last executing test programs: 10m30.930451002s ago: executing program 1 (id=471): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec00000021000100000000000000000afc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 10m30.735204089s ago: executing program 1 (id=473): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic='I']}, 0x18}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, &(0x7f0000000140)="f1ba457c41455416d4c5d2a980636185de8f4b8df4cd9aa11038341664e92bb95015ced5bb0e6f1971bdd9ad", 0x2c, 0x40000001}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r6 = dup2(r1, r0) readv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_DUMPABLE(0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0040000", @ANYRES16=0x0, @ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2009084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="f1791cfd601b4e6bfb1fc6651c0f070d000001a0010014000300776c616e31000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 10m29.545158513s ago: executing program 1 (id=478): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x20000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="c8", 0x1}], 0x1) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="c8", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x10}}], 0x1, 0x4000c50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000004900010000000000000000000a002000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x600) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x4) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000040)) r5 = dup3(r3, r1, 0x54374d878671152b) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c080006"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 10m28.931102185s ago: executing program 1 (id=482): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, 0x0) (async, rerun: 32) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 64) pwritev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="c2fd61244e70672e0df2b7f2d7a4dd0a333aa28da52596406d8e8ff5acf4748615616828b1c5006d4effd4aec5de84616dc69cef69c03d79002ee8100d30a36e18b94d9130deefa0d1a967bac2493aa107ceb8063eeb4770daa17273651767116b2ea4ba0f1bf2b97db799f59344fff16c85a2be811f0d67e1e5fa4de1505134e8141ece590e36b39b88702548670eac9e27d93f6fdfbffa09b384c332d17e7210592a2f0e59982a180c508afd96e37c534b236c7887dfc39ea6923ae8ca52b7c100cae04a4584762aa991ffc52d014ea3ff72a1447b761be8eb9b33332d1f7a154d015bc3fd7ea6cf", 0xe9}, {&(0x7f0000000080)="6e5dc0", 0x3}, {&(0x7f00000002c0)="8341adc6309bc54b35e9ca5261b381b4f32c1c13bc6892be526a6661d465358f9858c68e325a92c682bc4f85ac50bcb112824610c0219570fa672c006d42e6aaa2b1c63ebcea38ad7a2aad7839ea41", 0x4f}], 0x3, 0x9, 0x7fff) (rerun: 64) 10m28.585279368s ago: executing program 1 (id=486): connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) syz_open_procfs$userns(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2c, 0x0, 0x0) unshare(0x22020600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x40, 0x0) fanotify_mark(r3, 0x1, 0x8000003, r0, 0x0) write(r2, &(0x7f0000000140)='f', 0x1) tee(r1, r0, 0x3, 0x0) 10m28.148108134s ago: executing program 1 (id=492): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000020000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 10m27.205807117s ago: executing program 32 (id=492): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000020000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 3m37.279151028s ago: executing program 2 (id=2172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580100001600010000000000000000000000000000000000000000000a000001ffffffff00000000000000000000000000000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c00000000000000000000000000ffffac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000002cbd0000000000000000000000000000000000000000000000000000ff7f00001c00176e"], 0x158}}, 0x0) 3m37.115829739s ago: executing program 2 (id=2174): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000540)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x0, 0xfcff}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @flat=@binder={0x73622a85, 0x180, 0x3}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3m36.813115933s ago: executing program 2 (id=2179): r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0x2f, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 3m36.551411863s ago: executing program 2 (id=2181): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r1) syz_clone(0x203000, 0x0, 0xffffffffffffff59, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0xff03, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000002e00)=""/1, &(0x7f0000000200)=0x1) 3m35.747241783s ago: executing program 2 (id=2186): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) (fail_nth: 8) 3m34.8874582s ago: executing program 2 (id=2190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0xffb1) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfff5}, 0x1c) 3m33.684267258s ago: executing program 33 (id=2190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0xffb1) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfff5}, 0x1c) 7.561096316s ago: executing program 3 (id=3012): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000020000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 7.451101343s ago: executing program 3 (id=3013): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsopen(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = syz_open_dev$video(0x0, 0x485, 0x40400) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0xfff}}) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000080)={0x9a0000, 0x8, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0905, 0xfff, '\x00', @value64=0xc9}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105daae9010203010902"], 0x0) close_range(r1, r1, 0x0) 7.200814518s ago: executing program 5 (id=3014): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4fdff}, 0x0) 6.733144321s ago: executing program 5 (id=3015): socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x81, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x4}) recvmmsg(r0, 0x0, 0x0, 0x2000a002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x1000000, 0x0}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d214000000"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b0000ffef0000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 5.789785648s ago: executing program 6 (id=3018): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) signalfd4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="293c8fd85b3993c0f5ef6f9bb4b242ec03a38023fffa3372acbbca1cc8bb65525addd2fc363794bb8bec0c5c77a13c", 0x2f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x1000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="c40000000002010400000000000000000a000000300001802c0001bfb50003000000000000000000000000000000000114000400fe8000000000000000000000000000bb440003800c00020805030000000000773f00018014000300fc0083f3313c0000000000000000000014000400fe8000000000000000000000000000bb06000340000200003c0500000000000000000100000000002c00018014000300fc02000000000000000000000000000014000400"], 0xc4}}, 0x0) 5.509180921s ago: executing program 6 (id=3020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa40, 0x1ff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000180)={0x1, @raw_data="9d5dcc684d7857bcda7df742eb7fcb9db9d7335d5969e0569fe57b510de14401e488167afb076e80e2571d2c0ecd86f64227098aa93a0023814ab330c4ff0f0000000000002632594f8f6e94eb9e68c55a52d912967db7166c302e09aefc10e9ccf1714f7bee737d7f28c2662c77ddd7512b984348b85d04970d0431177bd4b80200000070da4a6a0f367f42ee2bd48fbd8b62d0e268cf88a0cdd333529b59444dba0e1123565b0bf47bee4089677af86974c54301ba0c4a2f428c00"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.38952345s ago: executing program 3 (id=3022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x402) sched_setscheduler(r0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) write$proc_mixer(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) 5.204746291s ago: executing program 0 (id=3023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2002}, {0x0, 0x0, 0x200000000000}, 0xfffffffe, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5.081363125s ago: executing program 0 (id=3024): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x24004090, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x240540c7, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4) close(r6) 3.777187989s ago: executing program 4 (id=3027): unshare(0x22020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) bind$rxrpc(r0, 0x0, 0x0) 3.70854649s ago: executing program 4 (id=3028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 3.533130152s ago: executing program 6 (id=3029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 2.979113796s ago: executing program 0 (id=3030): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x10000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5], 0x1c}}, 0x0) 2.759456157s ago: executing program 5 (id=3031): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000005780)={&(0x7f0000003340)=@in={0x10, 0x2}, 0x80, 0x0}, 0x100) 2.593217419s ago: executing program 6 (id=3032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) 2.540643775s ago: executing program 5 (id=3033): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8b, 0x40, 0x2, 0x2c}, &(0x7f00000000c0), &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x20, {0x8b37, 0x8000000000000001}, 0x54}, 0x1) 2.395953418s ago: executing program 5 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 1.96917599s ago: executing program 3 (id=3035): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_clone3(&(0x7f0000000200)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.952132384s ago: executing program 5 (id=3036): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f00000004c0)=ANY=[], 0x30, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1400000000000000000000000700000094040000008cdf"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 1.700733089s ago: executing program 4 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140e00000020c0001800800010000000002050014001f00000005000500020000000500010006"], 0x6c}}, 0x0) 1.641145143s ago: executing program 3 (id=3038): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 1.556818916s ago: executing program 4 (id=3039): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 1.433967844s ago: executing program 3 (id=3040): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.375522006s ago: executing program 4 (id=3041): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 1.257206875s ago: executing program 6 (id=3042): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000001040), 0x4) 1.14426008s ago: executing program 6 (id=3043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000140)) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000040)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 614.146172ms ago: executing program 0 (id=3044): rt_tgsigqueueinfo(0x0, 0x0, 0x31, 0x0) 169.094614ms ago: executing program 0 (id=3045): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x8012, r0, 0x0) 62.880094ms ago: executing program 4 (id=3046): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) 0s ago: executing program 0 (id=3047): r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) kernel console output (not intermixed with test programs): 7][ T30] audit: type=1326 audit(1751726369.063:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7fc00000 [ 689.510948][ T30] audit: type=1326 audit(1751726369.063:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7fc00000 [ 689.744036][ T30] audit: type=1326 audit(1751726369.063:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7fc00000 [ 690.103402][ T30] audit: type=1326 audit(1751726369.063:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7fc00000 [ 690.105722][ T43] usb 4-1: USB disconnect, device number 86 [ 690.125890][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.207849][ T30] audit: type=1326 audit(1751726369.063:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7fc00000 [ 690.787501][T15162] vlan2: entered promiscuous mode [ 691.034024][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 691.100727][T15165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.200370][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 691.319402][ T43] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 691.394622][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2487'. [ 691.444601][ T43] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 691.562397][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.576262][ T43] usb 4-1: Product: syz [ 691.585965][ T43] usb 4-1: Manufacturer: syz [ 691.594030][ T43] usb 4-1: SerialNumber: syz [ 691.613891][ T43] usb 4-1: config 0 descriptor?? [ 691.664690][ T43] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 692.373849][T15187] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2491'. [ 692.384332][T15187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2491'. [ 692.393848][T15187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2491'. [ 693.597556][ T43] usb 4-1: USB disconnect, device number 87 [ 693.623890][T15156] delete_channel: no stack [ 693.801915][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2497'. [ 693.891589][T15209] kernel profiling enabled (shift: 17) [ 693.917677][T15209] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 693.925841][T15209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2488'. [ 694.012090][T15209] bridge0: port 3(dummy0) entered blocking state [ 694.019761][T15209] bridge0: port 3(dummy0) entered disabled state [ 694.026375][T15209] dummy0: entered allmulticast mode [ 694.053873][T15209] dummy0: entered promiscuous mode [ 694.064194][T15209] bridge0: port 3(dummy0) entered blocking state [ 694.071968][T15209] bridge0: port 3(dummy0) entered forwarding state [ 694.649239][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 694.701913][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2499'. [ 694.734707][T15217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 694.742057][T15217] IPv6: NLM_F_CREATE should be set when creating new route [ 694.808955][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 694.816762][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 694.837348][ T43] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 694.889448][ T43] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 695.001997][ T43] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 695.079076][ T43] usb 4-1: config 128 has no interface number 0 [ 695.101165][ T43] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 695.227757][ T43] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.312003][ T43] usb 4-1: config 128 interface 127 has no altsetting 0 [ 695.327484][ T43] usb 4-1: language id specifier not provided by device, defaulting to English [ 695.339592][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 695.353316][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.369648][T15222] fuse: Invalid rootmode [ 695.428341][ T43] usb 4-1: Product: syz [ 695.444033][ T43] usb 4-1: Manufacturer: syz [ 695.463903][ T43] usb 4-1: SerialNumber: syz [ 695.890368][ T43] usb 4-1: USB disconnect, device number 88 [ 695.952043][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.238983][ T1781] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 696.389281][ T1781] usb 5-1: device descriptor read/64, error -71 [ 696.547571][T15235] binder: 15234:15235 unknown command 0 [ 