last executing test programs: 6.454613875s ago: executing program 2 (id=2714): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x11800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={0x0}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$read(0xb, r3, &(0x7f0000000640)=""/254, 0xfe) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7fff, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r5, 0x1, 0x1, 0x1, 0x6}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000340)=0x1e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x44, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) 5.453260827s ago: executing program 1 (id=2718): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a", 0x23}], 0x1}, 0x4004850) 5.376256869s ago: executing program 1 (id=2719): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}}, 0x10) 5.093582778s ago: executing program 1 (id=2721): chdir(&(0x7f0000000540)='./cgroup\x00') ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1000000, 0x6, 0xfffffffffffffffd, 0x0, 0xfffd, 0x1, 0x4002004c4, 0x1000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3], 0x25000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40086f52, &(0x7f0000000140)={0x3d, &(0x7f0000000200)=[{0x14, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x1, @svalue=0xfffffffffffffffa}, {0x0, @uvalue=0x6}, {0x0, @uvalue=0xffffffff}]}, 0xfff}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x800, 0x93, 0x86, 0xc4, 0x10, 0x66, 0xcf, 0xb, 0x6, 0xa, 0x0, 0x7, 0x69}, {0x6, 0x2, 0xfc, 0x8, 0xdd, 0xff, 0xd, 0x3, 0x5, 0x9, 0xf, 0xa}, {0x6, 0xfff, 0x3, 0x7, 0x1d, 0x1, 0x8, 0x1, 0x8, 0x8a, 0xc, 0xff, 0x6}], 0xfffffffa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r4, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) gettid() ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x2}) syz_usbip_server_init(0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac3(0x5, 0x9d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x8, 0xa0, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x26, 0x30, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x1e, 0x8}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x202, 0x5, 0x7f, 0x5, 0x200, 0x3, 0xc5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x9, 0x1, {0xa, 0x25, 0x25, 0x6cc4, 0x6, 0x4c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x80, 0x8, 0x4, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x7, 0x0, {0xa, 0x25, 0x25, 0xc3f, 0x3, 0xffff}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x9, 0x6, 0x8, 0x6}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x0, 0x5}]}}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) 5.070484049s ago: executing program 3 (id=2722): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) 4.854280856s ago: executing program 3 (id=2723): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) r1 = syz_clone3(&(0x7f00000003c0)={0x201f0000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x30}, &(0x7f0000000240)=""/130, 0x82, &(0x7f0000000300)=""/110, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, &(0x7f0000000440)) socket(0x2, 0x3, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x10000000000000a5, 0x0, [{0x10a, 0x0, 0x4}]}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xe) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) 4.601768694s ago: executing program 3 (id=2724): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)='ic', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) syz_usb_ep_write(r0, 0x81, 0x6a, &(0x7f0000000180)="ca0d5409d86fa7f86028b36ab7c64046aac015f200b17de3f50bfec6dde5280ef2ce814f74bf9990fc3e2e317c41b03a424a2c51d30f816cfb30eb226205937ff993cbd9cee2ff8efa862388cd157347f88547141282d260ec3b728a9cda408316250943a85e802713f3") preadv(r1, &(0x7f0000002140)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0xffff3702, 0x1) 4.40985569s ago: executing program 2 (id=2726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b20696f2b6d659edbee4093d3c95e6d4e639b05dee996d76f2f9f29ea608d00d6f2ad451493d07ae313d63bceaf5d5be81851fffd06c83847599826"], 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 3.417443122s ago: executing program 2 (id=2731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}}, 0x10) 3.244834697s ago: executing program 0 (id=2733): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 3.217509968s ago: executing program 0 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) r1 = syz_clone3(&(0x7f00000003c0)={0x201f0000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x30}, &(0x7f0000000240)=""/130, 0x82, &(0x7f0000000300)=""/110, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, &(0x7f0000000440)) socket(0x2, 0x3, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x10000000000000a5, 0x0, [{0x10a, 0x0, 0x4}]}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xe) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) 3.14508945s ago: executing program 2 (id=2735): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = creat(0x0, 0x5d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) capset(&(0x7f0000000000)={0x20080522}, 0x0) shmget(0x3, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240), 0x0, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x400, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) 2.994175135s ago: executing program 0 (id=2736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x11800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={0x0}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$read(0xb, r3, &(0x7f0000000640)=""/254, 0xfe) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7fff, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r5, 0x1, 0x1, 0x1, 0x6}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000340)=0x1e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x44, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) 2.586812458s ago: executing program 3 (id=2737): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 2.063994554s ago: executing program 4 (id=2738): chdir(&(0x7f0000000540)='./cgroup\x00') ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1000000, 0x6, 0xfffffffffffffffd, 0x0, 0xfffd, 0x1, 0x4002004c4, 0x1000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3], 0x25000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40086f52, &(0x7f0000000140)={0x3d, &(0x7f0000000200)=[{0x14, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x1, @svalue=0xfffffffffffffffa}, {0x0, @uvalue=0x6}, {0x0, @uvalue=0xffffffff}]}, 0xfff}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x800, 0x93, 0x86, 0xc4, 0x10, 0x66, 0xcf, 0xb, 0x6, 0xa, 0x0, 0x7, 0x69}, {0x6, 0x2, 0xfc, 0x8, 0xdd, 0xff, 0xd, 0x3, 0x5, 0x9, 0xf, 0xa}, {0x6, 0xfff, 0x3, 0x7, 0x1d, 0x1, 0x8, 0x1, 0x8, 0x8a, 0xc, 0xff, 0x6}], 0xfffffffa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r4, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) gettid() ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x2}) syz_usbip_server_init(0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5414, &(0x7f0000000000)) 1.5739012s ago: executing program 1 (id=2739): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.065970666s ago: executing program 4 (id=2740): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x3) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a001000000002", 0x29}], 0x1}, 0x4004850) 1.056052907s ago: executing program 2 (id=2741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b20696f2b6d659edbee4093d3c95e6d4e639b05dee996d76f2f9f29ea608d00d6f2ad451493d07ae313d63bceaf5d5be81851fffd06c83847599826"], 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 985.778489ms ago: executing program 3 (id=2742): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 928.790881ms ago: executing program 0 (id=2743): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x7, 0x0, 0x100016b}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f000000cac0)=[{0x0}], 0x1) 896.162102ms ago: executing program 4 (id=2744): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 798.755725ms ago: executing program 0 (id=2745): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) 776.396246ms ago: executing program 4 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) r1 = syz_clone3(&(0x7f00000003c0)={0x201f0000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x30}, &(0x7f0000000240)=""/130, 0x82, &(0x7f0000000300)=""/110, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, &(0x7f0000000440)) socket(0x2, 0x3, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x10000000000000a5, 0x0, [{0x10a, 0x0, 0x4}]}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='unlo'], 0xe) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) 699.883378ms ago: executing program 1 (id=2747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x40, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, 0x0, 0x80) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) 667.387759ms ago: executing program 0 (id=2748): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c12510000000000010902"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 617.225721ms ago: executing program 4 (id=2749): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 515.605344ms ago: executing program 4 (id=2750): chdir(&(0x7f0000000540)='./cgroup\x00') ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1000000, 0x6, 0xfffffffffffffffd, 0x0, 0xfffd, 0x1, 0x4002004c4, 0x1000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3], 0x25000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40086f52, &(0x7f0000000140)={0x3d, &(0x7f0000000200)=[{0x14, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x1, @svalue=0xfffffffffffffffa}, {0x0, @uvalue=0x6}, {0x0, @uvalue=0xffffffff}]}, 0xfff}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x800, 0x93, 0x86, 0xc4, 0x10, 0x66, 0xcf, 0xb, 0x6, 0xa, 0x0, 0x7, 0x69}, {0x6, 0x2, 0xfc, 0x8, 0xdd, 0xff, 0xd, 0x3, 0x5, 0x9, 0xf, 0xa}, {0x6, 0xfff, 0x3, 0x7, 0x1d, 0x1, 0x8, 0x1, 0x8, 0x8a, 0xc, 0xff, 0x6}], 0xfffffffa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r4, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) gettid() ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, 0x2}) syz_usbip_server_init(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5414, &(0x7f0000000000)) 113.129487ms ago: executing program 1 (id=2751): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = creat(0x0, 0x5d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) capset(&(0x7f0000000000)={0x20080522}, 0x0) shmget(0x3, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240), 0x0, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x400, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) 65.623449ms ago: executing program 3 (id=2752): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r2, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 0s ago: executing program 2 (id=2753): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x11800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={0x0}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$read(0xb, r3, &(0x7f0000000640)=""/254, 0xfe) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7fff, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r5, 0x1, 0x1, 0x1, 0x6}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000340)=0x1e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x44, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) kernel console output (not intermixed with test programs): nnect, device number 56 [ 713.571590][T11954] device syzkaller0 entered promiscuous mode [ 713.650382][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 713.650397][ T26] audit: type=1326 audit(1779535165.309:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 713.706747][ T26] audit: type=1326 audit(1779535165.369:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3faf5d68e code=0x7ffc0000 [ 713.767855][ T26] audit: type=1326 audit(1779535165.369:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 713.792816][ T26] audit: type=1326 audit(1779535165.369:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3faf5d68e code=0x7ffc0000 [ 713.819089][ T22] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 713.833244][ T26] audit: type=1326 audit(1779535165.369:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 713.871520][ T26] audit: type=1326 audit(1779535165.369:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 713.897279][ T26] audit: type=1326 audit(1779535165.369:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 713.928944][ T26] audit: type=1326 audit(1779535165.369:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 713.960219][ T26] audit: type=1326 audit(1779535165.369:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 713.996480][ T26] audit: type=1326 audit(1779535165.369:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.2167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3faf9e6c7 code=0x7ffc0000 [ 714.245650][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 714.255248][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 714.447212][ T22] gspca_cpia1: usb_control_msg 05, error -71 [ 714.459521][ T22] cpia1 3-1:0.0: unexpected systemstate: 00 [ 714.474885][ T22] usb 3-1: USB disconnect, device number 50 [ 715.138569][T11964] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2168'. [ 715.256587][T11968] input: syz1 as /devices/virtual/input/input32 [ 715.372627][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 715.382360][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 715.675522][ T4361] usb 1-1: USB disconnect, device number 55 [ 716.710633][T11959] netlink: 'syz.1.2167': attribute type 10 has an invalid length. [ 716.723921][T11959] team0: Device macvlan1 failed to register rx_handler [ 717.362679][ C1] net_ratelimit: 2 callbacks suppressed [ 717.362696][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 717.378022][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 717.629193][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2175'. [ 717.748239][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2180'. [ 717.912588][ T4277] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 718.002616][ T22] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 718.072744][ T4361] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 718.092692][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 718.099716][ T4277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.111023][ T4277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.122602][ T4325] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 718.127433][ T4277] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 718.139434][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.154816][ T4277] usb 3-1: config 0 descriptor?? [ 718.161246][ T4277] hub 3-1:0.0: USB hub found [ 718.204078][ T22] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 718.213412][ T22] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 718.222615][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.234170][ T22] usb 1-1: config 0 descriptor?? [ 718.263980][ T4361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.275560][ T4361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.285828][ T4361] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.298922][ T4361] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.308148][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 718.313448][ T4361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.323001][ T4325] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.335134][ T4361] usb 5-1: config 0 descriptor?? [ 718.340251][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 718.347008][ T4325] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 718.358246][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.374619][ T4277] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 718.376845][ T4325] usb 4-1: config 0 descriptor?? [ 718.482560][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 718.492248][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 718.564989][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 718.574642][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 718.770971][ T4361] usbhid 5-1:0.0: can't add hid device: -71 [ 718.789002][ T4277] hid-generic 0003:046D:C31C.001B: unknown main item tag 0x0 [ 718.806375][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.810258][ T4361] usbhid: probe of 5-1:0.0 failed with error -71 [ 718.822767][ T22] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 718.851146][ T4277] hid-generic 0003:046D:C31C.001B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 718.859351][ T4361] usb 5-1: USB disconnect, device number 45 [ 718.878188][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.310940][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 719.310954][ T26] audit: type=1326 audit(1779535170.969:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 719.324285][T12014] netlink: 'syz.1.2184': attribute type 10 has an invalid length. [ 719.351895][T12014] team0: Device macvlan1 failed to register rx_handler [ 719.362365][ T26] audit: type=1326 audit(1779535170.979:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3faf5d68e code=0x7ffc0000 [ 719.396075][ T26] audit: type=1326 audit(1779535170.979:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 719.432580][ T26] audit: type=1326 audit(1779535170.979:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3faf5d68e code=0x7ffc0000 [ 719.457952][ T26] audit: type=1326 audit(1779535170.979:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 719.488438][ T26] audit: type=1326 audit(1779535170.979:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 719.518215][ T26] audit: type=1326 audit(1779535170.979:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 719.524784][T12016] device syzkaller0 entered promiscuous mode [ 719.551883][ T26] audit: type=1326 audit(1779535170.979:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 719.581259][ T26] audit: type=1326 audit(1779535170.979:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 719.626227][ T26] audit: type=1326 audit(1779535170.979:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12013 comm="syz.1.2184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3faf9e6c7 code=0x7ffc0000 [ 719.830582][T12020] input: syz1 as /devices/virtual/input/input33 [ 719.843245][T11991] usb 3-1: reset high-speed USB device number 51 using dummy_hcd [ 720.482659][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 720.492325][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 720.565130][ T22] usb 3-1: USB disconnect, device number 51 [ 720.751413][ T4277] usb 1-1: USB disconnect, device number 56 [ 720.871596][ T4325] usbhid 4-1:0.0: can't add hid device: -71 [ 720.885497][ T4325] usbhid: probe of 4-1:0.0 failed with error -71 [ 720.930767][ T4325] usb 4-1: USB disconnect, device number 62 [ 721.079225][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2189'. [ 721.605020][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 721.614586][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 722.173191][T12040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2194'. [ 722.182245][T12042] netlink: 'syz.0.2195': attribute type 10 has an invalid length. [ 722.390741][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2200'. [ 722.558169][ T4277] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 722.573435][ T22] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 722.742578][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 722.749486][ T4277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.763784][ T4277] usb 3-1: config 0 has no interfaces? [ 722.764199][ T22] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 722.769297][ T4277] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 722.769323][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.785075][ T4277] usb 3-1: config 0 descriptor?? [ 722.803234][ T22] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 722.812803][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.830298][ T22] usb 1-1: config 0 descriptor?? [ 723.026243][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.042938][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.055111][ T22] usb 3-1: USB disconnect, device number 52 [ 723.260467][T12068] netlink: 'syz.3.2207': attribute type 10 has an invalid length. [ 723.386314][T12072] device syzkaller0 entered promiscuous mode [ 723.396329][T12074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.406474][T12074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.602643][ C1] net_ratelimit: 2 callbacks suppressed [ 723.602656][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 723.617803][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 723.640517][T12078] input: syz1 as /devices/virtual/input/input34 [ 724.460022][ T26] kauditd_printk_skb: 128 callbacks suppressed [ 724.460035][ T26] audit: type=1326 audit(1779535176.119:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.498224][ T26] audit: type=1326 audit(1779535176.149:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.527951][ T26] audit: type=1326 audit(1779535176.169:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2e415d68e code=0x7ffc0000 [ 724.552582][ T26] audit: type=1326 audit(1779535176.169:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.576987][ T26] audit: type=1326 audit(1779535176.169:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.601346][ T26] audit: type=1326 audit(1779535176.169:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2e415d68e code=0x7ffc0000 [ 724.632485][ T26] audit: type=1326 audit(1779535176.169:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.675168][ T26] audit: type=1326 audit(1779535176.169:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.723560][ T26] audit: type=1326 audit(1779535176.169:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.725088][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 724.748294][ T26] audit: type=1326 audit(1779535176.169:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12101 comm="syz.2.2218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 724.757201][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 724.802745][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 724.812577][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 726.211777][T12102] netlink: 'syz.2.2218': attribute type 10 has an invalid length. [ 726.270079][ T22] usb 1-1: USB disconnect, device number 57 [ 726.367669][T12113] fuse: Bad value for 'fd' [ 726.700139][T12133] netlink: 'syz.4.2231': attribute type 10 has an invalid length. [ 726.722606][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 726.732236][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 726.786464][T12138] device syzkaller0 entered promiscuous mode [ 726.984296][ T4316] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 727.204013][ T4316] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 727.213200][ T4316] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 727.222247][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.240689][ T4316] usb 1-1: config 0 descriptor?? [ 727.661626][T12146] input: syz1 as /devices/virtual/input/input35 [ 727.822188][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.841637][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.922773][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 727.932393][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 728.033586][ T4319] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 728.224257][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 728.251805][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.262130][ T4319] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 728.280071][ T4319] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 728.290280][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.302609][ T4319] usb 2-1: config 0 descriptor?? [ 728.320148][ T4319] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 729.495674][T12171] netlink: 'syz.2.2243': attribute type 10 has an invalid length. [ 729.503938][ T26] kauditd_printk_skb: 114 callbacks suppressed [ 729.503951][ T26] audit: type=1326 audit(1779535181.169:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12170 comm="syz.2.2243" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 729.633913][T12176] fuse: Bad value for 'fd' [ 729.658039][T12178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2244'. [ 729.842578][ C1] net_ratelimit: 2 callbacks suppressed [ 729.842595][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 729.857813][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 730.446943][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 730.569989][T12195] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2252'. [ 730.587052][ T4319] usb 1-1: USB disconnect, device number 58 [ 730.641112][ T26] audit: type=1326 audit(1779535182.299:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 730.698253][T12198] netlink: 'syz.4.2254': attribute type 10 has an invalid length. [ 730.710425][ T26] audit: type=1326 audit(1779535182.339:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee0735d68e code=0x7ffc0000 [ 730.791922][ T26] audit: type=1326 audit(1779535182.339:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 730.821249][ T22] usb 2-1: USB disconnect, device number 58 [ 730.874706][T12202] device syzkaller0 entered promiscuous mode [ 730.886035][ T26] audit: type=1326 audit(1779535182.339:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee0735d68e code=0x7ffc0000 [ 730.931782][T12209] input: syz1 as /devices/virtual/input/input36 [ 731.000810][ T26] audit: type=1326 audit(1779535182.339:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 731.042596][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 731.052338][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 731.052730][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 731.071302][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 731.116096][ T26] audit: type=1326 audit(1779535182.339:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 731.149515][ T26] audit: type=1326 audit(1779535182.339:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 731.256779][ T26] audit: type=1326 audit(1779535182.339:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 731.331824][ T26] audit: type=1326 audit(1779535182.339:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.4.2254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 732.145630][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2264'. [ 732.242861][ T22] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 732.462076][ T22] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 732.471395][ T22] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 732.480680][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.490713][ T22] usb 1-1: config 0 descriptor?? [ 732.972698][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 732.982346][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 733.064643][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.077081][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.473524][ T4277] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 733.624303][T12237] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 733.635331][T12237] team0: Device macvlan1 failed to register rx_handler [ 733.652901][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 733.660849][ T4277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.681057][ T4277] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 733.708492][ T4277] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 733.734767][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.759276][ T4277] usb 3-1: config 0 descriptor?? [ 733.764476][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 733.811198][ T4277] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 733.951992][T12258] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 734.102599][ T4277] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 734.162560][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 734.295384][ T4277] usb 2-1: unable to get BOS descriptor or descriptor too short [ 734.318549][ T4277] usb 2-1: config 8 has an invalid interface number: 141 but max is 0 [ 734.330280][ T4277] usb 2-1: config 8 has no interface number 0 [ 734.336790][ T4277] usb 2-1: config 8 interface 141 has no altsetting 0 [ 734.356300][ T4277] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd [ 734.366340][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.380353][ T4277] usb 2-1: Product: syz [ 734.386735][ T4277] usb 2-1: Manufacturer: syz [ 734.391829][ T4277] usb 2-1: SerialNumber: syz [ 734.582551][ T4319] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 734.623992][ T4277] int51x1: probe of 2-1:8.141 failed with error -71 [ 734.656398][ T4277] usb 2-1: USB disconnect, device number 59 [ 734.999757][ T4277] usb 1-1: USB disconnect, device number 59 [ 735.180996][T12281] device syzkaller0 entered promiscuous mode [ 735.182339][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2280'. [ 735.461794][T12291] input: syz1 as /devices/virtual/input/input37 [ 736.085840][ C1] net_ratelimit: 3 callbacks suppressed [ 736.085857][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 736.101137][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 736.229743][ T4319] usb 3-1: USB disconnect, device number 53 [ 736.885628][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 736.895352][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 737.287610][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 737.292630][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 737.297238][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 737.306535][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 737.612743][ T4325] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 737.814926][ T4325] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 737.829259][ T4325] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 737.840983][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.862680][ T4325] usb 3-1: config 0 descriptor?? [ 738.112650][T12299] netlink: 'syz.4.2285': attribute type 10 has an invalid length. [ 738.425463][T12318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.444017][T12318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.554909][ T4325] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 738.752505][ T4325] usb 5-1: Using ep0 maxpacket: 16 [ 738.759914][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.780023][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.803975][ T4325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.821458][ T4325] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 738.858428][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.897884][ T4325] usb 5-1: config 0 descriptor?? [ 739.202629][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 739.212331][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 739.337109][ T4325] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001C/input/input38 [ 739.368576][T12347] netlink: 'syz.0.2299': attribute type 10 has an invalid length. [ 739.452049][ T4325] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 739.553613][ T4361] usb 5-1: USB disconnect, device number 47 [ 739.714184][T12350] fido_id[12350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 739.732770][ T22] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 739.932634][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 739.940409][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 739.981017][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.041428][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 740.106257][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 740.151580][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.228658][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 740.287436][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.349401][ T4361] usb 3-1: USB disconnect, device number 54 [ 740.386188][T12383] input: syz1 as /devices/virtual/input/input39 [ 740.620814][T12388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 740.627859][T12388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 740.676449][T12388] vhci_hcd vhci_hcd.0: Device attached [ 740.848367][T12405] netlink: 'syz.4.2310': attribute type 10 has an invalid length. [ 740.942615][ T4319] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 740.951910][ T7] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 741.137444][ T7] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 741.146778][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.155107][ T7] usb 3-1: Product: syz [ 741.159368][ T7] usb 3-1: Manufacturer: syz [ 741.164310][ T7] usb 3-1: SerialNumber: syz [ 741.310755][ T4277] usb 1-1: USB disconnect, device number 60 [ 741.377443][T12389] vhci_hcd: connection reset by peer [ 741.389752][ T7] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 741.420656][ T7] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 741.421435][ T4330] vhci_hcd: stop threads [ 741.438119][ T4330] vhci_hcd: release socket [ 741.445342][ T4330] vhci_hcd: disconnect device [ 741.447737][ T7] usb 3-1: USB disconnect, device number 55 [ 741.674736][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.252645][ T4277] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 742.293018][T12437] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2318'. [ 742.322534][ C1] net_ratelimit: 6 callbacks suppressed [ 742.322550][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 742.337921][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 742.454522][ T4277] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.483725][ T4277] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 742.546598][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.600520][ T4277] usb 5-1: config 0 descriptor?? [ 743.003601][T12449] netlink: 'syz.1.2321': attribute type 10 has an invalid length. [ 743.018718][T12449] team0: Device macvlan1 failed to register rx_handler [ 743.122563][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 743.132278][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 743.142649][ T4277] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 743.157007][T12452] device syzkaller0 entered promiscuous mode [ 743.195731][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.235917][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.324992][ T4277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.337718][ T4277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 743.346843][ T4277] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 743.380534][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 743.390423][ T4277] usb 4-1: Product: syz [ 743.395237][ T4277] usb 4-1: Manufacturer: syz [ 743.400003][ T4277] usb 4-1: SerialNumber: syz [ 743.415797][ T4277] usb 4-1: config 0 descriptor?? [ 743.476538][ T4277] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 743.490942][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.522632][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 743.532355][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 743.612712][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 743.622327][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 743.635457][ T7756] usb 4-1: USB disconnect, device number 63 [ 743.658379][T12473] device syzkaller0 entered promiscuous mode [ 744.303269][T12482] loop2: detected capacity change from 0 to 7 [ 744.318476][T12482] Dev loop2: unable to read RDB block 7 [ 744.331290][T12482] loop2: unable to read partition table [ 744.350431][T12482] loop2: partition table beyond EOD, truncated [ 744.375271][T12482] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 744.492102][T12484] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2334'. [ 745.031018][ T4361] usb 5-1: USB disconnect, device number 48 [ 745.442666][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 745.452359][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 745.507976][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 745.507990][ T26] audit: type=1326 audit(1779535197.169:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.540182][ T26] audit: type=1326 audit(1779535197.199:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.565470][ T26] audit: type=1326 audit(1779535197.229:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2e415d68e code=0x7ffc0000 [ 745.574418][T12516] netlink: 'syz.2.2341': attribute type 10 has an invalid length. [ 745.590663][ T26] audit: type=1326 audit(1779535197.229:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.622815][ T26] audit: type=1326 audit(1779535197.229:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.648681][ T26] audit: type=1326 audit(1779535197.229:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2e415d68e code=0x7ffc0000 [ 745.674255][ T26] audit: type=1326 audit(1779535197.229:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.692713][ T4277] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 745.699881][ T26] audit: type=1326 audit(1779535197.229:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.738556][ T26] audit: type=1326 audit(1779535197.229:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.772711][ T26] audit: type=1326 audit(1779535197.229:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12513 comm="syz.2.2341" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e419ce59 code=0x7ffc0000 [ 745.894272][ T4277] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 745.915618][ T4277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 745.942863][ T4277] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 745.961614][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.980332][ T4277] usb 1-1: Product: syz [ 745.985972][ T4277] usb 1-1: Manufacturer: syz [ 745.990806][ T4277] usb 1-1: SerialNumber: syz [ 746.005452][ T4277] usb 1-1: config 0 descriptor?? [ 746.023987][ T4277] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 746.088305][ T4319] vhci_hcd: vhci_device speed not set [ 746.502530][ T7756] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 746.544257][T12539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2348'. [ 746.694738][ T7756] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.719136][ T7756] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 746.749656][ T7756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.793727][ T7756] usb 2-1: config 0 descriptor?? [ 746.842734][ T7756] usb 1-1: USB disconnect, device number 61 [ 747.012036][T12553] usb usb7: usbfs: process 12553 (syz.3.2351) did not claim interface 0 before use [ 747.044973][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.051439][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.384024][T12565] netlink: 'syz.4.2354': attribute type 10 has an invalid length. [ 747.393470][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.402048][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.777630][ T7756] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 747.972493][ T7756] usb 3-1: Using ep0 maxpacket: 32 [ 747.988754][ T7756] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 748.010940][ T7756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.028890][ T7756] usb 3-1: Product: syz [ 748.036397][ T7756] usb 3-1: Manufacturer: syz [ 748.052598][ T7756] usb 3-1: SerialNumber: syz [ 748.184958][T12585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2361'. [ 748.328524][T12589] usb usb7: usbfs: process 12589 (syz.3.2363) did not claim interface 0 before use [ 748.569377][T12594] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2364'. [ 748.572543][ C1] net_ratelimit: 6 callbacks suppressed [ 748.572558][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 748.593651][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 748.612792][T12597] netlink: 'syz.4.2366': attribute type 10 has an invalid length. [ 749.275739][ T4361] usb 2-1: USB disconnect, device number 60 [ 749.358149][T12616] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2372'. [ 749.367275][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 749.367481][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 749.644896][T12623] usb usb7: usbfs: process 12623 (syz.3.2375) did not claim interface 0 before use [ 749.762540][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 749.772112][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 749.842554][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 749.852187][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 749.874802][T12630] netlink: 'syz.4.2377': attribute type 10 has an invalid length. [ 750.340386][T12639] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2381'. [ 750.517031][ T4361] usb 3-1: USB disconnect, device number 56 [ 750.662516][T12645] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2383'. [ 750.834627][T12651] usb usb7: usbfs: process 12651 (syz.2.2386) did not claim interface 0 before use [ 750.852538][ T4319] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 750.971966][ T26] kauditd_printk_skb: 172 callbacks suppressed [ 750.971981][ T26] audit: type=1326 audit(1779535202.629:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 750.982682][T12655] netlink: 'syz.4.2388': attribute type 10 has an invalid length. [ 751.015975][ T26] audit: type=1326 audit(1779535202.629:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee0735d68e code=0x7ffc0000 [ 751.052845][ T26] audit: type=1326 audit(1779535202.629:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 751.077894][ T26] audit: type=1326 audit(1779535202.629:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee0735d68e code=0x7ffc0000 [ 751.108494][ T4319] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.118389][ T26] audit: type=1326 audit(1779535202.629:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 751.144044][ T4319] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 751.160611][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.206322][ T4319] usb 2-1: config 0 descriptor?? [ 751.242900][ T26] audit: type=1326 audit(1779535202.629:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 751.266964][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.283778][ T26] audit: type=1326 audit(1779535202.629:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0739ce59 code=0x7ffc0000 [ 751.322370][ T26] audit: type=1326 audit(1779535202.629:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee0739e6c7 code=0x7ffc0000 [ 751.389519][ T26] audit: type=1326 audit(1779535202.629:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fee0735d68e code=0x7ffc0000 [ 751.424648][ T26] audit: type=1326 audit(1779535202.629:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.4.2388" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fee0735d68e code=0x7ffc0000 [ 751.448745][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.625744][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 