last executing test programs: 9.437417307s ago: executing program 1 (id=7964): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb40, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19f2, 0x3, 0x5, 0x2800, 0x9, 0xffff, 0xba2, 0xc, 0x30, {0x8, 0x1}, 0xd0, 0x9}}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x25) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)='=', 0x1}], 0x1}}], 0x1, 0x40008d0) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x10122, 0x0) 7.515061598s ago: executing program 1 (id=7970): unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x102a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x2, 0x0, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x1008, 0x0, @wg=@data={0x4, 0x3, 0x8, "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"}}}}}}, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0x1800, 0x8) 6.995645921s ago: executing program 2 (id=7972): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x1, 0x6, 0x3d, 0x100, 0x3c, 0x540000, r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1, 0x6, 0x8, 0x100, 0x4, 0x86030090, r3}) 6.79758755s ago: executing program 2 (id=7975): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x20, 0x1a, 0x101, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 6.654690481s ago: executing program 2 (id=7976): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x10, &(0x7f0000000140)={0x20, 0x16}, 0x0, 0x0}) 5.594943373s ago: executing program 4 (id=7978): r0 = socket$inet_udp(0x2, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0xffff) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x90, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c8, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_IE={0x50, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x9, @void, @val=0x2b, @val="0888ad53c515cba1c596de5c46128491"}}, @dsss={0x3, 0x1, 0xae}, @random={0xc, 0x9, "be51d895158e264eec"}, @cf={0x4, 0x6, {0x1, 0x1, 0x80, 0x401}}, @chsw_timing={0x68, 0x4, {0x0, 0x7}}, @ssid={0x0, 0x16, @random="6cdaf8628edd27ec062e3d05c6dc4167213f4087c71b"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x15, 0x34, @random="6f20ad830e04de31e8b1a22541b2b02847"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xed, 0x2a, [@cf={0x4, 0x6, {0x4, 0x0, 0x506d, 0x8b1a}}, @measure_req={0x26, 0xd9, {0x26, 0x5, 0x9, "92f8d1496a9fb335aa017b3fc21bd5eb23ad73ccaf95e28b12e18ce645a162fcab6e272ddb01f46e5f6af19026a8637cdaf816ca58d9a6f209db138669aa67e69a2b2f0dbf84f0d2d6978d52a9b5c1c7f323a00d03c9116ed6917b751d570540c44cde6a0fc43dc218307e030fc3af0dbaef751d15d14ebc082493d96e65b2a949ac7a2cf4fab82b61ccda66940bfa70f56a5cb4c6440014b8db61d1b254b6f8ce21b8fbe1a661253f01382849e808af9f58470aaea19ccf5c36fe3d4af8ed08d2c1b1cf6a7f329f16dfdf19eb2a16356440c0a99367"}}, @chsw_timing={0x68, 0x4, {0xb, 0x1}}]}, @NL80211_ATTR_IE={0x29, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xe, 0xc, 0x1}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x35}, 0x40, 0x8, @device_b, 0x3, 0x3, 0x8}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44}, 0x2004801) 5.426209376s ago: executing program 4 (id=7979): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r0 = creat(0x0, 0xd931d3864d39ddd8) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') syz_io_uring_setup(0x2016, 0x0, &(0x7f0000000280), &(0x7f0000000400)) r6 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x69) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0xb, &(0x7f0000000000)=""/54, &(0x7f0000000040)=0x36) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipvlan0\x00'}, 0x18) 4.54621978s ago: executing program 2 (id=7982): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0xddd3, 0x4, 0x0, 0x0) 4.333610164s ago: executing program 1 (id=7983): unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x2, 0x0, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x3, 0x8, "c8be11446459d67f34e4f875c7bebc3d934b14afc217cb4f38f550eb5112147885304169a605c1166d118e0e7813552e0891fa5286"}}}}}}, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0x1800, 0x8) 3.974369493s ago: executing program 0 (id=7986): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ff9}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a0, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.945462629s ago: executing program 4 (id=7987): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x20, 0x1a, 0x101, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x3}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 3.932808882s ago: executing program 3 (id=7988): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000000}) r3 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xd805, 0x8, 0xfffffff7, 0x2, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) 3.724275563s ago: executing program 0 (id=7989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x80008001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) creat(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.706728082s ago: executing program 4 (id=7990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.358909666s ago: executing program 0 (id=7991): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x100000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x100, 0x101], 0xffff1001, 0x120182}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x0, 0x4, 0x0, 0xd9e}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)="60886068cdb3e3904820daa426c97ed159e96b46ec8a5a09260da3da34ef023970b918e4ba18a459cf6fab14efe64c17ce3d0517246dd6d05f3ce25823bd8f49e923036e3d685d2036f1a8607fe4ee83831ac56c96ec431f8e4d4c7663646cf0a8e7b0de7dd41473cbf52f8bbb411ad6a91502c2a14edc53c778298bf554472bf3c299") 3.132345364s ago: executing program 4 (id=7992): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000080) close(0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.901889793s ago: executing program 3 (id=7993): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 2.885702309s ago: executing program 2 (id=7994): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.861385368s ago: executing program 0 (id=7995): socket$kcm(0xa, 0x922000000003, 0x11) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0xd9, 0x3, 0x4, 0x1000, 0x1a9, {}, {0x2, 0x2, 0x4, 0x5, 0x0, 0x8, "5b1d73ff"}, 0xb, 0x1, {0x0}, 0x91}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.752509339s ago: executing program 3 (id=7996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.584571293s ago: executing program 0 (id=7997): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x1, 0x4000, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x4000001, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7, 0xf001, 0x8, 0x2, 0xb676, 0xc}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x3, 0x9, 0x8, 0x0, 0x4, 0x8}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100001200000429bd7000fcdbdf251e06000c4e204e210500000016a20000090000000e0000000300000008000000e4c10000f6ffffff", @ANYRES32=r7, @ANYBLOB="ff0300005b3b00004b7555b6382ab3727e76569f0000000e000000b20001009b74802c1272d568acf2daa1c4bc894febe338f07cb151b531ec0845e632260fc0dff9c68e76d885abd407e56a2e115c65cdfc7e67c5a36ac2f83bc1c9d0474920bae02568e0ea3eb25ab1229c5765b21f5314ce9dd79afa7082d7ec29187ed4878eaefd59641219d6050a8d37fae826d66129d4a752c084f02f75719f08a7817a8df4f4f354c58fb1e0891506fe208718d393d0af6bca00efa777276893dbf02343d2d37e"], 