last executing test programs: 8m58.726617946s ago: executing program 1 (id=1813): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0xd0}, [@NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) 8m58.294761901s ago: executing program 1 (id=1816): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 8m57.812529199s ago: executing program 1 (id=1819): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @loopback, 0x5}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000280)=""/155, &(0x7f0000000340)=0x9b) 8m57.60390204s ago: executing program 1 (id=1820): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151000, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000006c0)) 8m57.336200238s ago: executing program 1 (id=1821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getegid() dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) close(r2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x4003) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0xc4}}, 0x0) 8m57.158756535s ago: executing program 1 (id=1822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000faffffffffffff0400000a28000000000a05000000000000000000020000050900010073797a300000000008000240000007"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 8m56.131635007s ago: executing program 32 (id=1822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000faffffffffffff0400000a28000000000a05000000000000000000020000050900010073797a300000000008000240000007"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 25.339968006s ago: executing program 2 (id=3744): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000002640)=""/4117, 0x1015}], 0x1) 24.131515987s ago: executing program 2 (id=3749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$media(0x0, 0x4007, 0x0) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000102505a1a4400001020301090265000101000000090400000002060000052406000005240001040d240f0100000000a1f51f00051524120900a317a88b045e4f01a607c0ffcb7e392a1524880f0000000000005e4f01a607c0ffcb7e392a09058202"], &(0x7f0000000c40)={0x0, 0x0, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="000f000000"]}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x42c55, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0xcf, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000400000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff00"/126]}, 0xce) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000240)) 18.500010962s ago: executing program 2 (id=3761): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) syz_open_procfs(0x0, 0x0) 15.507690604s ago: executing program 3 (id=3765): r0 = openat$rfkill(0xffffff9c, 0x0, 0x210040, 0x0) copy_file_range(r0, &(0x7f0000000040)=0x7fffffff, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0xfffffffe, 0x345, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r7, 0x0, r6, 0x0, 0x7ffff041, 0x1200000000000008) close(r0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x4, 0x1, 0x0, "6cfef8b4b9fdcfc8bf98040c2599e8a8e9f887975c3cc41e122a623eb7c37334", 0x34343459}) 13.660646169s ago: executing program 3 (id=3767): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$media(0x0, 0x4007, 0x0) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x42c55, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0xcf, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000400000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff00"/126]}, 0xce) 12.76351158s ago: executing program 2 (id=3769): socket$pppl2tp(0x18, 0x1, 0x1) userfaultfd(0x80001) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c00", @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x9, 0x0, 0x0, 0xfffe, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.581415691s ago: executing program 4 (id=3770): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) rmdir(0x0) socket$inet6(0xa, 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 12.452639529s ago: executing program 4 (id=3771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$media(0x0, 0x4007, 0x0) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000102505a1a4400001020301090265000101000000090400000002060000052406000005240001040d240f0100000000a1f51f00051524120900a317a88b045e4f01a607c0ffcb7e392a1524880f0000000000005e4f01a607c0ffcb7e392a09058202"], &(0x7f0000000c40)={0x0, 0x0, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="000f000000"]}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x42c55, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0xcf, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000400000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff00"/126]}, 0xce) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000240)) 12.236467172s ago: executing program 0 (id=3772): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f00000000c0)=0x11e, 0x4) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f00000001c0)=0x7) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000004c0)=ANY=[@ANYBLOB="02e423ec5c94d0a0ad73a61820d89d2dedb6b31d10"], 0xb, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10.935037255s ago: executing program 2 (id=3774): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000020040000004000000ff00000000000004", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, 0x0}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r8, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e42351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233", 0x97}, {&(0x7f0000000ec0)="e35f7e5e5ac5e9f0cd5260605ba7cd2a976cde296d70fecf4280213ca81ba1559f17393edeb50e129851c8070000000000000005d4b034d0ce1f6e0be5b65e1ea3aab64fb19483ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332622264913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40fa02b2a7b3f179ac1d1c332424093c93924b0fb97f23a2ce3a5ffd46a4ca58d205e8263de6c8f35ae0bdf26e7665d4521dc583997930691d414e950900194775678184d57e2a7bfbbb812ed678dee3f02a1c54cfd4c2faee9cd398d28b9f4f5fb8eb0290290399155c805fc6c3f6329e625d718b0215af67c4482ab8af756b973664ab0a372ecea980cf89a63de97a4f0721aab97a9", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8c0c3d1d67c8bb03bb8583a03c80782dc91b7645b65ba2116c9e64ddbb0545cdc56ee7374538a65fd04d97df001c29c9b087138af146ce11e88845bc9556ab54ea3af37d14905a6715cb3d95950e673158092189a4ff888056524a743276bdca4c98e171c7731c42fa63f4a589800a0bc1da8d669bab3f7e49551957c66ce65a558c84b2cf254904d659cdacd7", 0x8d}, {&(0x7f0000000b00)="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", 0x159}, {&(0x7f0000000c80)="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", 0x17f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ebd3f898a9f35f9f0687d56ed757eabb1ec4ae6ca742bca169389dc37b2bc6ea3018aaf5dde0b57f2e7c698da0de72d64894959dc5372a0defdf9d10a5fca8e5ec1a4813cc45e7a4a69bba49d31c2c40babd27642c8e81130cc35ee25ea5109a5b52ea11a044e158ed8f1d423847a9a497", 0x71}, {&(0x7f00000004c0)="7db538fba9d9a69edc1c8cdb7f78bdaf5a5b51158241af9a003eaca18f44be8ea83257d89d62f68cefad6c78998e0e2588b39df32d114b68c3e9f82c7c4343cd86efebf269f9c14356b1afc657700f6342ecec6cf6c24d82f412dcaac5cb0034955cf6b9292e554af52158fd559ebda9f2ded42beaa68dd1345376214fc553a3cae6dd55cc3b437e588ba64d7bf9f209a949d31a226860c14ced149be2ce4eb88b40b47e6970871824f4e1a98e9764588f0b178117a6d4d4471adbd30ba3e5a40de0ef50b307c318", 0xc8}], 0x2}}], 0x4, 0x4004044) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="efd833daffaf150ab12ed3d5216d03d4e9ca5a2547f879321ad2ca920ce59915e4efcba575b274", 0xffffffffffffff1c) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) getuid() sched_setattr(0x0, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) sendfile(r10, r10, 0x0, 0xffffffff) 10.681104287s ago: executing program 3 (id=3775): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$kcm(0x2, 0x1, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000080), 0x4) r1 = dup(r0) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x8d, 0xa1, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e") write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r6], 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x880) 10.055959101s ago: executing program 4 (id=3776): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 9.318861916s ago: executing program 2 (id=3777): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r4, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 9.173539442s ago: executing program 0 (id=3779): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x9) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f0000000380)='\x00p\x00', 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000a40), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000061626364654fd94b4109f1359c2704d56d53b300000000000015328a"], 0x29, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000140001002abd7000ff"], 0x2c}, 0x1, 0x0, 0x0, 0x20006054}, 0x24005040) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%6b\xaa\xe3\x8fa\x8e\xdc\xcc\xb5\x05\x83?3\xf1\x9c\'\x84J\xd8\x04\x12\x9f\x05\x00\x00\x00\x83\xd8\xaa\xb4\xaa\x871Ojc\\Ox\xcc\xa0e\xb3\x86\v\x83\x84\x9c\v\xb9\x92\f\xb9\x82\xeb\x1bXA7y\xb4\x18g\xec\xe7\xd9h\xf2U\x83e\xba\xfe\x80\xbe\x92\xb5\xe2 !@\v\xe8\xc0\x9f\xaf\xcc\xc6\\\xa3^#\xccZ\x19\'OPH&s\x94\x91\x03\xf6\xd6\xa3$\x02\xf8^f\f`', 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 8.95835895s ago: executing program 5 (id=3780): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.622396668s ago: executing program 3 (id=3781): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000001006b2d3cdb", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) 7.608909141s ago: executing program 0 (id=3782): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x7, 0x0, 0x200}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) read(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0xa4) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @control={0x9, 0x0, 0xb}}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0x4}, {}, @result={0xd, 0x4}}], 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r2, &(0x7f0000001800)="ad7536d8b20f25d1760ffe6c6f09462a7f9d78f7274f0aa6d9dc9951946c6a3a2802c9bdd30d333b067b5b9e1d16e47d7b1b8e8264d28337553bf8a14883c0b1a18529a82aff0bb1cb"}, 0x20) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8003}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fc00000000000000000000000000000144"], 0x28}, 0x40) 7.128933651s ago: executing program 3 (id=3783): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) connect$inet(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "d347161e142cade2ef441ae01eb44a011db24534db8c77ff37f59fac64405cd8dc546a14ed08e77bae14fdbcae08bad885761d851e3e8207e06024bb792c1bd4", 0x18}, 0x48, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) r4 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x3f, 0x37, 0x38, 0x37, 0x65, 0x38, 0x51, 0x34, 0x63, 0x64, 0x32, 0x34, 0x65, 0x39, 0x63]}, &(0x7f0000000240)={0x0, "78873128fd9dbb05aec2ed066a460d389dbc18bd178b2fb63b0791fb0a7c879b203b895284fcb84a91e7bb1924d48076d6d95f4c746097737fb821801ba36e13", 0x28}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) close_range(r5, 0xffffffffffffffff, 0x400000000000000) 6.947151147s ago: executing program 3 (id=3784): r0 = gettid() process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000500)=""/143, 0x8f}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f00000005c0)=""/39, 0x27}], 0x4, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x4, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB="050700004000ffc25e77e30000"], 0x14}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000000000df000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073"], 0x98}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) bind$inet(r1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x100, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000010000,user_i', @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = syz_io_uring_setup(0xd2, &(0x7f00000003c0)={0x0, 0x0, 0xc, 0x4, 0x2}, &(0x7f0000000480)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.562304403s ago: executing program 4 (id=3785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817", 0x15, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) 6.266909998s ago: executing program 0 (id=3786): socket(0x1e, 0x80002, 0x0) r0 = epoll_create1(0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x7079, 0x0, 0x414, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x7d, 0x6007, @fd_index=0x4, 0xfffffffffffffffe, 0x0}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xffff, 0x7, 0x2, 0x7, 0x800}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000180)={r6, 0xff}, 0x8) listen(r5, 0x50) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c) listen(r7, 0x50) io_uring_enter(r2, 0x7c7c, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.598510466s ago: executing program 0 (id=3787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$media(0x0, 0x4007, 0x0) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000102505a1a4400001020301090265000101000000090400000002060000052406000005240001040d240f0100000000a1f51f00051524120900a317a88b045e4f01a607c0ffcb7e392a1524880f0000000000005e4f01a607c0ffcb7e392a09058202"], &(0x7f0000000c40)={0x0, 0x0, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="000f000000"]}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x42c55, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0xcf, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000400000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff00"/126]}, 0xce) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000240)) 5.064998205s ago: executing program 5 (id=3788): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) connect$inet(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "d347161e142cade2ef441ae01eb44a011db24534db8c77ff37f59fac64405cd8dc546a14ed08e77bae14fdbcae08bad885761d851e3e8207e06024bb792c1bd4", 0x18}, 0x48, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r3) r4 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x36, 0x3f, 0x37, 0x38, 0x37, 0x65, 0x38, 0x51, 0x34, 0x63, 0x64, 0x32, 0x34, 0x65, 0x39, 0x63]}, &(0x7f0000000240)={0x0, "78873128fd9dbb05aec2ed066a460d389dbc18bd178b2fb63b0791fb0a7c879b203b895284fcb84a91e7bb1924d48076d6d95f4c746097737fb821801ba36e13", 0x28}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) close_range(r5, 0xffffffffffffffff, 0x400000000000000) 4.951484131s ago: executing program 5 (id=3789): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$inet(0x2, 0x2000000080002, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) 2.913950459s ago: executing program 0 (id=3790): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0x1, 0x100000401) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) 2.476470256s ago: executing program 4 (id=3791): openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socket$inet_dccp(0x2, 0x6, 0x0) socket$packet(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_sctp(0x2, 0x5, 0x84) socket(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.613758672s ago: executing program 5 (id=3792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$kcm(0x2, 0x1, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f0000001580)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000080), 0x4) r1 = dup(r0) r2 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x8d, 0xa1, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e") write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r6], 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x880) 1.539452921s ago: executing program 4 (id=3793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$user(0x0, &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400), 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r2, r3, r2}, &(0x7f0000000740)=""/267, 