has an invalid length. [ 1121.053862][T30315] netlink: 'syz.4.7842': attribute type 10 has an invalid length. [ 1121.099991][ T43] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1121.133732][T30317] binder: 30316:30317 ioctl c0306201 0 returned -14 [ 1121.269915][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1121.278459][ T43] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.291593][ T43] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.304640][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1121.314260][ T43] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1121.324906][ T43] usb 3-1: Product: syz [ 1121.329338][ T43] usb 3-1: Manufacturer: syz [ 1121.351114][ T43] hub 3-1:4.0: USB hub found [ 1121.559125][T30307] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1121.559125][T30307] program syz.2.7840 not setting count and/or reply_len properly [ 1121.598995][ T43] hub 3-1:4.0: 2 ports detected [ 1122.161726][T30331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.247963][T30332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.822887][T30307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.847366][T30307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.986585][T30336] tipc: Started in network mode [ 1123.007884][T30336] tipc: Node identity , cluster identity 4711 [ 1123.083008][ T5899] usb 3-1: USB disconnect, device number 77 [ 1123.435992][T30344] netlink: 'syz.0.7851': attribute type 10 has an invalid length. [ 1123.552127][T30350] binder: 30349:30350 ioctl c0306201 0 returned -14 [ 1123.880658][T30366] netlink: 'syz.2.7860': attribute type 10 has an invalid length. [ 1124.045849][T30371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.123809][T30371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.779905][ T43] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1124.849927][T28058] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1124.929885][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1124.945580][ T43] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.965518][ T43] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.988006][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1125.002035][ T43] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1125.015449][T28058] usb 5-1: Using ep0 maxpacket: 16 [ 1125.018093][ T43] usb 1-1: Product: syz [ 1125.029502][T28058] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1125.043505][T28058] usb 5-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1125.043510][ T43] usb 1-1: Manufacturer: syz [ 1125.043536][T28058] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1125.081415][T28058] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1125.092780][ T43] hub 1-1:4.0: USB hub found [ 1125.106253][T28058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.128957][T28058] usb 5-1: config 0 descriptor?? [ 1125.157774][T28058] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1125.296121][T30377] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1125.296121][T30377] program syz.0.7864 not setting count and/or reply_len properly [ 1125.338362][ T43] hub 1-1:4.0: 2 ports detected [ 1125.557126][ T5926] usb 5-1: USB disconnect, device number 3 [ 1125.961593][T30387] tipc: Started in network mode [ 1125.980524][T30387] tipc: Node identity , cluster identity 4711 [ 1126.131847][T30394] netlink: 'syz.2.7870': attribute type 10 has an invalid length. [ 1126.460072][T28058] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1126.603194][T30377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.629966][T28058] usb 2-1: Using ep0 maxpacket: 8 [ 1126.641881][T30377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.656111][T28058] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1126.681764][T28058] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1126.711158][T28058] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1126.743267][T28058] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1126.771116][T28058] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1126.799701][T28058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.878249][ T5899] usb 1-1: USB disconnect, device number 121 [ 1127.163436][T30395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.234670][T30395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.252726][T30407] fuse: Unknown parameter 'grou00000000000000000000' [ 1127.367186][T28058] usb 2-1: GET_CAPABILITIES returned 0 [ 1127.393857][T28058] usbtmc 2-1:16.0: can't read capabilities [ 1127.762629][T28058] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1127.939915][T28058] usb 1-1: Using ep0 maxpacket: 8 [ 1127.953464][T28058] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.974617][T28058] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1127.993086][T28058] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1128.014978][T28058] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1128.042894][T28058] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1128.064616][T28058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.107259][T28058] hub 1-1:1.0: bad descriptor, ignoring hub [ 1128.131347][T28058] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1128.166751][T28058] cdc_wdm 1-1:1.0: skipping garbage [ 1128.179029][T28058] cdc_wdm 1-1:1.0: skipping garbage [ 1128.210100][T28058] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1128.226345][T28058] cdc_wdm 1-1:1.0: Unknown control protocol [ 1128.410424][T28058] usb 1-1: USB disconnect, device number 122 [ 1128.615520][T30424] netlink: 'syz.2.7881': attribute type 10 has an invalid length. [ 1129.197191][T28058] usb 2-1: USB disconnect, device number 101 [ 1129.589634][T30439] fuse: Unknown parameter 'grou00000000000000000000' [ 1130.009049][T30452] netlink: 'syz.0.7890': attribute type 10 has an invalid length. [ 1130.350101][ T43] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1130.500608][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1130.507883][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.518769][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1130.532002][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1130.544274][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1130.555941][ T43] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1130.565371][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.599646][ T43] hub 1-1:1.0: bad descriptor, ignoring hub [ 1130.619467][ T43] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1130.654281][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 1130.670156][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 1130.694029][ T43] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1130.705021][ T43] cdc_wdm 1-1:1.0: Unknown control protocol [ 1131.029933][ T43] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1131.109972][ T5899] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1131.191137][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1131.199884][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.210793][ T43] usb 2-1: config 0 has no interfaces? [ 1131.219488][ T43] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1131.229470][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.238908][ T43] usb 2-1: Product: syz [ 1131.243860][ T43] usb 2-1: Manufacturer: syz [ 1131.249163][ T43] usb 2-1: SerialNumber: syz [ 1131.262498][ T43] usb 2-1: config 0 descriptor?? [ 1131.290062][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 1131.306232][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1131.327981][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1131.338948][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1131.350043][ T5899] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.364791][ T5899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1131.374109][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.479125][T27600] usb 2-1: USB disconnect, device number 102 [ 1131.721426][T30471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.758735][T30471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.788099][ T5899] usb 3-1: GET_CAPABILITIES returned 0 [ 1131.810772][ T5899] usbtmc 3-1:16.0: can't read capabilities [ 1132.284275][T30481] fuse: Unknown parameter 'grou00000000000000000000' [ 1133.966875][T30457] cdc_wdm 1-1:1.0: Error autopm - -16 [ 1133.967920][T28058] usb 1-1: USB disconnect, device number 123 [ 1133.998942][ T5899] usb 3-1: USB disconnect, device number 78 [ 1134.154169][T30512] fuse: Unknown parameter 'group_i00000000000000000000' [ 1135.250421][ T5926] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1135.329942][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1135.430519][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1135.443538][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1135.456106][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1135.466377][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1135.485706][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1135.508922][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1135.517296][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1135.538585][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.558937][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.568078][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1135.578886][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1135.598411][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1135.636768][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1135.648432][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.705217][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 1135.726225][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1135.755930][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1135.775697][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1135.797269][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1135.804739][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 1135.832736][T30529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.866714][T30529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.894909][ T5926] usb 3-1: GET_CAPABILITIES returned 0 [ 1135.900717][ T5926] usbtmc 3-1:16.0: can't read capabilities [ 1135.973834][T30546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.995317][T30546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.160485][ T5899] usb 2-1: USB disconnect, device number 103 [ 1137.107000][T30561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7927'. [ 1137.271658][T30563] fuse: Unknown parameter 'group_i00000000000000000000' [ 1138.025357][ T43] usb 3-1: USB disconnect, device number 79 [ 1138.601025][ T5899] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1138.760705][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 1138.768707][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.786983][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1138.796521][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1138.808130][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1138.820234][ T5899] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1138.830346][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.858233][ T5899] hub 2-1:1.0: bad descriptor, ignoring hub [ 1138.874809][ T5899] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1138.890529][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 1138.897495][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 1138.912024][ T5899] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1138.928315][ T5899] cdc_wdm 2-1:1.0: Unknown control protocol [ 1139.109473][T30595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.123835][T30595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.240587][ T5899] usb 2-1: USB disconnect, device number 104 [ 1139.426353][T30600] fuse: Unknown parameter 'group_i00000000000000000000' [ 1139.580061][ T5899] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1139.742335][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 1139.762649][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1139.789888][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1139.828336][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1139.858891][ T5899] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.011699][ T5899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1140.021689][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.077870][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7942'. [ 1140.298288][T30598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.329384][T30598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.479069][T30629] binder: 30628:30629 ioctl c0306201 0 returned -14 [ 1141.619946][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1141.769947][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1141.777196][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.787668][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1141.797605][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1141.808951][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1141.820397][ T43] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1141.829536][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.849285][ T43] hub 5-1:1.0: bad descriptor, ignoring hub [ 1141.862965][ T43] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1141.875748][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 1141.882355][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 1141.891778][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1141.899380][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 1142.101313][T30632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.117500][T30632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.211995][ T43] usb 5-1: USB disconnect, device number 4 [ 1142.258424][T30635] fuse: Unknown parameter 'group_id00000000000000000000' [ 1142.454608][ T5899] usb 3-1: usb_control_msg returned -71 [ 1142.471781][ T5899] usbtmc 3-1:16.0: can't read capabilities [ 1142.506137][ T5899] usb 3-1: USB disconnect, device number 80 [ 1143.187002][T30661] binder: 30660:30661 ioctl c0306201 0 returned -14 [ 1143.790582][ T5899] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1143.970276][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 1143.980074][ T5162] Bluetooth: hci3: command 0x0406 tx timeout [ 1144.019507][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1144.048693][T30677] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1144.065630][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1144.094784][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.132771][ T5899] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.151574][ T5899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1144.166160][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.319955][T28058] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1144.334196][T30684] fuse: Unknown parameter 'group_id00000000000000000000' [ 1144.454108][T30670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.481542][T30670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.492830][T28058] usb 5-1: Using ep0 maxpacket: 8 [ 1144.502986][T28058] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.517257][T28058] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1144.532371][T28058] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1144.551292][T28058] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1144.572467][T28058] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1144.586597][T28058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.642269][T28058] hub 5-1:1.0: bad descriptor, ignoring hub [ 1144.656438][T28058] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1144.676276][T28058] cdc_wdm 5-1:1.0: skipping garbage [ 1144.682484][T28058] cdc_wdm 5-1:1.0: skipping garbage [ 1144.700145][T28058] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1144.713122][T28058] cdc_wdm 5-1:1.0: Unknown control protocol [ 1145.262387][T30679] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 1145.323113][T30693] syzkaller1: entered promiscuous mode [ 1145.363382][T30693] syzkaller1: entered allmulticast mode [ 1145.443615][T30679] usb 5-1: device firmware changed [ 1145.464242][ T43] usb 5-1: USB disconnect, device number 5 [ 1145.471567][T30679] cdc_wdm 5-1:1.0: Error autopm - -16 [ 1145.639993][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1145.801196][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1145.812136][ T43] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 1145.827035][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1145.836425][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1145.859065][ T43] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1145.868580][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.898016][ T43] hub 5-1:1.0: bad descriptor, ignoring hub [ 1145.913830][ T43] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1145.933105][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 1145.943361][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 1145.952863][ T43] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1146.019993][T19767] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1146.169913][T19767] usb 2-1: Using ep0 maxpacket: 32 [ 1146.178402][T19767] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.189676][T19767] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.200464][ T43] usb 5-1: USB disconnect, device number 6 [ 1146.207971][T19767] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1146.222158][T19767] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1146.233653][T19767] usb 2-1: Product: syz [ 1146.237903][T19767] usb 2-1: Manufacturer: syz [ 1146.268328][T19767] hub 2-1:4.0: USB hub found [ 1146.464660][T30705] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1146.464660][T30705] program syz.1.7975 not setting count and/or reply_len properly [ 1146.505361][T19767] hub 2-1:4.0: 2 ports detected [ 1146.596389][T30710] binder: 30709:30710 ioctl c0306201 0 returned -14 [ 1147.315606][ T5899] usb 3-1: usb_control_msg returned -71 [ 1147.344208][ T5899] usbtmc 3-1:16.0: can't read capabilities [ 1147.419663][ T5899] usb 3-1: USB disconnect, device number 81 [ 1147.474268][T30721] fuse: Unknown parameter 'group_id00000000000000000000' [ 1147.972350][T19767] usb 2-1: USB disconnect, device number 105 [ 1148.734815][T30750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1149.113638][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 1149.384321][T30765] fuse: Bad value for 'user_id' [ 1149.395308][T30765] fuse: Bad value for 'user_id' [ 1150.213330][ T5926] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1150.380015][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1150.403564][ T5926] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.447260][ T5926] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.467858][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1150.477714][ T5926] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1150.488965][ T5926] usb 5-1: Product: syz [ 1150.495467][ T5926] usb 5-1: Manufacturer: syz [ 1150.537809][ T5926] hub 5-1:4.0: USB hub found [ 1150.746534][T30776] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1150.746534][T30776] program syz.4.7997 not setting count and/or reply_len properly [ 1150.800037][ T5926] hub 5-1:4.0: 2 ports detected [ 1151.717951][T30801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1151.808130][T30801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.074157][T30807] fuse: Bad value for 'user_id' [ 1152.079409][T30807] fuse: Bad value for 'user_id' [ 1152.228425][T28058] usb 5-1: USB disconnect, device number 7 [ 1152.419078][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8012'. [ 1152.880826][T30823] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1152.910281][T30823] File: /dev/nullb0 PID: 30823 Comm: syz.0.8012 [ 1154.224814][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 1154.330452][T30845] netlink: 'syz.1.8020': attribute type 10 has an invalid length. [ 1154.395563][T30845] team0: Device vxcan1 is of different type [ 1154.555347][T30852] fuse: Bad value for 'user_id' [ 1154.560794][T30852] fuse: Bad value for 'user_id' [ 1154.903711][T30867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8026'. [ 1156.018568][T30886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.127709][T30886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.837388][T30895] fuse: Bad value for 'fd' [ 1157.970282][ T5899] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1158.062087][T30921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.126373][T30921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.136535][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 1158.151686][ T5899] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1158.170476][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.181483][ T5899] usb 2-1: config 0 has no interfaces? [ 1158.189655][ T5899] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1158.200797][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.208954][ T5899] usb 2-1: Product: syz [ 1158.215857][ T5899] usb 2-1: Manufacturer: syz [ 1158.221090][ T5899] usb 2-1: SerialNumber: syz [ 1158.237802][ T5899] usb 2-1: config 0 descriptor?? [ 1158.457330][ T5899] usb 2-1: USB disconnect, device number 106 [ 1159.087618][T30937] fuse: Bad value for 'fd' [ 1159.719739][ T29] audit: type=1326 audit(1773751993.070:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1159.777022][ T29] audit: type=1326 audit(1773751993.080:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1159.838182][ T29] audit: type=1326 audit(1773751993.080:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1159.893761][ T29] audit: type=1326 audit(1773751993.080:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1159.977388][ T29] audit: type=1326 audit(1773751993.080:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1160.078076][ T29] audit: type=1326 audit(1773751993.090:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1160.267033][ T29] audit: type=1326 audit(1773751993.090:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1160.368466][ T29] audit: type=1326 audit(1773751993.090:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1160.447661][ T29] audit: type=1326 audit(1773751993.100:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1160.509923][ T29] audit: type=1326 audit(1773751993.100:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30948 comm="syz.4.