last executing test programs: 12.294162132s ago: executing program 0 (id=2754): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) 9.092083767s ago: executing program 2 (id=2764): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d2a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face8317ea70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e151d4e9bb23b8440047b2d849f7582e803", 0xb1}, {&(0x7f0000000480)="7540d8d901cb197301018595109be3b8ac14f3059416511cb78798420e7d084d41e734b66c98e3c9aa439b165519a6c55a3c86993e31ad1e667453deeed34482f1bf0d167c1d96209b7a374155a9f136133042ae77c8f58b6baa259d7fd86fe401723eae2826cd9111d7ccba45724c3ed6ef156a7200ef9dfe0399771f6ba6e21b3566efdd19d5d0923261f97c9c6798628817a9c585c1769ffe3f5e03180d30c1a12f3426fb06215cdad006b8d1b0259864de5e393e5032185430d8e114b0b9449ee7fc45158fce125bcce91e39be6adaefe096c433c5dc24f27cba1feb", 0xde}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000900)=[{0x84, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x48, 0x112, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x24, 0x116, 0x5, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0xc, 0x3a, 0x40}, {0x20, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x54, 0x10e, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}], 0x170}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) 8.69149649s ago: executing program 0 (id=2767): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) mknod(0x0, 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="ad3ff7b90a9e16fba43fedc940f643ae3a5e50fb3bf8bea8ee0ed412e78bad073d6845433ea75c35a258390c19c167ec54c0d47e586451c19b9fd2a09e04ea2ecc8e39f2910f7e9bd8bee9a5ea4461fffbfd05d42f3e289ff88a25bbded1f9daad3393942ae1c7a72de79bbe6bb1ed121878e6abbccbe25ffb3f6918d883c85269821baa0abe904229150c542659986592b54319988c0967c6956c115dd734b83184ceb3ed21abd66c7212ed1adee4139e1bc7c897958e39f20b591ac8", @ANYRES8], 0x50) lchown(0x0, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.837433154s ago: executing program 0 (id=2771): flock(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) syz_open_dev$loop(&(0x7f00000000c0), 0xd03b, 0x410000) write$6lowpan_enable(r4, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x894b, &(0x7f0000000040)) 5.617107498s ago: executing program 2 (id=2773): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_io_uring_setup(0x49f, &(0x7f0000001000)={0x0, 0x54e9, 0x0, 0x7, 0x40024f}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x318}, 0x0, 0x24008811}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 5.255447576s ago: executing program 2 (id=2774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4.982199498s ago: executing program 2 (id=2776): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x6, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xe000202b}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r8 = dup3(r4, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000300)={0x200f}) ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f00000001c0)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) 4.787751879s ago: executing program 1 (id=2777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006) 4.748412939s ago: executing program 3 (id=2778): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x50, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x4, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 4.169374365s ago: executing program 4 (id=2779): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x6, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xe000202b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r7 = dup3(r3, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000300)={0x200f}) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f00000001c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) 3.964550313s ago: executing program 3 (id=2780): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0x726}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0x7b76, 0x4, 0xd1, 0x3, 0x4, 0x3], 0x8080000, 0x80356}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4d9b6eaf) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x4001) 3.96297525s ago: executing program 4 (id=2781): syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002600)=ANY=[], 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 3.938954074s ago: executing program 0 (id=2782): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) mknod(0x0, 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="ad3ff7b90a9e16fba43fedc940f643ae3a5e50fb3bf8bea8ee0ed412e78bad073d6845433ea75c35a258390c19c167ec54c0d47e586451c19b9fd2a09e04ea2ecc8e39f2910f7e9bd8bee9a5ea4461fffbfd05d42f3e289ff88a25bbded1f9daad3393942ae1c7a72de79bbe6bb1ed121878e6abbccbe25ffb3f6918d883c85269821baa0abe904229150c542659986592b54319988c0967c6956c115dd734b83184ceb3ed21abd66c7212ed1adee4139e1bc7c897958e39f20b591ac8", @ANYRES8], 0x50) lchown(0x0, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.657558102s ago: executing program 1 (id=2783): socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x14d, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x5, 0x8, 0x4}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 3.638886797s ago: executing program 4 (id=2784): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 3.596512948s ago: executing program 3 (id=2785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80003, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x4044010, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.341925466s ago: executing program 2 (id=2786): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) mknod(0x0, 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="ad3ff7b90a9e16fba43fedc940f643ae3a5e50fb3bf8bea8ee0ed412e78bad073d6845433ea75c35a258390c19c167ec54c0d47e586451c19b9fd2a09e04ea2ecc8e39f2910f7e9bd8bee9a5ea4461fffbfd05d42f3e289ff88a25bbded1f9daad3393942ae1c7a72de79bbe6bb1ed121878e6abbccbe25ffb3f6918d883c85269821baa0abe904229150c542659986592b54319988c0967c6956c115dd734b83184ceb3ed21abd66c7212ed1adee4139e1bc7c897958e39f20b591ac8", @ANYRES8], 0x50) lchown(0x0, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.720813463s ago: executing program 3 (id=2787): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) socket(0x10, 0x3, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @loopback}}) 2.218012999s ago: executing program 1 (id=2788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0x6}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40055}, 0x4000004) 2.212235204s ago: executing program 0 (id=2789): flock(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) syz_open_dev$loop(&(0x7f00000000c0), 0xd03b, 0x410000) write$6lowpan_enable(r4, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x894b, &(0x7f0000000040)) 1.956355751s ago: executing program 4 (id=2790): socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) syz_clone(0x810000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') socket(0x10, 0x80003, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x88000) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120004000000, 0x2, 0x500, 0x1, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x20000080000002}, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.7404873s ago: executing program 1 (id=2791): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x1, 0x1, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x16, [0x80000000, 0x265598a4, 0x3ff, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffff, 0x0, 0xffff, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x400000, 0x0, 0x80000, 0x0, 0xedc0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4c6, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7240e211, 0x0, 0x0, 0x9, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x60aeabb6, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0xb7, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 1.680131312s ago: executing program 1 (id=2792): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x6, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xe000202b}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r9 = dup3(r5, r8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f0000000300)={0x200f}) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f00000001c0)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) 1.599238454s ago: executing program 2 (id=2793): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0 P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce\xff\a\x00\x00\x00\x00\x00\x00j+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) close(0x3) fcntl$addseals(r2, 0x409, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) write$char_usb(r1, &(0x7f0000006800), 0x0) 1.597450576s ago: executing program 3 (id=2794): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x44, 0x4004, @fd=r2, 0xa9c0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 904.986146ms ago: executing program 4 (id=2795): syz_usb_connect(0x0, 0x3d, 0x0, 0x0) pipe2(0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r1, 0x100, 0x1) getdents(r1, &(0x7f0000000340)=""/212, 0xd4) 369.943765ms ago: executing program 0 (id=2796): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000000)=0x6, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xe000202b}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r8 = dup3(r4, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000300)={0x200f}) ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f00000001c0)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) 118.146352ms ago: executing program 1 (id=2797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x480, 0x0, 0x0) 85.800621ms ago: executing program 4 (id=2798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40030002, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) 0s ago: executing program 3 (id=2799): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) r3 = socket(0x2, 0x3, 0xff) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0x10000, 0x824f, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$netlink(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0, 0x328}], 0x2, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x1fe, &(0x7f0000000980)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x1c8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0x1, "000005000000000026000400"}, {0x0, 0xc, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fed0e94222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): 0x81 has an invalid bInterval 0, changing to 7 [ 846.463017][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.561505][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.574163][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 846.614439][ T24] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 846.624713][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 846.645138][T15120] netlink: 'syz.4.2081': attribute type 20 has an invalid length. [ 846.653098][T15120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 846.677303][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.695800][ T24] usb 1-1: Product: syz [ 846.706284][ T24] usb 1-1: Manufacturer: syz [ 846.944183][ T24] usb 1-1: SerialNumber: syz [ 846.965126][ T24] usb 1-1: config 0 descriptor?? [ 846.965868][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.990746][ T5829] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 846.999115][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 846.999985][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.036236][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.044597][ T5829] usb 2-1: config 0 descriptor?? [ 847.044958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.058446][ T24] usb 1-1: setting power ON [ 847.062980][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 847.135431][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 847.191910][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 847.205109][ T24] usb 1-1: media controller created [ 847.210247][T15118] dvb-usb: bulk message failed: -22 (3/0) [ 847.224157][T15118] dvb-usb: bulk message failed: -22 (3/0) [ 847.352656][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.367276][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'. [ 847.370949][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 847.403103][T15138] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 847.498501][ T24] usb 1-1: selecting invalid altsetting 6 [ 847.515614][ T24] usb 1-1: digital interface selection failed (-22) [ 847.542381][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 847.558613][ T24] usb 1-1: setting power OFF [ 847.562942][ T5829] nzxt-kraken2 0003:1E71:170E.0013: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0 [ 847.573449][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 847.584777][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.605267][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 847.622952][ T24] (NULL device *): no alternate interface [ 847.873070][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 847.987439][ T24] usb 1-1: USB disconnect, device number 60 [ 848.106135][ T5829] usb 2-1: USB disconnect, device number 51 [ 848.526655][T15155] pimreg: tun_chr_ioctl cmd 1074025680 [ 848.624289][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.944928][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.959486][T15171] binder: 15170:15171 ioctl 400c620e 80000140 returned -22 [ 848.973114][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 849.084166][ T5829] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 849.185983][ T5893] vhci_hcd: vhci_device speed not set [ 849.254481][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 849.385421][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.395477][ T5829] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 849.406725][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.419098][ T5829] usb 2-1: config 0 descriptor?? [ 849.664433][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.882040][ T5829] holtek 0003:1241:5015.0014: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 849.988326][ T5829] holtek 0003:1241:5015.0014: no inputs found [ 850.114403][ T5829] usb 2-1: USB disconnect, device number 52 [ 850.210420][T15209] binder: 15203:15209 ioctl 5419 800000c0 returned -22 [ 850.244849][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 850.244865][ T30] audit: type=1326 audit(1761443100.896:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 850.472243][T15202] fido_id[15202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 850.507315][ T30] audit: type=1326 audit(1761443100.896:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 850.630003][ T30] audit: type=1326 audit(1761443100.896:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 850.711369][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.904210][ T30] audit: type=1326 audit(1761443100.896:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 850.915651][T15210] netlink: 'syz.2.2115': attribute type 20 has an invalid length. [ 850.996443][ T30] audit: type=1326 audit(1761443100.896:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 851.079280][ T30] audit: type=1326 audit(1761443100.896:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 851.360821][ T30] audit: type=1326 audit(1761443100.896:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 851.456172][ T30] audit: type=1326 audit(1761443100.896:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 851.520077][ T30] audit: type=1326 