0x10b, &(0x7f00000001c0)={&(0x7f00000005c0)={'sha384-generic\x00'}}) syz_usb_connect(0x3, 0x41, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xcb, 0x62, 0xfc, 0x40, 0x28a7, 0x71ab, 0xdf39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x2, 0x9, 0x8e, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xffff, 0x9d8, 0xff}, {0x6, 0x24, 0x1a, 0xe}}]}}]}}]}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000140)=0x0) waitid(0x0, r6, &(0x7f0000000180), 0x20000001, &(0x7f0000000240)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000003c0)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x400, 0x0, 0x0, 0xfffffffd]}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r5) 143.377933ms ago: executing program 5 (id=3794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="ff830500000700ffffff", @ANYRES8], 0x4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x20000841) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r4, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) getsockopt$inet_int(r5, 0x10d, 0xf, &(0x7f0000000380), &(0x7f0000000240)=0x4) 0s ago: executing program 5 (id=3795): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x34}}, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaa90d786a755103186c997b28eaaaa00080045800028006400000002907800000000e000000211009078e000000280000002010000000000000003a9138950fd029716fb53fa422ab4e00eee413d53e03f138a"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): : 3 [ 1257.841955][T13567] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1257.853789][T13567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.865715][T13567] usb 5-1: Product: syz [ 1257.870033][T13567] usb 5-1: Manufacturer: syz [ 1257.879818][T13567] usb 5-1: SerialNumber: syz [ 1258.152818][T13567] usb 5-1: 0:2 : does not exist [ 1258.177924][T13567] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1258.280624][T13567] usb 5-1: USB disconnect, device number 58 [ 1258.627150][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.704616][ T5904] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1258.887363][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 1259.394810][ T47] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1259.586910][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1259.596856][ T47] usb 3-1: not running at top speed; connect to a high speed hub [ 1259.639424][ T47] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1259.673274][ T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1259.682744][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.697074][ T47] usb 3-1: Product: syz [ 1259.709699][ T47] usb 3-1: Manufacturer: syz [ 1259.731988][ T47] usb 3-1: SerialNumber: syz [ 1259.750245][ T47] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1261.884644][ T5904] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1262.001409][ T5904] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1262.053277][ T5904] usb 6-1: can't read configurations, error -71 [ 1262.201204][T17481] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2954'. [ 1262.670650][T17484] dccp_v6_rcv: dropped packet with invalid checksum [ 1262.768827][T13567] usb 3-1: USB disconnect, device number 61 [ 1263.806631][T17510] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2965'. [ 1263.819144][T13567] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1263.994509][T13567] usb 3-1: Using ep0 maxpacket: 8 [ 1264.269803][T13567] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1264.354892][T13567] usb 3-1: config 0 has no interface number 0 [ 1264.385614][T14490] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1264.388176][T13567] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.437950][T13567] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1264.488471][T13567] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1264.499902][ T47] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1264.505616][T13567] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1264.573159][T14490] usb 1-1: device descriptor read/64, error -71 [ 1264.744539][T13567] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1264.747395][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1264.763947][ T47] usb 5-1: not running at top speed; connect to a high speed hub [ 1264.774757][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1264.787695][T13567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.816479][T14490] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1264.829755][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1264.839172][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.847802][ T47] usb 5-1: Product: syz [ 1264.852941][ T47] usb 5-1: Manufacturer: syz [ 1264.863483][ T47] usb 5-1: SerialNumber: syz [ 1264.910128][ T47] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1264.938703][T13567] usb 3-1: config 0 descriptor?? [ 1264.963028][T13567] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1264.974882][T14490] usb 1-1: device descriptor read/64, error -71 [ 1265.085152][T14490] usb usb1-port1: attempt power cycle [ 1265.424872][T14490] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1265.445941][T14490] usb 1-1: device descriptor read/8, error -71 [ 1265.724991][T14490] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1265.762364][T14490] usb 1-1: device descriptor read/8, error -71 [ 1265.875219][T14490] usb usb1-port1: unable to enumerate USB device [ 1266.774503][T13567] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1266.986760][T13567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.018392][T13567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.054936][T13567] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1267.129588][T13567] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1267.204530][T13567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.261025][T13567] usb 6-1: config 0 descriptor?? [ 1267.399977][ T47] usb 5-1: USB disconnect, device number 59 [ 1267.731364][T13567] plantronics 0003:047F:FFFF.0065: No inputs registered, leaving [ 1267.974103][T13567] plantronics 0003:047F:FFFF.0065: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1268.112372][T13567] usb 6-1: USB disconnect, device number 74 [ 1268.335020][ T5904] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1268.518975][T14490] usb 3-1: USB disconnect, device number 62 [ 1268.541391][T14490] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1268.561049][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.732809][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1268.755195][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1268.763451][ T5904] usb 5-1: Product: syz [ 1268.805751][T17543] ip6tnl1: entered promiscuous mode [ 1268.812232][ T5904] usb 5-1: Manufacturer: syz [ 1268.824649][ T5904] usb 5-1: SerialNumber: syz [ 1268.911784][ T5904] usb 5-1: config 0 descriptor?? [ 1269.194339][ T5904] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1269.351854][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1269.360917][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1269.577788][T17570] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1270.052650][T17576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.060048][T17576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.550690][T17576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.581032][T17576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.797007][T14490] usb 5-1: USB disconnect, device number 60 [ 1270.862487][T17576] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.889154][T17576] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.899084][T17576] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.911179][T17576] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.982629][T17578] netlink: 'syz.2.2990': attribute type 1 has an invalid length. [ 1271.305287][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 1272.414582][T14490] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1272.664581][T14490] usb 6-1: Using ep0 maxpacket: 8 [ 1272.692758][T14490] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1272.702555][T14490] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1272.735024][T14490] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1272.756786][T14490] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1272.803741][T14490] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1272.884542][ T5892] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1272.894637][ T47] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1273.022622][T14490] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1273.033436][T14490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.043924][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.068633][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1273.082112][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1273.091067][ T5892] usb 4-1: Product: syz [ 1273.100356][ T5892] usb 4-1: Manufacturer: syz [ 1273.105757][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.131622][ T47] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1273.154892][ T5892] usb 4-1: SerialNumber: syz [ 1273.164983][ T47] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1273.195020][ T5892] usb 4-1: config 0 descriptor?? [ 1273.208198][ T47] usb 3-1: Product: syz [ 1273.294731][ T47] usb 3-1: Manufacturer: syz [ 1273.355882][ T47] usb 3-1: SerialNumber: syz [ 1273.402982][T14490] usb 6-1: GET_CAPABILITIES returned 0 [ 1273.426682][ T47] usb 3-1: config 0 descriptor?? [ 1273.446626][T14490] usbtmc 6-1:16.0: can't read capabilities [ 1273.458058][ T5892] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1273.585302][ T9] usb 6-1: USB disconnect, device number 75 [ 1273.597236][ T47] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1273.759462][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.825747][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.214700][ T47] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1275.587225][ T5892] usb 3-1: USB disconnect, device number 63 [ 1275.702629][ T47] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1275.724621][ T47] usb 6-1: not running at top speed; connect to a high speed hub [ 1275.787672][ T47] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1275.842335][ T47] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1275.852084][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.868617][ T5892] usb 4-1: USB disconnect, device number 69 [ 1275.922067][ T47] usb 6-1: Product: syz [ 1275.946818][ T47] usb 6-1: Manufacturer: syz [ 1276.024797][ T47] usb 6-1: SerialNumber: syz [ 1276.126000][ T47] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1276.456499][T17704] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1277.113942][T17714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1277.513476][T17725] vlan2: entered allmulticast mode [ 1277.522729][T17725] veth0_to_bridge: entered allmulticast mode [ 1277.539741][T17725] bridge0: port 3(vlan2) entered blocking state [ 1277.548257][T17725] bridge0: port 3(vlan2) entered disabled state [ 1277.588358][T17725] vlan2: entered promiscuous mode [ 1277.624688][T17725] veth0_to_bridge: entered promiscuous mode [ 1277.675166][T17725] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1277.835463][T17725] bridge0: port 3(vlan2) entered blocking state [ 1277.842229][T17725] bridge0: port 3(vlan2) entered forwarding state [ 1277.993990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.006861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.020100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.034017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.046613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.059169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.072075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.084686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.097273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.109873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.595862][ T5892] usb 6-1: USB disconnect, device number 76 [ 1278.933614][T17739] syzkaller1: entered promiscuous mode [ 1278.945557][T17739] syzkaller1: entered allmulticast mode [ 1279.004551][ T5904] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1279.192310][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.256472][ T5904] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1279.284211][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1279.417218][ T5904] usb 5-1: Product: syz [ 1279.474629][ T5904] usb 5-1: Manufacturer: syz [ 1279.479352][ T5904] usb 5-1: SerialNumber: syz [ 1279.582781][ T5904] usb 5-1: config 0 descriptor?? [ 1280.068853][ T5904] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1280.494255][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.094785][T13567] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1281.120228][ T9] usb 5-1: USB disconnect, device number 61 [ 1281.287692][T13567] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.307090][T17767] input: syz0 as /devices/virtual/input/input109 [ 1281.312681][T13567] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1281.326948][T13567] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1281.351817][T13567] usb 1-1: Product: syz [ 1281.366743][T13567] usb 1-1: Manufacturer: syz [ 1281.380303][T13567] usb 1-1: SerialNumber: syz [ 1281.480046][T13567] usb 1-1: config 0 descriptor?? [ 1281.659786][T13567] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1281.863883][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.879112][T17794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1284.304775][ C1] net_ratelimit: 1116 callbacks suppressed [ 1284.304803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.323051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.335842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.348648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.361448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.374313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.387091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.399641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.412104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.424731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.820665][ T5892] usb 1-1: USB disconnect, device number 47 [ 1285.118480][T17800] input: syz0 as /devices/virtual/input/input110 [ 1285.915053][ T5904] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1286.097211][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.115587][ T5904] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1286.129013][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1286.143456][ T5904] usb 6-1: Product: syz [ 1286.282738][ T5904] usb 6-1: Manufacturer: syz [ 1286.304997][ T5904] usb 6-1: SerialNumber: syz [ 1286.378129][ T5904] usb 6-1: config 0 descriptor?? [ 1286.414225][ T5904] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1287.124237][T13567] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1287.197686][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.434831][T17837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'. [ 1287.569075][T13567] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.104801][T13567] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1288.329845][T13567] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1288.339154][T13567] usb 5-1: Product: syz [ 1288.343456][T13567] usb 5-1: Manufacturer: syz [ 1288.354473][T13567] usb 5-1: SerialNumber: syz [ 1288.375682][T13567] usb 5-1: config 0 descriptor?? [ 1288.578787][T13567] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1288.761359][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.421170][T13567] usb 