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x20048800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r10 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r11, 0x0, 0x20000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0cc5605, &(0x7f0000000100)={0x2, @pix_mp={0x9, 0x5, 0x34324258, 0x8, 0xb, [{0x2, 0x20008}, {0x7, 0x104}, {0x6, 0x3}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0x9}, {0xd094, 0xfffffffe}, {0x2, 0x3159}], 0x9, 0xa, 0x3, 0x1, 0x5}}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x80000002]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 2.571118582s ago: executing program 3 (id=7998): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r0 = creat(0x0, 0xd931d3864d39ddd8) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') syz_io_uring_setup(0x2016, &(0x7f0000000480)={0x0, 0x63f9, 0x8000, 0x100, 0x292, 0x0, r5}, 0x0, &(0x7f0000000400)) r6 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x69) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0xb, &(0x7f0000000000)=""/54, &(0x7f0000000040)=0x36) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipvlan0\x00'}, 0x18) 1.267175476s ago: executing program 3 (id=7999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, 0x0) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4454, &(0x7f0000000100)={0xa, 0x4e20, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) 1.172706959s ago: executing program 1 (id=8000): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) poll(&(0x7f0000000240)=[{r1, 0x421a}], 0x1, 0x7) 1.056910538s ago: executing program 1 (id=8001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 959.395144ms ago: executing program 0 (id=8002): r0 = socket$kcm(0x2b, 0x1, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110430000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4020, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048c8) 827.350598ms ago: executing program 2 (id=8003): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) 108.039826ms ago: executing program 1 (id=8004): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000000}) r3 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xd805, 0x8, 0xfffffff7, 0x2, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) 107.815316ms ago: executing program 3 (id=8005): syz_io_uring_setup(0x94e, &(0x7f0000000140)={0x0, 0x4bfd, 0x10100}, &(0x7f0000000100), &(0x7f00000002c0)) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) socket(0x15, 0x5, 0x0) unshare(0x20000400) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002fad61b2077329e000f2e010203010902"], 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000, 0x7, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 4 (id=8006): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040051}, 0x24040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, 0x0, 0x8800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x5, &(0x7f0000000400)=[{0xf, 0xc, 0x2, 0x9}, {0x2, 0xf, 0x2, 0xfff}, {0xd, 0x17, 0x1, 0x9}, {0x8, 0x1, 0x58, 0x5}, {0x4, 0x6, 0x3, 0x2}]}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x40, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) kernel console output (not intermixed with test programs): 0535][T26753] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1976.985112][T26753] usb 4-1: Product: syz [ 1976.993107][T26753] usb 4-1: Manufacturer: syz [ 1977.003108][T26753] usb 4-1: SerialNumber: syz [ 1977.020793][T26753] usb 4-1: config 0 descriptor?? [ 1977.345045][T31024] tipc: Enabled bearer , priority 0 [ 1977.355777][T31024] syzkaller0: entered promiscuous mode [ 1977.361872][T31024] syzkaller0: entered allmulticast mode [ 1977.372389][T17376] f81534 1-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 1977.382611][T17376] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1977.411254][T17376] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1977.434578][T17376] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1977.468126][T17376] usb 1-1: USB disconnect, device number 125 [ 1977.478741][T26753] usb 4-1: USB disconnect, device number 126 [ 1977.687997][T31024] tipc: Resetting bearer [ 1977.753219][T31024] tipc: Disabling bearer [ 1979.220040][T31065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6989'. [ 1979.382143][T26753] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1979.898482][T26753] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1980.034076][T31079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1980.782818][T26753] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1980.817242][T26753] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1980.884193][T26753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.921807][T31066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1980.933484][T26753] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1981.396521][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1981.396539][ T30] audit: type=1326 audit(1760561892.861:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31082 comm="syz.0.6993" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1981.489960][T26753] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1981.660043][T26753] usb 3-1: Using ep0 maxpacket: 32 [ 1981.667308][T26753] usb 3-1: config 0 has no interfaces? [ 1981.674215][T26753] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1982.050016][T26753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.081029][T26753] usb 3-1: config 0 descriptor?? [ 1982.340780][T31088] vlan0: entered promiscuous mode [ 1982.347705][T31088] dummy0: entered promiscuous mode [ 1982.402170][T17376] usb 2-1: USB disconnect, device number 118 [ 1982.481895][T31096] netlink: 'syz.1.6997': attribute type 1 has an invalid length. [ 1982.772567][T31096] bond6: entered promiscuous mode [ 1982.818369][T31096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1982.931483][T31098] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1982.941403][T31098] bond6: (slave gre3): The slave device specified does not support setting the MAC address [ 1982.952870][T31098] bond6: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 1982.977868][T31098] bond6: (slave gre3): making interface the new active one [ 1982.986141][T31098] gre3: entered promiscuous mode [ 1982.998993][T31098] bond6: (slave gre3): Enslaving as an active interface with an up link [ 1984.394127][T26753] usb 3-1: USB disconnect, device number 115 [ 1985.165238][T26753] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1985.330246][T26753] usb 3-1: Using ep0 maxpacket: 8 [ 1985.362480][T26753] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.380473][T26753] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1985.390703][T26753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.408131][T26753] usb 