last executing test programs: 52m11.457980076s ago: executing program 1 (id=615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r2, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) 52m7.899463114s ago: executing program 1 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000480)=@multiplanar_overlay={0x9, 0x0, 0x4, 0x0, 0x1, {0x0, 0x2710}, {0x1, 0x0, 0x5, 0x7f, 0x5, 0x1, "68974136"}, 0x400, 0x3, {&(0x7f0000000400)=[{0x100, 0x2, {0x1000}, 0x9}, {0x3ff, 0x6, {0x7}, 0x6}]}, 0x0, 0x0, r3}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000000c0)={0x1, 0x2}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x2, 0x6b, 0x4, 0x8}, {0x8, 0x6e, 0x2, 0xffffffff}]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="850000004f00000066000000000004801600000000000000950000000000000018dd319ed9a5bec46d42ba8a215c4749074e08394de9a2765c2bece96e6db326cb4208d89426cb93c9511884f46cafdb732a27e078af70b2aa3503487bf19707f6955aa347e6e4"], &(0x7f0000000140)='GPL\x00', 0x6, 0x99, &(0x7f0000000000)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdab}, 0x64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 52m5.339752674s ago: executing program 1 (id=624): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept4$packet(r1, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x28, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x28}}, 0x4) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000099700000000000502fff900000000"], 0x10) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYRES8], 0x58}, 0x1, 0x2}, 0x80) 52m3.805439725s ago: executing program 1 (id=626): socket$kcm(0xa, 0x4, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902"], 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) listen(0xffffffffffffffff, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) 51m59.077542629s ago: executing program 1 (id=631): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000000000000000000000000000000000000000000020010000000000000000000000000000000000004e240000000000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x270d, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000100)=0x9) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {0x0, 0x0, 0x4}, 0xfd}, 0x18) socket$inet6(0xa, 0x5, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x88) r5 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43abeb82286ef1fdd20648083656d4d24491550", 0x55}], 0x1}, 0x48000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0xfffffffffffffe39) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000008255c00020100007f0904000001020d0000052406000105240000000d240f01ffffffff000000000006241a0000000905810308000000000904010000020d00000904010102020d0000090582020002000000090503020000000b00"], 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) socket(0x2, 0x2, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$vcs(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) 51m55.483642546s ago: executing program 1 (id=635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000180)='net/ip_vs_stats\x00') read$FUSE(r6, 0x0, 0x0) write$apparmor_current(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(r8, 0x6) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) dup(r7) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000000801080000000000000500070000090600024088f8000005000300010000000900010073797e30000000001c0004"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r10, r10, 0x0, 0x200000) 51m40.247516814s ago: executing program 32 (id=635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f00000001c0)=@usbdevfs_connect) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f00000022c0)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000180)='net/ip_vs_stats\x00') read$FUSE(r6, 0x0, 0x0) write$apparmor_current(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(r8, 0x6) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) dup(r7) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000000801080000000000000500070000090600024088f8000005000300010000000900010073797e30000000001c0004"], 0x78}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r10, r10, 0x0, 0x200000) 47m9.886998886s ago: executing program 3 (id=1672): openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x100000000000000, 0x0, 0x0) 47m8.634994891s ago: executing program 3 (id=1674): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4000031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x902) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x7d}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000010, 0x0, 0x400000a5d6}]}) read(r0, &(0x7f0000001400)=""/4074, 0x103a) 47m7.854538783s ago: executing program 3 (id=1678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) io_submit(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) 47m3.441950839s ago: executing program 3 (id=1689): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 47m2.153548126s ago: executing program 3 (id=1693): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x127b81) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socket$kcm(0x10, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1f4, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x6}, 0x9c) 47m1.497906227s ago: executing program 3 (id=1695): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x100000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) 47m0.386285846s ago: executing program 33 (id=1695): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x100000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) 44m27.465609032s ago: executing program 4 (id=1994): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x891e, &(0x7f00000010c0)="94b58ec770f2d03a") 44m27.226725363s ago: executing program 4 (id=1995): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_usb_connect(0x6, 0x2fd, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x7a, 0x28, 0x30, 0x40, 0x403, 0x87d0, 0x6fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2eb, 0x1, 0x2, 0x1, 0xc0, 0x1, [{{0x9, 0x4, 0x88, 0x7f, 0xa, 0xc4, 0x38, 0xef, 0x6, [@generic={0x58, 0x6, "54e450397591f4840094eceaa7f9979af4d73fb506b30ca3d5a979c5d5415cc7835b9644c83e9a6f80cb1e9f2d4a24ac86f733ead154abcf3080a697c56ed8d1ac8cc79245d9c8c2f509b74e181c8790eb6cb2ce4d12"}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x7}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x5, 0x6, [0x1, 0x1, 0x8, 0x4, 0x2, 0x0]}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x0, 0x3, "c97593"}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x6, "372a03c2"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x5, 0x2, 0x0, 0x4, 0x78}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0xc, '~'}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x3, 0x2, [0xa, 0x6], 0x2}]}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x9, 0x3, 0x9}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x27, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xe29a}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x1}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x2, 0xf7, 0x3}}, {{0x9, 0x5, 0x2, 0xf60e64739e4207a, 0x400, 0xf, 0xe7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x2, 0x9, 0x8}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x6, 0x8, 0xf}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0xb, 0x8, [@generic={0x36, 0x22, "f113ffdfb051b64f2ecd7b54364b367699c5617c3d3d5d264c58b2927e9ab8553ae02a0d46baddbbae122c5c5bedce657855fe00"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x3, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x44, 0xfffe}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7, 0x3, 0x24, [@generic={0xe1, 0x7, "159b91d4acc3a8f2a7b0a0869ec0933eb096cb4a8f8a18a6bb4c547f497160031e95a4b979d9796cb6ce0d410b1503779eb35e7f7c17cc82ae3327d94ac4dd061663894d651cd622578d2b8d70fdc09cb6bc08b23f706e284a8b47babd55d7ae181480afad1ae0f0f0c6ab59f2753c2ecea277f425c54644e797b4ebf0aaac3902bfd3969a5dafd7b37cfae02a686d086dac09d5254fbc7779803827b46ed0b19a202bc606d927fb44be5fb50c67e39774959aec8993a5fdeb389dcab063bba1489d84c41a518148b5f87b41d5e2ab74e33d67e6d6949b0dc9834f114fbb57"}, @generic={0x36, 0xf, "2db8378689b60965622f4477a90a6d4e51f84612a31c365d4562c67cc19daa1f0a8ae4c3c662bfc2a4b038ebd136c06449b83bfa"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x5df, 0xcf, 0xb, 0xa3, [@generic={0x72, 0xe, "5d2c22091923b1d152fdb53e32922ebe27c1f4742b13ca827662e22ca40cce6210149f8b454d67740017b396396e49ba07fa7160bf2eb352f764ca225c27d7518a3179d74fa07fc75a6c7f07346b737d5aae07460b18a3f62667c6c6b785e9c4840469d619cc552ecd170ed4e985d615"}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7d, 0x7, 0x0, 0x40, 0x4}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x88, 0xd, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x8, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x1, 0x2}]}, 0x3, [{0x1a, &(0x7f0000000100)=@string={0x1a, 0x3, "9a90a4e7b0eb8e2acdfd00daa81eff33c24b9452b647b780"}}, {0xce, &(0x7f0000000380)=@string={0xce, 0x3, "3226c11e5efbad244b89744ef1f6b0cc2498ee40ed828a8f10eef0a4f8c7c1f1c14b2b72c388f5b93283e7172e721fa9fb25f252a6e0cb3f929b72b4afc3bfda2f824f6f3afcc65f969f60ae38f98a8dc2a0f14e372e0a1905d11b896f7c3c6e337bc6b7f4c20528d8cbfb85dccdcd83337c54b5033ecb22b04f88464e313e087e3d5ca8cd166a3b472009636fc338f08c784925c604844fd73321ac9946e89196bab342aa7f2e36d3c139a04402f662c885ccf0f491f262353dac877c07d32cc862d46e7a0d830607289425"}}, {0x7f, &(0x7f0000000180)=@string={0x7f, 0x3, "7e2132e264c268a3418a06e34c469f33f925e1dff9adb8f26605721df403b9ec646e93f43d95858f8646d2ffe2ba90cdcc33b3f59ac96dadf111f1927707d32a3e51479349efab74c0c25aa5e27e0a8482c4104a07a63b6063eca5e32a59f0b0e90c1fe6ee9cc03ba9e6ca44d27eee0c0b3991deeb2d32b392b2264be9"}}]}) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000001400)={0x8, 0x1, 0x3, 0x7fffffff, 0x4, 0x83f, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xf, 0xbc, {0x5, 0xf, 0xbc, 0x1, [@generic={0xb7, 0x10, 0x1, "012c3c534fc6af3b18add74d6aa0845e6ee0fc8fec6cf03bcc11f76a2b40e356f468242e474e45bab2fcc50f59a141a5130b18acacfb1dead34988f4975b782f716e20d3220f6b0b3c8f8e93c9b56addad2d74a5c844f63480567961b949b534a54b5e6e4ac0e656873e6e5417236754bc33d664e419e4653771ebc1b3bcbaaa7832d06ad0971c25593cf1118dde4a6dbd1447fb26ba213cf26d4d2e5fbe3403163ab267ee6a5e5e4c35d826d2a0796f153a64b3"}]}}, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) unshare(0x6a040080) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002bb000/0x3000)=nil, 0x3000, 0x1) setuid(0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x38, 0x3, 0x0, "c8010000000a00010000b6035c2299230500e20000432600", 0x4745504d}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x10000000, 0x0, 0x0, 0xb49, 0x7, 0x1ec84d3e, 0x80, 0x3}, 0x0) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x4, 0x4001}, 0xc) modify_ldt$write(0x1, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x4, &(0x7f00000001c0)=0xb, 0x4) openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x46, &(0x7f0000002e80)=ANY=[], 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) 44m22.756981395s ago: executing program 4 (id=2003): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x420002, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x20000091) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x10fff6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind(r3, &(0x7f0000001000)=@phonet={0x23, 0x7, 0x2, 0x40}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080006c00000000308000840000000300500010006000000050005000a00ffff13000300686173683a6e65742c696661636500000900020073797a3100000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000005400e501000000000000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="01000400ffffffff0000000000000000000000000000000020000100", @ANYRES32=r10, @ANYBLOB="01310200fe88000000000000000000000000000186dd00004547ff01e91808ee607f27b97826897ae6c358365474926b9b0fa049b648e6f4cb8d05d30a15c5f33ee6871b549c0115dca1f33fae3e84"], 0x58}}, 0x20044050) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000001c0)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6t\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000940)=""/118) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x40000) fcntl$setstatus(r2, 0x4, 0x2400) 44m21.568918221s ago: executing program 4 (id=2008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000}, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x8, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x405, 0x3abc4c, 0x2c8240}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 44m16.938151423s ago: executing program 4 (id=2024): r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f0000000100)={0x9, @sdr={0x38414261, 0xa5ba}}) 44m16.727699862s ago: executing program 4 (id=2026): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 44m1.609233198s ago: executing program 34 (id=2026): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 12.121620098s ago: executing program 2 (id=7893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) 9.296565468s ago: executing program 6 (id=7907): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25001f29000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="20ab01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x4, &(0x7f0000000040)={0x19, "78b3060abe61f6304382447c087935e141a6349f941d4dc197ce00"}}) 8.89014814s ago: executing program 2 (id=7911): unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r3, 0xffffffffffffffff, 0x0) 8.678615551s ago: executing program 5 (id=7912): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 8.25570033s ago: executing program 5 (id=7916): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 7.775312441s ago: executing program 2 (id=7919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7.054657895s ago: executing program 6 (id=7921): kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) 6.768491834s ago: executing program 2 (id=7923): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6.513799355s ago: executing program 6 (id=7924): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x7, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) 6.420332507s ago: executing program 0 (id=7925): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) 6.200047713s ago: executing program 6 (id=7927): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) 5.631880339s ago: executing program 5 (id=7929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) 5.600405397s ago: executing program 6 (id=7931): io_submit(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 4.893461697s ago: executing program 2 (id=7933): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x40101, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x5, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f00000003c0)={0x40000000, 0x6, "53e521e9a1c1fbb8f6d036f127f699e59f1443ab543504a58ca78128a11ab604", 0x7, 0xf, 0x7, 0x12, 0x1, 0x5, 0x3, 0x8, [0x4, 0x7f, 0x6, 0x6]}) sendfile(r0, r0, 0x0, 0xeccc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.300800934s ago: executing program 0 (id=7936): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x0, 0x0) 4.132649361s ago: executing program 7 (id=7937): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x557, &(0x7f0000000500)={0x0, 0x4533, 0x20000, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x1) 2.845450494s ago: executing program 0 (id=7938): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) syz_open_pts(0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x0, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20048844) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.9389338s ago: executing program 5 (id=7939): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x2c040000) unshare(0x2c020400) 1.917803472s ago: executing program 6 (id=7940): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 1.874808772s ago: executing program 7 (id=7941): sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x1, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.465384425s ago: executing program 7 (id=7942): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.431980465s ago: executing program 5 (id=7943): sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 1.244314101s ago: executing program 7 (id=7944): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x1070bd2d, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xae}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x8b}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 