6-1: USB disconnect, device number 77 [ 1289.470282][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3098'. [ 1289.860009][ T5904] usb 5-1: USB disconnect, device number 62 [ 1290.249384][T17882] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1290.259722][T17882] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1290.698440][T17892] netlink: 'syz.5.3100': attribute type 10 has an invalid length. [ 1290.709744][T17892] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1291.394560][ T5840] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1291.587285][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.618053][ T5840] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1291.631309][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1291.650511][ T5840] usb 5-1: Product: syz [ 1291.660909][ T5840] usb 5-1: Manufacturer: syz [ 1291.667227][ T5840] usb 5-1: SerialNumber: syz [ 1291.692301][ T5840] usb 5-1: config 0 descriptor?? [ 1291.763722][ T5840] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1291.860004][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1293.200009][ C1] net_ratelimit: 199 callbacks suppressed [ 1293.200035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.218287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.230737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.243169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.255591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.269459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.281840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.294216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.306587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.318987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.967497][T17934] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=33554656 (67109312 ns) > initial count (360 ns). Using initial count to start timer. [ 1294.060014][ T5896] usb 5-1: USB disconnect, device number 63 [ 1295.644809][ T5896] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1295.685630][T17963] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1295.695991][T17963] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1295.898926][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1295.913741][ T5896] usb 3-1: not running at top speed; connect to a high speed hub [ 1296.200748][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1296.542895][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1296.569195][T17970] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1296.609378][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.696770][ T5896] usb 3-1: Product: syz [ 1296.701035][ T5896] usb 3-1: Manufacturer: syz [ 1296.708095][ T5896] usb 3-1: SerialNumber: syz [ 1296.803718][ T5896] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1298.171809][T17982] netlink: 'syz.4.3134': attribute type 4 has an invalid length. [ 1298.251110][ T30] audit: type=1800 audit(1744718621.673:1387): pid=17979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3133" name="file1" dev="tmpfs" ino=3334 res=0 errno=0 [ 1298.395125][ T5840] usb 3-1: USB disconnect, device number 64 [ 1298.899368][ T30] audit: type=1800 audit(1744718622.333:1388): pid=17992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3138" name="bus" dev="tmpfs" ino=3238 res=0 errno=0 [ 1299.019939][T17994] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1299.044483][T17994] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1299.075765][T17994] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1299.387492][T18001] trusted_key: syz.4.3141 sent an empty control message without MSG_MORE. [ 1299.862109][T18014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3147'. [ 1299.874526][T18014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3147'. [ 1300.152953][T18020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1300.183076][T18022] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3148'. [ 1300.233571][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.240158][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.309927][T18049] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1304.995698][T18085] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 1305.127013][T18088] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1305.137194][T18088] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1306.934792][ T47] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1307.107589][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1307.123864][ T47] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1307.148212][ T47] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1307.214845][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1307.224349][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.241365][ T47] usb 5-1: Product: syz [ 1307.249271][ T47] usb 5-1: Manufacturer: syz [ 1307.261530][ T47] usb 5-1: SerialNumber: syz [ 1307.539852][ T47] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1308.249119][ T5896] usb 5-1: USB disconnect, device number 64 [ 1308.524805][ T47] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1308.649714][T18124] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 1308.671938][T18124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.680722][T18124] team0: entered promiscuous mode [ 1308.684665][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 1308.687809][T18124] bond0: (slave team0): Enslaving as an active interface with an up link [ 1308.692940][ T47] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1308.726776][ T47] usb 1-1: config 0 has no interface number 0 [ 1308.737317][ T47] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1308.759143][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.768394][ T47] usb 1-1: Product: syz [ 1308.772625][ T47] usb 1-1: Manufacturer: syz [ 1308.782023][ T47] usb 1-1: SerialNumber: syz [ 1308.790244][ T47] usb 1-1: config 0 descriptor?? [ 1308.804674][ T47] smsc95xx v2.0.0 [ 1308.808387][ T47] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1308.833965][ T47] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1308.972745][T18132] netlink: 'syz.5.3185': attribute type 29 has an invalid length. [ 1309.050919][ T5840] usb 1-1: USB disconnect, device number 48 [ 1309.084756][ T47] usblp0: removed [ 1309.393475][ T30] audit: type=1326 audit(1744718632.823:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18139 comm="syz.5.3188" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0 [ 1309.795090][T18147] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1309.805554][T18147] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1311.745173][ C1] net_ratelimit: 199 callbacks suppressed [ 1311.745199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.763205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.775577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.788096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.800498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.813036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.825625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.838199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.850655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.863203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1311.967458][T18181] netlink: 'syz.0.3204': attribute type 1 has an invalid length. [ 1312.409426][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1312.420232][T18187] netlink: 'syz.5.3205': attribute type 7 has an invalid length. [ 1312.423709][T18183] bond1: (slave gretap1): making interface the new active one [ 1312.443609][T18183] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1312.471628][T18187] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1312.486971][T18187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1314.109434][T18224] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1314.392888][T18234] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1314.403309][T18234] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1315.454559][ T5896] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1315.664881][ T47] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1315.736539][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.783896][ T5896] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1315.834134][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1315.846611][ T47] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1315.855632][ T47] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1315.866650][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1315.894680][ T5896] usb 4-1: Product: syz [ 1315.901177][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1315.915463][ T5896] usb 4-1: Manufacturer: syz [ 1315.929157][ T5896] usb 4-1: SerialNumber: syz [ 1315.940412][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1315.946551][ T5896] usb 4-1: config 0 descriptor?? [ 1315.997852][ T47] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1316.008272][ T47] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1316.023298][ T47] usb 3-1: Product: syz [ 1316.031814][ T47] usb 3-1: Manufacturer: syz [ 1316.060945][ T5896] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1316.064686][ T47] cdc_wdm 3-1:1.0: skipping garbage [ 1316.077034][ T47] cdc_wdm 3-1:1.0: skipping garbage [ 1316.103480][ T47] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1316.114482][ T47] cdc_wdm 3-1:1.0: Unknown control protocol [ 1316.218615][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1316.518562][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1316.521383][T13567] usb 3-1: USB disconnect, device number 65 [ 1316.525459][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1316.537323][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1317.493896][ T5896] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1317.657556][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1317.668307][ T5896] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1317.686845][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.709238][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1317.722692][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.751045][ T5896] usb 3-1: Product: syz [ 1317.757630][ T5896] usb 3-1: Manufacturer: syz [ 1317.762517][ T5896] usb 3-1: SerialNumber: syz [ 1317.987211][T13567] usb 4-1: USB disconnect, device number 70 [ 1318.043937][ T5896] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1318.086881][T18290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1318.538297][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1318.998089][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1319.314617][ T5896] usb 3-1: USB disconnect, device number 66 [ 1319.532270][T18314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3255'. [ 1320.257063][ T5152] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1320.268989][ T5152] CPU: 0 UID: 0 PID: 5152 Comm: kworker/u9:1 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1320.269024][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1320.269039][ T5152] Workqueue: hci3 hci_rx_work [ 1320.269068][ T5152] Call Trace: [ 1320.269078][ T5152] [ 1320.269087][ T5152] dump_stack_lvl+0x241/0x360 [ 1320.269137][ T5152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.269170][ T5152] ? __pfx__printk+0x10/0x10 [ 1320.269200][ T5152] ? kernfs_path_from_node+0x2b/0x250 [ 1320.269300][ T5152] ? kernfs_path_from_node+0x217/0x250 [ 1320.269326][ T5152] sysfs_create_dir_ns+0x2fd/0x3f0 [ 1320.269378][ T5152] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1320.269412][ T5152] kobject_add_internal+0x435/0x8d0 [ 1320.269453][ T5152] kobject_add+0x15b/0x230 [ 1320.269482][ T5152] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1320.269516][ T5152] ? device_add+0x3e7/0xbf0 [ 1320.269571][ T5152] ? __pfx_kobject_add+0x10/0x10 [ 1320.269601][ T5152] ? _raw_spin_unlock+0x28/0x50 [ 1320.269627][ T5152] ? get_device_parent+0x165/0x410 [ 1320.269659][ T5152] device_add+0x4e5/0xbf0 [ 1320.269693][ T5152] hci_conn_add_sysfs+0xe8/0x200 [ 1320.269732][ T5152] le_conn_complete_evt+0xc6e/0x12a0 [ 1320.269774][ T5152] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1320.269800][ T5152] ? __mutex_unlock_slowpath+0x229/0x800 [ 1320.269833][ T5152] ? __skb_clone+0x5c/0x6d0 [ 1320.269860][ T5152] ? skb_pull_data+0x112/0x230 [ 1320.269895][ T5152] hci_le_conn_complete_evt+0x18c/0x420 [ 1320.269930][ T5152] hci_event_packet+0xa5c/0x1550 [ 1320.269971][ T5152] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1320.270002][ T5152] ? __pfx_hci_event_packet+0x10/0x10 [ 1320.270041][ T5152] ? kcov_remote_start+0x3c0/0x7d0 [ 1320.270061][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 1320.270093][ T5152] ? hci_send_to_monitor+0xdc/0x530 [ 1320.270124][ T5152] hci_rx_work+0x3f3/0xdb0 [ 1320.270180][ T5152] ? process_scheduled_works+0x9cb/0x18e0 [ 1320.270206][ T5152] process_scheduled_works+0xac3/0x18e0 [ 1320.270265][ T5152] ? __pfx_process_scheduled_works+0x10/0x10 [ 1320.270301][ T5152] ? assign_work+0x367/0x3d0 [ 1320.270333][ T5152] worker_thread+0x870/0xd50 [ 1320.270375][ T5152] ? __kthread_parkme+0x1a8/0x200 [ 1320.270408][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 1320.270435][ T5152] kthread+0x7b7/0x940 [ 1320.270467][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 1320.270496][ T5152] ? __pfx_kthread+0x10/0x10 [ 1320.270523][ T5152] ? __pfx_kthread+0x10/0x10 [ 1320.270552][ T5152] ? __pfx_kthread+0x10/0x10 [ 1320.270582][ T5152] ? __pfx_kthread+0x10/0x10 [ 1320.270611][ T5152] ? _raw_spin_unlock_irq+0x23/0x50 [ 1320.270632][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 1320.270657][ T5152] ? __pfx_kthread+0x10/0x10 [ 1320.270689][ T5152] ret_from_fork+0x4b/0x80 [ 1320.270712][ T5152] ? __pfx_kthread+0x10/0x10 [ 1320.270742][ T5152] ret_from_fork_asm+0x1a/0x30 [ 1320.270782][ T5152] [ 1320.271020][ T5152] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1320.570111][ T5152] Bluetooth: hci3: failed to register connection device [ 1320.641561][ T47] usblp0: removed [ 1321.571411][T18292] syz.4.3245 (18292): drop_caches: 2 [ 1322.342226][T18353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3269'. [ 1322.345411][ T5896] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1322.525077][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 1322.543713][ T5896] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1322.553181][ T5896] usb 5-1: config 0 has no interface number 0 [ 1322.566901][ T5896] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1322.576889][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.594635][ T5896] usb 5-1: Product: syz [ 1322.618150][ T5896] usb 5-1: Manufacturer: syz [ 1322.633751][ T5896] usb 5-1: SerialNumber: syz [ 1322.676844][ T5896] usb 5-1: config 0 descriptor?? [ 1322.747134][ T5896] smsc95xx v2.0.0 [ 1322.753023][ T5896] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1322.789419][ T5896] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 1323.069990][ T5896] usb 5-1: USB disconnect, device number 65 [ 1323.144711][ C1] net_ratelimit: 199 callbacks suppressed [ 1323.144734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.164080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.195393][ T5840] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1323.404474][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 1324.276078][T18388] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3283'. [ 1325.972389][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1326.007246][ T5840] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1326.031646][ T5840] usb 4-1: can't