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1160.609911][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1160.770043][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1160.787373][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1160.809847][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.830160][ T9] usb 5-1: config 0 has no interfaces? [ 1160.838158][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1160.857820][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.876807][ T9] usb 5-1: Product: syz [ 1160.891114][ T9] usb 5-1: Manufacturer: syz [ 1160.902161][ T9] usb 5-1: SerialNumber: syz [ 1160.921092][ T9] usb 5-1: config 0 descriptor?? [ 1161.152829][ T9] usb 5-1: USB disconnect, device number 8 [ 1161.185463][T30980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8064'. [ 1161.347480][T30982] fuse: Bad value for 'fd' [ 1163.209894][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1163.379921][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 1163.398486][ T5899] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1163.398904][T31020] fuse: Bad value for 'fd' [ 1163.419971][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.439880][ T5899] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1163.460689][ T5899] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1163.479928][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.496528][ T5899] usb 5-1: Product: syz [ 1163.505275][ T5899] usb 5-1: Manufacturer: syz [ 1163.511154][ T5899] usb 5-1: SerialNumber: syz [ 1163.523678][ T5899] usb 5-1: config 0 descriptor?? [ 1163.747120][ T5926] usb 5-1: USB disconnect, device number 9 [ 1165.025797][T31055] fuse: Bad value for 'fd' [ 1166.769223][T31094] fuse: Bad value for 'fd' [ 1167.220954][T31111] netlink: 'syz.4.8110': attribute type 4 has an invalid length. [ 1168.857372][T31131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8118'. [ 1168.949271][T31133] fuse: Invalid rootmode [ 1169.226924][T31142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1169.306589][T31142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1170.276283][T31162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8131'. [ 1170.861172][T31185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8141'. [ 1171.457489][T31197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.548424][T31200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1173.017437][T31209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8150'. [ 1174.151436][T31233] netlink: 'syz.1.8159': attribute type 29 has an invalid length. [ 1174.167369][T31233] netlink: 'syz.1.8159': attribute type 30 has an invalid length. [ 1174.315692][T31239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1174.529957][ T43] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1174.767504][T31235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.778244][T31246] binder: 31244:31246 ioctl c0306201 0 returned -14 [ 1174.789235][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1174.801747][T31245] binder: BINDER_SET_CONTEXT_MGR already set [ 1174.813108][T31245] binder: 31244:31245 ioctl 4018620d 200000000100 returned -16 [ 1174.813384][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1174.834713][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1174.860272][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.877401][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.918262][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1174.941076][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.186500][ T43] usb 3-1: GET_CAPABILITIES returned 0 [ 1175.200402][ T43] usbtmc 3-1:16.0: can't read capabilities [ 1175.999566][T31260] netlink: 'syz.1.8169': attribute type 29 has an invalid length. [ 1176.008360][T31260] netlink: 'syz.1.8169': attribute type 30 has an invalid length. [ 1176.089565][T31262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8170'. [ 1176.420468][T28629] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1176.541369][T31268] binder: 31267:31268 ioctl c0306201 0 returned -14 [ 1176.590038][T28629] usb 2-1: Using ep0 maxpacket: 32 [ 1176.597271][T28629] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.615700][T28629] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.635020][T28629] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1176.648558][T28629] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1176.663016][T28629] usb 2-1: Product: syz [ 1176.670199][T28629] usb 2-1: Manufacturer: syz [ 1176.690899][T28629] hub 2-1:4.0: USB hub found [ 1176.890344][T31264] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1176.890344][T31264] program syz.1.8171 not setting count and/or reply_len properly [ 1176.915833][T28629] hub 2-1:4.0: 2 ports detected [ 1177.746959][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.755878][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.026703][ T5926] usb 3-1: USB disconnect, device number 82 [ 1178.323645][T19767] usb 2-1: USB disconnect, device number 107 [ 1178.345954][T31273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.430931][T31296] binder: 31295:31296 ioctl c0306201 0 returned -14 [ 1179.836466][ T5162] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.840723][T28629] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1180.051599][T28629] usb 2-1: Using ep0 maxpacket: 8 [ 1180.084782][T28629] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1180.119064][T28629] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1180.148642][T28629] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1180.174468][T28629] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.208327][T28629] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1180.250146][T28629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.525795][T28629] usb 2-1: GET_CAPABILITIES returned 0 [ 1180.546903][T28629] usbtmc 2-1:16.0: can't read capabilities [ 1180.579980][ T43] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1180.769948][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1180.772739][T31309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.781041][ T43] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.802634][ T43] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.818631][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1180.829132][ T43] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1180.840034][ T43] usb 3-1: Product: syz [ 1180.845738][ T43] usb 3-1: Manufacturer: syz [ 1180.858462][ T43] hub 3-1:4.0: USB hub found [ 1181.061016][T31304] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1181.061016][T31304] program syz.2.8186 not setting count and/or reply_len properly [ 1181.116972][ T43] hub 3-1:4.0: 2 ports detected [ 1182.535163][ T43] usb 3-1: USB disconnect, device number 83 [ 1182.777579][ T9] usb 2-1: USB disconnect, device number 108 [ 1183.329914][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1183.502416][ T9] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1183.514046][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1183.527458][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1183.538989][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1183.549253][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1183.562608][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1183.571872][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.583715][ T9] usb 2-1: config 0 descriptor?? [ 1184.033535][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.055743][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.076326][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.084143][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.098248][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.113393][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.124398][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.133163][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.140813][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.148371][ T9] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1184.177225][ T9] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1184.314007][ T9] usb 2-1: USB disconnect, device number 109 [ 1185.095639][T31367] fuse: Unknown parameter 'use00000000000000000000' [ 1187.274823][T31411] fuse: Unknown parameter 'use00000000000000000000' [ 1188.880826][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1189.039923][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1189.055247][ T43] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.079535][ T43] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.123058][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1189.225865][ T43] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1189.253867][ T43] usb 5-1: Product: syz [ 1189.268802][ T43] usb 5-1: Manufacturer: syz [ 1189.301903][ T43] hub 5-1:4.0: USB hub found [ 1189.501531][T31443] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1189.501531][T31443] program syz.4.8236 not setting count and/or reply_len properly [ 1189.588980][ T43] hub 5-1:4.0: 2 ports detected [ 1189.884139][T31461] fuse: Unknown parameter 'user_i00000000000000000000' [ 1190.421861][ T43] usb 5-1: USB disconnect, device number 10 [ 1190.850752][T31476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.924124][T31476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.316995][T31491] fuse: Unknown parameter 'user_i00000000000000000000' [ 1193.290911][T31524] fuse: Unknown parameter 'user_i00000000000000000000' [ 1193.601427][T31528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.683580][T31528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.039868][T28629] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1195.202722][T28629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.231713][T28629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.255292][T28629] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1195.275562][T28629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.304719][T28629] usb 3-1: config 0 descriptor?? [ 1195.324737][T31566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.476031][T31566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.745933][T28629] hid_parser_main: 3 callbacks suppressed [ 1195.745960][T28629] cp2112 0003:10C4:EA90.0041: unknown main item tag 0x0 [ 1195.804069][T28629] cp2112 0003:10C4:EA90.0041: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1195.936470][T28629] cp2112 0003:10C4:EA90.0041: error requesting version [ 1195.974708][T28629] cp2112 0003:10C4:EA90.0041: probe with driver cp2112 failed with error -71 [ 1196.019982][T28629] usb 3-1: USB disconnect, device number 84 [ 1196.810860][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1196.973108][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1196.981393][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.992579][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.004455][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1197.014092][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1197.024113][ T24] usb 3-1: Product: syz [ 1197.028480][ T24] usb 3-1: Manufacturer: syz [ 1197.045241][ T24] hub 3-1:4.0: USB hub found [ 1197.347897][T31575] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1197.347897][T31575] program syz.2.8287 not setting count and/or reply_len properly [ 1197.371144][ T24] hub 3-1:4.0: 2 ports detected [ 1198.260902][ T24] usb 3-1: USB disconnect, device number 85 [ 1200.032486][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1200.032514][ T29] audit: type=1326 audit(1773752033.390:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.060310][ T43] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1200.071135][ T29] audit: type=1326 audit(1773752033.390:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.095497][ T29] audit: type=1326 audit(1773752033.420:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.119119][ T29] audit: type=1326 audit(1773752033.420:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.142935][ T29] audit: type=1326 audit(1773752033.420:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.165931][ T29] audit: type=1326 audit(1773752033.430:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.189612][ T29] audit: type=1326 audit(1773752033.430:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.232556][ T29] audit: type=1326 audit(1773752033.430:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.232583][ T43] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1200.255603][ T29] audit: type=1326 audit(1773752033.440:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.298155][ T29] audit: type=1326 audit(1773752033.430:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31629 comm="syz.4.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832799c799 code=0x7ffc0000 [ 1200.327080][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1200.361776][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1200.388221][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1200.404055][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1200.417700][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1200.427158][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.439705][ T43] usb 1-1: config 0 descriptor?? [ 1200.620927][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1200.789944][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1200.804401][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.825894][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.852874][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1200.866311][ T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1200.886833][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1200.897481][ T24] usb 2-1: Product: syz [ 1200.906460][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1200.914109][ T24] usb 2-1: Manufacturer: syz [ 1200.934735][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1200.957315][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1200.969244][ T24] hub 2-1:4.0: USB hub found [ 1200.980152][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1200.996979][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1201.020185][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1201.029893][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1201.047577][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1201.061740][ T43] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1201.104104][ T43] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1201.141179][ T43] usb 1-1: USB disconnect, device number 124 [ 1201.158975][T31635] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 1201.158975][T31635] program syz.1.8310 not setting count and/or reply_len properly [ 1201.222963][ T24] hub 2-1:4.0: 2 ports detected [ 1201.255355][T31641] fido_id[31641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1201.459884][T28629] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1201.617144][T28629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.645569][T28629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.678692][T28629] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1201.688885][T28629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.734935][T28629] usb 5-1: config 0 descriptor?? [ 1202.100543][ T43] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1202.184408][T28629] cp2112 0003:10C4:EA90.0043: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1202.272339][ T43] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1202.291835][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1202.316044][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1202.328761][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.350057][ T43] usb 1-1: Product: 뭺ṷ鶒頙潚밿鮷蛏ᾓগ彇圊ऎḑ℔ﰀ緽쟳▂ௌ櫓菇鹓셨횵ϕ㼷鸤杂迧㔚⬍⪭虼窕鮽叕డ厶蔿這匘᡾楃గꭐˉ㡌ⶂ鿏ﳐ堤謁ᖐꩮ㠮ʹ끴헧⿝䨝锪暸鿨䆻쪸遘퇦≴ [ 1202.374123][ T43] usb 1-1: Manufacturer: 鼰賍‎脙횳狝ᐉ镲⼣㳞㴛蒛宗ඡ堌즱椩貚莤흳᛻簉섽馃?頮䥌댗䷞꫾녢涧㑶俁嚆ज喛ね禑蒱樃ᵗ육⧖䏜寷ꏷ뭣泗膚㜹ܹ圮⢩઺燇謍鳜Ｎ맼蒆唥鏍最꿙嫧튖ࠤႇ긐͙畬㢡ŝ࿸눵羭ꎗ盙ᘈ롒㉲霰䰪斯鶬眖ᢤ⿊靖湪볂橃늼쓢扚 [ 1202.383934][T28629] cp2112 0003:10C4:EA90.0043: error requesting version [ 1202.414057][ T43] usb 1-1: SerialNumber: 䪯ꘈ⃩鲃ᏻ湖⥪쥖跂ꚶ塰㲧譧⍧톱틯澐畒嬢욪梳踴閲࿠襑砒벖恷ᬆ픫沼恶嶖㓒贳硋菪햣⽾⩏䳅蹫쫳푖릉裂ᳲٔᯚⱓ᪶彽ᬡᢕ☍ꜘ露싎䟻⣻吟䣦Ȼጴ껑슧⥆缐䳮㖼ﱖ媽᠓鯒㫃즋ﮇᇻ뭏㶰濙覦犭惧첔௮ﮛꍪ쩻⺏仟 [ 1202.453599][T28629] cp2112 0003:10C4:EA90.0043: probe with driver cp2112 failed with error -71 [ 1202.461630][ T24] hub 2-1:4.0: activate --> -90 [ 1202.498933][T28629] usb 5-1: USB disconnect, device number 11 [ 1202.507301][T31654] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1202.755413][T31654] kAFS: unable to lookup cell '(,cL' [ 1202.859621][ T24] usb 2-1-port2: cannot warm reset (err = -71) [ 1202.873810][T19767] usb 2-1: USB disconnect, device number 110 [ 1203.086268][T31661] kvm: pic: non byte write [ 1204.826393][ T43] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1204.871031][T31693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.902256][ T43] usb 1-1: USB disconnect, device number 125 [ 1204.939594][T31693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.854832][T31728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4008640512 (8017281024 ns) > initial count (10 ns). Using initial count to start timer. [ 1206.966433][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1207.067653][T31731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1207.869916][ T43] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1208.036502][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.056944][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.084841][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1208.094755][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.123562][ T43] usb 3-1: config 0 descriptor?? [ 1208.567146][ T43] hid_parser_main: 4 callbacks suppressed [ 1208.567165][ T43] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 1208.595977][T31767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.608856][ T43] cp2112 0003:10C4:EA90.0044: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1208.688895][T31767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.764238][ T43] cp2112 0003:10C4:EA90.0044: error requesting version [ 1208.787215][ T43] cp2112 0003:10C4:EA90.0044: probe with driver cp2112 failed with error -71 [ 1208.810952][ T43] usb 3-1: USB disconnect, device number 86 [ 1209.711185][T31778] F2FS-fs: Conflicting test_dummy_encryption options [ 1210.116796][T31792] tap0: tun_chr_ioctl cmd 2148553947 [ 1210.249904][ T9] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1210.423791][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1210.450037][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1210.469955][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1210.492545][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1210.514805][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1210.542803][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1210.570220][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.590917][ T9] usb 1-1: config 0 descriptor?? [ 1211.014682][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1211.033342][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1211.056887][ T9] usb 1-1: USB disconnect, device number 126 [ 1211.701241][T31814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.787992][T31814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.190208][T28629] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1213.382435][T28629] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1213.395697][T28629] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1213.416166][T28629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1213.428187][T28629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1213.438411][T28629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1213.465321][T28629] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1213.470142][ T43] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1213.483145][T28629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.503766][T28629] usb 3-1: config 0 descriptor?? [ 1213.652011][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.665557][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.675999][ T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1213.686076][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.711198][ T43] usb 2-1: config 0 descriptor?? [ 1213.923937][T28629] usbhid 3-1:0.0: can't add hid device: -71 [ 1213.934833][T28629] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1213.952252][T28629] usb 3-1: USB disconnect, device number 87 [ 1214.140459][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1214.152018][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1214.190338][ T43] usb 2-1: USB disconnect, device number 111 [ 1214.338580][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1214.338608][ T29] audit: type=1326 audit(1773752047.690:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.373258][ T29] audit: type=1326 audit(1773752047.690:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.396605][ T29] audit: type=1326 audit(1773752047.730:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.421383][ T29] audit: type=1326 audit(1773752047.730:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.481603][ T29] audit: type=1326 audit(1773752047.730:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.528280][ T29] audit: type=1326 