3-1: Product: syz [ 1985.422122][T26753] usb 3-1: Manufacturer: syz [ 1985.437134][T26753] usb 3-1: SerialNumber: syz [ 1985.693576][T26753] usb 3-1: config 0 descriptor?? [ 1985.730665][T26753] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1985.739489][T26753] usb 3-1: selecting invalid altsetting 1 [ 1986.358540][T31142] tc_dump_action: action bad kind [ 1987.977066][T17376] usb 3-1: USB disconnect, device number 116 [ 1988.117315][T31153] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[31153] [ 1988.569463][T26757] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1989.210757][T26757] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1989.235846][T26757] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1989.263954][T26757] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1989.288939][T26757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.335165][T31156] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1989.354199][T26757] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1989.514739][T31178] loop6: detected capacity change from 0 to 524288000 [ 1989.612714][T26753] usb 1-1: USB disconnect, device number 126 [ 1990.876905][T31190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1992.150498][T31211] cgroup: fork rejected by pids controller in /syz4 [ 1993.083271][T31238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1995.080025][ T367] vxlan0: left promiscuous mode [ 1995.979545][T26757] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1996.130483][T26757] usb 2-1: Using ep0 maxpacket: 32 [ 1996.155520][T26757] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1996.167866][T26757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1996.295219][T26757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1996.341247][T26757] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1996.385208][T26757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1996.440888][T26757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1996.513538][T26757] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1996.543167][T26757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.585336][T26757] usb 2-1: Product: syz [ 1996.602055][T26757] usb 2-1: Manufacturer: syz [ 1996.626142][T26757] usb 2-1: SerialNumber: syz [ 1996.676802][T26757] usb 2-1: config 0 descriptor?? [ 1996.704891][ T392] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1996.730749][ T392] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1996.876646][ T396] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[396] [ 1996.954207][ T380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1996.963303][ T380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1996.973555][ T380] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7034'. [ 1996.992312][T26757] usb 2-1: USB disconnect, device number 119 [ 1998.458742][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7039'. [ 1998.606532][ T415] tipc: Enabling of bearer rejected, failed to enable media [ 1998.919471][T26753] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1999.142220][T26753] usb 3-1: Using ep0 maxpacket: 8 [ 1999.240225][T26753] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1999.296736][T26753] usb 3-1: config 0 has no interface number 0 [ 1999.346262][T26753] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1999.402290][T26753] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1999.413411][T26753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.584602][T26753] usb 3-1: config 0 descriptor?? [ 1999.606386][T26753] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1999.772625][ T429] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 1999.890893][T26753] usb 3-1: USB disconnect, device number 117 [ 2000.005420][ T416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7040'. [ 2000.680062][T26753] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2001.039801][T26753] usb 4-1: Using ep0 maxpacket: 8 [ 2001.050474][T26753] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2001.061935][T26753] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2001.076381][T26753] usb 4-1: string descriptor 0 read error: -22 [ 2001.084390][T26753] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2001.104462][T26753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.148722][T26753] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2001.192375][T26753] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2001.207878][T26753] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2001.217296][T26753] usb 4-1: media controller created [ 2001.266985][T26753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2002.536132][ T437] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 2002.573744][T26753] zl10353_read_register: readreg error (reg=127, ret==0) [ 2004.195944][T26753] usb 4-1: USB disconnect, device number 127 [ 2005.947369][ T30] audit: type=1326 audit(1760561917.481:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=499 comm="syz.3.7058" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 2006.720044][T26753] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 2006.986641][T26753] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2007.008560][T26753] usb 4-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 2007.042995][T26753] usb 4-1: config 0 has no interface number 0 [ 2007.051140][T26753] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2007.066764][T26753] usb 4-1: config 0 interface 20 altsetting 119 has an endpoint descriptor with address 0x6E, changing to 0xE [ 2007.097433][T26753] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0xE has invalid maxpacket 56345, setting to 64 [ 2007.382589][T26753] usb 4-1: config 0 interface 20 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2007.396924][T26753] usb 4-1: config 0 interface 20 has no altsetting 0 [ 2007.408097][T26753] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 2007.421028][T26753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.433705][T26753] usb 4-1: Product: syz [ 2007.438085][T26753] usb 4-1: Manufacturer: syz [ 2007.447456][T26753] usb 4-1: SerialNumber: syz [ 2007.479471][T26757] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 2007.505639][T26753] usb 4-1: config 0 descriptor?? [ 2007.522895][ T506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2007.880348][T26757] usb 2-1: config index 0 descriptor too short (expected 61256, got 72) [ 2007.905122][T26757] usb 2-1: config 1 has an invalid interface number: 0 but max is -1 [ 2007.962767][ T504] netlink: 41 bytes leftover after parsing attributes in process `syz.3.7058'. [ 2007.976882][ T504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7058'. [ 2008.005921][T26757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.038058][T26757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 2008.068293][T26757] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 