audit(1761443100.896:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 851.554682][ T30] audit: type=1326 audit(1761443100.906:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15203 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 851.767600][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.124540][ T5829] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 852.155648][T15249] ip6gretap0: entered promiscuous mode [ 852.161577][T15249] macsec1: entered promiscuous mode [ 852.170979][T15249] ip6gretap0: left promiscuous mode [ 852.305594][ T5829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.319052][ T5829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 852.328087][ T5893] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 852.338515][ T5829] usb 3-1: config 1 has no interface number 0 [ 852.345331][ T5829] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.396899][ T5829] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 852.487073][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 852.501430][ T5893] usb 1-1: config 0 has no interfaces? [ 852.519561][ T5829] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.529496][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.539026][ T5829] usb 3-1: Product: syz [ 852.543606][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 852.553656][ T5829] usb 3-1: Manufacturer: syz [ 852.560087][ T5829] usb 3-1: SerialNumber: syz [ 852.697031][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.718030][ T5893] usb 1-1: config 0 descriptor?? [ 852.785238][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.793408][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.801698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.228265][ T5893] usb 1-1: USB disconnect, device number 61 [ 853.526742][ T5829] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 853.545694][ T5829] cdc_ncm 3-1:1.1: bind() failure [ 853.576570][ T5829] usb 3-1: USB disconnect, device number 47 [ 853.831765][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.900066][T15263] netlink: 'syz.4.2130': attribute type 20 has an invalid length. [ 853.918645][T15263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 853.974243][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 854.134149][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 854.141403][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 854.154372][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 854.168726][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 854.179251][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.188693][ T24] usb 4-1: Product: syz [ 854.193690][ T24] usb 4-1: Manufacturer: syz [ 854.199825][ T24] usb 4-1: SerialNumber: syz [ 854.251992][T15283] binder: 15278:15283 ioctl 5419 800000c0 returned -22 [ 854.280663][ T24] usb 4-1: config 0 descriptor?? [ 854.290446][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 854.347476][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 854.387391][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 854.704762][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.865232][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.921443][ T24] em28xx 4-1:0.0: chip ID is em2874 [ 855.134881][ T5893] usb 4-1: USB disconnect, device number 56 [ 855.141559][ T5893] em28xx 4-1:0.0: Disconnecting em28xx [ 855.152106][ T5893] em28xx 4-1:0.0: Freeing device [ 855.483487][T15318] binder: 15307:15318 ioctl 5419 800000c0 returned -22 [ 855.492115][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 855.492131][ T30] audit: type=1326 audit(1761443106.166:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 855.620467][ T30] audit: type=1326 audit(1761443106.196:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 855.645704][ T30] audit: type=1326 audit(1761443106.196:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 855.841381][ T30] audit: type=1326 audit(1761443106.196:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 856.033316][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.091964][ T30] audit: type=1326 audit(1761443106.196:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 856.310057][ T30] audit: type=1326 audit(1761443106.196:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 856.336876][ T30] audit: type=1326 audit(1761443106.206:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 856.359508][ T30] audit: type=1326 audit(1761443106.436:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 856.381882][ T30] audit: type=1326 audit(1761443106.436:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.1.2152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 856.907703][T15342] binder: 15339:15342 ioctl 5419 800000c0 returned -22 [ 856.970818][ T30] audit: type=1326 audit(1761443107.596:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15339 comm="syz.1.2160" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 857.014112][ T5893] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 857.144244][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.230134][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.240744][ T5893] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 857.276794][ T5893] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 857.379435][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.401000][ T5893] usb 4-1: config 0 descriptor?? [ 857.452482][ T5893] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 857.464545][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 857.500470][ T5893] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 857.523436][ T5893] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 857.547994][ T5893] usb 4-1: media controller created [ 857.570636][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.650096][T15338] dvb-usb: bulk message failed: -22 (4/0) [ 857.715451][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 857.721533][ T5893] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 857.732217][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 857.748846][ T5893] dvb-usb: schedule remote query interval to 150 msecs. [ 857.876362][ T5893] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 857.947787][T15352] binder: 15349:15352 ioctl 5419 800000c0 returned -22 [ 858.071141][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 858.078571][ T5829] dvb-usb: error while querying for an remote control event. [ 858.168641][ T5893] usb 4-1: USB disconnect, device number 57 [ 858.234081][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.443388][ T5893] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 858.545733][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.554059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.247662][T15365] netlink: 'syz.4.2166': attribute type 20 has an invalid length. [ 859.264430][T15365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 859.272039][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.374238][ T5893] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 859.535915][ T5893] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 859.546935][ T5893] usb 1-1: config 0 has no interface number 0 [ 859.553070][ T5893] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.596495][ T5893] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 859.614387][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.632626][ T5893] usb 1-1: Product: syz [ 859.647175][ T5893] usb 1-1: Manufacturer: syz [ 859.651812][ T5893] usb 1-1: SerialNumber: syz [ 859.680611][ T5893] usb 1-1: config 0 descriptor?? [ 859.724198][ T5893] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 859.812947][T15383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 859.819596][T15383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 859.826397][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.840928][T15383] vhci_hcd vhci_hcd.0: Device attached [ 859.862716][T15383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 859.925858][T15383] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 859.932504][T15383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 859.981458][T15383] vhci_hcd vhci_hcd.0: Device attached [ 860.014783][T15392] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 860.021424][T15392] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 860.034136][ T24] vhci_hcd: vhci_device speed not set [ 860.041140][T15383] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 860.047759][T15383] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 860.096680][T15392] vhci_hcd vhci_hcd.0: Device attached [ 860.110918][T15383] vhci_hcd vhci_hcd.0: Device attached [ 860.123592][T15402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 860.134420][ T24] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 860.152483][T15383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 860.165789][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2179'. [ 860.247776][ T5893] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 860.314282][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.342425][T15398] vhci_hcd: connection closed [ 860.342813][ T13] vhci_hcd: stop threads [ 860.352041][ T13] vhci_hcd: release socket [ 860.357059][T15395] vhci_hcd: connection closed [ 860.362803][T15384] vhci_hcd: connection reset by peer [ 860.364388][T15387] vhci_hcd: connection closed [ 860.373795][ T13] vhci_hcd: disconnect device [ 860.396110][ T13] vhci_hcd: stop threads [ 860.404448][ T13] vhci_hcd: release socket [ 860.414445][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 860.422925][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.433879][ T5893] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 860.443899][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.537583][ T5893] usb 4-1: config 0 descriptor?? [ 860.543400][ T13] vhci_hcd: disconnect device [ 860.561334][ T5893] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 860.582781][ T13] vhci_hcd: stop threads [ 860.594392][ T13] vhci_hcd: release socket [ 860.603727][ T13] vhci_hcd: disconnect device [ 860.734142][ T13] vhci_hcd: stop threads [ 860.738470][ T13] vhci_hcd: release socket [ 860.745506][ T13] vhci_hcd: disconnect device [ 861.344190][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.960112][T15429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.130515][T15430] netlink: 'syz.1.2190': attribute type 20 has an invalid length. [ 862.143313][T15437] binder: 15433:15437 ioctl 5419 800000c0 returned -22 [ 862.155339][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 862.155356][ T30] audit: type=1326 audit(1761443112.826:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.185473][ T30] audit: type=1326 audit(1761443112.826:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.185894][T15430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 862.232144][ T30] audit: type=1326 audit(1761443112.826:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.255228][ T30] audit: type=1326 audit(1761443112.826:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.267235][ T5932] usb 1-1: USB disconnect, device number 62 [ 862.278186][ T30] audit: type=1326 audit(1761443112.826:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.314293][ T30] audit: type=1326 audit(1761443112.826:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.338621][ T30] audit: type=1326 audit(1761443112.836:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.365930][ T30] audit: type=1326 audit(1761443112.836:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15433 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 862.370927][ T5932] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 862.406861][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.282852][ T5932] usb 4-1: USB disconnect, device number 58 [ 863.434660][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.718077][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.726517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.410801][T15462] netlink: 'syz.3.2202': attribute type 20 has an invalid length. [ 864.439395][T15462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.464227][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.660456][T15479] binder: 15475:15479 ioctl 5419 800000c0 returned -22 [ 864.703834][ T30] audit: type=1326 audit(1761443115.376:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 864.783000][ T30] audit: type=1326 audit(1761443115.376:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.2.2208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 864.893044][T15484] netlink: 'syz.0.2209': attribute type 10 has an invalid length. [ 864.946710][T15483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.132916][T15485] netlink: 'syz.1.2210': attribute type 20 has an invalid length. [ 865.142255][T15485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 865.335007][ T24] vhci_hcd: vhci_device speed not set [ 865.384121][ T5932] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 865.505919][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.523419][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.532490][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.546802][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.588885][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.634346][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 865.685724][ T5893] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 865.715937][ T5932] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 865.747475][ T5932] usb 1-1: config 0 has no interface number 0 [ 865.866079][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.886673][ T5893] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 865.923460][ T5893] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 865.970818][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.008727][ T5893] usb 3-1: config 0 descriptor?? [ 866.039197][ T5893] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 866.056104][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 866.079609][ T5893] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 866.099626][ T5893] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 866.119858][ T5893] usb 3-1: media controller created [ 866.130801][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.154187][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 866.162134][ T5893] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 866.180312][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 866.221072][ T5893] dvb-usb: schedule remote query interval to 150 msecs. [ 866.248693][ T5893] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 866.292152][ T5932] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 866.354269][ T5893] usb 3-1: USB disconnect, device number 48 [ 866.473713][ T5893] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 866.515106][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.523139][ T5932] usb 1-1: Product: syz [ 866.725333][T15526] input: syz1 as /devices/virtual/input/input35 [ 866.817283][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.825609][ T5932] usb 1-1: Manufacturer: syz [ 866.830311][ T5932] usb 1-1: SerialNumber: syz [ 866.854830][ T5932] usb 1-1: config 0 descriptor?? [ 866.999276][ T5932] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 867.027388][ T5932] usb 1-1: Detected SIO [ 867.047615][ T5932] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 867.609732][T15546] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 