read configurations, error -71 [ 1326.516819][T18411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.644831][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 1327.097607][T18422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3295'. [ 1327.510036][T18432] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 1327.963651][T18432] bond3: (slave gretap1): making interface the new active one [ 1327.977812][T18432] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1329.249258][ T5896] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1329.802474][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1329.839970][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 1329.899630][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1329.933002][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1329.944289][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.975715][ T5896] usb 4-1: Product: syz [ 1329.998943][ T5896] usb 4-1: Manufacturer: syz [ 1330.020052][ T5896] usb 4-1: SerialNumber: syz [ 1330.053149][ T5896] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1330.555648][T18477] syzkaller0: entered promiscuous mode [ 1330.563218][T18477] syzkaller0: entered allmulticast mode [ 1331.648862][T13567] usb 4-1: USB disconnect, device number 73 [ 1331.901645][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1334.984832][ T5840] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1335.141993][ T5840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.152556][ T5840] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1335.162272][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.174501][ T5840] usb 6-1: config 0 descriptor?? [ 1335.185909][ T5840] pwc: Askey VC010 type 2 USB webcam detected. [ 1335.593267][ T5840] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1335.612064][ T5840] pwc: recv_control_msg error -32 req 02 val 2700 [ 1335.625155][ T5840] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1335.633195][ T5840] pwc: recv_control_msg error -32 req 04 val 1000 [ 1335.641268][ T5840] pwc: recv_control_msg error -32 req 04 val 1300 [ 1335.653857][ T5840] pwc: recv_control_msg error -32 req 04 val 1400 [ 1335.864229][ T5840] pwc: recv_control_msg error -71 req 02 val 2100 [ 1335.879428][ T5840] pwc: recv_control_msg error -71 req 04 val 1500 [ 1335.887263][ T5840] pwc: recv_control_msg error -71 req 02 val 2500 [ 1335.906496][ T5840] pwc: recv_control_msg error -71 req 02 val 2400 [ 1335.913565][ T5840] pwc: recv_control_msg error -71 req 02 val 2600 [ 1335.921213][ T5840] pwc: recv_control_msg error -71 req 02 val 2900 [ 1335.928216][ T5840] pwc: recv_control_msg error -71 req 02 val 2800 [ 1335.935846][ T5840] pwc: recv_control_msg error -71 req 04 val 1100 [ 1335.942809][ T5840] pwc: recv_control_msg error -71 req 04 val 1200 [ 1335.952114][ T5840] pwc: Registered as video103. [ 1335.963677][ T5840] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input112 [ 1335.985246][ T5840] usb 6-1: USB disconnect, device number 78 [ 1336.313594][T18483] syz.4.3314: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1336.333035][T18483] CPU: 1 UID: 0 PID: 18483 Comm: syz.4.3314 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1336.333067][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1336.333082][T18483] Call Trace: [ 1336.333091][T18483] [ 1336.333101][T18483] dump_stack_lvl+0x241/0x360 [ 1336.333143][T18483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1336.333176][T18483] ? __pfx__printk+0x10/0x10 [ 1336.333207][T18483] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1336.333243][T18483] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1336.333275][T18483] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1336.333310][T18483] warn_alloc+0x27c/0x410 [ 1336.333409][T18483] ? __pfx_warn_alloc+0x10/0x10 [ 1336.333439][T18483] ? xp_create_and_assign_umem+0x17b/0xc60 [ 1336.333467][T18483] ? __get_vm_area_node+0x1c8/0x2d0 [ 1336.333537][T18483] ? __get_vm_area_node+0x25c/0x2d0 [ 1336.333577][T18483] __vmalloc_node_range_noprof+0x634/0x1390 [ 1336.333619][T18483] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 1336.333718][T18483] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1336.333739][T18483] ? __kasan_kmalloc_large+0x1a/0xa0 [ 1336.333793][T18483] ? xp_create_and_assign_umem+0x17b/0xc60 [ 1336.333823][T18483] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 1336.333875][T18483] ? xp_create_and_assign_umem+0x17b/0xc60 [ 1336.333902][T18483] ? xp_create_and_assign_umem+0x17b/0xc60 [ 1336.333936][T18483] xp_create_and_assign_umem+0x17b/0xc60 [ 1336.333977][T18483] ? dev_get_by_index+0x23/0x2d0 [ 1336.334011][T18483] xsk_bind+0x435/0xfb0 [ 1336.334043][T18483] __sys_bind+0x1de/0x290 [ 1336.334078][T18483] ? __pfx___sys_bind+0x10/0x10 [ 1336.334135][T18483] __ia32_sys_bind+0x7a/0x90 [ 1336.334168][T18483] __do_fast_syscall_32+0xb4/0x110 [ 1336.334197][T18483] ? ret_from_fork_asm+0x1a/0x30 [ 1336.334217][T18483] ? lockdep_hardirqs_on+0x9d/0x150 [ 1336.334249][T18483] do_fast_syscall_32+0x34/0x80 [ 1336.334277][T18483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1336.334312][T18483] RIP: 0023:0xf70ed579 [ 1336.334337][T18483] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1336.334357][T18483] RSP: 002b:00000000f50bc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 1336.334386][T18483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1336.334401][T18483] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1336.334414][T18483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1336.334433][T18483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1336.334447][T18483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1336.334478][T18483] [ 1336.658303][T18483] Mem-Info: [ 1336.661496][T18483] active_anon:25315 inactive_anon:0 isolated_anon:0 [ 1336.661496][T18483] active_file:11331 inactive_file:3374 isolated_file:0 [ 1336.661496][T18483] unevictable:768 dirty:280 writeback:0 [ 1336.661496][T18483] slab_reclaimable:9935 slab_unreclaimable:123011 [ 1336.661496][T18483] mapped:30904 shmem:19765 pagetables:1236 [ 1336.661496][T18483] sec_pagetables:0 bounce:0 [ 1336.661496][T18483] kernel_misc_reclaimable:0 [ 1336.661496][T18483] free:1307443 free_pcp:909 free_cma:0 [ 1336.707848][T18483] Node 0 active_anon:101260kB inactive_anon:0kB active_file:45324kB inactive_file:13492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123616kB dirty:1120kB writeback:0kB shmem:77524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11632kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1336.742732][T18483] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1336.749430][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3320'. [ 1336.773831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.800240][T18483] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.831702][T18483] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1336.838961][T18483] Node 0 DMA32 free:1313756kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:101352kB inactive_anon:0kB active_file:45324kB inactive_file:13408kB unevictable:1536kB writepending:1120kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:3316kB local_pcp:728kB free_cma:0kB [ 1336.869792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.882021][T18483] lowmem_reserve[]: 0 0 0 0 0 [ 1336.888711][T18483] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1336.919319][T18483] lowmem_reserve[]: 0 0 0 0 0 [ 1336.924091][T18483] Node 1 Normal free:3900216kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.960144][T18483] lowmem_reserve[]: 0 0 0 0 0 [ 1336.965705][T18483] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1336.981421][T18483] Node 0 DMA32: 19*4kB (UE) 194*8kB (ME) 239*16kB (UM) 127*32kB (UME) 58*64kB (UME) 34*128kB (UME) 67*256kB (UME) 37*512kB (UM) 24*1024kB (UME) 15*2048kB (UME) 294*4096kB (UM) = 1313196kB [ 1337.003740][T18483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1337.023589][T18483] Node 1 Normal: 238*4kB (UME) 66*8kB (UME) 47*16kB (UME) 236*32kB (UME) 106*64kB (UME) 27*128kB (UME) 15*256kB (UM) 9*512kB (UME) 5*1024kB (UME) 4*2048kB (UE) 942*4096kB (M) = 3900216kB [ 1337.046105][T18483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.057751][T18483] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1337.070477][T18483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.080365][T18483] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1337.089871][T18483] 34492 total pagecache pages [ 1337.094706][T18483] 3 pages in swap cache [ 1337.098896][T18483] Free swap = 124984kB [ 1337.103052][T18483] Total swap = 124996kB [ 1337.107385][T18483] 2097051 pages RAM [ 1337.111219][T18483] 0 pages HighMem/MovableOnly [ 1337.116181][T18483] 428585 pages reserved [ 1337.120358][T18483] 0 pages cma reserved [ 1337.393939][ T30] audit: type=1326 audit(1744718660.823:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18518 comm="syz.2.3323" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x0 [ 1337.954842][T13567] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1338.025296][T18536] syz_tun: entered allmulticast mode [ 1338.132160][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1338.172144][T13567] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1338.191492][T13567] usb 4-1: not running at top speed; connect to a high speed hub [ 1338.213297][T13567] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1338.248227][T13567] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1338.257540][T13567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.287909][T13567] usb 4-1: Product: syz [ 1338.292161][T13567] usb 4-1: Manufacturer: syz [ 1338.332115][T13567] usb 4-1: SerialNumber: syz [ 1338.387658][T13567] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1338.429592][T18546] loop2: detected capacity change from 0 to 7 [ 1338.439267][T18546] Dev loop2: unable to read RDB block 7 [ 1338.446236][T18546] loop2: unable to read partition table [ 1338.460625][T18546] loop2: partition table beyond EOD, truncated [ 1338.481092][T18546] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1338.798006][T18552] tipc: Started in network mode [ 1338.884707][T18552] tipc: Node identity 4, cluster identity 4711 [ 1338.894847][T18552] tipc: Node number set to 4 [ 1338.942543][ T5896] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 1339.136712][ T5896] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1339.145315][ T5896] usb 6-1: config 0 has no interface number 0 [ 1339.170162][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1339.215441][ T5896] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1339.228944][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1339.243791][ T5896] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1339.355428][ T5896] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1339.411116][ T5896] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1339.535272][ T5896] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1339.593232][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.603565][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1339.662312][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1339.667138][ T5896] usb 6-1: config 0 descriptor?? [ 1339.723721][T18549] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1339.736496][T18549] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1339.752052][ T5896] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1339.764599][ T5840] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1339.797009][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1339.811722][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1339.981984][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1339.992424][ T5840] usb 5-1: not running at top speed; connect to a high speed hub [ 1340.026060][ T5840] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1340.071532][ T5840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1340.081535][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.102513][ T5840] usb 5-1: Product: syz [ 1340.114477][ T5840] usb 5-1: Manufacturer: syz [ 1340.120231][ T5840] usb 5-1: SerialNumber: syz [ 1340.144267][ T5840] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1340.297849][T18569] input: syz1 as /devices/virtual/input/input113 [ 1340.417181][T18568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1340.801596][T13567] usb 6-1: USB disconnect, device number 79 [ 1340.835502][T13567] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1341.100424][T14490] usb 4-1: USB disconnect, device number 74 [ 1341.265641][T18584] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1341.627538][ T5840] usb 5-1: USB disconnect, device number 66 [ 1341.713145][T18594] lo: left promiscuous mode [ 1342.148048][T18604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.228554][T18604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.331211][T18604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.366357][T18608] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3352'. [ 1342.422125][T18608] netlink: 4504 bytes leftover after parsing attributes in process `syz.5.3352'. [ 1342.730042][T18610] netlink: 'syz.5.3353': attribute type 10 has an invalid length. [ 1342.738127][T18610] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3353'. [ 1342.749759][T18610] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.763861][T18610] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.801553][T18610] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.815767][T18610] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.988788][T18610] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1343.017066][T18610] team0: Failed to send options change via netlink (err -105) [ 1343.025285][T18610] team0: Port device geneve0 added [ 1343.663361][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3357'. [ 1347.462147][ T30] audit: type=1326 audit(1744718670.893:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1347.558453][ T30] audit: type=1326 audit(1744718670.903:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1347.585123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.589682][ T30] audit: type=1326 audit(1744718670.943:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1347.597563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.631670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.644259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.656708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.669135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.681530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.693942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.706347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1347.718748][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.046260][T18686] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3371'. [ 1348.120682][ T30] audit: type=1326 audit(1744718670.983:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1348.191068][ T30] audit: type=1326 audit(1744718670.983:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1348.214577][ T30] audit: type=1326 audit(1744718670.983:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1348.237617][ T30] audit: type=1326 audit(1744718670.983:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1348.260312][ T30] audit: type=1326 audit(1744718670.983:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1348.323001][ T30] audit: type=1326 audit(1744718670.983:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1348.430389][ T30] audit: type=1326 audit(1744718670.983:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18675 comm="syz.0.3380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7fc00000 [ 1350.129626][T18711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1351.730418][ T5840] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1351.925391][ T5840] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1351.955396][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.978364][ T5840] usb 6-1: config 0 descriptor?? [ 1352.004635][ T5840] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1353.836704][ T5840] gspca_stv06xx: HDCS-1020 sensor detected [ 1353.876216][T18758] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1354.156406][ T5840] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 1354.201795][ T5840] usb 6-1: USB disconnect, device number 80 [ 1355.202616][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1355.202635][ T30] audit: type=1800 audit(1744718678.603:1460): pid=18764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3394" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1355.674554][ T5904] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1355.844780][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 1355.868604][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1355.937885][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1356.061392][ T5904] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1356.087530][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.117483][ T5904] usb 3-1: Product: syz [ 1356.121842][ T5904] usb 3-1: Manufacturer: syz [ 1356.158321][ T5904] usb 3-1: SerialNumber: syz [ 1356.186200][ T5904] usb 3-1: config 0 descriptor?? [ 1356.201926][ T5904] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1356.212798][ T5904] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1356.833663][ T5904] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1356.848917][ T5904] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1357.348896][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3403'. [ 1357.364263][T18807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.432292][T18807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.901657][ T5904] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1357.911598][ T5904] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1357.921060][ T5904] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1357.953178][T18817] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3407'. [ 1358.032119][ T5904] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1358.154901][ T5904] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1358.166641][ T5904] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1358.188474][ T5904] usb 3-1: USB disconnect, device number 67 [ 1358.914279][T18831] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1358.936687][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3413'. [ 1359.745826][ T30] audit: type=1800 audit(1744718683.173:1461): pid=18825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3410" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1359.928112][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3414'. [ 1360.781745][T18851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3418'. [ 1360.863368][T18845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.130739][T18845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.315178][T18845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.675682][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.682130][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.952759][T18863] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1362.014737][T18860] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1362.270360][T18870] syz_tun: entered allmulticast mode [ 1362.299275][T18869] syz_tun: left allmulticast mode [ 1364.001528][T18888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1365.707949][T18899] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3430'. [ 1367.477923][T18931] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3439'. [ 1367.814514][T18937] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3443'. [ 1368.293509][T18941] netlink: 'syz.3.3445': attribute type 7 has an invalid length. [ 1368.354111][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 1368.597744][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'. [ 1368.722401][T18953] input: syz0 as /devices/virtual/input/input114 [ 1370.175117][ T5904] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1370.551350][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1370.563082][ T5904] usb 4-1: not running at top speed; connect to a high speed hub [ 1370.574330][ T5904] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1370.605725][ T5904] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1370.624745][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.714258][ T5904] usb 4-1: Product: syz [ 1370.739813][ T5904] usb 4-1: Manufacturer: syz [ 1370.745763][ T5904] usb 4-1: SerialNumber: syz [ 1370.854152][ T5904] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1371.064830][ T5896] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1371.224837][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 1371.484589][ T5904] usb 4-1: USB disconnect, device number 75 [ 1371.507117][T18976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1371.985979][T18982] net_ratelimit: 200 callbacks suppressed [ 1371.986004][T18982] netlink: zone id is out of range [ 1372.029116][T18982] netlink: zone id is out of range [ 1372.042331][T18982] netlink: zone id is out of range [ 1372.068655][T18982] netlink: zone id is out of range [ 1372.079548][T18982] netlink: zone id is out of range [ 1372.093764][T18982] netlink: zone id is out of range [ 1372.107740][T18982] netlink: zone id is out of range [ 1372.118079][T18982] netlink: zone id is out of range [ 1372.136956][T18982] netlink: zone id is out of range [ 1372.144163][T18982] netlink: zone id is out of range [ 1374.464532][ T5896] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1374.526147][ T5896] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1374.568640][ T5896] usb 6-1: can't read configurations, error -71 [ 1375.224613][T14490] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1375.401466][T14490] usb 5-1: config index 0 descriptor too short (expected 47903, got 77) [ 1375.410042][T14490] usb 5-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 1375.453855][T14490] usb 5-1: config 9 has an invalid descriptor of length 242, skipping remainder of the config [ 1375.486300][T14490] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 1375.534295][T14490] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1375.550344][T14490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.574929][T14490] usb 5-1: Product: syz [ 1375.652181][T14490] usb 5-1: Manufacturer: syz [ 1375.724453][T14490] usb 5-1: SerialNumber: syz [ 1376.741209][ T5896] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1376.934223][ T5896] usb 4-1: config 0 has no interfaces? [ 1377.016460][ T5896] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1377.039868][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.061067][ T5896] usb 4-1: Product: syz [ 1377.066179][ T5896] usb 4-1: Manufacturer: syz [ 1377.071340][ T5896] usb 4-1: SerialNumber: syz [ 1377.148619][ T5896] usb 4-1: config 0 descriptor?? [ 1377.366821][ T5896] usb 4-1: USB disconnect, device number 76 [ 1379.212179][T14490] usb 5-1: USB disconnect, device number 67 [ 1379.245331][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1379.406341][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1379.417648][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.453282][ T9] usb 1-1: config 0 descriptor?? [ 1380.080659][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1380.118169][ T9] [drm] Initialized udl on minor 2 [ 1380.347447][T19053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1380.675619][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1380.766454][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1380.778124][ T5904] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1380.787060][ T5904] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1380.802588][ T9] usb 1-1: USB disconnect, device number 49 [ 1381.061947][ T30] audit: type=1326 audit(1744718704.493:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1381.105543][ T30] audit: type=1326 audit(1744718704.523:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1381.145792][ T5904] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1381.204702][ T30] audit: type=1326 audit(1744718704.523:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1381.253387][ T30] audit: type=1326 audit(1744718704.523:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1381.364950][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 1381.371960][ T30] audit: type=1326 audit(1744718704.523:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1381.398909][ T5904] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1381.434716][ T5904] usb 5-1: config 0 has no interface number 0 [ 1381.440897][ T5904] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1381.445555][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1381.473861][ T5904] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1381.478909][ T30] audit: type=1326 audit(1744718704.523:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cd598 code=0x7ffc0000 [ 1381.499853][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.535331][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1381.548495][ T5904] usb 5-1: Product: syz [ 1381.552867][ T5904] usb 5-1: Manufacturer: syz [ 1381.560372][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1381.569769][ T5904] usb 5-1: SerialNumber: syz [ 1381.589558][ T5904] usb 5-1: config 0 descriptor?? [ 1381.595904][ T30] audit: type=1326 audit(1744718704.523:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cd598 code=0x7ffc0000 [ 1381.649647][ T5904] appletouch 5-1:0.85: Could not find int-in endpoint [ 1381.674167][ T5904] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1381.700341][ T5904] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 1381.708064][ T30] audit: type=1326 audit(1744718704.523:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cd598 code=0x7ffc0000 [ 1381.708118][ T30] audit: type=1326 audit(1744718704.523:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cd598 code=0x7ffc0000 [ 1381.708167][ T30] audit: type=1326 audit(1744718704.523:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cd598 code=0x7ffc0000 [ 1381.866701][ T5904] usb 5-1: USB disconnect, device number 68 [ 1381.941103][T19080] tipc: Started in network mode [ 1381.946659][T19080] tipc: Node identity 6, cluster identity 4711 [ 1381.954907][T19080] tipc: Node number set to 6 [ 1382.519953][T19087] netlink: 'syz.4.3487': attribute type 4 has an invalid length. [ 1382.596806][T19087] netlink: 'syz.4.3487': attribute type 4 has an invalid length. [ 1383.244553][ T5840] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1383.449839][ T5840] usb 6-1: config 0 has no interfaces? [ 1383.523298][ T5840] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1383.548633][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.578496][ T5840] usb 6-1: Product: syz [ 1383.582754][ T5840] usb 6-1: Manufacturer: syz [ 1383.624635][ T5896] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1383.636323][ T5840] usb 6-1: SerialNumber: syz [ 1383.682674][ T5840] usb 6-1: config 0 descriptor?? [ 1383.796942][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1383.848053][ T5896] usb 4-1: not running at top speed; connect to a high speed hub [ 1383.895207][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1383.944725][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1383.976780][ T5904] usb 6-1: USB disconnect, device number 83 [ 1384.004552][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.033077][ T5896] usb 4-1: Product: syz [ 1384.037434][ T5896] usb 4-1: Manufacturer: syz [ 1384.042087][ T5896] usb 4-1: SerialNumber: syz [ 1384.119851][ T5896] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1384.437486][T19107] input: syz1 as /devices/virtual/input/input115 [ 1385.917032][ T5896] usb 4-1: USB disconnect, device number 77 [ 1386.271988][T19132] bridge0: entered promiscuous mode [ 1386.313220][T19132] vlan3: entered promiscuous mode [ 1386.722528][T19142] CIFS: VFS: Malformed UNC in devname [ 1387.059400][T13567] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1387.234634][T13567] usb 6-1: Using ep0 maxpacket: 16 [ 1387.280439][T13567] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1387.311917][T13567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.321620][T13567] usb 6-1: Product: syz [ 1387.330788][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 1387.344687][T13567] usb 6-1: Manufacturer: syz [ 1387.388398][T13567] usb 6-1: SerialNumber: syz [ 1387.414760][ T5896] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1387.430134][T13567] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1387.437371][T13567] r8152-cfgselector 6-1: config 0 descriptor?? [ 1387.589201][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.696652][ T5896] usb 4-1: config 0 has no interfaces? [ 1387.704017][T13567] r8152-cfgselector 6-1: Needed 1 retries to read version [ 1387.714148][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1387.753463][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.939487][ T5896] usb 4-1: config 0 descriptor?? [ 1387.992468][T14490] r8152-cfgselector 6-1: USB disconnect, device number 84 [ 1388.062168][T19161] bridge0: entered promiscuous mode [ 1388.078633][T19161] vlan3: entered promiscuous mode [ 1388.214561][ T5840] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1388.392561][ T5840] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1388.421219][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.598728][ T5840] usb 3-1: config 0 descriptor?? [ 1388.633245][ T5840] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1388.673685][ T5840] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1388.864754][ T5896] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1389.300220][ T5896] usb 1-1: config 0 has no interfaces? [ 1389.382775][ T5896] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1389.392274][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.400499][ T5896] usb 1-1: Product: syz [ 1389.415115][ T5896] usb 1-1: Manufacturer: syz [ 1389.422438][ T5896] usb 1-1: SerialNumber: syz [ 1389.456513][ T5896] usb 1-1: config 0 descriptor?? [ 1389.777548][ T5840] usb 3-1: USB disconnect, device number 68 [ 1389.838639][T14490] usb 1-1: USB disconnect, device number 50 [ 1390.220256][ T5896] usb 4-1: USB disconnect, device number 78 [ 1390.658861][T19189] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1391.316082][T19186] kvm: kvm [19184]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 1392.050186][T19200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1393.324500][ T47] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1393.516668][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1393.528595][ T47] usb 4-1: not running at top speed; connect to a high speed hub [ 1393.540810][ T47] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1393.590973][ T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.601757][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.622885][ T47] usb 4-1: Product: syz [ 1393.689968][ T47] usb 4-1: Manufacturer: syz [ 1393.708191][ T47] usb 4-1: SerialNumber: syz [ 1393.746536][ T47] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1393.781855][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 1394.795428][T19246] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3533'. [ 