696.569294][T15235] binder: 15234:15235 ioctl c0306201 200000000080 returned -22 [ 696.658957][ T1781] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 696.829146][ T1781] usb 5-1: device descriptor read/64, error -71 [ 696.902824][T15244] team_slave_0: entered promiscuous mode [ 696.908714][T15244] team_slave_1: entered promiscuous mode [ 696.931046][T15244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 696.939657][ T1781] usb usb5-port1: attempt power cycle [ 696.951004][T15244] team_slave_0: left promiscuous mode [ 696.951079][T15244] team_slave_1: left promiscuous mode [ 696.955847][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 697.071737][T15251] netlink: 'syz.5.2513': attribute type 29 has an invalid length. [ 697.085035][T15251] netlink: 'syz.5.2513': attribute type 29 has an invalid length. [ 697.097530][T15251] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2513'. [ 697.299366][ T1781] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 697.457066][ T1781] usb 5-1: device descriptor read/8, error -71 [ 697.699001][ T1781] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 697.741458][ T1781] usb 5-1: device descriptor read/8, error -71 [ 697.869232][ T1781] usb usb5-port1: unable to enumerate USB device [ 698.069128][ T43] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 698.268445][T15266] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 698.400925][ T43] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 698.413075][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.441816][ T43] usb 7-1: Product: syz [ 698.447629][ T43] usb 7-1: Manufacturer: syz [ 698.477466][ T43] usb 7-1: SerialNumber: syz [ 698.502363][T15277] Cannot find del_set index 286 as target [ 698.508476][ T43] usb 7-1: config 0 descriptor?? [ 698.795782][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 698.963006][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 699.039957][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 699.093425][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 699.200177][T15269] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 699.206782][T15269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.217406][T15269] vhci_hcd vhci_hcd.0: Device attached [ 699.228563][T15269] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 699.235163][T15269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 699.243160][T15269] vhci_hcd vhci_hcd.0: Device attached [ 699.262000][T15269] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 699.268604][T15269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 699.280180][T15269] vhci_hcd vhci_hcd.0: Device attached [ 699.287196][T15298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 699.309480][T15269] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(11) [ 699.324335][T15269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 699.352999][T15269] vhci_hcd vhci_hcd.0: Device attached [ 699.389575][T15305] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 699.396267][T15305] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 699.404094][ T5946] vhci_hcd: vhci_device speed not set [ 699.419200][T15305] vhci_hcd vhci_hcd.0: Device attached [ 699.419436][ T43] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 699.473532][T15269] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.498958][ T5946] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 699.503491][T15305] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.506814][T15305] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(20) [ 699.506846][T15305] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 699.506938][T15305] vhci_hcd vhci_hcd.0: Device attached [ 699.543644][T15315] netlink: 'syz.5.2530': attribute type 1 has an invalid length. [ 699.545607][T15269] vhci_hcd vhci_hcd.0: port 0 already used [ 699.556355][T15311] vhci_hcd: connection closed [ 699.556849][T15306] vhci_hcd: connection closed [ 699.557158][T15303] vhci_hcd: connection closed [ 699.557463][T15296] vhci_hcd: connection reset by peer [ 699.557623][T15299] vhci_hcd: connection closed [ 699.560397][ T24] usb 7-1: USB disconnect, device number 8 [ 699.566336][ T7652] vhci_hcd: stop threads [ 699.566359][ T7652] vhci_hcd: release socket [ 699.566409][ T7652] vhci_hcd: disconnect device [ 699.566570][ T7652] vhci_hcd: stop threads [ 699.566582][ T7652] vhci_hcd: release socket [ 699.566655][ T7652] vhci_hcd: disconnect device [ 699.566695][T15301] vhci_hcd: connection closed [ 699.566906][ T7652] vhci_hcd: stop threads [ 699.566919][ T7652] vhci_hcd: release socket [ 699.566994][ T7652] vhci_hcd: disconnect device [ 699.567097][ T7652] vhci_hcd: stop threads [ 699.567108][ T7652] vhci_hcd: release socket [ 699.567180][ T7652] vhci_hcd: disconnect device [ 699.567281][ T7652] vhci_hcd: stop threads [ 699.567292][ T7652] vhci_hcd: release socket [ 699.567362][ T7652] vhci_hcd: disconnect device [ 699.567465][ T7652] vhci_hcd: stop threads [ 699.567476][ T7652] vhci_hcd: release socket [ 699.567545][ T7652] vhci_hcd: disconnect device [ 699.622710][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 699.632805][ T43] usb 5-1: config 2 has an invalid interface number: 241 but max is 0 [ 699.632837][ T43] usb 5-1: config 2 has no interface number 0 [ 699.632888][ T43] usb 5-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 699.632914][ T43] usb 5-1: config 2 interface 241 has no altsetting 0 [ 699.642931][ T43] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 699.642967][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.642989][ T43] usb 5-1: Product: syz [ 699.643007][ T43] usb 5-1: Manufacturer: syz [ 699.643023][ T43] usb 5-1: SerialNumber: syz [ 699.659317][ T43] ti_usb_3410_5052 5-1:2.241: TI USB 3410 1 port adapter converter detected [ 699.659542][ T43] ti_usb_3410_5052 5-1:2.241: missing endpoints [ 699.749613][ T980] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 699.903321][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 699.914249][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.914285][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.914313][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 699.914348][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 699.914403][ T980] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 699.914436][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.918153][ T980] usb 1-1: config 0 descriptor?? [ 700.248975][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2534'. [ 700.487485][T15328] netlink: 'syz.6.2535': attribute type 21 has an invalid length. [ 700.557430][T15334] loop6: detected capacity change from 0 to 524288000 [ 700.669315][T15334] support for the xor transformation has been removed. [ 700.854262][ T980] hid-u2fzero 0003:10C4:8ACF.0038: unknown main item tag 0x0 [ 700.865195][ T980] hid-u2fzero 0003:10C4:8ACF.0038: unknown main item tag 0x0 [ 700.870335][ T9] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 700.873596][ T980] hid-u2fzero 0003:10C4:8ACF.0038: unknown main item tag 0x0 [ 700.981476][ T980] hid-u2fzero 0003:10C4:8ACF.0038: unknown main item tag 0x0 [ 701.044916][ T980] hid-u2fzero 0003:10C4:8ACF.0038: unknown main item tag 0x0 [ 701.057743][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 701.074873][ T980] hid-u2fzero 0003:10C4:8ACF.0038: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 701.118007][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.138576][ T980] hid-u2fzero 0003:10C4:8ACF.0038: U2F Zero LED initialised [ 701.180377][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 701.197414][ T980] hid-u2fzero 0003:10C4:8ACF.0038: U2F Zero RNG initialised [ 701.218487][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 701.258494][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.320147][ T9] usb 4-1: config 0 descriptor?? [ 701.549897][T15329] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2536'. [ 701.559270][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 701.909360][ T5919] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 701.934271][T15354] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2542'. [ 702.039605][ T9] hid-steam 0003:28DE:1102.0039: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 702.077369][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 702.094465][ T5919] usb 7-1: config 11 has an invalid interface number: 95 but max is 0 [ 702.103394][ T5919] usb 7-1: config 11 has no interface number 0 [ 702.119030][ T5919] usb 7-1: config 11 interface 95 has no altsetting 0 [ 702.132212][ T5919] usb 7-1: language id specifier not provided by device, defaulting to English [ 702.156509][ T5919] usb 7-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 702.166483][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.178659][ T5919] usb 7-1: Product: syz [ 702.184594][ T5919] usb 7-1: SerialNumber: syz [ 702.240722][ T9] usb 4-1: USB disconnect, device number 89 [ 702.249675][ T980] usb 5-1: USB disconnect, device number 112 [ 702.461740][ T5919] usb 7-1: USB disconnect, device number 9 [ 702.591691][T15357] fido_id[15357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 702.871400][ T980] usb 1-1: USB disconnect, device number 15 [ 702.952046][T15364] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 703.603259][T15382] netlink: 'syz.5.2552': attribute type 1 has an invalid length. [ 703.681607][T15378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2549'. [ 703.769049][T15384] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 704.385407][T15398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2555'. [ 704.413802][ T980] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 704.570419][T15398] overlayfs: missing 'lowerdir' [ 704.579087][ T980] usb 6-1: Using ep0 maxpacket: 32 [ 704.599475][ T980] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 704.608078][ T980] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 704.630332][ T980] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 704.641774][ T5946] vhci_hcd: vhci_device speed not set [ 704.665307][ T980] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 704.700811][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 704.734463][ T980] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 704.745070][ T980] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 704.771295][ T980] usb 6-1: Product: syz [ 704.786058][ T980] usb 6-1: Manufacturer: syz [ 704.796063][ T980] usb 6-1: SerialNumber: syz [ 704.815043][ T980] usb 6-1: config 0 descriptor?? [ 704.831159][ T980] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 704.853467][ T980] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 705.040780][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.050915][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.269308][ T980] usb 6-1: USB disconnect, device number 76 [ 705.364597][ T980] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 707.559446][ T980] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 708.251972][ T980] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 708.265392][ T980] usb 1-1: config 0 has no interface number 0 [ 708.302918][ T980] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 708.336418][ T980] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 708.375338][ T980] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 708.385439][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.401121][ T980] usb 1-1: Product: syz [ 708.405533][ T980] usb 1-1: Manufacturer: syz [ 708.411376][ T980] usb 1-1: SerialNumber: syz [ 708.427115][ T980] usb 1-1: config 0 descriptor?? [ 708.637160][ T980] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 708.655267][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 708.688957][ T980] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 708.708476][ T980] usb 1-1: media controller created [ 708.742543][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.919747][ T980] DVB: Unable to find symbol dib7000p_attach() [ 709.090546][ T980] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 709.193997][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2568'. [ 709.281726][ T980] rc_core: IR keymap rc-dib0700-rc5 not found [ 709.287856][ T980] Registered IR keymap rc-empty [ 709.298265][ T980] dvb-usb: could not initialize remote control. [ 709.304637][ T980] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 709.327278][ T980] dib0700: There's no endpoint for remote controller [ 709.419500][ T5926] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 709.598991][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 709.612656][ T5926] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 709.622524][ T5926] usb 4-1: config 1 has no interface number 0 [ 709.628699][ T5926] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 709.642959][ T980] usb 1-1: USB disconnect, device number 16 [ 709.674132][ T5926] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 709.715052][ T5926] usb 4-1: config 1 interface 105 has no altsetting 0 [ 709.725729][ T980] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 709.765006][ T5926] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 709.765482][T15454] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 709.780679][T15454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 709.781097][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.796513][T15454] vhci_hcd vhci_hcd.0: Device attached [ 709.847850][T15454] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 709.854437][T15454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 709.854750][ T5926] usb 4-1: Product: syz [ 709.898981][ T5926] usb 4-1: Manufacturer: syz [ 709.904238][T15454] vhci_hcd vhci_hcd.0: Device attached [ 709.912840][T15459] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 709.919402][T15459] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 709.937602][ T5926] usb 4-1: SerialNumber: syz [ 709.960264][T15448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 709.977826][T15454] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(8) [ 709.984652][T15454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 709.992070][ T5946] vhci_hcd: vhci_device speed not set [ 709.999170][T15448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 710.012526][T15454] vhci_hcd vhci_hcd.0: Device attached [ 710.027503][T15464] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 710.034197][T15464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 710.052315][T15459] vhci_hcd vhci_hcd.0: Device attached [ 710.058439][T15464] vhci_hcd vhci_hcd.0: Device attached [ 710.067090][T15454] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 710.077660][T15454] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 710.089596][T15454] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(18) [ 710.096275][T15454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 710.107759][T15454] vhci_hcd vhci_hcd.0: Device attached [ 710.109044][ T5946] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 710.144858][T15454] vhci_hcd vhci_hcd.0: port 0 already used [ 710.445439][T15467] vhci_hcd: connection closed [ 710.445716][ T58] vhci_hcd: stop threads [ 710.459530][T15465] vhci_hcd: connection closed [ 710.490227][T15460] vhci_hcd: connection closed [ 710.495089][T15455] vhci_hcd: connection reset by peer [ 710.505394][T15457] vhci_hcd: connection closed [ 710.505728][T15462] vhci_hcd: connection closed [ 710.519653][T15448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 710.549135][ T58] vhci_hcd: release