793.892842ms ago: executing program 0 (id=7945): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xfffffffffffffdd9, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 618.760976ms ago: executing program 2 (id=7946): syz_open_dev$vim2m(0x0, 0x4541b6bf, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 592.790401ms ago: executing program 7 (id=7947): pipe2$9p(&(0x7f0000000240), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) 267.259936ms ago: executing program 0 (id=7948): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x8, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603"], 0x0) 255.986523ms ago: executing program 5 (id=7949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 178.061018ms ago: executing program 7 (id=7950): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x4, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00905, 0xbeb, '\x00', @string=&(0x7f0000000040)=0x8}}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendto$inet(r0, &(0x7f00000002c0)="f0cd", 0x2, 0xe61e2840a554b0d0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 0s ago: executing program 0 (id=7951): io_submit(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87"], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=unconfined pid=6046 comm="syz.5.6633" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 3326.333691][T28243] rc_core: IR keymap rc-dib0700-rc5 not found [ 3326.364567][T28243] Registered IR keymap rc-empty [ 3326.373945][T28243] dvb-usb: could not initialize remote control. [ 3326.399373][T28243] dvb-usb: Pinnacle PCTV 282e successfully initialized and connected. [ 3326.422332][T28243] usb 3-1: USB disconnect, device number 26 [ 3326.509339][T28243] dvb-usb: Pinnacle PCTV 282e successfully deinitialized and disconnected. [ 3326.956985][T28243] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3327.143407][T28243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3327.176905][T28243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3327.197337][T28243] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3327.317439][T28243] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3327.349105][T28243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3327.399212][T28243] usb 3-1: config 0 descriptor?? [ 3327.668035][T29173] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 3327.802824][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.815519][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.827005][T29173] usb 6-1: Using ep0 maxpacket: 32 [ 3327.831322][T28243] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 3327.838496][T29173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3327.851135][T29173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3327.883422][T29173] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3327.962652][T28243] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3328.098320][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3328.109070][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3328.497210][T29173] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3328.506419][T29173] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3328.514896][T29173] usb 6-1: Product: syz [ 3328.519204][T29173] usb 6-1: Manufacturer: syz [ 3328.523872][T29173] usb 6-1: SerialNumber: syz [ 3328.630883][T29173] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input139 [ 3328.703376][T28243] usb 3-1: USB disconnect, device number 27 [ 3328.730583][ T6075] fido_id[6075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 3328.931030][T29173] usb 6-1: USB disconnect, device number 109 [ 3328.981235][T29173] appletouch 6-1:1.0: input: appletouch disconnected [ 3329.865647][ T6094] sctp: [Deprecated]: syz.6.6647 (pid 6094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3329.865647][ T6094] Use struct sctp_sack_info instead [ 3330.777382][T29173] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 3330.957108][T29173] usb 7-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3330.996488][T29173] usb 7-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3331.011382][T29173] usb 7-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3331.057008][T29173] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 3331.066364][T29173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3331.587445][T29173] megaworld 0003:07B5:0312.004C: item fetching failed at offset 1/5 [ 3331.596345][T29173] megaworld 0003:07B5:0312.004C: parse failed [ 3331.642505][T29173] megaworld 0003:07B5:0312.004C: probe with driver megaworld failed with error -22 [ 3331.791940][T29173] usb 7-1: USB disconnect, device number 64 [ 3332.137408][T28243] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3332.278993][T29173] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 3332.308794][T28243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3332.366484][T28243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3332.378493][T28243] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3332.402696][T28243] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3332.436545][T28243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3332.439287][T29173] usb 6-1: Using ep0 maxpacket: 32 [ 3332.495564][T28243] usb 1-1: config 0 descriptor?? [ 3332.527594][T29173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3332.540348][T29173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3332.550882][T29173] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3332.566666][T29173] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3332.576637][T29173] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3332.586351][T29173] usb 6-1: Product: syz [ 3332.591078][T29173] usb 6-1: Manufacturer: syz [ 3332.595893][T29173] usb 6-1: SerialNumber: syz [ 3332.626795][T29173] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input140 [ 3332.842173][T29173] usb 6-1: USB disconnect, device number 110 [ 3332.890196][T29173] appletouch 6-1:1.0: input: appletouch disconnected [ 3332.934126][T28243] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 3332.993893][T28243] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3333.188806][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3333.214319][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3333.244434][T28243] usb 1-1: USB disconnect, device number 9 [ 3333.369864][ T6144] syzkaller0: entered allmulticast mode [ 3333.876925][T29173] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 3334.156969][T29173] usb 7-1: device descriptor read/64, error -71 [ 3334.437088][T29173] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 3334.577223][T29173] usb 7-1: device descriptor read/64, error -71 [ 3334.731007][T29173] usb usb7-port1: attempt power cycle [ 3335.081094][T29173] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 3335.117863][T29173] usb 7-1: device descriptor read/8, error -71 [ 3335.727232][T29173] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 3335.911441][T29173] usb 7-1: device descriptor read/8, error -71 [ 3336.038079][T29173] usb usb7-port1: unable to enumerate USB device [ 3336.307010][T31047] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 3336.541410][T31047] usb 6-1: Using ep0 maxpacket: 32 [ 3336.563218][T29173] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 3336.564080][T31047] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 3336.582695][T31047] usb 6-1: config 0 has no interface number 0 [ 3336.590273][T31047] usb 6-1: config 0 interface 184 has no altsetting 0 [ 3336.606284][T31047] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3336.616028][T31047] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 3336.635412][T31047] usb 6-1: Product: syz [ 3336.651759][T31047] usb 6-1: Manufacturer: syz [ 3336.686907][T31047] usb 6-1: SerialNumber: syz [ 3336.712549][T31047] usb 6-1: config 0 descriptor?? [ 3336.730716][T31047] smsc75xx v1.0.0 [ 3336.740096][T29173] usb 7-1: Using ep0 maxpacket: 8 [ 3336.776405][T29173] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3336.825499][T29173] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3336.890440][T29173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 3336.961859][T29173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 3337.022404][T29173] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3337.072601][T29173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3337.157497][T29173] hub 7-1:1.0: bad descriptor, ignoring hub [ 3337.210778][T29173] hub 7-1:1.0: probe with driver hub failed with error -5 [ 3337.235082][T29173] cdc_wdm 7-1:1.0: skipping garbage [ 3337.266951][T29173] cdc_wdm 7-1:1.0: skipping garbage [ 3337.297352][T29173] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 3337.303401][T29173] cdc_wdm 7-1:1.0: Unknown control protocol [ 3337.362915][T31047] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3337.396085][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3337.406950][T31047] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3337.437449][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3337.572606][ T4278] usb 7-1: USB disconnect, device number 69 [ 3338.490092][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6692'. [ 3339.233316][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6690'. [ 3339.262306][T31047] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 3339.275927][T31047] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 3339.316972][T31047] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 3339.351921][T31047] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3339.370872][ T6224] sctp: [Deprecated]: syz.2.6698 (pid 6224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3339.370872][ T6224] Use struct sctp_sack_info instead [ 3339.407546][T31047] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 3339.427721][T31047] usb 6-1: USB disconnect, device number 111 [ 3339.653284][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6701'. [ 3339.925352][T11261] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 3340.017287][ T4278] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3340.227171][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 3340.255926][ T4278] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3340.282332][ T4278] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3340.315627][ T4278] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3340.331004][ T4278] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3340.353561][ T4278] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3340.385533][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3340.397559][ T4278] usb 3-1: Product: syz [ 3340.403406][ T4278] usb 3-1: Manufacturer: syz [ 3340.411722][ T4278] usb 3-1: SerialNumber: syz [ 3340.483849][ T4278] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 3340.518350][ T4278] imon 3-1:155.0: unable to initialize intf0, err -19 [ 3340.526521][ T4278] imon:imon_probe: failed to initialize context! [ 3340.538801][ T4278] imon 3-1:155.0: unable to register, err -19 [ 3340.686163][ T4278] usb 3-1: USB disconnect, device number 28 [ 3341.585627][ T6255] sctp: [Deprecated]: syz.2.6710 (pid 6255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3341.585627][ T6255] Use struct sctp_sack_info instead [ 3341.700973][ T6257] tipc: Enabling of bearer rejected, already enabled [ 3341.896121][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6708'. [ 3342.436944][T29173] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3342.608466][T29173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3342.640864][T29173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3342.681917][T29173] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3342.740489][T29173] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3342.780842][T29173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3342.885524][ T6287] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3342.971417][T29173] usb 3-1: config 0 descriptor?? [ 3343.063565][ T6289] tipc: Started in network mode [ 3343.078646][ T6289] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 3343.094109][ T6289] tipc: Enabled bearer , priority 10 [ 3343.116907][T31047] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 3343.328626][T31047] usb 7-1: not running at top speed; connect to a high speed hub [ 3343.397601][T31047] usb 7-1: config 0 has no interfaces? [ 3343.407406][T31047] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3343.423267][T29173] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 3343.424916][T31047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3343.445774][T31047] usb 7-1: Product: syz [ 3343.461473][T31047] usb 7-1: Manufacturer: syz [ 3343.466510][T31047] usb 7-1: SerialNumber: syz [ 3343.491419][T31047] usb 7-1: config 0 descriptor?? [ 3343.493608][T29173] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3343.740573][T31047] usb 3-1: USB disconnect, device number 29 [ 3344.276968][T29173] tipc: Node number set to 4269801488 [ 3344.879531][T23507] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3345.058230][T23507] usb 3-1: Using ep0 maxpacket: 8 [ 3345.063648][T19711] usb 7-1: USB disconnect, device number 70 [ 3345.087924][T23507] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3345.100031][T23507] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 248 [ 3345.114439][T23507] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3345.133842][T23507] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3345.143597][T23507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3345.165334][T23507] usb 3-1: config 0 descriptor?? [ 3345.172561][ T6314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3345.227686][T31047] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 3345.405852][T19711] usb 3-1: USB disconnect, device number 30 [ 3345.412090][T31047] usb 6-1: Using ep0 maxpacket: 32 [ 3345.428907][T31047] usb 6-1: config 0 has no interfaces? [ 3345.434554][T31047] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 3345.467081][T31047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3345.499234][T31047] usb 6-1: config 0 descriptor?? [ 3345.718419][T29173] usb 6-1: USB disconnect, device number 112 [ 3346.113532][ T6334] bond0: entered promiscuous mode [ 3346.118980][ T6334] bond_slave_0: entered promiscuous mode [ 3346.124916][ T6334] bond_slave_1: entered promiscuous mode [ 3346.877919][ T6357] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6756'. [ 3347.068957][ T6363] netlink: 'syz.2.6750': attribute type 12 has an invalid length. [ 3347.087006][ T6363] netlink: 'syz.2.6750': attribute type 29 has an invalid length. [ 3347.109465][ T6363] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6750'. [ 3347.137175][ T6363] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6750'. [ 3347.318020][T29173] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 3347.351360][T31047] IPVS: starting estimator thread 0... [ 3347.457157][ T6368] IPVS: using max 30 ests per chain, 72000 per kthread [ 3347.523887][T29173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3347.543098][T29173] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3347.577119][T29173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3347.590940][T29173] usb 7-1: config 0 descriptor?? [ 3348.025003][T29173] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 3348.095970][T29173] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.004F/input/input143 [ 3348.358065][T29173] keytouch 0003:0926:3333.