751.762589][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 751.772078][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 751.814627][T12679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.835413][T12679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.938468][T12681] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2396'. [ 752.049566][T12683] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2397'. [ 752.648157][T12695] netlink: 'syz.3.2400': attribute type 10 has an invalid length. [ 752.811990][T12701] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 753.014179][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 753.225286][T12719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2408'. [ 753.385224][T12729] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2411'. [ 753.565601][T12734] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2412'. [ 753.579021][ T4361] usb 2-1: USB disconnect, device number 61 [ 754.251420][ T2120] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 754.450447][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 754.474942][ T2120] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 754.492376][ T2120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.523953][ T2120] usb 5-1: config 0 descriptor?? [ 754.568914][ T2120] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 754.648793][T12758] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2420'. [ 754.892535][ C1] net_ratelimit: 6 callbacks suppressed [ 754.892553][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 754.907668][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 754.969304][ T2120] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 755.422651][ T4316] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 755.583993][ T2120] gspca_cpia1: usb_control_msg 05, error -71 [ 755.597112][ T2120] cpia1 5-1:0.0: unexpected systemstate: 00 [ 755.602659][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 755.612711][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 755.625331][ T4316] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 755.648105][ T4316] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 755.674858][ T2120] usb 5-1: USB disconnect, device number 49 [ 755.703972][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.757063][ T4316] usb 4-1: config 0 descriptor?? [ 756.002658][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 756.012628][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 756.069646][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 756.069662][ T26] audit: type=1326 audit(1779535207.729:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.100315][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.102579][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 756.116134][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 756.125612][ T26] audit: type=1326 audit(1779535207.789:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.149779][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.166359][ T26] audit: type=1326 audit(1779535207.829:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3faf5d68e code=0x7ffc0000 [ 756.197504][ T26] audit: type=1326 audit(1779535207.829:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.238240][T12779] netlink: 'syz.1.2426': attribute type 10 has an invalid length. [ 756.256827][T12780] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2425'. [ 756.282882][T12779] team0: Device macvlan1 failed to register rx_handler [ 756.318007][ T26] audit: type=1326 audit(1779535207.829:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.396023][T12782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.416115][T12782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.502716][ T26] audit: type=1326 audit(1779535207.859:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.640099][ T26] audit: type=1326 audit(1779535207.859:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.664341][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.679446][ T26] audit: type=1326 audit(1779535207.859:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.703622][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.719640][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 756.743942][ T26] audit: type=1326 audit(1779535207.889:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.799641][T12795] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2429'. [ 756.813066][ T26] audit: type=1326 audit(1779535207.889:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12777 comm="syz.1.2426" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 756.837232][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.122734][ T2120] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 757.337079][ T2120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 757.370019][ T2120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.403369][ T2120] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 757.418696][ T2120] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 757.433089][ T2120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.451372][ T2120] usb 2-1: Product: syz [ 757.469624][ T2120] usb 2-1: Manufacturer: syz [ 757.478544][ T2120] usb 2-1: SerialNumber: syz [ 757.652837][ T4361] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 757.866148][ T4361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.947607][ T4361] usb 3-1: config 0 interface 0 has no altsetting 0 [ 758.002613][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 758.012162][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 758.053028][ T4361] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 758.095648][T12818] netlink: 'syz.4.2438': attribute type 10 has an invalid length. [ 758.117777][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 758.158252][ T4316] usb 4-1: USB disconnect, device number 64 [ 758.260872][ T4361] usb 3-1: Product: syz [ 758.320268][ T4361] usb 3-1: Manufacturer: syz [ 758.412015][ T4361] usb 3-1: SerialNumber: syz [ 758.495220][ T4361] usb 3-1: config 0 descriptor?? [ 758.697376][ T4361] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 758.789879][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.821144][ T4361] usb 3-1: USB disconnect, device number 57 [ 759.702523][ T4361] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 759.922577][ T4361] usb 3-1: Using ep0 maxpacket: 32 [ 759.931671][ T4361] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 759.959811][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.982321][ T4361] usb 3-1: Product: syz [ 759.986924][ T4361] usb 3-1: Manufacturer: syz [ 759.991810][ T4361] usb 3-1: SerialNumber: syz [ 760.217163][ T4361] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 760.247493][ T4361] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 760.278063][ T4361] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 760.307084][ T4361] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 760.331076][T12842] loop2: detected capacity change from 0 to 7 [ 760.339849][ T9460] Dev loop2: unable to read RDB block 7 [ 760.346164][ T9460] loop2: unable to read partition table [ 760.352856][ T9460] loop2: partition table beyond EOD, truncated [ 760.366764][T12842] Dev loop2: unable to read RDB block 7 [ 760.382930][T12842] loop2: unable to read partition table [ 760.458109][ T4361] usb 3-1: USB disconnect, device number 58 [ 760.462762][T12842] loop2: partition table beyond EOD, truncated [ 760.527829][T12842] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 760.901515][ T2120] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 760.929331][ T2120] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 760.994144][ T2120] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 761.024288][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2452'. [ 761.031088][ T2120] usb 2-1: USB disconnect, device number 62 [ 761.047106][ T9459] udevd[9459]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.072626][ T4316] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 761.090685][T12852] bridge: RTM_NEWNEIGH with invalid ether address [ 761.122567][ C1] net_ratelimit: 6 callbacks suppressed [ 761.122584][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 761.137901][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 761.147535][T12857] device syzkaller0 entered promiscuous mode [ 761.149506][ T4361] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 761.312568][ T4316] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 761.321848][ T4316] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 761.333278][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.342548][ T4361] usb 4-1: Using ep0 maxpacket: 16 [ 761.350922][ T4316] usb 5-1: config 0 descriptor?? [ 761.359970][ T4361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 761.371367][T12864] input: syz1 as /devices/virtual/input/input40 [ 761.402682][ T4319] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 761.430184][ T4361] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 761.481718][ T4361] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 761.495162][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.519434][ T4361] usb 4-1: Product: syz [ 761.533690][ T4361] usb 4-1: Manufacturer: syz [ 761.538454][ T4361] usb 4-1: SerialNumber: syz [ 761.594314][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.638151][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 761.706605][ T4319] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 761.743888][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 761.766820][ T4319] usb 3-1: Product: syz [ 761.784425][ T4319] usb 3-1: Manufacturer: syz [ 761.802237][ T4319] usb 3-1: SerialNumber: syz [ 761.824526][ T4319] usb 3-1: config 0 descriptor?? [ 761.842556][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 761.852234][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 761.914486][ T4319] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 761.930768][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.941101][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.983724][ T4361] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 761.998833][ T4361] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 762.075764][ T4361] usb 4-1: USB disconnect, device number 65 [ 762.075838][ T4319] usb 3-1: USB disconnect, device number 59 [ 762.103884][ T9460] udevd[9460]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.242715][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 762.252314][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 762.333237][ T9460] udevd[9460]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.402659][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 762.412285][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 763.002311][T12885] device bond0 entered promiscuous mode [ 763.008585][T12885] device bond_slave_0 entered promiscuous mode [ 763.021027][T12885] device bond_slave_1 entered promiscuous mode [ 763.149244][T12890] loop2: detected capacity change from 0 to 7 [ 763.158023][ T9651] Dev loop2: unable to read RDB block 7 [ 763.165744][ T9651] loop2: unable to read partition table [ 763.171490][ T9651] loop2: partition table beyond EOD, truncated [ 763.185656][T12890] Dev loop2: unable to read RDB block 7 [ 763.191265][T12890] loop2: unable to read partition table [ 763.199226][T12890] loop2: partition table beyond EOD, truncated [ 763.213826][T12890] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 763.227035][ T3637] Dev loop2: unable to read RDB block 7 [ 763.232974][ T3637] loop2: unable to read partition table [ 763.239697][ T3637] loop2: partition table beyond EOD, truncated [ 763.308060][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2465'. [ 763.317765][T12894] bridge: RTM_NEWNEIGH with invalid ether address [ 763.366465][ T4277] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 763.384140][T12896] device syzkaller0 entered promiscuous mode [ 763.815404][T12906] input: syz1 as /devices/virtual/input/input41 [ 763.874174][ T4361] usb 5-1: USB disconnect, device number 50 [ 764.242639][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 764.252386][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 765.131193][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 765.175572][T12928] bridge: RTM_NEWNEIGH with invalid ether address [ 765.222661][ T4319] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 765.445443][ T4319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 765.487393][ T4319] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 765.508333][T12930] device syzkaller0 entered promiscuous mode [ 765.692763][ T4319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.840229][ T4319] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 765.984890][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.994111][ T4319] usb 5-1: Product: syz [ 765.998424][ T4319] usb 5-1: Manufacturer: syz [ 766.003779][ T4319] usb 5-1: SerialNumber: syz [ 766.032689][ T4319] usb 5-1: selecting invalid altsetting 1 [ 766.063146][ T4319] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 766.148870][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.604288][T12939] loop2: detected capacity change from 0 to 7 [ 766.613654][T12939] Dev loop2: unable to read RDB block 7 [ 766.628082][T12939] loop2: unable to read partition table [ 766.641847][T12939] loop2: partition table beyond EOD, truncated [ 766.687535][T12939] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 766.742931][ T3637] Dev loop2: unable to read RDB block 7 [ 766.750940][ T3637] loop2: unable to read partition table [ 766.778439][ T3637] loop2: partition table beyond EOD, truncated [ 766.968490][T12943] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 766.975055][T12943] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 767.007726][T12943] vhci_hcd vhci_hcd.0: Device attached [ 767.023319][T12947] vhci_hcd: connection closed [ 767.032644][ T46] vhci_hcd: stop threads [ 767.038168][ T4316] usb 5-1: USB disconnect, device number 51 [ 767.082207][ T46] vhci_hcd: release socket [ 767.116883][ T46] vhci_hcd: disconnect device [ 767.214659][T12952] input: syz1 as /devices/virtual/input/input42 [ 767.260276][ T4277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 