socket [ 710.575896][ T58] vhci_hcd: disconnect device [ 710.597100][T15448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 710.620054][ T58] vhci_hcd: stop threads [ 710.659272][ T58] vhci_hcd: release socket [ 710.681685][ T58] vhci_hcd: disconnect device [ 710.699015][ T58] vhci_hcd: stop threads [ 710.717253][ T58] vhci_hcd: release socket [ 710.755269][ T58] vhci_hcd: disconnect device [ 710.773213][ T58] vhci_hcd: stop threads [ 710.777610][ T58] vhci_hcd: release socket [ 710.819132][ T58] vhci_hcd: disconnect device [ 710.828409][ T58] vhci_hcd: stop threads [ 710.844372][ T58] vhci_hcd: release socket [ 710.855552][ T58] vhci_hcd: disconnect device [ 710.878213][ T58] vhci_hcd: stop threads [ 710.883809][ T58] vhci_hcd: release socket [ 710.898521][ T58] vhci_hcd: disconnect device [ 711.060194][ T5926] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 711.107481][ T5926] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 711.146300][ T5926] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 711.235594][ T5926] aqc111 4-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e6:86:60:c7:8b:83 [ 711.275341][ T5926] usb 4-1: USB disconnect, device number 90 [ 711.289884][ T5926] aqc111 4-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 711.489096][ T1781] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 711.535060][T15496] fuse: Invalid rootmode [ 711.617434][ T5926] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 711.700957][ T5926] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 711.755726][ T5926] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 711.771525][ T1781] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.798364][ T1781] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.850490][ T1781] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 711.850524][ T1781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.862522][T15502] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 711.868687][ T1781] hub 7-1:4.0: USB hub found [ 712.005723][T15502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 712.064465][ T1781] hub 7-1:4.0: 13 ports detected [ 712.228330][ T1781] usb 7-1: selecting invalid altsetting 1 [ 712.234293][ T1781] hub 7-1:4.0: Using single TT (err -22) [ 712.249353][ T1781] hub 7-1:4.0: insufficient power available to use all downstream ports [ 712.409758][T15505] bond7: (slave veth9): Enslaving as an active interface with a down link [ 712.524845][ T1781] usb 7-1: USB disconnect, device number 10 [ 712.604248][T15508] vlan3: entered allmulticast mode [ 712.657709][T15508] bond7: entered allmulticast mode [ 712.692406][T15508] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 713.259878][T15522] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2586'. [ 713.312001][T15524] netlink: 'syz.3.2587': attribute type 1 has an invalid length. [ 713.389115][ T5926] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 713.542047][T15530] netlink: 'syz.6.2589': attribute type 10 has an invalid length. [ 713.560767][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 713.570200][T15530] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2589'. [ 713.599495][T15530] bridge0: port 3(dummy0) entered blocking state [ 713.631722][T15530] bridge0: port 3(dummy0) entered disabled state [ 713.638363][T15530] dummy0: entered allmulticast mode [ 713.640577][ T5926] usb 5-1: config 0 has no interfaces? [ 713.666817][ T5926] usb 5-1: New USB device found, idVendor=0ed0, idProduct=10b8, bcdDevice=de.8e [ 713.677430][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.698658][ T5926] usb 5-1: Product: syz [ 713.714689][ T5926] usb 5-1: Manufacturer: syz [ 713.727588][ T5926] usb 5-1: SerialNumber: syz [ 713.729486][T15530] dummy0: entered promiscuous mode [ 713.749695][T15530] bridge0: port 3(dummy0) entered blocking state [ 713.756322][T15530] bridge0: port 3(dummy0) entered forwarding state [ 713.764369][ T5926] usb 5-1: config 0 descriptor?? [ 713.991995][T15520] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 714.011809][ T1781] usb 5-1: USB disconnect, device number 113 [ 714.631943][ T1781] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 714.712445][T15554] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2599'. [ 714.722220][ T5926] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 714.843526][T15558] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2600'. [ 714.863863][ T1781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.869059][ T5926] usb 7-1: device descriptor read/64, error -71 [ 714.889974][ T1781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.938895][ T1781] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 714.948037][ T1781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.014803][ T1781] usb 4-1: config 0 descriptor?? [ 715.159166][ T5926] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 715.201629][ T5946] vhci_hcd: vhci_device speed not set [ 715.329171][ T5926] usb 7-1: device descriptor read/64, error -71 [ 715.453061][ T5926] usb usb7-port1: attempt power cycle [ 715.463191][ T1781] hid-thrustmaster 0003:044F:B65D.003A: unknown main item tag 0x0 [ 715.488782][ T1781] hid-thrustmaster 0003:044F:B65D.003A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 715.520269][ T1781] hid-thrustmaster 0003:044F:B65D.003A: Wrong number of endpoints? [ 715.612025][T15585] vlan2: entered promiscuous mode [ 715.746126][ C0] hid-thrustmaster 0003:044F:B65D.003A: URB to get model id failed with error -71 [ 715.761316][ T1781] usb 4-1: USB disconnect, device number 91 [ 715.818363][ T5926] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 716.059716][ T5926] usb 7-1: device descriptor read/8, error -71 [ 716.419040][ T5926] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 716.440018][ T5926] usb 7-1: device descriptor read/8, error -71 [ 716.574464][ T5926] usb usb7-port1: unable to enumerate USB device [ 717.582367][T15604] netlink: 'syz.5.2615': attribute type 10 has an invalid length. [ 717.591199][T15604] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2615'. [ 717.658982][ T5933] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 717.841781][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.903001][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.919114][ T5933] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 717.970186][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.992570][ T5933] usb 5-1: config 0 descriptor?? [ 718.441768][ T5933] hid-thrustmaster 0003:044F:B65D.003B: unknown main item tag 0x0 [ 718.474983][ T5933] hid-thrustmaster 0003:044F:B65D.003B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 718.498597][ T5933] hid-thrustmaster 0003:044F:B65D.003B: Wrong number of endpoints? [ 718.762307][ C0] hid-thrustmaster 0003:044F:B65D.003B: URB to get model id failed with error -71 [ 718.775071][ T1781] usb 5-1: USB disconnect, device number 114 [ 718.804348][T15600] netlink: 'syz.0.2616': attribute type 10 has an invalid length. [ 718.831886][T15600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2616'. [ 718.876463][T15600] bridge0: port 3(dummy0) entered blocking state [ 718.917150][T15600] bridge0: port 3(dummy0) entered disabled state [ 718.937361][T15600] dummy0: entered allmulticast mode [ 718.953467][T15600] dummy0: entered promiscuous mode [ 719.025789][T15600] bridge0: port 3(dummy0) entered blocking state [ 719.032401][T15600] bridge0: port 3(dummy0) entered forwarding state [ 719.069004][T15611] fido_id[15611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 719.183042][T15615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2619'. [ 719.500628][T15617] netlink: 'syz.3.2620': attribute type 1 has an invalid length. [ 719.599713][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2622'. [ 719.816261][T15626] kAFS: unable to lookup cell '' [ 720.174412][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2628'. [ 720.312705][ T5926] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 720.479454][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 720.488000][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 720.509946][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 720.519440][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.535652][ T5926] usb 4-1: Product: syz [ 720.549196][ T5926] usb 4-1: Manufacturer: syz [ 720.567011][ T5926] usb 4-1: SerialNumber: syz [ 720.587730][ T5926] usb 4-1: config 0 descriptor?? [ 721.574812][T15665] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2635'. [ 722.040373][T15668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2636'. [ 722.062471][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 722.062489][ T30] audit: type=1326 audit(1751726402.413:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15667 comm="syz.0.2636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x0 [ 722.164758][T15671] hub 1-0:1.0: USB hub found [ 722.185204][T15671] hub 1-0:1.0: 1 port detected [ 722.452636][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2638'. [ 722.655423][T15675] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2639'. [ 722.715064][T15675] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 722.904006][ T9] usb 4-1: USB disconnect, device number 92 [ 723.089531][ T43] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 723.185253][T15693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.239973][T15693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.260448][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 723.357538][ T43] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 723.375472][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.396667][ T43] usb 7-1: Product: syz [ 723.401286][ T43] usb 7-1: Manufacturer: syz [ 723.405966][ T43] usb 7-1: SerialNumber: syz [ 723.415009][ T43] usb 7-1: config 0 descriptor?? [ 723.427981][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 723.589334][ T5946] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 723.919007][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 724.049486][ T5946] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 724.059388][ T5946] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.082674][ T5946] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.337208][ T5946] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.360109][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.384732][ T5946] usb 4-1: Product: syz [ 724.424829][ T5946] usb 4-1: Manufacturer: syz [ 724.466494][ T5946] usb 4-1: SerialNumber: syz [ 724.589252][ T5933] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 724.740581][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.794073][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 724.803874][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.827635][ T5933] usb 1-1: not running at top speed; connect to a high speed hub [ 724.855718][ T5933] usb 1-1: config 3 has an invalid interface number: 106 but max is 0 [ 724.876615][ T5933] usb 1-1: config 3 has no interface number 0 [ 724.920327][ T5933] usb 1-1: config 3 interface 106 has no altsetting 0 [ 724.939327][ T43] gspca_ov534_9: reg_w failed -110 [ 725.081412][ T5926] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 725.098725][ T5933] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 725.136453][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.174128][ T5933] usb 1-1: Product: syz [ 725.193601][ T5933] usb 1-1: Manufacturer: syz [ 725.225414][ T5933] usb 1-1: SerialNumber: syz [ 725.239073][ T43] gspca_ov534_9: Unknown sensor 0000 [ 725.239153][ T43] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 725.256338][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 725.267311][ T5926] usb 5-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 725.287824][ T5926] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 725.298357][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.315317][ T5926] usb 5-1: Product: syz [ 725.324094][ T5926] usb 5-1: Manufacturer: syz [ 725.333864][ T5926] usb 5-1: SerialNumber: syz [ 725.353146][ T5926] usb 5-1: config 0 descriptor?? [ 725.367948][ T5926] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 725.991795][ T9] usb 7-1: USB disconnect, device number 15 [ 726.437214][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 726.486337][T15724] batadv0: entered promiscuous mode [ 726.510838][T15724] macvtap1: entered promiscuous mode [ 726.516810][T15724] macvtap1: entered allmulticast mode [ 726.527899][T15724] batadv0: entered allmulticast mode [ 726.543248][T15724] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 726.632287][T15724] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2656'. [ 726.668654][ T5933] kobil_sct 1-1:3.106: required endpoints missing [ 726.729652][ T5933] usb 1-1: USB disconnect, device number 18 [ 727.135994][T15734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.219190][ T43] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 728.278192][ T5946] usb 4-1: 0:2 : does not exist [ 728.334938][ T5946] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 728.391926][ T5946] usb 4-1: USB disconnect, device number 93 [ 728.414984][ T43] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 728.449027][ T43] usb 6-1: config 0 has no interface number 0 [ 728.474501][ T43] usb 6-1: config 0 interface 171 has no altsetting 0 [ 728.567767][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.594659][ T43] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 728.619519][ T9] usb 5-1: USB disconnect, device number 115 [ 728.626595][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.645367][T15713] delete_channel: no stack [ 728.703220][ T43] usb 6-1: Product: syz [ 728.707472][ T43] usb 6-1: Manufacturer: syz [ 728.737710][ T43] usb 6-1: SerialNumber: syz [ 728.748424][ T43] usb 6-1: config 0 descriptor?? [ 728.767983][ T43] usb-storage 6-1:0.171: USB Mass Storage device detected [ 728.858995][ T5946] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 728.940252][T15762] FAULT_INJECTION: forcing a failure. [ 728.940252][T15762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.986333][T15762] CPU: 1 UID: 0 PID: 15762 Comm: syz.6.2666 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 728.986366][T15762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 728.986379][T15762] Call Trace: [ 728.986388][T15762] [ 728.986399][T15762] dump_stack_lvl+0x189/0x250 [ 728.986430][T15762] ? __pfx____ratelimit+0x10/0x10 [ 728.986466][T15762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.986491][T15762] ? __pfx__printk+0x10/0x10 [ 728.986520][T15762] ? __might_fault+0xb0/0x130 [ 728.986559][T15762] should_fail_ex+0x414/0x560 [ 728.986596][T15762] _copy_from_user+0x2d/0xb0 [ 728.986624][T15762] input_event_from_user+0xb2/0x280 [ 728.986657][T15762] ? __pfx_input_event_from_user+0x10/0x10 [ 728.986694][T15762] ? input_inject_event+0xbc/0x320 [ 728.986721][T15762] evdev_write+0x2a6/0x480 [ 728.986757][T15762] ? __pfx_evdev_write+0x10/0x10 [ 728.986788][T15762] ? bpf_lsm_file_permission+0x9/0x20 [ 728.986810][T15762] ? security_file_permission+0x75/0x290 [ 728.986839][T15762] ? rw_verify_area+0x258/0x650 [ 728.986863][T15762] ? __pfx_evdev_write+0x10/0x10 [ 728.986894][T15762] vfs_write+0x27e/0xa90 [ 728.986928][T15762] ? __pfx_vfs_write+0x10/0x10 [ 728.986961][T15762] ? __fget_files+0x2a/0x420 [ 728.986993][T15762] ? __fget_files+0x2a/0x420 [ 728.987020][T15762] ? __fget_files+0x3a0/0x420 [ 728.987048][T15762] ? __fget_files+0x2a/0x420 [ 728.987086][T15762] ksys_write+0x145/0x250 [ 