867.824463][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.194026][T15553] binder: 15549:15553 ioctl 5419 800000c0 returned -22 [ 868.210916][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 868.210932][ T30] audit: type=1326 audit(1761443118.876:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.288508][ T5893] usb 1-1: USB disconnect, device number 63 [ 868.320714][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 868.350865][ T5893] ftdi_sio 1-1:0.217: device disconnected [ 868.407177][ T30] audit: type=1326 audit(1761443118.876:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.459168][ T30] audit: type=1326 audit(1761443118.876:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.544210][ T30] audit: type=1326 audit(1761443118.876:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.577643][ T30] audit: type=1326 audit(1761443118.876:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.602216][ T30] audit: type=1326 audit(1761443118.876:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.660818][ T30] audit: type=1326 audit(1761443118.876:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.759962][ T30] audit: type=1326 audit(1761443118.976:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.842531][ T30] audit: type=1326 audit(1761443118.976:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.1.2236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 868.875616][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.967527][T15572] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 868.974175][T15572] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 868.994432][T15572] vhci_hcd vhci_hcd.0: Device attached [ 869.011724][T15576] netlink: 'syz.3.2247': attribute type 11 has an invalid length. [ 869.027157][T15572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 869.045640][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 869.075208][T15572] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 869.081882][T15572] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 869.115475][T15572] vhci_hcd vhci_hcd.0: Device attached [ 869.134944][T15583] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 869.141595][T15583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 869.171915][T15583] vhci_hcd vhci_hcd.0: Device attached [ 869.177796][ T5932] vhci_hcd: vhci_device speed not set [ 869.209138][T15572] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 869.215783][T15572] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 869.235755][ T5932] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 869.279781][T15572] vhci_hcd vhci_hcd.0: Device attached [ 869.286130][T15583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 869.340865][T15572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 869.400476][T15590] vhci_hcd: connection closed [ 869.400897][ T3562] vhci_hcd: stop threads [ 869.401045][T15573] vhci_hcd: connection reset by peer [ 869.406393][T15578] vhci_hcd: connection closed [ 869.414118][T15584] vhci_hcd: connection closed [ 869.420262][ T3562] vhci_hcd: release socket [ 869.434945][ T3562] vhci_hcd: disconnect device [ 869.444869][ T3562] vhci_hcd: stop threads [ 869.454538][ T3562] vhci_hcd: release socket [ 869.464043][ T3562] vhci_hcd: disconnect device [ 869.471070][ T3562] vhci_hcd: stop threads [ 869.476093][ T3562] vhci_hcd: release socket [ 869.481186][ T3562] vhci_hcd: disconnect device [ 869.486398][ T3562] vhci_hcd: stop threads [ 869.491349][ T3562] vhci_hcd: release socket [ 869.497316][ T3562] vhci_hcd: disconnect device [ 869.834828][T15617] netlink: 'syz.1.2257': attribute type 20 has an invalid length. [ 869.842912][T15617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 869.995439][T15619] netlink: 'syz.3.2260': attribute type 20 has an invalid length. [ 870.014606][T15619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 870.069518][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.075892][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.475556][ T5829] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 870.636024][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 870.648747][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.664119][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.691662][ T5829] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 870.704391][ C1] net_ratelimit: 4 callbacks suppressed [ 870.704414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.729006][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.781690][ T5829] usb 5-1: config 0 descriptor?? [ 870.945515][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.248658][ T5829] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 871.346658][ T3562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.355896][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.364967][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.373817][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.486071][ T5829] usb 5-1: USB disconnect, device number 56 [ 871.994034][T15691] binder: 15685:15691 ioctl 5419 800000c0 returned -22 [ 872.014236][ T30] audit: type=1326 audit(1761443122.676:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 872.157559][T15684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.169716][T15697] binder: 15692:15697 ioctl 5419 800000c0 returned -22 [ 872.271865][T15701] binder: 15695:15701 ioctl 5419 800000c0 returned -22 [ 872.347043][T15679] netlink: 'syz.1.2278': attribute type 20 has an invalid length. [ 872.355377][T15679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 872.384634][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.884178][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 873.076647][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 873.115912][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 873.125350][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.133406][ T24] usb 2-1: Product: syz [ 873.162963][ T24] usb 2-1: Manufacturer: syz [ 873.173537][ T24] usb 2-1: SerialNumber: syz [ 873.195152][ T24] usb 2-1: config 0 descriptor?? [ 873.494430][T13383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.675342][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 873.676299][T15727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 873.772642][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 873.783577][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 873.795952][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 873.796017][ T24] usb 2-1: media controller created [ 873.818449][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.144171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.375089][ T5932] vhci_hcd: vhci_device speed not set [ 874.382022][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 874.391514][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 874.406461][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 874.442842][ T24] usb 2-1: USB disconnect, device number 53 [ 874.618467][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 874.657992][T15739] binder: 15737:15739 ioctl 5419 800000c0 returned -22 [ 874.676342][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 874.676361][ T30] audit: type=1326 audit(1761443125.356:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.731982][ T30] audit: type=1326 audit(1761443125.366:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.755802][ T30] audit: type=1326 audit(1761443125.366:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.779833][ T30] audit: type=1326 audit(1761443125.386:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.802516][ T30] audit: type=1326 audit(1761443125.386:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.824790][ T30] audit: type=1326 audit(1761443125.386:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.851170][ T30] audit: type=1326 audit(1761443125.386:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.874326][ T30] audit: type=1326 audit(1761443125.406:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.916413][ T30] audit: type=1326 audit(1761443125.406:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 874.970516][ T30] audit: type=1326 audit(1761443125.406:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15737 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 875.312561][T15768] netlink: 'syz.2.2308': attribute type 10 has an invalid length. [ 875.500230][T15772] loop8: detected capacity change from 0 to 7 [ 875.515226][T15772] Dev loop8: unable to read RDB block 7 [ 875.529444][T15772] loop8: unable to read partition table [ 875.539722][T15772] loop8: partition table beyond EOD, truncated [ 875.589078][T15772] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 875.598355][ T5829] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 875.754708][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 875.841260][ T5829] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 875.852247][T15779] netlink: 'syz.3.2317': attribute type 8 has an invalid length. [ 875.860675][ T5829] usb 3-1: config 0 has no interface number 0 [ 875.944154][ T5829] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 875.953233][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.007831][ T5829] usb 3-1: Product: syz [ 876.036280][ T5829] usb 3-1: Manufacturer: syz [ 876.040923][ T5829] usb 3-1: SerialNumber: syz [ 876.098523][ T5829] usb 3-1: config 0 descriptor?? [ 876.126766][ T5829] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected [ 876.225278][ T5829] usb 3-1: Detected SIO [ 876.262492][ T5829] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 876.494251][ T5829] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 876.606666][T15801] net_ratelimit: 4 callbacks suppressed [ 876.606684][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.625817][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.636458][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.655560][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.673042][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.684764][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 876.693004][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.704735][T13383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.726527][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.736324][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.745142][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.753909][T15801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.762917][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 876.772823][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 876.804897][ T5829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.818792][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.840464][ T5829] usb 5-1: config 0 descriptor?? [ 877.274814][ T5829] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 877.307607][ T5829] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 877.466854][T15817] netlink: 'syz.1.2333': attribute type 20 has an invalid length. [ 877.480287][T15817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 878.050804][T15824] binder: 15822:15824 ioctl 5419 800000c0 returned -22 [ 878.870891][ T5829] usb 3-1: USB disconnect, device number 49 [ 878.883081][ T5829] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 878.925570][ T5829] ftdi_sio 3-1:0.217: device disconnected [ 879.244099][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 879.345616][ T5932] usb 5-1: USB disconnect, device number 57 [ 879.394127][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 879.401690][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.423113][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 879.439757][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.489859][ T24] usb 1-1: config 0 descriptor?? [ 879.957222][ T24] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 879.969172][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 879.989274][T15887] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 880.165424][ T24] usb 1-1: USB disconnect, device number 64 [ 880.278753][T15900] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 880.285390][T15900] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 880.293381][T15900] vhci_hcd vhci_hcd.0: Device attached [ 880.301667][T15900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 880.314508][T15900] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 880.321217][T15900] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 880.328978][T15900] vhci_hcd vhci_hcd.0: Device attached [ 880.342285][T15900] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 880.348905][T15900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 880.357233][T15900] vhci_hcd vhci_hcd.0: Device attached [ 880.371441][T15900] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 880.378086][T15900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 880.396179][T15900] vhci_hcd vhci_hcd.0: Device attached [ 880.403065][T15900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 880.412738][T15900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 880.432014][T15907] vhci_hcd: connection closed [ 880.432207][ T13] vhci_hcd: stop threads [ 880.441758][T15905] vhci_hcd: connection closed [ 880.441931][T15903] vhci_hcd: connection closed [ 880.443411][T15901] vhci_hcd: connection closed [ 880.451782][ T13] vhci_hcd: release socket [ 880.461656][ T13] vhci_hcd: disconnect device [ 880.467133][ T13] vhci_hcd: stop threads [ 880.471531][ T13] vhci_hcd: release socket [ 880.477445][ T13] vhci_hcd: disconnect device [ 880.479682][ T5893] vhci_hcd: vhci_device speed not set [ 880.486825][ T13] vhci_hcd: stop threads [ 880.492259][ T13] vhci_hcd: release socket [ 880.498091][ T13] vhci_hcd: disconnect device [ 880.503394][ T13] vhci_hcd: stop threads [ 880.509391][ T13] vhci_hcd: release socket [ 880.514500][ T13] vhci_hcd: disconnect device [ 880.544816][ T5893] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 880.552365][ T5893] usb 37-1: enqueue for inactive port 0 [ 880.634262][ T5893] vhci_hcd: vhci_device speed not set [ 881.598045][T15947] binder: 15943:15947 ioctl 5419 800000c0 returned -22 [ 881.625539][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 881.625559][ T30] audit: type=1326 audit(1761443132.286:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 881.866997][ T30] audit: type=1326 audit(1761443132.286:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 881.893482][T15940] netlink: 'syz.2.2377': attribute type 20 has an invalid length. [ 882.032985][ T30] audit: type=1326 audit(1761443132.286:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 882.150936][ T30] audit: type=1326 audit(1761443132.286:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 882.254283][ T30] audit: type=1326 audit(1761443132.286:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 882.463713][ T30] audit: type=1326 audit(1761443132.286:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 882.557424][ T30] audit: type=1326 audit(1761443132.286:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 882.632325][ T30] audit: type=1326 audit(1761443132.286:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15943 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 882.674287][ T5932] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 882.871673][ T5932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.882038][ T5932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.927139][ T5932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.946886][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.137739][T15963] loop6: detected capacity change from 0 to 63 [ 883.179431][T15963] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.217010][ T5932] usb 5-1: GET_CAPABILITIES returned 0 [ 883.222548][ T5932] usbtmc 5-1:16.0: can't read capabilities [ 883.255945][T15965] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.282010][T13970] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.297548][T15963] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.314785][T13970] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.339572][T13970] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.355381][T15963] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.373465][T13970] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.392592][T15963] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.411915][T15963] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.420525][ T5893] usb 5-1: USB disconnect, device number 58 [ 884.076961][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2391'. [ 884.102966][T15981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 884.952240][ C1] sd 0:0:1:0: [sda] tag#3089 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 884.962746][ C1] sd 0:0:1:0: [sda] tag#3089 CDB: Read(6) 08 00 00 00 00 2c [ 884.970329][ C1] sd 0:0:1:0: [sda] tag#3090 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 884.980763][ C1] sd 0:0:1:0: [sda] tag#3090 CDB: Read(6) 08 00 00 00 00 2c [ 884.988290][ C1] sd 0:0:1:0: [sda] tag#3091 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 884.998720][ C1] sd 0:0:1:0: [sda] tag#3091 CDB: Read(6) 08 00 00 00 00 2c [ 885.006659][ C1] sd 0:0:1:0: [sda] tag#3092 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.017111][ C1] sd 0:0:1:0: [sda] tag#3092 CDB: Read(6) 08 00 00 00 00 2c [ 885.024538][ C1] sd 0:0:1:0: [sda] tag#3093 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.034957][ C1] sd 0:0:1:0: [sda] tag#3093 CDB: Read(6) 08 00 00 00 00 2c [ 885.042318][ C1] sd 0:0:1:0: [sda] tag#3094 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.052703][ C1] sd 0:0:1:0: [sda] tag#3094 CDB: Read(6) 08 00 00 00 00 2c [ 885.064169][ C1] sd 0:0:1:0: [sda] tag#3095 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.074630][ C1] sd 0:0:1:0: [sda] tag#3095 CDB: Read(6) 08 00 00 00 00 2c [ 885.082006][ C1] sd 0:0:1:0: [sda] tag#3096 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.092435][ C1] sd 0:0:1:0: [sda] tag#3096 CDB: Read(6) 08 00 00 00 00 2c [ 885.100010][ C1] sd 0:0:1:0: [sda] tag#3097 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.110407][ C1] sd 0:0:1:0: [sda] tag#3097 CDB: Read(6) 08 00 00 00 00 2c [ 885.117823][ C1] sd 0:0:1:0: [sda] tag#3098 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.128235][ C1] sd 0:0:1:0: [sda] tag#3098 CDB: Read(6) 08 00 00 00 00 2c [ 885.230087][T15993] netlink: 'syz.4.2395': attribute type 20 has an invalid length. [ 885.239812][T15993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 885.309865][T16007] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 885.388459][T16007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 885.429835][T16012] bond2: (slave geneve2): making interface the new active one [ 885.457088][T16012] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 885.467959][ T3562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.476777][ T5932] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 885.500785][ T3562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.531979][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054feb400: rx timeout, send abort [ 885.540365][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054feac00: rx timeout, send abort [ 885.548921][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054feb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 885.563392][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054feac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 885.594241][ T3562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.623367][ T3562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.706105][ T5932] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 885.714751][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.742947][ T5932] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 885.774708][ T5932] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 885.782740][ T5932] usb 4-1: Manufacturer: syz [ 885.827077][ T5932] usb 4-1: config 0 descriptor?? [ 885.886637][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 886.007353][ T5932] rc_core: IR keymap rc-hauppauge not found [ 886.016691][ T5932] Registered IR keymap rc-empty [ 886.032938][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 886.039039][ T5932] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 886.086136][ T5932] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 886.134837][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 886.167058][ T5932] usb 4-1: USB disconnect, device number 59 [ 886.185729][T13383] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 886.344446][T13383] usb 2-1: Using ep0 maxpacket: 32 [ 886.489427][T16039] binder: 16034:16039 ioctl 5419 800000c0 returned -22 [ 886.506473][ T30] audit: type=1326 audit(1761443137.176:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.515810][T13383] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 886.541885][ T30] audit: type=1326 audit(1761443137.176:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.614276][T13383] usb 2-1: config 0 has no interface number 0 [ 886.623580][T13383] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 886.650216][ T30] audit: type=1326 audit(1761443137.176:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.717429][ T30] audit: type=1326 audit(1761443137.176:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.723546][T13383] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 886.748865][T13383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.779605][T13383] usb 2-1: Product: syz [ 886.784315][T13383] usb 2-1: Manufacturer: syz [ 886.789258][T13383] usb 2-1: SerialNumber: syz [ 886.801606][T13383] usb 2-1: config 0 descriptor?? [ 886.808586][ T30] audit: type=1326 audit(1761443137.176:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.810620][T13383] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 886.841675][ T30] audit: type=1326 audit(1761443137.186:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.872569][ T30] audit: type=1326 audit(1761443137.186:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.924220][ T30] audit: type=1326 audit(1761443137.186:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 886.974053][ T5932] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 887.166103][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.190423][T16045] net_ratelimit: 45 callbacks suppressed [ 887.190444][T16045] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 887.205778][T16045] TCP: tcp_parse_options: Illegal window scaling value 71 > 14 received [ 887.216919][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.285073][ T5932] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 887.311974][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 887.342426][ T5932] usb 1-1: SerialNumber: syz [ 887.614253][ T5932] usb 1-1: 0:2 : does not exist [ 887.621951][T13383] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 887.712470][ T5932] usb 1-1: USB disconnect, device number 65 [ 887.780364][T13957] udevd[13957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.810215][T16051] netlink: 'syz.2.2418': attribute type 20 has an invalid length. [ 887.894143][T13383] usb 2-1: USB disconnect, device number 54 [ 888.650809][T16060] netlink: 'syz.3.2421': attribute type 20 has an invalid length. [ 888.658897][T16060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.199744][T16086] loop5: detected capacity change from 0 to 7 [ 889.304152][T16086] Dev loop5: unable to read RDB block 7 [ 889.309792][T16086] loop5: unable to read partition table [ 889.356770][T16086] loop5: partition table beyond EOD, truncated [ 889.378709][T16086] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 890.226738][T16112] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 890.488624][ T5932] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 890.664239][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 890.811298][ T5932] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 890.824019][ T5932] usb 1-1: config 0 has no interface number 0 [ 890.937102][ T5932] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 890.956583][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.003929][ T5932] usb 1-1: Product: syz [ 891.079371][ T5932] usb 1-1: Manufacturer: syz [ 891.177176][ T5932] usb 1-1: SerialNumber: syz [ 891.233360][ T5932] usb 1-1: config 0 descriptor?? [ 891.250409][ T5932] ftdi_sio 1-1:0.217: FTDI USB Serial Device converter detected [ 891.259716][ T5932] usb 1-1: Detected SIO [ 891.280450][ T5932] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 891.432828][T16140] input: syz0 as /devices/virtual/input/input38 [ 891.463397][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'. [ 892.265301][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 892.654041][ T43] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 892.877613][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.923923][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 892.933651][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.965013][ T43] usb 3-1: Product: syz [ 892.971835][ T43] usb 3-1: Manufacturer: syz [ 892.980446][ T43] usb 3-1: SerialNumber: syz [ 893.139144][ T5932] usb 1-1: USB disconnect, device number 66 [ 893.159530][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 893.183053][ T5932] ftdi_sio 1-1:0.217: device disconnected [ 893.482226][T16179] binder: 16172:16179 ioctl 5419 800000c0 returned -22 [ 893.495681][ T30] audit: type=1326 audit(1761443144.166:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.558627][ T30] audit: type=1326 audit(1761443144.166:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.619088][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'. [ 893.628652][ T30] audit: type=1326 audit(1761443144.166:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.651323][ T30] audit: type=1326 audit(1761443144.166:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.708760][ T30] audit: type=1326 audit(1761443144.166:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.748416][ T30] audit: type=1326 audit(1761443144.166:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.778525][ T30] audit: type=1326 audit(1761443144.176:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.811330][ T30] audit: type=1326 audit(1761443144.176:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16172 comm="syz.0.2461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 893.833835][ T5932] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 893.884031][ T5893] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 893.995736][ T5932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.006127][ T5932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.022364][ T5932] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 894.036220][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.047790][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.077200][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.090611][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.090901][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 894.118429][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.144543][ T5893] usb 4-1: config 0 descriptor?? [ 894.163199][ T5932] usb 5-1: SerialNumber: syz [ 894.218801][ T43] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 894.233494][ T43] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 894.241106][ T43] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 894.417942][ T5932] usb 5-1: 0:2 : does not exist [ 894.430536][ T43] cdc_ncm 3-1:1.0: setting tx_max = 36 [ 894.466366][ T43] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 894.484158][ T5932] usb 5-1: USB disconnect, device number 59 [ 894.506753][ T43] usb 3-1: USB disconnect, device number 50 [ 894.539166][ T43] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 894.627110][T13970] udevd[13970]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.657702][ T5893] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 894.993543][T16195] netlink: 'syz.1.2467': attribute type 20 has an invalid length. [ 895.012470][T16195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 895.384561][ T43] usb 4-1: USB disconnect, device number 60 [ 895.704444][ T5932] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 895.797430][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 895.964107][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 895.973280][ T5932] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 896.065025][ T5932] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 896.099093][ T5932] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 896.129411][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2477'. [ 896.139366][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 896.161345][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 896.176044][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 896.294135][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 896.324091][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 896.337204][ T5932] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 896.347346][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.419223][ T5932] usb 3-1: config 0 descriptor?? [ 896.504193][T16232] binder: 16227:16232 ioctl 5419 800000c0 returned -22 [ 896.537750][ T30] audit: type=1326 audit(1761443147.186:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16227 comm="syz.3.2479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 896.570436][T16214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 896.664038][ T30] audit: type=1326 audit(1761443147.196:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16227 comm="syz.3.2479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 896.850174][ T5932] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 897.017231][ C0] usblp0: nonzero read bulk status received: -71 [ 897.113617][ T5829] usb 3-1: USB disconnect, device number 51 [ 897.314095][T16212] usblp0: removed [ 897.626346][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 898.143826][T16256] lo: entered allmulticast mode [ 898.153324][T16252] lo: left allmulticast mode [ 898.625756][ T43] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 898.662233][T16263] netlink: 'syz.2.2486': attribute type 20 has an invalid length. [ 898.785977][ T43] usb 4-1: config 0 has no interfaces? [ 898.793559][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 898.803128][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.822771][ T43] usb 4-1: Product: syz [ 898.841494][ T43] usb 4-1: Manufacturer: syz [ 898.852537][ T43] usb 4-1: SerialNumber: syz [ 898.984892][ T43] usb 4-1: config 0 descriptor?? [ 899.248803][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 899.371672][ T5893] usb 4-1: USB disconnect, device number 61 [ 900.517250][T16303] netlink: 'syz.3.2501': attribute type 10 has an invalid length. [ 900.746094][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 900.794169][ T5893] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 900.876670][T16297] netlink: 'syz.4.2500': attribute type 20 has an invalid length. [ 900.886242][T16297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 901.086837][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 901.133668][ T5893] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 901.155189][ T5893] usb 4-1: config 0 has no interface number 0 [ 901.201323][ T5893] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 901.216261][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.459842][ T5893] usb 4-1: Product: syz [ 901.473317][ T5893] usb 4-1: Manufacturer: syz [ 901.479943][ T5893] usb 4-1: SerialNumber: syz [ 901.541405][ T5893] usb 4-1: config 0 descriptor?? [ 901.665515][ T5893] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 901.678997][ T5893] usb 4-1: Detected SIO [ 901.713148][T16321] netlink: 'syz.4.2507': attribute type 20 has an invalid length. [ 901.732938][T16321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 901.801159][ T5893] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 902.687928][T16335] binder: 16334:16335 ioctl 5419 800000c0 returned -22 [ 902.696066][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 902.696081][ T30] audit: type=1326 audit(1761443153.376:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 902.755583][ T30] audit: type=1326 audit(1761443153.376:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 902.862181][ T30] audit: type=1326 audit(1761443153.406:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 902.902389][ T30] audit: type=1326 audit(1761443153.406:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 903.080213][ T30] audit: type=1326 audit(1761443153.406:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 903.112138][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 903.123007][ T30] audit: type=1326 audit(1761443153.406:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 903.201540][ T30] audit: type=1326 audit(1761443153.406:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 903.248013][ T30] audit: type=1326 audit(1761443153.406:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 903.275010][ T30] audit: type=1326 audit(1761443153.836:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 903.357669][ T30] audit: type=1326 audit(1761443153.836:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 903.508415][ T5893] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 903.668221][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.679839][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.690146][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 903.708659][ T5893] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 903.723651][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.745170][ T5893] usb 3-1: config 0 descriptor?? [ 903.950913][ T5900] usb 4-1: USB disconnect, device number 62 [ 903.963749][ T5900] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 903.989301][ T5900] ftdi_sio 4-1:0.217: device disconnected [ 904.045414][T16361] netlink: 'syz.0.2521': attribute type 20 has an invalid length. [ 904.053773][T16361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 904.192230][ T5893] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 904.524502][T16371] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 904.556383][ T43] usb 3-1: USB disconnect, device number 52 [ 904.905054][ T5932] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 904.948332][T16384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.968726][T16384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.064058][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 905.071099][ T5932] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 905.079577][ T5932] usb 2-1: config 0 has no interface number 0 [ 905.085853][ T5932] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 905.095915][ T5932] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 905.108776][ T5932] usb 2-1: config 0 interface 41 has no altsetting 0 [ 905.118944][ T5932] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 905.128267][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.136538][ T5932] usb 2-1: Product: syz [ 905.140816][ T5932] usb 2-1: Manufacturer: syz [ 905.146031][ T5932] usb 2-1: SerialNumber: syz [ 905.154729][ T5932] usb 2-1: config 0 descriptor?? [ 905.160440][T16374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 905.168271][T16374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 905.260493][T16390] binder: 16385:16390 ioctl 5419 800000c0 returned -22 [ 905.386008][T16374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 905.406138][T16374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 905.867873][ T5932] Error reading MAC address [ 905.873785][T16374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 905.883872][T16374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 906.750705][ T5932] sr9700 2-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet, 9e:b1:b1:0e:89:10 [ 906.837662][ T5932] usb 2-1: USB disconnect, device number 55 [ 906.936009][ T5932] sr9700 2-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.1-1, CoreChip SR9700 USB Ethernet [ 907.327567][T16415] netlink: 'syz.1.2539': attribute type 2 has an invalid length. [ 907.349263][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2539'. [ 907.384535][T16415] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 907.411933][T16418] netlink: 'syz.1.2539': attribute type 2 has an invalid length. [ 907.500348][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2540'. [ 907.564277][T16418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2539'. [ 908.024633][T16410] netlink: 'syz.0.2537': attribute type 20 has an invalid length. [ 908.032591][T16410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 908.101544][T16441] netlink: 'syz.1.2544': attribute type 10 has an invalid length. [ 908.204301][ T5893] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 908.424327][ T5900] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 908.485049][ T5893] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 908.554157][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.641407][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 908.651701][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.665691][ T5900] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 908.694096][ T5900] usb 2-1: config 0 has no interface number 0 [ 908.721455][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 908.755811][ T5900] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 908.766724][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.824146][ T5900] usb 2-1: Product: syz [ 908.828878][ T5893] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 908.843425][ T5900] usb 2-1: Manufacturer: syz [ 908.866581][ T5900] usb 2-1: SerialNumber: syz [ 908.872179][ T5893] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 908.897939][ T5900] usb 2-1: config 0 descriptor?? [ 908.914088][ T5893] usb 5-1: Manufacturer: syz [ 908.939503][ T5893] usb 5-1: config 0 descriptor?? [ 908.975713][ T5900] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 908.985700][ T5900] usb 2-1: Detected SIO [ 908.991408][ T5900] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 909.267196][T16466] binder: 16459:16466 ioctl 5419 800000c0 returned -22 [ 909.314591][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 909.314607][ T30] audit: type=1326 audit(1761443159.956:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.330428][T16450] netlink: 'syz.0.2547': attribute type 20 has an invalid length. [ 909.360734][ T5893] hid_parser_main: 5 callbacks suppressed [ 909.360748][ T5893] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 909.404455][T16450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 909.422493][ T5893] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 909.492169][ T30] audit: type=1326 audit(1761443159.956:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.576404][ T30] audit: type=1326 audit(1761443159.956:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.616431][ T30] audit: type=1326 audit(1761443159.956:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.743845][ T30] audit: type=1326 audit(1761443159.956:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.805839][ T30] audit: type=1326 audit(1761443159.956:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.836377][ T30] audit: type=1326 audit(1761443160.226:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.952789][ T30] audit: type=1326 audit(1761443160.236:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.2.2551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 909.994195][ T30] audit: type=1326 audit(1761443160.416:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16472 comm="syz.3.2553" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f12539 code=0x0 [ 910.789829][T16495] binder: 16489:16495 ioctl 5419 800000c0 returned -22 [ 910.815039][ T30] audit: type=1326 audit(1761443161.476:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16489 comm="syz.0.2556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 911.178415][ T5932] usb 2-1: USB disconnect, device number 56 [ 911.198635][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 911.243146][ T5932] ftdi_sio 2-1:0.217: device disconnected [ 911.445369][T13383] usb 5-1: USB disconnect, device number 60 [ 911.764664][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 911.866629][ T5932] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 912.059312][T16511] netlink: 'syz.3.2558': attribute type 20 has an invalid length. [ 912.069003][T16511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 912.115737][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.144707][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.204042][T13383] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 912.234464][ T5932] usb 2-1: Product: syz [ 912.294077][ T5932] usb 2-1: Manufacturer: syz [ 912.315884][ T5932] usb 2-1: SerialNumber: syz [ 912.466150][T13383] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 912.490804][T13383] usb 5-1: config 128 has no interface number 0 [ 912.544146][T13383] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 912.588746][T13383] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 912.614102][T13383] usb 5-1: config 128 interface 148 has no altsetting 0 [ 912.630511][T16521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 912.674453][T13383] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 912.733486][T13383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.754175][T13383] usb 5-1: Product: syz [ 912.758407][T13383] usb 5-1: Manufacturer: syz [ 912.773406][T13383] usb 5-1: SerialNumber: syz [ 913.024422][T13383] usb 5-1: USB disconnect, device number 61 [ 913.158747][T16530] netlink: 'syz.3.2567': attribute type 20 has an invalid length. [ 913.166774][T16530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 913.290553][T16536] usb usb8: usbfs: process 16536 (syz.2.2571) did not claim interface 0 before use [ 913.391755][ T5932] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 913.404085][ T5932] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 913.524277][T13383] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 913.694428][T13383] usb 5-1: Using ep0 maxpacket: 8 [ 913.715984][T13383] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 913.724810][T13383] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 913.745627][T13383] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 913.778935][T13383] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 913.814597][T13383] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.864640][ T5932] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 913.880969][T13383] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 913.933258][T13383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.018867][ T5932] usb 2-1: USB disconnect, device number 57 [ 914.047465][ T5932] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 914.203090][T13383] usb 5-1: usb_control_msg returned -32 [ 914.224594][T13383] usbtmc 5-1:16.0: can't read capabilities [ 914.362951][T16559] binder: 16552:16559 ioctl 5419 800000c0 returned -22 [ 914.384021][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 914.384042][ T30] audit: type=1326 audit(1761443165.046:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 914.553515][ T30] audit: type=1326 audit(1761443165.046:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 914.632795][ T30] audit: type=1326 audit(1761443165.046:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 914.884236][ T30] audit: type=1326 audit(1761443165.046:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 914.920830][ T30] audit: type=1326 audit(1761443165.046:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 914.950665][ T30] audit: type=1326 audit(1761443165.046:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 915.118995][ T30] audit: type=1326 audit(1761443165.046:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 915.154135][ T5829] usb 5-1: USB disconnect, device number 62 [ 915.216513][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2575'. [ 915.257821][ T30] audit: type=1326 audit(1761443165.106:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.0.2576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 915.664866][T16580] netlink: 'syz.0.2578': attribute type 20 has an invalid length. [ 915.672952][T16580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 916.444155][ T5829] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 916.497487][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 916.609317][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.635185][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 916.714026][ T5829] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 916.764747][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.805003][ T5829] usb 2-1: config 0 descriptor?? [ 916.991387][T16625] binder: 16619:16625 ioctl 5419 800000c0 returned -22 [ 917.014133][ T30] audit: type=1326 audit(1761443167.676:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.4.2589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 917.242494][ T5829] kovaplus 0003:1E7D:2D50.001B: unknown main item tag 0x0 [ 917.260235][ T5829] kovaplus 0003:1E7D:2D50.001B: unknown main item tag 0x0 [ 917.315745][ T5829] kovaplus 0003:1E7D:2D50.001B: unknown main item tag 0x0 [ 917.364952][ T5829] kovaplus 0003:1E7D:2D50.001B: unknown main item tag 0x0 [ 917.365839][ T30] audit: type=1326 audit(1761443167.676:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.4.2589" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 917.394489][ T5829] kovaplus 0003:1E7D:2D50.001B: unknown main item tag 0x0 [ 917.446210][ T5829] kovaplus 0003:1E7D:2D50.