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 3348.545306][T31047] usb 7-1: USB disconnect, device number 71 [ 3348.594969][ T6377] fido_id[6377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 3349.539867][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6769'. [ 3350.516131][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6775'. [ 3351.642437][ T6429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6780'. [ 3352.236936][T31047] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3352.416943][T31047] usb 1-1: Using ep0 maxpacket: 8 [ 3352.424357][T31047] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3352.435358][T31047] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3352.465488][T31047] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 3352.496964][T31047] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 3352.518652][T31047] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3352.546950][T31047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.580261][T31047] hub 1-1:1.0: bad descriptor, ignoring hub [ 3352.586321][T31047] hub 1-1:1.0: probe with driver hub failed with error -5 [ 3352.627914][T31047] cdc_wdm 1-1:1.0: skipping garbage [ 3352.644646][T31047] cdc_wdm 1-1:1.0: skipping garbage [ 3352.667595][T31047] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 3352.684368][T31047] cdc_wdm 1-1:1.0: Unknown control protocol [ 3353.487791][ T6433] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 3353.692154][ T6406] syz.7.6773: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 3353.715918][ T6406] CPU: 1 UID: 0 PID: 6406 Comm: syz.7.6773 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 3353.715951][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3353.715975][ T6406] Call Trace: [ 3353.715985][ T6406] [ 3353.715996][ T6406] dump_stack_lvl+0x189/0x250 [ 3353.716043][ T6406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3353.716080][ T6406] ? __pfx__printk+0x10/0x10 [ 3353.716106][ T6406] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3353.716132][ T6406] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3353.716161][ T6406] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 3353.716190][ T6406] warn_alloc+0x214/0x310 [ 3353.716224][ T6406] ? __pfx_warn_alloc+0x10/0x10 [ 3353.716261][ T6406] ? __get_vm_area_node+0x28f/0x300 [ 3353.716286][ T6406] ? hash_netiface_create+0x358/0xfe0 [ 3353.716325][ T6406] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 3353.716385][ T6406] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3353.716410][ T6406] ? hash_netiface_create+0x358/0xfe0 [ 3353.716447][ T6406] ? __get_vm_area_node+0x28f/0x300 [ 3353.716471][ T6406] ? hash_netiface_create+0x358/0xfe0 [ 3353.716506][ T6406] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 3353.716567][ T6406] ? hash_netiface_create+0x358/0xfe0 [ 3353.716604][ T6406] ? __do_fast_syscall_32+0xb6/0x2b0 [ 3353.716650][ T6406] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3353.716695][ T6406] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3353.716727][ T6406] ? rcu_is_watching+0x15/0xb0 [ 3353.716764][ T6406] ? hash_netiface_create+0x358/0xfe0 [ 3353.716802][ T6406] ? hash_netiface_create+0x358/0xfe0 [ 3353.716832][ T6406] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 3353.716856][ T6406] ? hash_netiface_create+0x358/0xfe0 [ 3353.716887][ T6406] ? hash_netiface_create+0x2fe/0xfe0 [ 3353.716925][ T6406] hash_netiface_create+0x358/0xfe0 [ 3353.716973][ T6406] ? __nla_parse+0x40/0x60 [ 3353.717007][ T6406] ? __pfx_hash_netiface_create+0x10/0x10 [ 3353.717043][ T6406] ip_set_create+0xa94/0x1940 [ 3353.717083][ T6406] ? ip_set_create+0x4a2/0x1940 [ 3353.717131][ T6406] ? __pfx_ip_set_create+0x10/0x10 [ 3353.717204][ T6406] nfnetlink_rcv_msg+0xb4d/0x1130 [ 3353.717241][ T6406] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 3353.717295][ T6406] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3353.717327][ T6406] ? kasan_save_free_info+0x46/0x50 [ 3353.717412][ T6406] netlink_rcv_skb+0x205/0x470 [ 3353.717439][ T6406] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 3353.717476][ T6406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3353.717514][ T6406] ? bpf_lsm_capable+0x9/0x20 [ 3353.717535][ T6406] ? security_capable+0x7e/0x2e0 [ 3353.717572][ T6406] nfnetlink_rcv+0x26a/0x2520 [ 3353.717617][ T6406] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 3353.717655][ T6406] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 3353.717696][ T6406] ? __dev_queue_xmit+0x27e/0x3a70 [ 3353.717727][ T6406] ? do_fast_syscall_32+0x34/0x80 [ 3353.717759][ T6406] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3353.717792][ T6406] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3353.717839][ T6406] ? ref_tracker_free+0x63a/0x7d0 [ 3353.717868][ T6406] ? __copy_skb_header+0xa7/0x550 [ 3353.717900][ T6406] ? __pfx_ref_tracker_free+0x10/0x10 [ 3353.717929][ T6406] ? __skb_clone+0x63/0x7a0 [ 3353.717963][ T6406] ? __skb_clone+0x483/0x7a0 [ 3353.718000][ T6406] ? skb_clone+0x246/0x3a0 [ 3353.718033][ T6406] ? __netlink_deliver_tap+0x807/0x850 [ 3353.718059][ T6406] ? netlink_deliver_tap+0x2e/0x1b0 [ 3353.718091][ T6406] ? netlink_deliver_tap+0x2e/0x1b0 [ 3353.718116][ T6406] ? netlink_deliver_tap+0x2e/0x1b0 [ 3353.718149][ T6406] netlink_unicast+0x758/0x8d0 [ 3353.718184][ T6406] netlink_sendmsg+0x805/0xb30 [ 3353.718221][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3353.718251][ T6406] ? __import_iovec+0x5d4/0x7f0 [ 3353.718271][ T6406] ? aa_sock_msg_perm+0x94/0x160 [ 3353.718301][ T6406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3353.718330][ T6406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3353.718358][ T6406] __sock_sendmsg+0x219/0x270 [ 3353.718396][ T6406] ____sys_sendmsg+0x505/0x830 [ 3353.718430][ T6406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3353.718466][ T6406] ? __pfx_futex_wake_mark+0x10/0x10 [ 3353.718505][ T6406] ___sys_sendmsg+0x21f/0x2a0 [ 3353.718536][ T6406] ? __pfx____sys_sendmsg+0x10/0x10 [ 3353.718605][ T6406] ? __fget_files+0x2a/0x420 [ 3353.718671][ T6406] ? __fget_files+0x3a0/0x420 [ 3353.718708][ T6406] __sys_sendmsg+0x164/0x220 [ 3353.718739][ T6406] ? __pfx___sys_sendmsg+0x10/0x10 [ 3353.718776][ T6406] ? rcu_is_watching+0x15/0xb0 [ 3353.718816][ T6406] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3353.718852][ T6406] ? lockdep_hardirqs_on+0x9c/0x150 [ 3353.718889][ T6406] __do_fast_syscall_32+0xb6/0x2b0 [ 3353.718911][ T6406] ? lockdep_hardirqs_on+0x9c/0x150 [ 3353.718949][ T6406] do_fast_syscall_32+0x34/0x80 [ 3353.718971][ T6406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3353.719012][ T6406] RIP: 0023:0xf7fb3539 [ 3353.719039][ T6406] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3353.719060][ T6406] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3353.719084][ T6406] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 3353.719101][ T6406] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 3353.719115][ T6406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3353.719128][ T6406] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3353.719142][ T6406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3353.719175][ T6406] [ 3354.282937][ T6406] Mem-Info: [ 3354.286392][ T6406] active_anon:20682 inactive_anon:1 isolated_anon:0 [ 3354.286392][ T6406] active_file:11367 inactive_file:41155 isolated_file:0 [ 3354.286392][ T6406] unevictable:768 dirty:314 writeback:0 [ 3354.286392][ T6406] slab_reclaimable:10998 slab_unreclaimable:103613 [ 3354.286392][ T6406] mapped:37058 shmem:14576 pagetables:1742 [ 3354.286392][ T6406] sec_pagetables:0 bounce:0 [ 3354.286392][ T6406] kernel_misc_reclaimable:0 [ 3354.286392][ T6406] free:1245486 free_pcp:10506 free_cma:0 [ 3354.339316][ T6406] Node 0 active_anon:82728kB inactive_anon:4kB active_file:45432kB inactive_file:164420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148196kB dirty:1256kB writeback:0kB shmem:56768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12628kB pagetables:6804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 3354.383121][T19711] usb 1-1: USB disconnect, device number 10 [ 3354.402663][ T6406] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 3354.434796][ T6406] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3354.463924][ T6406] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 3354.469876][ T6406] Node 0 DMA32 free:1057704kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82680kB inactive_anon:4kB active_file:45432kB inactive_file:162580kB unevictable:1536kB writepending:1256kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:26388kB local_pcp:9636kB free_cma:0kB [ 3354.503775][ T6406] lowmem_reserve[]: 0 0 1 1 1 [ 3354.514116][ T6406] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 3354.547847][ T6406] lowmem_reserve[]: 0 0 0 0 0 [ 3354.552692][ T6406] Node 1 Normal free:3908876kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15760kB local_pcp:0kB free_cma:0kB [ 3354.587800][ T6406] lowmem_reserve[]: 0 0 0 0 0 [ 3354.593022][ T6406] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3354.609153][ T6406] Node 0 DMA32: 34*4kB (UME) 16*8kB (E) 16*16kB (UME) 19*32kB (ME) 7*64kB (E) 1*128kB (M) 1*256kB (E) 20*512kB (ME) 11*1024kB (UM) 1*2048kB (M) 252*4096kB (M) = 1057704kB [ 3354.639929][ T6406] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 3354.654298][ T6406] Node 1 Normal: 185*4kB (UME) 49*8kB (UME) 42*16kB (UE) 228*32kB (UE) 98*64kB (UME) 30*128kB (UM) 14*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 5*2048kB (UME) 945*4096kB (M) = 3908876kB [ 3354.689989][ T6406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3354.707138][ T6406] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 3354.716558][ T6406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3354.730851][ T6406] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 3354.749150][ T6406] 67095 total pagecache pages [ 3354.754102][ T6406] 1 pages in swap cache [ 3354.758812][ T6406] Free swap = 124992kB [ 3354.763005][ T6406] Total swap = 124996kB [ 3354.767703][ T6406] 2097051 pages RAM [ 3354.771556][ T6406] 0 pages HighMem/MovableOnly [ 3354.776270][ T6406] 424694 pages reserved [ 3354.781112][ T6406] 0 pages cma reserved [ 3355.437033][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6791'. [ 3358.018087][ T30] audit: type=1326 audit(1750983652.792:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.200347][ T30] audit: type=1326 audit(1750983652.792:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.303323][ T30] audit: type=1326 audit(1750983652.792:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.378600][ T30] audit: type=1326 audit(1750983652.792:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.446953][ T30] audit: type=1326 audit(1750983652.792:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.532123][ T30] audit: type=1326 audit(1750983652.792:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.631560][ T30] audit: type=1326 audit(1750983652.792:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.677786][ T30] audit: type=1326 audit(1750983652.792:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.774180][ T30] audit: type=1326 audit(1750983652.792:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3358.824452][ T30] audit: type=1326 audit(1750983652.792:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.6802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7fc00000 [ 3359.647000][ T4278] IPVS: starting estimator thread 0... [ 3359.749505][ T6513] IPVS: using max 24 ests per chain, 57600 per kthread [ 3360.267942][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6814'. [ 3360.290709][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6814'. [ 3360.314800][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6814'. [ 3360.341527][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6814'. [ 3363.080325][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 3363.080345][ T30] audit: type=1326 audit(1750983657.862:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6552 comm="syz.7.6826" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x0 [ 3364.245142][T31047] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 3364.397047][T23507] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3364.509618][T31047] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3364.524376][T31047] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3364.537009][T31047] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3364.601716][T31047] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3364.616918][T23507] usb 1-1: Using ep0 maxpacket: 32 [ 3364.622472][T31047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.625558][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6841'. [ 3364.639196][T23507] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3364.654575][T31047] usb 7-1: config 0 descriptor?? [ 3364.659747][T23507] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3364.687016][T23507] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3364.718598][T23507] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3364.728456][T23507] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3364.747530][T23507] usb 1-1: Product: syz [ 3364.752335][T23507] usb 1-1: Manufacturer: syz [ 3364.762418][T23507] usb 1-1: SerialNumber: syz [ 3364.807254][T23507] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input144 [ 3365.043805][T23507] usb 1-1: USB disconnect, device number 11 [ 3365.077682][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3365.087444][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3365.117052][T31047] usbhid 7-1:0.0: can't add hid device: -71 [ 3365.123209][T31047] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3365.162689][T23507] appletouch 1-1:1.0: input: appletouch disconnected [ 3365.177885][T31047] usb 7-1: USB disconnect, device number 72 [ 3365.375102][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6844'. [ 3365.503769][T11261] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 3365.894673][ T6422] Set syz1 is full, maxelem 65536 reached [ 3366.201147][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6858'. [ 3366.497362][T29173] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3366.577110][T31047] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 3366.647073][T29173] usb 3-1: Using ep0 maxpacket: 32 [ 3366.672681][T29173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3366.699718][T29173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3366.717828][T29173] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3366.754565][T29173] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3366.775976][T29173] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3366.784561][T31047] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3366.784598][T31047] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3366.784623][T31047] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3366.784671][T31047] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3366.784697][T31047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3366.788410][T31047] usb 7-1: config 0 descriptor?? [ 3366.813345][T29173] usb 3-1: Product: syz [ 3366.856297][T29173] usb 3-1: Manufacturer: syz [ 3366.861677][T29173] usb 3-1: SerialNumber: syz [ 3366.880296][T29173] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input145 [ 3367.082619][T29173] usb 3-1: USB disconnect, device number 31 [ 3367.226572][T29173] appletouch 3-1:1.0: input: appletouch disconnected [ 3367.322419][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3367.363554][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3367.396144][T31047] usbhid 7-1:0.0: can't add hid device: -71 [ 3367.404842][T31047] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3367.431794][T31047] usb 7-1: USB disconnect, device number 73 [ 3367.443800][T11261] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 3369.277101][T29242] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3369.416287][ T6708] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 3369.427110][T29242] usb 3-1: device descriptor read/64, error -71 [ 3369.450747][ T6708] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 3369.494634][ T6708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3369.557330][T11261] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 3369.567485][T11261] Bluetooth: hci5: Injecting HCI hardware error event [ 3369.576658][T11261] Bluetooth: hci5: hardware error 0x00 [ 3369.685250][T29242] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3369.836980][T29242] usb 3-1: device descriptor read/64, error -71 [ 3369.958832][T29242] usb usb3-port1: attempt power cycle [ 3370.318851][T29242] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3370.357960][T29242] usb 3-1: device descriptor read/8, error -71 [ 3370.375154][ T6729] tipc: Enabling of bearer rejected, failed to enable media [ 3370.529851][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6906'. [ 