audit(1773752047.730:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.551790][ T29] audit: type=1326 audit(1773752047.730:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.578380][ T29] audit: type=1326 audit(1773752047.730:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.601380][ T29] audit: type=1326 audit(1773752047.730:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.624796][ T29] audit: type=1326 audit(1773752047.730:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31852 comm="syz.0.8384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1214.690935][T31859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.772695][T31859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.097304][T31869] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1215.188089][T31869] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1215.200029][T31869] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1216.180122][T28629] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1216.355056][T28629] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1216.363826][T28629] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1216.382813][T28629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1216.400108][T28629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1216.424024][T28629] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1216.458230][T28629] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1216.478175][T28629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.490824][T28629] usb 5-1: config 0 descriptor?? [ 1216.580059][ T5899] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1216.743780][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.772383][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.797921][ T5899] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1216.821571][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.848067][ T5899] usb 3-1: config 0 descriptor?? [ 1216.923920][T28629] usbhid 5-1:0.0: can't add hid device: -71 [ 1216.940145][T28629] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1216.970588][T28629] usb 5-1: USB disconnect, device number 12 [ 1217.275773][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 1217.294377][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1217.323130][ T5899] usb 3-1: USB disconnect, device number 88 [ 1217.620699][T31904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.688429][T31904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1219.340288][ T43] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1219.504841][ T43] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1219.513811][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1219.535695][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1219.554067][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1219.564473][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1219.585716][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1219.597088][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.623229][ T43] usb 2-1: config 0 descriptor?? [ 1220.045303][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1220.067133][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1220.119397][ T43] usb 2-1: USB disconnect, device number 112 [ 1220.685991][T31960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1220.754520][T31960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.359956][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1221.540036][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1221.555654][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.584118][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.609368][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1221.625317][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1221.647438][ T24] usb 3-1: Product: syz [ 1221.662694][ T24] usb 3-1: Manufacturer: syz [ 1221.696075][ T24] hub 3-1:4.0: USB hub found [ 1221.907408][ T24] hub 3-1:4.0: 2 ports detected [ 1222.310105][T19767] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1222.506856][T19767] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1222.517023][T19767] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1222.544622][T19767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1222.560023][T19767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1222.570199][T19767] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1222.590727][T19767] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.600214][T19767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.627146][T19767] usb 2-1: config 0 descriptor?? [ 1222.670086][ T5926] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1222.830223][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 1222.837531][ T5926] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.849540][ T5926] usb 1-1: config 0 has no interface number 0 [ 1222.860042][ T5926] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1222.869415][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.877952][ T5926] usb 1-1: Product: syz [ 1222.882509][ T5926] usb 1-1: Manufacturer: syz [ 1222.887208][ T5926] usb 1-1: SerialNumber: syz [ 1222.904148][ T5926] usb 1-1: config 0 descriptor?? [ 1222.919478][ T5926] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1222.932618][ T5926] usb 1-1: selecting invalid altsetting 1 [ 1222.938464][ T5926] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1222.954164][ T5926] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1222.967128][ T5926] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1222.977793][ T5926] usb 1-1: media controller created [ 1223.007160][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1223.059550][T19767] usbhid 2-1:0.0: can't add hid device: -71 [ 1223.072196][T19767] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1223.095592][T19767] usb 2-1: USB disconnect, device number 113 [ 1223.133166][ T24] hub 3-1:4.0: activate --> -90 [ 1223.536356][ T24] usb 3-1-port2: cannot warm reset (err = -71) [ 1223.543045][ T24] usb 3-1-port2: cannot warm reset (err = -71) [ 1223.553896][ T24] usb 3-1-port2: Cannot enable. Maybe the USB cable is bad? [ 1223.563050][T28058] usb 3-1: USB disconnect, device number 89 [ 1223.949987][ T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1224.130844][T31999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.140717][ T5926] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1224.143155][ T5926] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1224.160895][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.190320][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.200428][ T5926] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1224.207912][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1224.227734][T31999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.229443][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.276599][ T24] usb 2-1: config 0 descriptor?? [ 1224.307363][ T5926] usb 1-1: USB disconnect, device number 127 [ 1224.709528][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1224.731839][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1224.753747][ T24] usb 2-1: USB disconnect, device number 114 [ 1224.779095][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1224.779115][ T29] audit: type=1326 audit(1773752058.130:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1224.815575][ T29] audit: type=1326 audit(1773752058.160:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1224.877861][ T29] audit: type=1326 audit(1773752058.170:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1224.904212][ T29] audit: type=1326 audit(1773752058.170:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1224.932679][ T29] audit: type=1326 audit(1773752058.170:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1225.016793][ T29] audit: type=1326 audit(1773752058.190:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1225.104118][ T29] audit: type=1326 audit(1773752058.190:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1225.157193][ T29] audit: type=1326 audit(1773752058.190:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.0.