1395.547372][T19255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1396.046925][ T47] usb 4-1: USB disconnect, device number 79 [ 1396.151320][T19261] CIFS: VFS: Malformed UNC in devname [ 1396.975426][ T47] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1397.125158][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 1397.175815][ T47] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1397.187894][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.196878][ T47] usb 4-1: Product: syz [ 1397.201301][ T47] usb 4-1: Manufacturer: syz [ 1397.224486][ T47] usb 4-1: SerialNumber: syz [ 1397.253106][ T47] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1397.263840][ T47] r8152-cfgselector 4-1: config 0 descriptor?? [ 1397.384030][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3542'. [ 1397.419470][T19268] macvtap1: entered promiscuous mode [ 1397.428549][T19268] syz_tun: entered promiscuous mode [ 1397.471089][T19268] macvtap1: entered allmulticast mode [ 1397.487911][ T47] r8152-cfgselector 4-1: Needed 1 retries to read version [ 1397.504592][T19268] syz_tun: entered allmulticast mode [ 1397.595627][T19269] syz_tun: left allmulticast mode [ 1397.634558][T19269] syz_tun: left promiscuous mode [ 1397.718354][ T5892] r8152-cfgselector 4-1: USB disconnect, device number 80 [ 1397.966139][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'. [ 1398.784842][ T47] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1399.168491][ T47] usb 5-1: config 0 has no interfaces? [ 1399.195271][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1399.259058][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.310713][ T47] usb 5-1: Product: syz [ 1399.341201][ T47] usb 5-1: Manufacturer: syz [ 1399.370365][ T47] usb 5-1: SerialNumber: syz [ 1399.383347][ T47] usb 5-1: config 0 descriptor?? [ 1400.174670][ T9] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1400.457357][T19302] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3552'. [ 1400.870626][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1400.890814][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 1400.952724][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1401.079542][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1401.100468][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.109596][ T9] usb 1-1: Product: syz [ 1401.124803][ T9] usb 1-1: Manufacturer: syz [ 1401.153922][ T9] usb 1-1: SerialNumber: syz [ 1401.217443][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1401.908045][ T9] usb 5-1: USB disconnect, device number 69 [ 1403.404476][T13567] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1403.650600][T13567] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.712533][T13567] usb 5-1: config 0 has no interfaces? [ 1403.738125][T13567] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1403.781671][ T5896] usb 1-1: USB disconnect, device number 51 [ 1403.794488][T13567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.836452][T13567] usb 5-1: config 0 descriptor?? [ 1406.104033][ T5896] usb 5-1: USB disconnect, device number 70 [ 1406.869732][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3569'. [ 1407.062879][ T30] kauditd_printk_skb: 1375 callbacks suppressed [ 1407.062901][ T30] audit: type=1326 audit(1744718730.493:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1407.256389][ T30] audit: type=1326 audit(1744718730.493:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19364 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1407.284136][T19373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3571'. [ 1407.293820][T19373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3571'. [ 1408.001932][T19373] geneve1: entered promiscuous mode [ 1408.015459][T19373] ip6gretap0: entered promiscuous mode [ 1408.068691][T19373] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1408.390212][T19373] Cannot create hsr debugfs directory [ 1408.453447][T19373] hsr1: Slave A (geneve1) is not up; please bring it up to get a fully working HSR network [ 1408.599650][T19373] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1409.135311][T19390] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1409.142338][T19390] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1409.155707][T19390] vhci_hcd vhci_hcd.0: Device attached [ 1409.653321][T19391] vhci_hcd: connection closed [ 1409.653700][ T36] vhci_hcd: stop threads [ 1409.678119][ T36] vhci_hcd: release socket [ 1409.703946][ T5892] usb 42-1: SetAddress Request (2) to port 0 [ 1409.719400][ T5892] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1409.751360][ T36] vhci_hcd: disconnect device [ 1410.114752][ T47] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1410.341252][ T47] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1410.352333][ T47] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1410.419933][ T47] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1410.472109][ T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1410.483949][ T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1410.499259][ T47] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1410.509032][ T47] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1410.521710][ T47] usb 6-1: Product: syz [ 1410.528207][ T47] usb 6-1: Manufacturer: syz [ 1410.547180][ T47] cdc_wdm 6-1:1.0: skipping garbage [ 1410.558025][ T47] cdc_wdm 6-1:1.0: skipping garbage [ 1410.573341][ T47] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1410.587421][ T47] cdc_wdm 6-1:1.0: Unknown control protocol [ 1410.689801][T19406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3579'. [ 1410.856914][T19409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.233606][T19409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.682566][ T5896] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1411.944499][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 1413.039757][T12053] usb 6-1: USB disconnect, device number 85 [ 1414.543562][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1414.556468][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1414.596427][ T5896] usb 4-1: can't read configurations, error -71 [ 1414.734902][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1414.849721][ T5892] usb 42-1: device descriptor read/8, error -110 [ 1414.964650][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1415.042286][ T9] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1415.104415][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1415.126148][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.40 [ 1415.135682][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.143942][ T9] usb 5-1: Product: ю [ 1415.247536][ T9] usb 5-1: Manufacturer: 莐絙Ჰꢖ哛⽊뉒蘠ጃ嬻䄫么䌪鳠鋯䵃䑐ݾ뽩䞸셹⿕틲羫鲱䋹퓿໋⅋⍶瘆盋㑶ꇓ姞뮘꭛鲠갦醽ຢ䑗壝ꠡ⡋뷀卷勋驰珌ꔹ鲙ꭠౠ솴谓幾륙姱Ἲ⍂龍㎌氭귣똦★៞肞뀀ゴ蚹؍ᷗḯﮜ㗽萴눁ڟ槎塉ವ깕ᯖꉀ熟曕판禖꺼┞⼟됲 [ 1415.315785][ T5892] usb usb42-port1: attempt power cycle [ 1415.364732][ T9] usb 5-1: SerialNumber: С [ 1415.601074][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 1415.610060][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1415.663703][ T9] usb 5-1: USB disconnect, device number 71 [ 1415.888268][ T5892] usb usb42-port1: unable to enumerate USB device [ 1416.980951][ T5892] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1417.152383][T19481] netlink: 'syz.5.3594': attribute type 10 has an invalid length. [ 1417.169128][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1417.182902][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 1417.200234][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1417.234846][T13567] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1417.295127][ T5892] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1417.305969][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.314018][ T5892] usb 1-1: Product: syz [ 1417.321328][ T5892] usb 1-1: Manufacturer: syz [ 1417.363683][T19481] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1417.383030][ T5892] usb 1-1: SerialNumber: syz [ 1417.431216][ T5892] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1417.724000][T13567] usb 4-1: config 0 has no interfaces? [ 1417.766176][T13567] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1417.807513][T13567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.867059][T13567] usb 4-1: Product: syz [ 1417.975160][T13567] usb 4-1: Manufacturer: syz [ 1417.985342][ C1] net_ratelimit: 4 callbacks suppressed [ 1417.985359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.003480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.004416][T13567] usb 4-1: SerialNumber: syz [ 1418.016199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.032920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.045605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.058282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.070929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.083590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.096164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.103824][T13567] usb 4-1: config 0 descriptor?? [ 1418.108806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1418.805622][ T9] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1419.048716][ T9] usb 6-1: config 0 has no interfaces? [ 1419.069278][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1419.079285][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.096777][ T9] usb 6-1: Product: syz [ 1419.309303][ T9] usb 6-1: Manufacturer: syz [ 1419.512105][ T9] usb 6-1: SerialNumber: syz [ 1419.527832][ T9] usb 6-1: config 0 descriptor?? [ 1420.355321][ T9] usb 1-1: USB disconnect, device number 52 [ 1420.458556][ T5896] usb 4-1: USB disconnect, device number 83 [ 1420.464628][ T5892] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1420.554069][ T30] audit: type=1804 audit(1744718743.983:2849): pid=19498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3599" name="/newroot/751/file1" dev="fuse" ino=1 res=1 errno=0 [ 1420.617388][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 1420.956021][T19504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1421.000290][T19504] netlink: 'syz.0.3601': attribute type 7 has an invalid length. [ 1421.059927][T19504] netlink: 'syz.0.3601': attribute type 8 has an invalid length. [ 1421.097575][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1421.302435][T12053] usb 6-1: USB disconnect, device number 86 [ 1421.386498][T19513] pimreg: entered allmulticast mode [ 1421.398344][T19513] pimreg: left allmulticast mode [ 1421.647457][T19520] netlink: 'syz.5.3607': attribute type 1 has an invalid length. [ 1421.694248][T19520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1421.801386][T19520] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1421.810612][T19520] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1421.822742][T19520] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 1423.110056][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.116568][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.251305][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1423.334769][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1423.371555][ T5892] usb 3-1: can't read configurations, error -71 [ 1423.635407][T19542] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1424.273079][T19542] bond0 (unregistering): (slave team0): Releasing backup interface [ 1424.356412][T19542] team0: left promiscuous mode [ 1424.371323][T19542] bond0 (unregistering): Released all slaves [ 1424.594893][ T5896] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1424.805292][T19561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3615'. [ 1424.951952][ T5896] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1425.024522][ T5896] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1425.075664][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1425.145180][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.386276][T19557] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1425.668891][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1427.517074][ T5896] usb 4-1: USB disconnect, device number 84 [ 1429.911925][T19599] vlan3: entered allmulticast mode [ 1430.137440][T19599] ip6gretap0: entered allmulticast mode [ 1430.538101][T19599] bond0: (slave vlan3): Error -34 calling dev_set_mtu [ 1431.305078][T19616] fuse: Bad value for 'fd' [ 1431.464449][T12053] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1431.664971][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1431.695616][T12053] usb 5-1: config 1 has no interfaces? [ 1431.710249][T12053] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1431.719967][T12053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.728409][T12053] usb 5-1: Product: syz [ 1431.732767][T12053] usb 5-1: Manufacturer: syz [ 1431.740244][T12053] usb 5-1: SerialNumber: syz [ 1431.961006][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.012420][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1432.103989][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.253900][ T9] usb 6-1: config 0 descriptor?? [ 1432.296566][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1432.495950][T19630] syzkaller0: entered allmulticast mode [ 1432.690636][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1432.794745][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1432.817415][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1432.944735][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1432.987342][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1433.005498][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1433.039066][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1433.091505][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1433.121470][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1433.142113][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1433.375025][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1433.382518][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 1433.494746][T19640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.678803][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1433.696941][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1433.797017][ T9] pwc: Registered as video103. [ 1433.815166][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input119 [ 1433.881169][ T9] usb 6-1: USB disconnect, device number 87 [ 1435.685604][T12053] usb 5-1: USB disconnect, device number 72 [ 1435.702859][T19660] syz.0.3645(19660): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1437.744603][ T5896] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1437.927503][ T5896] usb 6-1: config 0 has no interfaces? [ 1437.940824][ T5896] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1437.966795][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.991105][ T5896] usb 6-1: config 0 descriptor?? [ 1438.008165][ T30] audit: type=1326 audit(1744718761.443:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.030296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.192970][ T30] audit: type=1326 audit(1744718761.493:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.215162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.240567][ T5896] usb 6-1: USB disconnect, device number 88 [ 1438.372879][ T30] audit: type=1326 audit(1744718761.803:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.395064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.504544][ T30] audit: type=1326 audit(1744718761.803:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.592122][ T30] audit: type=1326 audit(1744718761.833:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.614304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.650146][ T30] audit: type=1326 