last executing test programs: 2m20.881966139s ago: executing program 1 (id=912): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x8, 0x800) fsetxattr$security_evm(r3, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "6bcfc674bf8cfd83adbb89a036d38b508c770dc1"}, 0x15, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000700)=ANY=[@ANYBLOB="50020000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf2504000000700001", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000001400020077673200000000000000000000000000080003000200000008000300020000000800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265300000000000000000000000000c00018008000300010000003400018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000140002007767320000000000000000000000000018000180140002006d6163767461703000000000000000005000018008000100", @ANYRES32=r0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726530000000000000000000340001801400020070696d3672656700000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140002006772657461703000000000000000000008000300030000000800", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200636169663000000000000000000000000800030002000000240001800800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400018008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030001000000"], 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000440)={0x77, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r6}) fsetxattr$security_capability(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) semget$private(0x0, 0x4000000009, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000b2, 0xa6040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a3200000000140005"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x2, 0x100000, 0x80000, {r7}}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r13 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r13, 0x0, 0x1) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r12, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 2m17.737789639s ago: executing program 1 (id=919): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) utimes(0x0, &(0x7f0000000080)={{}, {0x0, 0xfffffffffffffffd}}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3ff}, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x4e23, @remote}}, 0x7fffffff, 0x4, 0x5, 0xb, 0x80, 0xa2f, 0x5}, &(0x7f0000000000)=0x9c) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x8, 0x0, 0x0, 0x4000000f, 0x4, "fee8a2ab78fc879fd1ee0d96072000001ea89de2e60080b8785d96000100000000010000000000002a0c0000000000000000000000000040000000e4ff000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0xfffffffffffffffe, 0x3]}}) 2m14.520256049s ago: executing program 1 (id=929): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x18000000, 0x734cc037, 0xffff, 0x0, 0x2, 0x6, 0x1ff, {0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1, 0x7, 0x2, 0x2, 0x9}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x8001, 0x9, [0x1, 0x5, 0x100, 0x4, 0xc0, 0x0, 0x2704, 0x8, 0x2]}, 0x1a) mlockall(0x2) mlockall(0x8) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) 2m13.936136192s ago: executing program 1 (id=930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x110, 0x2, 0x4}}, @ip_ttl={{0x14, 0x110, 0x2, 0x400}}], 0x30, 0x4c00}, 0x810) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) r9 = socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@random, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{0x22, 0x0, '(3'}]}}}}}}, 0x0) 2m10.518837219s ago: executing program 1 (id=938): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2m6.342692097s ago: executing program 1 (id=954): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket(0x3, 0x4, 0x4) close$fd_v4l2_buffer(r2) socket$vsock_stream(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) syz_usb_connect(0x3, 0x444, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x5d, 0x4c, 0xdd, 0x10, 0x19d2, 0x29, 0x919, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x432, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x64, 0x0, 0x10, 0xff, 0xff, 0xff, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "9d"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x13, 0xfffe, 0x90}}], [{{0x9, 0x5, 0x7, 0x8, 0x10, 0x6, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x40, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x5f}, @generic={0xe4, 0x10, "39cdb7994752919968990ff53153117efda0e362825fae0fafb146a4c7db1f363dc1213a77c3b7de13912516b18f857fea7d49b40cbe468007221f61804ff1aac255446f702a0c732e96409fbc433e4b883b5a7d66bb413bd3af02fd85b079d3e71b035cc3f05611f5e6b52d31a24f19841a079153f6e6e24fc72281426aef08a9035b7ef45e88b3ad448efc34757f41631e313315c0f7694783c4de0d21e5efc930545bee8b06913fdfd9f03efadbc61bf65904fa995f9acff619cb5169375d37dba0ac8594b155a7656dd81b09bce6b7e6ba134d94b35560b8facf33588ca82ccb"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xfe, 0xf, 0x85}}, {{0x9, 0x5, 0x5, 0x3, 0x4c0, 0xe7, 0x8b, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x3, 0xe1, 0x8, [@generic={0x72, 0x23, "61abbcfcb2b20d73a2846bda884ddd60b4d7a589e6799c7d5f70568100525c801f3551ccb20168b797ca74257a60e9615e9af0f22f09b9dea86a14b7b34bfae3c068424b95737023f58ed0907e13afefcff1996ad037e93e493625c98f2c23f0223627dbc2b098e59c625343d204ef18"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xc4, 0x1, 0x5}}, {{0x9, 0x5, 0x7c64027087ef8433, 0x3, 0x200, 0x3, 0x3, 0x6, [@generic={0x7a, 0x31, "349e1859403f87954d3066253320ab55dcabeb704a5acc646eaa59b67b64a376e7a5d90d0029ab91a4063d916afbf39583e8428c531ce7c2649bb093725b671e2d579f7f65bd0a83294e7465da2831adfe0d84e61c8e41523e3f030ffe24639b0f43d82324320aebc50697926c731e26910999fdfdaf6101"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xff59}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xff, 0x2, 0x4, [@generic={0x2c, 0x5, "c6d87bba985a6a81b4262e729287a2e581bfda89063f951a12e295a7f035232eb5f428480e7b4a4fce7e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x5, 0x1, [@generic={0x13, 0x5, "b90b4b9ba1ff5ead316c96889f65a5320c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0xdb1a1c98d2baf2f9, 0x31, 0x1, 0xd}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xe, 0x9, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x95, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf6}, @generic={0x8c, 0x1, "07e505da2ff93d80a0a1760fff54847cab017806b751b00e84e9656838690832bed9805962c97356b00263ad72064eeecb22c0736637f1f8d018e950bff55715badad7352681cf13a7d7364d71dbf1bdd75f8f375cf6905194bd1ea8243102ec24b5648632d0432ec4bf254997eab4e19d573eb463f329d15fcac4749183276b86c4d8a417d3ddfc6dd2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xfa, 0x1, 0x31}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x4, 0x9}}, {{0x9, 0x5, 0xd, 0x8, 0x240, 0x3, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9f, 0x1000}, @generic={0xa3, 0x6, "fabd957bc6d0f322f823ccc73fcaaad0f3fb09953d57f403e1690bfb3005c615e9ad1b126645edee4f4c1bd398a2cd8354d565febdb5de7213fd2dac386cce846543360fe1c98f5412693cd8797c189b04f119fb48b91cf931b26950e512b1f719ae99496e023db9517d9a4c25011f9ad4757f798a12125236363627c8fc0f691525a2402f29dd92ec3aea0717a95b7fe1ee91a264269e5e6d46cd8850686c1e99"}]}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x33, 0x0, 0x0) 1m50.804032542s ago: executing program 32 (id=954): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket(0x3, 0x4, 0x4) close$fd_v4l2_buffer(r2) socket$vsock_stream(0x28, 0x1, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) syz_usb_connect(0x3, 0x444, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x5d, 0x4c, 0xdd, 0x10, 0x19d2, 0x29, 0x919, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x432, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x64, 0x0, 0x10, 0xff, 0xff, 0xff, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "9d"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x13, 0xfffe, 0x90}}], [{{0x9, 0x5, 0x7, 0x8, 0x10, 0x6, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x40, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x5f}, @generic={0xe4, 0x10, "39cdb7994752919968990ff53153117efda0e362825fae0fafb146a4c7db1f363dc1213a77c3b7de13912516b18f857fea7d49b40cbe468007221f61804ff1aac255446f702a0c732e96409fbc433e4b883b5a7d66bb413bd3af02fd85b079d3e71b035cc3f05611f5e6b52d31a24f19841a079153f6e6e24fc72281426aef08a9035b7ef45e88b3ad448efc34757f41631e313315c0f7694783c4de0d21e5efc930545bee8b06913fdfd9f03efadbc61bf65904fa995f9acff619cb5169375d37dba0ac8594b155a7656dd81b09bce6b7e6ba134d94b35560b8facf33588ca82ccb"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xfe, 0xf, 0x85}}, {{0x9, 0x5, 0x5, 0x3, 0x4c0, 0xe7, 0x8b, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x3, 0xe1, 0x8, [@generic={0x72, 0x23, "61abbcfcb2b20d73a2846bda884ddd60b4d7a589e6799c7d5f70568100525c801f3551ccb20168b797ca74257a60e9615e9af0f22f09b9dea86a14b7b34bfae3c068424b95737023f58ed0907e13afefcff1996ad037e93e493625c98f2c23f0223627dbc2b098e59c625343d204ef18"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xc4, 0x1, 0x5}}, {{0x9, 0x5, 0x7c64027087ef8433, 0x3, 0x200, 0x3, 0x3, 0x6, [@generic={0x7a, 0x31, "349e1859403f87954d3066253320ab55dcabeb704a5acc646eaa59b67b64a376e7a5d90d0029ab91a4063d916afbf39583e8428c531ce7c2649bb093725b671e2d579f7f65bd0a83294e7465da2831adfe0d84e61c8e41523e3f030ffe24639b0f43d82324320aebc50697926c731e26910999fdfdaf6101"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xff59}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xff, 0x2, 0x4, [@generic={0x2c, 0x5, "c6d87bba985a6a81b4262e729287a2e581bfda89063f951a12e295a7f035232eb5f428480e7b4a4fce7e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x5, 0x1, [@generic={0x13, 0x5, "b90b4b9ba1ff5ead316c96889f65a5320c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0xdb1a1c98d2baf2f9, 0x31, 0x1, 0xd}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xe, 0x9, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x95, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf6}, @generic={0x8c, 0x1, "07e505da2ff93d80a0a1760fff54847cab017806b751b00e84e9656838690832bed9805962c97356b00263ad72064eeecb22c0736637f1f8d018e950bff55715badad7352681cf13a7d7364d71dbf1bdd75f8f375cf6905194bd1ea8243102ec24b5648632d0432ec4bf254997eab4e19d573eb463f329d15fcac4749183276b86c4d8a417d3ddfc6dd2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xfa, 0x1, 0x31}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x4, 0x9}}, {{0x9, 0x5, 0xd, 0x8, 0x240, 0x3, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9f, 0x1000}, @generic={0xa3, 0x6, "fabd957bc6d0f322f823ccc73fcaaad0f3fb09953d57f403e1690bfb3005c615e9ad1b126645edee4f4c1bd398a2cd8354d565febdb5de7213fd2dac386cce846543360fe1c98f5412693cd8797c189b04f119fb48b91cf931b26950e512b1f719ae99496e023db9517d9a4c25011f9ad4757f798a12125236363627c8fc0f691525a2402f29dd92ec3aea0717a95b7fe1ee91a264269e5e6d46cd8850686c1e99"}]}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x33, 0x0, 0x0) 5.60530333s ago: executing program 5 (id=2171): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8b946080, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc0401, 0x0) 5.232271946s ago: executing program 0 (id=2178): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f40100000002010400000000000000000a0000080c00018006000340000100000800094000000000500003802c00018014000300ff01000000000000000000000000000114000400fc0100000000000000000000000000000c00028005000100840000000c0002"], 0x1f4}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000084) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c0100003e0007010000000000000000017c000004008e000c00018006000600800a0000e8000280de0006"], 0x10c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.129143279s ago: executing program 0 (id=2180): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000022) sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x4000) 3.7057325s ago: executing program 0 (id=2201): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 3.152042547s ago: executing program 2 (id=2208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x1, 0x4}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 2.906570962s ago: executing program 2 (id=2213): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) 2.573018876s ago: executing program 3 (id=2216): write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000900)={0xc, 0x7, 0x2, {0x3, '([^'}}, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) 2.476299374s ago: executing program 0 (id=2218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=[{0xc8, 0x10c, 0x3, "6671aed095f9ea692b48a757a3a5711cfce70d7949f1edc65ec2a419e062f00666ef840b55c1be77feb5d5d93aba3dbc9e37ffc8639e119c51036ca43d28e690e5fcae9510ccf0d628f4ff175d0bee85a105dc07b1826ec99a243b0c0359229f32f4229eab25b75424d5a899247c2ab0b3544ff57364f6ba51ce8767abb4962d08c117c0abb8177d01d124dcd5283dcc7c051b12989f68a6a562a551f3853bdd98946b56451ef470d2a428da2a26025c72"}, {0xe8, 0x10e, 0xe, "d6c3867ba0f215ea45933f57e4c0a8876dd249a8ae25ef1d07b4b428841eb4fb922dd7a70b4ea634f3dbf0a1c1f617bbf4c56afdc4a90d2725a5370ea1006c4cb6a5908ae9259273fab275bc05535f312f08ecbec663d2843a3ba3546cf14ca4596fb7b3307e881f80937a84a45430cdf147efb22ad0a263c8df1e99d3d8782f257f2fbccb786a4042f7030cbb9e34ef7b044abc32393959dcce51a0e1e9139488c2cf58a38cba17b2ba661e359f7591c97c73c5441e402e9fe5478a1807e1d84205c339b275aed4b18e07fc32dbef3ec2"}, {0xa0, 0x114, 0x10, "915579ce67ff80abb1697e46bed7100942fa93d8616e13184287766b2fd7e4b2b98817df5ee3649bbe3135dbf40cf04ff1dae7e9c447d4f1fbd6efdf34eac66362ff66f49324186f32eeea86fa93d1db5473292c7aa6ee0def7a558f85baab6250b2bf8a7a8af95d57a3529d6484318c862104cb3decbf5ad9cfa6f7b8d5320ac3e62b53a4d81d5a6c"}, {0xd0, 0x114, 0xffffff00, "18877ce15762d7a6e45b603b2d74d16fee663cd85b66c1e6c0d6f2d0bc8cb06a7e6a6fcae9656e7605d990dcff4deb4d88ee625c8575882d1b47a69b7aa2c0cc0ebaaaca5288f4717b19f87be9dda1e5c218cf457754a2153c1e19ebfd981fecf9e071ff0ab248c50beca85f2da4f74f2ce94fc79375d926b69085d1c1211fdea58b1cf1e48f642e17a22dfcdd99c3cb96d76cde93cd9e0488107e8b127a91a38048f587ac246e50c2ffc3bfed84a16e00f20178d3536d08c4"}, {0xf0, 0xff, 0x2, "9b0456a1a94a80259de5b8eae091a19626abc33038e0d05c142a73280aac2d7837ee10d12c163f99772d658b1fdbb8e9d6485a588d46df8bdbf42703a7e067e232bb72ec2b67e6b52f4370a6c25f9b4ff28285e06483726f5ab3f27decf1aa0b534aed823248b5bedd9b9ed2d52334dad85dcb17a2a1583fd593bbcb3c29b9aca467262ff52765213f879b12413a1f421e7cc05a077674be3a48f5c5a7106d8ea65f5ce300a5db8b2dd0ec04546f7bfe4445852e7f45d9383f7ed78963cd7db270a8388b2740557d1a1de56d5754a94d58d1cce12423dcd278"}, {0x20, 0x115, 0x4, "b768c3105e860d1819"}, {0x7a0, 0x107, 0x5, "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"}, {0x10, 0x11a, 0x7}], 0xbe0}}], 0x1, 0x40) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.387746864s ago: executing program 3 (id=2219): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)='?', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000340)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x8000, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 2.114175052s ago: executing program 0 (id=2222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, 0x0}]) 2.062644054s ago: executing program 3 (id=2223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) timerfd_create(0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) 1.694960269s ago: executing program 4 (id=2226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 1.508405976s ago: executing program 4 (id=2227): r0 = socket(0x11, 0x3, 0x1000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x8001, @broadcast}, {0x2, 0xfffd, @loopback}, {0x2, 0x4e20, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}) 1.437141799s ago: executing program 0 (id=2228): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000086a05190300000000000109022400010000500a0904000004030003000921faff080122070009058103ff"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "eb3d5ee1"}, @local=@item_012={0x0, 0x2, 0x16}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) 1.407459791s ago: executing program 4 (id=2229): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 837.743356ms ago: executing program 2 (id=2230): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @local}, 0x2}}, 0x2e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, 0x0) 835.68968ms ago: executing program 5 (id=2231): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(r0) 665.863044ms ago: executing program 4 (id=2232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=[{0xc8, 0x10c, 0x3, "6671aed095f9ea692b48a757a3a5711cfce70d7949f1edc65ec2a419e062f00666ef840b55c1be77feb5d5d93aba3dbc9e37ffc8639e119c51036ca43d28e690e5fcae9510ccf0d628f4ff175d0bee85a105dc07b1826ec99a243b0c0359229f32f4229eab25b75424d5a899247c2ab0b3544ff57364f6ba51ce8767abb4962d08c117c0abb8177d01d124dcd5283dcc7c051b12989f68a6a562a551f3853bdd98946b56451ef470d2a428da2a26025c72"}, {0xe8, 0x10e, 0xe, "d6c3867ba0f215ea45933f57e4c0a8876dd249a8ae25ef1d07b4b428841eb4fb922dd7a70b4ea634f3dbf0a1c1f617bbf4c56afdc4a90d2725a5370ea1006c4cb6a5908ae9259273fab275bc05535f312f08ecbec663d2843a3ba3546cf14ca4596fb7b3307e881f80937a84a45430cdf147efb22ad0a263c8df1e99d3d8782f257f2fbccb786a4042f7030cbb9e34ef7b044abc32393959dcce51a0e1e9139488c2cf58a38cba17b2ba661e359f7591c97c73c5441e402e9fe5478a1807e1d84205c339b275aed4b18e07fc32dbef3ec2"}, {0xa0, 0x114, 