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd519c799 code=0x7ffc0000 [ 1225.319865][T28058] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1225.495104][T28058] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1225.506431][T28058] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.526694][T28058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1225.545859][T28058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1225.563419][T28058] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1225.586114][T28058] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1225.605548][T28058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.635960][T28058] usb 1-1: config 0 descriptor?? [ 1226.058137][T28058] usbhid 1-1:0.0: can't add hid device: -71 [ 1226.077665][T28058] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1226.105298][T28058] usb 1-1: USB disconnect, device number 2 [ 1226.692738][T32035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.765367][T32035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1230.349908][T28058] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1230.499845][T28058] usb 3-1: Using ep0 maxpacket: 32 [ 1230.506922][T28058] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.518616][T28058] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.531928][T28058] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1230.542902][T28058] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1230.551851][T28058] usb 3-1: Product: syz [ 1230.556438][T28058] usb 3-1: Manufacturer: syz [ 1230.570835][T28058] hub 3-1:4.0: USB hub found [ 1230.773472][T28058] hub 3-1:4.0: 2 ports detected [ 1231.589291][T32110] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8471'. [ 1231.984235][T28058] hub 3-1:4.0: activate --> -90 [ 1232.090136][T32130] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 1232.102279][T32130] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 1232.110770][T32130] CPU: 1 UID: 0 PID: 32130 Comm: syz.1.8477 Not tainted syzkaller #0 PREEMPT(full) [ 1232.120272][T32130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1232.130384][T32130] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 1232.135659][T32130] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 15 f7 e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 f9 f6 e4 fe 49 81 3c 24 00 2b 29 8c [ 1232.155312][T32130] RSP: 0018:ffffc9000338fa68 EFLAGS: 00010206 [ 1232.161504][T32130] RAX: 0000000000000009 RBX: ffff88805ef96600 RCX: 0000000000080000 [ 1232.169508][T32130] RDX: ffffc900160d6000 RSI: 0000000000000669 RDI: 000000000000066a [ 1232.177515][T32130] RBP: dffffc0000000000 R08: ffffffff824b518a R09: ffffffff8eb5d6a0 [ 1232.185524][T32130] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 1232.193532][T32130] R13: 0000000000000002 R14: 0000000000000000 R15: ffff8880260f4500 [ 1232.201538][T32130] FS: 00007fa92f78a6c0(0000) GS:ffff888124ee2000(0000) knlGS:0000000000000000 [ 1232.210498][T32130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1232.217105][T32130] CR2: 0000200000003000 CR3: 0000000050bbe000 CR4: 00000000003526f0 [ 1232.225112][T32130] Call Trace: [ 1232.228476][T32130] [ 1232.231493][T32130] fuse_parse_param+0x69b/0xa80 [ 1232.236411][T32130] ? __pfx_fuse_parse_param+0x10/0x10 [ 1232.241865][T32130] ? static_key_count+0x41/0x70 [ 1232.246855][T32130] vfs_parse_fs_param+0x1a9/0x420 [ 1232.251945][T32130] vfs_parse_monolithic_sep+0x283/0x360 [ 1232.257527][T32130] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1232.263295][T32130] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 1232.269402][T32130] ? alloc_fs_context+0x9e9/0xd50 [ 1232.274467][T32130] do_new_mount+0x304/0xd30 [ 1232.278998][T32130] ? apparmor_capable+0x126/0x170 [ 1232.284134][T32130] ? security_capable+0x7e/0x2c0 [ 1232.289161][T32130] ? __pfx_do_new_mount+0x10/0x10 [ 1232.294300][T32130] ? ns_capable+0x89/0xe0 [ 1232.298662][T32130] ? path_mount+0x690/0x10e0 [ 1232.303369][T32130] ? user_path_at+0xd4/0x160 [ 1232.308000][T32130] __se_sys_mount+0x31d/0x420 [ 1232.312710][T32130] ? __pfx___se_sys_mount+0x10/0x10 [ 1232.317934][T32130] ? __x64_sys_mount+0x20/0xc0 [ 1232.322726][T32130] do_syscall_64+0x14d/0xf80 [ 1232.327333][T32130] ? trace_irq_disable+0x3b/0x150 [ 1232.332386][T32130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.338470][T32130] ? clear_bhb_loop+0x40/0x90 [ 1232.343186][T32130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.349127][T32130] RIP: 0033:0x7fa92e99c799 [ 1232.353603][T32130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.373275][T32130] RSP: 002b:00007fa92f78a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1232.381723][T32130] RAX: ffffffffffffffda RBX: 00007fa92ec15fa0 RCX: 00007fa92e99c799 [ 1232.389725][T32130] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1232.397728][T32130] RBP: 00007fa92ea32c99 R08: 0000200000002140 R09: 0000000000000000 [ 1232.405735][T32130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1232.413847][T32130] R13: 00007fa92ec16038 R14: 00007fa92ec15fa0 R15: 00007ffecbf4ecc8 [ 1232.421857][T32130] [ 1232.424914][T32130] Modules linked in: [ 1232.429932][T32130] ---[ end trace 0000000000000000 ]--- [ 1232.474525][T32130] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 1232.487728][T32130] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 15 f7 e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 f9 f6 e4 fe 49 81 3c 24 00 2b 29 8c [ 1232.535790][T32130] RSP: 0018:ffffc9000338fa68 EFLAGS: 00010206 [ 1232.555564][T32130] RAX: 0000000000000009 RBX: ffff88805ef96600 RCX: 0000000000080000 [ 1232.572073][T32130] RDX: ffffc900160d6000 RSI: 0000000000000669 RDI: 000000000000066a [ 1232.607473][T32130] RBP: dffffc0000000000 R08: ffffffff824b518a R09: ffffffff8eb5d6a0 [ 1232.632986][T32130] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 1232.642465][T28058] usb 3-1-port2: cannot warm reset (err = -71) [ 1232.648873][T28629] usb 3-1: USB disconnect, device number 90 [ 1232.680161][T32130] R13: 0000000000000002 R14: 0000000000000000 R15: ffff8880260f4500 [ 1232.701912][T32130] FS: 00007fa92f78a6c0(0000) GS:ffff888124de2000(0000) knlGS:0000000000000000 [ 1232.722585][T32130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1232.735235][T32130] CR2: 00002000000b3030 CR3: 0000000050bbe000 CR4: 00000000003526f0 [ 1232.752585][T32130] Kernel panic - not syncing: Fatal exception [ 1232.759340][T32130] Kernel Offset: disabled [ 1232.763707][T32130] Rebooting in 86400 seconds..