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 917.814488][T16631] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2591'. [ 917.992814][T16637] binder: 16632:16637 ioctl 5419 800000c0 returned -22 [ 918.406440][ T5829] kovaplus 0003:1E7D:2D50.001B: couldn't init struct kovaplus_device [ 918.415031][ T5829] kovaplus 0003:1E7D:2D50.001B: couldn't install mouse [ 918.429524][ T5829] kovaplus 0003:1E7D:2D50.001B: probe with driver kovaplus failed with error -71 [ 918.537299][ T5829] usb 2-1: USB disconnect, device number 58 [ 918.972519][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2595'. [ 919.918776][ T5836] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 919.926134][ T5836] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 919.955325][T16658] netlink: 'syz.4.2598': attribute type 20 has an invalid length. [ 920.005388][T16658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.089935][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2602'. [ 920.476065][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2605'. [ 920.510729][T16686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2606'. [ 920.942178][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2607'. [ 921.693393][T16711] binder: 16706:16711 ioctl 5419 800000c0 returned -22 [ 921.703162][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 921.703178][ T30] audit: type=1326 audit(1761443172.376:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 921.853125][ T30] audit: type=1326 audit(1761443172.376:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 921.875619][ T30] audit: type=1326 audit(1761443172.376:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 921.899266][ T30] audit: type=1326 audit(1761443172.376:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 921.944441][ T30] audit: type=1326 audit(1761443172.376:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 921.966813][ T30] audit: type=1326 audit(1761443172.416:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 921.989477][ T30] audit: type=1326 audit(1761443172.416:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 922.035215][ T30] audit: type=1326 audit(1761443172.416:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16706 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 922.078672][ T30] audit: type=1326 audit(1761443172.466:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16709 comm="syz.2.2613" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 922.960137][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'. [ 923.857607][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 923.989784][ T5836] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 923.998502][ T5836] Bluetooth: hci1: Injecting HCI hardware error event [ 924.007771][ T5836] Bluetooth: hci1: hardware error 0x00 [ 924.194873][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 924.206269][T16758] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 924.400978][ T30] audit: type=1326 audit(1761443175.076:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16760 comm="syz.4.2625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 924.527059][T16763] netlink: 'syz.0.2627': attribute type 10 has an invalid length. [ 924.537215][T16763] batadv0: left promiscuous mode [ 924.562807][T16763] batadv0: left allmulticast mode [ 924.593824][T16763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.626896][T16763] batadv0: entered promiscuous mode [ 924.651758][T16763] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 924.735777][T16767] binder: 16764:16767 ioctl 5419 800000c0 returned -22 [ 925.245224][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2630'. [ 926.064513][ T5836] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 927.402610][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 927.422384][T16822] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 927.801338][T16828] lo: entered allmulticast mode [ 927.822058][T16827] lo: left allmulticast mode [ 927.867994][T16825] netlink: 'syz.2.2645': attribute type 20 has an invalid length. [ 928.027130][T16835] syz_tun: entered allmulticast mode [ 928.178914][T16834] syz_tun: left allmulticast mode [ 928.297312][T16844] binder: 16837:16844 ioctl 5419 800000c0 returned -22 [ 928.314033][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 928.314051][ T30] audit: type=1326 audit(1761443178.986:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 928.499648][ T30] audit: type=1326 audit(1761443178.986:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 928.726436][T16850] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 928.734611][ T30] audit: type=1326 audit(1761443178.986:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 928.768550][ T30] audit: type=1326 audit(1761443178.986:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 928.903242][ T30] audit: type=1326 audit(1761443178.986:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 928.995311][ T5932] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 929.188606][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 929.386670][ T30] audit: type=1326 audit(1761443178.986:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 929.442638][ T30] audit: type=1326 audit(1761443178.986:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 929.442649][ T5932] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 929.442676][ T5932] usb 2-1: config 0 has no interface number 0 [ 929.573364][ T30] audit: type=1326 audit(1761443178.986:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16837 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 930.102597][ T5932] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 930.344126][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.352956][ T5932] usb 2-1: Product: syz [ 930.358247][ T5932] usb 2-1: Manufacturer: syz [ 930.362942][ T5932] usb 2-1: SerialNumber: syz [ 930.377804][ T5932] usb 2-1: config 0 descriptor?? [ 930.414966][ T5932] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 930.434911][ T5932] usb 2-1: Detected SIO [ 930.456702][ T5932] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 931.508960][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.515451][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.627203][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2662'. [ 931.797886][T16888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2663'. [ 931.872488][T13383] usb 2-1: USB disconnect, device number 59 [ 931.915221][T13383] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 931.934603][T13383] ftdi_sio 2-1:0.217: device disconnected [ 932.392168][T16889] netlink: 'syz.2.2659': attribute type 20 has an invalid length. [ 933.730793][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 934.074657][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 934.236512][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.249030][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 934.258774][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.270080][ T9] usb 1-1: config 0 descriptor?? [ 934.490045][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 934.497034][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 934.510156][ T9] usb 1-1: USB disconnect, device number 67 [ 934.535733][T16949] netlink: 'syz.1.2683': attribute type 20 has an invalid length. [ 934.585849][T16949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 935.004976][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 935.155096][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 935.166788][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.206923][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 935.266689][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.313073][ T9] usb 1-1: config 0 descriptor?? [ 935.544313][T13383] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 935.664181][ T5932] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 935.674543][T13383] usb 3-1: device descriptor read/64, error -71 [ 935.748690][ T9] kye 0003:0458:5016.001C: control desc unexpectedly large [ 935.774504][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001C/input/input39 [ 935.814158][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 935.823433][ T5932] usb 4-1: config 0 has no interfaces? [ 935.832691][ T5932] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 935.844308][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.852498][ T5932] usb 4-1: Product: syz [ 935.857660][ T5932] usb 4-1: Manufacturer: syz [ 935.862436][ T5932] usb 4-1: SerialNumber: syz [ 935.884595][ T5932] usb 4-1: config 0 descriptor?? [ 935.918022][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001C/input/input40 [ 935.934225][T13383] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 936.047681][ T9] kye 0003:0458:5016.001C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 936.074099][T13383] usb 3-1: device descriptor read/64, error -71 [ 936.104427][ T5932] usb 4-1: USB disconnect, device number 63 [ 936.198491][T13383] usb usb3-port1: attempt power cycle [ 936.555938][ T24] usb 1-1: USB disconnect, device number 68 [ 936.585122][T13383] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 936.616106][T13383] usb 3-1: device descriptor read/8, error -71 [ 936.924032][T13383] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 936.954831][T13383] usb 3-1: device descriptor read/8, error -71 [ 937.027122][T16987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 937.065408][T13383] usb usb3-port1: unable to enumerate USB device [ 937.307281][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 937.479375][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 937.486424][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 937.498045][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 937.512517][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 937.527486][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.541155][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 937.550968][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.563816][T16998] netlink: 'syz.0.2699': attribute type 20 has an invalid length. [ 937.591005][T16998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 937.778526][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 937.784162][ T9] usbtmc 4-1:16.0: can't read capabilities [ 938.037953][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 938.048299][T17002] usbtmc 4-1:16.0: Unable to send data, error -71 [ 938.074087][T13383] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 938.109105][ T9] usb 4-1: USB disconnect, device number 64 [ 938.156504][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 938.168429][T17004] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2702'. [ 938.264329][T13383] usb 5-1: Using ep0 maxpacket: 8 [ 938.274456][T13383] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 938.283035][T13383] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 938.302431][T13383] usb 5-1: config 0 has no interface number 0 [ 938.311329][T13383] usb 5-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.335889][T13383] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 938.354075][T13383] usb 5-1: New USB device strings: Mfr=25, Product=1, SerialNumber=0 [ 938.366811][T13383] usb 5-1: Product: syz [ 938.371004][T13383] usb 5-1: Manufacturer: syz [ 938.378630][T13383] usb 5-1: config 0 descriptor?? [ 938.667261][ T5829] usb 5-1: USB disconnect, device number 63 [ 938.714075][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 938.831807][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2706'. [ 938.894584][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 938.901122][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.919005][ T9] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 938.930923][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.969271][ T9] usb 1-1: Product: syz [ 939.043854][ T9] usb 1-1: Manufacturer: syz [ 939.089241][ T9] usb 1-1: SerialNumber: syz [ 939.112251][ T9] usb 1-1: config 0 descriptor?? [ 939.394049][T13383] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 939.507829][T17029] input: syz1 as /devices/virtual/input/input41 [ 939.564249][T13383] usb 4-1: Using ep0 maxpacket: 16 [ 939.608781][T13383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 939.632589][T13383] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 939.650050][T13383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.658600][T13383] usb 4-1: Product: syz [ 939.662864][T13383] usb 4-1: Manufacturer: syz [ 939.668076][T13383] usb 4-1: SerialNumber: syz [ 939.772180][T13383] usb 4-1: config 0 descriptor?? [ 939.943223][T13383] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 939.964859][T13383] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 940.594187][T13383] em28xx 4-1:0.0: chip ID is em2765 [ 940.736092][T17047] netlink: 'syz.4.2713': attribute type 20 has an invalid length. [ 940.747547][T17047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.207574][T13383] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 941.236918][T13383] em28xx 4-1:0.0: board has no eeprom [ 941.443622][ T30] audit: type=1326 audit(1761443192.086:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 941.491165][ T5829] usb 1-1: USB disconnect, device number 69 [ 941.821728][ T30] audit: type=1326 audit(1761443192.086:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 941.912504][ T30] audit: type=1326 audit(1761443192.086:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.043528][ T30] audit: type=1326 audit(1761443192.086:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.103518][ T30] audit: type=1326 audit(1761443192.096:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.154230][ T30] audit: type=1326 audit(1761443192.096:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.177173][ T30] audit: type=1326 audit(1761443192.096:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.200143][ T30] audit: type=1326 audit(1761443192.096:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.269006][ T30] audit: type=1326 audit(1761443192.096:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.316836][T17073] netlink: 'syz.1.2720': attribute type 20 has an invalid length. [ 942.325181][T17073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 942.355270][ T30] audit: type=1326 audit(1761443192.096:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 942.471324][T17066] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 942.534094][T13383] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 942.546222][T13383] em28xx 4-1:0.0: dvb set to bulk mode. [ 942.580727][ T24] em28xx 4-1:0.0: Binding DVB extension [ 942.613436][T13383] usb 4-1: USB disconnect, device number 65 [ 942.686398][T13383] em28xx 4-1:0.0: Disconnecting em28xx [ 942.778724][ T24] em28xx 4-1:0.0: Registering input extension [ 942.788841][T13383] em28xx 4-1:0.0: Closing input extension [ 942.873691][T17081] syzkaller1: entered promiscuous mode [ 942.906168][T17081] syzkaller1: entered allmulticast mode [ 942.912042][T13383] em28xx 4-1:0.0: Freeing device [ 943.089206][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 943.424598][ T5829] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 943.565847][T17095] netlink: 'syz.3.2726': attribute type 10 has an invalid length. [ 943.924036][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 943.930761][ T5829] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 943.942119][ T5829] usb 2-1: config 0 has no interface number 0 [ 944.092831][ T5829] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 944.192424][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.200651][ T5829] usb 2-1: Product: syz [ 944.208524][ T5829] usb 2-1: Manufacturer: syz [ 944.219862][ T5829] usb 2-1: SerialNumber: syz [ 944.234083][T13383] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 944.248578][ T5829] usb 2-1: config 0 descriptor?? [ 944.269420][ T5829] kvaser_usb 2-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 944.544105][T13383] usb 4-1: Using ep0 maxpacket: 32 [ 944.578512][ T5932] usb 2-1: USB