0x10, "915579ce67ff80abb1697e46bed7100942fa93d8616e13184287766b2fd7e4b2b98817df5ee3649bbe3135dbf40cf04ff1dae7e9c447d4f1fbd6efdf34eac66362ff66f49324186f32eeea86fa93d1db5473292c7aa6ee0def7a558f85baab6250b2bf8a7a8af95d57a3529d6484318c862104cb3decbf5ad9cfa6f7b8d5320ac3e62b53a4d81d5a6c"}, {0xd0, 0x114, 0xffffff00, "18877ce15762d7a6e45b603b2d74d16fee663cd85b66c1e6c0d6f2d0bc8cb06a7e6a6fcae9656e7605d990dcff4deb4d88ee625c8575882d1b47a69b7aa2c0cc0ebaaaca5288f4717b19f87be9dda1e5c218cf457754a2153c1e19ebfd981fecf9e071ff0ab248c50beca85f2da4f74f2ce94fc79375d926b69085d1c1211fdea58b1cf1e48f642e17a22dfcdd99c3cb96d76cde93cd9e0488107e8b127a91a38048f587ac246e50c2ffc3bfed84a16e00f20178d3536d08c4"}, {0xf0, 0xff, 0x2, "9b0456a1a94a80259de5b8eae091a19626abc33038e0d05c142a73280aac2d7837ee10d12c163f99772d658b1fdbb8e9d6485a588d46df8bdbf42703a7e067e232bb72ec2b67e6b52f4370a6c25f9b4ff28285e06483726f5ab3f27decf1aa0b534aed823248b5bedd9b9ed2d52334dad85dcb17a2a1583fd593bbcb3c29b9aca467262ff52765213f879b12413a1f421e7cc05a077674be3a48f5c5a7106d8ea65f5ce300a5db8b2dd0ec04546f7bfe4445852e7f45d9383f7ed78963cd7db270a8388b2740557d1a1de56d5754a94d58d1cce12423dcd278"}, {0x20, 0x115, 0x4, "b768c3105e860d1819"}, {0x7a0, 0x107, 0x5, "1ab876848f27ccf711053808376477fc871462fc36e5c228ed2e78ac182bee81db1fde696c72c8bf34ca12d688f8dffc53910ead6260fa1ae23b44b5fe1c0912125bda6c0d7f3ebc26c50cbf37230a7313afd79137acdc0b185bb59671d1dc980a5f2d7c36e9720fc851d4ab63f327d1b5412bb5a1ec53b43fec9e21defde9e81f7aa25aaa352c7664dbfa13a45c868ed14481761be8936a2445fbf8b95272cb75548e2044d21acdcdc89a9b044d1290e8c4580b22da4cf44e0f28e56f6e62c9d0c345d3bba9820ae5f4a2be2703856d43709322e1c9390670a5f06f906b410e46468a244e1d29ebd79906dd967d62859b530864ced988a2b6eaa3fefca84150e1df6fccda0c2e8582a9636f60893ba1222a37019709b96f775afbc0b55bd2c8bf87d821e9bb873129df2ff07f6c99f74681d7c682cc68d0868e0bdeef0f3a8ef4ef96654e0cab7a408020fc9fdfaeaaa939069e9d46600f183bef80e741d037ec4a9de86263c31ca590891a2190ac9581e1a887d5c42f519ba446fbaf0bd48fb3e8fc9da1cd5439696f2f0fc7a05d853811fd283b0fb89ee5bf8eed91904d319a258e6ef94e31492801e199ca8e76a6a54eb25a38e774720ca25b56674177cb3d8c2c7f3a1702b1168d97c4f8b1a8810bee40062ec220f7c8203d9783ce14f3fceacfef05e16f14929e75dd73e5dbbc0c8b8b0f52cd6203231617de67f94adf380bfc40f0f619dd20d107896c53fcea9d39b13caefe300a58fb591252b8908d1b590e681ab0817deee7e0b3b9ff972ca983a85153846636e73fe23779df515c79d98e8f2f46ddc65694a624ba11d977d0c4ec09d008f87d71d14ddc993c79c8631fbe96c5693d7215514427e45f3e584c4e46d4ce258cb04a1d3ca246101287b45f4b15fa9d84641bad7bcef48e072721c2955ffe9be73775ae242d2cd1b370e0137e0ba779cbdf64f17ec5119b0361e071b6c51bd55a4aa4de98526ba7268106d3cae943aaf73dc4e14dbf498f122d0c6841cd6c8ecb429db5ae75c2e29ac8fcad48ea3c5a3985d2c233e1f40a5ce6377d60ebd8994c93598d962e2fe6b151119bacd0e16d9a30cbbeb11b2b798a33a491171e1b3ceb67ed48b777f7ce1dcdade30d6ce6310815fffab98016d826d4fdae7bef3153b7f122df56711ffb0ede7234a8f76f7d6f3dd0ed1d79b4db64ecb0823d5d68b7e894b1f992a3cdfc62ba563f91c616fe8d7a27d440ae66d5dd9cf29b2055a07fd9b5cc1011f983b627fddf2470308f5656b58f7a0ebc0ee00758098c26cee1626d0bf3278c6bde2f1cfc16b728e46ca91628b795abc40ddb7c5da9e7b11c510789e41a54716607e2d3efab7e5a1829def2ffda2df9b9e3173ca862ae5ba0ad72fc92e20bddfccb1d1ec5150905e39ac0c835b1cdc476162068d3dafad583f9f5f91e4460b0c471413bf60bc6ec5a3a09e275943b2761bca68d569fc4f5e4b755e0a7d22714195ca344c7c0d01051361ded02f5840cb029a05028bbeee93b2e0628d1363c923c4e2acc22becd9e81d1a0684a9098bcca57fab81b69fe43fbc4d2809353e7cb8473ffba9df8acc22d5482950865b982fef7c9e6fff3077c3fc54608e67580e79367f762f9f601033b0621fdc89cadc4caf91ae2d1818776c4b4f58c3df471b2889b603d8131971b5514be29c49f9a4c477cb7a6edc102c1f8ed642787f90572440086a3e07c687e77858f7a9e355e7b56c5453a203ef252293db58e3c1c17d040c9f59ff108aec3553e31d718405ddad18bd3453f87ab69047f82f73de3d6fbf048ca9049e659067dfdc4d45d10c326c16075a21c68c18b0730945387542c8e9208e327932a6aad388eae93a4881fe75ea86fd0512f029e7ce0015f8bb7a4facf92c3684dd604d82696688bfb936a1e8647aa1004a01fb9761a1d33c1d726c6ecb0084bc9b615ce25685f024c520503f7fdfd335f2f0fcbdd6a3fea82511d3079cd149794e301736271ce5c07e02f00fd6b8dcb60a771f0348fbe1320a7f31fe3c607f95505297ee64124335d2b12ea6763004ced036ff5840dfd52dabd313d1943df71fd2d52c8d7f67bdf4e5c39b3d819de23967b9dbe1ef75e4446af4658fe0cec421945ae22e27f946a1eb62bd3de20d04da87d2e7ca5b7ab3cca3fcdc8b801a8cf5bf7b090d5ad95abafd28e9a08cbc4273a319875578587a8efb282292ea334644e9bc2dab5e522932eb54de671aa448b8a42850a5bab8a4175af661cb27cc634e65a35e5383da83711597b1a10effa964348ac88d11b8f86d05b442e8fc882a11bca8c79f37ffd93c8fdff8882923d5fea8dacf9857a4807d573661e5f9b42c5f32f406101fa5841df075ecd59191e3d5382cc3ca268999f9244736c4e2838af892d46f2c1d5f708a3b864be76de7e226253482443b9c2b78644f7965d661e9e459ac59d4906a206b893403035e32adf6504a9928e1eff6155cf44cc1acf7cd719977ed9c440f427e1f373115118efbec3a1bc73d7d70cd25f8f68b36f3e5d527e4099849163e06fdb658c144570a896905db9a87d3ad51da4b545d39b8f6fa4a4a2af10fbe7ff25dd4d2dd8ee73de54a341eeec186a745eb045858daf664935943906da488d83a282d28937a886c106bc91c43965bb35e51ae7556c63db7f447d9c4e298696f0ed979382058f056b9f09dd5694a987d384e7f58b919066b9d189553be588340eed90f4"}, {0x10, 0x11a, 0x7}], 0xbe0}}], 0x1, 0x40) ioctl$KVM_RUN(r3, 0xae80, 0x0) 665.149373ms ago: executing program 2 (id=2233): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)='?', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000340)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x8000, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 548.436929ms ago: executing program 5 (id=2234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 480.521403ms ago: executing program 5 (id=2235): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 400.944557ms ago: executing program 3 (id=2236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 356.487518ms ago: executing program 5 (id=2237): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0xfffffff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) epoll_pwait(r3, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f0000000240)={[0x10000]}, 0x8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x2, 0x0) fsetxattr(r4, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 336.730946ms ago: executing program 2 (id=2238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) times(0x0) 323.588741ms ago: executing program 4 (id=2239): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000040)=""/37, 0x25, 0x9d) 224.220972ms ago: executing program 3 (id=2240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 152.931955ms ago: executing program 5 (id=2241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x9, 0x9], 0x0, 0x2280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x11, 0x3, 0x40000) mmap(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x5, 0x13, r3, 0x836f3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) 152.343571ms ago: executing program 2 (id=2242): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x210986, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x3, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="0a2eeb7418000039ff82745dba9700000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x20040054) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) 137.348392ms ago: executing program 4 (id=2243): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00'}, 0x18) close(r0) 0s ago: executing program 3 (id=2244): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _register_driver returned -16 [ 309.032808][ T5958] usb 2-1: USB disconnect, device number 60 [ 309.129904][ T5952] usb 4-1: device descriptor read/64, error -71 [ 309.337458][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.838'. [ 309.374495][ T5952] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 309.504391][ T5952] usb 4-1: device descriptor read/64, error -71 [ 309.645538][ T5952] usb usb4-port1: attempt power cycle [ 310.115067][ T5952] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 310.150489][ T5952] usb 4-1: device descriptor read/8, error -71 [ 310.177093][ T9154] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 310.394579][ T5952] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 310.435177][ T5952] usb 4-1: device descriptor read/8, error -71 [ 310.544734][ T5952] usb usb4-port1: unable to enumerate USB device [ 310.649841][ T1790] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 310.656539][ T1790] cdc_ncm 3-1:1.1: bind() failure [ 310.662087][ T44] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 310.695889][ T1790] usb 3-1: USB disconnect, device number 64 [ 310.799151][ T9166] tipc: Enabling of bearer rejected, failed to enable media [ 310.834822][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 310.860779][ T44] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 310.870703][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.880186][ T44] usb 2-1: Product: syz [ 310.885852][ T44] usb 2-1: Manufacturer: syz [ 310.890547][ T44] usb 2-1: SerialNumber: syz [ 310.909239][ T44] usb 2-1: config 0 descriptor?? [ 310.923229][ T44] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 310.935448][ T44] usb 2-1: Detected FT4233HP [ 310.974400][ T5860] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 311.126214][ T5860] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 311.146627][ T44] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 311.174687][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.182876][ T44] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 311.186324][ T44] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.189184][ T44] usb 2-1: USB disconnect, device number 61 [ 311.191708][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 311.192095][ T44] ftdi_sio 2-1:0.0: device disconnected [ 311.205923][ T5860] usb 5-1: config 0 descriptor?? [ 312.099969][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.850'. [ 312.438733][ T9204] fuse: Unknown parameter 'appraise' [ 313.657267][ T5860] usb 5-1: string descriptor 0 read error: -71 [ 313.682000][ T9223] netlink: 'syz.4.859': attribute type 3 has an invalid length. [ 313.694106][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 313.703057][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 313.712099][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 313.787993][ T5860] usb 5-1: USB disconnect, device number 71 [ 314.704300][ T5860] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 314.885760][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 314.893191][ T5860] usb 3-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 314.917114][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 314.941428][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 137, changing to 11 [ 314.953823][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 34772, setting to 1024 [ 314.965450][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.994339][ T5860] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 315.013721][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.026927][ T5860] usb 3-1: Product: syz [ 315.104417][ T5860] usb 3-1: Manufacturer: syz [ 315.113135][ T5860] usb 3-1: SerialNumber: syz [ 315.136834][ T5860] usb 3-1: config 0 descriptor?? [ 315.153858][ T9240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.279645][ T5860] rc_core: IR keymap rc-xbox-dvd not found [ 315.285691][ T5860] Registered IR keymap rc-empty [ 315.291519][ T5860] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 315.302974][ T5860] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 315.375249][ T5860] usb 3-1: USB disconnect, device number 65 [ 315.381242][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 315.736555][ T1790] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 315.912282][ T9260] loop9: detected capacity change from 0 to 7 [ 315.930849][ T5966] buffer_io_error: 10 callbacks suppressed [ 315.930869][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 315.973493][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 315.983281][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.009366][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.040536][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.052613][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.069272][ T9267] tipc: Enabled bearer , priority 0 [ 316.076654][ T9267] syzkaller0: entered promiscuous mode [ 316.082146][ T9267] syzkaller0: entered allmulticast mode [ 316.099923][ T9267] tipc: Resetting bearer [ 316.111284][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.120966][ T5966] ldm_validate_partition_table(): Disk read failed. [ 316.138535][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.150025][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.158537][ T5966] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.175122][ T5966] Dev loop9: unable to read RDB block 0 [ 316.188305][ T5966] loop9: unable to read partition table [ 316.202760][ T5966] loop9: partition table beyond EOD, truncated [ 316.239645][ T9260] ldm_validate_partition_table(): Disk read failed. [ 316.249372][ T9260] Dev loop9: unable to read RDB block 0 [ 316.258021][ T9260] loop9: unable to read partition table [ 316.263985][ T9260] loop9: partition table beyond EOD, truncated [ 316.271654][ T9260] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 316.271654][ T9260] ) failed (rc=-5) [ 316.298699][ T9259] tipc: Resetting bearer [ 316.316396][ T9259] tipc: Disabling bearer [ 316.941688][ T9277] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[9277] [ 317.454631][ T1790] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 317.624458][ T1790] usb 4-1: Using ep0 maxpacket: 32 [ 317.696342][ T1790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.715803][ T1790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.774460][ T1790] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 317.796411][ T1790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.838791][ T1790] usb 4-1: config 0 descriptor?? [ 317.878251][ T9286] netlink: 5 bytes leftover after parsing attributes in process `syz.2.872'. [ 317.897224][ T9286] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 317.909462][ T9286] 0ªX¹¦D: entered allmulticast mode [ 317.915452][ T9286] veth0_macvtap: entered allmulticast mode [ 317.922485][ T9286] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 318.176130][ T5860] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 318.388475][ T5860] usb 3-1: No LPM exit latency info found, disabling LPM. [ 318.397565][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.417568][ T5860] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.40 [ 318.430537][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.488405][ T5860] usb 3-1: Product: Ꭿ⳾èœïŒ£ã˜½ç½¸ä¾à¤Ÿè§Šà¼ªã­²ë¦°ê©¾à°°æ›œåˆ‘襇랷㉴ᨋ动燵뗱硊첷䡧锔л剑쉿ê†î¨¼è®æ¢™ÃºÃ™ë²µè³–Ꮉ齧囎왔藈ë´ä¢â£‰Î´è‚﹦ݮ索耓é‹è³Šë¤ã¶–å‚ܵ侫鶰뢈죓ÂѶí·ê³¯â‘¿ë‰°ç¶´ [ 318.581128][ T5860] usb 3-1: Manufacturer: ୌ㥉æ§ï¾§î¨ ê‘—è¸ë•íŠ¬ãš³ä… é‰°ê®¤â ¡ï®ä†«à²¥ì‰¹ç¹à¶¤î¥‹å‰Ÿã¸—塽焥ӥ謙ꩽã»ì† áŒ“톑措劑ꀲ㤱밴楾î›å²¸á•¿ç­¨ç€žï½‘è­ãµ†ç²œç‡²é¶»èŒé¯—扶몚缀▄钳㜺㻽镩艛榭ä„ꨜთ颹簖厸を〶࿊콃 [ 318.679106][ T5860] usb 3-1: SerialNumber: á  [ 318.755920][ T5860] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 318.826876][ T5860] usb 3-1: no configuration chosen from 1 choice [ 318.964615][ T9299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.875'. [ 319.203130][ T9305] netlink: 62 bytes leftover after parsing attributes in process `syz.1.877'. [ 319.980644][ T9313] tipc: Can't bind to reserved service type 2 [ 320.426909][ T1790] usbhid 4-1:0.0: can't add hid device: -71 [ 320.436354][ T1790] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 320.447175][ T1790] usb 4-1: USB disconnect, device number 46 [ 320.692041][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 320.971667][ T5860] usb 3-1: USB disconnect, device number 66 [ 321.013271][ T9322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.608396][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.615374][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.941412][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.890'. [ 322.954955][ T9351] batadv_slave_0: entered promiscuous mode [ 322.984448][ T5952] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 323.012979][ T5866] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 323.144687][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 323.152686][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.174691][ T5952] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 323.187648][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.198992][ T5952] usb 2-1: Product: syz [ 323.203262][ T5952] usb 2-1: Manufacturer: syz [ 323.210204][ T5952] usb 2-1: SerialNumber: syz [ 323.231593][ T5860] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 323.250709][ T5952] usb 2-1: config 0 descriptor?? [ 323.271171][ T5952] hub 2-1:0.0: bad descriptor, ignoring hub [ 323.280226][ T5952] hub 2-1:0.0: probe with driver hub failed with error -5 [ 323.464304][ T5860] usb 3-1: device descriptor read/64, error -71 [ 323.766440][ T5860] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 323.961120][ T5860] usb 3-1: device descriptor read/64, error -71 [ 324.074571][ T5860] usb usb3-port1: attempt power cycle [ 324.094453][ T44] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 324.244292][ T44] usb 4-1: device descriptor read/64, error -71 [ 324.550935][ T5860] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 324.588772][ T5860] usb 3-1: device descriptor read/8, error -71 [ 324.639009][ T44] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 325.125094][ T44] usb 4-1: device descriptor read/64, error -71 [ 325.144274][ T5860] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 325.260169][ T5860] usb 3-1: device descriptor read/8, error -71 [ 325.303673][ T44] usb usb4-port1: attempt power cycle [ 325.396420][ T5860] usb usb3-port1: unable to enumerate USB device [ 325.510778][ T9373] fuse: Bad value for 'fd' [ 325.664315][ T44] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 325.778853][ T44] usb 4-1: device descriptor read/8, error -71 [ 326.144308][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 326.234659][ T44] usb 4-1: device descriptor read/8, error -71 [ 326.374741][ T44] usb usb4-port1: unable to enumerate USB device [ 326.694698][ T5958] usb 2-1: USB disconnect, device number 62 [ 326.964293][ T5958] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 327.076430][ T9394] raw_sendmsg: syz.4.901 forgot to set AF_INET. Fix it! [ 327.145379][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.167291][ T5958] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 327.204313][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.235744][ T5958] usb 2-1: config 0 descriptor?? [ 327.244694][ T5988] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 327.406492][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.432338][ T5988] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 327.473207][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.536667][ T5988] usb 4-1: config 0 descriptor?? [ 327.995478][ T5988] xinmo 0003:16C0:75E1.000A: ignoring exceeding usage max [ 328.013633][ T5988] xinmo 0003:16C0:75E1.000A: hidraw0: USB HID v0.00 Device [HID 16c0:75e1] on usb-dummy_hcd.3-1/input0 [ 328.191927][ T44] usb 4-1: USB disconnect, device number 51 [ 328.262292][ T9410] fido_id[9410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 328.796934][ T9408] vivid-007: ================= START STATUS ================= [ 328.822469][ T9408] vivid-007: Enable Output Cropping: true [ 328.870585][ T9408] vivid-007: Enable Output Composing: true [ 328.881573][ T9408] vivid-007: Enable Output Scaler: true [ 328.887475][ T9408] vivid-007: Tx RGB Quantization Range: Automatic [ 328.895611][ T9408] vivid-007: Transmit Mode: HDMI [ 328.900922][ T9408] vivid-007: Hotplug Present: 0x00000000 [ 328.908818][ T9408] vivid-007: RxSense Present: 0x00000000 [ 328.914857][ T9408] vivid-007: EDID Present: 0x00000000 [ 328.920360][ T9408] vivid-007: ================== END STATUS ================== [ 329.212862][ T9422] netlink: 52 bytes leftover after parsing attributes in process `syz.4.903'. [ 329.436889][ T30] audit: type=1800 audit(1755224422.951:221): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.906" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 330.136042][ T5958] usbhid 2-1:0.0: can't add hid device: -71 [ 330.142156][ T5958] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 330.342262][ T5958] usb 2-1: USB disconnect, device number 63 [ 331.236424][ T9449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.249054][ T9449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.912'. [ 331.494441][ T44] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 331.532994][ T9366] delete_channel: no stack [ 331.656383][ T44] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 331.692009][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 331.703592][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 331.734453][ T44] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 331.755230][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.774414][ T1790] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 331.792399][ T44] usb 5-1: config 0 descriptor?? [ 331.801905][ T9451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.994780][ T1790] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 332.017387][ T1790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.037795][ T1790] usb 4-1: config 0 has no interface number 0 [ 332.095094][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 332.107081][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 332.129323][ T1790] usb 4-1: config 0 interface 205 has no altsetting 0 [ 332.141455][ T44] usb 5-1: USB disconnect, device number 73 [ 332.156031][ T1790] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 332.172586][ T1790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.201545][ T1790] usb 4-1: Product: syz [ 332.210656][ T1790] usb 4-1: Manufacturer: syz [ 332.223054][ T1790] usb 4-1: SerialNumber: syz [ 332.274770][ T1790] usb 4-1: config 0 descriptor?? [ 332.303208][ T1790] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 332.316950][ T1790] dvb-usb: bulk message failed: -22 (3/0) [ 332.339349][ T1790] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 332.349500][ T1790] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 332.363811][ T1790] usb 4-1: media controller created [ 332.379024][ T1790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.392277][ T1790] dvb-usb: bulk message failed: -22 (6/0) [ 332.402066][ T1790] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 332.437729][ T1790] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 332.512228][ T1790] dvb-usb: schedule remote query interval to 150 msecs. [ 332.533624][ T1790] dvb-usb: bulk message failed: -22 (3/0) [ 332.564356][ T1790] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 332.606058][ T1790] usb 4-1: USB disconnect, device number 52 [ 332.824488][ T5958] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 332.854979][ T1790] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 333.204533][ T5958] usb 5-1: device descriptor read/64, error -71 [ 333.489483][ T5958] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 334.084449][ T5958] usb 5-1: device descriptor read/64, error -71 [ 334.309931][ T5958] usb usb5-port1: attempt power cycle [ 334.434345][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 334.564876][ T9] usb 2-1: device descriptor read/64, error -71 [ 334.664360][ T5958] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 334.705034][ T5958] usb 5-1: device descriptor read/8, error -71 [ 334.804465][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 334.964906][ T5958] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 334.972628][ T9] usb 2-1: device descriptor read/64, error -71 [ 335.031174][ T5958] usb 5-1: device descriptor read/8, error -71 [ 335.126849][ T9] usb usb2-port1: attempt power cycle [ 335.174654][ T5958] usb usb5-port1: unable to enumerate USB device [ 335.475384][ T9495] netlink: 'syz.2.920': attribute type 4 has an invalid length. [ 335.524282][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 335.539571][ T9496] netlink: 'syz.2.920': attribute type 4 has an invalid length. [ 335.601451][ T9] usb 2-1: device descriptor read/8, error -71 [ 335.614545][ T44] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 335.796463][ T44] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.807292][ T44] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 335.845957][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.856569][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 335.869090][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 335.890878][ T44] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.914265][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 335.915160][ T44] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.935011][ T44] usb 4-1: Product: syz [ 335.935024][ T9] usb 2-1: device descriptor read/8, error -71 [ 335.947237][ T44] usb 4-1: Manufacturer: syz [ 335.976145][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 335.982089][ T44] cdc_wdm 4-1:1.0: skipping garbage [ 335.993496][ T44] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 336.000653][ T44] cdc_wdm 4-1:1.0: Unknown control protocol [ 336.044937][ T9] usb usb2-port1: unable to enumerate USB device [ 336.698108][ T44] usb 4-1: USB disconnect, device number 53 [ 338.084468][ T5958] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 338.304221][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 338.329075][ T9525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.400488][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.931'. [ 338.502463][ T5958] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 338.511911][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.521212][ T5958] usb 4-1: Product: syz [ 338.526118][ T5958] usb 4-1: Manufacturer: syz [ 338.539352][ T5958] usb 4-1: SerialNumber: syz [ 338.614385][ T44] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 338.669188][ T5958] r8152-cfgselector 4-1: Unknown version 0x0000 [ 338.687989][ T5958] r8152-cfgselector 4-1: config 0 descriptor?? [ 338.784285][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 338.803624][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 338.813834][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 338.839390][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 338.890705][ T44] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 338.944300][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.961306][ T44] usb 2-1: Product: syz [ 339.006892][ T44] usb 2-1: Manufacturer: syz [ 339.019172][ T44] usb 2-1: SerialNumber: syz [ 339.134024][ T44] usb 2-1: config 0 descriptor?? [ 339.175325][ T9527] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 339.498965][ T44] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 339.528028][ T44] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 339.554402][ T44] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 339.560353][ T44] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 339.682356][ T44] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 340.019645][ T9521] netlink: 'syz.1.930': attribute type 5 has an invalid length. [ 340.051229][ T9521] ip6erspan0: entered promiscuous mode [ 340.164464][ T44] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 340.195517][ T9521] bridge0: port 3(macsec0) entered blocking state [ 340.251019][ T9521] bridge0: port 3(macsec0) entered disabled state [ 340.285901][ T9521] macsec0: entered allmulticast mode [ 340.298771][ T9521] veth1_macvtap: entered allmulticast mode [ 340.335410][ T9521] macsec0: entered promiscuous mode [ 340.369409][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.390680][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.414910][ T9521] bridge0: port 3(macsec0) entered blocking state [ 340.421794][ T9521] bridge0: port 3(macsec0) entered forwarding state [ 340.456068][ T44] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 340.474334][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.521511][ T44] usb 3-1: config 0 descriptor?? [ 340.549632][ T5860] usb 2-1: USB disconnect, device number 68 [ 340.571415][ T5860] mcba_usb 2-1:0.0 can0: device disconnected [ 341.001952][ T44] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 341.049754][ T44] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 341.071446][ T44] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 341.099587][ T44] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 341.157086][ T5958] r8152-cfgselector 4-1: Unknown version 0x0000 [ 341.178800][ T5958] r8152-cfgselector 4-1: bad CDC descriptors [ 341.199751][ T9538] netlink: 'syz.2.933': attribute type 9 has an invalid length. [ 341.208556][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 341.218055][ T44] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 341.255655][ T5958] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 341.281780][ T44] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 341.341976][ T9538] netlink: 'syz.2.933': attribute type 9 has an invalid length. [ 341.350956][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.394736][ T1085] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.405077][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 341.424480][ T1085] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.433278][ T1085] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.609468][ T44] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 32: -71 [ 341.637686][ T44] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -71 [ 341.664514][ T44] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense [ 341.682248][ T9562] syzkaller0: entered promiscuous mode [ 341.683846][ T44] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 341.690915][ T9562] syzkaller0: entered allmulticast mode [ 341.726362][ T44] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71 [ 341.788531][ T44] usb 3-1: USB disconnect, device number 71 [ 343.194680][ T44] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 343.360757][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 343.368820][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 343.382889][ T44] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 343.392706][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.403124][ T44] usb 4-1: Product: syz [ 343.408487][ T44] usb 4-1: Manufacturer: syz [ 343.413464][ T44] usb 4-1: SerialNumber: syz [ 343.422588][ T44] usb 4-1: config 0 descriptor?? [ 343.431250][ T44] hub 4-1:0.0: bad descriptor, ignoring hub [ 343.440159][ T44] hub 4-1:0.0: probe with driver hub failed with error -5 [ 343.449824][ T44] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.651218][ T9609] netlink: 484 bytes leftover after parsing attributes in process `syz.3.951'. [ 343.719196][ T9612] ptrace attach of "./syz-executor exec"[5880] was attempted by "./syz-executor exec"[9612] [ 345.806251][ T9633] tipc: Enabling of bearer rejected, failed to enable media [ 346.291437][ T5860] usb 4-1: USB disconnect, device number 55 [ 346.314262][ T5958] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 346.464774][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 346.477328][ T5958] usb 2-1: Using ep0 maxpacket: 16 [ 346.517956][ T5958] usb 2-1: config 0 has an invalid interface number: 100 but max is 0 [ 346.623789][ T5958] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.737453][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 346.749647][ T5958] usb 2-1: config 0 has no interface number 0 [ 346.767532][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 346.797084][ T5958] usb 2-1: config 0 interface 100 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 346.815480][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.903529][ T9] usb 3-1: Product: syz [ 346.925772][ T9] usb 3-1: Manufacturer: syz [ 346.933582][ T5958] usb 2-1: New USB device found, idVendor=19d2, idProduct=0029, bcdDevice= 9.19 [ 346.945793][ T9] usb 3-1: SerialNumber: syz [ 346.956032][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.972071][ T9] usb 3-1: config 0 descriptor?? [ 346.990570][ T5958] usb 2-1: Product: syz [ 346.998273][ T5958] usb 2-1: Manufacturer: syz [ 347.008517][ T5958] usb 2-1: SerialNumber: syz [ 347.032759][ T5958] usb 2-1: config 0 descriptor?? [ 347.075725][ T5958] option 2-1:0.100: GSM modem (1-port) converter detected [ 347.174553][ T5860] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 347.334721][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.346388][ T5860] usb 5-1: config 0 has no interfaces? [ 347.362525][ T5860] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 347.391434][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 347.411084][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.449870][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 347.462640][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.479416][ T9] usb 3-1: media controller created [ 347.522993][ T5860] usb 5-1: config 0 descriptor?? [ 347.584450][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.598930][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.610260][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.660043][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 347.668389][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 347.740732][ T5954] usb 5-1: USB disconnect, device number 78 [ 347.846191][ T5860] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 347.864253][ T9] usb 3-1: USB disconnect, device number 72 [ 347.917496][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 348.026380][ T5860] usb 4-1: device descriptor read/64, error -71 [ 348.274455][ T5860] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 348.425891][ T5860] usb 4-1: device descriptor read/64, error -71 [ 348.537693][ T5860] usb usb4-port1: attempt power cycle [ 348.624335][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 348.718087][ T9662] Lens A: ================= START STATUS ================= [ 348.725788][ T9662] Lens A: Focus, Absolute: 0 [ 348.732072][ T9662] Lens A: ================== END STATUS ================== [ 348.749952][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 348.764330][ T9] usb 5-1: device descriptor read/64, error -71 [ 348.791134][ T9659] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 348.799513][ T9659] macvlan2: entered allmulticast mode [ 348.814830][ T9659] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 348.832404][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 348.874347][ T5860] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 348.895950][ T5860] usb 4-1: device descriptor read/8, error -71 [ 348.904058][ T9659] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 348.991757][ T9659] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 349.100468][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 349.134314][ T5860] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 349.295568][ T9] usb 5-1: device descriptor read/64, error -71 [ 349.416808][ T9] usb usb5-port1: attempt power cycle [ 349.512251][ T5860] usb 4-1: device descriptor read/8, error -71 [ 349.630928][ T5860] usb usb4-port1: unable to enumerate USB device [ 349.867843][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 349.916699][ T9] usb 5-1: device descriptor read/8, error -71 [ 350.164302][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 350.184889][ T9] usb 5-1: device descriptor read/8, error -71 [ 350.294513][ T9] usb usb5-port1: unable to enumerate USB device [ 350.598182][ T9669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.963'. [ 350.632622][ T9669] kvm: MONITOR instruction emulated as NOP! [ 350.747680][ T9672] netlink: 104 bytes leftover after parsing attributes in process `syz.3.964'. [ 350.762959][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 352.578062][ T30] audit: type=1326 audit(1755224446.101:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.3.977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f085018ebe9 code=0x0 [ 354.323591][ T9720] netlink: 56 bytes leftover after parsing attributes in process `syz.3.985'. [ 354.333107][ T9720] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 355.478351][ T9778] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 355.504380][ T9778] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 355.978229][ T9797] vlan2: entered promiscuous mode [ 355.986032][ T9797] macvtap0: entered promiscuous mode [ 356.523573][ T9820] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1024'. [ 357.582942][ T9852] bridge2: entered allmulticast mode [ 358.398308][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 358.978438][ T9903] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 361.757507][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.767837][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.778161][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.795927][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.804104][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.591917][ T9951] chnl_net:caif_netlink_parms(): no params data found [ 363.063166][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.070920][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.081984][ T9951] bridge_slave_0: entered allmulticast mode [ 363.092725][ T9951] bridge_slave_0: entered promiscuous mode [ 363.202582][ T9951] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.211213][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.220302][ T9951] bridge_slave_1: entered allmulticast mode [ 363.256364][ T9951] bridge_slave_1: entered promiscuous mode [ 363.322137][T10006] pim6reg1: entered promiscuous mode [ 363.329873][T10006] pim6reg1: entered allmulticast mode [ 363.391656][ T9951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.476559][ T9951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.585749][ T9951] team0: Port device team_slave_0 added [ 363.597579][ T9951] team0: Port device team_slave_1 added [ 363.710599][ T9951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.721722][ T9951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.763573][ T9951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.780953][ T9951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.788041][ T9951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.820520][ T9951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.884523][ T5866] Bluetooth: hci5: command tx timeout [ 365.790432][ T9951] hsr_slave_0: entered promiscuous mode [ 365.797527][ T9951] hsr_slave_1: entered promiscuous mode [ 365.804104][ T9951] debugfs: 'hsr0' already exists in 'hsr' [ 365.813997][ T9951] Cannot create hsr debugfs directory [ 365.964721][ T5866] Bluetooth: hci5: command tx timeout [ 366.909217][ T9951] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.941483][ T9951] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.999777][ T9951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.025771][ T9951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 367.649538][ T9951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.799456][ T9951] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.889008][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.896319][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.946336][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.954766][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.066447][ T5866] Bluetooth: hci5: command tx timeout [ 368.263641][ T9951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.287686][ T9951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.690712][ T5937] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 368.712255][ T5937] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 368.765510][ T5937] usb 1-1: USB disconnect, device number 48 [ 368.807313][ T9951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.072578][ T9951] veth0_vlan: entered promiscuous mode [ 369.153537][ T9951] veth1_vlan: entered promiscuous mode [ 369.246813][ T9951] veth0_macvtap: entered promiscuous mode [ 369.260513][ T9951] veth1_macvtap: entered promiscuous mode [ 369.304125][ T9951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.347932][ T9951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.425474][ T1112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.448178][ T1112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.533407][ T1112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.672605][ T1112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.115403][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.123293][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.134934][ T5866] Bluetooth: hci5: command tx timeout [ 370.344740][ T5937] usb 2-1: USB disconnect, device number 69 [ 370.352285][ T5937] option 2-1:0.100: device disconnected [ 370.381459][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.409844][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.680024][T10179] veth1_macvtap: left promiscuous mode [ 370.697677][T10179] macsec0: entered promiscuous mode [ 371.259764][T10206] tap0: tun_chr_ioctl cmd 1074025688 [ 371.271127][T10191] syzkaller0: entered allmulticast mode [ 371.608658][ T3453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.964800][ T5958] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 372.052771][ T3453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.087957][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 372.125059][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 372.134286][ T5958] usb 6-1: Using ep0 maxpacket: 16 [ 372.149209][ T5958] usb 6-1: config 0 has no interfaces? [ 372.163021][ T5958] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 372.178068][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.189167][ T5958] usb 6-1: Product: syz [ 372.193486][ T5958] usb 6-1: Manufacturer: syz [ 372.201126][ T5958] usb 6-1: SerialNumber: syz [ 372.215479][ T5860] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 372.229083][ T5958] usb 6-1: config 0 descriptor?? [ 372.271459][ T3453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.352444][ T3453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.395881][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 372.404890][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.421972][ T5860] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.440914][ T5860] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 372.464637][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.473557][ T5860] usb 3-1: Product: syz [ 372.480812][ T5860] usb 3-1: Manufacturer: syz [ 372.722224][ T5860] usb 3-1: SerialNumber: syz [ 372.738969][ T5860] usb 3-1: config 0 descriptor?? [ 372.973863][ T3453] macsec0: left allmulticast mode [ 372.990015][ T3453] veth1_macvtap: left allmulticast mode [ 373.008672][ T3453] macsec0: left promiscuous mode [ 373.020798][ T3453] bridge0: port 3(macsec0) entered disabled state [ 373.053036][ T3453] bridge_slave_1: left allmulticast mode [ 373.064298][ T3453] bridge_slave_1: left promiscuous mode [ 373.090720][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.117488][ T3453] bridge_slave_0: left allmulticast mode [ 373.139549][ T3453] bridge_slave_0: left promiscuous mode [ 373.146618][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.623016][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1185'. [ 374.542957][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.608401][ T3453] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 374.640384][ T3453] bond0 (unregistering): Released all slaves [ 374.734126][ T5954] usb 3-1: USB disconnect, device number 73 [ 374.991560][ T3453] tipc: Left network mode [ 375.068904][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 375.078024][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 375.087853][T10276] netlink: 'syz.2.1195': attribute type 13 has an invalid length. [ 376.509151][ T5958] usb 6-1: USB disconnect, device number 2 [ 376.655627][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1197'. [ 376.828222][ T3453] hsr_slave_0: left promiscuous mode [ 376.845460][ T3453] hsr_slave_1: left promiscuous mode [ 376.862009][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.885702][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.938069][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.966940][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.295899][ T3453] veth0_macvtap: left allmulticast mode [ 377.324896][ T3453] veth1_macvtap: left promiscuous mode [ 377.341640][ T3453] veth0_macvtap: left promiscuous mode [ 377.352186][ T3453] veth1_vlan: left promiscuous mode [ 377.374687][ T3453] veth0_vlan: left promiscuous mode [ 378.345233][T10316] kvm: pic: non byte write [ 378.726431][T10322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.745232][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 379.309800][ T10] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 379.519814][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 379.534202][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.554302][ T5937] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 379.568554][ T10] usb 4-1: config 0 descriptor?? [ 379.743625][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.770377][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.791066][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 379.816438][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.829625][ T5954] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 379.861441][ T5937] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.880943][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.906490][ T5937] usb 6-1: config 0 descriptor?? [ 379.994299][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 380.001950][ T5954] usb 3-1: config 0 interface 0 altsetting 128 has an endpoint descriptor with address 0x3C, changing to 0xC [ 380.015688][ T5954] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0xC has invalid maxpacket 34435, setting to 1024 [ 380.027658][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 380.038393][ T5954] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 380.049841][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.061494][ T5954] usb 3-1: config 0 descriptor?? [ 380.091054][ T5954] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 380.183432][ T3453] team0 (unregistering): Port device team_slave_1 removed [ 380.264097][ T3453] team0 (unregistering): Port device team_slave_0 removed [ 380.337593][ T5937] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 380.387399][ T5937] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 380.658460][T10349] binder: 10332:10349 ioctl c0306201 0 returned -14 [ 380.914378][ T5937] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 380.999482][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 381.012819][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 381.056606][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 381.091520][ T10] usb 4-1: USB disconnect, device number 60 [ 381.096004][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 381.118882][ T5937] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 381.130949][ T5937] usb 5-1: config 1 has no interface number 1 [ 381.137642][ T5937] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 381.150956][ T5937] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 139, changing to 7 [ 381.173274][ T5937] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.199599][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.208167][ T5937] usb 5-1: Product: syz [ 381.228029][ T5937] usb 5-1: Manufacturer: syz [ 381.232781][ T5937] usb 5-1: SerialNumber: syz [ 381.488332][ T5937] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 381.562464][ T5937] usb 5-1: USB disconnect, device number 83 [ 381.608473][ T9] usb 6-1: USB disconnect, device number 3 [ 381.647800][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.606562][ T10] usb 3-1: USB disconnect, device number 74 [ 382.754512][ T5937] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 382.878427][ T30] audit: type=1326 audit(1755224476.401:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10398 comm="syz.3.1228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f085018ebe9 code=0x0 [ 382.930802][ T5937] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 382.952221][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.990710][ T5937] usb 6-1: config 0 descriptor?? [ 384.049046][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.055714][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.504062][T10456] binder: 10455:10456 ioctl c0306201 0 returned -14 [ 384.633710][ T5937] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.654108][ T5937] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 384.683863][ T5937] asix 6-1:0.0: probe with driver asix failed with error -71 [ 384.707688][ T5937] usb 6-1: USB disconnect, device number 4 [ 384.878778][T10470] syzkaller0: entered allmulticast mode [ 385.064390][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 385.264653][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 385.288822][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.312462][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.357590][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.417646][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 385.468856][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 385.487565][ T5958] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 385.501268][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 385.533246][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.572156][ T9] usb 3-1: config 0 descriptor?? [ 385.686883][ T5958] usb 6-1: config 6 has an invalid interface number: 117 but max is 0 [ 385.702061][ T5958] usb 6-1: config 6 has no interface number 0 [ 385.708932][ T5958] usb 6-1: config 6 interface 117 has no altsetting 0 [ 385.727215][ T5958] usb 6-1: Dual-Role OTG device on HNP port [ 385.735561][ T5958] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01ca, bcdDevice=99.b6 [ 385.758252][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.773255][ T5958] usb 6-1: Product: syz [ 385.781832][ T5958] usb 6-1: Manufacturer: syz [ 385.790772][ T5958] usb 6-1: SerialNumber: syz [ 385.843589][T10507] binder: 10505:10507 ioctl 4018620d 0 returned -22 [ 386.007011][ T9] hid-thrustmaster 0003:044F:B65D.000D: global environment stack underflow [ 386.028723][ T9] hid-thrustmaster 0003:044F:B65D.000D: item 0 4 1 11 parsing failed [ 386.052116][ T9] hid-thrustmaster 0003:044F:B65D.000D: parse failed with error -22 [ 386.076105][ T9] hid-thrustmaster 0003:044F:B65D.000D: probe with driver hid-thrustmaster failed with error -22 [ 386.209087][ T5860] usb 3-1: USB disconnect, device number 75 [ 386.253262][ T5958] ftdi_sio 6-1:6.117: FTDI USB Serial Device converter detected [ 386.279390][ T5958] ftdi_sio ttyUSB0: unknown device type: 0x99b6 [ 386.292487][T10517] binder: 10516:10517 ioctl c0306201 2000000004c0 returned -14 [ 386.304798][ T5958] usb 6-1: USB disconnect, device number 5 [ 386.326623][ T5958] ftdi_sio 6-1:6.117: device disconnected [ 386.915832][ T5958] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 387.094518][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 387.104285][ T5937] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 387.112607][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.127207][T10545] netlink: 'syz.5.1264': attribute type 10 has an invalid length. [ 387.127207][T10546] netlink: 'syz.5.1264': attribute type 10 has an invalid length. [ 