last executing test programs: 7.306108802s ago: executing program 0 (id=1196): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) socket$kcm(0x2, 0xa, 0x2) r0 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0x2e, 0x0, 0x0) 7.159262342s ago: executing program 0 (id=1197): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r3, 0x705, 0x70bd23, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000000b40), 0x1, 0x0) close(r0) 6.784963475s ago: executing program 1 (id=1198): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) 6.130410321s ago: executing program 3 (id=1201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="08000800000006000000140000004709121200670000692f907864010101ac1414aa89078c0a01010001042188"], 0x1220) 5.809591812s ago: executing program 1 (id=1202): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5e) 5.793347857s ago: executing program 3 (id=1203): lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.669949087s ago: executing program 1 (id=1204): lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.267508154s ago: executing program 4 (id=1205): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9}) 5.223351053s ago: executing program 4 (id=1206): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 5.219158456s ago: executing program 2 (id=1207): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) socket$kcm(0x2, 0xa, 0x2) r0 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0x2e, 0x0, 0x0) 4.715340908s ago: executing program 2 (id=1208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r2 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.591484335s ago: executing program 1 (id=1209): migrate_pages(0x0, 0x7, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt(r0, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3}) 2.866184263s ago: executing program 4 (id=1210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1d, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfab00000000000007"], 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.739858737s ago: executing program 0 (id=1211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001100)={0x6c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe53}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa75e}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x5bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x5ad, 0x3, "271a3b40572754e80f26bc161a51c40f7bc3d089c8b64fc1cd19428bdb8ec161477faa5b91a045087a0467e5d34efcd05007a24c2aed077d2997ce6e519a4907a49819cff65773bea28fe6445c532c18bc888b2a1a6ccd3b3613a6bfd544bc53db5c2f342500e8ff6c3eb409986b2b78a5ad79ee234afe44ab416590b1f139bf7c95fe45d7668c8c598b99eb6058abe3176f8f81106a15cacb90c5668787d13bb9055f1a4603a6777e0da2c6a88b65369bed7578ea3e805eed38724a5daca3694c0461203f8b1cfff40a92cfabda7125ae4efbddf154b153414ac7c17095033bdfc98d384063b99f0a97856726c5d630779918bdad734c2e4f96e710727ce3add0a4cd8f6786a4d94182814048e7adb55189783ef37be2e4c2814234133b254c42b92d79d3274ce6ef314d8caa98fc3f1a11364206f7da08bb0efc30d195547078d70fabd7efcfdec9afe8d88295880db5dd0d1dd96a7ef53af411f712e769dc1b41e8e65c8818a5f9526f60a3e9f72444a6678c730d80c6805c39e19cfde0ad13c3c50913692a8d9c13ba87216be394dcd7419c32ac9e4806f60e835b1f8c707c0670cf2f30f222abd80f0d119f9437729427583f8cb481ea2ab09a798d8fcf6f9874e4763b3c8115453fcce6373b42b272d514786f77876ee254d3c970f6aa17be1f5a3ee88ed99f2bd6790e6def2dd93787048081e9d62c654524be879d0f8b61198d21fa24d57065685cd33f1274f46f3d84c605dbc92342a9b03dcbae3254cda8924fcbae78231291101f21f72d989f9a19fee9ef24f5f2c7aba1c779048852994a07b9a60b89cd15b6792fa7dd9da2238267ed6dc1686cf0214d6813b028f11d64452e528e1bf70a2b48d7f6e4a0ebcab09cab49e5be3bdd4aee654a3fa4ef02f92cb916facae8420d2f98cd31b4b60ff0f71be753256a810c216b73872cf5a637f3a66a40d8ec3a6bd7873849f807308a3cfc6c29355297e552cdf36f93a1c84d59288c21c09e344805a405357ce887982f7580e8c27bd6f1be1ff7b7d7b1b7ac7a04fbd11308ceb52b74530e19a73f30c554b3596a65925d01dfa9a8323951cd0726f968e4cf2cedb024be39fd01da04cca158120de2b0c60876a85f78558f7d10e205d0d4b512548baef05d8150aa99e6011ef0c3ebd402a6225cd7f625d8db7db789f9bc7a59ee7077f8f09da01046be54e7f5a271de88335ddc77816a328a090cc7ae43e9ad3808fb1d653aa12f10e0271315105d2b1d666e24399ecd659ed7e89239170cc887e2eba46550da3108f006c2d209c71913a384094508c361e6dfc6f9b1030d4304a1aa7928643a1380a2729ba534e9e44d524064538ae1ee8c1255a2657ba4b23bce4af23816fb2d3c5bd9ee0c7dfa80d045e65119f841f29a025a021dfb7d02f85ca1b4d38f194de959194d01c7228b29d4b8e4d01489766e61b7765f327973a3fd96161b3c5a919159bca8e3939469a67b40f42ed272e6504008226e584daf97fe44b95bd14e6a07ec6f6973b22988dbc48159081ba1abe98275dabe1b9965e26f964f360e7e29595c678eb65f019f18760e878352b72e3140e229585b0bcdb1c846d2d0e7bfeff890e4d5ebf1ec9aea04b72e7232e3337fdb8ea03628a26e4a3e5d9cbdd939e66388c60c882bdeb7694f5cef2cb8e92539c296114b9f1f7e92434a61a6e82b46c9d44c87621df42e916db55ba219829f58aff401b79c3f142d254925043f54928a385c3a60a158efa1a01989962718f45af571d4b9f5bf07b069131806cf0731eab5eaae28887d892363d029e1c83650408fc35a26ee018d63b10c01ddd84414b36bcde0acb1c95fc671f006aabd04a7eabae5dd6982c7dc6f4a80757016590a15c5c1f0e5e92e3e6db7f5fc900c88fbe50ce8597d7c80deb450189072af5bd2703d35cf4524adf667c2193e826f604b317f56cf72858cef503d354784852cbbfad398f5373a0cd1d52870a54a26763cffda95b4aaa003412599f414afc3dc7d1a81fa7e6422fca4156d9b3492e3b114631b11c0c902"}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x57, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.526207063s ago: executing program 0 (id=1212): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) 2.455132277s ago: executing program 2 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="08000800000006000000140000004709121200670000692f907864010101ac1414aa89078c0a01010001042188"], 0x1220) 2.275855229s ago: executing program 4 (id=1214): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000ac0)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) 2.029140123s ago: executing program 2 (id=1215): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.998473926s ago: executing program 3 (id=1216): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.882640122s ago: executing program 2 (id=1217): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143d02) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) 1.66838218s ago: executing program 3 (id=1218): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) socket$kcm(0x2, 0xa, 0x2) r0 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0x2e, 0x0, 0x0) 1.559281276s ago: executing program 3 (id=1219): lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1.507090463s ago: executing program 0 (id=1220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.411299743s ago: executing program 0 (id=1221): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) dup2(r6, r2) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x20, 0x2, 0x53, {0x53, 0x8, "79558c60f9a5198ef112504bf1a5867562d66605c82b674d0624ba3985f504205ef3f7505cf3e6522f1c3b3d59a8458416e46043f666f3189ed9989a3f1bba0e8767c259180ed621b28a19856107535c92"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000340)={0x20, 0xf, 0xab, "850c8bd6c9d577f79ced10ed4e9a3f93f92a1186a8d32df0afb6a8c01948ded1eca2846f1779bbdd58936ebdac386d5e7584006a6c5afe222f2ce118d53b4f148380af96afeaaf7b248d21e37d76c9a083f8f5f10843ed77fbc26609f090eb5002542e2910acf4ff36dc996f8d890194a13e2392182d3a08321fe211e26b378b82d0ec2c321e171716d6b6776d81504c58693879a931dfdeac4e87c086b5d4b93d91adf0d566822d130a3e"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xbf}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x8, 0x7fff, 0x529, 0x7ff, 0x4, 0x0, 0x9, 0xffff8001, 0x8001, 0x1, 0x3}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, r9, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x6, 0x0) 1.271220131s ago: executing program 4 (id=1222): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001e00)=""/158, 0x9e}], 0x2}, 0x2}], 0x1, 0x0, 0x0) 1.270774099s ago: executing program 1 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4109, 0x100d}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/90, 0x5a}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 210.547919ms ago: executing program 4 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r1, 0x431, 0x70bd2b, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c4) 183.480145ms ago: executing program 1 (id=1225): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x9, 0x7, 0x8, 0x6}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000045000000040000000fa2"], 0x45}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x20008800) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 107.36099ms ago: executing program 3 (id=1226): lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 0s ago: executing program 2 (id=1227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r2 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): iptor's value: 66 [ 194.794462][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 194.818365][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 194.893236][ T5921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.939594][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.973833][ T5921] usb 4-1: Product: syz [ 194.990164][ T5921] usb 4-1: Manufacturer: syz [ 195.057922][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 195.071930][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 195.135358][ T5921] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 195.168125][ T5921] cdc_wdm 4-1:1.0: Unknown control protocol [ 195.310467][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.317108][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.323403][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.330002][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.336908][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.343511][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.349972][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.356581][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.362886][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.369485][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.375738][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.382360][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.388694][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.395297][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.401596][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.408198][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.414568][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.421181][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.435483][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 195.442168][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 195.459179][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 195.467953][ T5921] usb 4-1: USB disconnect, device number 10 [ 195.606197][ T1212] usb 1-1: USB disconnect, device number 16 [ 195.845280][ T44] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 196.008661][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.032436][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.065323][ T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 196.079530][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.102480][ T44] usb 3-1: SerialNumber: syz [ 196.131843][ T44] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 196.173102][ T44] usb-storage 3-1:1.0: USB Mass Storage device detected [ 196.290417][ T44] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 196.502977][ T44] scsi host1: usb-storage 3-1:1.0 [ 197.595270][ T44] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 197.879982][ T7439] netlink: 'syz.1.460': attribute type 4 has an invalid length. [ 197.889246][ T44] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 197.903206][ T7440] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 197.916025][ T7439] netlink: 'syz.1.460': attribute type 16 has an invalid length. [ 197.925050][ T44] usb 4-1: config 0 has no interface number 0 [ 197.945700][ T44] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 197.968602][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.970361][ T7439] netlink: 'syz.1.460': attribute type 17 has an invalid length. [ 197.995024][ T44] usb 4-1: Product: syz [ 197.999365][ T44] usb 4-1: Manufacturer: syz [ 198.004244][ T44] usb 4-1: SerialNumber: syz [ 198.026293][ T44] usb 4-1: config 0 descriptor?? [ 198.040067][ T44] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22 [ 198.710973][ T44] usb 4-1: USB disconnect, device number 11 [ 199.471334][ T7458] netlink: 'syz.3.465': attribute type 2 has an invalid length. [ 199.544875][ T7458] U±: entered promiscuous mode [ 199.631377][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.637844][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.705217][ T1212] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.910099][ T1212] usb 5-1: config 0 has no interfaces? [ 199.944712][ T1212] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.035561][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.043716][ T1212] usb 5-1: Product: syz [ 200.088318][ T1212] usb 5-1: Manufacturer: syz [ 200.092990][ T1212] usb 5-1: SerialNumber: syz [ 200.144823][ T1212] usb 5-1: config 0 descriptor?? [ 200.156916][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'. [ 200.253863][ T44] usb 3-1: USB disconnect, device number 9 [ 201.246816][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 201.349967][ T7481] 8021q: adding VLAN 0 to HW filter on device team1 [ 201.912827][ T7488] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 202.386946][ T44] usb 5-1: USB disconnect, device number 5 [ 203.115484][ T979] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 203.297397][ T979] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 203.322230][ T979] usb 5-1: config 0 has no interface number 0 [ 203.346186][ T979] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 203.361997][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.375251][ T5844] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.398485][ T979] usb 5-1: Product: syz [ 203.413115][ T979] usb 5-1: Manufacturer: syz [ 203.432980][ T979] usb 5-1: SerialNumber: syz [ 203.447164][ T979] usb 5-1: config 0 descriptor?? [ 203.457953][ T979] qmi_wwan 5-1:0.207: probe with driver qmi_wwan failed with error -22 [ 203.607200][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.637528][ T5844] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 203.637569][ T5844] usb 3-1: can't read configurations, error -71 [ 203.728118][ T979] usb 5-1: USB disconnect, device number 6 [ 204.583824][ T5937] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 204.823769][ T5937] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 204.852560][ T5937] usb 2-1: config 0 has no interface number 0 [ 204.880248][ T5937] usb 2-1: config 0 interface 29 has no altsetting 0 [ 205.134432][ T5937] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 205.245131][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.535859][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.488'. [ 206.071102][ T5937] usb 2-1: Product: syz [ 206.155235][ T5937] usb 2-1: Manufacturer: syz [ 206.167413][ T5937] usb 2-1: SerialNumber: syz [ 206.207287][ T5937] usb 2-1: config 0 descriptor?? [ 206.472590][ T5937] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 206.680974][ T7544] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 206.845296][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 207.614655][ T44] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 207.645047][ T979] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.645125][ T44] usb 3-1: config 0 has no interface number 0 [ 207.826211][ T44] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 207.827501][ T979] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.845331][ T979] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.875055][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.891181][ T44] usb 3-1: config 0 descriptor?? [ 207.931238][ T44] gspca_main: spca561-2.14.0 probing abcd:cdee [ 207.960805][ T979] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.983872][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 208.063399][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 208.097301][ T979] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.113087][ T979] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.159258][ T979] usb 1-1: Product: syz [ 208.163504][ T979] usb 1-1: Manufacturer: syz [ 208.241114][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 208.263497][ T44] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 208.295336][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 208.297128][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.336575][ T979] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 208.368577][ T979] cdc_wdm 1-1:1.0: Unknown control protocol [ 208.389955][ T44] usb 3-1: MIDIStreaming interface descriptor not found [ 208.462912][ T5937] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 208.529601][ T5937] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 208.544568][ T979] usb 1-1: USB disconnect, device number 17 [ 208.555551][ T44] usb 3-1: USB disconnect, device number 12 [ 208.741221][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.824619][ T5937] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 208.896157][ T5937] usb 2-1: USB disconnect, device number 17 [ 209.255042][ T979] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 209.510691][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.527899][ T979] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 209.543453][ T979] usb 4-1: can't read configurations, error -71 [ 209.788434][ T981] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 210.452071][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 210.771051][ T981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.808312][ T981] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 210.836822][ T981] usb 3-1: can't read configurations, error -71 [ 212.515369][ T981] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 212.529691][ T981] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.365065][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 214.380099][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.515'. [ 214.630452][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.663670][ T44] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 214.703375][ T44] usb 4-1: can't read configurations, error -71 [ 214.858801][ T979] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 215.035954][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 215.043168][ T979] usb 5-1: config 0 has no interfaces? [ 215.052739][ T979] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 215.061970][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.075324][ T1212] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 215.090021][ T979] usb 5-1: Product: syz [ 215.094821][ T979] usb 5-1: Manufacturer: syz [ 215.099936][ T979] usb 5-1: SerialNumber: syz [ 215.176783][ T979] usb 5-1: config 0 descriptor?? [ 215.607668][ T979] usb 5-1: USB disconnect, device number 7 [ 215.759068][ T1212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.769454][ T1212] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 215.799778][ T1212] usb 2-1: can't read configurations, error -71 [ 216.013379][ T5950] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 216.182713][ T5950] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 216.195442][ T5950] usb 4-1: config 0 has no interface number 0 [ 216.208048][ T5950] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 216.255462][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.335023][ T5950] usb 4-1: config 0 descriptor?? [ 216.395271][ T5950] gspca_main: spca561-2.14.0 probing abcd:cdee [ 216.754078][ T5950] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 216.809668][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.857055][ T5950] usb 4-1: MIDIStreaming interface descriptor not found [ 217.065477][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 217.095654][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 217.098128][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 217.101733][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 217.109487][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 217.206964][ T5950] usb 4-1: USB disconnect, device number 16 [ 217.503804][ T7662] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 217.693093][ T7665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.705421][ T7665] bond3: (slave bond4): making interface the new active one [ 217.720914][ T7665] bond3: (slave bond4): Enslaving as an active interface with an up link [ 218.063854][ T5950] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 218.121594][ T5950] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.915103][ T1212] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.088307][ T1212] usb 5-1: unable to get BOS descriptor or descriptor too short [ 219.113500][ T5950] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 219.136551][ T1212] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 219.145048][ T1212] usb 5-1: config 6 has no interface number 0 [ 219.151192][ T1212] usb 5-1: config 6 interface 200 has no altsetting 0 [ 219.164509][ T1212] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 219.174348][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.182640][ T1212] usb 5-1: Product: syz [ 219.187943][ T1212] usb 5-1: Manufacturer: syz [ 219.192833][ T1212] usb 5-1: SerialNumber: syz [ 219.288785][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 219.389222][ T5950] usb 1-1: config 0 has no interfaces? [ 219.414790][ T5950] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 219.439768][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.537460][ T5950] usb 1-1: Product: syz [ 219.655151][ T5950] usb 1-1: Manufacturer: syz [ 219.659994][ T5950] usb 1-1: SerialNumber: syz [ 219.685204][ T5950] usb 1-1: config 0 descriptor?? [ 219.898941][ T5950] usb 1-1: USB disconnect, device number 18 [ 220.039612][ T1212] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 220.075252][ T1212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.136991][ T1212] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 220.145319][ T1212] usb 5-1: media controller created [ 220.188708][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.304706][ T1212] dvb-usb: recv bulk message failed: -22 [ 220.504837][ T1212] dvb-usb: bulk message failed: -71 (6/0) [ 220.545576][ T1212] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 220.594341][ T1212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 220.652887][ T1212] dvb-usb: schedule remote query interval to 150 msecs. [ 220.735152][ T1212] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 220.791480][ T1212] usb 5-1: USB disconnect, device number 8 [ 220.914845][ T1212] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 221.065141][ T981] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 222.219800][ T981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.289108][ T981] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 222.429591][ T981] usb 3-1: can't read configurations, error -71 [ 223.310570][ T5937] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 223.370651][ T5937] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.661485][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.544'. [ 223.755346][ T1212] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 223.915246][ T1212] usb 4-1: Using ep0 maxpacket: 8 [ 223.923146][ T1212] usb 4-1: config 0 has no interfaces? [ 223.933913][ T1212] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 223.943473][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.952511][ T1212] usb 4-1: Product: syz [ 223.978170][ T1212] usb 4-1: Manufacturer: syz [ 223.993711][ T1212] usb 4-1: SerialNumber: syz [ 224.036351][ T1212] usb 4-1: config 0 descriptor?? [ 224.288985][ T1212] usb 4-1: USB disconnect, device number 17 [ 224.674606][ T7750] binder: 7749:7750 ioctl c0306201 200000000040 returned -22 [ 225.129879][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.140419][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.685227][ T5921] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 226.769578][ T979] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 226.818700][ T979] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.847547][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.564'. [ 226.901809][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 226.917845][ T5921] usb 5-1: config 0 has no interfaces? [ 226.952138][ T5921] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 227.035758][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.078836][ T5921] usb 5-1: Product: syz [ 227.083063][ T5921] usb 5-1: Manufacturer: syz [ 227.128680][ T5921] usb 5-1: SerialNumber: syz [ 227.188970][ T7793] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 227.226284][ T5921] usb 5-1: config 0 descriptor?? [ 227.467337][ T5921] usb 5-1: USB disconnect, device number 9 [ 227.986598][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 229.103326][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 229.563532][ T7843] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 229.717976][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 229.892624][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 229.973475][ T5921] usb 3-1: config 0 has no interfaces? [ 229.989276][ T5921] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 230.002440][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.020044][ T5921] usb 3-1: Product: syz [ 230.033950][ T5921] usb 3-1: Manufacturer: syz [ 230.049344][ T5921] usb 3-1: SerialNumber: syz [ 230.058799][ T5921] usb 3-1: config 0 descriptor?? [ 230.294668][ T1212] usb 3-1: USB disconnect, device number 17 [ 231.406152][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'. [ 231.469818][ T7880] binder: 7879:7880 ioctl 4018620d 0 returned -22 [ 231.511634][ T7880] binder: 7879:7880 ioctl c0306201 200000000040 returned -22 [ 231.543889][ T7880] binder: 7879:7880 ioctl c0306201 200000000640 returned -22 [ 232.415409][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 232.463801][ T5937] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 232.575040][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 232.615699][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.632617][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.668153][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 232.670392][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 232.678684][ T5937] usb 5-1: config 0 has no interfaces? [ 232.709712][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 232.739762][ T5937] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 232.746819][ T44] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 232.758100][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.758129][ T5937] usb 5-1: Product: syz [ 232.758146][ T5937] usb 5-1: Manufacturer: syz [ 232.758162][ T5937] usb 5-1: SerialNumber: syz [ 232.767321][ T5937] usb 5-1: config 0 descriptor?? [ 232.843344][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.878902][ T44] hub 1-1:1.0: bad descriptor, ignoring hub [ 232.886722][ T44] hub 1-1:1.0: probe with driver hub failed with error -5 [ 232.897334][ T44] cdc_wdm 1-1:1.0: skipping garbage [ 232.902730][ T44] cdc_wdm 1-1:1.0: skipping garbage [ 232.913687][ T44] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 232.989133][ T44] cdc_wdm 1-1:1.0: Unknown control protocol [ 233.031332][ T5937] usb 5-1: USB disconnect, device number 10 [ 233.140548][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.154650][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.346435][ T5937] usb 1-1: USB disconnect, device number 19 [ 233.816059][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.607'. [ 234.615841][ T7934] fuse: Bad value for 'rootmode' [ 234.925196][ T981] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 235.085039][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 235.094105][ T981] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 235.111514][ T981] usb 2-1: config 0 has no interface number 0 [ 235.118146][ T981] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 235.128418][ T981] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 235.138742][ T981] usb 2-1: config 0 interface 126 has no altsetting 0 [ 235.152821][ T981] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 235.182719][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.204800][ T981] usb 2-1: Product: syz [ 235.209130][ T981] usb 2-1: Manufacturer: syz [ 235.213731][ T981] usb 2-1: SerialNumber: syz [ 235.237211][ T981] usb 2-1: config 0 descriptor?? [ 235.243202][ T7936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.256110][ T7936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.686218][ T981] ir_usb 2-1:0.126: IR Dongle converter detected [ 235.700667][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 235.755507][ T7950] 8021q: adding VLAN 0 to HW filter on device team1 [ 235.887954][ T981] usb 2-1: IRDA class descriptor not found, device not bound [ 235.936481][ T981] usb 2-1: USB disconnect, device number 20 [ 235.945571][ T1212] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 236.074173][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'. [ 236.745429][ T1212] usb 4-1: Using ep0 maxpacket: 8 [ 236.762356][ T1212] usb 4-1: config 0 has no interfaces? [ 236.772744][ T1212] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 236.794963][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.821385][ T1212] usb 4-1: Product: syz [ 236.841186][ T1212] usb 4-1: Manufacturer: syz [ 236.877596][ T1212] usb 4-1: SerialNumber: syz [ 236.910464][ T1212] usb 4-1: config 0 descriptor?? [ 236.946790][ T7965] fuse: Bad value for 'rootmode' [ 237.096495][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 237.118678][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 237.152402][ T1212] usb 4-1: USB disconnect, device number 18 [ 237.276391][ T7980] netlink: 'syz.1.625': attribute type 4 has an invalid length. [ 237.698152][ T7985] kvm: pic: non byte write [ 238.245536][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 238.295347][ T1212] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.352643][ T8005] fuse: Bad value for 'rootmode' [ 238.509055][ T1212] usb 4-1: config 0 has no interfaces? [ 238.545044][ T1212] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 238.588899][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.611869][ T1212] usb 4-1: Product: syz [ 238.675178][ T1212] usb 4-1: Manufacturer: syz [ 238.679892][ T1212] usb 4-1: SerialNumber: syz [ 238.728169][ T1212] usb 4-1: config 0 descriptor?? [ 239.145384][ T979] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 239.373333][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 239.409923][ T979] usb 5-1: config 0 has no interfaces? [ 239.433411][ T979] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 239.481125][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.516270][ T979] usb 5-1: Product: syz [ 239.525089][ T979] usb 5-1: Manufacturer: syz [ 239.544140][ T979] usb 5-1: SerialNumber: syz [ 239.564632][ T979] usb 5-1: config 0 descriptor?? [ 239.799966][ T5921] usb 5-1: USB disconnect, device number 11 [ 240.007470][ T979] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 240.207128][ T979] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.217191][ T979] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.284271][ T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.304877][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 240.388967][ T979] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.462361][ T979] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.528442][ T979] usb 2-1: Product: syz [ 240.551497][ T979] usb 2-1: Manufacturer: syz [ 240.647499][ T979] cdc_wdm 2-1:1.0: skipping garbage [ 240.652742][ T979] cdc_wdm 2-1:1.0: skipping garbage [ 240.752629][ T979] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 240.770459][ T8034] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 240.848962][ T8036] fuse: Unknown parameter 'use00000000000000000000' [ 240.895025][ T1212] usb 2-1: USB disconnect, device number 21 [ 241.195974][ T8040] binder: 8039:8040 ioctl c0306201 0 returned -14 [ 241.337139][ T8042] binder: 8039:8042 ioctl c0306201 200000000040 returned -22 [ 241.348789][ T8040] binder: 8039:8040 ioctl c0306201 200000000640 returned -22 [ 241.665000][ T1212] usb 4-1: USB disconnect, device number 19 [ 242.195068][ T981] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 242.355843][ T981] usb 3-1: device descriptor read/64, error -71 [ 242.425285][ T979] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 242.486125][ T8064] fuse: Unknown parameter 'use00000000000000000000' [ 242.584839][ T8066] fuse: Unknown parameter 'group_i00000000000000000000' [ 242.595030][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 242.605882][ T981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 242.632115][ T979] usb 4-1: config 0 has no interfaces? [ 242.653246][ T979] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 242.665107][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.673730][ T979] usb 4-1: Product: syz [ 242.678509][ T979] usb 4-1: Manufacturer: syz [ 242.683237][ T979] usb 4-1: SerialNumber: syz [ 242.700863][ T979] usb 4-1: config 0 descriptor?? [ 242.729941][ T8070] binder: 8069:8070 ioctl c0306201 0 returned -14 [ 242.744008][ T8070] binder: 8069:8070 ioctl c0306201 200000000040 returned -22 [ 242.752301][ T8070] binder: 8069:8070 ioctl c0306201 200000000640 returned -22 [ 242.765042][ T981] usb 3-1: device descriptor read/64, error -71 [ 242.878060][ T981] usb usb3-port1: attempt power cycle [ 242.905477][ T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 242.924443][ T979] usb 4-1: USB disconnect, device number 20 [ 243.091489][ T44] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.108008][ T44] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 243.129510][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.140988][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 243.155571][ T44] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.167102][ T44] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.175527][ T44] usb 5-1: Product: syz [ 243.179769][ T44] usb 5-1: Manufacturer: syz [ 243.190807][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 243.205658][ T44] cdc_wdm 5-1:1.0: skipping garbage [ 243.211178][ T44] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 243.245116][ T981] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 243.276150][ T981] usb 3-1: device descriptor read/8, error -71 [ 243.335048][ T5937] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 243.413071][ T979] usb 5-1: USB disconnect, device number 12 [ 243.501338][ T5937] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 243.520493][ T981] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 243.538650][ T5937] usb 1-1: config 0 has no interface number 0 [ 243.551422][ T5937] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 243.562548][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.571071][ T5937] usb 1-1: Product: syz [ 243.577614][ T5937] usb 1-1: Manufacturer: syz [ 243.582351][ T981] usb 3-1: device descriptor read/8, error -71 [ 243.588604][ T5937] usb 1-1: SerialNumber: syz [ 243.598223][ T5937] usb 1-1: config 0 descriptor?? [ 243.623696][ T5937] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 243.696763][ T981] usb usb3-port1: unable to enumerate USB device [ 243.832141][ T1212] usb 1-1: USB disconnect, device number 20 [ 244.345193][ T1212] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 244.537112][ T8091] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 244.633977][ T8091] U±Û: entered promiscuous mode [ 244.667219][ T1212] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.676689][ T1212] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 245.110541][ T1212] usb 5-1: config 6 has no interface number 0 [ 245.145018][ T1212] usb 5-1: config 6 interface 200 has no altsetting 0 [ 245.187826][ T1212] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 245.211625][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.220155][ T8095] fuse: Unknown parameter 'use00000000000000000000' [ 245.243866][ T1212] usb 5-1: Product: syz [ 245.264975][ T1212] usb 5-1: Manufacturer: syz [ 245.269641][ T1212] usb 5-1: SerialNumber: syz [ 245.465889][ T8097] fuse: Unknown parameter 'group_i00000000000000000000' [ 245.544048][ T8099] binder: 8098:8099 ioctl c0306201 0 returned -14 [ 245.558251][ T8099] binder: 8098:8099 ioctl c0306201 200000000040 returned -22 [ 245.570677][ T8099] binder: 8098:8099 ioctl c0306201 200000000640 returned -22 [ 246.148220][ T1212] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 246.165927][ T1212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.182530][ T1212] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 246.201553][ T1212] usb 5-1: media controller created [ 246.210247][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 246.225319][ T5844] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 246.257615][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.348518][ T1212] dvb-usb: recv bulk message failed: -22 [ 246.385010][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 246.394727][ T44] usb 1-1: config 0 has no interfaces? [ 246.407325][ T44] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 246.430860][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.431035][ T5844] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.451644][ T44] usb 1-1: Product: syz [ 246.458308][ T44] usb 1-1: Manufacturer: syz [ 246.481324][ T44] usb 1-1: SerialNumber: syz [ 246.486456][ T5844] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 246.504119][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.531586][ T44] usb 1-1: config 0 descriptor?? [ 246.536965][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 246.551597][ T1212] dvb-usb: bulk message failed: -71 (6/0) [ 246.567242][ T1212] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 246.589540][ T5844] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.605566][ T1212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 246.619438][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.650522][ T5844] usb 4-1: Product: syz [ 246.654743][ T5844] usb 4-1: Manufacturer: syz [ 246.664093][ T1212] dvb-usb: schedule remote query interval to 150 msecs. [ 246.675185][ T979] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 246.684737][ T1212] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 246.730085][ T5844] cdc_wdm 4-1:1.0: skipping garbage [ 246.756837][ T1212] usb 5-1: USB disconnect, device number 13 [ 246.773099][ T5844] cdc_wdm 4-1:1.0: skipping garbage [ 246.808953][ T5844] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 246.842834][ T5921] dvb-usb: bulk message failed: -19 (1/0) [ 246.850081][ T44] usb 1-1: USB disconnect, device number 21 [ 246.859896][ T5921] dvb-usb: error while querying for an remote control event. [ 246.887814][ T979] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.961520][ T979] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.981598][ T5937] usb 4-1: USB disconnect, device number 21 [ 246.998153][ T979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 247.012170][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 247.023515][ T979] usb 3-1: SerialNumber: syz [ 247.150316][ T979] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 247.195675][ T979] usb-storage 3-1:1.0: USB Mass Storage device detected [ 247.213379][ T979] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 247.222565][ T979] scsi host1: usb-storage 3-1:1.0 [ 247.300048][ T8125] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 247.451271][ T1212] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 247.470811][ T5844] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 247.666926][ T5844] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 247.678702][ T5844] usb 2-1: config 0 has no interface number 0 [ 247.687901][ T5844] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 247.698649][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.706750][ T5844] usb 2-1: Product: syz [ 247.803406][ T8128] fuse: Unknown parameter 'user_i00000000000000000000' [ 247.804610][ T5844] usb 2-1: Manufacturer: syz [ 247.833131][ T5844] usb 2-1: SerialNumber: syz [ 247.840560][ T5844] usb 2-1: config 0 descriptor?? [ 247.848261][ T5844] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22 [ 248.073639][ T5844] usb 2-1: USB disconnect, device number 22 [ 248.339501][ T8136] fuse: Unknown parameter 'group_i00000000000000000000' [ 248.676327][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 248.863337][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 248.877309][ T5921] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 248.892970][ T5921] usb 5-1: config 0 has no interface number 0 [ 248.913519][ T5921] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 248.986199][ T979] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 248.991565][ T5921] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 249.004486][ T5921] usb 5-1: config 0 interface 126 has no altsetting 0 [ 249.015005][ T5921] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 249.024086][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.033153][ T5921] usb 5-1: Product: syz [ 249.037957][ T5921] usb 5-1: Manufacturer: syz [ 249.043759][ T5921] usb 5-1: SerialNumber: syz [ 249.089494][ T5921] usb 5-1: config 0 descriptor?? [ 249.098771][ T8138] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.110452][ T8138] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.125249][ T979] usb 4-1: device descriptor read/64, error -71 [ 249.365146][ T979] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 249.505091][ T979] usb 4-1: device descriptor read/64, error -71 [ 249.529182][ T5921] ir_usb 5-1:0.126: IR Dongle converter detected [ 249.655331][ T979] usb usb4-port1: attempt power cycle [ 249.735815][ T5921] usb 5-1: IRDA class descriptor not found, device not bound [ 249.845316][ T5921] usb 5-1: USB disconnect, device number 14 [ 250.085072][ T979] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 250.107628][ T979] usb 4-1: device descriptor read/8, error -71 [ 250.376524][ T979] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 250.385107][ T8156] loop7: detected capacity change from 0 to 16384 [ 250.435872][ T979] usb 4-1: device descriptor read/8, error -71 [ 250.549418][ T979] usb usb4-port1: unable to enumerate USB device [ 250.703001][ T1212] usb 3-1: USB disconnect, device number 22 [ 250.816308][ T979] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 250.952484][ T8161] fuse: Unknown parameter 'user_i00000000000000000000' [ 250.986665][ T979] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.021872][ T979] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 251.081104][ T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.118887][ T979] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 251.163871][ T979] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.174368][ T979] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 251.207333][ T979] usb 5-1: Product: syz [ 251.214122][ T8163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.697'. [ 251.227569][ T979] usb 5-1: Manufacturer: syz [ 251.263695][ T979] cdc_wdm 5-1:1.0: skipping garbage [ 251.281893][ T8163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 251.291659][ T979] cdc_wdm 5-1:1.0: skipping garbage [ 251.291765][ T979] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 251.495613][ T8166] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 251.567325][ T1212] usb 5-1: USB disconnect, device number 15 [ 251.666536][ T8170] fuse: Unknown parameter 'group_id00000000000000000000' [ 252.095134][ T5844] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 252.247228][ T5844] usb 4-1: config 0 has an invalid interface number: 207 but max is 0 [ 252.256295][ T5844] usb 4-1: config 0 has no interface number 0 [ 252.267355][ T5844] usb 4-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 252.276605][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.284702][ T5844] usb 4-1: Product: syz [ 252.289078][ T5844] usb 4-1: Manufacturer: syz [ 252.293727][ T5844] usb 4-1: SerialNumber: syz [ 252.306062][ T5844] usb 4-1: config 0 descriptor?? [ 252.319474][ T5844] qmi_wwan 4-1:0.207: probe with driver qmi_wwan failed with error -22 [ 252.641684][ T5844] usb 4-1: USB disconnect, device number 26 [ 252.661254][ T8190] fuse: Unknown parameter 'user_i00000000000000000000' [ 252.928797][ T8197] netlink: 68 bytes leftover after parsing attributes in process `syz.2.710'. [ 252.982969][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.710'. [ 253.179055][ T8203] fuse: Unknown parameter 'group_id00000000000000000000' [ 253.217378][ T5844] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 253.403645][ T5844] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.431256][ T5844] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 253.458310][ T5844] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.495554][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.518355][ T8213] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 253.530266][ T8212] binder: 8211:8212 ioctl c0306201 200000000040 returned -22 [ 253.535213][ T979] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 253.545619][ T8212] binder: 8211:8212 ioctl c0306201 200000000640 returned -22 [ 253.573277][ T8200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.608999][ T5844] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.709765][ T979] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.789512][ T979] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.955278][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.993802][ T979] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 254.016799][ T979] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.026774][ T979] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.035048][ T979] usb 4-1: Product: syz [ 254.039545][ T979] usb 4-1: Manufacturer: syz [ 254.114862][ T979] cdc_wdm 4-1:1.0: skipping garbage [ 254.122703][ T979] cdc_wdm 4-1:1.0: skipping garbage [ 254.129651][ T979] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 254.426261][ T1212] usb 4-1: USB disconnect, device number 27 [ 254.761389][ T8230] fuse: Unknown parameter 'user_id00000000000000000000' [ 254.776138][ T8232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.722'. [ 254.975410][ T8241] fuse: Unknown parameter 'group_id00000000000000000000' [ 255.001058][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 255.200573][ T8247] netlink: 'syz.1.726': attribute type 1 has an invalid length. [ 255.304467][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 255.317347][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 255.382049][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.726'. [ 255.634626][ T8248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.660237][ T8248] bond1: (slave bond2): making interface the new active one [ 255.678125][ T8248] bond1: (slave bond2): Enslaving as an active interface with an up link [ 255.731531][ T8250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.900102][ T8255] binder: 8254:8255 ioctl c0306201 200000000040 returned -22 [ 255.961390][ T8255] binder: 8254:8255 ioctl c0306201 200000000640 returned -22 [ 256.102006][ T979] usb 1-1: USB disconnect, device number 22 [ 256.122656][ T8262] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 256.302731][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 256.314608][ T8265] veth0_to_bond: entered allmulticast mode [ 256.326956][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 256.784034][ T8269] fuse: Unknown parameter 'user_id00000000000000000000' [ 256.803841][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.4.734'. [ 257.052001][ T8276] fuse: Bad value for 'user_id' [ 257.070658][ T8276] fuse: Bad value for 'user_id' [ 257.265023][ T979] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 257.467161][ T979] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.493912][ T979] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.523286][ T8284] binder: 8283:8284 ioctl c0306201 0 returned -14 [ 257.524803][ T979] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.559647][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 257.582809][ T8285] binder: 8283:8285 ioctl c0306201 200000000640 returned -22 [ 257.610174][ T979] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.624653][ T979] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.770927][ T979] usb 1-1: Product: syz [ 257.780060][ T979] usb 1-1: Manufacturer: syz [ 257.847290][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 257.924976][ T979] cdc_wdm 1-1:1.0: skipping garbage [ 257.963738][ T979] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 258.224657][ T1212] usb 1-1: USB disconnect, device number 23 [ 258.512163][ T30] audit: type=1326 audit(1751335691.796:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 258.535980][ T30] audit: type=1326 audit(1751335691.806:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 258.558432][ T30] audit: type=1326 audit(1751335691.806:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 258.606287][ T30] audit: type=1326 audit(1751335691.806:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 258.702582][ T30] audit: type=1326 audit(1751335691.806:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 258.770553][ T30] audit: type=1326 audit(1751335691.806:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 258.829006][ T30] audit: type=1326 audit(1751335691.806:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 259.048926][ T30] audit: type=1326 audit(1751335691.816:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 259.096825][ T30] audit: type=1326 audit(1751335691.816:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 259.121810][ T30] audit: type=1326 audit(1751335691.816:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5ca58e929 code=0x7ffc0000 [ 259.425175][ T5921] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 259.601182][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 259.610246][ T5921] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 259.635090][ T5921] usb 1-1: config 6 has no interface number 0 [ 259.671778][ T5921] usb 1-1: config 6 interface 200 has no altsetting 0 [ 259.714444][ T5921] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 259.724118][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.784947][ T5921] usb 1-1: Product: syz [ 259.789209][ T5921] usb 1-1: Manufacturer: syz [ 259.825847][ T5921] usb 1-1: SerialNumber: syz [ 259.890845][ T979] IPVS: starting estimator thread 0... [ 259.996034][ T8308] IPVS: using max 36 ests per chain, 86400 per kthread [ 260.622827][ T8313] fuse: Unknown parameter 'user_id00000000000000000000' [ 260.694090][ T5921] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 260.831947][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.882906][ T5921] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 260.915356][ T8319] netlink: 60 bytes leftover after parsing attributes in process `syz.2.749'. [ 260.925627][ T5921] usb 1-1: media controller created [ 260.945085][ T8320] fuse: Bad value for 'user_id' [ 260.988339][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.007830][ T8323] ALSA: mixer_oss: invalid index 40000 [ 261.036464][ T8320] fuse: Bad value for 'user_id' [ 261.072675][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.079707][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.342089][ T8329] binder: 8328:8329 ioctl c0306201 0 returned -14 [ 261.447548][ T5921] dvb-usb: recv bulk message failed: -22 [ 261.455202][ T8329] binder: 8328:8329 ioctl c0306201 200000000640 returned -22 [ 261.475714][ T5921] dvb-usb: bulk message failed: -71 (6/0) [ 261.481615][ T5921] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 261.574638][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 261.903567][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 261.929663][ T5921] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 262.016141][ T5921] usb 1-1: USB disconnect, device number 24 [ 262.035065][ T979] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 262.175150][ T979] usb 3-1: device descriptor read/64, error -71 [ 262.265781][ T5921] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 262.425772][ T979] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 262.595450][ T979] usb 3-1: device descriptor read/64, error -71 [ 262.701549][ T8345] binder: 8344:8345 ioctl c0306201 0 returned -14 [ 262.785541][ T8345] binder: 8344:8345 ioctl c0306201 200000000640 returned -22 [ 263.111979][ T979] usb usb3-port1: attempt power cycle [ 263.765042][ T979] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 263.792887][ T979] usb 3-1: device descriptor read/8, error -71 [ 263.812111][ T8352] fuse: Bad value for 'fd' [ 263.926385][ T8356] fuse: Bad value for 'user_id' [ 263.948049][ T8356] fuse: Bad value for 'user_id' [ 263.968974][ T8358] binder: 8357:8358 ioctl c0306201 0 returned -14 [ 263.977413][ T8358] binder: 8357:8358 ioctl c0306201 200000000640 returned -22 [ 264.060592][ T979] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 264.095501][ T979] usb 3-1: device descriptor read/8, error -71 [ 264.105817][ T5921] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 264.235270][ T979] usb usb3-port1: unable to enumerate USB device [ 264.277250][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 266.920239][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.970854][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 266.996340][ T5921] usb 1-1: can't read configurations, error -71 [ 267.241785][ T8385] binder: 8384:8385 ioctl c0306201 0 returned -14 [ 267.254826][ T8385] binder: 8384:8385 ioctl c0306201 200000000640 returned -22 [ 267.588376][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 267.892342][ T8388] 8021q: adding VLAN 0 to HW filter on device team3 [ 268.086436][ T8397] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 268.655738][ T8401] fuse: Bad value for 'fd' [ 269.096547][ T8407] binder: 8402:8407 ioctl c0306201 200000000640 returned -22 [ 269.275172][ T981] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 269.416101][ T981] usb 4-1: device descriptor read/64, error -71 [ 269.615730][ T979] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 269.675193][ T981] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 269.820053][ T981] usb 4-1: device descriptor read/64, error -71 [ 269.855714][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 269.884298][ T979] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 269.894806][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.908591][ T979] usb 2-1: Product: syz [ 269.912919][ T979] usb 2-1: Manufacturer: syz [ 269.921622][ T979] usb 2-1: SerialNumber: syz [ 269.930591][ T979] usb 2-1: config 0 descriptor?? [ 269.955593][ T981] usb usb4-port1: attempt power cycle [ 269.981821][ T8418] binder: 8417:8418 ioctl c0306201 0 returned -14 [ 270.005585][ T8418] binder: 8417:8418 ioctl c0306201 200000000640 returned -22 [ 270.171771][ T979] usb 2-1: USB disconnect, device number 23 [ 270.325146][ T981] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 270.374367][ T981] usb 4-1: device descriptor read/8, error -71 [ 270.563116][ T8426] netlink: 'syz.0.785': attribute type 2 has an invalid length. [ 270.609541][ T8426] Û: entered promiscuous mode [ 270.635055][ T981] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 270.683892][ T981] usb 4-1: device descriptor read/8, error -71 [ 270.805679][ T981] usb usb4-port1: unable to enumerate USB device [ 271.001069][ T8431] fuse: Bad value for 'fd' [ 271.855872][ T8446] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 272.039158][ T8449] binder: 8448:8449 ioctl c0306201 200000000640 returned -22 [ 273.097463][ T8465] binder: 8464:8465 ioctl c0306201 200000000640 returned -22 [ 273.858301][ T8474] netlink: 'syz.0.796': attribute type 2 has an invalid length. [ 273.946992][ T8475] fuse: Bad value for 'fd' [ 274.095028][ T5937] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 274.355382][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 274.369625][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.380213][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.390509][ T5937] usb 2-1: Product: syz [ 274.396955][ T5937] usb 2-1: Manufacturer: syz [ 274.411828][ T5937] usb 2-1: SerialNumber: syz [ 274.431659][ T5937] usb 2-1: config 0 descriptor?? [ 274.668572][ T5937] usb 2-1: USB disconnect, device number 24 [ 274.896384][ T8486] binder: 8485:8486 ioctl c0306201 200000000640 returned -22 [ 275.138955][ T8488] netlink: 'syz.0.803': attribute type 16 has an invalid length. [ 275.151687][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.803'. [ 276.445666][ T8502] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 276.655094][ T1212] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 276.688093][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 276.761585][ T8505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.775711][ T8505] bond4: (slave bond5): making interface the new active one [ 276.783803][ T8505] bond4: (slave bond5): Enslaving as an active interface with an up link [ 276.800673][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.806'. [ 276.872478][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.887512][ T8502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.938965][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.995008][ T1212] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 277.034653][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.044800][ T8514] fuse: Bad value for 'fd' [ 277.117872][ T1212] usb 2-1: config 0 descriptor?? [ 277.282864][ T8517] netlink: 'syz.0.810': attribute type 2 has an invalid length. [ 277.543374][ T1212] usbhid 2-1:0.0: can't add hid device: -32 [ 277.931147][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 277.965438][ T1212] usb 2-1: USB disconnect, device number 25 [ 278.419298][ T8526] binder: 8525:8526 ioctl c0306201 200000000640 returned -22 [ 278.502963][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.532536][ T8529] netlink: 'syz.4.814': attribute type 16 has an invalid length. [ 278.587831][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.664116][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 278.945041][ T979] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 279.293450][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 279.345869][ T979] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.417541][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.494586][ T979] usb 2-1: Product: syz [ 279.513425][ T979] usb 2-1: Manufacturer: syz [ 279.527571][ T979] usb 2-1: SerialNumber: syz [ 279.602122][ T979] usb 2-1: config 0 descriptor?? [ 279.982498][ T979] usb 2-1: USB disconnect, device number 26 [ 280.905745][ T8551] fuse: Bad value for 'fd' [ 280.941195][ T8553] netlink: 'syz.0.822': attribute type 2 has an invalid length. [ 281.087027][ T8553] U±Û: entered promiscuous mode [ 281.309785][ T8561] binder: 8558:8561 ioctl c0306201 200000000640 returned -22 [ 281.457141][ T5921] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 281.766646][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.778200][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.810514][ T8568] netlink: 'syz.4.827': attribute type 16 has an invalid length. [ 281.818593][ T5921] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 281.841605][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.861890][ T5921] usb 4-1: config 0 descriptor?? [ 281.867270][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.827'. [ 282.316402][ T8573] syz.0.830 uses obsolete (PF_INET,SOCK_PACKET) [ 282.350587][ T5921] usbhid 4-1:0.0: can't add hid device: -32 [ 282.359469][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 282.798305][ T5921] usb 4-1: USB disconnect, device number 32 [ 284.701042][ T8600] kvm: pic: non byte write [ 284.905464][ T5921] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 285.045298][ T5921] usb 5-1: device descriptor read/64, error -71 [ 285.305372][ T5921] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 285.381066][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.841'. [ 285.475086][ T5921] usb 5-1: device descriptor read/64, error -71 [ 285.587943][ T5921] usb usb5-port1: attempt power cycle [ 285.895295][ T1212] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 285.965680][ T5921] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 286.001733][ T5921] usb 5-1: device descriptor read/8, error -71 [ 286.064978][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 286.080934][ T1212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.089688][ T1212] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 286.110037][ T1212] usb 3-1: can't read configurations, error -71 [ 286.255158][ T5921] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 286.298651][ T5921] usb 5-1: device descriptor read/8, error -71 [ 286.415639][ T5921] usb usb5-port1: unable to enumerate USB device [ 286.703925][ T8639] loop2: detected capacity change from 0 to 7 [ 286.734120][ T8639] Dev loop2: unable to read RDB block 7 [ 286.747849][ T8639] loop2: unable to read partition table [ 286.760548][ T8639] loop2: partition table beyond EOD, truncated [ 286.772646][ T8641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.853'. [ 286.786676][ T8639] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.429924][ T8656] PKCS7: Unknown OID: [5] (bad) [ 287.435011][ T8656] PKCS7: Only support pkcs7_signedData type [ 289.336449][ T8678] loop2: detected capacity change from 0 to 7 [ 289.392682][ T8678] Dev loop2: unable to read RDB block 7 [ 289.427505][ T8678] loop2: unable to read partition table [ 289.456011][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 289.475704][ T8678] loop2: partition table beyond EOD, truncated [ 289.482058][ T8678] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 290.185019][ T981] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 290.314993][ T981] usb 4-1: device descriptor read/64, error -71 [ 290.579524][ T981] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 290.682137][ T8697] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 290.725109][ T981] usb 4-1: device descriptor read/64, error -71 [ 290.796774][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 290.806007][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.871'. [ 290.832380][ T8697] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.841417][ T981] usb usb4-port1: attempt power cycle [ 290.852644][ T8697] bond3: (slave bond4): making interface the new active one [ 290.861376][ T8697] bond3: (slave bond4): Enslaving as an active interface with an up link [ 290.990372][ T8705] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 291.186426][ T981] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 291.250085][ T981] usb 4-1: device descriptor read/8, error -71 [ 291.317846][ T8713] netlink: 'syz.1.875': attribute type 2 has an invalid length. [ 291.399148][ T8713] U±Û: entered promiscuous mode [ 291.505016][ T981] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 291.605235][ T981] usb 4-1: device descriptor read/8, error -71 [ 291.715437][ T981] usb usb4-port1: unable to enumerate USB device [ 292.052244][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'. [ 292.489893][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 292.593059][ T8730] 8021q: adding VLAN 0 to HW filter on device team2 [ 292.976482][ T8739] binder: 8738:8739 ioctl c0306201 200000000040 returned -14 [ 292.998857][ T8740] kvm: pic: non byte write [ 292.999547][ T8739] binder: 8738:8739 ioctl c0306201 0 returned -14 [ 294.165261][ T8759] hsr0: entered promiscuous mode [ 294.171136][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 294.239232][ T8759] hsr_slave_0: left promiscuous mode [ 294.319980][ T8759] hsr_slave_1: left promiscuous mode [ 294.360116][ T8759] hsr0 (unregistering): left promiscuous mode [ 294.395087][ T1212] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 294.525101][ T1212] usb 1-1: device descriptor read/64, error -71 [ 294.765007][ T1212] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 294.925018][ T1212] usb 1-1: device descriptor read/64, error -71 [ 295.496906][ T1212] usb usb1-port1: attempt power cycle [ 295.846203][ T1212] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 295.905801][ T1212] usb 1-1: device descriptor read/8, error -71 [ 296.235404][ T1212] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 296.256949][ T1212] usb 1-1: device descriptor read/8, error -71 [ 296.379283][ T1212] usb usb1-port1: unable to enumerate USB device [ 296.659874][ T8783] kvm: pic: non byte write [ 297.951361][ T8808] loop2: detected capacity change from 0 to 7 [ 298.176001][ T8808] Dev loop2: unable to read RDB block 7 [ 298.181761][ T8808] loop2: unable to read partition table [ 298.255334][ T8808] loop2: partition table beyond EOD, truncated [ 298.278412][ T8808] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.099202][ T8817] kvm: pic: non byte write [ 299.695169][ T981] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 299.885712][ T981] usb 1-1: device descriptor read/64, error -71 [ 300.075024][ T5937] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 300.125053][ T979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 300.148733][ T981] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 300.235956][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 300.243996][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.259441][ T5937] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 300.273981][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0 [ 300.281205][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 300.289180][ T981] usb 1-1: device descriptor read/64, error -71 [ 300.298251][ T5937] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 300.309023][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.318324][ T979] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 300.331974][ T979] usb 3-1: config 0 has no interface number 0 [ 300.338818][ T979] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 300.353086][ T979] usb 3-1: config 0 interface 126 has no altsetting 0 [ 300.364923][ T5937] usb 5-1: config 0 descriptor?? [ 300.379773][ T979] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 300.395318][ T5937] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 300.408031][ T981] usb usb1-port1: attempt power cycle [ 300.424794][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.446683][ T979] usb 3-1: Product: syz [ 300.450914][ T979] usb 3-1: Manufacturer: syz [ 300.458711][ T979] usb 3-1: SerialNumber: syz [ 300.472503][ T979] usb 3-1: config 0 descriptor?? [ 300.500354][ T8835] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 300.798870][ T981] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 301.179109][ T979] ir_usb 3-1:0.126: required endpoints missing [ 301.249205][ T981] usb 1-1: device descriptor read/8, error -71 [ 301.495044][ T981] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 301.529339][ T981] usb 1-1: device descriptor read/8, error -71 [ 301.666048][ T981] usb usb1-port1: unable to enumerate USB device [ 301.686451][ T8851] kvm: pic: non byte write [ 302.999528][ T981] usb 5-1: USB disconnect, device number 20 [ 303.009399][ T44] usb 3-1: USB disconnect, device number 29 [ 303.173998][ T8880] binder: 8878:8880 ioctl c0306201 200000000040 returned -14 [ 303.400678][ T8884] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 303.670621][ T8884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.932'. [ 303.705995][ T8889] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.718235][ T8889] bond6: (slave bond7): making interface the new active one [ 303.728020][ T8889] bond6: (slave bond7): Enslaving as an active interface with an up link [ 303.748202][ T8884] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.855372][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.934'. [ 304.382533][ T8904] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 304.415597][ T44] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 304.445555][ T8905] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 304.595030][ T44] usb 3-1: device descriptor read/64, error -71 [ 304.835076][ T44] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 304.914997][ T1212] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 304.975783][ T44] usb 3-1: device descriptor read/64, error -71 [ 305.076969][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 305.097536][ T44] usb usb3-port1: attempt power cycle [ 305.110632][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.133558][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.152974][ T1212] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 305.163483][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.184474][ T1212] usb 1-1: config 0 descriptor?? [ 305.475597][ T44] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 305.528720][ T44] usb 3-1: device descriptor read/8, error -71 [ 305.603544][ T1212] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 305.775115][ T44] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 305.807041][ T44] usb 3-1: device descriptor read/8, error -71 [ 305.852756][ T979] usb 1-1: USB disconnect, device number 35 [ 305.949822][ T44] usb usb3-port1: unable to enumerate USB device [ 307.388079][ T8964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.952'. [ 309.248320][ T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 309.366504][ T981] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 309.435093][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 309.444397][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.459659][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.472174][ T44] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 309.495309][ T979] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 309.498828][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.532066][ T981] usb 3-1: config 0 has no interfaces? [ 309.532962][ T44] usb 2-1: config 0 descriptor?? [ 309.542409][ T981] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 309.554375][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.571439][ T981] usb 3-1: Product: syz [ 309.576532][ T981] usb 3-1: Manufacturer: syz [ 309.581447][ T981] usb 3-1: SerialNumber: syz [ 309.598061][ T981] usb 3-1: config 0 descriptor?? [ 309.658522][ T979] usb 5-1: device descriptor read/64, error -71 [ 309.930932][ T979] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 309.994030][ T44] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 310.095029][ T979] usb 5-1: device descriptor read/64, error -71 [ 310.336691][ T979] usb usb5-port1: attempt power cycle [ 310.347080][ T44] usb 2-1: USB disconnect, device number 27 [ 310.715177][ T979] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 310.745742][ T979] usb 5-1: device descriptor read/8, error -71 [ 310.852439][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 310.902792][ T9018] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 311.015137][ T979] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 311.045606][ T979] usb 5-1: device descriptor read/8, error -71 [ 311.177384][ T979] usb usb5-port1: unable to enumerate USB device [ 312.125973][ T979] usb 3-1: USB disconnect, device number 34 [ 312.905244][ T979] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 313.079618][ T979] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 313.127156][ T979] usb 1-1: config 0 has no interface number 0 [ 313.133431][ T979] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 313.173558][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.210712][ T979] usb 1-1: config 0 descriptor?? [ 313.259619][ T979] gspca_main: spca561-2.14.0 probing abcd:cdee [ 313.505025][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 313.531592][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 313.621861][ T979] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 313.636860][ T44] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 313.671483][ T979] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.708870][ T979] usb 1-1: MIDIStreaming interface descriptor not found [ 313.825714][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 313.841835][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.886451][ T979] usb 1-1: USB disconnect, device number 36 [ 313.897884][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.978173][ T44] usb 5-1: config 0 descriptor?? [ 314.129181][ T44] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 314.275486][ T1212] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 314.517051][ T1212] usb 4-1: Using ep0 maxpacket: 16 [ 314.534800][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.565068][ T981] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 314.591878][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.609846][ T1212] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 314.619224][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.715035][ T979] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 314.744623][ T1212] usb 4-1: config 0 descriptor?? [ 314.750158][ T981] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.771796][ T981] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 314.837327][ T981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.865308][ T981] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.894561][ T981] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.912354][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.943420][ T981] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.951597][ T979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.965060][ T981] usb 3-1: Product: syz [ 314.974819][ T981] usb 3-1: Manufacturer: syz [ 314.987646][ T979] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 315.013457][ T981] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 315.033759][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.180655][ T979] usb 1-1: SerialNumber: syz [ 315.208538][ T1212] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 315.262569][ T981] usb 3-1: USB disconnect, device number 35 [ 315.296930][ T979] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 315.313287][ T979] usb-storage 1-1:1.0: USB Mass Storage device detected [ 315.330796][ T979] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 315.343329][ T979] scsi host1: usb-storage 1-1:1.0 [ 315.445142][ T1212] usb 4-1: USB disconnect, device number 37 [ 315.608713][ T9063] fido_id[9063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 316.115025][ T981] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 316.264961][ T981] usb 2-1: device descriptor read/64, error -71 [ 316.393013][ T1212] usb 5-1: USB disconnect, device number 25 [ 316.520132][ T981] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 316.704991][ T981] usb 2-1: device descriptor read/64, error -71 [ 316.862526][ T981] usb usb2-port1: attempt power cycle [ 316.889776][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 317.598541][ T981] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 317.715781][ T981] usb 2-1: device descriptor read/8, error -71 [ 317.808032][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 317.870783][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 317.990418][ T981] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 318.017590][ T44] usb 1-1: USB disconnect, device number 37 [ 318.037545][ T981] usb 2-1: device descriptor read/8, error -71 [ 318.192801][ T981] usb usb2-port1: unable to enumerate USB device [ 318.878060][ T44] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 319.064311][ T44] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.075584][ T44] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 319.135330][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.207999][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.302816][ T44] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.312888][ T44] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.384504][ T44] usb 1-1: Product: syz [ 319.431818][ T1212] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 319.452806][ T44] usb 1-1: Manufacturer: syz [ 319.471208][ T44] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 319.606983][ T1212] usb 4-1: Using ep0 maxpacket: 16 [ 319.622515][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.664401][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.716449][ T1212] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 319.772736][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.797003][ T44] usb 1-1: USB disconnect, device number 38 [ 319.830369][ T1212] usb 4-1: config 0 descriptor?? [ 320.283216][ T1212] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 320.335151][ T981] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 320.545147][ T979] usb 4-1: USB disconnect, device number 38 [ 320.575364][ T981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 320.605316][ T981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 320.679902][ T981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 320.681255][ T9137] fido_id[9137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 320.725375][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 320.742421][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 320.766481][ T981] usb 5-1: SerialNumber: syz [ 320.778994][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 320.795277][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 320.803431][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x2 [ 320.819688][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 320.861425][ T981] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 320.890673][ T981] usb-storage 5-1:1.0: USB Mass Storage device detected [ 320.903047][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 320.915195][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 321.001797][ T5931] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 321.055102][ T1212] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 321.089358][ T981] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 321.106716][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 321.116265][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 321.175608][ T981] scsi host1: usb-storage 5-1:1.0 [ 321.182288][ T5937] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 321.253223][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.273719][ T1212] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.288578][ T1212] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 321.297405][ T5931] usb 1-1: config 0 has no interfaces? [ 321.305445][ T5937] hid-generic 00A0:0006:0003.0016: hidraw0: HID v0.05 Device [syz1] on syz0 [ 321.325583][ T5931] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 321.341006][ T1212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.369024][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.420683][ T5931] usb 1-1: config 0 descriptor?? [ 321.423089][ T1212] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 321.623569][ T9158] hsr0: entered promiscuous mode [ 321.630771][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 321.643361][ T9158] hsr_slave_0: left promiscuous mode [ 321.665425][ T9158] hsr_slave_1: left promiscuous mode [ 321.674345][ T5931] usb 1-1: USB disconnect, device number 39 [ 321.717050][ T1212] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.802388][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.811187][ T1212] usb 2-1: Product: syz [ 321.867277][ T1212] usb 2-1: Manufacturer: syz [ 322.107352][ T1212] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 322.286945][ T9158] hsr0 (unregistering): left promiscuous mode [ 322.404208][ T5931] usb 2-1: USB disconnect, device number 32 [ 322.509308][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.516537][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.025109][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 324.025132][ T30] audit: type=1800 audit(1751335757.376:46): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1015" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 324.395177][ T5931] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 324.480177][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 324.687287][ T5931] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.800323][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.825100][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.886382][ T5931] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 324.895701][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.903864][ T5931] usb 3-1: Product: syz [ 324.965153][ T5931] usb 3-1: Manufacturer: syz [ 324.969827][ T5931] usb 3-1: SerialNumber: syz [ 325.044750][ T5931] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 325.066821][ T5931] cdc_ncm 3-1:1.0: bind() failure [ 325.078671][ T5931] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 325.112737][ T5931] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 325.633519][ T1212] usb 3-1: USB disconnect, device number 36 [ 326.034843][ T5937] usb 5-1: USB disconnect, device number 26 [ 326.345507][ T5931] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 326.605024][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 326.671944][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.705424][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.716108][ T5931] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 326.725572][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.737546][ T5931] usb 2-1: config 0 descriptor?? [ 327.201894][ T5931] hid-multitouch 0003:1FD2:6007.0017: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 327.599949][ T44] usb 2-1: USB disconnect, device number 33 [ 327.656009][ T9214] fido_id[9214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 327.785119][ T1212] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 327.946539][ T1212] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 327.955051][ T1212] usb 1-1: config 0 has no interface number 0 [ 327.961586][ T1212] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 328.134409][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.157869][ T1212] usb 1-1: config 0 descriptor?? [ 328.187879][ T1212] gspca_main: spca561-2.14.0 probing abcd:cdee [ 328.443668][ T1212] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 328.483054][ T1212] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.502031][ T1212] usb 1-1: MIDIStreaming interface descriptor not found [ 328.548364][ T9233] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 328.677172][ T1212] usb 1-1: USB disconnect, device number 40 [ 329.077423][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 329.196443][ T9236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.214378][ T9236] bond5: (slave bond6): making interface the new active one [ 329.223100][ T9236] bond5: (slave bond6): Enslaving as an active interface with an up link [ 329.629015][ T5931] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 329.793280][ T5931] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.862107][ T5931] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.893293][ T5931] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.907122][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.947384][ T9248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.972358][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.182960][ T5931] usb 1-1: USB disconnect, device number 41 [ 330.505159][ T1212] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 330.666349][ T1212] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 330.699166][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.710445][ T1212] usb 2-1: config 0 has no interfaces? [ 330.733690][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.745368][ T1212] usb 2-1: config 0 has no interfaces? [ 330.752441][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.777706][ T1212] usb 2-1: config 0 has no interfaces? [ 330.801876][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.827365][ T1212] usb 2-1: config 0 has no interfaces? [ 330.836554][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.846942][ T1212] usb 2-1: config 0 has no interfaces? [ 330.856630][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.867464][ T1212] usb 2-1: config 0 has no interfaces? [ 330.874448][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.888539][ T1212] usb 2-1: config 0 has no interfaces? [ 330.896769][ T1212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.919496][ T1212] usb 2-1: config 0 has no interfaces? [ 330.948198][ T1212] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 330.963173][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 330.991140][ T1212] usb 2-1: Product: syz [ 331.003224][ T1212] usb 2-1: Manufacturer: syz [ 331.019326][ T1212] usb 2-1: SerialNumber: syz [ 331.029976][ T1212] usb 2-1: config 0 descriptor?? [ 331.264971][ T44] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 331.294109][ T1212] usb 2-1: USB disconnect, device number 34 [ 331.323834][ T9287] loop7: detected capacity change from 0 to 16384 [ 331.436393][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 331.443729][ T44] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 331.452659][ T44] usb 1-1: config 0 has no interface number 0 [ 331.475701][ T44] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 331.506573][ T44] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 331.597590][ T44] usb 1-1: config 0 interface 126 has no altsetting 0 [ 331.620841][ T44] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 331.637281][ T5921] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 331.645179][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.784718][ T44] usb 1-1: Product: syz [ 331.837549][ T44] usb 1-1: Manufacturer: syz [ 331.842243][ T44] usb 1-1: SerialNumber: syz [ 331.858589][ T44] usb 1-1: config 0 descriptor?? [ 331.864349][ T9281] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.880714][ T9281] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.005033][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 332.012606][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.020837][ T5921] usb 4-1: can't read configurations, error -61 [ 332.288607][ T5921] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 332.324063][ T44] ir_usb 1-1:0.126: IR Dongle converter detected [ 332.455050][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 332.466826][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 332.486243][ T5921] usb 4-1: can't read configurations, error -61 [ 332.494003][ T5921] usb usb4-port1: attempt power cycle [ 332.532109][ T44] usb 1-1: IRDA class descriptor not found, device not bound [ 332.605604][ T44] usb 1-1: USB disconnect, device number 42 [ 332.985076][ T5921] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 333.024448][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 333.038452][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 333.057385][ T5921] usb 4-1: can't read configurations, error -61 [ 333.167647][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1054'. [ 333.245186][ T5921] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 333.328252][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 333.357041][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 333.392520][ T5921] usb 4-1: can't read configurations, error -61 [ 333.412891][ T5921] usb usb4-port1: unable to enumerate USB device [ 333.805010][ T5937] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 334.071785][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 334.120207][ T5937] usb 1-1: can't read configurations, error -61 [ 334.336500][ T9324] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 334.735029][ T5937] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 335.109751][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 335.217779][ T5937] usb 1-1: can't read configurations, error -61 [ 335.315851][ T5937] usb usb1-port1: attempt power cycle [ 335.704976][ T5937] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 335.972651][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 336.043684][ T5937] usb 1-1: can't read configurations, error -61 [ 336.265160][ T5937] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 336.625084][ T5921] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 336.821252][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.860270][ T5921] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 336.925335][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.965048][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.050692][ T9344] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.115974][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.690278][ T5937] usb 1-1: device descriptor read/8, error -71 [ 337.826748][ T5937] usb usb1-port1: unable to enumerate USB device [ 338.236354][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1070'. [ 339.290644][ T5937] usb 3-1: USB disconnect, device number 37 [ 339.838379][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1073'. [ 341.935075][ T5937] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 341.939335][ T9406] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 342.225057][ T5931] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 342.243146][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 342.251660][ T5937] usb 1-1: can't read configurations, error -61 [ 342.266985][ T9411] netlink: 'syz.4.1087': attribute type 1 has an invalid length. [ 342.339191][ T9411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.349270][ T9411] bond0: (slave bond3): making interface the new active one [ 342.357724][ T9411] bond0: (slave bond3): Enslaving as an active interface with an up link [ 342.389695][ T5931] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.401322][ T5931] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.411343][ T5937] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 342.419133][ T5931] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.431457][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.454141][ T9407] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 342.468219][ T5931] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.595734][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 342.617805][ T5937] usb 1-1: can't read configurations, error -61 [ 342.630324][ T5937] usb usb1-port1: attempt power cycle [ 342.963885][ T5931] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 343.031480][ T5950] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 343.082408][ T5937] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 343.215452][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 343.225272][ T5937] usb 1-1: can't read configurations, error -61 [ 343.255014][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 343.264126][ T5950] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 343.273275][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.284546][ T5950] usb 5-1: config 0 has no interface number 0 [ 343.291283][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.304500][ T5950] usb 5-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 343.317891][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.328116][ T5950] usb 5-1: config 0 interface 41 has no altsetting 0 [ 343.335067][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.348655][ T5931] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.359493][ T5937] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 343.368450][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.379408][ T5950] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 343.389319][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.406463][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 343.416520][ T5937] usb 1-1: can't read configurations, error -61 [ 343.450559][ T5937] usb usb1-port1: unable to enumerate USB device [ 343.457329][ T5950] usb 5-1: Product: syz [ 343.469378][ T5931] usb 4-1: config 0 descriptor?? [ 343.476138][ T5950] usb 5-1: Manufacturer: syz [ 343.482647][ T5950] usb 5-1: SerialNumber: syz [ 343.531062][ T5950] usb 5-1: config 0 descriptor?? [ 343.544420][ T5950] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 343.559373][ T5950] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 343.773498][ T5950] usb 5-1: USB disconnect, device number 27 [ 343.922263][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 343.940159][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 344.025908][ T5931] usb 4-1: USB disconnect, device number 43 [ 344.424054][ T9428] syz_tun: entered allmulticast mode [ 344.533793][ T9427] syz_tun: left allmulticast mode [ 344.953707][ T44] usb 2-1: USB disconnect, device number 35 [ 345.145068][ T5921] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 345.154039][ T9439] syzkaller1: entered promiscuous mode [ 345.187768][ T9439] syzkaller1: entered allmulticast mode [ 345.333320][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 345.435160][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.480936][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.537502][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 345.567378][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.606278][ T5921] usb 5-1: config 0 descriptor?? [ 346.053072][ T5921] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0018/input/input11 [ 346.237835][ T5921] appleir 0003:05AC:8241.