728.987115][T15762] ? __pfx_ksys_write+0x10/0x10 [ 728.987146][T15762] ? do_syscall_64+0xbe/0x3b0 [ 728.987172][T15762] do_syscall_64+0xfa/0x3b0 [ 728.987200][T15762] ? lockdep_hardirqs_on+0x9c/0x150 [ 728.987220][T15762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.987258][T15762] ? clear_bhb_loop+0x60/0xb0 [ 728.987283][T15762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.987304][T15762] RIP: 0033:0x7f03df58e929 [ 728.987324][T15762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.987343][T15762] RSP: 002b:00007f03e0312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 728.987370][T15762] RAX: ffffffffffffffda RBX: 00007f03df7b6080 RCX: 00007f03df58e929 [ 728.987385][T15762] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 728.987399][T15762] RBP: 00007f03e0312090 R08: 0000000000000000 R09: 0000000000000000 [ 728.987412][T15762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.987424][T15762] R13: 0000000000000001 R14: 00007f03df7b6080 R15: 00007f03df8dfa28 [ 728.987456][T15762] [ 729.257965][ T1781] usb 6-1: USB disconnect, device number 77 [ 729.263464][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 729.299052][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 729.311938][ T5946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 729.321320][ T5946] usb 4-1: config 2 has an invalid interface number: 9 but max is 0 [ 729.329435][ T5946] usb 4-1: config 2 has no interface number 0 [ 729.335705][ T5946] usb 4-1: config 2 interface 9 altsetting 10 bulk endpoint 0xC has invalid maxpacket 32 [ 729.345616][ T5946] usb 4-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 729.356813][ T5946] usb 4-1: config 2 interface 9 has no altsetting 0 [ 729.366157][ T5946] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 729.375326][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.383393][ T5946] usb 4-1: Product: syz [ 729.387562][ T5946] usb 4-1: Manufacturer: syz [ 729.392233][ T5946] usb 4-1: SerialNumber: syz [ 729.400058][T15753] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 729.704744][T15753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.719159][T15753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.736847][ T5946] pn533_usb 4-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 729.772233][T15769] fuse: Invalid rootmode [ 729.794456][ T5946] usb 4-1: USB disconnect, device number 94 [ 730.398980][ T1781] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 730.448982][ T5946] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 730.563222][ T1781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.585152][ T1781] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.609012][ T1781] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 730.631126][ T5946] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 730.638943][ T1781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.674026][ T1781] usb 7-1: config 0 descriptor?? [ 730.703753][ T5946] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.742002][ T5946] usb 6-1: config 0 interface 0 has no altsetting 0 [ 730.751054][ T5946] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 730.764729][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.794650][ T5946] usb 6-1: config 0 descriptor?? [ 731.017393][T15776] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2671'. [ 731.040201][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 731.200250][ T1781] hid-thrustmaster 0003:044F:B65D.003C: unknown main item tag 0x0 [ 731.225093][ T1781] hid-thrustmaster 0003:044F:B65D.003C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 731.240098][ T1781] hid-thrustmaster 0003:044F:B65D.003C: Wrong number of endpoints? [ 731.461349][ T5946] hid-steam 0003:28DE:1102.003D: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 731.477854][ C0] hid-thrustmaster 0003:044F:B65D.003C: URB to get model id failed with error -71 [ 731.488155][ T5926] usb 7-1: USB disconnect, device number 16 [ 731.612465][ T1781] usb 6-1: USB disconnect, device number 78 [ 731.671635][T15813] fido_id[15813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 731.969257][ T5926] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 732.128983][ T9] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 732.136390][T15825] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2686'. [ 732.146509][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 732.185285][ T5926] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 732.211796][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.243612][ T5926] usb 1-1: Product: syz [ 732.255577][ T5926] usb 1-1: Manufacturer: syz [ 732.263408][ T5926] usb 1-1: SerialNumber: syz [ 732.273094][ T5926] usb 1-1: config 0 descriptor?? [ 732.291686][ T5926] usb 1-1: bad CDC descriptors [ 732.297004][ T5926] usb 1-1: unsupported MDLM descriptors [ 732.326052][ T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 732.339766][T15829] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[15829] [ 732.367692][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.400107][ T9] usb 5-1: config 0 has no interface number 0 [ 732.406310][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 732.440327][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 732.450870][ T9] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.465057][ T9] usb 5-1: config 0 interface 52 has no altsetting 0 [ 732.478326][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 732.508346][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 732.525886][ T5946] usb 1-1: USB disconnect, device number 19 [ 732.649872][ T1781] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 732.747914][ T9] usb 5-1: SerialNumber: syz [ 732.795124][ T9] usb 5-1: config 0 descriptor?? [ 732.948927][ T1781] usb 7-1: Using ep0 maxpacket: 8 [ 732.961053][ T1781] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 7 [ 732.973852][ T1781] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 732.983855][ T1781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.008072][ T1781] usb 7-1: Product: syz [ 733.018890][ T1781] usb 7-1: Manufacturer: syz [ 733.023638][ T1781] usb 7-1: SerialNumber: syz [ 733.029863][ T9] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 733.038677][ T9] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -5 [ 733.049059][ T5926] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 733.079337][ T1781] usb 7-1: config 0 descriptor?? [ 733.088234][T15828] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 733.229681][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 733.237264][ T5926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.290405][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 733.323767][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.409911][ T5926] usb 6-1: config 0 descriptor?? [ 733.442409][ T5926] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 733.530672][ T1781] usb 7-1: USB disconnect, device number 17 [ 733.807568][ T30] audit: type=1326 audit(1751726414.163:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ccf92ab19 code=0x7ffc0000 [ 733.857547][ T30] audit: type=1326 audit(1751726414.163:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 733.891750][ T30] audit: type=1326 audit(1751726414.163:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ccf92ab19 code=0x7ffc0000 [ 733.965645][ T30] audit: type=1326 audit(1751726414.163:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 733.988180][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.016576][ T30] audit: type=1326 audit(1751726414.193:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 734.039117][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.067099][ T30] audit: type=1326 audit(1751726414.203:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 734.089579][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.169520][ T30] audit: type=1326 audit(1751726414.203:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 734.429097][ T30] audit: type=1326 audit(1751726414.203:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 734.451665][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.507711][ T30] audit: type=1326 audit(1751726414.203:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 734.588973][ T30] audit: type=1326 audit(1751726414.203:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ccf92ab19 code=0x7ffc0000 [ 734.813949][T15853] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 734.820638][T15853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 734.863590][T15856] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 734.870172][T15856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 734.881308][T15853] vhci_hcd vhci_hcd.0: Device attached [ 734.934446][T15853] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10) [ 734.941210][T15853] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 734.985985][T15853] vhci_hcd vhci_hcd.0: Device attached [ 735.000859][ T9] usb 5-1: USB disconnect, device number 116 [ 735.014354][T15856] vhci_hcd vhci_hcd.0: Device attached [ 735.035253][T15861] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(13) [ 735.041927][T15861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 735.059015][ T24] vhci_hcd: vhci_device speed not set [ 735.109653][T15861] vhci_hcd vhci_hcd.0: Device attached [ 735.129017][ T24] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 735.168928][ T5926] gspca_vc032x: reg_w err -71 [ 735.174457][ T5926] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 735.192997][ T5926] usb 6-1: USB disconnect, device number 79 [ 735.212004][T15866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 735.226253][T15853] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 735.232941][T15853] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 735.319261][T15853] vhci_hcd vhci_hcd.0: Device attached [ 735.330591][T15853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 735.372859][T15853] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(19) [ 735.379545][T15853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 735.420472][T15853] vhci_hcd vhci_hcd.0: Device attached [ 735.497209][T15856] vhci_hcd vhci_hcd.0: port 0 already used [ 735.549223][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 735.636810][T15854] vhci_hcd: connection reset by peer [ 735.637004][T15862] vhci_hcd: connection closed [ 735.642406][T15870] vhci_hcd: connection closed [ 735.642414][T15857] vhci_hcd: connection closed [ 735.642705][T15859] vhci_hcd: connection closed [ 735.647367][T15864] vhci_hcd: connection closed [ 735.668941][ T7639] vhci_hcd: stop threads [ 735.689016][ T7639] vhci_hcd: release socket [ 735.711182][ T7639] vhci_hcd: disconnect device [ 735.718928][ T7639] vhci_hcd: stop threads [ 735.719155][ T9] usb 5-1: device descriptor read/64, error -71 [ 735.723225][ T7639] vhci_hcd: release socket [ 735.734825][ T7639] vhci_hcd: disconnect device [ 735.762559][ T7639] vhci_hcd: stop threads [ 735.766892][ T7639] vhci_hcd: release socket [ 735.796285][T15877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2696'. [ 735.806280][ T7639] vhci_hcd: disconnect device [ 735.829315][ T7639] vhci_hcd: stop threads [ 735.837145][ T7639] vhci_hcd: release socket [ 735.849454][ T7639] vhci_hcd: disconnect device [ 735.856993][ T7639] vhci_hcd: stop threads [ 735.879427][ T7639] vhci_hcd: release socket [ 735.899199][ T7639] vhci_hcd: disconnect device [ 735.926107][ T7639] vhci_hcd: stop threads [ 735.950368][ T7639] vhci_hcd: release socket [ 735.965339][ T7639] vhci_hcd: disconnect device [ 735.999304][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 736.131325][T15884] fuse: Bad value for 'rootmode' [ 736.158977][ T9] usb 5-1: device descriptor read/64, error -71 [ 736.270150][ T9] usb usb5-port1: attempt power cycle [ 736.609571][ T1781] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 736.668965][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 736.690260][ T9] usb 5-1: device descriptor read/8, error -71 [ 736.769124][ T1781] usb 7-1: Using ep0 maxpacket: 8 [ 736.776685][ T1781] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 736.785104][ T1781] usb 7-1: config 2 has no interface number 0 [ 736.802186][ T1781] usb 7-1: config 2 interface 31 has no altsetting 0 [ 736.821420][ T1781] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 736.830937][ T1781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.849002][ T1781] usb 7-1: Product: syz [ 736.858899][ T1781] usb 7-1: Manufacturer: syz [ 736.865956][ T1781] usb 7-1: SerialNumber: syz [ 736.928985][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 736.960123][ T9] usb 5-1: device descriptor read/8, error -71 [ 737.069401][ T9] usb usb5-port1: unable to enumerate USB device [ 737.242089][T15900] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2701'. [ 737.273248][T15900] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 738.170963][T15908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.429503][ T5946] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 738.589070][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 738.609274][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 738.623782][ T5946] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 738.650683][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.703485][T15914] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2706'. [ 738.717314][ T5946] usb 6-1: Product: syz [ 738.731459][ T5946] usb 6-1: Manufacturer: syz [ 738.773549][ T5946] usb 6-1: SerialNumber: syz [ 738.804493][ T5946] usb 6-1: config 0 descriptor?? [ 738.882243][ T5946] usb 6-1: invalid MIDI EP [ 738.933659][ T5946] usb 6-1: snd-bcd2000: error during probing [ 738.957395][ T5946] snd-bcd2000 6-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 739.133346][ T1781] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 739.246282][T15926] sg_write: data in/out 268435436/14 bytes for SCSI command 0x0-- guessing data in; [ 739.246282][T15926] program syz.0.2711 not setting count and/or reply_len properly [ 739.398114][ T1781] usb 7-1: USB disconnect, device number 18 [ 739.408993][ T5946] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 739.579585][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 739.587086][ T5946] usb 5-1: config 0 has no interfaces? [ 739.597424][ T5946] usb 5-1: New USB device found, idVendor=0ed0, idProduct=10b8, bcdDevice=de.8e [ 739.610407][ T30] kauditd_printk_skb: 1666 callbacks suppressed [ 739.610429][ T30] audit: type=1326 audit(1751726419.973:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.0.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 739.646681][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.660073][ T5946] usb 5-1: Product: syz [ 739.664318][ T5946] usb 5-1: Manufacturer: syz [ 739.673532][ T30] audit: type=1326 audit(1751726419.973:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.0.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 739.717588][ T5946] usb 5-1: SerialNumber: syz [ 739.780954][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 739.804042][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'. [ 739.876596][ T5946] usb 5-1: config 0 descriptor?? [ 739.915505][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 739.926614][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 739.957306][ T30] audit: type=1326 audit(1751726420.003:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.0.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 740.042450][ T30] audit: type=1326 audit(1751726420.003:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.0.