387.144601][ T5958] usb 4-1: config 0 has no interfaces? [ 387.162896][ T5958] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 387.172801][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.180962][ T5958] usb 4-1: Product: syz [ 387.185951][ T5958] usb 4-1: Manufacturer: syz [ 387.190174][T10545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 387.190758][ T5958] usb 4-1: SerialNumber: syz [ 387.204984][ T5958] usb 4-1: config 0 descriptor?? [ 387.271167][ T5937] usb 3-1: config 1 has an invalid interface number: 146 but max is 0 [ 387.287403][ T5937] usb 3-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 387.287966][T10543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.298946][ T5937] usb 3-1: config 1 has no interface number 0 [ 387.317717][ T5937] usb 3-1: config 1 interface 146 altsetting 0 endpoint 0x8D has invalid maxpacket 52159, setting to 64 [ 387.331243][ T5937] usb 3-1: config 1 interface 146 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.359700][ T5937] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 387.372057][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.381667][ T5937] usb 3-1: Product: syz [ 387.390152][ T5937] usb 3-1: Manufacturer: syz [ 387.395008][ T5937] usb 3-1: SerialNumber: syz [ 387.411153][ T5937] usbserial_generic 3-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 387.424002][ T5937] usbserial_generic 3-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 387.445515][ T5937] usbserial_generic 3-1:1.146: device has no bulk endpoints [ 387.621437][ T5937] usb 3-1: USB disconnect, device number 76 [ 388.287274][T10582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1270'. [ 388.846104][T10607] bridge3: entered allmulticast mode [ 389.213232][T10621] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1285'. [ 389.433621][T10628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.441020][T10628] IPv6: NLM_F_CREATE should be set when creating new route [ 389.707391][ T5958] usb 4-1: USB disconnect, device number 61 [ 390.054015][T10649] tipc: Started in network mode [ 390.069388][T10649] tipc: Node identity ce89aad9bbfa, cluster identity 4711 [ 390.102433][T10649] tipc: Enabled bearer , priority 0 [ 390.115875][T10656] syzkaller0: entered promiscuous mode [ 390.121412][T10656] syzkaller0: entered allmulticast mode [ 390.197798][T10649] tipc: Resetting bearer [ 390.216417][T10646] tipc: Resetting bearer [ 390.243646][T10646] tipc: Disabling bearer [ 390.269340][T10660] bridge4: entered allmulticast mode [ 390.378638][T10662] kvm: emulating exchange as write [ 391.197457][T10700] syz_tun: entered allmulticast mode [ 391.429212][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 391.563825][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1322'. [ 391.581171][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1322'. [ 391.760601][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 392.231285][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1340'. [ 392.293381][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1334'. [ 392.410929][T10754] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 392.518122][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 392.561069][T10754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.770796][T10771] tipc: Enabled bearer , priority 0 [ 392.799604][T10771] syzkaller0: entered promiscuous mode [ 392.812938][T10771] syzkaller0: entered allmulticast mode [ 392.832815][T10771] tipc: Resetting bearer [ 392.895561][T10770] tipc: Resetting bearer [ 392.938445][T10770] tipc: Disabling bearer [ 393.051141][T10782] tipc: Enabling of bearer rejected, failed to enable media [ 393.476363][T10804] syz_tun: entered promiscuous mode [ 393.481748][T10804] syz_tun: entered allmulticast mode [ 394.613785][T10841] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.621173][T10841] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.680416][T10841] tipc: Resetting bearer [ 395.231043][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.272061][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.300046][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 395.329696][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.366402][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.690768][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1398'. [ 396.093169][T10915] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1389'. [ 396.495686][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1412'. [ 396.829043][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1419'. [ 397.120211][T10965] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 397.204722][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 397.232442][T10965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.907701][T11008] netlink: 'syz.4.1444': attribute type 1 has an invalid length. [ 397.993089][T11008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.065716][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 398.344272][ T5860] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 398.531434][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 398.542994][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 398.571754][ T5860] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 231, changing to 11 [ 398.602800][ T5860] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.615499][T11042] netlink: 'syz.4.1461': attribute type 1 has an invalid length. [ 398.617819][ T5860] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.643264][ T5860] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 398.678764][T11044] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 398.686997][ T5860] usb 6-1: string descriptor 0 read error: -22 [ 398.703639][ T5860] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.724505][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.786063][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 398.819773][T11044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.003924][ T5860] cdc_ncm 6-1:1.0: bind() failure [ 399.040647][ T5860] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 399.059378][ T5860] cdc_ncm 6-1:1.1: bind() failure [ 399.081815][ T5860] usb 6-1: USB disconnect, device number 6 [ 401.564753][ T5860] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.728725][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.746387][ T5860] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 401.757822][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.797532][ T5860] usb 6-1: config 0 descriptor?? [ 402.241849][ T5860] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 402.279003][ T5860] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 402.292754][ T5860] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 402.310610][ T5860] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 402.321001][ T5860] lg-g15 0003:046D:C222.000E: unknown main item tag 0x0 [ 402.345178][ T5860] lg-g15 0003:046D:C222.000E: item fetching failed at offset 6/7 [ 402.374306][ T5860] lg-g15 0003:046D:C222.000E: probe with driver lg-g15 failed with error -22 [ 402.404234][ T5937] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 402.441324][ T9] usb 6-1: USB disconnect, device number 7 [ 402.565576][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 402.586197][ T5937] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 402.615391][ T5937] usb 5-1: config 0 has no interface number 0 [ 402.646692][ T5937] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 402.659506][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.668092][ T5937] usb 5-1: Product: syz [ 402.672443][ T5937] usb 5-1: Manufacturer: syz [ 402.677569][ T5937] usb 5-1: SerialNumber: syz [ 402.702043][ T5937] usb 5-1: config 0 descriptor?? [ 402.712495][ T5937] smsc95xx v2.0.0 [ 403.055161][ T5958] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 403.116050][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 403.137730][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 403.162391][ T5937] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 403.188507][ T5937] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 403.211709][ T5937] usb 5-1: USB disconnect, device number 84 [ 403.225039][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 403.234424][ T5958] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 403.258257][ T5958] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 403.279718][ T5958] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 403.293879][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 403.303672][ T5958] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 403.323149][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.344746][ T5958] usb 4-1: Product: syz [ 403.349091][ T5958] usb 4-1: Manufacturer: syz [ 403.365731][ T5958] usb 4-1: SerialNumber: syz [ 403.384489][ T5958] usb 4-1: config 0 descriptor?? [ 403.608054][ T5958] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 403.825007][ T5958] usb 4-1: USB disconnect, device number 62 [ 403.831039][ C0] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 403.876275][ T6528] udevd[6528]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 404.691627][T11260] binder: 11259:11260 ioctl 40046205 0 returned -22 [ 405.655225][ T5860] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 405.738059][ T5958] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 405.816055][ T5860] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 405.844326][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 42594, setting to 1023 [ 405.874710][ T5860] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 405.874879][ T5958] usb 1-1: device descriptor read/64, error -71 [ 405.904325][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.934855][ T5860] usb 6-1: Product: syz [ 405.947425][ T5860] usb 6-1: Manufacturer: syz [ 405.972133][ T5860] usb 6-1: SerialNumber: syz [ 406.007770][ T5860] usb 6-1: config 0 descriptor?? [ 406.034933][ T5860] hub 6-1:0.0: bad descriptor, ignoring hub [ 406.040917][ T5860] hub 6-1:0.0: probe with driver hub failed with error -5 [ 406.091302][ T5860] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 406.094009][T11321] bridge4: entered allmulticast mode [ 406.132878][ T5860] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 406.184813][ T5958] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 406.203503][ T5860] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 406.313179][ T5860] usb 6-1: USB disconnect, device number 8 [ 406.324502][ T5958] usb 1-1: device descriptor read/64, error -71 [ 406.393365][T11334] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1551'. [ 406.452602][ T5958] usb usb1-port1: attempt power cycle [ 406.797700][ T5958] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 406.861521][ T5958] usb 1-1: device descriptor read/8, error -71 [ 407.008655][T11361] bridge5: entered allmulticast mode [ 407.132024][T11371] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1564'. [ 407.144304][ T5958] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 407.177140][ T5958] usb 1-1: device descriptor read/8, error -71 [ 407.285545][ T5958] usb usb1-port1: unable to enumerate USB device [ 407.353156][T11384] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 407.521175][T11384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.915348][ T5958] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 408.128540][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 408.139201][T11416] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1576'. [ 408.155196][ T5958] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 408.174412][ T5958] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.196372][ T5958] usb 3-1: config 1 has no interfaces? [ 408.207093][ T5958] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 408.221899][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.245655][ T5958] usb 3-1: SerialNumber: syz [ 408.293676][T11418] bridge5: entered allmulticast mode [ 408.381291][T11425] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 408.441638][T11425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.479742][ T10] usb 3-1: USB disconnect, device number 77 [ 408.996199][T11447] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1588'. [ 409.114279][ T5860] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 409.136372][T11452] bridge1: entered allmulticast mode [ 409.284745][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 409.296744][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.319250][ T5860] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 409.341410][ T5860] usb 5-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 409.358617][ T5860] usb 5-1: Product: syz [ 409.362983][ T5860] usb 5-1: Manufacturer: syz [ 409.368103][ T5860] usb 5-1: SerialNumber: syz [ 409.385470][ T5860] usb 5-1: config 0 descriptor?? [ 409.396036][ T5860] smsc75xx v1.0.0 [ 409.399749][ T5860] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 409.430022][ T5860] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 410.344445][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 410.529564][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.564633][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 93, changing to 10 [ 410.584700][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 50824, setting to 1024 [ 410.597213][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 410.613873][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.642501][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.657616][ T10] usb 4-1: Product: syz [ 410.661941][ T10] usb 4-1: Manufacturer: syz [ 410.668602][ T10] usb 4-1: SerialNumber: syz [ 410.887867][T11493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 411.464332][ T5860] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 411.503027][T11493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 411.628211][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.642438][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.654650][ T5860] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.669302][ T5860] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.679068][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.693962][ T5860] usb 6-1: config 0 descriptor?? [ 411.731306][ T10] cdc_ncm 4-1:1.0: bind() failure [ 411.756490][ T10] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 411.775537][ T10] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 411.794311][ T10] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 411.823964][ T10] usb 4-1: USB disconnect, device number 63 [ 411.899133][ T5958] usb 5-1: USB disconnect, device number 85 [ 412.162448][ T5860] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 412.352227][ T9] usb 6-1: USB disconnect, device number 9 [ 412.358201][ T5958] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 412.546205][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.559488][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.571720][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.585181][ T5958] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.614188][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.625326][ T5958] usb 5-1: config 0 descriptor?? [ 413.050486][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.067240][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.091339][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.121373][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.139121][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.164859][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.183102][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.191383][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.207467][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.216547][ T5958] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 413.257796][ T5958] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 413.329381][ T5958] usb 5-1: USB disconnect, device number 86 [ 413.491609][T11595] fido_id[11595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 413.821726][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1662'. [ 413.840733][T11613] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1662'. [ 414.552658][T11639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'. [ 414.562467][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1674'. [ 415.272190][T11659] warning: `syz.0.1679' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 415.975733][T11684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1692'. [ 416.242732][ T30] audit: type=1326 audit(1755224509.761:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11691 comm="syz.3.1696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f085018ebe9 code=0x0 [ 416.890619][T11726] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 416.902825][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 417.222577][T11746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1721'. [ 417.458738][T11754] syzkaller0: entered allmulticast mode [ 418.164492][ T5937] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 418.184307][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 