3370.539123][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6906'. [ 3370.593208][ T30] audit: type=1326 audit(1750983665.372:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.6.6908" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x0 [ 3370.607038][T29242] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3370.648337][T29242] usb 3-1: device descriptor read/8, error -71 [ 3370.757610][T29242] usb usb3-port1: unable to enumerate USB device [ 3371.627713][T11261] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 3372.270436][ T30] audit: type=1326 audit(1750983667.052:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.2.6930" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x0 [ 3372.679297][ T43] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 3372.837262][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 3372.846965][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3372.862526][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3372.881947][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3372.915409][ T43] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3372.947777][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3372.995986][ T43] hub 6-1:1.0: bad descriptor, ignoring hub [ 3373.015774][ T43] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3373.044408][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 3373.064134][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 3373.074363][ T43] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3373.337878][ T4278] usb 6-1: USB disconnect, device number 113 [ 3373.717148][ T4278] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 3373.739615][ T6831] ALSA: mixer_oss: invalid OSS volume '' [ 3373.876872][ T4278] usb 6-1: Using ep0 maxpacket: 8 [ 3373.894212][ T4278] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 3373.915973][ T4278] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3373.936152][ T4278] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3373.991516][ T4278] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3374.025718][ T4278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3374.083403][ T4278] hub 6-1:1.0: bad descriptor, ignoring hub [ 3374.115102][ T4278] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3374.142201][ T4278] cdc_wdm 6-1:1.0: skipping garbage [ 3374.165424][ T4278] cdc_wdm 6-1:1.0: skipping garbage [ 3374.177659][ T4278] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3374.387559][ T4278] usb 6-1: USB disconnect, device number 114 [ 3374.456950][T31047] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3374.639112][T31047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3374.671780][T31047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3374.687043][T31047] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3374.716945][T31047] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3374.736565][T31047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3374.758105][T31047] usb 1-1: config 0 descriptor?? [ 3375.170912][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3375.197838][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3375.220655][T31047] usbhid 1-1:0.0: can't add hid device: -71 [ 3375.232774][T31047] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3375.249849][T31047] usb 1-1: USB disconnect, device number 12 [ 3375.324050][ T6848] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6959'. [ 3376.147428][ T4278] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 3376.308641][ T4278] usb 6-1: Using ep0 maxpacket: 32 [ 3376.320126][ T4278] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3376.336741][ T4278] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3376.359404][ T4278] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3376.379632][ T4278] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3376.390998][ T4278] usb 6-1: Product: syz [ 3376.395668][ T4278] usb 6-1: Manufacturer: syz [ 3376.402919][ T4278] usb 6-1: SerialNumber: syz [ 3376.428155][ T4278] appletouch 6-1:1.0: Could not find int-in endpoint [ 3376.438993][ T4278] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 3376.467980][ T4278] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 3376.634269][ T43] usb 6-1: USB disconnect, device number 115 [ 3377.747538][ T4278] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 3377.909941][ T4278] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3377.933696][ T4278] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3377.971813][ T4278] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3378.005512][ T4278] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3378.029908][ T4278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3378.052203][ T4278] usb 6-1: config 0 descriptor?? [ 3378.477022][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3378.496029][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3378.587108][ T4278] usbhid 6-1:0.0: can't add hid device: -71 [ 3378.593331][ T4278] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3378.609475][ T4278] usb 6-1: USB disconnect, device number 116 [ 3380.227346][T31047] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3380.465109][T23507] IPVS: starting estimator thread 0... [ 3380.527047][T31047] usb 1-1: device descriptor read/64, error -71 [ 3380.577077][ T6966] IPVS: using max 29 ests per chain, 69600 per kthread [ 3380.677069][ T43] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 3380.766944][T31047] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3380.827096][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 3380.843788][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3380.855534][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3380.866889][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3380.890801][ T43] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3380.908001][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3380.913365][T31047] usb 1-1: device descriptor read/64, error -71 [ 3380.982907][ T43] hub 6-1:1.0: bad descriptor, ignoring hub [ 3381.002685][ T43] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3381.036664][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 3381.038485][T31047] usb usb1-port1: attempt power cycle [ 3381.047687][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 3381.053274][ T43] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3381.287601][T29242] usb 6-1: USB disconnect, device number 117 [ 3381.397431][T31047] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3381.428256][T31047] usb 1-1: device descriptor read/8, error -71 [ 3381.600002][ T6978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7016'. [ 3381.616935][T29242] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 3381.666968][T31047] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3381.706293][T31047] usb 1-1: device descriptor read/8, error -71 [ 3381.779773][T29242] usb 6-1: Using ep0 maxpacket: 8 [ 3381.802548][T29242] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 3381.820365][T31047] usb usb1-port1: unable to enumerate USB device [ 3381.831120][T29242] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3381.856040][T29242] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3381.893491][T29242] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3381.913014][T29242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3381.949611][T29242] hub 6-1:1.0: bad descriptor, ignoring hub [ 3381.976043][T29242] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3381.997474][T29242] cdc_wdm 6-1:1.0: skipping garbage [ 3382.005773][T29242] cdc_wdm 6-1:1.0: skipping garbage [ 3382.018938][T29242] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3382.403255][T29173] usb 6-1: USB disconnect, device number 118 [ 3383.472442][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7038'. [ 3383.737075][T29173] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 3383.745436][ T43] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 3383.826922][T31047] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3383.907077][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 3383.912364][T29173] usb 6-1: Using ep0 maxpacket: 8 [ 3383.930067][T29173] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3383.940134][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3383.957028][T31047] usb 3-1: device descriptor read/64, error -71 [ 3383.964809][T29173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3383.973318][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3383.991259][T29173] usb 6-1: config 0 descriptor?? [ 3383.997470][ T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3384.024010][ T43] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3384.045873][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3384.126509][ T43] hub 7-1:1.0: bad descriptor, ignoring hub [ 3384.158161][ T43] hub 7-1:1.0: probe with driver hub failed with error -5 [ 3384.166192][ T43] cdc_wdm 7-1:1.0: skipping garbage [ 3384.177875][ T43] cdc_wdm 7-1:1.0: skipping garbage [ 3384.183438][ T43] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3384.296913][T31047] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3384.426979][T31047] usb 3-1: device descriptor read/64, error -71 [ 3384.437393][T29242] usb 7-1: USB disconnect, device number 74 [ 3384.538363][T31047] usb usb3-port1: attempt power cycle [ 3384.787229][T29242] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 3384.888396][T31047] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3384.920990][T31047] usb 3-1: device descriptor read/8, error -71 [ 3384.957037][T29242] usb 7-1: Using ep0 maxpacket: 8 [ 3384.971564][T29242] usb 7-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 3384.985083][T29242] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3385.008566][T29242] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3385.026687][T29242] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3385.043007][T29242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3385.095027][T29242] hub 7-1:1.0: bad descriptor, ignoring hub [ 3385.107087][T29242] hub 7-1:1.0: probe with driver hub failed with error -5 [ 3385.127387][T29242] cdc_wdm 7-1:1.0: skipping garbage [ 3385.139246][T29242] cdc_wdm 7-1:1.0: skipping garbage [ 3385.154955][T29242] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3385.176950][T31047] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3385.203211][T31047] usb 3-1: device descriptor read/8, error -71 [ 3385.242177][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7052'. [ 3385.256229][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7052'. [ 3385.270469][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7052'. [ 3385.328745][T31047] usb usb3-port1: unable to enumerate USB device [ 3385.398498][T29242] usb 7-1: USB disconnect, device number 75 [ 3385.494165][T29242] IPVS: starting estimator thread 0... [ 3385.587248][ T7073] IPVS: using max 27 ests per chain, 64800 per kthread [ 3386.253692][T29173] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3386.278055][T29173] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 3386.317237][T29173] asix 6-1:0.0: probe with driver asix failed with error -71 [ 3386.368332][T29173] usb 6-1: USB disconnect, device number 119 [ 3386.727434][ T1210] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 3386.889382][ T1210] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3386.908301][ T1210] usb 1-1: config 0 has no interface number 0 [ 3386.924466][ T1210] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3386.952465][ T1210] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3386.973320][ T1210] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 3386.985756][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7072'. [ 3386.995723][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3387.015813][ T1210] usb 1-1: config 0 descriptor?? [ 3387.449253][ T1210] prodikeys 0003:041E:2801.0050: unknown main item tag 0x0 [ 3387.457369][ T1210] prodikeys 0003:041E:2801.0050: unknown main item tag 0x0 [ 3387.465293][ T1210] prodikeys 0003:041E:2801.0050: unknown main item tag 0x0 [ 3387.474675][ T1210] prodikeys 0003:041E:2801.0050: unknown main item tag 0x0 [ 3387.483311][ T1210] prodikeys 0003:041E:2801.0050: unknown main item tag 0x0 [ 3387.491300][ T1210] prodikeys 0003:041E:2801.0050: unknown main item tag 0x0 [ 3387.499746][ T1210] prodikeys 0003:041E:2801.0050: unknown main item tag 0x0 [ 3387.538902][ T1210] prodikeys 0003:041E:2801.0050: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 3387.565827][ T1210] hid_prodikeys: hid-prodikeys: failed to find output report [ 3387.565827][ T1210] [ 3387.671798][ T1210] usb 1-1: USB disconnect, device number 17 [ 3387.813390][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7079'. [ 3387.891830][ T7124] fido_id[7124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 3387.969495][T29242] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 3388.122835][T29242] usb 6-1: device descriptor read/64, error -71 [ 3388.139284][ T7134] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7083'. [ 3388.366930][T29242] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 3388.427521][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7089'. [ 3388.507390][T29242] usb 6-1: device descriptor read/64, error -71 [ 3388.617356][T29242] usb usb6-port1: attempt power cycle [ 3388.966922][T29242] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 3388.987898][T29242] usb 6-1: device descriptor read/8, error -71 [ 3389.243878][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.245115][T29242] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 3389.262778][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.287959][T29242] usb 6-1: device descriptor read/8, error -71 [ 3389.407351][T29242] usb usb6-port1: unable to enumerate USB device [ 3390.696734][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7107'. [ 3392.041798][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7118'. [ 3392.287112][ T1210] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3392.498520][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3392.533754][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3392.581464][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3392.635518][ T1210] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3392.663971][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3392.686614][ T1210] usb 1-1: config 0 descriptor?? [ 3392.916970][T28243] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 3393.067138][T28243] usb 6-1: Using ep0 maxpacket: 8 [ 3393.080603][T28243] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3393.108690][T28243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3393.130957][T28243] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3393.145824][ T1210] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 3393.150106][T28243] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3393.168269][T28243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3393.194284][ T1210] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3393.194611][T28243] hub 6-1:1.0: bad descriptor, ignoring hub [ 3393.244864][T28243] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3393.263471][T28243] cdc_wdm 6-1:1.0: skipping garbage [ 3393.270196][T28243] cdc_wdm 6-1:1.0: skipping garbage [ 3393.275577][T28243] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3393.337290][T29173] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3393.358864][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7130'. [ 3393.434121][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3393.447938][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3393.461310][T31047] usb 1-1: USB disconnect, device number 18 [ 3393.516661][T29173] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3393.527221][T28243] usb 6-1: USB disconnect, device number 124 [ 3393.533518][T29173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3393.545110][T29173] usb 3-1: Product: syz [ 3393.561380][T29173] usb 3-1: Manufacturer: syz [ 3393.566318][T29173] usb 3-1: SerialNumber: syz [ 3393.575413][T29173] usb 3-1: config 0 descriptor?? [ 3393.586275][ T7251] syzkaller0: entered promiscuous mode [ 3393.596444][ T7251] syzkaller0: entered allmulticast mode [ 3393.609485][T29173] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3393.856875][T28243] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 3394.007011][T28243] usb 6-1: Using ep0 maxpacket: 8 [ 3394.032586][T28243] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 3394.087013][T28243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3394.096204][T28243] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3394.168102][T28243] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3394.203878][T28243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3394.214379][T29173] gspca_sunplus: reg_w_riv err -71 [ 3394.239424][T29173] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 3394.276720][T29173] usb 3-1: USB disconnect, device number 40 [ 3394.413579][T28243] hub 6-1:1.0: bad descriptor, ignoring hub [ 3394.445303][T28243] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3394.616942][T28243] cdc_wdm 6-1:1.0: skipping garbage [ 3394.623253][T28243] cdc_wdm 6-1:1.0: skipping garbage [ 3394.646237][T28243] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3394.798194][T28243] usb 6-1: USB disconnect, device number 125 [ 3395.819467][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7141'. [ 3396.078469][T29173] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 3396.247595][T29173] usb 6-1: Using ep0 maxpacket: 32 [ 3396.259241][T29173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3396.276747][T29173] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3396.295932][T29173] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3396.308973][T29173] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3396.317485][T29173] usb 6-1: Product: syz [ 3396.321904][T29173] usb 6-1: Manufacturer: syz [ 3396.326540][T29173] usb 6-1: SerialNumber: syz [ 3396.354569][ T1210] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3396.374378][T29173] appletouch 6-1:1.0: Could not find int-in endpoint [ 3396.384076][T29173] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 3396.393529][T29173] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 3396.528989][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3396.540613][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3396.556990][ T1210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3396.570990][ T1210] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3396.582680][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3396.596038][ T1210] usb 3-1: config 0 descriptor?? [ 3396.624661][ T4278] usb 6-1: USB disconnect, device number 126 [ 3397.026748][ T1210] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 3397.068637][ T1210] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3397.290950][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3397.315525][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3397.344303][ T4278] usb 3-1: USB disconnect, device number 41 [ 3401.262639][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7148'. [ 3401.292634][ T7332] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 3403.005202][ T30] audit: type=1326 audit(1750983697.782:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.7189" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 3403.924580][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7201'. [ 3403.954983][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7201'. [ 3403.984388][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7201'. [ 3404.023335][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7201'. [ 3405.071896][ T30] audit: type=1326 audit(1750983699.852:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7452 comm="syz.6.7214" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x0 [ 3405.280512][ T7461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7218'. [ 3405.291553][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7218'. [ 3405.304590][ T7461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7218'. [ 3405.314503][ T7461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7218'. [ 3405.806929][ T4278] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 3406.000371][ T4278] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3406.102438][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7226'. [ 3406.511361][ T4278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3406.532321][ T4278] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3406.560829][ T4278] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3406.570939][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.617397][ T4278] usb 1-1: Product: syz [ 3406.621730][ T4278] usb 1-1: Manufacturer: syz [ 3406.626413][ T4278] usb 1-1: SerialNumber: syz [ 3406.651905][ T4278] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 3406.664848][ T4278] cdc_ncm 1-1:1.0: bind() failure [ 3406.745566][ T7500] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 3406.752246][ T7500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3406.763048][ T7500] vhci_hcd vhci_hcd.0: Device attached [ 3406.773594][ T7503] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7232'. [ 3406.783839][ T7503] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7232'. [ 3406.793658][ T7503] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7232'. [ 3406.803195][ T7503] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7232'. [ 3406.862292][ T4278] usb 1-1: USB disconnect, device number 19 [ 3407.027873][T29242] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 3407.134973][ T30] audit: type=1326 audit(1750983701.912:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.6.7238" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47539 code=0x0 [ 3407.579002][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7242'. [ 3407.686981][T23507] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3407.856925][T23507] usb 6-1: Using ep0 maxpacket: 16 [ 3408.279522][T23507] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 3408.294489][T23507] usb 6-1: config 0 has no interface number 0 [ 3408.308679][T23507] usb 6-1: config 0 interface 4 has no altsetting 0 [ 3408.332476][T23507] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 3408.359730][T23507] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3408.409804][T23507] usb 6-1: config 0 descriptor?? [ 3408.724000][T23507] usb 6-1: string descriptor 0 read error: -71 [ 3408.760079][T23507] usb 6-1: USB disconnect, device number 127 [ 3409.799025][ T7501] vhci_hcd: connection reset by peer [ 3409.810876][ T49] vhci_hcd: stop threads [ 3409.815340][ T49] vhci_hcd: release socket [ 3409.836860][ T49] vhci_hcd: disconnect device [ 3410.092244][ T30] audit: type=1326 audit(1750983704.832:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.2.7249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7fc00000 [ 3410.282646][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7255'. [ 3410.757114][T28243] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 3411.157826][T28243] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 3411.166884][T28243] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3411.192120][T28243] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 3411.215449][T28243] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 3411.242341][T28243] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3411.268052][T28243] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3411.286159][T28243] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3411.302871][T28243] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3411.325329][T28243] usb 1-1: Product: syz [ 3411.337022][T28243] usb 1-1: Manufacturer: syz [ 3411.344481][T28243] usb 1-1: SerialNumber: syz [ 3411.371118][T28243] usb 1-1: config 0 descriptor?? [ 3411.389567][ T7572] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3411.411867][T28243] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3411.451706][T28243] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3411.602544][ T7592] netlink: 'syz.6.7251': attribute type 10 has an invalid length. [ 3411.869343][ T7592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3411.901174][T28243] usb 1-1: USB disconnect, device number 20 [ 3411.922900][T28243] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 3411.959629][ T7592] batadv0: entered promiscuous mode [ 3412.011773][ T7592] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3412.087139][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 3412.095875][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 3412.176994][T29242] vhci_hcd: vhci_device speed not set [ 3412.375648][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7270'. [ 3414.059744][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7285'. [ 3414.522486][ T7656] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7290'. [ 3414.547669][ T1210] usb 7-1: new low-speed USB device number 76 using dummy_hcd [ 3414.714177][ T1210] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 3414.731018][ T1210] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 3414.753828][ T1210] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3414.779035][ T1210] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 3414.810479][ T1210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 3414.848642][ T1210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3414.880947][ T1210] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 3414.937429][ T1210] usb 7-1: string descriptor 0 read error: -22 [ 3414.951169][ T1210] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 3414.981496][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3415.018163][ T1210] usb 7-1: config 0 descriptor?? [ 3415.045160][ T1210] hub 7-1:0.0: bad descriptor, ignoring hub [ 3415.061702][ T1210] hub 7-1:0.0: probe with driver hub failed with error -5 [ 3415.083052][ T1210] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input148 [ 3415.304715][T23507] usb 7-1: USB disconnect, device number 76 [ 3416.056172][ T1210] IPVS: starting estimator thread 0... [ 3416.245704][ T7682] IPVS: using max 25 ests per chain, 60000 per kthread [ 3416.778031][ T7693] random: crng reseeded on system resumption [ 3417.100311][ T7701] netlink: 'syz.2.7307': attribute type 11 has an invalid length. [ 3417.123767][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7307'. [ 3417.343355][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7311'. [ 3417.930186][ T7732] netlink: 'syz.6.7322': attribute type 11 has an invalid length. [ 3417.951902][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7322'. [ 3418.079195][ T7738] netlink: 'syz.0.7323': attribute type 13 has an invalid length. [ 3418.216973][ T1210] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 3418.367840][ T1210] usb 6-1: Using ep0 maxpacket: 32 [ 3418.391287][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3418.429291][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3418.464622][ T1210] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 3418.474423][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.557110][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7325'. [ 3418.578257][ T1210] usb 6-1: config 0 descriptor?? [ 3419.014068][ T1210] saitek 0003:06A3:0621.0053: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.5-1/input0 [ 3419.201129][ T43] usb 6-1: USB disconnect, device number 2 [ 3419.442371][ T7764] netlink: 'syz.0.7334': attribute type 11 has an invalid length. [ 3419.463586][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7334'. [ 3419.482038][ T7766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7336'. [ 3419.614984][ T7768] netlink: 'syz.7.7337': attribute type 11 has an invalid length. [ 3419.679588][T11261] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 3420.333431][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7341'. [ 3420.406566][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7345'. [ 3420.586552][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7347'. [ 3420.630469][ T7796] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7348'. [ 3420.755214][ T7800] netlink: 'syz.5.7349': attribute type 11 has an invalid length. [ 3420.768584][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7349'. [ 3420.913194][ T7806] team_slave_1: entered promiscuous mode [ 3421.188314][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7356'. [ 3421.428449][ T7829] netlink: 'syz.5.7364': attribute type 11 has an invalid length. [ 3422.039466][ T7836] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 3423.020091][ T7854] __nla_validate_parse: 7 callbacks suppressed [ 3423.020121][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7374'. [ 3423.478175][ T7860] netlink: 'syz.0.7376': attribute type 11 has an invalid length. [ 3423.506614][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7376'. [ 3424.541371][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7383'. [ 3424.550680][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7383'. [ 3424.559711][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7383'. [ 3424.569181][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7383'. [ 3425.157143][ T7889] netlink: 'syz.5.7388': attribute type 11 has an invalid length. [ 3425.177136][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7388'. [ 3425.263332][ T7893] netlink: 'syz.5.7391': attribute type 11 has an invalid length. [ 3425.357635][T29173] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 3425.498288][ T7904] netlink: 'syz.2.7395': attribute type 1 has an invalid length. [ 3425.520629][T29173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3425.535788][ T7904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3425.547210][T29173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3425.566375][ T7904] bond1: (slave ip6erspan0): making interface the new active one [ 3425.576729][ T7904] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 3425.578438][T29173] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3425.604829][T29173] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3425.650025][T29173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3425.681345][T29173] usb 1-1: config 0 descriptor?? [ 3425.800295][ T7907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7396'. [ 3425.810569][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7396'. [ 3425.821585][ T7907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7396'. [ 3426.151343][T29173] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 3426.187943][T29173] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3426.306899][T28243] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3426.438825][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3426.457400][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3426.527012][T29242] usb 1-1: USB disconnect, device number 21 [ 3426.537921][T28243] usb 3-1: Using ep0 maxpacket: 8 [ 3426.546002][T28243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 3426.575122][T28243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3426.599508][T28243] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 3426.609257][T28243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3426.618911][T28243] usb 3-1: Product: syz [ 3426.623169][T28243] usb 3-1: Manufacturer: syz [ 3426.637226][T28243] usb 3-1: SerialNumber: syz [ 3426.650387][ T7921] netlink: 'syz.6.7401': attribute type 11 has an invalid length. [ 3426.651195][T28243] usb 3-1: config 0 descriptor?? [ 3426.681641][T28243] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 3426.788542][ T7923] netlink: 'syz.6.7402': attribute type 11 has an invalid length. [ 3426.887171][T28243] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 3426.902755][T28243] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 3426.918314][T28243] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 3427.098347][ T1210] usb 3-1: USB disconnect, device number 42 [ 3427.443674][ T7945] netlink: 'syz.5.7412': attribute type 11 has an invalid length. [ 3427.495391][ T7947] netlink: 'syz.0.7413': attribute type 11 has an invalid length. [ 3427.779951][ T7954] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 3427.874875][ T30] audit: type=1326 audit(1750983722.652:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3427.926102][ T30] audit: type=1326 audit(1750983722.692:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3427.970874][ T30] audit: type=1326 audit(1750983722.702:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3427.993916][ T30] audit: type=1326 audit(1750983722.702:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3428.022401][ T30] audit: type=1326 audit(1750983722.702:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3428.086499][ T30] audit: type=1326 audit(1750983722.702:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3428.158702][ T7960] __nla_validate_parse: 7 callbacks suppressed [ 3428.158726][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7420'. [ 3428.187621][ T30] audit: type=1326 audit(1750983722.702:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3428.262463][ T30] audit: type=1326 audit(1750983722.702:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3428.340280][ T30] audit: type=1326 audit(1750983722.702:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.5.7417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 3428.568868][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7423'. [ 3428.721251][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7423'. [ 3428.743435][ T7973] netlink: 'syz.5.7424': attribute type 11 has an invalid length. [ 3428.756920][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7423'. [ 3428.776549][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7423'. [ 3429.569272][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7432'. [ 3429.781060][ T8001] netlink: 'syz.2.7435': attribute type 11 has an invalid length. [ 3429.811130][ T1210] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 3429.991974][ T1210] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3430.015753][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3430.055753][ T1210] usb 1-1: Product: syz [ 3430.060970][ T1210] usb 1-1: Manufacturer: syz [ 3430.065661][ T1210] usb 1-1: SerialNumber: syz [ 3430.088374][ T1210] usb 1-1: config 0 descriptor?? [ 3430.123431][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7439'. [ 3430.387509][T16681] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 3430.526303][ T1210] usb 1-1: Firmware: major: 217, minor: 215, hardware type: UNKNOWN (86) [ 3430.704633][ T8025] sctp: [Deprecated]: syz.6.7448 (pid 8025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3430.704633][ T8025] Use struct sctp_sack_info instead [ 3430.760028][ T1210] usb 1-1: failed to fetch extended address, random address set [ 3430.773068][ T1210] usb 1-1: atusb_probe: initialization failed, error = -524 [ 3430.781287][ T1210] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 3430.806730][ T1210] usb 1-1: USB disconnect, device number 22 [ 3431.393592][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7460'. [ 3431.422727][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7460'. [ 3431.450539][ T8051] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7460'. [ 3431.547986][ T8055] sctp: [Deprecated]: syz.5.7462 (pid 8055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3431.547986][ T8055] Use struct sctp_sack_info instead [ 3431.576629][ T8057] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3432.267402][T16681] Bluetooth: hci2: command 0x0406 tx timeout [ 3432.507002][T28243] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3432.631172][ T8085] ALSA: mixer_oss: invalid index 40000 [ 3432.683656][T28243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3432.710444][T28243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3432.741966][T28243] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3432.775857][T28243] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3432.799793][T28243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3432.830079][T28243] usb 3-1: config 0 descriptor?? [ 3433.536674][ T8097] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3433.563245][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3433.597690][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3433.952333][ T8099] netlink: 'syz.0.7479': attribute type 11 has an invalid length. [ 3434.044499][T28243] plantronics 0003:047F:FFFF.0055: No inputs registered, leaving [ 3434.059162][T28243] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3434.081363][T28243] usb 3-1: USB disconnect, device number 43 [ 3434.275394][ T8100] fido_id[8100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3436.014602][ T8126] netlink: 'syz.2.7490': attribute type 11 has an invalid length. [ 3436.167268][ T1210] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 3436.367265][ T1210] usb 1-1: Using ep0 maxpacket: 8 [ 3436.375880][ T1210] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 3436.390667][ T1210] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 3436.421009][ T1210] usb 1-1: config 135 has no interface number 0 [ 3436.428162][ T1210] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3436.452032][ T1210] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 3436.462859][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3436.473751][ T1210] usb 1-1: Product: syz [ 3436.499319][ T1210] usb 1-1: Manufacturer: syz [ 3436.532275][ T1210] usb 1-1: SerialNumber: syz [ 3436.577057][T29173] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 3436.729461][T29173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3436.764081][T29173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3436.819695][ T1210] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 3436.837256][T29173] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3436.852959][ T1210] usb 1-1: No valid video chain found. [ 3436.895073][ T1210] usb 1-1: USB disconnect, device number 23 [ 3436.921862][T29173] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3436.987698][T29173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3437.042589][T29173] usb 6-1: config 0 descriptor?? [ 3437.480355][T29173] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 3437.524241][T29173] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3437.748925][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3437.769512][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3437.804030][T29173] usb 6-1: USB disconnect, device number 3 [ 3441.074559][ T8194] __nla_validate_parse: 1 callbacks suppressed [ 3441.074581][ T8194] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7515'. [ 3441.096965][T19711] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 3441.126985][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7515'. [ 3441.156493][ T8194] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7515'. [ 3441.196974][ T8194] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7515'. [ 3441.261058][T19711] usb 1-1: Using ep0 maxpacket: 32 [ 3441.269143][T19711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3441.287037][T19711] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3441.305231][T19711] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3441.337707][T19711] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3441.359771][T19711] usb 1-1: Product: syz [ 3441.364230][T19711] usb 1-1: Manufacturer: syz [ 3441.383633][T19711] usb 1-1: SerialNumber: syz [ 3441.395367][ T8199] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7518'. [ 3441.633543][T19711] usb 1-1: USB disconnect, device number 24 [ 3441.998252][ T8209] netlink: 'syz.5.7522': attribute type 11 has an invalid length. [ 3443.553855][ T30] audit: type=1326 audit(1750983738.322:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.5.7539" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e539 code=0x0 [ 3444.017033][T19711] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 3444.191319][T19711] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3444.233715][T19711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3444.250887][T19711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3444.267074][T19711] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3444.287322][T19711] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3444.298236][T19711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3444.320840][T19711] usb 7-1: config 0 descriptor?? [ 3444.746300][T19711] plantronics 0003:047F:FFFF.0057: No inputs registered, leaving [ 3444.771147][T19711] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 3444.778990][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7549'. [ 3444.842912][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7549'. [ 3444.954773][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7549'. [ 3445.003430][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7549'. [ 3445.021812][T19711] usb 7-1: USB disconnect, device number 77 [ 3445.957873][ T8291] random: crng reseeded on system resumption [ 3447.276910][T19711] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 3447.437625][T19711] usb 1-1: device descriptor read/64, error -71 [ 3447.687034][T19711] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 3447.837037][T19711] usb 1-1: device descriptor read/64, error -71 [ 3448.047365][T19711] usb usb1-port1: attempt power cycle [ 3448.401051][T19711] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 3448.450278][T19711] usb 1-1: device descriptor read/8, error -71 [ 3448.746876][T19711] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 3448.807729][T19711] usb 1-1: device descriptor read/8, error -71 [ 3448.930078][T19711] usb usb1-port1: unable to enumerate USB device [ 3448.997201][T29173] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 3449.158769][T29173] usb 7-1: config 0 has an invalid interface number: 220 but max is 0 [ 3449.248704][T29173] usb 7-1: config 0 has no interface number 0 [ 3449.254991][T29173] usb 7-1: config 0 interface 220 has no altsetting 0 [ 3449.296439][T29173] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=89.24 [ 3449.311358][T29173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.337783][T29173] usb 7-1: Product: syz [ 3449.352453][T29173] usb 7-1: Manufacturer: syz [ 3449.364087][T29173] usb 7-1: SerialNumber: syz [ 3449.389471][T29173] usb 7-1: config 0 descriptor?? [ 3449.616708][T29173] usbtest 7-1:0.220: couldn't get endpoints, -22 [ 3449.658918][T29173] usbtest 7-1:0.220: probe with driver usbtest failed with error -22 [ 3449.692493][T29173] usb 7-1: USB disconnect, device number 78 [ 3450.675298][ T8357] Set syz1 is full, maxelem 65536 reached [ 3450.688180][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.694704][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3452.710253][T19711] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 3452.768852][T19711] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3455.478993][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7613'. [ 3455.519707][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7613'. [ 3455.560599][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7613'. [ 3455.593985][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7615'. [ 3455.613161][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7613'. [ 3456.086903][T29173] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 3456.253204][T29173] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3456.272540][T29173] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3456.284059][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3456.307035][T19711] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 3456.316896][T29173] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3456.336587][T29173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3456.371926][T29173] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3456.387760][T29173] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3456.406274][T29173] usb 6-1: Product: syz [ 3456.426594][T29173] usb 6-1: Manufacturer: syz [ 3456.460267][T29173] cdc_wdm 6-1:1.0: skipping garbage [ 3456.475527][ T43] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 3456.497720][T29173] cdc_wdm 6-1:1.0: skipping garbage [ 3456.508696][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3456.527901][T19711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3456.528664][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3456.568518][T29173] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 3456.587005][T29173] cdc_wdm 6-1:1.0: Unknown control protocol [ 3456.587015][T19711] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3456.612973][ T43] usb 1-1: Product: syz [ 3456.632602][ T43] usb 1-1: Manufacturer: syz [ 3456.665811][T19711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3456.668721][ T43] usb 1-1: SerialNumber: syz [ 3456.727878][T19711] usb 7-1: config 0 descriptor?? [ 3456.753845][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3456.778392][T29173] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3456.860505][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 3456.867583][ C1] wdm_int_callback: 2 callbacks suppressed [ 3456.867609][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3456.880073][ C1] wdm_int_callback: 2 callbacks suppressed [ 3456.880096][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3456.892452][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3456.899110][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3456.905934][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3456.912591][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3456.919475][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3456.926144][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3456.937036][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3456.943730][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3456.957054][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3456.963753][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3456.970504][ T43] usb 6-1: USB disconnect, device number 4 [ 3456.976943][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3456.983611][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3456.989823][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3457.092159][T28243] usb 1-1: USB disconnect, device number 29 [ 3457.191225][T19711] keytouch 0003:0926:3333.0059: fixing up Keytouch IEC report descriptor [ 3457.227473][T19711] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0059/input/input153 [ 3457.390513][T19711] keytouch 0003:0926:3333.0059: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 3457.866884][T29173] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 3457.884416][T29173] ath9k_htc: Failed to initialize the device [ 3457.913820][T28243] usb 1-1: ath9k_htc: USB layer deinitialized [ 3457.966582][T19711] usb 7-1: USB disconnect, device number 79 [ 3458.267074][T28243] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 3458.441964][T28243] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 3458.474220][T28243] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3458.496016][T28243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.525331][T28243] usb 1-1: Product: syz [ 3458.536995][T28243] usb 1-1: Manufacturer: syz [ 3458.547606][T28243] usb 1-1: SerialNumber: syz [ 3458.580338][T28243] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3458.789770][T19711] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 3458.825766][T19711] usb 1-1: ath9k_htc: USB layer deinitialized [ 3458.876317][T28243] usb 1-1: USB disconnect, device number 30 [ 3460.652242][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7645'. [ 3460.702382][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7645'. [ 3460.752657][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7645'. [ 3460.802650][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7645'. [ 3461.676927][T19711] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 3461.677005][ T1210] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 3461.842501][T19711] usb 6-1: Using ep0 maxpacket: 16 [ 3461.869828][T19711] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3461.897045][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 3461.907019][T19711] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3461.931423][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3461.954650][ T1210] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3461.956956][T19711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3461.994701][ T1210] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3462.005000][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3462.030976][T19711] usb 6-1: config 0 descriptor?? [ 3462.199869][ T1210] usb 1-1: Product: syz [ 3462.204279][ T1210] usb 1-1: Manufacturer: syz [ 3462.210370][T19711] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input154 [ 3462.221489][ T1210] usb 1-1: SerialNumber: syz [ 3462.287109][ T1210] appletouch 1-1:1.0: Could not find int-in endpoint [ 3462.295834][ T1210] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 3462.323407][ T1210] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 3462.570941][ T1210] usb 1-1: USB disconnect, device number 31 [ 3464.536376][T19711] bcm5974 6-1:0.0: could not read from device [ 3464.613756][T19711] input: failed to attach handler mousedev to device input154, error: -5 [ 3464.650494][ T5185] bcm5974 6-1:0.0: could not read from device [ 3464.668548][T19711] usb 6-1: USB disconnect, device number 5 [ 3465.515740][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7674'. [ 3466.236371][ T8617] netlink: 'syz.5.7680': attribute type 11 has an invalid length. [ 3467.156652][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7688'. [ 3467.219392][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7688'. [ 3467.234739][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7688'. [ 3467.270967][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7688'. [ 3468.425737][ T8652] netlink: 892 bytes leftover after parsing attributes in process `syz.6.7695'. [ 3468.567061][ T1210] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3468.789102][ T1210] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3468.874604][ T1210] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3468.917336][ T1210] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3468.941747][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3468.979541][ T8648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3468.999506][ T1210] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3469.755700][T28243] usb 3-1: USB disconnect, device number 44 [ 3470.003136][ T8674] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3470.327002][T28243] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3470.531255][T28243] usb 6-1: Using ep0 maxpacket: 8 [ 3470.562840][T28243] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3470.608050][T28243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3470.613067][ T8682] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7710'. [ 3470.631413][T28243] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3470.644721][T28243] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3470.683422][T28243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3470.722468][T28243] hub 6-1:1.0: bad descriptor, ignoring hub [ 3470.765445][T28243] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3470.781536][T28243] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3470.947968][ T8694] binder: 8693:8694 ioctl c0306201 80001900 returned -14 [ 3471.046924][T31047] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 3471.077325][T28243] usb 6-1: USB disconnect, device number 6 [ 3471.252497][T31047] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 3471.271762][T31047] usb 1-1: config 0 has no interface number 0 [ 3471.290145][T31047] usb 1-1: config 0 interface 29 has no altsetting 0 [ 3471.310868][T31047] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 3471.328231][T31047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.356718][T31047] usb 1-1: Product: syz [ 3471.369241][T31047] usb 1-1: Manufacturer: syz [ 3471.375296][T31047] usb 1-1: SerialNumber: syz [ 3471.398702][T31047] usb 1-1: config 0 descriptor?? [ 3471.406940][T28243] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3471.566875][T28243] usb 6-1: Using ep0 maxpacket: 8 [ 3471.639862][T31047] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v38 fw v43.0.0 (2 channels) [ 3471.684033][T28243] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3471.704309][T28243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3471.763052][T28243] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3471.807300][T28243] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3471.819059][T28243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3471.832650][T31047] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 3471.846384][T28243] hub 6-1:1.0: bad descriptor, ignoring hub [ 3471.875180][T31047] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 3471.887039][T28243] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3471.919712][T28243] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3472.059424][T31047] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 3472.114739][T31047] usb 1-1: USB disconnect, device number 32 [ 3472.198388][T28243] usb 6-1: USB disconnect, device number 7 [ 3475.067170][T28243] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3475.374718][T28243] usb 6-1: Using ep0 maxpacket: 8 [ 3475.528562][T28243] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3475.546466][T28243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3475.586616][T28243] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3475.631120][T28243] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3475.689058][T28243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3475.762500][T28243] hub 6-1:1.0: bad descriptor, ignoring hub [ 3475.801441][T28243] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3475.846439][T28243] cdc_wdm 6-1:1.0: skipping garbage [ 3475.863123][T28243] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3476.107663][T28243] usb 6-1: USB disconnect, device number 8 [ 3476.437080][T28243] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3476.596916][T28243] usb 6-1: Using ep0 maxpacket: 8 [ 3476.612895][T28243] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3476.635591][T28243] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3476.655383][T28243] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3476.689459][T28243] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3476.714271][T28243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3476.747434][T28243] hub 6-1:1.0: bad descriptor, ignoring hub [ 3476.763780][T28243] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3476.782064][T28243] cdc_wdm 6-1:1.0: skipping garbage [ 3476.792567][T28243] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3477.057379][T28243] usb 6-1: USB disconnect, device number 9 [ 3477.296886][ T1210] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 3477.456935][ T1210] usb 1-1: Using ep0 maxpacket: 32 [ 3477.520536][ T1210] usb 1-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 3477.534769][ T1210] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3477.570700][ T1210] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3477.584612][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3477.597288][ T1210] usb 1-1: Product: syz [ 3477.601824][ T1210] usb 1-1: Manufacturer: syz [ 3477.606662][ T1210] usb 1-1: SerialNumber: syz [ 3477.662400][ T1210] appletouch 1-1:1.0: Could not find int-in endpoint [ 3477.670471][ T1210] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 3477.680189][ T1210] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 3477.868024][ T1210] usb 1-1: USB disconnect, device number 33 [ 3478.433065][ T8791] netlink: 892 bytes leftover after parsing attributes in process `syz.6.7751'. [ 3479.010699][ T8806] netlink: 'syz.0.7758': attribute type 11 has an invalid length. [ 3480.223322][ T8826] netlink: 'syz.0.7767': attribute type 2 has an invalid length. [ 3481.425034][ T8850] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7776'. [ 3481.607796][T31047] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3481.960694][T31047] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3481.976284][T31047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3482.027203][T31047] usb 3-1: Product: syz [ 3482.031497][T31047] usb 3-1: Manufacturer: syz [ 3482.036139][T31047] usb 3-1: SerialNumber: syz [ 3482.067543][T31047] usb 3-1: config 0 descriptor?? [ 3482.215521][ T8867] loop8: detected capacity change from 0 to 79 [ 3482.306235][ T8867] loop8: detected capacity change from 79 to 78 [ 3482.699825][T31047] usb 3-1: Firmware version (0.0) predates our first public release. [ 3482.722160][T31047] usb 3-1: Please update to version 0.2 or newer [ 3482.795539][T31047] usb 3-1: USB disconnect, device number 45 [ 3483.007483][T19711] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 3483.176879][T19711] usb 1-1: Using ep0 maxpacket: 8 [ 3483.184609][T19711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3483.205121][T19711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3483.261574][T19711] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3483.293541][ T8885] hub 8-0:1.0: USB hub found [ 3483.297015][T19711] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3483.316991][T19711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3483.339883][T19711] hub 1-1:1.0: bad descriptor, ignoring hub [ 3483.357070][T19711] hub 1-1:1.0: probe with driver hub failed with error -5 [ 3483.369375][ T8885] hub 8-0:1.0: 1 port detected [ 3483.388712][T19711] cdc_wdm 1-1:1.0: skipping garbage [ 3483.400431][T19711] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3483.667209][T19711] usb 1-1: USB disconnect, device number 34 [ 3484.007103][T19711] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 3484.207059][T19711] usb 1-1: Using ep0 maxpacket: 8 [ 3484.236927][T19711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3484.263084][T19711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3484.296891][T19711] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3484.330816][T19711] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3484.368566][T19711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3484.409964][T19711] hub 1-1:1.0: bad descriptor, ignoring hub [ 3484.426243][T19711] hub 1-1:1.0: probe with driver hub failed with error -5 [ 3484.455199][T19711] cdc_wdm 1-1:1.0: skipping garbage [ 3484.477032][T19711] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3484.497229][ T1210] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 3484.689382][ T1210] usb 7-1: Using ep0 maxpacket: 32 [ 3484.740401][T19711] usb 1-1: USB disconnect, device number 35 [ 3484.758812][ T1210] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 3484.758838][ T1210] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3484.771881][ T1210] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3484.771915][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3484.771939][ T1210] usb 7-1: Product: syz [ 3484.771956][ T1210] usb 7-1: Manufacturer: syz [ 3484.771973][ T1210] usb 7-1: SerialNumber: syz [ 3484.793491][ T1210] appletouch 7-1:1.0: Could not find int-in endpoint [ 3484.793531][ T1210] appletouch 7-1:1.0: probe with driver appletouch failed with error -5 [ 3484.794331][ T1210] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 3485.001900][ T1210] usb 7-1: USB disconnect, device number 80 [ 3485.932179][ T8926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7806'. [ 3485.964216][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7806'. [ 3485.995523][ T8926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7806'. [ 3486.025361][ T8926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7806'. [ 3486.307072][ T1210] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3486.488999][ T1210] usb 6-1: Using ep0 maxpacket: 8 [ 3486.504990][ T1210] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3486.537053][T31047] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3486.544890][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3486.565256][ T1210] usb 6-1: Product: syz [ 3486.575487][ T1210] usb 6-1: Manufacturer: syz [ 3486.585681][ T1210] usb 6-1: SerialNumber: syz [ 3486.639094][ T1210] usb 6-1: config 0 descriptor?? [ 3486.717158][T31047] usb 3-1: Using ep0 maxpacket: 8 [ 3486.744583][T31047] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 3486.781239][T31047] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3486.794635][T31047] usb 3-1: config 0 has no interface number 0 [ 3486.827817][T31047] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3486.849812][ T1210] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3487.019525][T31047] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 3487.036153][T31047] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3487.045755][T31047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3487.064218][T31047] usb 3-1: config 0 descriptor?? [ 3487.092449][T31047] ldusb 3-1:0.55: Interrupt in endpoint not found [ 3487.304799][T31047] usb 3-1: USB disconnect, device number 46 [ 3487.686005][ T1210] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3487.710573][ T1210] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 3487.759884][ T1210] usb 6-1: media controller created [ 3488.036373][ T1210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3488.527377][ T1210] i2c i2c-1: Added multiplexed i2c bus 2 [ 3488.626944][T23507] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3488.662837][ T1210] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 3488.786900][T23507] usb 3-1: Using ep0 maxpacket: 32 [ 3488.807038][T23507] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 3488.826450][T23507] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3488.848596][ T1210] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 3488.890217][T23507] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3488.902619][T23507] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3488.932037][T23507] usb 3-1: Product: syz [ 3488.944261][T23507] usb 3-1: Manufacturer: syz [ 3488.954951][T23507] usb 3-1: SerialNumber: syz [ 3488.976031][ T1210] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 3488.985084][T23507] appletouch 3-1:1.0: Could not find int-in endpoint [ 3489.005695][T23507] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 3489.053334][T23507] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 3489.196478][T23507] usb 3-1: USB disconnect, device number 47 [ 3489.429010][ T1210] DVB: Unable to find symbol mxl5005s_attach() [ 3489.668808][ T1210] usb 6-1: USB disconnect, device number 10 [ 3491.204350][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 3491.367237][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 3491.388676][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3491.447879][ T9001] netlink: 860 bytes leftover after parsing attributes in process `syz.5.7837'. [ 3491.458295][ T43] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3491.478579][ T43] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3491.546006][ T43] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3491.598620][ T43] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3491.631481][ T43] usb 8-1: Product: syz [ 3491.636090][ T43] usb 8-1: Manufacturer: syz [ 3491.686892][ T43] usb 8-1: SerialNumber: syz [ 3491.742020][ T43] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input155 [ 3492.012372][T31047] usb 8-1: USB disconnect, device number 2 [ 3492.133541][T31047] appletouch 8-1:1.0: input: appletouch disconnected [ 3492.350982][ T9019] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7845'. [ 3492.381480][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7845'. [ 3492.413155][ T9019] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7845'. [ 3492.467044][ T9019] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7845'. [ 3493.514054][ T9042] netlink: 860 bytes leftover after parsing attributes in process `syz.5.7851'. [ 3493.714660][T31047] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 3493.889773][ T9046] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7855'. [ 3493.907217][T31047] usb 8-1: Using ep0 maxpacket: 16 [ 3493.931321][T31047] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3493.963270][T31047] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3494.015850][T31047] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3494.061543][T31047] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3494.080340][T31047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3494.107205][T31047] usb 