767.277992][ T4277] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 767.295953][ T4277] usb 4-1: can't read configurations, error -71 [ 767.362622][ C1] net_ratelimit: 7 callbacks suppressed [ 767.362637][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 767.377794][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 767.474839][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 767.491291][T12961] bridge_slave_0: default FDB implementation only supports local addresses [ 767.579590][T12965] device syzkaller0 entered promiscuous mode [ 767.685242][ T4277] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 767.874765][ T4277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.893183][ T4277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.907739][ T4277] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 767.922211][ T4277] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 767.935734][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.984156][ T4277] usb 4-1: config 0 descriptor?? [ 768.082683][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 768.092479][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 768.253765][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2491'. [ 768.437409][ T4277] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 768.482553][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 768.492302][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 768.534459][ T4277] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 768.642580][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 768.652284][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 768.662144][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 770.248486][ T4325] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 770.349262][T13000] loop2: detected capacity change from 0 to 7 [ 770.358438][ T9651] Dev loop2: unable to read RDB block 7 [ 770.368451][ T9651] loop2: unable to read partition table [ 770.375252][ T9651] loop2: partition table beyond EOD, truncated [ 770.385664][T13000] Dev loop2: unable to read RDB block 7 [ 770.391908][T13000] loop2: unable to read partition table [ 770.400066][T13000] loop2: partition table beyond EOD, truncated [ 770.409347][T13000] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 770.455309][ T4325] usb 2-1: Using ep0 maxpacket: 16 [ 770.463939][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.490245][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.500210][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 770.515347][ T4325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 770.530313][ T4325] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 770.544027][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.570884][ T4325] usb 2-1: config 0 descriptor?? [ 770.584141][ T4361] usb 4-1: USB disconnect, device number 67 [ 770.695006][T12976] team0: Port device macvlan1 removed [ 770.700973][T13003] input: syz1 as /devices/virtual/input/input44 [ 770.867898][T13005] device syzkaller0 entered promiscuous mode [ 771.027639][ T4325] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001E/input/input45 [ 771.150384][ T4325] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 771.230314][T13016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 771.236860][T13016] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 771.261287][ T4277] usb 2-1: USB disconnect, device number 63 [ 771.275904][T13016] vhci_hcd vhci_hcd.0: Device attached [ 771.301586][T13017] vhci_hcd: connection closed [ 771.305221][ T4327] vhci_hcd: stop threads [ 771.342056][ T4327] vhci_hcd: release socket [ 771.366942][ T4327] vhci_hcd: disconnect device [ 771.414087][T13019] fido_id[13019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 772.723861][ C1] net_ratelimit: 7 callbacks suppressed [ 772.723879][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 773.604649][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 773.614340][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 773.642561][ T4316] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 773.842633][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 773.852164][ T4316] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 773.871766][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.886699][ T4316] usb 5-1: Product: syz [ 773.897237][ T4316] usb 5-1: Manufacturer: syz [ 773.901887][ T4316] usb 5-1: SerialNumber: syz [ 774.127545][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 774.136837][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 774.151660][ T4316] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 774.163564][ T4316] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 774.171763][ T4316] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 774.179369][ T4316] usb 5-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 774.227423][ T4316] usb 5-1: USB disconnect, device number 52 [ 774.256066][ T9887] udevd[9887]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.335551][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 774.345135][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 774.732648][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 774.742274][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 774.833885][T13050] input: syz1 as /devices/virtual/input/input46 [ 774.887948][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 774.897698][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 775.202882][ T4325] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 775.394462][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 775.402034][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.432588][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.460054][ T4325] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 775.482496][ T22] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 775.498950][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.515133][ T4325] usb 4-1: config 0 descriptor?? [ 775.524113][ T4325] hub 4-1:0.0: USB hub found [ 775.683051][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 775.689977][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.726518][ T4325] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 775.736745][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.760097][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.782793][ C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.187.0.0 [ 775.792848][ T22] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 775.817615][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.843719][ T22] usb 3-1: config 0 descriptor?? [ 776.130671][ T4325] hid-generic 0003:046D:C31C.001F: unknown main item tag 0x0 [ 776.156825][ T4325] hid-generic 0003:046D:C31C.001F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 776.277557][ T22] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0020/input/input47 [ 776.639109][T13093] input: syz1 as /devices/virtual/input/input48 [ 776.784074][T13052] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 777.067140][T13098] device syzkaller0 entered promiscuous mode [ 777.842692][ C0] net_ratelimit: 4 callbacks suppressed [ 777.842705][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 777.857882][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 778.002611][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 778.012478][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 779.842638][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 779.852288][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 780.562581][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 780.572212][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 780.812597][ T7] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 780.882734][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 780.962667][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 781.007601][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 781.016101][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.035179][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.045656][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 781.058828][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 781.068018][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.088694][ T7] usb 1-1: config 0 descriptor?? [ 781.144805][T13105] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 781.156993][T13105] team0: Device macvlan1 failed to register rx_handler [ 781.507485][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0021/input/input49 [ 782.339679][ T22] microsoft 0003:045E:07DA.0020: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 782.340486][ T7] microsoft 0003:045E:07DA.0021: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 782.413151][ T22] usb 3-1: USB disconnect, device number 60 [ 782.585549][ T7] usb 1-1: USB disconnect, device number 62 [ 782.685003][ T4319] usb 4-1: USB disconnect, device number 68 [ 782.813971][ T22] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 782.940984][T13162] fido_id[13162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 782.962572][ C1] net_ratelimit: 3 callbacks suppressed [ 782.962589][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 782.977862][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 783.097315][T13173] netlink: 'syz.0.2551': attribute type 10 has an invalid length. [ 783.107204][T13163] fido_id[13163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 783.319606][T13176] device syzkaller0 entered promiscuous mode [ 783.682624][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 783.692331][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 784.082610][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 784.082898][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 784.191647][T13193] fuse: Bad value for 'fd' [ 784.243701][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 784.244056][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 784.257218][ T22] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 784.452472][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 784.459152][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.575946][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.623536][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 784.651587][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.690237][ T22] usb 1-1: config 0 descriptor?? [ 784.701655][ T22] hub 1-1:0.0: USB hub found [ 784.911328][ T22] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 784.949204][ T4361] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 785.155092][ T4361] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 785.177323][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.207646][ T4361] usb 4-1: config 0 descriptor?? [ 785.227994][ T4361] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 785.324499][ T22] hid-generic 0003:046D:C31C.0022: unknown main item tag 0x0 [ 785.356271][ T22] hid-generic 0003:046D:C31C.0022: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 785.635485][ T4361] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 785.953153][T13191] usb 1-1: reset high-speed USB device number 63 using dummy_hcd [ 786.085944][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 786.095634][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 786.270775][ T4361] gspca_cpia1: usb_control_msg 05, error -71 [ 786.283720][ T4361] cpia1 4-1:0.0: unexpected systemstate: 00 [ 786.291679][ T4361] usb 4-1: USB disconnect, device number 69 [ 786.365810][ T4316] usb 1-1: USB disconnect, device number 63 [ 786.375797][T13191] usbhid 1-1:0.0: reset_resume error -19 [ 786.398562][T13208] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 786.405138][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 786.426608][T13208] vhci_hcd vhci_hcd.0: Device attached [ 786.444003][T13211] vhci_hcd: connection closed [ 786.448776][ T4476] vhci_hcd: stop threads [ 786.477707][ T4476] vhci_hcd: release socket [ 786.500548][ T4476] vhci_hcd: disconnect device [ 787.460493][T13230] fuse: Bad value for 'fd' [ 788.742577][ T7] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 788.944477][ T7] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 788.993697][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.193911][ T7] usb 5-1: config 0 descriptor?? [ 789.202602][ C1] net_ratelimit: 6 callbacks suppressed [ 789.202620][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 789.217917][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 789.227664][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 789.469578][T13258] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 789.476136][T13258] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 789.485533][T13258] vhci_hcd vhci_hcd.0: Device attached [ 789.499903][T13261] vhci_hcd: connection closed [ 789.500200][ T9] vhci_hcd: stop threads [ 789.517793][ T9] vhci_hcd: release socket [ 789.522297][ T9] vhci_hcd: disconnect device [ 789.576294][ T22] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 789.606045][ T7] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 789.659953][T13267] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 789.729202][T13269] fuse: Bad value for 'fd' [ 789.772810][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 789.788635][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.799785][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.811933][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 789.824538][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.835932][ T22] usb 1-1: config 0 descriptor?? [ 789.844865][ T22] hub 1-1:0.0: USB hub found [ 789.922651][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 789.932353][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 790.047200][ T22] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 790.226825][ T7] gspca_cpia1: usb_control_msg 05, error -71 [ 790.236541][ T7] cpia1 5-1:0.0: unexpected systemstate: 00 [ 790.250584][T13278] usb usb8: usbfs: process 13278 (syz.1.2584) did not claim interface 0 before use [ 790.274769][ T7] usb 5-1: USB disconnect, device number 53 [ 790.290559][T13275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 790.297135][T13275] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 790.307068][T13275] vhci_hcd vhci_hcd.0: Device