2008.124318][T26757] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2008.140284][T26757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2008.163351][T26757] usb 2-1: SerialNumber: syz [ 2008.209492][T17376] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2008.263384][T26757] cdc_acm 2-1:1.0: skipping garbage [ 2008.325482][T26757] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 2008.381952][T17376] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2008.399635][T26757] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 2008.409895][T17376] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2008.426172][T26757] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 2008.444175][T17376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2008.460834][T17376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2008.472497][T17376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2008.487146][T17376] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2008.497731][T17376] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2008.560608][T17376] usb 1-1: Product: syz [ 2008.571787][T17376] usb 1-1: Manufacturer: syz [ 2008.596057][T17376] cdc_wdm 1-1:1.0: skipping garbage [ 2008.602749][T17376] cdc_wdm 1-1:1.0: skipping garbage [ 2008.650047][T17376] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2008.660456][T17376] cdc_wdm 1-1:1.0: Unknown control protocol [ 2008.697505][ T30] audit: type=1326 audit(1760561920.211:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2008.780157][ T30] audit: type=1326 audit(1760561920.211:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2008.813821][ T30] audit: type=1326 audit(1760561920.211:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2008.898166][ T30] audit: type=1326 audit(1760561920.211:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2009.055533][T26753] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 2009.154521][ T30] audit: type=1326 audit(1760561920.211:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2009.178715][T26753] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 2009.188324][T26753] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 7 [ 2009.203082][T26753] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 2009.307830][T26753] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 2009.307839][ T30] audit: type=1326 audit(1760561920.211:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2009.307881][ T30] audit: type=1326 audit(1760561920.211:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2009.431216][T26753] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 2009.469554][T17376] usb 1-1: USB disconnect, device number 127 [ 2009.470244][T26753] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 2009.576259][T26753] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 2009.656013][T26753] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2009.690698][ T30] audit: type=1326 audit(1760561920.211:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2009.713212][T26753] usb 4-1: USB disconnect, device number 2 [ 2009.812277][ T30] audit: type=1326 audit(1760561920.221:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.4.7063" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 2009.847319][T26753] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2009.892880][T26753] keyspan 4-1:0.20: device disconnected [ 2010.419236][ T550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7067'. [ 2010.729810][T17376] usb 2-1: USB disconnect, device number 120 [ 2012.223817][ T566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7069'. [ 2012.395760][ T570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7071'. [ 2013.111531][ T576] netlink: 'syz.0.7072': attribute type 10 has an invalid length. [ 2013.133575][ T576] bond0: (slave netdevsim0): Releasing backup interface [ 2013.166886][ T576] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2014.585093][ T597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7078'. [ 2014.600556][ T597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7078'. [ 2015.438197][T26753] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2015.612379][T26753] usb 2-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 2015.623601][T26753] usb 2-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 2015.635612][T26753] usb 2-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 2015.649946][T26753] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2015.656595][T26753] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 2015.731007][T26753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.731060][T17376] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2015.777614][T26753] usb 2-1: config 0 descriptor?? [ 2015.817527][ T614] usb usb8: usbfs: process 614 (syz.0.7082) did not claim interface 0 before use [ 2015.940895][T17376] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2015.953915][T17376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2016.010527][T26753] usb 2-1: string descriptor 0 read error: -71 [ 2016.020279][T26753] usb 2-1: USB disconnect, device number 121 [ 2016.034549][T17376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2016.083994][T17376] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2016.106297][T17376] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2016.116988][T17376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.154326][T17376] usb 3-1: config 0 descriptor?? [ 2016.297112][ T618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7083'. [ 2016.597272][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.610108][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.646328][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.686640][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.705766][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.725821][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.734607][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.743113][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.751723][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.761753][T17376] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 2016.923717][T17376] plantronics 0003:047F:FFFF.0074: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2017.201668][ T608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.245784][ T622] loop6: detected capacity change from 0 to 63 [ 2017.315389][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2017.330252][ T608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2017.334371][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2017.556314][T17376] usb 3-1: USB disconnect, device number 118 [ 2017.586036][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2017.614503][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2017.857817][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2018.485179][ T638] fuse: Bad value for 'fd' [ 2018.496895][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7088'. [ 2021.684181][ T677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2022.442834][ T695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2022.485208][ T695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2022.633814][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2022.633832][ T30] audit: type=1800 audit(1760561934.051:4136): pid=682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7096" name="/" dev="fuse" ino=3 res=0 errno=0 [ 2023.329536][T26757] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2023.354914][ T705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7101'. [ 2023.500550][T26757] usb 1-1: Using ep0 maxpacket: 32 [ 2023.547457][T26757] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.564604][T26757] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2024.132790][T26757] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2024.199889][T26757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.229609][T17376] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 2024.279422][T26757] usb 1-1: config 0 descriptor?? [ 2024.353546][T26757] hub 1-1:0.0: bad descriptor, ignoring hub [ 2024.382877][T26757] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2024.420757][T17376] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 2024.435462][T26757] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2024.466301][T17376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.855976][T17376] usb 3-1: config 0 descriptor?? [ 2024.928242][T17376] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 2025.791023][T26757] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2026.012701][T26757] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 2026.024718][T26757] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 2026.166739][T26757] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2026.240049][T26757] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 2026.300177][T26757] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2026.593229][T17376] pwc: Failed to set LED on/off time (-71) [ 2026.619273][T17376] pwc: send_video_command error -71 [ 2026.624523][T17376] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2026.634985][T26757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.745049][T17376] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 2026.810169][T17376] usb 3-1: USB disconnect, device number 119 [ 2026.875062][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7107'. [ 2026.970023][T26755] usb 1-1: USB disconnect, device number 2 [ 2027.810022][T26755] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2027.822825][T26757] ath6kl: Failed to submit usb control message: -110 [ 2027.900425][ T745] netlink: 'syz.3.7110': attribute type 4 has an invalid length. [ 2027.913741][ T745] netlink: 'syz.3.7110': attribute type 4 has an invalid length. [ 2027.923665][T26757] ath6kl: unable to send the bmi data to the device: -110 [ 2028.001737][T26757] ath6kl: Unable to send get target info: -110 [ 2028.050223][T26757] ath6kl: Failed to init ath6kl core: -110 [ 2028.120795][T26757] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 2028.135457][T26755] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2028.226111][T26757] usb 2-1: USB disconnect, device number 122 [ 2028.300010][T26755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.345110][T26755] usb 1-1: config 0 descriptor?? [ 2028.374684][T26755] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2029.330321][T26755] gspca_spca508: reg_read err -110 [ 2029.336597][T26755] gspca_spca508: reg_read err -32 [ 2029.343545][T26755] gspca_spca508: reg_read err -32 [ 2029.357676][T26755] gspca_spca508: reg_read err -32 [ 2029.374981][T26755] gspca_spca508: reg write: error -32 [ 2029.385185][T26755] spca508 1-1:0.0: probe with driver spca508 failed with error -32 [ 2029.876714][ T751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7111'. [ 2030.031788][ T757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7112'. [ 2030.420534][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7113'. [ 2030.593660][T26755] usb 1-1: USB disconnect, device number 3 [ 2030.717882][ T770] tipc: Bearer : already 2 bearers with priority 10 [ 2030.734784][ T770] tipc: Bearer : trying with adjusted priority [ 2030.747671][ T770] tipc: New replicast peer: 255.255.255.255 [ 2030.757780][ T770] tipc: Enabled bearer , priority 9 [ 2030.794502][ T770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7114'. [ 2030.806071][ T770] tipc: Disabling bearer [ 2030.860793][T26757] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 2031.071977][T26757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2031.083807][T26757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.099352][T26757] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2031.108521][T26757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.393046][T26757] usb 2-1: config 0 descriptor?? [ 2031.889809][ T768] veth1_to_bridge: left allmulticast mode [ 2032.191467][T17376] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2032.254311][T26757] elan 0003:04F3:0755.0075: failed to start in urb: -90 [ 2032.338696][T26757] elan 0003:04F3:0755.0075: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2032.381484][T17376] usb 1-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 2032.443479][T17376] usb 1-1: too many endpoints for config 0 interface 0 altsetting 209: 129, using maximum allowed: 30 [ 2032.518885][T17376] usb 1-1: config 0 interface 0 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 2032.570261][T17376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2032.577086][T17376] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 2032.581542][T26755] usb 2-1: USB disconnect, device number 123 [ 2032.590072][T17376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.622481][T17376] usb 1-1: config 0 descriptor?? [ 2032.847323][T17376] usb 1-1: string descriptor 0 read error: -71 [ 2032.927115][T17376] usb 1-1: USB disconnect, device number 4 [ 2033.079946][T26755] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2033.203643][ T804] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7122'. [ 2033.240100][T26755] usb 3-1: Using ep0 maxpacket: 32 [ 2033.258195][T26755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2033.310932][T26755] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2033.429566][T26755] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2033.472271][ T807] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2033.502417][T26755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.567019][T26755] usb 3-1: config 0 descriptor?? [ 2033.791685][T26755] hub 3-1:0.0: bad descriptor, ignoring hub [ 2033.797794][T26755] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2033.817331][T17376] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2033.825573][T26755] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2034.249386][T17376] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2034.261323][T17376] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2034.294668][T17376] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2034.550006][T17376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.760041][ T807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2034.784363][T17376] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2035.004276][T17376] usb 4-1: USB disconnect, device number 3 [ 2035.210199][T27517] udevd[27517]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2035.734673][ T824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7126'. [ 2036.086619][ T829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2036.096741][ T829] 8021q: adding VLAN 0 to HW filter on device team0 [ 2036.104599][T26755] usb 3-1: USB disconnect, device number 120 [ 2036.216175][ T829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2037.435859][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.444237][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.772673][ T856] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7133'. [ 2039.630321][ T868] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7146'. [ 2039.973345][ T876] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[876] [ 2040.328041][ T878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7138'. [ 2040.511917][ T30] audit: type=1800 audit(1760561952.031:4137): pid=867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7136" name="/" dev="fuse" ino=3 res=0 errno=0 [ 2041.773907][ T884] fuse: Bad value for 'fd' [ 2041.784139][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7139'. [ 2042.355258][ T897] netlink: 'syz.1.7141': attribute type 4 has an invalid length. [ 2042.543255][ T899] binder: 898:899 ioctl c0306201 80000180 returned -14 [ 2042.624227][ T901] netlink: 'syz.1.7141': attribute type 4 has an invalid length. [ 2043.662131][ T910] random: crng reseeded on system resumption [ 2046.317528][ T949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7151'. [ 2046.342819][ T949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7151'. [ 2046.424157][ T952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7152'. [ 2048.009428][T26755] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 2048.765800][T26755] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2048.778299][T26755] usb 1-1: not running at top speed; connect to a high speed hub [ 2048.796162][T26755] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 2048.835650][T26755] usb 1-1: config 5 has an invalid descriptor of length 138, skipping remainder of the config [ 2048.860090][T26755] usb 1-1: config 5 has no interface number 0 [ 2048.869904][T26755] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 37375, setting to 64 [ 2048.898608][T26755] usb 1-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2048.940332][T26755] usb 1-1: config 5 interface 246 has no altsetting 0 [ 2048.960648][T26755] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 2048.970563][T26755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.980569][T26755] usb 1-1: Product: syz [ 2048.985009][T26755] usb 1-1: Manufacturer: syz [ 2048.995548][T26755] usb 1-1: SerialNumber: syz [ 2049.621371][ T961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.631646][ T961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.884250][ T961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.925259][ T961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.983320][ T961] blkio.reset_stats is deprecated [ 2050.063649][ T1161] usb 1-1: Failed to submit usb control message: -71 [ 2050.072346][T26755] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2050.082544][ T1161] usb 1-1: unable to send the bmi data to the device: -71 [ 2050.112856][ T1161] usb 1-1: unable to get target info from device [ 2050.155664][T26755] usb 1-1: USB disconnect, device number 5 [ 2050.175883][ T1161] usb 1-1: could not get target info (-71) [ 2050.283223][ T1161] usb 1-1: could not probe fw (-71) [ 2051.725699][ T1002] random: crng reseeded on system resumption [ 2052.141227][ T1007] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 2052.141227][ T1007] program syz.3.7159 not setting count and/or reply_len properly [ 2053.457796][ T1026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7165'. [ 2054.297929][ T1040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2055.205151][ T1053] binder: 1046:1053 ioctl 4018620d 0 returned -22 [ 2055.219581][ T1053] binder: 1046:1053 ioctl c0306201 80000080 returned -14 [ 2056.482180][ T30] audit: type=1326 audit(1760561968.021:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2056.514223][ T1075] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 2056.522394][ T1075] CPU: 1 UID: 0 PID: 1075 Comm: syz.2.7172 Not tainted syzkaller #0 PREEMPT(full) [ 2056.522420][ T1075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2056.522434][ T1075] Call Trace: [ 2056.522444][ T1075] [ 2056.522454][ T1075] dump_stack_lvl+0x189/0x250 [ 2056.522486][ T1075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2056.522508][ T1075] ? __pfx__printk+0x10/0x10 [ 2056.522534][ T1075] ? kernfs_path_from_node+0x2f/0x290 [ 2056.522553][ T1075] ? kernfs_path_from_node+0x250/0x290 [ 2056.522569][ T1075] ? kernfs_path_from_node+0x2f/0x290 [ 2056.522592][ T1075] sysfs_warn_dup+0x8e/0xa0 [ 2056.522620][ T1075] sysfs_do_create_link_sd+0xc0/0x110 [ 2056.522651][ T1075] device_add_class_symlinks+0x1cf/0x240 [ 2056.522680][ T1075] device_add+0x475/0xb50 [ 2056.522707][ T1075] wiphy_register+0x1c81/0x2aa0 [ 2056.522746][ T1075] ? __pfx_wiphy_register+0x10/0x10 [ 2056.522766][ T1075] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2056.522799][ T1075] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 2056.522828][ T1075] ieee80211_register_hw+0x3473/0x40d0 [ 2056.522868][ T1075] ? ieee80211_register_hw+0x1411/0x40d0 [ 2056.522904][ T1075] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2056.522928][ T1075] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2056.522960][ T1075] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2056.522988][ T1075] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2056.523023][ T1075] ? __hrtimer_setup+0x187/0x210 [ 2056.523048][ T1075] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2056.523073][ T1075] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 2056.523141][ T1075] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2056.523169][ T1075] ? trace_kmalloc+0x1f/0xd0 [ 2056.523187][ T1075] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 2056.523210][ T1075] ? kstrndup+0xbf/0x160 [ 2056.523247][ T1075] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 2056.523287][ T1075] ? __pfx___nla_validate_parse+0x10/0x10 [ 2056.523325][ T1075] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2056.523361][ T1075] ? rcu_is_watching+0x15/0xb0 [ 2056.523392][ T1075] ? __nla_parse+0x40/0x60 [ 2056.523418][ T1075] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2056.523450][ T1075] genl_family_rcv_msg_doit+0x215/0x300 [ 2056.523480][ T1075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2056.523516][ T1075] ? bpf_lsm_capable+0x9/0x20 [ 2056.523534][ T1075] ? security_capable+0x7e/0x2e0 [ 2056.523561][ T1075] genl_rcv_msg+0x60e/0x790 [ 2056.523589][ T1075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2056.523609][ T1075] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2056.523654][ T1075] netlink_rcv_skb+0x208/0x470 [ 2056.523678][ T1075] ? __lock_acquire+0xab9/0xd20 [ 2056.523703][ T1075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2056.523725][ T1075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2056.523772][ T1075] ? down_read+0x1ad/0x2e0 [ 2056.523797][ T1075] genl_rcv+0x28/0x40 [ 2056.523815][ T1075] netlink_unicast+0x82f/0x9e0 [ 2056.523850][ T1075] ? __pfx_netlink_unicast+0x10/0x10 [ 2056.523876][ T1075] ? netlink_sendmsg+0x642/0xb30 [ 2056.523900][ T1075] ? skb_put+0x11b/0x210 [ 2056.523931][ T1075] netlink_sendmsg+0x805/0xb30 [ 2056.523968][ T1075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2056.523997][ T1075] ? __import_iovec+0x5d4/0x7f0 [ 2056.524020][ T1075] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2056.524044][ T1075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2056.524067][ T1075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2056.524095][ T1075] __sock_sendmsg+0x21c/0x270 [ 2056.524131][ T1075] ____sys_sendmsg+0x505/0x830 [ 2056.524166][ T1075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2056.524213][ T1075] ___sys_sendmsg+0x21f/0x2a0 [ 2056.524236][ T1075] ? __pfx____sys_sendmsg+0x10/0x10 [ 2056.524254][ T1075] ? kasan_quarantine_put+0xdd/0x220 [ 2056.524276][ T1075] ? lockdep_hardirqs_on+0x9c/0x150 [ 2056.524331][ T1075] ? __fget_files+0x2a/0x420 [ 2056.524354][ T1075] ? __fget_files+0x3a0/0x420 [ 2056.524388][ T1075] __sys_sendmsg+0x164/0x220 [ 2056.524410][ T1075] ? __pfx___sys_sendmsg+0x10/0x10 [ 2056.524449][ T1075] ? rcu_is_watching+0x15/0xb0 [ 2056.524476][ T1075] ? __secure_computing+0xe2/0x2a0 [ 2056.524513][ T1075] __do_fast_syscall_32+0xb6/0x2b0 [ 2056.524536][ T1075] ? lockdep_hardirqs_on+0x9c/0x150 [ 2056.524560][ T1075] do_fast_syscall_32+0x34/0x80 [ 2056.524581][ T1075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2056.524603][ T1075] RIP: 0023:0xf7f95539 [ 2056.524621][ T1075] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2056.524638][ T1075] RSP: 002b:00000000f544455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2056.524659][ T1075] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 2056.524673][ T1075] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2056.524685][ T1075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2056.524696][ T1075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2056.524708][ T1075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2056.524740][ T1075] [ 2057.005756][ T30] audit: type=1326 audit(1760561968.021:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.028039][ T30] audit: type=1326 audit(1760561968.051:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.070065][ T30] audit: type=1326 audit(1760561968.051:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.092677][ T30] audit: type=1326 audit(1760561968.051:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.115292][ T30] audit: type=1326 audit(1760561968.051:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.159496][ T30] audit: type=1326 audit(1760561968.051:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.262346][ T30] audit: type=1326 audit(1760561968.051:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.299766][T26757] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2057.592940][T26757] usb 4-1: Using ep0 maxpacket: 32 [ 2057.610482][T26757] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2057.610494][ T30] audit: type=1326 audit(1760561968.051:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.639975][ T30] audit: type=1326 audit(1760561968.591:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1067 comm="syz.2.7172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x7ffc0000 [ 2057.877814][T26757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.930957][T26757] usb 4-1: config 0 descriptor?? [ 2058.141182][T26757] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2058.182413][T26757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2058.210363][T26757] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2058.248426][T26757] usb 4-1: media controller created [ 2058.290358][T26757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2058.357267][ T1065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2058.381556][ T1087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7175'. [ 2058.420671][ T1088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7171'. [ 2058.559944][T26757] az6027: usb out operation failed. (-71) [ 2058.653250][T26757] az6027: usb out operation failed. (-71) [ 2058.989977][T26757] stb0899_attach: Driver disabled by Kconfig [ 2059.026334][T26757] az6027: no front-end attached [ 2059.026334][T26757] [ 2059.035537][T17376] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2059.050265][T26757] az6027: usb out operation failed. (-71) [ 2059.139964][T26757] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2059.151882][T26757] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input363 [ 2059.275802][T26757] dvb-usb: schedule remote query interval to 400 msecs. [ 2059.294779][T26757] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2059.303928][T17376] usb 3-1: Using ep0 maxpacket: 8 [ 2059.320006][T17376] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2059.329903][T17376] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2059.345885][T26757] usb 4-1: USB disconnect, device number 4 [ 2059.359471][T17376] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2059.381160][T17376] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2059.444575][T17376] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2059.877283][T26757] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2059.901136][T17376] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2059.928149][T17376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.393115][T17376] usb 3-1: usb_control_msg returned -32 [ 2060.411522][T17376] usbtmc 3-1:16.0: can't read capabilities [ 2061.460098][T17376] usb 3-1: USB disconnect, device number 121 [ 2064.625969][T26755] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2065.286062][T26755] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2065.298423][T26755] usb 1-1: config 7 has an invalid interface number: 93 but max is 2 [ 2065.314751][T26755] usb 1-1: config 7 has an invalid interface number: 73 but max is 2 [ 2065.490593][T26755] usb 1-1: config 7 has an invalid interface number: 133 but max is 2 [ 2065.509825][T26755] usb 1-1: config 7 has an invalid interface number: 96 but max is 2 [ 2065.528287][T26755] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2065.563865][T26755] usb 1-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 2065.582286][T26755] usb 1-1: config 7 has no interface number 0 [ 2065.588597][T26755] usb 1-1: config 7 has no interface number 1 [ 