disconnect, device number 60 [ 944.748968][T13383] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 944.772533][T13383] usb 4-1: config 0 has no interface number 0 [ 944.941599][T13383] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 944.991415][T13383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.024072][T13383] usb 4-1: Product: syz [ 945.034508][T13383] usb 4-1: Manufacturer: syz [ 945.043282][T13383] usb 4-1: SerialNumber: syz [ 945.068732][T13383] usb 4-1: config 0 descriptor?? [ 945.080536][T13383] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 945.098246][T13383] usb 4-1: Detected SIO [ 945.290437][T13383] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 945.590084][T17123] syz_tun: entered allmulticast mode [ 945.601683][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'. [ 945.633625][T17123] syz_tun (unregistering): left allmulticast mode [ 945.667374][T17125] binder: 17118:17125 ioctl 5419 800000c0 returned -22 [ 946.455726][ T5932] usb 4-1: USB disconnect, device number 66 [ 946.500262][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 946.510427][ T5932] ftdi_sio 4-1:0.217: device disconnected [ 946.602654][T17136] netlink: 'syz.0.2739': attribute type 20 has an invalid length. [ 946.614929][T17136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.708115][T17144] binder: 17141:17144 ioctl 5419 800000c0 returned -22 [ 946.726588][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 946.726606][ T30] audit: type=1326 audit(1761443197.396:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 946.841888][ T30] audit: type=1326 audit(1761443197.396:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 947.004042][ T30] audit: type=1326 audit(1761443197.396:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 947.312044][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 947.353479][ T30] audit: type=1326 audit(1761443197.396:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 947.484497][ T30] audit: type=1326 audit(1761443197.406:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 947.514733][ T30] audit: type=1326 audit(1761443197.406:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 947.537805][ T30] audit: type=1326 audit(1761443197.406:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 947.564276][ T30] audit: type=1326 audit(1761443197.446:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17141 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 947.706679][T17158] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2744'. [ 949.587764][T17183] vlan0: entered promiscuous mode [ 949.597076][T17183] syz_tun: entered promiscuous mode [ 950.220881][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2755'. [ 950.267403][T17196] netlink: 'syz.2.2756': attribute type 20 has an invalid length. [ 950.854324][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 951.054073][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 951.077975][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 951.154104][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 951.176921][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 951.204051][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 951.223227][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 951.233330][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 951.248043][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 951.258511][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.284739][ T24] usb 4-1: config 0 descriptor?? [ 951.304906][T17204] binder: 17203:17204 ioctl 5419 800000c0 returned -22 [ 951.316815][ T30] audit: type=1326 audit(1761443201.986:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 951.360565][ T30] audit: type=1326 audit(1761443201.996:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 951.473695][T17212] binder: 17207:17212 ioctl 5419 800000c0 returned -22 [ 951.511528][ T24] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 951.674634][T17215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2762'. [ 951.875263][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 951.875284][ T30] audit: type=1326 audit(1761443202.506:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 951.905506][ T24] usb 4-1: USB disconnect, device number 67 [ 951.921878][ T24] usblp0: removed [ 951.941434][ T30] audit: type=1326 audit(1761443202.506:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17207 comm="syz.1.2760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 952.234134][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 952.404308][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 952.414332][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 952.422809][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 952.446306][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 952.497154][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 952.513111][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 952.525879][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 952.539447][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 952.549426][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.561755][ T24] usb 4-1: config 0 descriptor?? [ 952.777550][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.825017][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.866771][ T24] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 953.130664][T17231] netlink: 'syz.2.2764': attribute type 10 has an invalid length. [ 953.156989][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 953.334114][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 953.354307][ T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.383652][ T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.400972][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 953.408560][ T5829] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 953.620153][ T24] usb 4-1: USB disconnect, device number 68 [ 953.661088][ T9] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 953.676459][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.696189][ T9] usb 5-1: config 0 descriptor?? [ 953.750975][T17201] usblp0: removed [ 953.864068][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 953.876597][ T5829] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 953.914045][ T5829] usb 3-1: config 0 has no interface number 0 [ 953.989310][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 954.010391][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 954.035111][ T5829] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 954.045032][ T9] usb 5-1: USB disconnect, device number 64 [ 954.052335][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.097221][ T5829] usb 3-1: Product: syz [ 954.117328][ T5829] usb 3-1: Manufacturer: syz [ 954.146254][ T5829] usb 3-1: SerialNumber: syz [ 954.195574][ T5829] usb 3-1: config 0 descriptor?? [ 954.239453][ T5829] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected [ 954.335283][ T5829] usb 3-1: Detected SIO [ 954.368379][ T5829] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 955.044374][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2770'. [ 955.176081][T17245] netlink: 'syz.3.2769': attribute type 20 has an invalid length. [ 955.188118][T17245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 955.315133][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2771'. [ 955.787326][T17259] netlink: 'syz.4.2772': attribute type 20 has an invalid length. [ 955.795356][T17259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 955.922987][ T24] usb 3-1: USB disconnect, device number 57 [ 955.931001][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 955.947829][ T24] ftdi_sio 3-1:0.217: device disconnected [ 956.910242][T17273] binder: 17270:17273 ioctl 5419 800000c0 returned -22 [ 956.945016][ T30] audit: type=1326 audit(1761443207.596:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.069185][ T30] audit: type=1326 audit(1761443207.596:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.153110][ T30] audit: type=1326 audit(1761443207.596:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.211775][ T30] audit: type=1326 audit(1761443207.596:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.257611][ T30] audit: type=1326 audit(1761443207.596:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.290339][ T30] audit: type=1326 audit(1761443207.596:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.333804][ T30] audit: type=1326 audit(1761443207.606:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.404758][ T30] audit: type=1326 audit(1761443207.606:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 957.486674][T17279] binder: 17278:17279 ioctl 5419 800000c0 returned -22 [ 957.501511][ T30] audit: type=1326 audit(1761443208.176:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 957.616338][ T30] audit: type=1326 audit(1761443208.206:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 957.752362][T17282] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 957.780433][T17284] netlink: 'syz.4.2781': attribute type 4 has an invalid length. [ 958.130858][T17295] syzkaller0: entered promiscuous mode [ 958.201894][T17295] syzkaller0: entered allmulticast mode [ 958.404133][T17297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 958.410358][T17297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 958.419546][T17297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 958.426228][T17297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 959.119773][T17309] netlink: 'syz.3.2787': attribute type 4 has an invalid length. [ 959.714645][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2789'. [ 959.907600][T17323] usb usb8: usbfs: process 17323 (syz.4.2790) did not claim interface 0 before use [ 960.081436][T17330] binder: 17324:17330 ioctl 5419 800000c0 returned -22 [ 960.317524][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 960.387408][T13493] Bluetooth: hci0: command 0x0406 tx timeout [ 960.464147][T13493] Bluetooth: hci4: command 0x0406 tx timeout [ 960.470278][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 960.476361][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 960.717433][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 960.770970][ T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 960.801836][ T24] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 960.832575][ T24] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.844194][ T24] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 960.863816][ T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 960.873125][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.881212][ T24] usb 3-1: Product: syz [ 960.887076][ T24] usb 3-1: Manufacturer: syz [ 960.906184][ T24] usb 3-1: SerialNumber: syz [ 961.241688][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 961.444908][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input43 [ 961.588520][ T24] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 961.634430][T17342] binder: 17338:17342 ioctl 5419 800000c0 returned -22 [ 961.725155][ T24] (id 0x00) [ 961.901812][ T24] rc_core: IR keymap rc-imon-pad not found [ 961.901917][T17349] [ 961.907770][ T24] Registered IR keymap rc-empty [ 961.909982][T17349] ===================================================== [ 961.909996][T17349] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 961.910021][T17349] syzkaller #0 Not tainted [ 961.910033][T17349] ----------------------------------------------------- [ 961.915614][ T24] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 961.921784][T17349] syz.3.2799/17349 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 961.958483][T17349] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 961.958548][T17349] [ 961.958548][T17349] and this task is already holding: [ 961.958556][T17349] ffff8880277c2620 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 961.958603][T17349] which would create a new lock dependency: [ 961.958611][T17349] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 961.958658][T17349] [ 961.958658][T17349] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 961.958668][T17349] (&dev->event_lock#2){..-.}-{3:3} [ 961.958693][T17349] [ 961.958693][T17349] ... which became SOFTIRQ-irq-safe at: [ 961.958705][T17349] lock_acquire+0x120/0x360 [ 961.958724][T17349] _raw_spin_lock_irqsave+0xa7/0xf0 [ 961.958747][T17349] input_event+0x76/0xe0 [ 961.958774][T17349] hidinput_report_event+0xa1/0x100 [ 961.958802][T17349] hid_report_raw_event+0x148b/0x16d0 [ 961.958825][T17349] hid_input_report+0x43e/0x520 [ 961.958847][T17349] hid_irq_in+0x47e/0x6d0 [ 961.958864][T17349] __usb_hcd_giveback_urb+0x376/0x540 [ 961.958886][T17349] dummy_timer+0x85f/0x44c0 [ 961.958905][T17349] __hrtimer_run_queues+0x52c/0xc60 [ 961.958927][T17349] hrtimer_run_softirq+0x187/0x2b0 [ 961.958948][T17349] handle_softirqs+0x286/0x870 [ 961.958967][T17349] __irq_exit_rcu+0xca/0x1f0 [ 961.958986][T17349] irq_exit_rcu+0x9/0x30 [ 961.959003][T17349] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 961.959027][T17349] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 961.959048][T17349] pv_native_safe_halt+0x13/0x20 [ 961.959071][T17349] default_idle+0x13/0x20 [ 961.959097][T17349] default_idle_call+0x73/0xb0 [ 961.959125][T17349] do_idle+0x1e7/0x510 [ 961.959144][T17349] cpu_startup_entry+0x44/0x60 [ 961.959164][T17349] rest_init+0x2de/0x300 [ 961.959180][T17349] start_kernel+0x3ae/0x410 [ 961.959204][T17349] x86_64_start_reservations+0x24/0x30 [ 961.959224][T17349] x86_64_start_kernel+0x143/0x1c0 [ 961.959242][T17349] common_startup_64+0x13e/0x147 [ 961.959268][T17349] [ 961.959268][T17349] to a SOFTIRQ-irq-unsafe lock: [ 961.959277][T17349] (tasklist_lock){.+.+}-{3:3} [ 961.959297][T17349] [ 961.959297][T17349] ... which became SOFTIRQ-irq-unsafe at: [ 961.959307][T17349] ... [ 961.959312][T17349] lock_acquire+0x120/0x360 [ 961.959330][T17349] _raw_read_lock+0x36/0x50 [ 961.959351][T17349] __do_wait+0xde/0x740 [ 961.959375][T17349] do_wait+0x1f8/0x510 [ 961.959400][T17349] kernel_wait+0xab/0x170 [ 961.959426][T17349] call_usermodehelper_exec_work+0xbe/0x230 [ 961.959452][T17349] process_scheduled_works+0xae1/0x17b0 [ 961.959472][T17349] worker_thread+0x8a0/0xda0 [ 961.959491][T17349] kthread+0x711/0x8a0 [ 961.959516][T17349] ret_from_fork+0x4bc/0x870 [ 961.959534][T17349] ret_from_fork_asm+0x1a/0x30 [ 961.959552][T17349] [ 961.959552][T17349] other info that might help us debug this: [ 961.959552][T17349] [ 961.959560][T17349] Chain exists of: [ 961.959560][T17349] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 961.959560][T17349] [ 961.959603][T17349] Possible interrupt unsafe locking scenario: [ 961.959603][T17349] [ 961.959611][T17349] CPU0 CPU1 [ 961.959619][T17349] ---- ---- [ 961.959626][T17349] lock(tasklist_lock); [ 961.959642][T17349] local_irq_disable(); [ 961.959651][T17349] lock(&dev->event_lock#2); [ 961.959673][T17349] lock(&f_owner->lock); [ 961.959690][T17349] [ 961.959697][T17349] lock(&dev->event_lock#2); [ 961.959718][T17349] [ 961.959718][T17349] *** DEADLOCK *** [ 961.959718][T17349] [ 961.959725][T17349] 2 locks held by syz.3.2799/17349: [ 961.959737][T17349] #0: ffff88807cc23158 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 961.959789][T17349] #1: ffff8880277c2620 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 961.959842][T17349] [ 961.959842][T17349] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 961.959853][T17349] -> (&dev->event_lock#2){..-.