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 740.077630][ T30] audit: type=1326 audit(1751726420.003:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.0.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 740.143555][ T30] audit: type=1326 audit(1751726420.003:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15930 comm="syz.0.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 740.174490][T15925] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 740.236839][ T5946] usb 5-1: USB disconnect, device number 121 [ 740.314197][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2719'. [ 740.329415][ T24] vhci_hcd: vhci_device speed not set [ 740.409108][ T1781] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 740.568973][ T1781] usb 4-1: Using ep0 maxpacket: 32 [ 740.588029][ T1781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.602261][ T1781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.624040][ T1781] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 740.635422][ T1781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.657314][ T1781] usb 4-1: config 0 descriptor?? [ 740.976675][ T1781] usbhid 4-1:0.0: can't add hid device: -71 [ 740.993953][T15957] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 741.024693][ T1781] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 741.109999][ T5919] usb 6-1: USB disconnect, device number 80 [ 741.168026][ T1781] usb 4-1: USB disconnect, device number 95 [ 741.992665][T15989] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 742.101078][T15989] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 742.123131][T15989] 8021q: adding VLAN 0 to HW filter on device bond7 [ 742.139038][ T1781] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 742.149010][ T7639] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 742.151953][ T5919] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 742.164129][T15989] veth11: entered promiscuous mode [ 742.167731][T15989] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 742.270072][ T9050] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 742.309332][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 742.320373][ T1781] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 742.345851][ T1781] usb 5-1: config 179 has no interface number 0 [ 742.353437][ T1781] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 742.365239][ T5919] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 742.379899][ T5919] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.390808][ T1781] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 742.407350][ T5919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.417830][ T1781] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 742.434226][ T1781] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 742.449820][ T1781] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 742.460905][ T1781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.470159][ T5919] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.491755][T15998] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2739'. [ 742.499436][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.521834][ T5919] usb 6-1: Product: syz [ 742.531867][ T5919] usb 6-1: Manufacturer: syz [ 742.536940][ T5919] usb 6-1: SerialNumber: syz [ 742.660775][T16003] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2741'. [ 742.674071][T16003] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 742.809445][T16007] openvswitch: netlink: Actions may not be safe on all matching packets [ 742.891271][T16011] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 742.965933][ T1781] usb 5-1: USB disconnect, device number 122 [ 742.978744][ T5919] usb 6-1: 0:2 : does not exist [ 743.100590][T16011] 8021q: adding VLAN 0 to HW filter on device bond8 [ 743.215593][ T5919] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 743.247090][T16017] bond8: (slave veth13): Enslaving as an active interface with a down link [ 743.275139][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2746'. [ 743.297929][ T5919] usb 6-1: USB disconnect, device number 81 [ 743.347624][T16020] vlan2: entered allmulticast mode [ 743.360030][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.380913][T16020] bond8: entered allmulticast mode [ 743.387810][T16020] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 744.320040][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 744.334126][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2757'. [ 744.439114][ T1781] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 744.500938][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 744.648992][ T24] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 744.705351][ T24] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 744.718157][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.736218][ T24] usb 4-1: Product: syz [ 744.742488][ T24] usb 4-1: Manufacturer: syz [ 744.748329][ T24] usb 4-1: SerialNumber: syz [ 744.758996][ T1781] usb 6-1: Using ep0 maxpacket: 8 [ 744.767526][ T1781] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 744.775963][ T1781] usb 6-1: config 179 has no interface number 0 [ 744.796073][ T1781] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 744.828292][ T24] usb 4-1: config 0 descriptor?? [ 744.858923][ T1781] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 744.874652][ T24] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 744.913529][ T1781] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 744.966879][ T1781] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 745.058135][ T1781] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 745.221177][ T1781] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 745.230490][ T1781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.297511][T16046] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 745.576932][ T1781] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input36 [ 746.198027][T16046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.207435][T16046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.395623][ T1781] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 746.585680][ T1781] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 746.606094][ T1781] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.619490][ T1781] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 746.631648][ T1781] usb 5-1: config 1 has no interface number 0 [ 746.638681][ T1781] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 746.664303][ T1781] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.685742][ T1781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.698349][ T1781] usb 5-1: Product: syz [ 746.704959][ T1781] usb 5-1: Manufacturer: syz [ 746.712187][ T1781] usb 5-1: SerialNumber: syz [ 746.718089][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2764'. [ 746.738162][ T1781] cdc_wdm 5-1:1.128: skipping garbage [ 746.744586][ T1781] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 746.947577][T16056] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 747.172055][ T5946] usb 4-1: USB disconnect, device number 96 [ 747.234625][T16040] delete_channel: no stack [ 747.584835][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.591974][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.972482][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 748.028955][T16054] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 748.035982][T16054] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 748.068378][ T24] usb 5-1: USB disconnect, device number 123 [ 748.089069][T13887] Bluetooth: hci1: command 0x0406 tx timeout [ 748.177931][T16054] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 748.219294][T16054] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 748.262228][ T5926] usb 6-1: USB disconnect, device number 82 [ 748.262259][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 748.276839][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 748.364973][T16054] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 748.398944][T16054] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 748.486782][T16054] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 748.514024][T16054] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 748.652735][T16054] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 748.658739][T16054] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 749.079161][T16094] binder: 16093:16094 unknown command 0 [ 749.099598][T16094] binder: 16093:16094 ioctl c0306201 200000000080 returned -22 [ 749.667566][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.776443][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.782222][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.783214][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.784882][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.786146][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 749.806308][T13887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.816672][T13887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.818383][T13887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.832643][T13887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.836963][T13887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 750.488057][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.728268][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.140100][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.144558][T16129] binder: 16127:16129 unknown command 0 [ 751.163743][T16129] binder: 16127:16129 ioctl c0306201 200000000080 returned -22 [ 751.931189][ T5861] Bluetooth: hci4: command tx timeout [ 751.989274][ T5946] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 752.168706][T16107] chnl_net:caif_netlink_parms(): no params data found [ 752.239179][ T5946] usb 7-1: config 0 has no interfaces? [ 752.423068][ T5946] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 752.435410][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.464518][ T5946] usb 7-1: Product: syz [ 752.498877][ T5946] usb 7-1: Manufacturer: syz [ 752.520355][ T5946] usb 7-1: SerialNumber: syz [ 752.564433][ T5946] usb 7-1: config 0 descriptor?? [ 752.668350][T16147] fuse: Invalid rootmode [ 754.008958][ T5861] Bluetooth: hci4: command tx timeout [ 754.542680][T16173] binder: 16172:16173 unknown command 0 [ 754.575782][T16173] binder: 16172:16173 ioctl c0306201 200000000080 returned -22 [ 754.655320][T16175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2795'. [ 755.014517][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2798'. [ 755.097296][ T1781] usb 7-1: USB disconnect, device number 19 [ 755.582944][ T36] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 755.602092][ T36] bond0 (unregistering): Released all slaves [ 755.678221][ T36] bond1 (unregistering): Released all slaves [ 755.727340][ T36] bond2 (unregistering): Released all slaves [ 755.767055][ T36] bond3 (unregistering): Released all slaves [ 755.825707][ T36] bond4 (unregistering): Released all slaves [ 755.864210][ T36] bond5 (unregistering): Released all slaves [ 756.089165][ T5861] Bluetooth: hci4: command tx timeout [ 756.108543][ T36] bond6 (unregistering): (slave veth7): Releasing active interface [ 756.118200][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'. [ 756.120732][ T36] bond6 (unregistering): Released all slaves [ 756.416075][ T36] bond7 (unregistering): (slave veth9): Releasing active interface [ 756.425896][ T36] bond7 (unregistering): Released all slaves [ 756.444249][ T36] bond8 (unregistering): Released all slaves [ 756.814781][ T36] tipc: Left network mode [ 756.824227][T16206] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2801'. [ 756.905866][T16206] netlink: 'syz.4.2801': attribute type 13 has an invalid length. [ 757.205210][T16215] binder: 16214:16215 unknown command 0 [ 757.225444][T16215] binder: 16214:16215 ioctl c0306201 200000000080 returned -22 [ 757.254439][T16215] binder: 16214:16215 ioctl 4018620d 0 returned -22 [ 757.302437][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.372294][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.420414][T16107] bridge_slave_0: entered allmulticast mode [ 757.428428][T16107] bridge_slave_0: entered promiscuous mode [ 757.434982][T16219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2807'. [ 757.542114][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.615817][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.634991][T16107] bridge_slave_1: entered allmulticast mode [ 757.658962][T16107] bridge_slave_1: entered promiscuous mode [ 757.803971][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2811'. [ 757.828773][T16223] netlink: 'syz.6.2809': attribute type 1 has an invalid length. [ 758.061963][T16107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.157720][ T36] hsr_slave_0: left promiscuous mode [ 758.168958][ T5861] Bluetooth: hci4: command tx timeout [ 758.218623][ T36] hsr_slave_1: left promiscuous mode [ 758.241867][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 758.270132][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 758.375147][ T36] veth1_macvtap: left allmulticast mode [ 758.400767][ T36] veth1_macvtap: left promiscuous mode [ 758.406400][ T36] veth0_macvtap: left promiscuous mode [ 758.435044][T16258] binder: 16253:16258 unknown command 0 [ 758.459538][ T36] veth1_vlan: left promiscuous mode [ 758.463177][T16258] binder: 16253:16258 ioctl c0306201 200000000080 returned -22 [ 758.464988][ T36] veth0_vlan: left promiscuous mode [ 758.526918][T16262] binder: 16253:16262 ioctl 4018620d 0 returned -22 [ 758.544762][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2820'. [ 758.624765][T16266] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2821'. [ 758.683534][ T1781] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 758.908909][ T1781] usb 7-1: Using ep0 maxpacket: 16 [ 758.924157][ T1781] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.961272][ T1781] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 758.986714][ T1781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.016576][ T1781] usb 7-1: config 0 descriptor?? [ 759.097032][T16285] netlink: 380 bytes leftover after parsing attributes in process `syz.4.2825'. [ 759.244517][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.295728][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.315368][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.342476][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.380038][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.415400][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.446923][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.523657][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.542877][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.585622][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.690805][ T5946] usb 7-1: USB disconnect, device number 20 [ 760.247318][T16306] binder: 16305:16306 unknown command 0 [ 760.274795][T16306] binder: 16305:16306 ioctl c0306201 200000000080 returned -22 [ 760.296756][T16306] binder: 16305:16306 ioctl 4018620d 0 returned -22 [ 761.151250][ T5946] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 761.318880][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 761.353938][ T5946] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=c5.b8 [ 761.379306][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.387879][ T5946] usb 5-1: Product: syz [ 761.402788][ T5946] usb 5-1: Manufacturer: syz [ 761.407796][ T5946] usb 5-1: SerialNumber: syz [ 761.516359][ T5946] usb 5-1: config 0 descriptor?? [ 761.566783][ T5946] empeg 5-1:0.0: empeg converter detected [ 761.599163][ T5946] usb 5-1: active config #0 != 1 ?? [ 762.389905][T16107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.493331][T16311] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2833'. [ 762.505985][T16311] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 762.547368][T16107] team0: Port device team_slave_0 added [ 762.574974][T16107] team0: Port device team_slave_1 added [ 762.748550][T16107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.768632][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.822128][T16107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.860613][T16107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.874625][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.927819][T16107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.979407][ T5946] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 763.154513][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 763.168363][ T5946] usb 6-1: config 0 has no interfaces? [ 763.193277][ T5946] usb 6-1: New USB device found, idVendor=0ed0, idProduct=10b8, bcdDevice=de.8e [ 763.216816][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.247132][ T5946] usb 6-1: Product: syz [ 763.260798][T16107] hsr_slave_0: entered promiscuous mode [ 763.272113][ T5946] usb 6-1: Manufacturer: syz [ 763.280624][T16107] hsr_slave_1: entered promiscuous mode [ 763.282511][ T5946] usb 6-1: SerialNumber: syz [ 763.316764][ T5946] usb 6-1: config 0 descriptor?? [ 763.348927][ T24] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 763.479404][T16328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2838'. [ 763.506924][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.528342][ T1781] usb 5-1: USB disconnect, device number 124 [ 763.532272][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 763.596130][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.633067][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.642969][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.666646][ T24] usb 7-1: Product: syz [ 763.683361][ T24] usb 7-1: Manufacturer: syz [ 763.723904][ T24] usb 7-1: SerialNumber: syz [ 763.755295][ T24] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 763.768405][ T24] cdc_ncm 7-1:1.0: bind() failure [ 763.774903][T16317] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 763.822788][ T1781] usb 6-1: USB disconnect, device number 83 [ 764.005921][ T24] usb 7-1: USB disconnect, device number 21 [ 764.136672][T16339] netlink: 'syz.0.2840': attribute type 1 has an invalid length. [ 764.159706][ T5946] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 764.254626][T16339] 8021q: adding VLAN 0 to HW filter on device bond9 [ 764.314346][T16343] bond9: (slave veth17): Enslaving as an active interface with a down link [ 764.358424][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.370581][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.381380][ T5946] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 764.391101][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.402269][T16339] vlan2: entered allmulticast mode [ 764.407592][T16339] bond9: entered allmulticast mode [ 764.413772][ T5946] usb 5-1: config 0 descriptor?? [ 764.415044][T16339] bond9: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 764.631221][T16348] binder: 16347:16348 unknown command 0 [ 764.636866][T16348] binder: 16347:16348 ioctl c0306201 200000000080 returned -22 [ 764.687199][T16348] binder: 16347:16348 ioctl c0306201 0 returned -14 [ 764.843022][ T5946] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 764.860694][ T5946] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0 [ 764.929508][ T5946] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.003E/input/input37 [ 764.977439][ T30] audit: type=1326 audit(1751726445.333:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 764.999955][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.013727][ T5946] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 765.066147][ T30] audit: type=1326 audit(1751726445.333:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.102381][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.126306][ T30] audit: type=1326 audit(1751726445.333:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.148908][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.156743][ T30] audit: type=1326 audit(1751726445.333:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.192390][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.214325][T16360] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 765.220942][T16360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 765.265217][ T5933] usb 5-1: USB disconnect, device number 125 [ 765.302793][T16360] vhci_hcd vhci_hcd.0: Device attached [ 765.309226][T16368] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 765.315861][T16368] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 765.318115][ T30] audit: type=1326 audit(1751726445.333:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.384316][T16365] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10) [ 765.391005][T16365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 765.398700][T16368] vhci_hcd vhci_hcd.0: Device attached [ 765.417854][ T30] audit: type=1326 audit(1751726445.333:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.442493][T16365] vhci_hcd vhci_hcd.0: Device attached [ 765.478986][ T5946] vhci_hcd: vhci_device speed not set [ 765.504447][T16360] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(6) [ 765.511071][T16360] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 765.519410][ T30] audit: type=1326 audit(1751726445.333:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.551590][T16360] vhci_hcd vhci_hcd.0: Device attached [ 765.557862][ T5946] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 765.587611][T16360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 765.606331][ T30] audit: type=1326 audit(1751726445.333:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.608470][T16366] fido_id[16366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 765.644293][T16365] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 765.653174][T16365] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(20) [ 765.659852][T16365] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 765.667468][T16368] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(9) [ 765.674059][T16368] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 765.697881][T16368] vhci_hcd vhci_hcd.0: Device attached [ 765.720536][ T30] audit: type=1326 audit(1751726445.343:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.783166][ T30] audit: type=1326 audit(1751726445.343:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16357 comm="syz.0.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccf98e929 code=0x7ffc0000 [ 765.843639][T16360] vhci_hcd vhci_hcd.0: port 0 already used [ 765.865247][T16365] vhci_hcd vhci_hcd.0: Device attached [ 765.895346][T16382] vhci_hcd: connection closed [ 765.895796][ T7645] vhci_hcd: stop threads [ 765.896063][T16375] vhci_hcd: connection closed [ 765.905595][T16378] vhci_hcd: connection closed [ 765.910673][T16372] vhci_hcd: connection closed [ 765.915659][T16369] vhci_hcd: connection closed [ 765.924385][T16363] vhci_hcd: connection reset by peer [ 765.941612][ T7645] vhci_hcd: release socket [ 765.954322][ T7645] vhci_hcd: disconnect device [ 765.968187][ T7645] vhci_hcd: stop threads [ 765.997022][ T7645] vhci_hcd: release socket [ 766.009180][ T7645] vhci_hcd: disconnect device [ 766.039789][T16107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 766.059307][ T7645] vhci_hcd: stop threads [ 766.063802][ T7645] vhci_hcd: release socket [ 766.073499][ T7645] vhci_hcd: disconnect device [ 766.116932][ T7645] vhci_hcd: stop threads [ 766.128252][ T7645] vhci_hcd: release socket [ 766.147886][ T7645] vhci_hcd: disconnect device [ 766.191105][ T7645] vhci_hcd: stop threads [ 766.195587][ T7645] vhci_hcd: release socket [ 766.206768][T16107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 766.217366][ T7645] vhci_hcd: disconnect device [ 766.232746][ T7645] vhci_hcd: stop threads [ 766.237322][ T7645] vhci_hcd: release socket [ 766.248309][ T7645] vhci_hcd: disconnect device [ 766.264151][T16107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 766.301630][T16107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 766.452583][T16414] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2856'. [ 766.598983][ T1781] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 766.669792][T16418] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 766.697177][T16418] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 766.759147][ T1781] usb 5-1: Using ep0 maxpacket: 8 [ 766.768138][ T1781] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 766.782106][ T1781] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 766.792192][ T1781] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 766.833977][ T1781] usb 5-1: Product: syz [ 766.848534][ T1781] usb 5-1: Manufacturer: syz [ 766.861292][ T1781] usb 5-1: SerialNumber: syz [ 766.887374][T16107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.053994][T16107] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.121097][ T1781] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 767.164478][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.171786][ T7639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.183876][ T1781] usb 5-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 767.203611][ T1781] usb 5-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 767.223320][ T1781] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 767.238662][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.245936][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.309439][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 767.334497][ T1781] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 767.387394][ T1781] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 767.453019][ T1781] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 767.471528][ T24] usb 7-1: device descriptor read/64, error -71 [ 767.506836][T16107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.519327][ T43] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 767.544198][ T5926] usb 5-1: USB disconnect, device number 126 [ 767.580679][ T5926] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 767.637305][T16107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.640834][ T5926] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 767.720109][ T43] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 767.733494][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 767.741745][ T5926] visor 5-1:1.0: device disconnected [ 767.776719][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 767.794085][T16107] veth0_vlan: entered promiscuous mode [ 767.821774][ T43] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 767.856091][T16107] veth1_vlan: entered promiscuous mode [ 767.861348][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.890291][ T24] usb 7-1: device descriptor read/64, error -71 [ 767.916954][ T43] usb 6-1: config 0 descriptor?? [ 767.939259][T16430] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 768.011790][ T24] usb usb7-port1: attempt power cycle [ 768.020878][T16107] veth0_macvtap: entered promiscuous mode [ 768.071639][T16107] veth1_macvtap: entered promiscuous mode [ 768.131756][T16107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.171505][T16107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.206481][T16107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.283186][T16107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.293581][T16107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.306460][T16107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.379969][ T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 768.410187][ T43] elecom 0003:056E:010D.003F: hidraw0: USB HID vb.37 Device [HID 056e:010d] on usb-dummy_hcd.5-1/input0 [ 768.460532][T16448] fuse: Invalid rootmode [ 768.474642][ T24] usb 7-1: device descriptor read/8, error -71 [ 768.634869][ T43] usb 6-1: USB disconnect, device number 84 [ 768.749209][ T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 768.800160][ T24] usb 7-1: device descriptor read/8, error -71 [ 768.912115][T16449] fido_id[16449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 768.958256][ T24] usb usb7-port1: unable to enumerate USB device [ 769.024336][ T7652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.070616][ T7652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.176432][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.225766][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.526680][T16464] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2865'. [ 769.573976][T16464] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 769.994600][T16475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2867'. [ 770.083169][T16476] netlink: 'syz.4.2864': attribute type 10 has an invalid length. [ 770.091530][T16476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2864'. [ 770.263775][ T30] audit: type=1326 audit(1751726450.623:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.6.2869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03df58e929 code=0x0 [ 770.442469][T16490] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2869'. [ 770.619455][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2869'. [ 770.629673][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2869'. [ 770.638710][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2869'. [ 770.719317][ T5946] vhci_hcd: vhci_device speed not set [ 770.810123][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2869'. [ 770.859242][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2869'. [ 770.897553][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2869'. [ 773.068025][T16528] netlink: 'syz.5.2874': attribute type 10 has an invalid length. [ 773.697362][T16547] netlink: 'syz.0.2882': attribute type 1 has an invalid length. [ 773.929815][T16547] 8021q: adding VLAN 0 to HW filter on device bond10 [ 773.987409][T16553] bond10: (slave veth19): Enslaving as an active interface with a down link [ 774.096944][T16557] vlan2: entered allmulticast mode [ 774.128968][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 774.167197][T16557] bond10: entered allmulticast mode [ 774.197043][T16557] bond10: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 774.306447][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 774.323127][ T43] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 774.335869][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.357340][ T43] usb 7-1: config 0 descriptor?? [ 774.427533][ T43] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 774.916222][T16577] fuse: Bad value for 'fd' [ 775.425715][ T43] gspca_sonixj: reg_w1 err -110 [ 775.439468][ T43] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 775.798360][T16595] __nla_validate_parse: 43 callbacks suppressed [ 775.798381][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2890'. [ 776.095931][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.129520][T16590] netlink: 'syz.5.2890': attribute type 5 has an invalid length. [ 