attached [ 790.322647][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 790.332375][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 790.450421][ T22] hid-generic 0003:046D:C31C.0023: unknown main item tag 0x0 [ 790.462363][ T22] hid-generic 0003:046D:C31C.0023: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 790.523268][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 790.532970][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 790.572630][ T4319] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 790.592134][ T4316] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 790.788504][ T4316] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 790.816939][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.819031][ T22] usb 1-1: USB disconnect, device number 64 [ 790.860500][ T4316] usb 3-1: Product: syz [ 790.883927][ T4316] usb 3-1: Manufacturer: syz [ 790.898901][ T4316] usb 3-1: SerialNumber: syz [ 790.931857][T13287] fido_id[13287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 791.125695][T13280] vhci_hcd: connection reset by peer [ 791.127939][ T4316] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 791.142686][ T7756] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 791.152535][ T9] vhci_hcd: stop threads [ 791.159544][ T9] vhci_hcd: release socket [ 791.170195][ T9] vhci_hcd: disconnect device [ 791.185022][ T4316] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 791.216013][ T4316] usb 3-1: USB disconnect, device number 62 [ 791.231317][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.372511][ T7756] usb 4-1: Using ep0 maxpacket: 32 [ 791.382876][ T22] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 791.398849][ T7756] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 791.482491][ T7756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.491181][ T7756] usb 4-1: Product: syz [ 791.499987][ T7756] usb 4-1: Manufacturer: syz [ 791.506026][ T7756] usb 4-1: SerialNumber: syz [ 791.516968][ T7756] usb 4-1: config 0 descriptor?? [ 791.531124][ T7756] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 791.549701][ T7756] dvb-usb: bulk message failed: -22 (4/0) [ 791.555784][ T7756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 791.566453][ T7756] dvb-usb: bulk message failed: -22 (5/0) [ 791.572238][ T7756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 791.585639][ T7756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 791.596121][ T7756] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 791.605127][ T7756] usb 4-1: media controller created [ 791.621179][ T7756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 791.629822][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 791.638758][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.652907][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.669717][ T7756] usb 4-1: selecting invalid altsetting 3 [ 791.675544][ T7756] ttusb2: set interface to alts=3 failed [ 791.684388][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 791.731445][T13290] dvb-usb: bulk message failed: -22 (7/0) [ 791.753794][T13290] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 791.782577][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.815799][ T22] usb 1-1: config 0 descriptor?? [ 791.829501][T13290] ttusb2: i2c transfer failed. [ 791.845554][ T7756] DVB: Unable to find symbol tda10086_attach() [ 791.865395][ T7756] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 791.930256][ T22] hub 1-1:0.0: USB hub found [ 791.960875][ T7756] dvb-usb: bulk message failed: -22 (4/0) [ 792.001393][T13311] netlink: 'syz.2.2591': attribute type 10 has an invalid length. [ 792.032377][ T7756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 792.090213][ T7756] dvb-usb: bulk message failed: -22 (5/0) [ 792.113789][ T7756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 792.136517][ T22] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 792.163340][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 792.169623][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 792.180286][ T7756] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 792.236503][ T22] usb 1-1: USB disconnect, device number 65 [ 792.326330][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 792.336052][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 792.346915][ T7756] usb 4-1: USB disconnect, device number 70 [ 792.417415][ T7756] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 792.931606][T13320] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 792.938144][T13320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 792.978973][T13320] vhci_hcd vhci_hcd.0: Device attached [ 793.009753][T13323] vhci_hcd: connection closed [ 793.011174][ T4476] vhci_hcd: stop threads [ 793.045162][ T4476] vhci_hcd: release socket [ 793.081765][ T4476] vhci_hcd: disconnect device [ 793.552647][ T2120] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 793.562503][ T7] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 793.760330][ T7] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 793.760361][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.762056][ T7] usb 2-1: config 0 descriptor?? [ 793.771672][ T2120] usb 1-1: Using ep0 maxpacket: 16 [ 793.794371][ T2120] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.794404][ T2120] usb 1-1: config 0 interface 0 has no altsetting 0 [ 793.794431][ T2120] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 793.794454][ T2120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.816990][ T2120] usb 1-1: config 0 descriptor?? [ 793.832256][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 794.121567][T13342] netlink: 'syz.4.2602': attribute type 10 has an invalid length. [ 794.226383][ T2120] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 794.235108][ T7] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 794.266893][ T2120] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 794.293557][ T2120] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 794.311308][ T2120] nzxt-smart2 0003:1E71:2009.0024: unknown main item tag 0x0 [ 794.337325][ T2120] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 794.461128][ C1] usb 1-1: input irq status -75 received [ 794.572727][ T4316] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 794.772561][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 794.780232][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.857350][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.919913][ T4316] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 794.978209][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.034834][ T4316] usb 5-1: config 0 descriptor?? [ 795.079154][ T4316] hub 5-1:0.0: USB hub found [ 795.280999][ T4316] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 795.452540][ C1] net_ratelimit: 6 callbacks suppressed [ 795.452559][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 795.467847][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 795.654114][ T7] gspca_cpia1: usb_control_msg 05, error -71 [ 795.669293][ T7] cpia1 2-1:0.0: unexpected systemstate: 00 [ 795.693994][ T4316] hid-generic 0003:046D:C31C.0025: unknown main item tag 0x0 [ 795.738942][ T7] usb 2-1: USB disconnect, device number 64 [ 795.747921][ T4316] hid-generic 0003:046D:C31C.0025: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 795.762558][ T4319] vhci_hcd: vhci_device speed not set [ 796.012961][ T4316] usb 5-1: USB disconnect, device number 54 [ 796.126542][T13365] fido_id[13365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 796.162649][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 796.172220][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 796.362495][ T4316] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 796.363229][ T7756] usb 1-1: USB disconnect, device number 66 [ 796.562546][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 796.572240][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 796.590144][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 796.599789][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.630990][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.642601][ T4316] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 796.651821][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.660743][T13371] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 796.667301][T13371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 796.677583][ T4316] usb 5-1: config 0 descriptor?? [ 796.711805][ T4316] hub 5-1:0.0: USB hub found [ 796.720479][T13371] vhci_hcd vhci_hcd.0: Device attached [ 796.752717][T13377] vhci_hcd: connection closed [ 796.757710][ T46] vhci_hcd: stop threads [ 796.788210][ T46] vhci_hcd: release socket [ 796.802605][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 796.812324][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 796.840583][ T46] vhci_hcd: disconnect device [ 796.893896][ T4316] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 796.897140][ T4316] usbhid 5-1:0.0: can't add hid device: -71 [ 796.914665][ T4316] usbhid: probe of 5-1:0.0 failed with error -71 [ 796.958111][ T4316] usb 5-1: USB disconnect, device number 55 [ 797.049662][T13387] fuse: Bad value for 'fd' [ 797.066162][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 797.066176][ T26] audit: type=1326 audit(1779535248.729:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.079083][T13389] netlink: 'syz.1.2615': attribute type 10 has an invalid length. [ 797.106565][T13389] team0: Device macvlan1 failed to register rx_handler [ 797.120488][ T26] audit: type=1326 audit(1779535248.729:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.135040][T13390] binder: 13386:13390 ioctl 80105873 200000000140 returned -22 [ 797.151115][ T26] audit: type=1326 audit(1779535248.729:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.183131][ T26] audit: type=1326 audit(1779535248.729:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.186283][T13390] binder: 13386:13390 unknown command 1074553620 [ 797.214667][ T26] audit: type=1326 audit(1779535248.729:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3faf5d68e code=0x7ffc0000 [ 797.223073][T13390] binder: 13386:13390 ioctl c0306201 200000000640 returned -22 [ 797.269367][ T26] audit: type=1326 audit(1779535248.729:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.302965][ T26] audit: type=1326 audit(1779535248.729:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.329784][ T26] audit: type=1326 audit(1779535248.729:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.354592][ T26] audit: type=1326 audit(1779535248.729:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.387602][ T26] audit: type=1326 audit(1779535248.729:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.1.2615" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3faf9ce59 code=0x7ffc0000 [ 797.522588][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 797.543176][ T7756] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 797.734737][ T7756] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 797.773006][ T7756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.793049][ T7756] usb 4-1: config 0 has no interface number 0 [ 797.799362][ T7756] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 797.802708][ T4277] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 797.815994][ T7756] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 797.840575][ T7756] usb 4-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.859810][ T7756] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 797.869408][ T7756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.884544][ T7756] usb 4-1: Product: syz [ 797.888846][ T7756] usb 4-1: Manufacturer: syz [ 797.897523][ T7756] usb 4-1: SerialNumber: syz [ 797.912524][ T4316] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 797.920450][ T7756] usb 4-1: config 0 descriptor?? [ 797.926684][T13390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 797.949035][ T7756] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 798.046311][ T4277] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 798.057908][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.076150][ T4277] usb 3-1: config 0 descriptor?? [ 798.087505][ T4277] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 798.102994][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 798.114960][ T4316] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.127595][ T4316] usb 2-1: config 0 interface 0 has no altsetting 0 [ 798.139224][ T4316] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 798.151796][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.178238][ T4316] usb 2-1: config 0 descriptor?? [ 798.222923][ T7756] usb 4-1: USB disconnect, device number 71 [ 798.224820][ T11] usb 4-1: Failed to submit usb control message: -71 [ 798.280909][ T11] usb 4-1: unable to send the bmi data to the device: -71 [ 798.295882][ T11] usb 4-1: unable to get target info from device [ 798.305827][ T11] usb 4-1: could not get target info (-71) [ 798.319553][ T11] usb 4-1: could not probe fw (-71) [ 798.490627][ T4277] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 798.562626][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 798.592810][ T4316] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 798.610002][ T4316] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 798.634135][ T4316] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 798.641700][ T4316] nzxt-smart2 0003:1E71:2009.0026: unknown main item tag 0x0 [ 798.651777][ T4316] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 798.794766][ C0] usb 2-1: input irq status -75 received [ 799.400337][ T4277] gspca_cpia1: usb_control_msg 05, error -71 [ 799.407751][ T4277] cpia1 3-1:0.0: unexpected systemstate: 00 [ 799.422740][ T4277] usb 3-1: USB disconnect, device number 63 [ 799.602607][ T4319] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 799.661218][T13433] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 799.667773][T13433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 799.677892][T13433] vhci_hcd vhci_hcd.0: Device attached [ 799.701354][T13436] vhci_hcd: connection closed [ 799.701694][ T9] vhci_hcd: stop threads [ 799.714083][ T9] vhci_hcd: release socket [ 799.720668][ T9] vhci_hcd: disconnect device [ 