audit(1744718761.853:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.714546][ T30] audit: type=1326 audit(1744718761.853:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.792418][ T30] audit: type=1326 audit(1744718761.853:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.814593][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.888816][ T30] audit: type=1326 audit(1744718761.853:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.959627][ T30] audit: type=1326 audit(1744718761.853:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19688 comm="syz.3.3653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 1438.981820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1438.993193][T19713] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1441.781122][T19746] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3670'. [ 1443.004491][ T5896] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1443.174745][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 1443.347451][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1443.356231][ T5896] usb 3-1: no configurations [ 1443.361373][ T5896] usb 3-1: can't read configurations, error -22 [ 1446.204863][ T9] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1447.152976][ T9] usb 6-1: config 0 has no interfaces? [ 1447.188182][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1447.232345][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.261886][ T9] usb 6-1: Product: syz [ 1447.280939][ T9] usb 6-1: Manufacturer: syz [ 1447.297946][ T9] usb 6-1: SerialNumber: syz [ 1447.367043][ T9] usb 6-1: config 0 descriptor?? [ 1448.034469][ T5896] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1448.229464][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1448.238258][ T5896] usb 1-1: not running at top speed; connect to a high speed hub [ 1448.247809][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.267482][ T5896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1448.276799][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.287994][ T5896] usb 1-1: Product: syz [ 1448.292201][ T5896] usb 1-1: Manufacturer: syz [ 1448.321656][ T5896] usb 1-1: SerialNumber: syz [ 1448.906050][ T5896] cdc_ether 1-1:1.0: skipping garbage [ 1448.911657][ T5896] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1449.086394][T12053] usb 6-1: USB disconnect, device number 89 [ 1451.306108][T19826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3687'. [ 1451.334125][T19824] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1451.356858][T19824] kvm: pic: non byte read [ 1451.388744][T19824] kvm: pic: level sensitive irq not supported [ 1451.388832][T19824] kvm: pic: non byte read [ 1451.423856][T14490] usb 1-1: USB disconnect, device number 53 [ 1451.844061][T19833] kvm: kvm [19832]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 1453.193516][T19843] batadv0: entered promiscuous mode [ 1453.210748][T19843] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1453.325173][T19843] batadv0: left promiscuous mode [ 1454.354541][T14490] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1454.604912][T14490] usb 6-1: Using ep0 maxpacket: 16 [ 1454.684470][ T5892] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1454.844901][ T5904] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1454.868094][ T5892] usb 4-1: config 0 has no interfaces? [ 1454.878450][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1454.887722][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.903151][ T5892] usb 4-1: Product: syz [ 1454.907605][ T5892] usb 4-1: Manufacturer: syz [ 1454.912837][ T5892] usb 4-1: SerialNumber: syz [ 1454.929830][ T5892] usb 4-1: config 0 descriptor?? [ 1455.048504][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.155814][ T5904] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1455.203299][T19855] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3695'. [ 1455.213172][T19855] net_ratelimit: 199 callbacks suppressed [ 1455.213225][T19855] netlink: zone id is out of range [ 1455.234487][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.244939][T19855] netlink: zone id is out of range [ 1455.278622][ T5904] usb 1-1: config 0 descriptor?? [ 1455.426576][T19855] netlink: get zone limit has 8 unknown bytes [ 1455.438465][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 1455.654105][ T5904] pwc: send_video_command error -71 [ 1455.659677][ T5904] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1455.668699][ T5904] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1455.682902][ T5904] usb 1-1: USB disconnect, device number 54 [ 1456.124445][ T5904] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1456.287558][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.309947][ T5904] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1456.321819][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.355960][ T5904] usb 1-1: config 0 descriptor?? [ 1456.380941][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 1456.527549][T14490] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1456.537359][T14490] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1456.557061][T14490] usb 6-1: can't read configurations, error -71 [ 1456.783480][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1456.792412][ T5904] pwc: recv_control_msg error -32 req 02 val 2700 [ 1456.800055][ T5904] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1456.810123][ T5904] pwc: recv_control_msg error -32 req 04 val 1000 [ 1456.820569][ T5904] pwc: recv_control_msg error -32 req 04 val 1300 [ 1456.830365][ T5904] pwc: recv_control_msg error -32 req 04 val 1400 [ 1456.838058][ T5904] pwc: recv_control_msg error -32 req 02 val 2000 [ 1457.697631][ T5904] pwc: recv_control_msg error -32 req 02 val 2100 [ 1457.735178][ T5904] pwc: recv_control_msg error -32 req 04 val 1500 [ 1457.775996][ T5904] pwc: recv_control_msg error -32 req 02 val 2500 [ 1457.845974][ T5904] pwc: recv_control_msg error -32 req 02 val 2400 [ 1457.866839][ T5904] pwc: recv_control_msg error -32 req 02 val 2600 [ 1457.910463][T19882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3702'. [ 1457.946926][T14490] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1458.009076][T19882] batadv0: entered promiscuous mode [ 1458.026736][T19882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1458.056573][T19882] batadv0: left promiscuous mode [ 1458.108442][ T5904] pwc: recv_control_msg error -71 req 02 val 2800 [ 1458.117179][ T5904] pwc: recv_control_msg error -71 req 04 val 1100 [ 1458.117198][T14490] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1458.139934][T14490] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1458.160630][T14490] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.174647][T14490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.191795][T19886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3703'. [ 1458.203876][T19876] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1458.218553][T14490] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.345036][ T5904] pwc: recv_control_msg error -71 req 04 val 1200 [ 1458.358819][ T5904] pwc: Registered as video103. [ 1458.384293][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input120 [ 1458.416635][ T5904] usb 1-1: USB disconnect, device number 55 [ 1458.716356][ T5896] usb 4-1: USB disconnect, device number 85 [ 1459.299042][ T5904] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1459.464535][T13567] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1459.472459][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 1459.485187][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1459.497085][ T5904] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1459.564498][ T5896] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1459.635207][T13567] usb 4-1: Using ep0 maxpacket: 16 [ 1459.643282][T13567] usb 4-1: config 0 has no interfaces? [ 1459.651103][ T5904] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1459.660795][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.669502][ T5904] usb 3-1: Product: syz [ 1459.678916][T13567] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1459.688476][ T5904] usb 3-1: Manufacturer: syz [ 1459.699336][ T5904] usb 3-1: SerialNumber: syz [ 1459.706776][T13567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.715285][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 1459.725804][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1459.751159][T13567] usb 4-1: Product: syz [ 1459.765295][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1459.777257][T13567] usb 4-1: Manufacturer: syz [ 1459.797110][T13567] usb 4-1: SerialNumber: syz [ 1459.820846][T13567] usb 4-1: config 0 descriptor?? [ 1459.827718][ T5896] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1459.847520][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.886897][ T5896] usb 1-1: Product: syz [ 1459.897577][ T5896] usb 1-1: Manufacturer: syz [ 1459.912832][ T5896] usb 1-1: SerialNumber: syz [ 1459.931780][ T5896] usb 1-1: config 0 descriptor?? [ 1459.951208][ T5896] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1459.981931][ T5896] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1460.048876][T13567] usb 6-1: USB disconnect, device number 91 [ 1460.219360][T19899] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3707'. [ 1460.766889][T12053] usb 4-1: USB disconnect, device number 86 [ 1461.136782][ T5896] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1461.170594][ T5896] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1461.845437][ T5896] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1461.856067][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1461.864535][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1461.872616][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1461.983942][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1462.022457][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1462.213829][ T5152] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1462.487263][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1462.504264][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1462.525121][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1462.547942][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1462.565334][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1462.594795][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1462.612028][T19913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1462.650159][ T5896] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1462.712054][ T5896] usb 1-1: USB disconnect, device number 56 [ 1462.828791][ T5904] usbhid 3-1:1.0: can't add hid device: -71 [ 1462.864570][T12053] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1462.887018][ T5904] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1462.950082][ T5904] usb 3-1: USB disconnect, device number 73 [ 1463.014500][T12053] usb 5-1: Using ep0 maxpacket: 8 [ 1463.040075][T12053] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1463.072633][T12053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.246608][T12053] usb 5-1: Product: syz [ 1463.250850][T12053] usb 5-1: Manufacturer: syz [ 1463.257387][T12053] usb 5-1: SerialNumber: syz [ 1463.270723][T12053] usb 5-1: config 0 descriptor?? [ 1463.279680][T12053] gspca_main: se401-2.14.0 probing 047d:5003 [ 1463.516653][T19911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.538440][T14490] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1464.058290][T19911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.351810][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1464.414472][T14490] usb 3-1: Using ep0 maxpacket: 16 [ 1464.764617][ T5892] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1464.924440][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 1464.933317][ T5892] usb 1-1: config 0 has no interfaces? [ 1464.941089][ T5892] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1464.951763][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.980453][ T5892] usb 1-1: config 0 descriptor?? [ 1465.118545][T12053] gspca_se401: read req failed req 0x06 error -19 [ 1465.138657][T12053] usb 5-1: USB disconnect, device number 73 [ 1465.251940][T19927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.264998][T19927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.324912][ T5896] usb 1-1: USB disconnect, device number 57 [ 1466.480515][T19941] random: crng reseeded on system resumption [ 1467.028913][T19953] input: syz0 as /devices/virtual/input/input121 [ 1467.685177][T14490] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1467.695882][T14490] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1467.703539][T14490] usb 3-1: can't read configurations, error -71 [ 1467.717441][T19959] program syz.4.3723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1467.990033][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1468.017773][T19966] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1468.047587][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1468.821715][ T5892] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1469.488353][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1469.514970][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1469.548094][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1469.559442][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1469.629113][ T5892] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1469.671038][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.715720][ T5892] usb 6-1: config 0 descriptor?? [ 1469.738505][T19974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1470.182586][ T5892] plantronics 0003:047F:FFFF.0066: reserved main item tag 0xd [ 1470.214448][ T5892] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 1470.260963][ T5892] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 1470.306666][ T5892] plantronics 0003:047F:FFFF.0066: No inputs registered, leaving [ 1470.374929][ T5892] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1471.999248][T19996] ptrace attach of "./syz-executor exec"[5857] was attempted by "./syz-executor exec"[19996] [ 1472.774204][T14271] usb 6-1: USB disconnect, device number 92 [ 1473.085333][ T5904] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1473.264723][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1473.290162][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1473.353471][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1473.410475][ T5904] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1473.668716][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.696437][ T5904] usb 3-1: config 0 descriptor?? [ 1473.725639][ T5904] hub 3-1:0.0: USB hub found [ 1473.894568][ T47] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1474.085540][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.096070][ T47] usb 4-1: config 0 has no interfaces? [ 1474.101752][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1474.111512][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.124502][ T5904] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1474.127370][ T47] usb 4-1: config 0 descriptor?? [ 1474.500356][ T5904] hid-generic 0003:046D:C31C.0067: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1475.142167][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1475.153471][T20021] netlink: 177 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1475.356643][ T47] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1475.882392][ T47] usb 6-1: config 0 has no interfaces? [ 1475.896954][ T47] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1475.910210][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.921469][ T47] usb 6-1: Product: syz [ 