776.137456][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2890'. [ 776.941485][ T43] usb 7-1: USB disconnect, device number 26 [ 778.866300][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2897'. [ 779.391624][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 779.612780][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'. [ 779.629078][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'. [ 779.660236][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 779.708503][ T9] usb 7-1: config 0 has no interfaces? [ 779.749074][ T9] usb 7-1: New USB device found, idVendor=0ed0, idProduct=10b8, bcdDevice=de.8e [ 779.758214][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.848436][ T9] usb 7-1: Product: syz [ 779.903942][ T9] usb 7-1: Manufacturer: syz [ 779.908663][ T9] usb 7-1: SerialNumber: syz [ 779.928926][ T5946] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 779.982495][ T9] usb 7-1: config 0 descriptor?? [ 780.097096][ T5946] usb 4-1: config 0 has an invalid interface number: 177 but max is 0 [ 780.105686][ T5946] usb 4-1: config 0 has no interface number 0 [ 780.115403][ T5946] usb 4-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=39.5d [ 780.124917][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.133680][ T43] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 780.151782][ T5946] usb 4-1: Product: syz [ 780.156033][ T5946] usb 4-1: Manufacturer: syz [ 780.161513][ T5946] usb 4-1: SerialNumber: syz [ 780.179717][ T5946] usb 4-1: config 0 descriptor?? [ 780.226543][T16627] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 780.253121][ T9] usb 7-1: USB disconnect, device number 27 [ 780.292479][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 780.304279][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 780.316017][ T43] usb 5-1: config 7 has an invalid interface number: 194 but max is 0 [ 780.327485][ T43] usb 5-1: config 7 has no interface number 0 [ 780.346221][ T43] usb 5-1: New USB device found, idVendor=2019, idProduct=ed18, bcdDevice=ca.21 [ 780.382649][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.398139][ T43] usb 5-1: Product: syz [ 780.405237][ T43] usb 5-1: Manufacturer: syz [ 780.415364][ T43] usb 5-1: SerialNumber: syz [ 780.677927][ T43] usb 5-1: USB disconnect, device number 127 [ 780.867837][T16646] netlink: 380 bytes leftover after parsing attributes in process `syz.5.2902'. [ 780.941152][T16648] netlink: 'syz.6.2903': attribute type 1 has an invalid length. [ 781.541010][T16664] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 781.689111][T13887] Bluetooth: hci4: command 0x0405 tx timeout [ 781.929568][ T5946] usb 4-1: USB disconnect, device number 97 [ 782.460600][T16689] openvswitch: netlink: Flow key attribute not present in set flow. [ 783.062074][T16704] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2921'. [ 783.972141][T16721] syz_tun: entered allmulticast mode [ 784.020680][T16716] syz_tun: left allmulticast mode [ 784.621367][T16735] netlink: 'syz.5.2934': attribute type 32 has an invalid length. [ 784.630582][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 784.640688][T16735] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 784.688972][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 785.098480][ T9] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 785.113240][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.123348][ T9] usb 7-1: Product: syz [ 785.127554][ T9] usb 7-1: Manufacturer: syz [ 785.138466][ T9] usb 7-1: SerialNumber: syz [ 785.148425][ T9] usb 7-1: config 0 descriptor?? [ 785.159009][ T5946] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 785.249116][ T5919] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 785.338383][ T5946] usb 4-1: config 0 has no interfaces? [ 785.366031][ T5946] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 785.382015][ T9] usb 7-1: Firmware version (0.0) predates our first public release. [ 785.403264][ T9] usb 7-1: Please update to version 0.2 or newer [ 785.432759][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.432793][ T5946] usb 4-1: Product: syz [ 785.432811][ T5946] usb 4-1: Manufacturer: syz [ 785.432827][ T5946] usb 4-1: SerialNumber: syz [ 785.437743][ T5946] usb 4-1: config 0 descriptor?? [ 785.439559][ T5919] usb 6-1: device descriptor read/64, error -71 [ 785.479150][ T9] usb 7-1: USB disconnect, device number 28 [ 785.684944][ T5919] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 785.838283][ T5919] usb 6-1: device descriptor read/64, error -71 [ 785.949477][ T5919] usb usb6-port1: attempt power cycle [ 786.269207][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 786.298940][ T5919] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 786.343614][ T5919] usb 6-1: device descriptor read/8, error -71 [ 786.422015][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 786.432532][ T9] usb 7-1: config 4 has an invalid interface number: 234 but max is 0 [ 786.441018][ T9] usb 7-1: config 4 has no interface number 0 [ 786.447269][ T9] usb 7-1: config 4 interface 234 altsetting 63 endpoint 0x2 has invalid maxpacket 1056, setting to 64 [ 786.474885][ T9] usb 7-1: config 4 interface 234 altsetting 63 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 786.519096][ T9] usb 7-1: config 4 interface 234 altsetting 63 has a duplicate endpoint with address 0x6, skipping [ 786.558728][ T9] usb 7-1: config 4 interface 234 altsetting 63 bulk endpoint 0xE has invalid maxpacket 1024 [ 786.589056][ T5919] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 786.607228][ T9] usb 7-1: config 4 interface 234 altsetting 63 has a duplicate endpoint with address 0x6, skipping [ 786.629806][ T5919] usb 6-1: device descriptor read/8, error -71 [ 786.671785][ T9] usb 7-1: config 4 interface 234 altsetting 63 has an invalid descriptor for endpoint zero, skipping [ 786.711972][ T9] usb 7-1: config 4 interface 234 has no altsetting 0 [ 786.786870][ T5919] usb usb6-port1: unable to enumerate USB device [ 786.850638][ T9] usb 7-1: New USB device found, idVendor=13b1, idProduct=0043, bcdDevice=95.40 [ 786.860116][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.882639][ T9] usb 7-1: Product: syz [ 786.889854][ T9] usb 7-1: Manufacturer: syz [ 786.907252][ T9] usb 7-1: SerialNumber: syz [ 786.962306][T16753] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 787.419092][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 787.559106][ T43] usb 5-1: device descriptor read/64, error -71 [ 787.766179][ T5946] usb 4-1: USB disconnect, device number 98 [ 787.828948][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 788.066850][ T43] usb 5-1: device descriptor read/64, error -71 [ 788.190217][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 788.198954][ T5946] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 788.223536][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 788.233698][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 788.243435][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 788.253790][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 788.319288][ T43] usb usb5-port1: attempt power cycle [ 788.377448][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.389433][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.402507][ T5946] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 788.402539][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.408365][ T5946] usb 4-1: config 0 descriptor?? [ 788.718977][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 788.758554][ T9] usb 7-1: USB disconnect, device number 29 [ 788.771129][ T43] usb 5-1: device descriptor read/8, error -71 [ 788.951408][ T5946] bigben 0003:146B:0902.0040: unexpected rdesc, please submit for review [ 788.990844][ T5946] bigben 0003:146B:0902.0040: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 789.030148][ T5946] bigben 0003:146B:0902.0040: not enough fields in HID_OUTPUT_REPORT 0 [ 789.039104][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 789.100895][ T5946] bigben 0003:146B:0902.0040: no output report found [ 789.126769][ T43] usb 5-1: device descriptor read/8, error -71 [ 789.179335][ T5946] usb 4-1: USB disconnect, device number 99 [ 789.264091][ T43] usb usb5-port1: unable to enumerate USB device [ 789.313354][T16772] fido_id[16772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 789.336096][ T7652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.552571][ T7652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.686182][ T7652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.329503][ T5861] Bluetooth: hci5: command tx timeout [ 790.607808][T16766] chnl_net:caif_netlink_parms(): no params data found [ 790.991731][T16809] fuse: Invalid rootmode [ 791.302356][ T1781] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 791.449111][T16820] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2952'. [ 791.561156][ T1781] usb 6-1: config 0 has no interfaces? [ 791.578503][ T1781] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.668986][ T1781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.677083][ T1781] usb 6-1: Product: syz [ 791.699687][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.706932][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.714532][T16766] bridge_slave_0: entered allmulticast mode [ 791.722793][T16766] bridge_slave_0: entered promiscuous mode [ 791.732243][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.751293][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.790741][ T1781] usb 6-1: Manufacturer: syz [ 791.799885][T16766] bridge_slave_1: entered allmulticast mode [ 791.816105][ T1781] usb 6-1: SerialNumber: syz [ 791.841044][ T1781] usb 6-1: config 0 descriptor?? [ 791.859714][T16766] bridge_slave_1: entered promiscuous mode [ 792.088446][ T7652] dummy0: left allmulticast mode [ 792.109276][ T7652] dummy0: left promiscuous mode [ 792.114563][ T7652] bridge0: port 3(dummy0) entered disabled state [ 792.369149][ T7652] bridge_slave_1: left allmulticast mode [ 792.409113][ T7652] bridge_slave_1: left promiscuous mode [ 792.409321][ T5861] Bluetooth: hci5: command tx timeout [ 792.415254][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.446330][ T7652] bridge_slave_0: left allmulticast mode [ 792.503420][ T7652] bridge_slave_0: left promiscuous mode [ 792.529251][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.599017][ T980] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 792.750568][ T980] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.832221][ T980] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 792.894224][ T980] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 793.006874][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.113031][ T980] usb 7-1: Product: syz [ 793.157986][ T980] usb 7-1: Manufacturer: syz [ 793.236744][ T980] usb 7-1: SerialNumber: syz [ 793.276812][ T980] usb 7-1: config 0 descriptor?? [ 793.459445][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 793.583641][T16830] xt_hashlimit: size too large, truncated to 1048576 [ 793.681948][ T7652] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 793.722558][ T7652] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 793.747309][ T7652] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - aa:7e:96:0e:8c:8d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 793.922261][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'. [ 794.124019][ T7652] bond2 (unregistering): (slave gretap1): Releasing active interface [ 794.489024][ T5861] Bluetooth: hci5: command tx timeout [ 794.642379][ T9] usb 6-1: USB disconnect, device number 89 [ 795.370462][ T7652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.388505][ T7652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.426097][ T7652] bond0 (unregistering): Released all slaves [ 795.979826][T16860] binder: 16859:16860 unknown command 0 [ 795.988936][T16860] binder: 16859:16860 ioctl c0306201 200000000080 returned -22 [ 795.999974][T16860] binder: 16859:16860 ioctl c0306201 0 returned -14 [ 796.029537][ T7652] bond1 (unregistering): (slave veth3): Releasing active interface [ 796.043734][ T7652] bond1 (unregistering): Released all slaves [ 796.067021][ T7652] bond2 (unregistering): Released all slaves [ 796.107501][T16862] xt_CONNSECMARK: invalid mode: 0 [ 796.339359][ T7652] bond3 (unregistering): (slave veth5): Releasing active interface [ 796.354688][ T7652] bond3 (unregistering): Released all slaves [ 796.391491][ T7652] bond4 (unregistering): Released all slaves [ 796.422667][ T7652] bond5 (unregistering): Released all slaves [ 796.446317][ T7652] bond6 (unregistering): Released all slaves [ 796.573490][ T5861] Bluetooth: hci5: command tx timeout [ 796.685898][ T7652] bond7 (unregistering): (slave veth11): Releasing backup interface [ 796.696186][ T7652] bond7 (unregistering): Released all slaves [ 796.848393][ T7652] bond8 (unregistering): (slave veth13): Releasing active interface [ 796.858657][ T7652] bond8 (unregistering): Released all slaves [ 797.004411][ T7652] bond9 (unregistering): (slave veth17): Releasing active interface [ 797.014259][ T7652] bond9 (unregistering): Released all slaves [ 797.155867][ T7652] bond10 (unregistering): (slave veth19): Releasing active interface [ 797.167011][ T7652] bond10 (unregistering): Released all slaves [ 797.292164][ T43] usb 7-1: USB disconnect, device number 30 [ 797.306760][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.370628][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.494334][ T7652] IPVS: stopping master sync thread 10135 ... [ 798.141277][ T43] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 798.279122][ T43] usb 7-1: device descriptor read/64, error -71 [ 798.332604][T16892] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 798.465358][T16766] team0: Port device team_slave_0 added [ 798.528950][ T43] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 798.613366][T16766] team0: Port device team_slave_1 added [ 798.688959][ T43] usb 7-1: device descriptor read/64, error -71 [ 798.812910][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2969'. [ 798.822472][ T43] usb usb7-port1: attempt power cycle [ 799.067414][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.098737][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.098988][ T1781] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 799.135179][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.163190][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.178905][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.206096][ T43] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 799.251264][ T43] usb 7-1: device descriptor read/8, error -71 [ 799.309441][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.328615][ T7652] hsr_slave_0: left promiscuous mode [ 799.339937][ T7652] hsr_slave_1: left promiscuous mode [ 799.349951][ T7652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.357456][ T7652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.360309][ T1781] usb 5-1: config 0 has no interfaces? [ 799.393008][ T1781] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 799.413627][ T1781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.437773][ T1781] usb 5-1: Product: syz [ 799.451477][ T1781] usb 5-1: Manufacturer: syz [ 799.466512][ T1781] usb 5-1: SerialNumber: syz [ 799.478187][ T7652] veth1_macvtap: left promiscuous mode [ 799.500503][ T1781] usb 5-1: config 0 descriptor?? [ 799.516696][ T7652] veth0_macvtap: left promiscuous mode [ 799.523090][ T43] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 