799.826920][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.842631][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 799.852220][ T4319] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 799.862594][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.874676][ T4319] usb 1-1: config 0 descriptor?? [ 799.887021][ T4319] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 799.894310][ T4319] dvb-usb: bulk message failed: -22 (3/0) [ 799.906595][ T4319] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 799.930036][ T4319] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 799.951763][ T4319] usb 1-1: media controller created [ 799.993155][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.031032][ T4319] dvb-usb: bulk message failed: -22 (6/0) [ 800.050035][ T4319] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 800.067813][ T4319] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input50 [ 800.088388][T13430] dvb-usb: bulk message failed: -22 (2/0) [ 800.104479][ T4319] dvb-usb: schedule remote query interval to 150 msecs. [ 800.112184][ T4319] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 800.159290][ T4319] usb 1-1: USB disconnect, device number 67 [ 800.183543][ T4319] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 800.198377][T13441] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 800.204935][T13441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.222665][T13441] vhci_hcd vhci_hcd.0: Device attached [ 800.496766][ T22] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 800.504826][ T7756] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 800.670920][ T6399] usb 2-1: USB disconnect, device number 65 [ 800.712080][ T7756] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 800.754039][ T7756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.789165][ T7756] usb 5-1: Product: syz [ 800.793902][ T7756] usb 5-1: Manufacturer: syz [ 800.798536][ T7756] usb 5-1: SerialNumber: syz [ 800.846594][ T4319] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 801.018135][T13446] vhci_hcd: connection reset by peer [ 801.026352][ T9] vhci_hcd: stop threads [ 801.030842][ T9] vhci_hcd: release socket [ 801.035711][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 801.036447][ T7756] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 801.047526][ T4319] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 801.066129][ T9] vhci_hcd: disconnect device [ 801.086122][ T7756] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 801.114658][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.126862][ T4319] usb 4-1: Product: syz [ 801.131543][ T4319] usb 4-1: Manufacturer: syz [ 801.138365][ T4319] usb 4-1: SerialNumber: syz [ 801.197506][ T7756] usb 5-1: USB disconnect, device number 56 [ 801.206184][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.502582][ T6399] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 801.568068][T13457] netlink: 'syz.3.2634': attribute type 2 has an invalid length. [ 801.682569][ C1] net_ratelimit: 7 callbacks suppressed [ 801.682587][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 801.697965][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 801.714525][ T6399] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 801.742496][ T6399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.800501][ T6399] usb 3-1: config 0 descriptor?? [ 801.814311][ T6399] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 802.210371][ T6399] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 802.402567][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 802.412359][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 802.802709][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 802.812617][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 803.042548][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 803.052302][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 803.392972][T13486] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 803.399545][T13486] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 803.458533][T13486] vhci_hcd vhci_hcd.0: Device attached [ 803.473845][ T6399] gspca_cpia1: usb_control_msg 05, error -71 [ 803.486291][ T6399] cpia1 3-1:0.0: unexpected systemstate: 00 [ 803.497664][T13490] vhci_hcd: connection closed [ 803.503347][ T6399] usb 3-1: USB disconnect, device number 64 [ 803.514450][ T4432] vhci_hcd: stop threads [ 803.526526][ T4432] vhci_hcd: release socket [ 803.538854][ T4432] vhci_hcd: disconnect device [ 803.645875][ T4319] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 803.679480][ T4319] usb 4-1: USB disconnect, device number 72 [ 803.967144][T13499] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2645'. [ 804.022976][T13499] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2645'. [ 804.347126][ T4319] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 804.532510][ T4319] usb 1-1: Using ep0 maxpacket: 16 [ 804.539722][ T4319] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.554230][ T4319] usb 1-1: config 0 interface 0 has no altsetting 0 [ 804.564586][ T4319] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 804.576172][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.633628][ T4319] usb 1-1: config 0 descriptor?? [ 804.652643][ T6399] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 804.802541][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 804.812200][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 804.852589][ T6399] usb 2-1: Using ep0 maxpacket: 32 [ 804.861360][ T6399] usb 2-1: config 0 has no interfaces? [ 804.880553][ T6399] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 804.896436][ T6399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.905002][ T6399] usb 2-1: Product: syz [ 804.909324][ T6399] usb 2-1: Manufacturer: syz [ 804.914188][ T6399] usb 2-1: SerialNumber: syz [ 804.931815][ T6399] usb 2-1: config 0 descriptor?? [ 805.047272][ T4319] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 805.073248][ T4319] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 805.132632][ T4319] nzxt-smart2 0003:1E71:2009.0027: unknown main item tag 0x0 [ 805.150122][T13520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.164637][ T4319] nzxt-smart2 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 805.180721][T13520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.291399][ C0] usb 1-1: input irq status -75 received [ 805.532511][ T6399] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 805.602544][ T22] vhci_hcd: vhci_device speed not set [ 805.724177][ T6399] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 805.746806][ T6399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.790068][ T6399] usb 5-1: config 0 descriptor?? [ 805.813489][ T6399] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 806.209899][ T6399] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 806.614046][T13550] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 806.620655][T13550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 806.631474][T13550] vhci_hcd vhci_hcd.0: Device attached [ 806.657743][T13555] vhci_hcd: connection closed [ 806.658084][ T4432] vhci_hcd: stop threads [ 806.672338][ T4432] vhci_hcd: release socket [ 806.699979][ T4432] vhci_hcd: disconnect device [ 806.815810][ T6399] gspca_cpia1: usb_control_msg 05, error -71 [ 806.830103][ T6399] cpia1 5-1:0.0: unexpected systemstate: 00 [ 806.856811][ T6399] usb 5-1: USB disconnect, device number 57 [ 807.088460][ T4277] usb 1-1: USB disconnect, device number 68 [ 807.396877][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 807.440036][ T4277] usb 2-1: USB disconnect, device number 66 [ 807.922565][ C1] net_ratelimit: 6 callbacks suppressed [ 807.922582][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 807.937896][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 808.132546][ T4277] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 808.162543][ T22] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 808.332516][ T4277] usb 2-1: Using ep0 maxpacket: 32 [ 808.346996][ T4277] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 808.382560][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 808.388172][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.390065][ T22] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.407162][ T4277] usb 2-1: Product: syz [ 808.407184][ T4277] usb 2-1: Manufacturer: syz [ 808.407197][ T4277] usb 2-1: SerialNumber: syz [ 808.432158][ T4277] usb 2-1: config 0 descriptor?? [ 808.444355][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 808.451095][ T22] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 808.460472][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.475474][ T22] usb 4-1: config 0 descriptor?? [ 808.486408][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.493456][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.521883][ T4277] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 808.532619][ T4277] dvb-usb: bulk message failed: -22 (4/0) [ 808.538497][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 808.549747][ T4277] dvb-usb: bulk message failed: -22 (5/0) [ 808.557637][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 808.583987][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 808.601302][ T4277] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 808.610382][T13597] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 808.616936][T13597] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 808.627082][ T4277] usb 2-1: media controller created [ 808.652556][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 808.662134][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 808.691669][T13597] vhci_hcd vhci_hcd.0: Device attached [ 808.720131][T13583] dvb-usb: bulk message failed: -22 (7/0) [ 808.722257][T13600] vhci_hcd: connection closed [ 808.726021][T13583] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 808.726054][T13583] ttusb2: i2c transfer failed. [ 808.741669][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.755954][ T9] vhci_hcd: stop threads [ 808.760248][ T9] vhci_hcd: release socket [ 808.765611][ T9] vhci_hcd: disconnect device [ 808.872246][ T4277] usb 2-1: selecting invalid altsetting 3 [ 808.881603][ T4277] ttusb2: set interface to alts=3 failed [ 808.888766][ T22] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 808.907907][ T22] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 808.922282][ T22] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 808.955196][ T22] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 809.042662][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 809.052364][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 809.091834][ C1] usb 4-1: input irq status -75 received [ 809.118128][ T4277] DVB: Unable to find symbol tda10086_attach() [ 809.130132][ T4277] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 809.161118][ T4277] dvb-usb: bulk message failed: -22 (4/0) [ 809.177497][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 809.221184][ T4277] dvb-usb: bulk message failed: -22 (5/0) [ 809.241380][ T4277] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 809.272083][ T4277] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 809.282532][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 809.292203][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 809.304572][ T4277] usb 2-1: USB disconnect, device number 67 [ 809.413769][ T4277] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 809.882977][ T7] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 810.094503][ T7] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 810.116182][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.187238][ T7] usb 1-1: config 0 descriptor?? [ 810.221802][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 810.615178][ T7] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 810.938632][ T22] usb 4-1: USB disconnect, device number 73 [ 810.984166][T13640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 810.990728][T13640] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 811.042806][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 811.052553][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 811.082027][T13640] vhci_hcd vhci_hcd.0: Device attached [ 811.106619][T13643] vhci_hcd: connection closed [ 811.113774][ T4476] vhci_hcd: stop threads [ 811.152760][ T4476] vhci_hcd: release socket [ 811.157505][ T4476] vhci_hcd: disconnect device [ 811.228364][ T7] gspca_cpia1: usb_control_msg 05, error -71 [ 811.238967][ T7] cpia1 1-1:0.0: unexpected systemstate: 00 [ 811.269305][ T7] usb 1-1: USB disconnect, device number 69 [ 812.592629][ T7] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 812.645703][T13685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 812.652252][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 812.676441][T13685] vhci_hcd vhci_hcd.0: Device attached [ 812.707078][T13686] vhci_hcd: connection closed [ 812.708424][ T46] vhci_hcd: stop threads [ 812.737617][ T46] vhci_hcd: release socket [ 812.750781][ T46] vhci_hcd: disconnect device [ 812.792716][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 812.801471][ T7] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.815919][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 812.823293][ T7] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 812.835675][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.850437][ T7] usb 3-1: config 0 descriptor?? [ 812.942605][ T4316] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 813.137104][ T4316] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 813.165665][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.203797][ T4316] usb 1-1: config 0 descriptor?? [ 813.233380][ T4316] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 813.269094][ T7] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0 [ 813.302545][ T7] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0 [ 813.330778][ T7] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0 [ 813.352890][ T7] nzxt-smart2 0003:1E71:2009.0029: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 813.470684][ C0] usb 3-1: input irq status -75 received [ 813.619765][ T4316] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 814.162714][ C1] net_ratelimit: 6 callbacks suppressed [ 814.162732][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 