418.326467][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.344482][ T5860] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 418.354014][ T9] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 418.356285][ T5937] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 418.372292][ T5937] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 418.375619][ T5958] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 418.381533][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.390169][ T9] usb 4-1: config 0 has no interface number 0 [ 418.406338][ T9] usb 4-1: config 0 interface 98 has no altsetting 0 [ 418.417981][ T9] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 418.421945][ T5937] usb 5-1: config 0 descriptor?? [ 418.427824][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.440519][ T9] usb 4-1: Product: syz [ 418.445363][ T9] usb 4-1: Manufacturer: syz [ 418.450115][ T5937] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 418.450162][ T9] usb 4-1: SerialNumber: syz [ 418.460811][ T5937] dvb-usb: bulk message failed: -22 (3/0) [ 418.468817][ T9] usb 4-1: config 0 descriptor?? [ 418.483717][ T5937] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 418.497134][ T5937] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 418.506541][ T5937] usb 5-1: media controller created [ 418.514103][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.514903][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 418.541251][ T5937] dvb-usb: bulk message failed: -22 (6/0) [ 418.550219][ T5937] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 418.558855][ T5860] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 418.568141][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.576828][ T5860] usb 6-1: Product: syz [ 418.585102][ T5937] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 418.585707][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 418.597997][ T5860] usb 6-1: Manufacturer: syz [ 418.606418][ T5860] usb 6-1: SerialNumber: syz [ 418.612744][ T5958] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 418.625714][ T5937] dvb-usb: schedule remote query interval to 150 msecs. [ 418.634966][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.636035][ T5860] usb 6-1: config 0 descriptor?? [ 418.653395][ T5937] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 418.662874][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.679994][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.689292][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.699614][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.713327][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.718300][ T5937] usb 5-1: USB disconnect, device number 87 [ 418.733579][ T9] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 418.745609][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 418.761169][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.773280][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.782153][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.796894][ T5937] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 418.797317][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.813146][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.822471][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.836297][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.848051][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.855836][ T5958] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.863912][ T5958] usb 3-1: config 0 has no interface number 0 [ 418.878161][ T5860] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 418.878265][ T5958] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 418.896204][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.904842][ T5958] usb 3-1: Product: syz [ 418.909084][ T5958] usb 3-1: Manufacturer: syz [ 418.913705][ T5958] usb 3-1: SerialNumber: syz [ 418.922668][ T5958] usb 3-1: config 0 descriptor?? [ 418.939276][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.951074][ T5958] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 418.958894][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.968612][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.982098][ T10] usb 1-1: config 0 descriptor?? [ 418.995599][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 419.141445][ T5958] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 419.409638][ T9] usb 4-1: reset high-speed USB device number 64 using dummy_hcd [ 419.418247][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 419.590577][ T1790] usb 3-1: USB disconnect, device number 78 [ 419.621431][ T1790] etas_es58x 3-1:0.2: Disconnecting syz syz [ 419.646124][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 419.675849][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 419.707975][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 419.847967][ T9] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 419.862784][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 419.872334][ T9] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 419.883536][ T5958] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 419.895750][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 419.907224][ T5958] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 419.916268][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 419.929367][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 419.941296][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 419.957758][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'. [ 419.964333][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 419.986325][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 419.995654][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 420.002624][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 420.014852][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 420.026308][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 420.037416][ T10] pwc: Registered as video103. [ 420.052991][ T9] usb 4-1: USB disconnect, device number 64 [ 420.068771][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 420.115957][ T10] usb 1-1: USB disconnect, device number 53 [ 420.576103][ T5860] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 420.594407][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 420.625167][ T5860] usb 6-1: USB disconnect, device number 10 [ 420.800375][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.812316][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 420.823769][ T9] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 420.833741][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.847269][ T9] usb 3-1: config 0 descriptor?? [ 421.293802][ T9] Bluetooth: Can't get version to change to load ram patch err [ 421.318499][ T9] Bluetooth: Loading patch file failed [ 421.334727][ T9] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 421.387577][ T9] usb 3-1: USB disconnect, device number 79 [ 422.227454][T11880] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 422.304811][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1773'. [ 422.500058][T11897] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 422.500058][T11897] The task syz.3.1779 (11897) triggered the difference, watch for misbehavior. [ 422.524558][ T5860] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 422.686350][ T5860] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 422.705783][ T5860] usb 6-1: config 0 has no interface number 0 [ 422.741777][ T5860] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 422.751175][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.774354][ T5860] usb 6-1: Product: syz [ 422.778689][ T5860] usb 6-1: Manufacturer: syz [ 422.806933][ T5860] usb 6-1: SerialNumber: syz [ 422.820867][ T5860] usb 6-1: config 0 descriptor?? [ 422.890461][T11912] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 422.904102][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 422.954720][T11914] binder_alloc: 11913: binder_alloc_buf size 16384 failed, no address space [ 422.965315][T11914] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 423.184582][T11924] futex_wake_op: syz.4.1793 tries to shift op by 144; fix this program [ 423.209565][T11924] usb usb8: usbfs: process 11924 (syz.4.1793) did not claim interface 0 before use [ 423.475165][ T1790] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 423.494426][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 423.574239][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 423.624860][ T1790] usb 3-1: Using ep0 maxpacket: 8 [ 423.631024][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 423.645859][ T5860] usb 6-1: Firmware version (0.0) predates our first public release. [ 423.658393][ T5860] usb 6-1: Please update to version 0.2 or newer [ 423.664396][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 423.665694][ T1790] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 423.679723][ T1790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.681190][ T10] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 423.688485][ T1790] usb 3-1: Product: syz [ 423.688508][ T1790] usb 3-1: Manufacturer: syz [ 423.688525][ T1790] usb 3-1: SerialNumber: syz [ 423.700535][ T1790] usb 3-1: config 0 descriptor?? [ 423.744398][ T10] usb 1-1: config 0 has no interface number 0 [ 423.755297][ T5860] usb 6-1: USB disconnect, device number 11 [ 423.762950][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.777738][ T10] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 423.806513][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.863728][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.884274][ T10] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 423.893378][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.914396][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.922460][ T9] usb 4-1: SerialNumber: syz [ 423.929837][ T10] usb 1-1: Product: syz [ 423.934037][ T10] usb 1-1: Manufacturer: syz [ 423.943478][ T1790] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 423.946527][ T10] usb 1-1: SerialNumber: syz [ 423.962314][ T10] usb 1-1: config 0 descriptor?? [ 424.064312][ T5952] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 424.167319][ T9] usb 4-1: 0:2 : does not exist [ 424.211690][ T9] usb 4-1: USB disconnect, device number 65 [ 424.239357][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.253853][ T5952] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 424.277295][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.303631][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.319713][ T5952] usb 5-1: config 0 descriptor?? [ 424.333498][ T5952] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 424.602078][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input37 [ 424.694362][ T5860] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 424.733769][ T5952] pwc: recv_control_msg error -71 req 02 val 2b00 [ 424.759770][ T5952] pwc: recv_control_msg error -71 req 02 val 2700 [ 424.771225][ T5952] pwc: recv_control_msg error -71 req 04 val 1700 [ 424.778527][ T5952] pwc: recv_control_msg error -71 req 02 val 2c00 [ 424.789498][ T5952] pwc: recv_control_msg error -71 req 04 val 1000 [ 424.797040][ T5952] pwc: recv_control_msg error -71 req 04 val 1300 [ 424.806744][ T5952] pwc: recv_control_msg error -71 req 04 val 1400 [ 424.816951][ T5952] pwc: recv_control_msg error -71 req 02 val 2000 [ 424.823859][ T5952] pwc: recv_control_msg error -71 req 02 val 2100 [ 424.831139][ T5952] pwc: recv_control_msg error -71 req 02 val 2200 [ 424.838710][ T5952] pwc: recv_control_msg error -71 req 06 val 0600 [ 424.847117][ T5952] pwc: recv_control_msg error -71 req 04 val 1500 [ 424.854684][ T5952] pwc: recv_control_msg error -71 req 02 val 2500 [ 424.863442][ T5952] pwc: recv_control_msg error -71 req 02 val 2400 [ 424.866763][ T5954] usb 1-1: USB disconnect, device number 54 [ 424.876672][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 424.889883][ T5860] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 424.898406][ T5952] pwc: recv_control_msg error -71 req 02 val 2600 [ 424.902319][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.907959][ T5952] pwc: recv_control_msg error -71 req 02 val 2900 [ 424.921931][ T5860] usb 6-1: Product: syz [ 424.928120][ T5860] usb 6-1: Manufacturer: syz [ 424.933668][ T5860] usb 6-1: SerialNumber: syz [ 424.938991][ T5952] pwc: recv_control_msg error -71 req 02 val 2800 [ 424.962678][ T5952] pwc: recv_control_msg error -71 req 04 val 1100 [ 424.970936][ T5860] usb 6-1: config 0 descriptor?? [ 424.997633][ T5952] pwc: recv_control_msg error -71 req 04 val 1200 [ 425.011922][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1804'. [ 425.025676][ T5952] pwc: Registered as video103. [ 425.046443][ T5952] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 425.087292][ T5952] usb 5-1: USB disconnect, device number 88 [ 425.184565][ T5860] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.407102][ T1790] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 425.408234][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.427177][ T5860] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 425.441576][ T1790] usb 3-1: USB disconnect, device number 80 [ 425.448256][ T5860] usb 6-1: USB disconnect, device number 12 [ 425.573309][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 425.780264][T11978] binder: 11977:11978 unknown command 0 [ 425.787840][T11978] binder: 11977:11978 ioctl c0306201 200000000080 returned -22 [ 426.084634][ T5952] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 426.132980][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1821'. [ 426.244323][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 426.257911][ T5952] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 426.271167][T11996] syzkaller0: entered allmulticast mode [ 426.274276][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 426.285860][ T5952] usb 5-1: config 0 has no interface number 0 [ 426.307763][ T5952] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 426.324210][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.338975][ T5952] usb 5-1: Product: syz [ 426.343301][ T5952] usb 5-1: Manufacturer: syz [ 426.349225][ T5952] usb 5-1: SerialNumber: syz [ 426.362726][ T5952] usb 5-1: config 0 descriptor?? [ 426.372321][ T5952] smsc95xx v2.0.0 [ 426.454442][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 426.477485][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 426.498059][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 426.510994][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.532262][ T10] usb 3-1: Product: syz [ 426.536913][ T10] usb 3-1: Manufacturer: syz [ 426.543509][ T10] usb 3-1: SerialNumber: syz [ 426.590122][ T10] usb 3-1: config 0 descriptor?? [ 426.616995][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 426.760835][T12012] random: crng reseeded on system resumption [ 426.782965][ T5952] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 426.804705][ T5952] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 427.254311][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 427.285138][T12028] syzkaller0: entered allmulticast mode [ 427.426743][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.456378][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.467095][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 427.476736][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.506252][ T9] usb 4-1: config 0 descriptor?? [ 427.730671][ T5860] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 427.884269][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 427.908540][ T5860] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 427.917719][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.936773][ T5860] usb 6-1: config 0 descriptor?? [ 427.958255][ T9] hid_parser_main: 5 callbacks suppressed [ 427.958281][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 427.974019][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 427.984920][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 427.992239][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 428.000142][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 428.009468][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 428.016997][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 428.032600][ T9] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 428.148757][ T9] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 428.632814][ T10] gspca_zc3xx: reg_r err -32 [ 428.756063][T12023] cp2112 0003:10C4:EA90.0011: Error starting transaction: -38 [ 428.771182][ T9] cp2112 0003:10C4:EA90.0011: error reading lock byte: -71 [ 428.785024][ T1790] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 428.791696][ T9] usb 4-1: USB disconnect, device number 66 [ 428.946453][ T1790] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.954717][ T1790] usb 1-1: config 0 has no interface number 0 [ 428.961370][ T1790] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 428.972711][ T1790] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 428.984056][ T1790] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.993470][ T1790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.004631][ T1790] usb 1-1: config 0 descriptor?? [ 429.016586][T12039] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 429.031517][ T1790] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 429.237226][ T1790] usb 1-1: USB disconnect, device number 55 [ 429.243430][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 429.245148][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 429.269659][ T10] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 429.415744][T12045] netlink: 1343 bytes leftover after parsing attributes in process `syz.3.1843'. [ 429.462707][ T5952] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 429.477797][ T5952] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 429.498831][ T5952] usb 5-1: USB disconnect, device number 89 [ 429.734481][ T1790] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 429.888162][ T1790] usb 4-1: Using ep0 maxpacket: 32 [ 429.895080][ T1790] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.903183][ T1790] usb 4-1: config 0 has no interface number 0 [ 429.911731][ T1790] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.922754][ T1790] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.932942][ T1790] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 429.942153][ T1790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.953377][ T1790] usb 4-1: config 0 descriptor?? [ 430.337147][T12057] syzkaller0: entered allmulticast mode [ 430.399425][ T5952] usb 3-1: USB disconnect, device number 81 [ 430.594917][ T1790] input: HID 28bd:0094 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0012/input/input39 [ 430.722327][T12068] netlink: set zone limit has 4 unknown bytes [ 430.776187][ T1790] uclogic 0003:28BD:0094.0012: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 430.826302][ T1790] usb 4-1: USB disconnect, device number 67 [ 430.833945][ T5860] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 430.881879][ T5860] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 430.897378][ T5860] asix 6-1:0.0: probe with driver asix failed with error -71 [ 430.939755][ T5860] usb 6-1: USB disconnect, device number 13 [ 431.448549][T12088] syzkaller1: entered promiscuous mode [ 431.474391][T12088] syzkaller1: entered allmulticast mode [ 431.490820][T12092] syzkaller0: entered allmulticast mode [ 431.697503][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 431.717248][ T5866] Bluetooth: hci4: unexpected event 0x06 length: 1 < 3 [ 431.744388][ T5952] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 431.822307][T12107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1872'. [ 431.833400][T12107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1872'. [ 431.874389][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 431.881533][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 431.894287][ T9] usb 6-1: config 0 has no interface number 0 [ 431.914238][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 431.929284][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 431.939434][ T5952] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 431.948729][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.959140][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.970532][ T5952] usb 3-1: Product: syz [ 431.974804][ T9] usb 6-1: Product: syz [ 431.982824][ T9] usb 6-1: Manufacturer: syz [ 431.988486][ T5952] usb 3-1: Manufacturer: syz [ 431.993237][ T9] usb 6-1: SerialNumber: syz [ 431.998112][ T5952] usb 3-1: SerialNumber: syz [ 432.023854][ T9] usb 6-1: config 0 descriptor?? [ 432.036927][ T9] smsc95xx v2.0.0 [ 432.041864][ T5952] usb 3-1: config 0 descriptor?? [ 432.244577][ T5860] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 432.276817][ T5952] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 432.404233][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 432.415321][ T5860] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 432.444633][ T1790] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 432.452374][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.460318][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 432.465751][ T5860] usb 4-1: config 0 descriptor?? [ 432.479905][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 432.608603][ T1790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.620088][ T1790] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.629320][ T1790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.643420][ T1790] usb 5-1: config 0 descriptor?? [ 432.828594][T12134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1885'. [ 432.839670][T12134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1885'. [ 433.001878][T12138] netlink: 'syz.0.1887': attribute type 1 has an invalid length. [ 433.010217][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 433.069646][ T1790] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 433.114990][ T1790] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input40 [ 433.242954][ T1790] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 433.556510][ T5952] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 433.576423][ T5952] usb 3-1: USB disconnect, device number 82 [ 433.630284][ T1790] usb 5-1: USB disconnect, device number 90 [ 434.384487][T12160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 434.396471][T12160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1896'. [ 434.521396][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 434.534067][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 434.747935][ T5860] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 434.748233][ T5860] asix 4-1:0.0: probe with driver asix failed with error -71 [ 434.764871][ T5860] usb 4-1: USB disconnect, device number 68 [ 435.041432][T12186] syzkaller0: entered allmulticast mode [ 435.225347][ T5860] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 435.374330][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 435.389956][ T5860] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.399534][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.415310][ T5860] usb 5-1: Product: syz [ 435.419575][ T5860] usb 5-1: Manufacturer: syz [ 435.425186][ T5860] usb 5-1: SerialNumber: syz [ 435.435198][ T5860] usb 5-1: config 0 descriptor?? [ 435.653308][ T5860] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.774649][ T5952] usb 6-1: USB disconnect, device number 14 [ 435.904536][ T1790] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 436.068329][ T1790] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 436.077501][ T1790] usb 1-1: config 150 has no interface number 0 [ 436.095288][ T1790] usb 1-1: config 150 interface 204 has no altsetting 0 [ 436.111196][ T1790] usb 1-1: config 150 interface 1 has no altsetting 0 [ 436.133487][ T1790] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 436.143815][ T1790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.157694][ T1790] usb 1-1: Product: syz [ 436.161999][ T1790] usb 1-1: Manufacturer: syz [ 436.168813][ T1790] usb 1-1: SerialNumber: syz [ 436.433282][ T1790] xr_serial 1-1:150.204: xr_serial converter detected [ 436.642305][T12229] netlink: 'syz.5.1926': attribute type 2 has an invalid length. [ 436.650333][T12229] netlink: 'syz.5.1926': attribute type 8 has an invalid length. [ 436.658446][T12229] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1926'. [ 436.669311][ T5860] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 436.694084][ T5860] usb 5-1: USB disconnect, device number 91 [ 436.764375][ T5952] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 436.931276][ T5952] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 436.941700][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.953601][ T5952] usb 4-1: Product: syz [ 436.958524][ T5952] usb 4-1: Manufacturer: syz [ 436.975929][ T5952] usb 4-1: SerialNumber: syz [ 436.985538][ T5952] usb 4-1: config 0 descriptor?? [ 437.252862][ T1790] usb 1-1: xr_serial converter now attached to ttyUSB0 [ 437.426725][ T5952] usb 4-1: Firmware: major: 130, minor: 0, hardware type: ATUSB (0) [ 437.466357][ T1790] usb 1-1: USB disconnect, device number 56 [ 437.477509][ T1790] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 437.486067][ T44] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 437.496819][ T1790] xr_serial 1-1:150.204: device disconnected [ 437.627459][ T5952] usb 4-1: no permanent extended address found, random address set [ 437.654292][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 437.661301][ T44] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 437.670604][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.682716][ T44] usb 5-1: config 0 descriptor?? [ 437.694205][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 437.852911][ T5952] usb 4-1: USB disconnect, device number 69 [ 438.380407][T12254] syzkaller0: entered allmulticast mode [ 438.472560][T12258] bridge6: entered allmulticast mode [ 438.693008][T12266] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1942'. [ 438.705604][T12266] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1942'. [ 438.740821][T12268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.808553][T12268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.825673][T12268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.875755][ T5988] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 439.034236][ T5988] usb 6-1: Using ep0 maxpacket: 32 [ 439.041575][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.052815][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.062815][ T5988] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 439.072101][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.083143][ T5988] usb 6-1: config 0 descriptor?? [ 439.090626][ T1790] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 439.264353][ T1790] usb 4-1: Using ep0 maxpacket: 16 [ 439.271877][ T1790] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 439.282672][ T1790] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.293823][ T1790] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.303714][ T1790] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 439.317251][ T44] gspca_vc032x: reg_w err -71 [ 439.321995][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.327613][ T1790] usb 4-1: config 7 interface 0 has no altsetting 0 [ 439.335390][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.341086][ T1790] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 439.350271][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.355763][ T1790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.364196][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.369523][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.376233][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.382653][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.388349][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.393784][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.407111][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.412579][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.420499][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.427096][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.432453][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.440731][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.450340][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.456133][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.461483][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 439.467296][ T44] gspca_vc032x: Unknown sensor... [ 439.472451][ T44] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 439.485705][ T44] usb 5-1: USB disconnect, device number 92 [ 439.512326][ T5988] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 439.705528][ T5988] ft260 0003:0403:6030.0014: failed to retrieve chip version [ 439.713962][ T5988] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -71 [ 439.730029][ T5988] usb 6-1: USB disconnect, device number 15 [ 439.826727][ T1790] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0015/input/input41 [ 440.030600][ T1790] kye 0003:0458:5010.0015: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 440.085638][ T1790] usb 4-1: USB disconnect, device number 70 [ 440.182908][T12281] fido_id[12281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 440.288217][ T5988] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 440.307750][T12285] bridge2: entered allmulticast mode [ 440.424465][ T5952] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 440.444775][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 440.455076][ T5988] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.474291][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.484099][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.505718][ T5988] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.520565][ T5988] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.533026][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.617933][ T5952] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 440.630091][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1954'. [ 440.641478][ T5952] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.662182][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1954'. [ 440.671604][ T5952] usb 1-1: config 0 interface 0 has no altsetting 0 [ 440.696966][ T5952] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 440.724629][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.738061][ T5952] usb 1-1: config 0 descriptor?? [ 440.743859][T12283] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 440.792758][ T5988] usb 5-1: GET_CAPABILITIES returned 0 [ 440.809351][ T5988] usbtmc 5-1:16.0: can't read capabilities [ 440.971732][T12303] pim6reg1: entered promiscuous mode [ 440.977196][T12303] pim6reg1: entered allmulticast mode [ 441.003801][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.016067][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.025231][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.037294][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.046447][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.055541][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.064615][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.079034][ T5952] usbhid 1-1:0.0: can't add hid device: -71 [ 441.079409][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.087189][ T5952] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 441.094228][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.094282][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.103030][ T44] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 441.113653][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.137944][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.148044][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.157177][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.157562][ T5952] usb 1-1: USB disconnect, device number 57 [ 441.166318][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.166370][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.223057][ T5954] usb 5-1: USB disconnect, device number 93 [ 441.254214][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 441.276757][ T44] usb 6-1: config 1 has an invalid descriptor of length 87, skipping remainder of the config [ 441.298559][ T44] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.336212][ T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 441.349226][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.360756][ T44] usb 6-1: Product: syz [ 441.365868][ T44] usb 6-1: Manufacturer: syz [ 441.370653][ T44] usb 6-1: SerialNumber: syz [ 441.620237][ T44] usb 6-1: USB disconnect, device number 16 [ 442.614970][T12339] kernel profiling enabled (shift: 17) [ 442.989923][T12353] bridge7: entered allmulticast mode [ 443.483998][T12359] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1969'. [ 445.565136][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.571648][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.614367][ T44] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 447.868246][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.880421][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.896620][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.907165][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.918005][ T44] usb 5-1: Product: syz [ 447.936660][ T44] usb 5-1: Manufacturer: syz [ 447.941403][ T44] usb 5-1: SerialNumber: syz [ 448.209759][ T44] usb 5-1: 0:2 : does not exist [ 448.214815][ T44] usb 5-1: unit 0 not found! [ 448.227293][T12442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2010'. [ 448.262067][ T44] usb 5-1: USB disconnect, device number 94 [ 448.266219][T12442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2010'. [ 448.324843][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.693896][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2021'. [ 450.748158][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2021'. [ 451.074840][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.084057][T12486] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.114336][ T5952] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 451.122902][T12486] tipc: Resetting bearer [ 451.135800][T12486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.297539][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.318213][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.328579][ T5952] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 451.338859][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.379573][ T5952] usb 4-1: config 0 descriptor?? [ 451.692121][T12488] bridge: RTM_NEWNEIGH with invalid ether address [ 451.873321][ T5952] hid-led 0003:27B8:01ED.0016: item fetching failed at offset 1/5 [ 451.918782][ T5952] hid-led 0003:27B8:01ED.0016: probe with driver hid-led failed with error -22 [ 452.073339][ T5954] usb 4-1: USB disconnect, device number 71 [ 452.160625][T12503] bridge: RTM_NEWNEIGH with invalid ether address [ 452.226640][ T5952] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 452.274947][T12501] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2019'. [ 452.396683][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.424316][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.444238][ T5952] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 452.453328][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.477782][ T5952] usb 6-1: config 0 descriptor?? [ 452.504318][ T44] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 452.643206][T12507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2036'. [ 452.653943][T12507] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2036'. [ 452.668208][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 452.689900][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 452.700184][ T44] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 452.724638][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.749775][ T44] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 973, setting to 64 [ 452.777257][ T44] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.802922][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 452.812876][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.821738][ T44] usb 5-1: Product: syz [ 452.826430][ T44] usb 5-1: Manufacturer: syz [ 452.831067][ T44] usb 5-1: SerialNumber: syz [ 452.847727][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2037'. [ 452.874557][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2037'. [ 452.903598][T12511] futex_wake_op: syz.2.2038 tries to shift op by -1; fix this program [ 453.096063][ T44] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 453.125414][ T44] usb 5-1: 2:1 : format type 129 is not supported yet [ 453.180480][ T44] usb 5-1: USB disconnect, device number 95 [ 453.232441][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.351450][ T5952] hid-led 0003:27B8:01ED.0017: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 453.413262][ T5952] hid-led 0003:27B8:01ED.0017: ThingM blink(1) initialized [ 453.578030][ T5952] usb 6-1: USB disconnect, device number 17 [ 455.513170][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2051'. [ 456.524774][T12570] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2058'. [ 457.464240][ T5988] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 457.704275][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 457.725723][ T5988] usb 5-1: config 1 has an invalid descriptor of length 87, skipping remainder of the config [ 457.755088][ T5988] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.838957][ T5988] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 457.868521][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.899063][ T5988] usb 5-1: Product: syz [ 457.903295][ T5988] usb 5-1: Manufacturer: syz [ 457.924159][ T5988] usb 5-1: SerialNumber: syz [ 460.260346][ T5988] usb 5-1: USB disconnect, device number 96 [ 460.368352][T12626] bridge2: entered allmulticast mode [ 462.150113][T12665] nft_compat: unsupported protocol 1 [ 462.793216][T12684] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2107'. [ 463.063731][T12690] tipc: Resetting bearer [ 463.500618][T12706] syzkaller1: entered promiscuous mode [ 463.525194][T12706] syzkaller1: entered allmulticast mode [ 463.613307][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2115'. [ 463.710834][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2115'. [ 463.939847][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2115'. [ 464.019531][T12722] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2119'. [ 464.278652][T12734] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2125'. [ 464.321864][T12736] syzkaller1: entered promiscuous mode [ 464.328773][T12736] syzkaller1: entered allmulticast mode [ 464.573983][T12748] netlink: 'syz.3.2132': attribute type 23 has an invalid length. [ 464.720708][T12754] netlink: 'syz.5.2136': attribute type 29 has an invalid length. [ 464.750728][T12754] netlink: 'syz.5.2136': attribute type 29 has an invalid length. [ 464.778684][T12754] netlink: 'syz.5.2136': attribute type 29 has an invalid length. [ 464.787950][T12754] netlink: 'syz.5.2136': attribute type 29 has an invalid length. [ 464.823880][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 464.834353][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 465.024985][T12766] syzkaller1: entered promiscuous mode [ 465.036269][T12766] syzkaller1: entered allmulticast mode [ 465.463585][T12784] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2150'. [ 465.544059][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2153'. [ 465.564545][T12790] netlink: 'syz.5.2153': attribute type 1 has an invalid length. [ 466.661418][T12843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.054602][ T30] audit: type=1326 audit(1755224560.571:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.116573][ T30] audit: type=1326 audit(1755224560.571:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.166555][ T30] audit: type=1326 audit(1755224560.571:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.225068][ T30] audit: type=1326 audit(1755224560.571:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.280205][ T30] audit: type=1326 audit(1755224560.571:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.335526][ T30] audit: type=1326 audit(1755224560.571:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.363106][ T30] audit: type=1326 audit(1755224560.571:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.396532][ T30] audit: type=1326 audit(1755224560.571:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.463911][ T30] audit: type=1326 audit(1755224560.581:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.507299][ T30] audit: type=1326 audit(1755224560.581:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12825 comm="syz.5.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0dd8ebe9 code=0x7ffc0000 [ 467.584532][T12876] netlink: 'syz.3.2191': attribute type 7 has an invalid length. [ 467.928388][T12885] bridge6: entered allmulticast mode [ 467.971690][T12888] __nla_validate_parse: 2 callbacks suppressed [ 467.971714][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 468.301741][T12898] netlink: 'syz.3.2202': attribute type 29 has an invalid length. [ 468.331497][T12898] netlink: 'syz.3.2202': attribute type 29 has an invalid length. [ 468.343061][T12898] netlink: 'syz.3.2202': attribute type 29 has an invalid length. [ 468.586836][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.604280][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.621578][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.634452][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.662401][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.682684][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.694197][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.701676][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.729586][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.744200][ T44] hid-generic 03C8:0006:0002.0018: unknown main item tag 0x0 [ 468.796368][ T44] hid-generic 03C8:0006:0002.0018: hidraw0: HID v0.08 Device [syz1] on syz0 [ 468.843234][T12914] bridge3: entered allmulticast mode [ 469.025977][T12915] fido_id[12915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 469.041416][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'. [ 471.374375][ T5954] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 471.598213][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 471.634893][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 471.647380][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 471.728220][ T5954] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 471.757154][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.795716][ T5954] usb 1-1: config 0 descriptor?? [ 471.820281][T12966] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 471.857942][T12989] ------------[ cut here ]------------ [ 471.863504][T12989] WARNING: CPU: 0 PID: 12989 at arch/x86/kvm/x86.c:11551 kvm_arch_vcpu_ioctl_run+0x1212/0x1940 [ 471.874237][T12989] Modules linked in: [ 471.878599][T12989] CPU: 0 UID: 0 PID: 12989 Comm: syz.5.2241 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 471.891255][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 471.901457][T12989] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1212/0x1940 [ 471.908012][T12989] Code: 10 45 85 f6 7e 3a e8 7d 2f 79 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 64 24 08 4c 8b 7c 24 28 e9 6e fd ff ff e8 5f 2f 79 00 90 <0f> 0b 90 e9 2a fd ff ff e8 51 2f 79 00 90 0f 0b 90 e9 52 fd ff ff [ 471.927705][T12989] RSP: 0018:ffffc900032079e0 EFLAGS: 00010283 [ 471.933906][T12989] RAX: ffffffff81467c31 RBX: ffff888052bb2940 RCX: 0000000000080000 [ 471.941968][T12989] RDX: ffffc9001c9d1000 RSI: 00000000000003a7 RDI: 00000000000003a8 [ 471.950053][T12989] RBP: ffffc90003207c90 R08: 0000000000000000 R09: ffffffff81466c13 [ 471.958250][T12989] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888052bb2a18 [ 471.966832][T12989] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888028b69000 [ 471.976686][T12989] FS: 00007fdb0eb336c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 471.986193][T12989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.993250][T12989] CR2: 000000005200000c CR3: 0000000079dce000 CR4: 00000000003526f0 [ 472.001644][T12989] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 472.009751][T12989] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 472.017841][T12989] Call Trace: [ 472.021151][T12989] [ 472.024173][T12989] ? __mutex_trylock_common+0x153/0x260 [ 472.029770][T12989] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 472.035578][T12989] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 472.041610][T12989] ? rcu_is_watching+0x15/0xb0 [ 472.046490][T12989] ? trace_contention_end+0x39/0x120 [ 472.051825][T12989] ? __mutex_lock+0x335/0x1360 [ 472.056716][T12989] ? kasan_quarantine_put+0xdd/0x220 [ 472.062065][T12989] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 472.067015][T12989] ? __pfx___mutex_lock+0x10/0x10 [ 472.072096][T12989] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 472.077865][T12989] ? do_vfs_ioctl+0xbe8/0x1430 [ 472.082697][T12989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.087853][T12989] kvm_vcpu_ioctl+0x95c/0xe90 [ 472.092590][T12989] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.097883][T12989] ? __lock_acquire+0xab9/0xd20 [ 472.102819][T12989] ? __fget_files+0x2a/0x420 [ 472.107520][T12989] ? __fget_files+0x2a/0x420 [ 472.112149][T12989] ? __fget_files+0x3a0/0x420 [ 472.116926][T12989] ? __fget_files+0x2a/0x420 [ 472.121567][T12989] ? bpf_lsm_file_ioctl+0x9/0x20 [ 472.126633][T12989] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.131893][T12989] __se_sys_ioctl+0xf9/0x170 [ 472.136650][T12989] do_syscall_64+0xfa/0x3b0 [ 472.141213][T12989] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.146607][T12989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.152727][T12989] ? clear_bhb_loop+0x60/0xb0 [ 472.157515][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.163456][T12989] RIP: 0033:0x7fdb0dd8ebe9 [ 472.168135][T12989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.187884][T12989] RSP: 002b:00007fdb0eb33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.196418][T12989] RAX: ffffffffffffffda RBX: 00007fdb0dfb5fa0 RCX: 00007fdb0dd8ebe9 [ 472.204577][T12989] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 472.212599][T12989] RBP: 00007fdb0de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.220693][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.228946][T12989] R13: 00007fdb0dfb6038 R14: 00007fdb0dfb5fa0 R15: 00007fdb0e0dfa28 [ 472.237029][T12989] [ 472.240086][T12989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.247419][T12989] CPU: 0 UID: 0 PID: 12989 Comm: syz.5.2241 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 472.259522][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.269616][T12989] Call Trace: [ 472.272922][T12989] [ 472.275875][T12989] dump_stack_lvl+0x99/0x250 [ 472.280500][T12989] ? __asan_memcpy+0x40/0x70 [ 472.285133][T12989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.290370][T12989] ? __pfx__printk+0x10/0x10 [ 472.294999][T12989] vpanic+0x281/0x750 [ 472.299006][T12989] ? __pfx__printk+0x10/0x10 [ 472.303615][T12989] ? __pfx_vpanic+0x10/0x10 [ 472.308143][T12989] ? is_bpf_text_address+0x26/0x2b0 [ 472.313376][T12989] panic+0xb9/0xc0 [ 472.317115][T12989] ? __pfx_panic+0x10/0x10 [ 472.321562][T12989] __warn+0x31b/0x4b0 [ 472.325555][T12989] ? kvm_arch_vcpu_ioctl_run+0x1212/0x1940 [ 472.331386][T12989] ? kvm_arch_vcpu_ioctl_run+0x1212/0x1940 [ 472.337229][T12989] report_bug+0x2be/0x4f0 [ 472.341587][T12989] ? kvm_arch_vcpu_ioctl_run+0x1212/0x1940 [ 472.347418][T12989] ? kvm_arch_vcpu_ioctl_run+0x1212/0x1940 [ 472.353245][T12989] ? kvm_arch_vcpu_ioctl_run+0x1214/0x1940 [ 472.359070][T12989] handle_bug+0x84/0x160 [ 472.363327][T12989] exc_invalid_op+0x1a/0x50 [ 472.367850][T12989] asm_exc_invalid_op+0x1a/0x20 [ 472.372722][T12989] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1212/0x1940 [ 472.379155][T12989] Code: 10 45 85 f6 7e 3a e8 7d 2f 79 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 64 24 08 4c 8b 7c 24 28 e9 6e fd ff ff e8 5f 2f 79 00 90 <0f> 0b 90 e9 2a fd ff ff e8 51 2f 79 00 90 0f 0b 90 e9 52 fd ff ff [ 472.398779][T12989] RSP: 0018:ffffc900032079e0 EFLAGS: 00010283 [ 472.404871][T12989] RAX: ffffffff81467c31 RBX: ffff888052bb2940 RCX: 0000000000080000 [ 472.412981][T12989] RDX: ffffc9001c9d1000 RSI: 00000000000003a7 RDI: 00000000000003a8 [ 472.420983][T12989] RBP: ffffc90003207c90 R08: 0000000000000000 R09: ffffffff81466c13 [ 472.428973][T12989] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888052bb2a18 [ 472.436977][T12989] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888028b69000 [ 472.444991][T12989] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 472.450747][T12989] ? kvm_arch_vcpu_ioctl_run+0x1211/0x1940 [ 472.456600][T12989] ? __mutex_trylock_common+0x153/0x260 [ 472.462173][T12989] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 472.467921][T12989] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 472.473962][T12989] ? rcu_is_watching+0x15/0xb0 [ 472.478741][T12989] ? trace_contention_end+0x39/0x120 [ 472.484048][T12989] ? __mutex_lock+0x335/0x1360 [ 472.488846][T12989] ? kasan_quarantine_put+0xdd/0x220 [ 472.494167][T12989] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 472.499039][T12989] ? __pfx___mutex_lock+0x10/0x10 [ 472.504089][T12989] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 472.509765][T12989] ? do_vfs_ioctl+0xbe8/0x1430 [ 472.514558][T12989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 472.519602][T12989] kvm_vcpu_ioctl+0x95c/0xe90 [ 472.524322][T12989] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.529565][T12989] ? __lock_acquire+0xab9/0xd20 [ 472.534472][T12989] ? __fget_files+0x2a/0x420 [ 472.539091][T12989] ? __fget_files+0x2a/0x420 [ 472.543696][T12989] ? __fget_files+0x3a0/0x420 [ 472.548386][T12989] ? __fget_files+0x2a/0x420 [ 472.552993][T12989] ? bpf_lsm_file_ioctl+0x9/0x20 [ 472.557948][T12989] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 472.563172][T12989] __se_sys_ioctl+0xf9/0x170 [ 472.567784][T12989] do_syscall_64+0xfa/0x3b0 [ 472.572310][T12989] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.577536][T12989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.583612][T12989] ? clear_bhb_loop+0x60/0xb0 [ 472.588312][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.594223][T12989] RIP: 0033:0x7fdb0dd8ebe9 [ 472.598740][T12989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.618359][T12989] RSP: 002b:00007fdb0eb33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.626799][T12989] RAX: ffffffffffffffda RBX: 00007fdb0dfb5fa0 RCX: 00007fdb0dd8ebe9 [ 472.634783][T12989] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 472.642768][T12989] RBP: 00007fdb0de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.650753][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.658737][T12989] R13: 00007fdb0dfb6038 R14: 00007fdb0dfb5fa0 R15: 00007fdb0e0dfa28 [ 472.666735][T12989] [ 472.670098][T12989] Kernel Offset: disabled [ 472.674453][T12989] Rebooting in 86400 seconds..