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 346.777469][ T5921] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 346.935566][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 346.942616][ T5921] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 346.960326][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.971914][ T5921] usb 4-1: config 0 has no interface number 0 [ 346.982881][ T5921] usb 4-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.999100][ T5921] usb 4-1: config 0 interface 41 has no altsetting 0 [ 347.012403][ T5921] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 347.029330][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.045245][ T5950] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 347.074094][ T5921] usb 4-1: Product: syz [ 347.417415][ T5921] usb 4-1: Manufacturer: syz [ 347.426276][ T5921] usb 4-1: SerialNumber: syz [ 347.440955][ T5921] usb 4-1: config 0 descriptor?? [ 347.449693][ T5921] dm9601 4-1:0.41: probe with driver dm9601 failed with error -22 [ 347.463674][ T5921] sr9700 4-1:0.41: probe with driver sr9700 failed with error -22 [ 347.475091][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.492188][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.504534][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.524779][ T5950] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.528376][ T44] usb 5-1: reset high-speed USB device number 28 using dummy_hcd [ 347.548161][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.599177][ T5950] usb 3-1: config 0 descriptor?? [ 347.660372][ T5921] usb 4-1: USB disconnect, device number 44 [ 347.892632][ T5931] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 348.091383][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 348.097504][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.123958][ T5950] usb 3-1: USB disconnect, device number 38 [ 348.167930][ T5931] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.180782][ T5931] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 348.191590][ T5931] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 348.201211][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.218344][ T9474] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 348.236286][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.835870][ T9481] syz_tun: entered allmulticast mode [ 348.895596][ T9479] syz_tun: left allmulticast mode [ 349.489608][ T9492] syzkaller1: entered promiscuous mode [ 349.525220][ T9492] syzkaller1: entered allmulticast mode [ 349.537706][ T5844] usb 5-1: USB disconnect, device number 28 [ 349.640786][ T5931] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 350.255143][ T5844] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 350.275052][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 350.323026][ T5931] usb 4-1: can't read configurations, error -61 [ 350.484247][ T5931] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 350.523146][ T5950] usb 1-1: USB disconnect, device number 51 [ 350.660942][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 350.670657][ T5931] usb 4-1: can't read configurations, error -61 [ 350.692050][ T5931] usb usb4-port1: attempt power cycle [ 351.076353][ T5931] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 351.110493][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.119666][ T5931] usb 4-1: can't read configurations, error -61 [ 351.265134][ T5931] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 351.285179][ T5950] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 351.533241][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.546918][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.562468][ T5931] usb 4-1: can't read configurations, error -61 [ 351.581058][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.698067][ T5931] usb usb4-port1: unable to enumerate USB device [ 351.791082][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.835204][ T5937] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 351.860872][ T5950] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.890793][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.915849][ T5950] usb 1-1: config 0 descriptor?? [ 352.025195][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 352.039190][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.051343][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.109928][ T5937] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 352.245958][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.307477][ T5937] usb 3-1: config 0 descriptor?? [ 352.331855][ T5950] usbhid 1-1:0.0: can't add hid device: -71 [ 352.341505][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 352.394399][ T9524] syz_tun: entered allmulticast mode [ 352.403061][ T9523] syz_tun: left allmulticast mode [ 352.444685][ T5950] usb 1-1: USB disconnect, device number 52 [ 352.800296][ T5937] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0019/input/input12 [ 353.074529][ T5937] appleir 0003:05AC:8241.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 353.169237][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.180522][ T5844] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 353.271132][ T5844] usb 2-1: can't read configurations, error -71 [ 354.125000][ T5937] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 356.818232][ T5950] usb 3-1: USB disconnect, device number 39 [ 356.931334][ T9562] syz_tun: entered allmulticast mode [ 356.961429][ T9557] syz_tun: left allmulticast mode [ 357.136522][ T44] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 357.317294][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.318505][ T9568] ip6gre1: entered promiscuous mode [ 357.354994][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.397302][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.437735][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.458741][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.512320][ T44] usb 4-1: config 0 descriptor?? [ 357.634951][ T5844] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 357.952963][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 357.963359][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 357.970997][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 357.978548][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 357.985773][ T44] usbhid 4-1:0.0: can't add hid device: -32 [ 357.991826][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 358.001693][ T5844] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.012202][ T5844] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.035509][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 358.054361][ T5844] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 358.068658][ T44] usb 4-1: USB disconnect, device number 49 [ 358.103812][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.135071][ T5937] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 358.143738][ T5844] usb 3-1: config 0 descriptor?? [ 358.149087][ T5844] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 358.414933][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 358.588364][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.605039][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.636008][ T5937] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 358.682041][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.702048][ T5937] usb 1-1: config 0 descriptor?? [ 359.124743][ T5937] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.001A/input/input13 [ 359.475596][ T5937] appleir 0003:05AC:8241.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 360.425166][ T5937] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 360.505492][ T5950] usb 3-1: USB disconnect, device number 40 [ 360.691028][ T9607] syz_tun: entered allmulticast mode [ 360.699254][ T9606] syz_tun: left allmulticast mode [ 361.680474][ T9625] syzkaller1: entered promiscuous mode [ 361.703214][ T9625] syzkaller1: entered allmulticast mode [ 361.846516][ T5950] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 362.035419][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.074399][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.114934][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.185074][ T5950] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.194177][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.227868][ T5950] usb 2-1: config 0 descriptor?? [ 362.243087][ T981] usb 1-1: USB disconnect, device number 53 [ 362.547586][ T9637] syz_tun: entered allmulticast mode [ 362.560681][ T9635] syz_tun: left allmulticast mode [ 362.675156][ T5937] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 362.759726][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 362.780404][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 362.827976][ T5937] usb 4-1: device descriptor read/64, error -71 [ 363.026861][ T5950] usb 2-1: USB disconnect, device number 38 [ 363.095059][ T5937] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 363.286797][ T5937] usb 4-1: device descriptor read/64, error -71 [ 363.415443][ T5937] usb usb4-port1: attempt power cycle [ 363.685059][ T5950] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 363.825014][ T5937] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 363.945683][ T5937] usb 4-1: device descriptor read/8, error -71 [ 364.115213][ T44] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 364.147580][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.159496][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.192524][ T5950] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 364.203758][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.227088][ T5950] usb 5-1: config 0 descriptor?? [ 364.271863][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 364.305226][ T5937] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 364.335935][ T5937] usb 4-1: device descriptor read/8, error -71 [ 364.372455][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.448140][ T5937] usb usb4-port1: unable to enumerate USB device [ 364.458787][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.550214][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 364.609305][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.644493][ T5950] hid_parser_main: 2 callbacks suppressed [ 364.644511][ T5950] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 364.702888][ T5950] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 364.735986][ T44] usb 2-1: config 0 descriptor?? [ 364.842486][ T5950] cp2112 0003:10C4:EA90.001B: error requesting version [ 364.870164][ T9667] syzkaller1: entered promiscuous mode [ 364.900303][ T5950] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -32 [ 364.925077][ T9667] syzkaller1: entered allmulticast mode [ 365.189978][ T44] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.001C/input/input14 [ 365.313151][ T44] appleir 0003:05AC:8241.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 365.625090][ T5844] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 365.814924][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 365.824033][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.839064][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.116455][ T5844] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 366.126517][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.284727][ T5844] usb 3-1: config 0 descriptor?? [ 366.365340][ T44] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 366.584223][ T5950] usb 5-1: USB disconnect, device number 29 [ 366.958744][ T5844] hid-multitouch 0003:1FD2:6007.001D: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 367.067837][ T5844] usb 3-1: USB disconnect, device number 41 [ 367.138463][ T9684] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 367.349007][ T9689] fido_id[9689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 367.720860][ T44] usb 2-1: device descriptor read/64, error -71 [ 368.008955][ T44] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 368.044022][ T9702] syzkaller1: entered promiscuous mode [ 368.096157][ T9702] syzkaller1: entered allmulticast mode [ 368.185057][ T44] usb 2-1: device descriptor read/64, error -71 [ 368.431195][ T44] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 368.476335][ T44] usb 2-1: device descriptor read/8, error -71 [ 368.525885][ T5844] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 368.660633][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 368.714376][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 368.722204][ T44] usb 2-1: reset high-speed USB device number 39 using dummy_hcd [ 369.100610][ T44] usb 2-1: device descriptor read/8, error -71 [ 369.130711][ T5844] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 369.275593][ T5844] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.335842][ T5844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.347262][ T1212] usb 2-1: USB disconnect, device number 39 [ 369.359487][ T5844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.372455][ T5844] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.386018][ T5844] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 369.395646][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.740010][ T1212] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 369.836695][ T5844] usb 5-1: usb_control_msg returned -32 [ 369.842346][ T5844] usbtmc 5-1:16.0: can't read capabilities [ 369.901269][ T1212] usb 2-1: device descriptor read/64, error -71 [ 370.012816][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 370.054502][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 370.185003][ T1212] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 370.345492][ T1212] usb 2-1: device descriptor read/64, error -71 [ 370.369715][ T9711] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 370.516711][ T1212] usb usb2-port1: attempt power cycle [ 371.343599][ T5950] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 371.545123][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 371.751191][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.944674][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.985157][ T5950] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 372.037328][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.090471][ T5950] usb 3-1: config 0 descriptor?? [ 372.573063][ T5950] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.001E/input/input15 [ 372.767075][ T5950] appleir 0003:05AC:8241.001E: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 373.690763][ T5844] usb 5-1: USB disconnect, device number 30 [ 373.914955][ T5950] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 374.625100][ T1212] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 374.816841][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.875997][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.914984][ T981] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 374.921667][ T30] audit: type=1800 audit(1751335808.276:47): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1192" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 374.953156][ T1212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.005418][ T1212] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.014524][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.028599][ T1212] usb 4-1: config 0 descriptor?? [ 375.065243][ T981] usb 5-1: device descriptor read/64, error -71 [ 375.325091][ T981] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 375.475026][ T981] usb 5-1: device descriptor read/64, error -71 [ 375.608506][ T981] usb usb5-port1: attempt power cycle [ 375.615311][ T5950] usb 3-1: device descriptor read/64, error -71 [ 375.639707][ T1212] usbhid 4-1:0.0: can't add hid device: -71 [ 375.645950][ T1212] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 375.670675][ T1212] usb 4-1: USB disconnect, device number 54 [ 375.866368][ T5950] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 375.876488][ T5950] usb 3-1: device reset changed ep0 maxpacket size! [ 375.884061][ T5937] usb 3-1: USB disconnect, device number 42 [ 376.085080][ T981] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 376.139800][ T981] usb 5-1: device descriptor read/8, error -71 [ 376.275120][ T5937] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 376.297498][ T1212] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 376.395366][ T981] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 376.439522][ T981] usb 5-1: device descriptor read/8, error -71 [ 376.497132][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.531801][ T5937] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 376.557995][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.585473][ T981] usb usb5-port1: unable to enumerate USB device [ 376.592481][ T1212] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 376.603909][ T1212] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 376.609026][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.643623][ T1212] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.649722][ T9768] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 