1475.932507][ T47] usb 6-1: Manufacturer: syz [ 1475.940989][ T47] usb 6-1: SerialNumber: syz [ 1476.214711][ T5896] usb 3-1: USB disconnect, device number 76 [ 1476.215126][ T47] usb 6-1: config 0 descriptor?? [ 1476.923343][T20023] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3740'. [ 1477.041670][ T47] usb 4-1: USB disconnect, device number 87 [ 1478.350499][T14271] usb 6-1: USB disconnect, device number 93 [ 1479.008534][ T47] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1479.204590][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 1479.628685][T20090] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.874549][T14271] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1482.134441][T14271] usb 1-1: Using ep0 maxpacket: 16 [ 1482.818395][T14271] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1483.141529][T14271] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1483.215976][T14271] usb 1-1: string descriptor 0 read error: -22 [ 1483.222312][T14271] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1483.231464][T14271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.469464][ T47] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1483.482378][ T47] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1483.526638][ T47] usb 5-1: can't read configurations, error -71 [ 1483.647757][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3755'. [ 1484.550222][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.561811][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.784695][ T5904] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1486.194432][ T47] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1486.613790][ T5904] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1486.654215][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.689950][ T5904] usb 4-1: Product: syz [ 1486.744480][ T5896] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1486.877160][ T5904] usb 4-1: Manufacturer: syz [ 1486.881867][ T5904] usb 4-1: SerialNumber: syz [ 1486.923531][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1486.939045][ T5904] usb 4-1: config 0 descriptor?? [ 1487.421545][ T5896] usb 3-1: config 0 has no interfaces? [ 1487.433105][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1487.452737][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1487.462291][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.019929][ T5904] usb 4-1: can't set config #0, error -71 [ 1488.043323][ T5904] usb 4-1: USB disconnect, device number 88 [ 1488.145692][ T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1488.325016][T14271] usbhid 1-1:1.0: can't add hid device: -32 [ 1488.331228][T14271] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1488.365156][ T9] usb 6-1: config 0 has no interfaces? [ 1488.373970][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1488.383391][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.392319][ T9] usb 6-1: Product: syz [ 1488.397226][ T9] usb 6-1: Manufacturer: syz [ 1488.402037][ T9] usb 6-1: SerialNumber: syz [ 1488.420904][ T9] usb 6-1: config 0 descriptor?? [ 1488.438033][T14490] usb 1-1: USB disconnect, device number 58 [ 1488.712982][T20147] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1489.958329][T14490] usb 6-1: USB disconnect, device number 94 [ 1490.112049][ T47] usb 5-1: can't set config #27, error -71 [ 1490.148832][ T47] usb 5-1: USB disconnect, device number 76 [ 1490.485818][ T5896] usb 3-1: string descriptor 0 read error: -71 [ 1490.502735][ T5896] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1490.522402][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.538281][ T5896] usb 3-1: config 0 descriptor?? [ 1490.547726][ T5896] usb 3-1: can't set config #0, error -71 [ 1490.560292][ T5896] usb 3-1: USB disconnect, device number 77 [ 1491.575779][ T47] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1492.155606][T20187] trusted_key: encrypted_key: insufficient parameters specified [ 1492.194149][ T47] usb 6-1: config 0 has no interfaces? [ 1492.217643][ T47] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1492.243660][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.300248][T20187] netlink: 'syz.0.3772': attribute type 4 has an invalid length. [ 1492.308341][ T47] usb 6-1: Product: syz [ 1492.312922][ T47] usb 6-1: Manufacturer: syz [ 1492.319614][ T47] usb 6-1: SerialNumber: syz [ 1492.331872][ T47] usb 6-1: config 0 descriptor?? [ 1493.924466][T14271] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1494.125917][T14271] usb 5-1: config 0 has no interfaces? [ 1494.204804][T14271] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1494.256015][T14271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.267281][ T47] usb 6-1: USB disconnect, device number 95 [ 1494.286727][T14271] usb 5-1: Product: syz [ 1494.291060][T14271] usb 5-1: Manufacturer: syz [ 1494.295776][T14271] usb 5-1: SerialNumber: syz [ 1494.303062][T14271] usb 5-1: config 0 descriptor?? [ 1494.864854][ T47] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1495.119623][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.144664][ T47] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1495.160112][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.180536][ T47] usb 6-1: config 0 descriptor?? [ 1495.188689][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 1495.366106][T20209] syzkaller0: entered promiscuous mode [ 1495.371921][T20209] syzkaller0: entered allmulticast mode [ 1495.397361][ T47] pwc: send_video_command error -71 [ 1495.404292][ T47] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1495.412523][ T47] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1495.430087][ T362] syzkaller0: tun_net_xmit 48 [ 1495.700092][ T47] usb 6-1: USB disconnect, device number 96 [ 1495.777050][T20216] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1496.074539][ T47] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1496.236767][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.275046][ T47] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1496.324564][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.389809][ T47] usb 6-1: config 0 descriptor?? [ 1496.438419][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 1496.550421][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1496.576252][T20225] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1496.677414][T14490] usb 5-1: USB disconnect, device number 77 [ 1496.910893][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1496.928648][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 1496.962153][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1496.983742][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 1496.995554][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 1497.008446][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 1497.016514][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 1497.031873][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 1497.061391][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 1497.220328][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 1497.282357][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 1497.346221][ T47] pwc: recv_control_msg error -32 req 02 val 2600 [ 1497.354128][ T47] pwc: recv_control_msg error -32 req 02 val 2900 [ 1497.563992][ T47] pwc: recv_control_msg error -71 req 04 val 1100 [ 1497.580406][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 1497.688496][ T47] pwc: Registered as video103. [ 1497.774023][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input122 [ 1498.091591][ T47] usb 6-1: USB disconnect, device number 97 [ 1502.267425][T14271] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1502.477690][T14271] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 1502.486293][T14271] usb 5-1: config 0 has no interface number 0 [ 1502.495674][T14271] usb 5-1: New USB device found, idVendor=28a7, idProduct=71ab, bcdDevice=df.39 [ 1502.506529][T14271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.517028][T14271] usb 5-1: Product: syz [ 1502.521225][T14271] usb 5-1: Manufacturer: syz [ 1502.572710][T14271] usb 5-1: SerialNumber: syz [ 1502.598817][T14271] usb 5-1: config 0 descriptor?? [ 1502.623840][T14271] cdc_wdm 5-1:0.246: probe with driver cdc_wdm failed with error -22 [ 1503.022311][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3793'. [ 1503.337440][T20273] [ 1503.339828][T20273] ====================================================== [ 1503.346865][T20273] WARNING: possible circular locking dependency detected [ 1503.353881][T20273] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 1503.360991][T20273] ------------------------------------------------------ [ 1503.368008][T20273] syz.5.3795/20273 is trying to acquire lock: [ 1503.374080][T20273] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x10f0/0x39c0 [ 1503.383149][T20273] [ 1503.383149][T20273] but task is already holding lock: [ 1503.390533][T20273] ffff8880297af228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 1503.400661][T20273] [ 1503.400661][T20273] which lock already depends on the new lock. [ 1503.400661][T20273] [ 1503.411078][T20273] [ 1503.411078][T20273] the existing dependency chain (in reverse order) is: [ 1503.420091][T20273] [ 1503.420091][T20273] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 1503.428699][T20273] lock_acquire+0x116/0x2f0 [ 1503.433724][T20273] __mutex_lock+0x1a5/0x10c0 [ 1503.438844][T20273] smc_switch_to_fallback+0x35/0xda0 [ 1503.444655][T20273] smc_sendmsg+0x11f/0x530 [ 1503.449592][T20273] __sock_sendmsg+0x221/0x270 [ 1503.454795][T20273] __sys_sendto+0x365/0x4c0 [ 1503.459835][T20273] __ia32_sys_sendto+0xdd/0x100 [ 1503.465227][T20273] __do_fast_syscall_32+0xb4/0x110 [ 1503.470866][T20273] do_fast_syscall_32+0x34/0x80 [ 1503.476240][T20273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.483093][T20273] [ 1503.483093][T20273] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1503.490781][T20273] lock_acquire+0x116/0x2f0 [ 1503.495808][T20273] lock_sock_nested+0x48/0x100 [ 1503.501100][T20273] gtp_encap_enable_socket+0x306/0x630 [ 1503.507173][T20273] gtp_newlink+0x605/0xf80 [ 1503.512114][T20273] rtnl_newlink_create+0x39b/0xcb0 [ 1503.517745][T20273] rtnl_newlink+0x18b0/0x1fe0 [ 1503.522947][T20273] rtnetlink_rcv_msg+0x80f/0xd70 [ 1503.528420][T20273] netlink_rcv_skb+0x208/0x480 [ 1503.533737][T20273] netlink_unicast+0x7f8/0x9a0 [ 1503.539027][T20273] netlink_sendmsg+0x8c3/0xcd0 [ 1503.544327][T20273] __sock_sendmsg+0x221/0x270 [ 1503.549552][T20273] ____sys_sendmsg+0x523/0x860 [ 1503.554873][T20273] __sys_sendmsg+0x271/0x360 [ 1503.559986][T20273] __do_fast_syscall_32+0xb4/0x110 [ 1503.565626][T20273] do_fast_syscall_32+0x34/0x80 [ 1503.570997][T20273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.577845][T20273] [ 1503.577845][T20273] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 1503.585061][T20273] validate_chain+0xa69/0x24e0 [ 1503.590376][T20273] __lock_acquire+0xad5/0xd80 [ 1503.595572][T20273] lock_acquire+0x116/0x2f0 [ 1503.600593][T20273] __mutex_lock+0x1a5/0x10c0 [ 1503.605710][T20273] do_ip_setsockopt+0x10f0/0x39c0 [ 1503.611266][T20273] ip_setsockopt+0x63/0x100 [ 1503.616292][T20273] smc_setsockopt+0x25c/0xd50 [ 1503.621509][T20273] do_sock_setsockopt+0x3b1/0x710 [ 1503.627054][T20273] __ia32_sys_setsockopt+0x1f2/0x280 [ 1503.632861][T20273] __do_fast_syscall_32+0xb4/0x110 [ 1503.638498][T20273] do_fast_syscall_32+0x34/0x80 [ 1503.643873][T20273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.650729][T20273] [ 1503.650729][T20273] other info that might help us debug this: [ 1503.650729][T20273] [ 1503.660960][T20273] Chain exists of: [ 1503.660960][T20273] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 1503.660960][T20273] [ 1503.674551][T20273] Possible unsafe locking scenario: [ 1503.674551][T20273] [ 1503.682000][T20273] CPU0 CPU1 [ 1503.687363][T20273] ---- ---- [ 1503.692751][T20273] lock(&smc->clcsock_release_lock); [ 1503.698928][T20273] lock(sk_lock-AF_INET); [ 1503.705881][T20273] lock(&smc->clcsock_release_lock); [ 1503.713802][T20273] lock(rtnl_mutex); [ 1503.717797][T20273] [ 1503.717797][T20273] *** DEADLOCK *** [ 1503.717797][T20273] [ 1503.725956][T20273] 1 lock held by syz.5.3795/20273: [ 1503.731069][T20273] #0: ffff8880297af228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 1503.742047][T20273] [ 1503.742047][T20273] stack backtrace: [ 1503.747942][T20273] CPU: 1 UID: 0 PID: 20273 Comm: syz.5.3795 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 1503.747963][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1503.747974][T20273] Call Trace: [ 1503.747980][T20273] [ 1503.747987][T20273] dump_stack_lvl+0x241/0x360 [ 1503.748014][T20273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1503.748037][T20273] ? __pfx__printk+0x10/0x10 [ 1503.748059][T20273] ? print_lock+0x171/0x1a0 [ 1503.748079][T20273] print_circular_bug+0x2e1/0x300 [ 1503.748101][T20273] check_noncircular+0x142/0x160 [ 1503.748124][T20273] validate_chain+0xa69/0x24e0 [ 1503.748146][T20273] ? finish_task_switch+0x1e5/0x870 [ 1503.748166][T20273] __lock_acquire+0xad5/0xd80 [ 1503.748185][T20273] lock_acquire+0x116/0x2f0 [ 1503.748199][T20273] ? do_ip_setsockopt+0x10f0/0x39c0 [ 1503.748222][T20273] __mutex_lock+0x1a5/0x10c0 [ 1503.748242][T20273] ? do_ip_setsockopt+0x10f0/0x39c0 [ 1503.748261][T20273] ? look_up_lock_class+0x7b/0x170 [ 1503.748280][T20273] ? register_lock_class+0x54/0x330 [ 1503.748296][T20273] ? do_ip_setsockopt+0x10f0/0x39c0 [ 1503.748314][T20273] ? __pfx___mutex_lock+0x10/0x10 [ 1503.748332][T20273] ? __lock_acquire+0xad5/0xd80 [ 1503.748352][T20273] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1503.748374][T20273] do_ip_setsockopt+0x10f0/0x39c0 [ 1503.748396][T20273] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1503.748416][T20273] ? smc_setsockopt+0x1b2/0xd50 [ 1503.748435][T20273] ? __pfx___mutex_lock+0x10/0x10 [ 1503.748459][T20273] ip_setsockopt+0x63/0x100 [ 1503.748477][T20273] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1503.748500][T20273] smc_setsockopt+0x25c/0xd50 [ 1503.748520][T20273] ? __pfx_aa_sk_perm+0x10/0x10 [ 1503.748610][T20273] ? __pfx_smc_setsockopt+0x10/0x10 [ 1503.748626][T20273] ? __lock_acquire+0xad5/0xd80 [ 1503.748642][T20273] ? aa_sock_opt_perm+0x79/0x120 [ 1503.748679][T20273] ? __pfx_smc_setsockopt+0x10/0x10 [ 1503.748702][T20273] do_sock_setsockopt+0x3b1/0x710 [ 1503.748720][T20273] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1503.748736][T20273] ? __fget_files+0x2a/0x420 [ 1503.748769][T20273] ? __fget_files+0x39d/0x420 [ 1503.748782][T20273] ? __fget_files+0x2a/0x420 [ 1503.748797][T20273] __ia32_sys_setsockopt+0x1f2/0x280 [ 1503.748816][T20273] __do_fast_syscall_32+0xb4/0x110 [ 1503.748836][T20273] ? ret_from_fork_asm+0x1a/0x30 [ 1503.748850][T20273] ? lockdep_hardirqs_on+0x9d/0x150 [ 1503.748870][T20273] do_fast_syscall_32+0x34/0x80 [ 1503.748890][T20273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.748909][T20273] RIP: 0023:0xf70ad579 [ 1503.748924][T20273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1503.748937][T20273] RSP: 002b:00000000f507c55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1503.748954][T20273] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 1503.748965][T20273] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000000 [ 1503.748975][T20273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1503.748984][T20273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1503.748993][T20273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1503.749008][T20273] [ 1504.203796][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3795'. [ 1505.781010][T14271] usb 5-1: USB disconnect, device number 78