814.177970][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 814.232526][ T4316] gspca_cpia1: usb_control_msg 05, error -71 [ 814.240911][ T4316] cpia1 1-1:0.0: unexpected systemstate: 00 [ 814.258913][ T4316] usb 1-1: USB disconnect, device number 70 [ 814.882538][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 814.892287][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 815.253245][T13725] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 815.282643][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 815.292318][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 815.388870][ T6399] usb 3-1: USB disconnect, device number 65 [ 815.433171][ T22] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 815.532584][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 815.542312][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 815.652545][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 815.668767][ T22] usb 1-1: config 0 has no interfaces? [ 815.681098][ T22] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 815.742776][ T7756] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 815.756631][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.775008][ T22] usb 1-1: config 0 descriptor?? [ 815.954050][ T7756] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 815.970084][ T7756] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 815.990876][ T7756] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 816.001003][ T7756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.014032][ T7756] usb 4-1: Product: syz [ 816.018551][ T7756] usb 4-1: Manufacturer: syz [ 816.026017][ T7756] usb 4-1: SerialNumber: syz [ 816.060843][ T4316] usb 1-1: USB disconnect, device number 71 [ 816.251075][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 816.274612][ T7756] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 816.367436][ T7756] usb 4-1: USB disconnect, device number 74 [ 816.863170][T13749] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 816.869703][T13749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 816.900995][T13749] vhci_hcd vhci_hcd.0: Device attached [ 816.927147][T13752] vhci_hcd: connection closed [ 816.931024][ T46] vhci_hcd: stop threads [ 816.952335][ T46] vhci_hcd: release socket [ 816.959390][ T46] vhci_hcd: disconnect device [ 817.180211][T13758] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 817.186764][T13758] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 817.234086][T13758] vhci_hcd vhci_hcd.0: Device attached [ 817.282821][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 817.292551][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 817.502500][ T14] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 817.510270][ T4316] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 817.555269][T13769] loop2: detected capacity change from 0 to 7 [ 817.565333][ T9651] Dev loop2: unable to read RDB block 7 [ 817.570945][ T9651] loop2: unable to read partition table [ 817.578406][ T9651] loop2: partition table beyond EOD, truncated [ 817.590439][T13769] Dev loop2: unable to read RDB block 7 [ 817.597217][T13769] loop2: unable to read partition table [ 817.607939][T13769] loop2: partition table beyond EOD, truncated [ 817.622550][T13769] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 817.666304][T13775] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 817.686475][ T4316] usb 2-1: device descriptor read/64, error -71 [ 817.693157][ T7] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 817.892476][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 817.899494][ T7] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.910923][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 817.917918][ T7] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 817.927395][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.939168][ T7] usb 4-1: config 0 descriptor?? [ 817.962523][ T4316] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 818.122525][ T4316] usb 2-1: device descriptor read/64, error -71 [ 818.243167][ T4316] usb usb2-port1: attempt power cycle [ 818.359172][ T7] nzxt-smart2 0003:1E71:2009.002A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 818.658627][ T4316] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 818.666389][ T7] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 818.703324][ T4316] usb 2-1: device descriptor read/8, error -71 [ 818.758923][ T22] usb 4-1: USB disconnect, device number 75 [ 818.863653][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 818.870798][ T7] usb 5-1: config 0 has no interfaces? [ 818.895464][ T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 818.935695][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.968042][ T7] usb 5-1: config 0 descriptor?? [ 818.973224][ T4316] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 819.023158][ T4316] usb 2-1: device descriptor read/8, error -71 [ 819.142627][ T4316] usb usb2-port1: unable to enumerate USB device [ 819.325337][ T4319] usb 5-1: USB disconnect, device number 58 [ 820.085431][T13810] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 820.092001][T13810] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 820.128991][T13763] vhci_hcd: connection reset by peer [ 820.134698][ T4330] vhci_hcd: stop threads [ 820.139031][ T4330] vhci_hcd: release socket [ 820.140142][T13810] vhci_hcd vhci_hcd.0: Device attached [ 820.159836][T13813] vhci_hcd: connection closed [ 820.170334][ T4330] vhci_hcd: disconnect device [ 820.180573][ T4330] vhci_hcd: stop threads [ 820.185320][ T4330] vhci_hcd: release socket [ 820.189731][ T4330] vhci_hcd: disconnect device [ 820.402673][ C1] net_ratelimit: 6 callbacks suppressed [ 820.402690][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 820.417801][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 820.465073][T13816] loop2: detected capacity change from 0 to 7 [ 820.473234][ T9651] Dev loop2: unable to read RDB block 7 [ 820.487402][ T9651] loop2: unable to read partition table [ 820.517913][ T9651] loop2: partition table beyond EOD, truncated [ 820.526194][T13816] Dev loop2: unable to read RDB block 7 [ 820.537451][T13816] loop2: unable to read partition table [ 820.578973][T13816] loop2: partition table beyond EOD, truncated [ 820.615494][T13816] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 821.012135][T13824] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 821.122621][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 821.132308][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 821.340095][T13841] device syzkaller0 entered promiscuous mode [ 821.499959][T13843] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 821.506489][T13843] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 821.518107][T13843] vhci_hcd vhci_hcd.0: Device attached [ 821.523758][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 821.523967][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 821.551921][T13846] vhci_hcd: connection closed [ 821.553945][ T4316] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 821.571644][ T4476] vhci_hcd: stop threads [ 821.576888][ T4476] vhci_hcd: release socket [ 821.581456][ T4476] vhci_hcd: disconnect device [ 821.742518][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 821.750107][ T4316] usb 1-1: config 0 has no interfaces? [ 821.755700][ T4316] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 821.765109][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.772685][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 821.782749][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 821.837375][ T4316] usb 1-1: config 0 descriptor?? [ 822.156868][T13860] [ 822.159225][T13860] ============================================ [ 822.165377][T13860] WARNING: possible recursive locking detected [ 822.171522][T13860] syzkaller #0 Not tainted [ 822.175920][T13860] -------------------------------------------- [ 822.182048][T13860] syz.0.2748/13860 is trying to acquire lock: [ 822.188090][T13860] ffffffff8d3f39b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 822.198269][T13860] [ 822.198269][T13860] but task is already holding lock: [ 822.205631][T13860] ffffffff8d3f39b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 822.215797][T13860] [ 822.215797][T13860] other info that might help us debug this: [ 822.223839][T13860] Possible unsafe locking scenario: [ 822.223839][T13860] [ 822.231268][T13860] CPU0 [ 822.234535][T13860] ---- [ 822.237795][T13860] lock(qp_broker_list.mutex); [ 822.242627][T13860] lock(qp_broker_list.mutex); [ 822.247456][T13860] [ 822.247456][T13860] *** DEADLOCK *** [ 822.247456][T13860] [ 822.255576][T13860] May be due to missing lock nesting notation [ 822.255576][T13860] [ 822.263872][T13860] 1 lock held by syz.0.2748/13860: [ 822.268957][T13860] #0: ffffffff8d3f39b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 822.279551][T13860] [ 822.279551][T13860] stack backtrace: [ 822.285432][T13860] CPU: 0 PID: 13860 Comm: syz.0.2748 Not tainted syzkaller #0 [ 822.292867][T13860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.303002][T13860] Call Trace: [ 822.306267][T13860] [ 822.309185][T13860] dump_stack_lvl+0x188/0x24e [ 822.313858][T13860] ? show_regs_print_info+0x12/0x12 [ 822.319052][T13860] ? load_image+0x400/0x400 [ 822.323541][T13860] __lock_acquire+0x123e/0x7d10 [ 822.328387][T13860] ? __lock_acquire+0x7d10/0x7d10 [ 822.333393][T13860] ? verify_lock_unused+0x140/0x140 [ 822.338574][T13860] ? mark_lock+0x94/0x320 [ 822.342887][T13860] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 822.348848][T13860] ? lock_chain_count+0x20/0x20 [ 822.353685][T13860] lock_acquire+0x1bb/0x4a0 [ 822.358170][T13860] ? vmci_qp_broker_detach+0x114/0xf00 [ 822.363614][T13860] ? __might_sleep+0xd0/0xd0 [ 822.368181][T13860] ? read_lock_is_recursive+0x10/0x10 [ 822.373537][T13860] ? kasan_set_track+0x60/0x70 [ 822.378285][T13860] ? kasan_save_free_info+0x2d/0x50 [ 822.383463][T13860] ? ____kasan_slab_free+0x126/0x1e0 [ 822.388729][T13860] ? slab_free_freelist_hook+0x131/0x1a0 [ 822.394342][T13860] __mutex_lock+0x12d/0xaf0 [ 822.398833][T13860] ? vmci_qp_broker_detach+0x114/0xf00 [ 822.404286][T13860] ? exit_to_user_mode_loop+0xe6/0x110 [ 822.409727][T13860] ? exit_to_user_mode_prepare+0xee/0x180 [ 822.415434][T13860] ? do_syscall_64+0x58/0xa0 [ 822.420011][T13860] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.426063][T13860] ? vmci_qp_broker_detach+0x114/0xf00 [ 822.431504][T13860] ? mutex_lock_nested+0x10/0x10 [ 822.436428][T13860] ? mark_lock+0x94/0x320 [ 822.440737][T13860] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 822.446703][T13860] vmci_qp_broker_detach+0x114/0xf00 [ 822.451972][T13860] ? kasan_quarantine_put+0xd4/0x220 [ 822.457238][T13860] ? lockdep_hardirqs_on+0x94/0x140 [ 822.462425][T13860] ? qp_notify_peer+0x1f0/0x1f0 [ 822.467271][T13860] ? slab_free_freelist_hook+0x131/0x1a0 [ 822.472889][T13860] ? vmci_ctx_put+0x5ca/0xc40 [ 822.477546][T13860] ? __kmem_cache_free+0xb6/0x1f0 [ 822.482550][T13860] vmci_ctx_put+0x629/0xc40 [ 822.487036][T13860] ? vmci_ctx_put+0x13e/0xc40 [ 822.491702][T13860] ? preempt_schedule_common+0xa5/0xd0 [ 822.497148][T13860] ? vmci_ctx_destroy+0xf0/0xf0 [ 822.501980][T13860] ? preempt_schedule+0xbc/0xd0 [ 822.506813][T13860] ? schedule_preempt_disabled+0x20/0x20 [ 822.512434][T13860] ? __lock_acquire+0x7d10/0x7d10 [ 822.517464][T13860] ? __rwlock_init+0x140/0x140 [ 822.522209][T13860] vmci_ctx_enqueue_datagram+0x3a7/0x420 [ 822.527826][T13860] vmci_datagram_dispatch+0x449/0xc10 [ 822.533180][T13860] ? vmci_is_context_owner+0xd0/0xd0 [ 822.538446][T13860] vmci_qp_broker_detach+0x8ca/0xf00 [ 822.543713][T13860] ? qp_notify_peer+0x1f0/0x1f0 [ 822.548543][T13860] ? vmci_ctx_put+0x5ca/0xc40 [ 822.553196][T13860] ? __kmem_cache_free+0xb6/0x1f0 [ 822.558203][T13860] vmci_ctx_put+0x629/0xc40 [ 822.562688][T13860] ? vmci_ctx_put+0x13e/0xc40 [ 822.567345][T13860] ? vmci_ctx_destroy+0xf0/0xf0 [ 822.572171][T13860] ? do_raw_spin_lock+0x128/0x2f0 [ 822.577176][T13860] ? __rwlock_init+0x140/0x140 [ 822.581925][T13860] ? do_raw_spin_unlock+0x11d/0x230 [ 822.587117][T13860] vmci_host_close+0x97/0x160 [ 822.591778][T13860] ? vmci_host_open+0xe0/0xe0 [ 822.596437][T13860] __fput+0x22c/0x920 [ 822.600402][T13860] task_work_run+0x1d0/0x260 [ 822.604996][T13860] ? task_work_cancel+0x220/0x220 [ 822.610002][T13860] ? exit_to_user_mode_loop+0x3b/0x110 [ 822.615447][T13860] exit_to_user_mode_loop+0xe6/0x110 [ 822.620719][T13860] exit_to_user_mode_prepare+0xee/0x180 [ 822.626250][T13860] syscall_exit_to_user_mode+0x16/0x40 [ 822.631689][T13860] do_syscall_64+0x58/0xa0 [ 822.636088][T13860] ? clear_bhb_loop+0x60/0xb0 [ 822.640747][T13860] ? clear_bhb_loop+0x60/0xb0 [ 822.645406][T13860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.651284][T13860] RIP: 0033:0x7f80c5d9ce59 [ 822.655712][T13860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.675308][T13860] RSP: 002b:00007f80c3fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 822.683701][T13860] RAX: 0000000000000000 RBX: 00007f80c6016090 RCX: 00007f80c5d9ce59 [ 822.691656][T13860] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 822.699605][T13860] RBP: 00007f80c5e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 822.707558][T13860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.715511][T13860] R13: 00007f80c6016128 R14: 00007f80c6016090 R15: 00007ffc35ed7f48 [ 822.723474][T13860] [ 822.802542][ T14] vhci_hcd: vhci_device speed not set [ 823.522570][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 823.532110][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 826.642585][ C1] net_ratelimit: 6 callbacks suppressed [ 826.642598][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 826.657712][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 827.922616][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 827.932203][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.1 [ 827.941788][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 827.951307][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.3 [ 828.002541][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 828.012105][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 829.772552][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 829.782078][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2