376.709849][ T5937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.717327][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.910503][ T5937] usb 3-1: USB disconnect, device number 43 [ 377.007331][ T9778] kAFS: unable to lookup cell '.,' [ 377.042948][ T9790] syzkaller1: entered promiscuous mode [ 377.050340][ T1212] usb 1-1: USB disconnect, device number 54 [ 377.057050][ T9790] syzkaller1: entered allmulticast mode [ 378.325048][ T1212] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 378.587412][ T1212] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.604958][ T1212] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 378.739405][ T1212] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.766041][ T1212] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.821186][ T1212] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.844039][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.954022][ T1212] usb 5-1: Product: syz [ 379.035254][ T1212] usb 5-1: Manufacturer: syz [ 379.047838][ T1212] cdc_wdm 5-1:1.0: skipping garbage [ 379.063169][ T1212] cdc_wdm 5-1:1.0: skipping garbage [ 379.135860][ T1212] cdc_wdm 5-1:1.0: skipping garbage [ 379.268534][ T1212] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 379.310228][ T1212] usb 5-1: USB disconnect, device number 35 [ 379.473543][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 379.606729][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 379.965059][ T1212] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 380.234974][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.266768][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.334086][ T1212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.410851][ T1212] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.468741][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.509353][ T1212] usb 2-1: config 0 descriptor?? [ 380.727890][ T9829] syzkaller1: entered promiscuous mode [ 380.750607][ T9829] syzkaller1: entered allmulticast mode [ 381.123568][ T1212] usbhid 2-1:0.0: can't add hid device: -71 [ 381.134994][ T1212] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 381.174135][ T1212] usb 2-1: USB disconnect, device number 43 [ 381.415207][ T5937] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 381.587619][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.635615][ T5937] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.665034][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.680423][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.714169][ T9844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.921251][ T5937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.221522][ T5937] usb 3-1: USB disconnect, device number 44 [ 382.324987][ T1212] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 382.494954][ T1212] usb 1-1: Using ep0 maxpacket: 8 [ 382.537889][ T1212] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 382.546579][ T1212] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.570974][ T1212] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 382.585023][ T1212] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 382.596676][ T1212] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.639864][ T1212] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 382.663101][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.898263][ T1212] usb 1-1: usb_control_msg returned -32 [ 382.903929][ T1212] usbtmc 1-1:16.0: can't read capabilities [ 383.020857][ T9869] ================================================================== [ 383.028978][ T9869] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 383.036921][ T9869] Read of size 8 at addr ffff88807d5ac5b0 by task syz.4.1224/9869 [ 383.044744][ T9869] [ 383.047105][ T9869] CPU: 1 UID: 0 PID: 9869 Comm: syz.4.1224 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 383.047130][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.047148][ T9869] Call Trace: [ 383.047155][ T9869] [ 383.047163][ T9869] dump_stack_lvl+0x189/0x250 [ 383.047199][ T9869] ? __virt_addr_valid+0x1c8/0x5c0 [ 383.047217][ T9869] ? rcu_is_watching+0x15/0xb0 [ 383.047244][ T9869] ? __kasan_check_byte+0x12/0x40 [ 383.047272][ T9869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.047296][ T9869] ? rcu_is_watching+0x15/0xb0 [ 383.047319][ T9869] ? lock_release+0x4b/0x3e0 [ 383.047341][ T9869] ? __virt_addr_valid+0x1c8/0x5c0 [ 383.047356][ T9869] ? __virt_addr_valid+0x4a5/0x5c0 [ 383.047372][ T9869] print_report+0xd2/0x2b0 [ 383.047394][ T9869] ? pause_parse_request+0x40/0x160 [ 383.047418][ T9869] kasan_report+0x118/0x150 [ 383.047436][ T9869] ? pause_parse_request+0x40/0x160 [ 383.047463][ T9869] ? __pfx_pause_parse_request+0x10/0x10 [ 383.047488][ T9869] pause_parse_request+0x40/0x160 [ 383.047514][ T9869] ? __pfx_pause_parse_request+0x10/0x10 [ 383.047538][ T9869] ethnl_default_set_doit+0x2c1/0xa40 [ 383.047558][ T9869] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 383.047584][ T9869] genl_family_rcv_msg_doit+0x215/0x300 [ 383.047608][ T9869] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 383.047635][ T9869] ? bpf_lsm_capable+0x9/0x20 [ 383.047660][ T9869] ? security_capable+0x7e/0x2e0 [ 383.047683][ T9869] genl_rcv_msg+0x60e/0x790 [ 383.047706][ T9869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.047725][ T9869] ? ref_tracker_free+0x63a/0x7d0 [ 383.047746][ T9869] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 383.047766][ T9869] ? __pfx_ref_tracker_free+0x10/0x10 [ 383.047792][ T9869] netlink_rcv_skb+0x205/0x470 [ 383.047807][ T9869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.047828][ T9869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.047861][ T9869] ? down_read+0x1ad/0x2e0 [ 383.047879][ T9869] genl_rcv+0x28/0x40 [ 383.047898][ T9869] netlink_unicast+0x758/0x8d0 [ 383.047926][ T9869] netlink_sendmsg+0x805/0xb30 [ 383.047946][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.047963][ T9869] ? aa_sock_msg_perm+0xf1/0x1d0 [ 383.047986][ T9869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.048006][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.048022][ T9869] __sock_sendmsg+0x21c/0x270 [ 383.048048][ T9869] ____sys_sendmsg+0x505/0x830 [ 383.048069][ T9869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.048092][ T9869] ? import_iovec+0x74/0xa0 [ 383.048112][ T9869] ___sys_sendmsg+0x21f/0x2a0 [ 383.048133][ T9869] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.048166][ T9869] ? __fget_files+0x2a/0x420 [ 383.048191][ T9869] ? __fget_files+0x3a0/0x420 [ 383.048211][ T9869] __x64_sys_sendmsg+0x19b/0x260 [ 383.048232][ T9869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.048257][ T9869] ? rcu_is_watching+0x15/0xb0 [ 383.048282][ T9869] ? do_syscall_64+0xbe/0x3b0 [ 383.048299][ T9869] do_syscall_64+0xfa/0x3b0 [ 383.048315][ T9869] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.048339][ T9869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.048358][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 383.048376][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.048398][ T9869] RIP: 0033:0x7f9bc9f8e929 [ 383.048418][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.048436][ T9869] RSP: 002b:00007f9bcaeaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.048456][ T9869] RAX: ffffffffffffffda RBX: 00007f9bca1b5fa0 RCX: 00007f9bc9f8e929 [ 383.048469][ T9869] RDX: 00000000200048c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 383.048481][ T9869] RBP: 00007f9bca010b39 R08: 0000000000000000 R09: 0000000000000000 [ 383.048493][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.048503][ T9869] R13: 0000000000000000 R14: 00007f9bca1b5fa0 R15: 00007fffb19f1688 [ 383.048522][ T9869] [ 383.048529][ T9869] [ 383.431251][ T9869] Allocated by task 9869: [ 383.435599][ T9869] kasan_save_track+0x3e/0x80 [ 383.440319][ T9869] __kasan_kmalloc+0x93/0xb0 [ 383.444928][ T9869] __kmalloc_noprof+0x27a/0x4f0 [ 383.449841][ T9869] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 383.455925][ T9869] genl_family_rcv_msg_doit+0xb8/0x300 [ 383.461405][ T9869] genl_rcv_msg+0x60e/0x790 [ 383.465923][ T9869] netlink_rcv_skb+0x205/0x470 [ 383.470724][ T9869] genl_rcv+0x28/0x40 [ 383.474712][ T9869] netlink_unicast+0x758/0x8d0 [ 383.479489][ T9869] netlink_sendmsg+0x805/0xb30 [ 383.484256][ T9869] __sock_sendmsg+0x21c/0x270 [ 383.488945][ T9869] ____sys_sendmsg+0x505/0x830 [ 383.493724][ T9869] ___sys_sendmsg+0x21f/0x2a0 [ 383.498408][ T9869] __x64_sys_sendmsg+0x19b/0x260 [ 383.503660][ T9869] do_syscall_64+0xfa/0x3b0 [ 383.508215][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.514127][ T9869] [ 383.516463][ T9869] The buggy address belongs to the object at ffff88807d5ac580 [ 383.516463][ T9869] which belongs to the cache kmalloc-64 of size 64 [ 383.530354][ T9869] The buggy address is located 8 bytes to the right of [ 383.530354][ T9869] allocated 40-byte region [ffff88807d5ac580, ffff88807d5ac5a8) [ 383.544792][ T9869] [ 383.547134][ T9869] The buggy address belongs to the physical page: [ 383.553561][ T9869] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d5ac [ 383.562604][ T9869] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 383.570515][ T9869] page_type: f5(slab) [ 383.574516][ T9869] raw: 00fff00000000000 ffff88801a4418c0 0000000000000000 dead000000000001 [ 383.583106][ T9869] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 383.591693][ T9869] page dumped because: kasan: bad access detected [ 383.598119][ T9869] page_owner tracks the page as allocated [ 383.603836][ T9869] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5203, tgid 5203 (udevd), ts 137812495675, free_ts 137697900907 [ 383.622510][ T9869] post_alloc_hook+0x240/0x2a0 [ 383.627296][ T9869] get_page_from_freelist+0x21e4/0x22c0 [ 383.632850][ T9869] __alloc_frozen_pages_noprof+0x181/0x370 [ 383.638668][ T9869] alloc_pages_mpol+0x232/0x4a0 [ 383.643535][ T9869] allocate_slab+0x8a/0x370 [ 383.648056][ T9869] ___slab_alloc+0xbeb/0x1410 [ 383.652743][ T9869] __kmalloc_noprof+0x305/0x4f0 [ 383.657608][ T9869] tomoyo_encode+0x28b/0x550 [ 383.662216][ T9869] tomoyo_realpath_from_path+0x58d/0x5d0 [ 383.667862][ T9869] tomoyo_path_perm+0x213/0x4b0 [ 383.672720][ T9869] security_inode_getattr+0x12f/0x330 [ 383.678109][ T9869] __x64_sys_newfstat+0xfc/0x200 [ 383.683057][ T9869] do_syscall_64+0xfa/0x3b0 [ 383.687569][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.693469][ T9869] page last free pid 13 tgid 13 stack trace: [ 383.699448][ T9869] __free_frozen_pages+0xb80/0xd80 [ 383.704564][ T9869] __tlb_remove_table+0x2d2/0x3b0 [ 383.709595][ T9869] tlb_remove_table_rcu+0x85/0x100 [ 383.714799][ T9869] rcu_core+0xca8/0x1710 [ 383.719060][ T9869] handle_softirqs+0x286/0x870 [ 383.723834][ T9869] __irq_exit_rcu+0xca/0x1f0 [ 383.728436][ T9869] irq_exit_rcu+0x9/0x30 [ 383.732685][ T9869] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 383.738429][ T9869] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.744452][ T9869] [ 383.746793][ T9869] Memory state around the buggy address: [ 383.752438][ T9869] ffff88807d5ac480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 383.760532][ T9869] ffff88807d5ac500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 383.768611][ T9869] >ffff88807d5ac580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 383.776690][ T9869] ^ [ 383.782341][ T9869] ffff88807d5ac600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 383.790422][ T9869] ffff88807d5ac680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 383.798578][ T9869] ================================================================== [ 383.806758][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.898178][ T9869] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 383.905428][ T9869] CPU: 1 UID: 0 PID: 9869 Comm: syz.4.1224 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 383.916891][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.927026][ T9869] Call Trace: [ 383.930413][ T9869] [ 383.933352][ T9869] dump_stack_lvl+0x99/0x250 [ 383.937965][ T9869] ? __asan_memcpy+0x40/0x70 [ 383.942566][ T9869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.947781][ T9869] ? __pfx__printk+0x10/0x10 [ 383.952406][ T9869] panic+0x2db/0x790 [ 383.956336][ T9869] ? __pfx_panic+0x10/0x10 [ 383.960780][ T9869] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 383.966702][ T9869] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 383.973063][ T9869] ? print_memory_metadata+0x314/0x400 [ 383.978681][ T9869] ? pause_parse_request+0x40/0x160 [ 383.983972][ T9869] check_panic_on_warn+0x89/0xb0 [ 383.988931][ T9869] ? pause_parse_request+0x40/0x160 [ 383.994149][ T9869] end_report+0x78/0x160 [ 383.998407][ T9869] kasan_report+0x129/0x150 [ 384.002916][ T9869] ? pause_parse_request+0x40/0x160 [ 384.008146][ T9869] ? __pfx_pause_parse_request+0x10/0x10 [ 384.013792][ T9869] pause_parse_request+0x40/0x160 [ 384.018843][ T9869] ? __pfx_pause_parse_request+0x10/0x10 [ 384.024498][ T9869] ethnl_default_set_doit+0x2c1/0xa40 [ 384.029898][ T9869] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 384.036253][ T9869] genl_family_rcv_msg_doit+0x215/0x300 [ 384.041844][ T9869] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 384.047941][ T9869] ? bpf_lsm_capable+0x9/0x20 [ 384.052653][ T9869] ? security_capable+0x7e/0x2e0 [ 384.057607][ T9869] genl_rcv_msg+0x60e/0x790 [ 384.062313][ T9869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.067444][ T9869] ? ref_tracker_free+0x63a/0x7d0 [ 384.072498][ T9869] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 384.078406][ T9869] ? __pfx_ref_tracker_free+0x10/0x10 [ 384.083793][ T9869] netlink_rcv_skb+0x205/0x470 [ 384.088565][ T9869] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.093599][ T9869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.098908][ T9869] ? down_read+0x1ad/0x2e0 [ 384.103332][ T9869] genl_rcv+0x28/0x40 [ 384.107328][ T9869] netlink_unicast+0x758/0x8d0 [ 384.112116][ T9869] netlink_sendmsg+0x805/0xb30 [ 384.116887][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.122182][ T9869] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.127136][ T9869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.132442][ T9869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.137731][ T9869] __sock_sendmsg+0x21c/0x270 [ 384.142425][ T9869] ____sys_sendmsg+0x505/0x830 [ 384.147210][ T9869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.152515][ T9869] ? import_iovec+0x74/0xa0 [ 384.157036][ T9869] ___sys_sendmsg+0x21f/0x2a0 [ 384.161729][ T9869] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.166953][ T9869] ? __fget_files+0x2a/0x420 [ 384.171551][ T9869] ? __fget_files+0x3a0/0x420 [ 384.176239][ T9869] __x64_sys_sendmsg+0x19b/0x260 [ 384.181184][ T9869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.186658][ T9869] ? rcu_is_watching+0x15/0xb0 [ 384.191441][ T9869] ? do_syscall_64+0xbe/0x3b0 [ 384.196130][ T9869] do_syscall_64+0xfa/0x3b0 [ 384.200640][ T9869] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.205856][ T9869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.211928][ T9869] ? clear_bhb_loop+0x60/0xb0 [ 384.216704][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.222605][ T9869] RIP: 0033:0x7f9bc9f8e929 [ 384.227044][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.246662][ T9869] RSP: 002b:00007f9bcaeaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.255107][ T9869] RAX: ffffffffffffffda RBX: 00007f9bca1b5fa0 RCX: 00007f9bc9f8e929 [ 384.263163][ T9869] RDX: 00000000200048c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 384.271172][ T9869] RBP: 00007f9bca010b39 R08: 0000000000000000 R09: 0000000000000000 [ 384.279158][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.287138][ T9869] R13: 0000000000000000 R14: 00007f9bca1b5fa0 R15: 00007fffb19f1688 [ 384.295128][ T9869] [ 384.298502][ T9869] Kernel Offset: disabled [ 384.302832][ T9869] Rebooting in 86400 seconds..