}-{3:3} { [ 961.959888][T17349] IN-SOFTIRQ-W at: [ 961.959901][T17349] lock_acquire+0x120/0x360 [ 961.959920][T17349] _raw_spin_lock_irqsave+0xa7/0xf0 [ 961.959961][T17349] input_event+0x76/0xe0 [ 961.959988][T17349] hidinput_report_event+0xa1/0x100 [ 961.960016][T17349] hid_report_raw_event+0x148b/0x16d0 [ 961.960040][T17349] hid_input_report+0x43e/0x520 [ 961.960063][T17349] hid_irq_in+0x47e/0x6d0 [ 961.960080][T17349] __usb_hcd_giveback_urb+0x376/0x540 [ 961.960102][T17349] dummy_timer+0x85f/0x44c0 [ 961.960122][T17349] __hrtimer_run_queues+0x52c/0xc60 [ 961.960143][T17349] hrtimer_run_softirq+0x187/0x2b0 [ 961.960165][T17349] handle_softirqs+0x286/0x870 [ 961.960184][T17349] __irq_exit_rcu+0xca/0x1f0 [ 961.960203][T17349] irq_exit_rcu+0x9/0x30 [ 961.960223][T17349] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 961.960247][T17349] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 961.960268][T17349] pv_native_safe_halt+0x13/0x20 [ 961.960291][T17349] default_idle+0x13/0x20 [ 961.960318][T17349] default_idle_call+0x73/0xb0 [ 961.960346][T17349] do_idle+0x1e7/0x510 [ 961.960365][T17349] cpu_startup_entry+0x44/0x60 [ 961.960386][T17349] rest_init+0x2de/0x300 [ 961.960403][T17349] start_kernel+0x3ae/0x410 [ 961.960427][T17349] x86_64_start_reservations+0x24/0x30 [ 961.960455][T17349] x86_64_start_kernel+0x143/0x1c0 [ 961.960475][T17349] common_startup_64+0x13e/0x147 [ 961.960500][T17349] INITIAL USE at: [ 961.960513][T17349] lock_acquire+0x120/0x360 [ 961.960530][T17349] _raw_spin_lock_irqsave+0xa7/0xf0 [ 961.960552][T17349] input_inject_event+0xa5/0x340 [ 961.960578][T17349] kbd_led_trigger_activate+0xbc/0x100 [ 961.960600][T17349] led_trigger_set+0x52d/0x950 [ 961.960622][T17349] led_trigger_set_default+0x260/0x2a0 [ 961.960644][T17349] led_classdev_register_ext+0x73d/0x930 [ 961.960664][T17349] input_leds_connect+0x517/0x790 [ 961.960682][T17349] input_register_device+0xd00/0x1140 [ 961.960703][T17349] atkbd_connect+0x72e/0xa00 [ 961.960726][T17349] serio_driver_probe+0x82/0xd0 [ 961.960746][T17349] really_probe+0x26d/0x9e0 [ 961.960771][T17349] __driver_probe_device+0x18c/0x2f0 [ 961.960794][T17349] driver_probe_device+0x4f/0x430 [ 961.960819][T17349] __driver_attach+0x452/0x700 [ 961.960842][T17349] bus_for_each_dev+0x233/0x2b0 [ 961.960859][T17349] serio_handle_event+0x1f9/0x8d0 [ 961.960881][T17349] process_scheduled_works+0xae1/0x17b0 [ 961.960902][T17349] worker_thread+0x8a0/0xda0 [ 961.960923][T17349] kthread+0x711/0x8a0 [ 961.960946][T17349] ret_from_fork+0x4bc/0x870 [ 961.960963][T17349] ret_from_fork_asm+0x1a/0x30 [ 961.960981][T17349] } [ 961.960988][T17349] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 961.961017][T17349] -> (&client->buffer_lock){....}-{3:3} { [ 961.961047][T17349] INITIAL USE at: [ 961.961060][T17349] lock_acquire+0x120/0x360 [ 961.961078][T17349] _raw_spin_lock+0x2e/0x40 [ 961.961099][T17349] evdev_pass_values+0xb9/0xbd0 [ 961.961121][T17349] evdev_events+0x1e6/0x340 [ 961.961142][T17349] input_pass_values+0x288/0x890 [ 961.961162][T17349] input_event_dispose+0x330/0x6b0 [ 961.961190][T17349] input_inject_event+0x1dd/0x340 [ 961.961218][T17349] evdev_write+0x2fc/0x480 [ 961.961240][T17349] vfs_write+0x27e/0xb30 [ 961.961266][T17349] ksys_write+0x145/0x250 [ 961.961292][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.961319][T17349] do_fast_syscall_32+0x34/0x80 [ 961.961344][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.961367][T17349] } [ 961.961374][T17349] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 961.961402][T17349] ... acquired at: [ 961.961409][T17349] lock_acquire+0x120/0x360 [ 961.961426][T17349] _raw_spin_lock+0x2e/0x40 [ 961.961452][T17349] evdev_pass_values+0xb9/0xbd0 [ 961.961474][T17349] evdev_events+0x1e6/0x340 [ 961.961494][T17349] input_pass_values+0x288/0x890 [ 961.961514][T17349] input_event_dispose+0x330/0x6b0 [ 961.961541][T17349] input_inject_event+0x1dd/0x340 [ 961.961568][T17349] evdev_write+0x2fc/0x480 [ 961.961589][T17349] vfs_write+0x27e/0xb30 [ 961.961613][T17349] ksys_write+0x145/0x250 [ 961.961638][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.961664][T17349] do_fast_syscall_32+0x34/0x80 [ 961.961689][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.961712][T17349] [ 961.961717][T17349] -> (&new->fa_lock){....}-{3:3} { [ 961.961744][T17349] INITIAL USE at: [ 961.961757][T17349] lock_acquire+0x120/0x360 [ 961.961776][T17349] _raw_write_lock_irq+0xa2/0xf0 [ 961.961798][T17349] fasync_remove_entry+0xf1/0x1c0 [ 961.961821][T17349] sock_fasync+0x85/0xf0 [ 961.961844][T17349] __fput+0x8a2/0xa70 [ 961.961865][T17349] task_work_run+0x1d4/0x260 [ 961.961892][T17349] get_signal+0x11ec/0x1340 [ 961.961911][T17349] arch_do_signal_or_restart+0xa0/0x790 [ 961.961940][T17349] exit_to_user_mode_loop+0x72/0x130 [ 961.961958][T17349] do_int80_emulation+0x2a0/0x390 [ 961.961985][T17349] asm_int80_emulation+0x1a/0x20 [ 961.962004][T17349] INITIAL READ USE at: [ 961.962017][T17349] lock_acquire+0x120/0x360 [ 961.962034][T17349] _raw_read_lock_irqsave+0xaf/0x100 [ 961.962058][T17349] kill_fasync+0x199/0x4d0 [ 961.962080][T17349] __start_tty+0x18c/0x220 [ 961.962105][T17349] start_tty+0x2b/0x70 [ 961.962128][T17349] n_tty_set_termios+0xa7c/0x1090 [ 961.962148][T17349] tty_set_termios+0xda4/0x17e0 [ 961.962171][T17349] set_termios+0x516/0x6c0 [ 961.962191][T17349] tty_mode_ioctl+0x47e/0x740 [ 961.962215][T17349] tty_ioctl+0x9c6/0xde0 [ 961.962241][T17349] __ia32_compat_sys_ioctl+0x543/0x840 [ 961.962267][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.962294][T17349] do_fast_syscall_32+0x34/0x80 [ 961.962320][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.962344][T17349] } [ 961.962351][T17349] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 961.962377][T17349] ... acquired at: [ 961.962385][T17349] lock_acquire+0x120/0x360 [ 961.962403][T17349] _raw_read_lock_irqsave+0xaf/0x100 [ 961.962425][T17349] kill_fasync+0x199/0x4d0 [ 961.962452][T17349] evdev_pass_values+0x627/0xbd0 [ 961.962473][T17349] evdev_events+0x1e6/0x340 [ 961.962493][T17349] input_pass_values+0x288/0x890 [ 961.962513][T17349] input_event_dispose+0x330/0x6b0 [ 961.962540][T17349] input_inject_event+0x1dd/0x340 [ 961.962566][T17349] evdev_write+0x2fc/0x480 [ 961.962586][T17349] vfs_write+0x27e/0xb30 [ 961.962610][T17349] ksys_write+0x145/0x250 [ 961.962635][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.962661][T17349] do_fast_syscall_32+0x34/0x80 [ 961.962687][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.962710][T17349] [ 961.962715][T17349] -> (&f_owner->lock){....}-{3:3} { [ 961.962745][T17349] INITIAL USE at: [ 961.962757][T17349] lock_acquire+0x120/0x360 [ 961.962775][T17349] _raw_write_lock_irq+0xa2/0xf0 [ 961.962797][T17349] __f_setown+0x67/0x370 [ 961.962818][T17349] tty_fasync+0x2dc/0x350 [ 961.962835][T17349] do_vfs_ioctl+0x1064/0x1430 [ 961.962859][T17349] __ia32_compat_sys_ioctl+0x4bd/0x840 [ 961.962884][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.962910][T17349] do_fast_syscall_32+0x34/0x80 [ 961.962936][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.962958][T17349] INITIAL READ USE at: [ 961.962970][T17349] lock_acquire+0x120/0x360 [ 961.962988][T17349] _raw_read_lock_irqsave+0xaf/0x100 [ 961.963011][T17349] send_sigio+0x38/0x370 [ 961.963032][T17349] kill_fasync+0x24d/0x4d0 [ 961.963054][T17349] __start_tty+0x18c/0x220 [ 961.963077][T17349] start_tty+0x2b/0x70 [ 961.963100][T17349] n_tty_set_termios+0xa7c/0x1090 [ 961.963120][T17349] tty_set_termios+0xda4/0x17e0 [ 961.963142][T17349] set_termios+0x516/0x6c0 [ 961.963165][T17349] tty_mode_ioctl+0x47e/0x740 [ 961.963187][T17349] tty_ioctl+0x9c6/0xde0 [ 961.963213][T17349] __ia32_compat_sys_ioctl+0x543/0x840 [ 961.963238][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.963264][T17349] do_fast_syscall_32+0x34/0x80 [ 961.963290][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.963314][T17349] } [ 961.963321][T17349] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 961.963344][T17349] ... acquired at: [ 961.963352][T17349] lock_acquire+0x120/0x360 [ 961.963368][T17349] _raw_read_lock_irqsave+0xaf/0x100 [ 961.963390][T17349] send_sigio+0x38/0x370 [ 961.963410][T17349] kill_fasync+0x24d/0x4d0 [ 961.963432][T17349] __start_tty+0x18c/0x220 [ 961.963460][T17349] start_tty+0x2b/0x70 [ 961.963482][T17349] n_tty_set_termios+0xa7c/0x1090 [ 961.963501][T17349] tty_set_termios+0xda4/0x17e0 [ 961.963523][T17349] set_termios+0x516/0x6c0 [ 961.963545][T17349] tty_mode_ioctl+0x47e/0x740 [ 961.963567][T17349] tty_ioctl+0x9c6/0xde0 [ 961.963591][T17349] __ia32_compat_sys_ioctl+0x543/0x840 [ 961.963615][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.963640][T17349] do_fast_syscall_32+0x34/0x80 [ 961.963665][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.963689][T17349] [ 961.963694][T17349] [ 961.963694][T17349] the dependencies between the lock to be acquired [ 961.963702][T17349] and SOFTIRQ-irq-unsafe lock: [ 961.963726][T17349] -> (tasklist_lock){.+.+}-{3:3} { [ 961.963753][T17349] HARDIRQ-ON-R at: [ 961.963766][T17349] lock_acquire+0x120/0x360 [ 961.963784][T17349] _raw_read_lock+0x36/0x50 [ 961.963805][T17349] __do_wait+0xde/0x740 [ 961.963831][T17349] do_wait+0x1f8/0x510 [ 961.963866][T17349] kernel_wait+0xab/0x170 [ 961.963893][T17349] call_usermodehelper_exec_work+0xbe/0x230 [ 961.963912][T17349] process_scheduled_works+0xae1/0x17b0 [ 961.963932][T17349] worker_thread+0x8a0/0xda0 [ 961.963948][T17349] kthread+0x711/0x8a0 [ 961.963967][T17349] ret_from_fork+0x4bc/0x870 [ 961.963982][T17349] ret_from_fork_asm+0x1a/0x30 [ 961.963998][T17349] SOFTIRQ-ON-R at: [ 961.964010][T17349] lock_acquire+0x120/0x360 [ 961.964027][T17349] _raw_read_lock+0x36/0x50 [ 961.964048][T17349] __do_wait+0xde/0x740 [ 961.964074][T17349] do_wait+0x1f8/0x510 [ 961.964100][T17349] kernel_wait+0xab/0x170 [ 961.964127][T17349] call_usermodehelper_exec_work+0xbe/0x230 [ 961.964147][T17349] process_scheduled_works+0xae1/0x17b0 [ 961.964166][T17349] worker_thread+0x8a0/0xda0 [ 961.964186][T17349] kthread+0x711/0x8a0 [ 961.964209][T17349] ret_from_fork+0x4bc/0x870 [ 961.964228][T17349] ret_from_fork_asm+0x1a/0x30 [ 961.964252][T17349] INITIAL USE at: [ 961.964264][T17349] lock_acquire+0x120/0x360 [ 961.964282][T17349] _raw_write_lock_irq+0xa2/0xf0 [ 961.964333][T17349] copy_process+0x224f/0x3c00 [ 961.964354][T17349] kernel_clone+0x21e/0x840 [ 961.964376][T17349] user_mode_thread+0xdd/0x140 [ 961.964399][T17349] rest_init+0x23/0x300 [ 961.964416][T17349] start_kernel+0x3ae/0x410 [ 961.964446][T17349] x86_64_start_reservations+0x24/0x30 [ 961.964467][T17349] x86_64_start_kernel+0x143/0x1c0 [ 961.964486][T17349] common_startup_64+0x13e/0x147 [ 961.964511][T17349] INITIAL READ USE at: [ 961.964524][T17349] lock_acquire+0x120/0x360 [ 961.964542][T17349] _raw_read_lock+0x36/0x50 [ 961.964563][T17349] __do_wait+0xde/0x740 [ 961.964588][T17349] do_wait+0x1f8/0x510 [ 961.964615][T17349] kernel_wait+0xab/0x170 [ 961.964641][T17349] call_usermodehelper_exec_work+0xbe/0x230 [ 961.964661][T17349] process_scheduled_works+0xae1/0x17b0 [ 961.964682][T17349] worker_thread+0x8a0/0xda0 [ 961.964703][T17349] kthread+0x711/0x8a0 [ 961.964728][T17349] ret_from_fork+0x4bc/0x870 [ 961.964746][T17349] ret_from_fork_asm+0x1a/0x30 [ 961.964764][T17349] } [ 961.964771][T17349] ... key at: [] tasklist_lock+0x18/0x40 [ 961.964797][T17349] ... acquired at: [ 961.964804][T17349] lock_acquire+0x120/0x360 [ 961.964821][T17349] _raw_read_lock+0x36/0x50 [ 961.964842][T17349] send_sigurg+0x12b/0x420 [ 961.964862][T17349] sk_send_sigurg+0x6c/0x2e0 [ 961.964886][T17349] queue_oob+0x420/0x4f0 [ 961.964907][T17349] unix_stream_sendmsg+0xc3f/0xdf0 [ 961.964928][T17349] __sock_sendmsg+0x21c/0x270 [ 961.964950][T17349] ____sys_sendmsg+0x52d/0x830 [ 961.964967][T17349] ___sys_sendmsg+0x21f/0x2a0 [ 961.964985][T17349] __sys_sendmmsg+0x28e/0x430 [ 961.965003][T17349] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 961.965023][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.965049][T17349] do_fast_syscall_32+0x34/0x80 [ 961.965075][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.965098][T17349] [ 961.965103][T17349] [ 961.965103][T17349] stack backtrace: [ 961.965117][T17349] CPU: 0 UID: 0 PID: 17349 Comm: syz.3.2799 Not tainted syzkaller #0 PREEMPT(full) [ 961.965141][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 961.965155][T17349] Call Trace: [ 961.965163][T17349] [ 961.965172][T17349] dump_stack_lvl+0x189/0x250 [ 961.965200][T17349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.965226][T17349] ? __pfx__printk+0x10/0x10 [ 961.965251][T17349] validate_chain+0x1f05/0x2140 [ 961.965283][T17349] __lock_acquire+0xab9/0xd20 [ 961.965305][T17349] ? send_sigurg+0x12b/0x420 [ 961.965326][T17349] lock_acquire+0x120/0x360 [ 961.965343][T17349] ? send_sigurg+0x12b/0x420 [ 961.965365][T17349] ? _raw_read_lock_irqsave+0xbb/0x100 [ 961.965393][T17349] _raw_read_lock+0x36/0x50 [ 961.965414][T17349] ? send_sigurg+0x12b/0x420 [ 961.965441][T17349] send_sigurg+0x12b/0x420 [ 961.965465][T17349] sk_send_sigurg+0x6c/0x2e0 [ 961.965490][T17349] queue_oob+0x420/0x4f0 [ 961.965514][T17349] ? __pfx_queue_oob+0x10/0x10 [ 961.965539][T17349] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 961.965562][T17349] unix_stream_sendmsg+0xc3f/0xdf0 [ 961.965587][T17349] ? __lock_acquire+0xab9/0xd20 [ 961.965609][T17349] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 961.965631][T17349] ? __asan_memset+0x22/0x50 [ 961.965656][T17349] ? __import_iovec+0x5d4/0x7f0 [ 961.965680][T17349] ? aa_sock_msg_perm+0xda/0x1d0 [ 961.965709][T17349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 961.965727][T17349] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 961.965748][T17349] __sock_sendmsg+0x21c/0x270 [ 961.965773][T17349] ____sys_sendmsg+0x52d/0x830 [ 961.965796][T17349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.965822][T17349] ___sys_sendmsg+0x21f/0x2a0 [ 961.965842][T17349] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.965862][T17349] ? __pfx___futex_wait+0x10/0x10 [ 961.965895][T17349] ? __fget_files+0x2a/0x420 [ 961.965913][T17349] ? __fget_files+0x3a0/0x420 [ 961.965935][T17349] __sys_sendmmsg+0x28e/0x430 [ 961.965957][T17349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 961.965976][T17349] ? do_futex+0x333/0x420 [ 961.966014][T17349] ? rcu_is_watching+0x15/0xb0 [ 961.966039][T17349] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 961.966061][T17349] __do_fast_syscall_32+0xb6/0x2b0 [ 961.966091][T17349] do_fast_syscall_32+0x34/0x80 [ 961.966116][T17349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 961.966139][T17349] RIP: 0023:0xf7f12539 [ 961.966157][T17349] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 961.966175][T17349] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 961.966194][T17349] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006c40 [ 961.966209][T17349] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 961.966222][T17349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 961.966234][T17349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 961.966247][T17349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 961.966266][T17349] [ 961.966621][ T24] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 961.994571][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 961.995111][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input44 [ 961.996353][ T24] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:58> initialized [ 962.206067][ T9] usb 3-1: USB disconnect, device number 58