799.542352][ T7652] veth1_vlan: left promiscuous mode [ 799.547878][ T7652] veth0_vlan: left promiscuous mode [ 799.590883][ T43] usb 7-1: device descriptor read/8, error -71 [ 799.720110][ T43] usb usb7-port1: unable to enumerate USB device [ 801.582013][ T7652] team_slave_1 (unregistering): left promiscuous mode [ 801.613615][ T7652] team0 (unregistering): Port device team_slave_1 removed [ 801.769962][ T7652] team_slave_0 (unregistering): left promiscuous mode [ 801.787901][ T7652] team0 (unregistering): Port device team_slave_0 removed [ 801.821187][ T43] usb 5-1: USB disconnect, device number 6 [ 802.986724][ T43] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 803.158294][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 803.173229][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 120, using maximum allowed: 30 [ 803.188874][ T43] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 803.200217][T16766] hsr_slave_0: entered promiscuous mode [ 803.215511][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 803.240015][T16766] hsr_slave_1: entered promiscuous mode [ 803.258134][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 803.272433][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.282666][T16766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.295108][T16766] Cannot create hsr debugfs directory [ 803.309474][T16977] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 803.329125][ T43] usb 4-1: Product: syz [ 803.333390][ T43] usb 4-1: Manufacturer: syz [ 803.338032][ T43] usb 4-1: SerialNumber: syz [ 803.364864][ T43] usb 4-1: config 0 descriptor?? [ 803.418230][T16979] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2982'. [ 803.581017][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2984'. [ 803.625454][ T43] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 803.688567][ T43] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 803.770266][ T43] usb 4-1: USB disconnect, device number 102 [ 803.973581][ T7652] IPVS: stop unused estimator thread 0... [ 804.198866][ T980] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 804.464280][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.504799][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.542295][ T980] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 804.564429][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.627020][ T980] usb 7-1: config 0 descriptor?? [ 804.925100][T17020] input: syz0 as /devices/virtual/input/input38 [ 805.057921][ T980] hid-thrustmaster 0003:044F:B65D.0041: unknown main item tag 0x0 [ 805.108135][ T980] hid-thrustmaster 0003:044F:B65D.0041: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 805.183200][ T980] hid-thrustmaster 0003:044F:B65D.0041: Wrong number of endpoints? [ 805.268272][T16766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 805.338688][ C1] hid-thrustmaster 0003:044F:B65D.0041: URB to get model id failed with error -71 [ 805.359330][ T43] usb 7-1: USB disconnect, device number 35 [ 805.384763][T16766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 805.443702][T16766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 805.487542][T16766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 805.871259][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.993864][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.060632][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.067903][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.117830][T17044] netlink: 'syz.6.2996': attribute type 1 has an invalid length. [ 806.222332][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.229632][ T7652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.266898][T17050] bond1: (slave gretap1): making interface the new active one [ 806.276012][T17050] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 806.379944][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 806.397617][T16766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 806.420695][ T5919] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 806.429037][T16766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.529272][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.572739][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 806.592265][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.629006][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 806.638505][ T5919] usb 6-1: config 0 has no interfaces? [ 806.641238][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 806.657963][ T5919] usb 6-1: New USB device found, idVendor=0ed0, idProduct=10b8, bcdDevice=de.8e [ 806.667433][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.683715][ T5919] usb 6-1: Product: syz [ 806.695669][ T5919] usb 6-1: Manufacturer: syz [ 806.702842][ T5919] usb 6-1: SerialNumber: syz [ 806.790202][ T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 806.801982][T16766] veth0_vlan: entered promiscuous mode [ 806.808990][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.834714][T16766] veth1_vlan: entered promiscuous mode [ 806.840290][ T24] usb 5-1: config 0 descriptor?? [ 806.867762][ T5919] usb 6-1: config 0 descriptor?? [ 808.107420][T17043] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2995'. [ 808.146649][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'. [ 808.203486][T16766] veth0_macvtap: entered promiscuous mode [ 808.361580][T17048] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 808.387320][T16766] veth1_macvtap: entered promiscuous mode [ 808.405971][ T5919] usb 6-1: USB disconnect, device number 90 [ 808.523850][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.572991][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.599371][ T24] hid-steam 0003:28DE:1102.0042: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 808.619096][T16766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.647680][T16766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.689497][T16766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.698374][T16766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.831595][ T24] usb 5-1: USB disconnect, device number 7 [ 808.857125][T17071] netlink: 'syz.3.3001': attribute type 1 has an invalid length. [ 808.974935][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.981698][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.043554][ T7645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.060230][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.157098][T17079] netlink: 'syz.3.3005': attribute type 32 has an invalid length. [ 809.162700][ T9050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.176474][ T9050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.190981][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3005'. [ 809.244543][T17079] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 809.518724][T17095] team_slave_0: entered promiscuous mode [ 809.524543][T17095] team_slave_1: entered promiscuous mode [ 809.544061][T17095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 809.609725][T17095] team_slave_0: left promiscuous mode [ 809.615262][T17095] team_slave_1: left promiscuous mode [ 809.858927][ T1781] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 810.299446][ T1781] usb 7-1: config 0 has no interfaces? [ 810.477436][ T1781] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 810.526993][ T1781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.545864][ T1781] usb 7-1: Product: syz [ 810.551124][ T1781] usb 7-1: Manufacturer: syz [ 810.561220][ T1781] usb 7-1: SerialNumber: syz [ 810.586502][ T1781] usb 7-1: config 0 descriptor?? [ 810.918040][T17111] tipc: Started in network mode [ 810.950201][T17111] tipc: Node identity 8a57f2817465, cluster identity 4711 [ 810.959191][T17111] tipc: Enabled bearer , priority 0 [ 811.015216][T17111] syzkaller0: entered promiscuous mode [ 811.039067][T17111] syzkaller0: entered allmulticast mode [ 811.469071][ T1781] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 811.653117][ T1781] usb 4-1: Using ep0 maxpacket: 16 [ 811.692335][ T1781] usb 4-1: config 0 has no interfaces? [ 811.725544][ T1781] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 811.746439][ T1781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.766727][ T1781] usb 4-1: Product: syz [ 811.774610][ T1781] usb 4-1: Manufacturer: syz [ 811.786978][ T1781] usb 4-1: SerialNumber: syz [ 811.842600][ T1781] usb 4-1: config 0 descriptor?? [ 811.968931][ T43] tipc: Node number set to 4264751745 [ 812.077152][ T43] usb 4-1: USB disconnect, device number 103 [ 812.100843][T17110] tipc: Resetting bearer [ 812.165416][T17110] tipc: Disabling bearer [ 812.413202][ T1781] usb 7-1: USB disconnect, device number 36 [ 812.615263][T17125] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3018'. [ 813.031710][T17135] netlink: 'syz.4.3017': attribute type 10 has an invalid length. [ 813.039949][T17135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3017'. [ 815.633181][T17162] raw_sendmsg: syz.5.3031 forgot to set AF_INET. Fix it! [ 816.020267][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3034'. [ 816.126421][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3034'. [ 817.810091][T17197] hub 9-0:1.0: USB hub found [ 817.827400][T17197] hub 9-0:1.0: 1 port detected [ 818.305821][T17204] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 818.317814][T17204] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 818.326251][T17204] CPU: 1 UID: 0 PID: 17204 Comm: syz.4.3046 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 818.338354][T17204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 818.348456][T17204] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 818.353887][T17204] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 bd 4a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 da 4e 3e f8 85 [ 818.373547][T17204] RSP: 0018:ffffc9000444f070 EFLAGS: 00010206 [ 818.379642][T17204] RAX: ffffffff898213d3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 818.387632][T17204] RDX: ffffc9000d38c000 RSI: 000000000000033e RDI: 000000000000033f [ 818.395619][T17204] RBP: dffffc0000000000 R08: ffff888026343c00 R09: 0000000000000002 [ 818.403617][T17204] R10: 00000000ffffffff R11: ffffffff898213b0 R12: dffffc0000000000 [ 818.411611][T17204] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88807aa6c000 [ 818.419620][T17204] FS: 00007f90c7bf66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 818.428580][T17204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.435191][T17204] CR2: 0000200000000240 CR3: 000000005e25c000 CR4: 00000000003526f0 [ 818.443196][T17204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000008 [ 818.451209][T17204] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 818.459211][T17204] Call Trace: [ 818.462510][T17204] [ 818.465461][T17204] qdisc_tree_reduce_backlog+0x299/0x480 [ 818.471119][T17204] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 818.476888][T17204] fq_codel_change+0xa96/0xef0 [ 818.481700][T17204] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 818.487291][T17204] ? __pfx_fq_codel_change+0x10/0x10 [ 818.492634][T17204] ? __sock_sendmsg+0x219/0x270 [ 818.497622][T17204] fq_codel_init+0x355/0x960 [ 818.502241][T17204] ? lockdep_rtnl_is_held+0x26/0x40 [ 818.507472][T17204] ? __pfx_fq_codel_init+0x10/0x10 [ 818.512613][T17204] qdisc_create+0x7a9/0xea0 [ 818.517145][T17204] tc_modify_qdisc+0x1426/0x2010 [ 818.522136][T17204] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 818.527476][T17204] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 818.532785][T17204] rtnetlink_rcv_msg+0x77c/0xb70 [ 818.537768][T17204] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 818.542926][T17204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.548412][T17204] ? ref_tracker_free+0x63a/0x7d0 [ 818.553469][T17204] ? __copy_skb_header+0xa7/0x550 [ 818.558531][T17204] ? __pfx_ref_tracker_free+0x10/0x10 [ 818.563961][T17204] netlink_rcv_skb+0x205/0x470 [ 818.568756][T17204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.574261][T17204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.579582][T17204] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.584801][T17204] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.590024][T17204] netlink_unicast+0x758/0x8d0 [ 818.594812][T17204] netlink_sendmsg+0x805/0xb30 [ 818.599604][T17204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.604922][T17204] ? aa_sock_msg_perm+0x94/0x160 [ 818.609898][T17204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 818.615210][T17204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.620527][T17204] __sock_sendmsg+0x219/0x270 [ 818.625226][T17204] ____sys_sendmsg+0x505/0x830 [ 818.630022][T17204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.635337][T17204] ? import_iovec+0x74/0xa0 [ 818.639905][T17204] ___sys_sendmsg+0x21f/0x2a0 [ 818.644612][T17204] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.649850][T17204] ? __fget_files+0x2a/0x420 [ 818.654473][T17204] ? __fget_files+0x3a0/0x420 [ 818.659192][T17204] __x64_sys_sendmsg+0x19b/0x260 [ 818.664189][T17204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 818.669682][T17204] ? do_syscall_64+0xbe/0x3b0 [ 818.674376][T17204] do_syscall_64+0xfa/0x3b0 [ 818.678902][T17204] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.684127][T17204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.690220][T17204] ? clear_bhb_loop+0x60/0xb0 [ 818.694919][T17204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.700830][T17204] RIP: 0033:0x7f90c9d8e929 [ 818.705270][T17204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.725173][T17204] RSP: 002b:00007f90c7bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.733641][T17204] RAX: ffffffffffffffda RBX: 00007f90c9fb5fa0 RCX: 00007f90c9d8e929 [ 818.741644][T17204] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 818.749651][T17204] RBP: 00007f90c9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 818.757654][T17204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.765653][T17204] R13: 0000000000000000 R14: 00007f90c9fb5fa0 R15: 00007f90ca0dfa28 [ 818.773661][T17204] [ 818.776710][T17204] Modules linked in: [ 818.780760][T17204] ---[ end trace 0000000000000000 ]--- [ 818.786246][T17204] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 818.791701][T17204] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 bd 4a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 da 4e 3e f8 85 [ 818.811390][T17204] RSP: 0018:ffffc9000444f070 EFLAGS: 00010206 [ 818.817502][T17204] RAX: ffffffff898213d3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 818.825531][T17204] RDX: ffffc9000d38c000 RSI: 000000000000033e RDI: 000000000000033f [ 818.833569][T17204] RBP: dffffc0000000000 R08: ffff888026343c00 R09: 0000000000000002 [ 818.841653][T17204] R10: 00000000ffffffff R11: ffffffff898213b0 R12: dffffc0000000000 [ 818.849796][T17204] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88807aa6c000 [ 818.857907][T17204] FS: 00007f90c7bf66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 818.866928][T17204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.873573][T17204] CR2: 0000200000000240 CR3: 000000005e25c000 CR4: 00000000003526f0 [ 818.881614][T17204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000008 [ 818.889666][T17204] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 818.897710][T17204] Kernel panic - not syncing: Fatal exception in interrupt [ 818.905290][T17204] Kernel Offset: disabled [ 818.909636][T17204] Rebooting in 86400 seconds..