8-1: Product: syz [ 3494.119047][T31047] usb 8-1: Manufacturer: syz [ 3494.141418][T31047] usb 8-1: SerialNumber: syz [ 3494.317534][ T9055] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 3494.610807][T31047] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 3494.754317][T28243] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3494.774960][ T9063] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7862'. [ 3494.817079][T29173] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 3494.925552][T28243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3494.946436][T28243] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3494.987352][T29173] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 3494.999437][T29173] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3495.023427][T29173] usb 7-1: config 0 has no interface number 0 [ 3495.059777][T29173] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3495.091440][T29173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3495.174506][T28243] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3495.184694][T28243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3495.435473][T29173] usb 7-1: config 0 descriptor?? [ 3495.457949][T28243] usb 3-1: config 0 descriptor?? [ 3495.639844][T31047] usb 8-1: current rate 9338450 is different from the runtime rate 9338507 [ 3495.927934][T31047] usb 8-1: USB disconnect, device number 3 [ 3496.043090][ T8027] udevd[8027]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3496.446294][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3496.468180][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3497.087560][ T9094] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7873'. [ 3497.506435][ T43] usb 3-1: USB disconnect, device number 48 [ 3497.729298][T29173] usb 7-1: USB disconnect, device number 81 [ 3498.020492][ T9103] tipc: Started in network mode [ 3498.025514][ T9103] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 3498.037992][ T9103] tipc: Enabled bearer , priority 0 [ 3498.627707][ T9108] netlink: 'syz.2.7878': attribute type 11 has an invalid length. [ 3499.047062][T29173] tipc: Node number set to 11578026 [ 3500.834184][ T9144] ALSA: mixer_oss: invalid index 40000 [ 3501.118259][ T9150] netlink: 'syz.5.7894': attribute type 13 has an invalid length. [ 3501.146035][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7895'. [ 3501.176032][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7895'. [ 3501.203073][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7895'. [ 3501.233584][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7895'. [ 3501.831690][ T9150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3502.923844][ T9176] IPv6: sit1: Disabled Multicast RS [ 3504.177011][ T43] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 3504.250954][ T30] audit: type=1326 audit(1750983799.032:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.2.7911" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x0 [ 3504.387084][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 3504.413188][ T43] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.1f [ 3504.493373][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3504.533164][ T43] usb 7-1: config 0 descriptor?? [ 3504.657357][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7915'. [ 3504.856906][T31047] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3504.875483][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3504.928310][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3504.961612][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3504.987381][ T43] usb 7-1: media controller created [ 3505.007551][T31047] usb 6-1: Using ep0 maxpacket: 8 [ 3505.037519][T31047] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 3505.065999][T31047] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3505.110158][T31047] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3505.142538][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3505.185896][T31047] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3505.226725][T31047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3505.275998][ T43] az6027: usb out operation failed. (-71) [ 3505.298739][ T43] az6027: usb out operation failed. (-71) [ 3505.318106][T31047] hub 6-1:1.0: bad descriptor, ignoring hub [ 3505.324160][T31047] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3505.352485][ T43] stb0899_attach: Driver disabled by Kconfig [ 3505.363060][T31047] cdc_wdm 6-1:1.0: skipping garbage [ 3505.383969][ T43] az6027: no front-end attached [ 3505.383969][ T43] [ 3505.394487][T31047] cdc_wdm 6-1:1.0: skipping garbage [ 3505.422978][ T43] az6027: usb out operation failed. (-71) [ 3505.426985][T31047] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3505.443400][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3505.489822][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input156 [ 3505.584306][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 3505.607283][T31047] usb 6-1: USB disconnect, device number 11 [ 3505.653191][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3505.721701][ T43] usb 7-1: USB disconnect, device number 82 [ 3505.878988][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3505.947487][T31047] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3506.136930][T31047] usb 6-1: Using ep0 maxpacket: 8 [ 3506.162908][T31047] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 3506.196854][T31047] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3506.234388][T31047] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3506.301494][T31047] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3506.326914][T31047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3506.398217][T31047] hub 6-1:1.0: bad descriptor, ignoring hub [ 3506.404279][T31047] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3506.447430][T31047] cdc_wdm 6-1:1.0: skipping garbage [ 3506.452776][T31047] cdc_wdm 6-1:1.0: skipping garbage [ 3506.460950][T31047] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3506.484962][ T9225] netlink: 'syz.0.7925': attribute type 11 has an invalid length. [ 3506.577940][T31047] usb 6-1: USB disconnect, device number 12 [ 3507.071384][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7928'. [ 3507.936944][T29173] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 3508.106935][T29173] usb 7-1: Using ep0 maxpacket: 32 [ 3508.124328][T29173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3508.146942][T29173] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3508.169763][T29173] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3508.208918][T29173] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 3508.246895][T29173] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 3508.259400][ T9247] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7934'. [ 3508.282346][T29173] usb 7-1: Product: syz [ 3508.289969][T29173] usb 7-1: Manufacturer: syz [ 3508.308169][T29173] usb 7-1: SerialNumber: syz [ 3508.342833][T29173] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input157 [ 3509.662223][T29173] usb 7-1: USB disconnect, device number 83 [ 3509.748482][T29173] appletouch 7-1:1.0: input: appletouch disconnected [ 3511.281751][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7941'. [ 3511.356977][ T1210] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 3511.536923][ T1210] usb 7-1: Using ep0 maxpacket: 8 [ 3511.550157][ T1210] usb 7-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 3511.600502][ T1210] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3511.649959][ T1210] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3511.671076][ T1210] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3511.698822][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3511.741752][ T1210] hub 7-1:1.0: bad descriptor, ignoring hub [ 3511.747997][ T1210] hub 7-1:1.0: probe with driver hub failed with error -5 [ 3511.755758][ T1210] cdc_wdm 7-1:1.0: skipping garbage [ 3511.766937][ T1210] cdc_wdm 7-1:1.0: skipping garbage [ 3511.772296][ T1210] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3512.150051][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.160190][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.282402][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7945'. [ 3512.548520][T29173] usb 7-1: reset high-speed USB device number 84 using dummy_hcd [ 3512.977033][ T1573] ------------[ cut here ]------------ [ 3512.983237][ T1573] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 3512.989401][ T9300] netlink: 'syz.7.7950': attribute type 10 has an invalid length. [ 3513.019600][ T1573] WARNING: CPU: 1 PID: 1573 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 3513.030439][ T1573] Modules linked in: [ 3513.035079][ T1573] CPU: 1 UID: 0 PID: 1573 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 3513.047510][ T1573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3513.057711][ T1573] Workqueue: bond0 bond_mii_monitor [ 3513.062986][ T1573] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 3513.069381][ T1573] Code: 7c fe ff ff e8 ee 5f 69 f8 c6 05 1e 1f 34 06 01 90 48 c7 c7 00 be 92 8c 48 c7 c6 fd 9a 9c 8d ba 48 00 00 00 e8 5e 08 2d f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 3513.081764][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 3513.089274][ T1573] RSP: 0018:ffffc9000b29f670 EFLAGS: 00010246 [ 3513.096473][ T9300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3513.102647][ T1573] RAX: 20190a4571b0f200 RBX: ffff888048dfa000 RCX: ffff88802f18bc00 [ 3513.110620][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 3513.118002][ T1573] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3513.125148][ T9300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3513.133324][ T1573] RBP: 0000000000000000 R08: ffffffff8fa10cf7 R09: 1ffffffff1f4219e [ 3513.148464][ T1573] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: 1ffff110091bf45d [ 3513.156496][ T1573] R13: dffffc0000000000 R14: ffffffff8c1c4ac8 R15: 0000000000000000 [ 3513.164570][ T1573] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 3513.173637][ T1573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3513.180359][ T1573] CR2: 000000003110dff8 CR3: 0000000067e46000 CR4: 00000000003526f0 [ 3513.188602][ T1573] Call Trace: [ 3513.191948][ T1573] [ 3513.194916][ T1573] ? ethtool_op_get_link+0xd/0x70 [ 3513.200035][ T1573] ethtool_op_get_link+0x15/0x70 [ 3513.205032][ T1573] bond_check_dev_link+0x447/0x6c0 [ 3513.210301][ T1573] ? __pfx_bond_check_dev_link+0x10/0x10 [ 3513.216111][ T1573] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 3513.222654][ T1573] bond_mii_monitor+0x428/0x2e00 [ 3513.227748][ T1573] ? update_curr+0x78/0x8b0 [ 3513.232323][ T1573] ? bond_mii_monitor+0x153/0x2e00 [ 3513.238436][ T1573] ? psi_task_change+0xe5/0x250 [ 3513.243360][ T1573] ? __pfx_bond_mii_monitor+0x10/0x10 [ 3513.248867][ T1573] ? register_lock_class+0x51/0x320 [ 3513.254138][ T1573] ? __lock_acquire+0xab9/0xd20 [ 3513.259139][ T1573] ? process_scheduled_works+0x9ef/0x17b0 [ 3513.264938][ T1573] ? _raw_spin_unlock_irq+0x23/0x50 [ 3513.270294][ T1573] ? process_scheduled_works+0x9ef/0x17b0 [ 3513.276096][ T1573] ? process_scheduled_works+0x9ef/0x17b0 [ 3513.282100][ T1573] process_scheduled_works+0xae1/0x17b0 [ 3513.287825][ T1573] ? __pfx_process_scheduled_works+0x10/0x10 [ 3513.293914][ T1573] worker_thread+0x8a0/0xda0 [ 3513.298657][ T1573] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3513.305077][ T1573] ? __kthread_parkme+0x7b/0x200 [ 3513.310386][ T1573] kthread+0x70e/0x8a0 [ 3513.314541][ T1573] ? __pfx_worker_thread+0x10/0x10 [ 3513.319841][ T1573] ? __pfx_kthread+0x10/0x10 [ 3513.324502][ T1573] ? _raw_spin_unlock_irq+0x23/0x50 [ 3513.329856][ T1573] ? lockdep_hardirqs_on+0x9c/0x150 [ 3513.335448][ T1573] ? __pfx_kthread+0x10/0x10 [ 3513.340212][ T1573] ret_from_fork+0x3fc/0x770 [ 3513.345193][ T1573] ? __pfx_ret_from_fork+0x10/0x10 [ 3513.350836][ T1573] ? __switch_to_asm+0x39/0x70 [ 3513.356306][ T1573] ? __switch_to_asm+0x33/0x70 [ 3513.361229][ T1573] ? __pfx_kthread+0x10/0x10 [ 3513.365876][ T1573] ret_from_fork_asm+0x1a/0x30 [ 3513.370800][ T1573] [ 3513.373919][ T1573] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3513.381246][ T1573] CPU: 1 UID: 0 PID: 1573 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 3513.393422][ T1573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3513.403586][ T1573] Workqueue: bond0 bond_mii_monitor [ 3513.408822][ T1573] Call Trace: [ 3513.412120][ T1573] [ 3513.415069][ T1573] dump_stack_lvl+0x99/0x250 [ 3513.419690][ T1573] ? __asan_memcpy+0x40/0x70 [ 3513.424303][ T1573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3513.429533][ T1573] ? __pfx__printk+0x10/0x10 [ 3513.434159][ T1573] panic+0x2db/0x790 [ 3513.438095][ T1573] ? __pfx_panic+0x10/0x10 [ 3513.442548][ T1573] ? ret_from_fork_asm+0x1a/0x30 [ 3513.447512][ T1573] __warn+0x31b/0x4b0 [ 3513.451523][ T1573] ? __linkwatch_sync_dev+0x303/0x350 [ 3513.456921][ T1573] ? __linkwatch_sync_dev+0x303/0x350 [ 3513.462315][ T1573] report_bug+0x2be/0x4f0 [ 3513.466761][ T1573] ? __linkwatch_sync_dev+0x303/0x350 [ 3513.472162][ T1573] ? __linkwatch_sync_dev+0x303/0x350 [ 3513.477556][ T1573] ? __linkwatch_sync_dev+0x305/0x350 [ 3513.482950][ T1573] handle_bug+0x84/0x160 [ 3513.487210][ T1573] exc_invalid_op+0x1a/0x50 [ 3513.491733][ T1573] asm_exc_invalid_op+0x1a/0x20 [ 3513.496687][ T1573] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 3513.502695][ T1573] Code: 7c fe ff ff e8 ee 5f 69 f8 c6 05 1e 1f 34 06 01 90 48 c7 c7 00 be 92 8c 48 c7 c6 fd 9a 9c 8d ba 48 00 00 00 e8 5e 08 2d f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 3513.522418][ T1573] RSP: 0018:ffffc9000b29f670 EFLAGS: 00010246 [ 3513.528599][ T1573] RAX: 20190a4571b0f200 RBX: ffff888048dfa000 RCX: ffff88802f18bc00 [ 3513.536592][ T1573] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 3513.544668][ T1573] RBP: 0000000000000000 R08: ffffffff8fa10cf7 R09: 1ffffffff1f4219e [ 3513.552668][ T1573] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: 1ffff110091bf45d [ 3513.560688][ T1573] R13: dffffc0000000000 R14: ffffffff8c1c4ac8 R15: 0000000000000000 [ 3513.568695][ T1573] ? ethtool_op_get_link+0xd/0x70 [ 3513.573754][ T1573] ethtool_op_get_link+0x15/0x70 [ 3513.578723][ T1573] bond_check_dev_link+0x447/0x6c0 [ 3513.583868][ T1573] ? __pfx_bond_check_dev_link+0x10/0x10 [ 3513.589534][ T1573] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 3513.595977][ T1573] bond_mii_monitor+0x428/0x2e00 [ 3513.600963][ T1573] ? update_curr+0x78/0x8b0 [ 3513.605514][ T1573] ? bond_mii_monitor+0x153/0x2e00 [ 3513.610703][ T1573] ? psi_task_change+0xe5/0x250 [ 3513.615678][ T1573] ? __pfx_bond_mii_monitor+0x10/0x10 [ 3513.621431][ T1573] ? register_lock_class+0x51/0x320 [ 3513.626664][ T1573] ? __lock_acquire+0xab9/0xd20 [ 3513.631558][ T1573] ? process_scheduled_works+0x9ef/0x17b0 [ 3513.637313][ T1573] ? _raw_spin_unlock_irq+0x23/0x50 [ 3513.642545][ T1573] ? process_scheduled_works+0x9ef/0x17b0 [ 3513.648292][ T1573] ? process_scheduled_works+0x9ef/0x17b0 [ 3513.654047][ T1573] process_scheduled_works+0xae1/0x17b0 [ 3513.659651][ T1573] ? __pfx_process_scheduled_works+0x10/0x10 [ 3513.666133][ T1573] worker_thread+0x8a0/0xda0 [ 3513.670888][ T1573] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3513.677265][ T1573] ? __kthread_parkme+0x7b/0x200 [ 3513.682235][ T1573] kthread+0x70e/0x8a0 [ 3513.686418][ T1573] ? __pfx_worker_thread+0x10/0x10 [ 3513.691564][ T1573] ? __pfx_kthread+0x10/0x10 [ 3513.696288][ T1573] ? _raw_spin_unlock_irq+0x23/0x50 [ 3513.701525][ T1573] ? lockdep_hardirqs_on+0x9c/0x150 [ 3513.706762][ T1573] ? __pfx_kthread+0x10/0x10 [ 3513.711384][ T1573] ret_from_fork+0x3fc/0x770 [ 3513.716006][ T1573] ? __pfx_ret_from_fork+0x10/0x10 [ 3513.721188][ T1573] ? __switch_to_asm+0x39/0x70 [ 3513.725973][ T1573] ? __switch_to_asm+0x33/0x70 [ 3513.730757][ T1573] ? __pfx_kthread+0x10/0x10 [ 3513.735389][ T1573] ret_from_fork_asm+0x1a/0x30 [ 3513.740186][ T1573] [ 3513.743630][ T1573] Kernel Offset: disabled [ 3513.747990][ T1573] Rebooting in 86400 seconds..