2065.595544][T26755] usb 1-1: config 7 has no interface number 2 [ 2065.602606][T26755] usb 1-1: config 7 has no interface number 3 [ 2065.608750][T26755] usb 1-1: config 7 interface 93 altsetting 9 bulk endpoint 0xA has invalid maxpacket 1023 [ 2065.620890][T26755] usb 1-1: config 7 interface 93 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2065.638084][T26755] usb 1-1: config 7 interface 93 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2065.650575][T26755] usb 1-1: config 7 interface 93 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 0 [ 2065.664309][T26755] usb 1-1: config 7 interface 73 altsetting 232 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2065.679999][T26755] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x4, skipping [ 2065.694822][T26755] usb 1-1: config 7 interface 73 altsetting 232 has an invalid descriptor for endpoint zero, skipping [ 2065.715842][T26755] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x4, skipping [ 2065.727390][T26755] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x6, skipping [ 2065.740346][T26755] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x8, skipping [ 2065.769778][T26755] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x2, skipping [ 2065.793994][T26755] usb 1-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x2, skipping [ 2065.823023][T26755] usb 1-1: config 7 interface 73 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2065.848729][T26755] usb 1-1: config 7 interface 73 altsetting 232 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2065.860637][ T1151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7189'. [ 2065.889684][T26755] usb 1-1: config 7 interface 73 altsetting 232 has 13 endpoint descriptors, different from the interface descriptor's value: 14 [ 2065.909706][T26755] usb 1-1: too many endpoints for config 7 interface 133 altsetting 229: 92, using maximum allowed: 30 [ 2065.935812][ T1151] gtp2: entered promiscuous mode [ 2065.959783][T26755] usb 1-1: config 7 interface 133 altsetting 229 has a duplicate endpoint with address 0x6, skipping [ 2065.971499][ T1151] gtp2: entered allmulticast mode [ 2065.989504][T26755] usb 1-1: config 7 interface 133 altsetting 229 has 1 endpoint descriptor, different from the interface descriptor's value: 92 [ 2066.010041][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 2066.032584][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 2066.056564][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 2066.099922][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 2066.138577][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x82, skipping [ 2066.177683][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 2066.204129][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 2066.232148][T26755] usb 1-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 2066.250690][T26755] usb 1-1: config 7 interface 93 has no altsetting 0 [ 2066.257585][T26755] usb 1-1: config 7 interface 73 has no altsetting 0 [ 2066.265373][T26755] usb 1-1: config 7 interface 133 has no altsetting 0 [ 2066.272985][T26755] usb 1-1: config 7 interface 96 has no altsetting 0 [ 2066.294648][T26755] usb 1-1: string descriptor 0 read error: -71 [ 2066.306683][T26755] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=a6.54 [ 2066.317786][T26755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.372400][T26755] usb 1-1: can't set config #7, error -71 [ 2066.403486][T26755] usb 1-1: USB disconnect, device number 6 [ 2067.696722][ T1168] random: crng reseeded on system resumption [ 2067.786807][ T1174] vivid-000: ================= START STATUS ================= [ 2067.795073][ T1174] vivid-000: Test Pattern: 75% Colorbar [ 2067.810127][ T1174] vivid-000: Fill Percentage of Frame: 100 [ 2067.815997][ T1174] vivid-000: Horizontal Movement: Move Right Slow [ 2067.827283][ T1174] vivid-000: Vertical Movement: Move Down Slow [ 2067.849952][ T1174] vivid-000: OSD Text Mode: All [ 2067.854932][ T1174] vivid-000: Show Border: false [ 2067.905584][ T1174] vivid-000: Show Square: false [ 2068.111043][ T1181] netdevsim netdevsim0: Direct firmware load for . [ 2068.111043][ T1181] failed with error -2 [ 2068.122487][ T1181] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 2068.122487][ T1181] [ 2068.154282][ T1174] vivid-000: Sensor Flipped Horizontally: false [ 2068.208166][ T1182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7192'. [ 2068.243692][ T1174] vivid-000: Sensor Flipped Vertically: false [ 2068.269852][ T1174] vivid-000: Insert SAV Code in Image: false [ 2068.472577][ T1174] vivid-000: Insert EAV Code in Image: false [ 2068.480159][ T1174] vivid-000: Insert Video Guard Band: false [ 2068.489946][ T1174] vivid-000: Reduced Framerate: false [ 2068.903724][ T1174] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 2068.914530][ T1174] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 2068.952636][ T1174] vivid-000: Enable Capture Cropping: true [ 2068.964938][ T1174] vivid-000: Enable Capture Composing: true [ 2068.974853][ T1174] vivid-000: Enable Capture Scaler: true [ 2068.981167][ T1174] vivid-000: Timestamp Source: End of Frame [ 2068.988408][ T1174] vivid-000: Colorspace: SMPTE 170M [ 2068.994311][ T1174] vivid-000: Transfer Function: None [ 2069.001330][ T1174] vivid-000: Y'CbCr Encoding: Default [ 2069.007585][ T1174] vivid-000: HSV Encoding: Hue 0-256 [ 2069.013655][ T1174] vivid-000: Quantization: Default [ 2069.019856][ T1174] vivid-000: Apply Alpha To Red Only: true [ 2069.025910][ T1174] vivid-000: Standard Aspect Ratio: 4x3 [ 2069.032129][ T1174] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 2069.040652][ T1174] vivid-000: DV Timings: 640x480p59 inactive [ 2069.046779][ T1174] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 2069.055118][ T1174] vivid-000: Maximum EDID Blocks: 2 [ 2069.124109][ T1174] vivid-000: Limited RGB Range (16-235): false [ 2069.134113][ T1174] vivid-000: Rx RGB Quantization Range: Automatic [ 2069.141197][ T1174] vivid-000: Power Present: 0x00000001 [ 2069.146803][ T1174] tpg source WxH: 720x576 (R'G'B) [ 2069.218615][ T1174] tpg field: 4 [ 2069.223654][ T1174] tpg crop: (0,8)/64x64 [ 2069.227915][ T1174] tpg compose: (0,0)/16x16 [ 2069.235839][ T1174] tpg colorspace: 2 [ 2069.241044][ T1174] tpg transfer function: 5/0 [ 2069.245907][ T1174] tpg quantization: 0/0 [ 2069.250849][ T1174] tpg RGB range: 0/2 [ 2069.254772][ T1174] vivid-000: ================== END STATUS ================== [ 2069.720151][T17376] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2069.926065][T17376] usb 1-1: Using ep0 maxpacket: 32 [ 2070.004593][T17376] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2070.026770][T17376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.056349][T17376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2070.087090][T17376] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2070.108829][T17376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.136031][T17376] usb 1-1: Product: syz [ 2070.148406][T17376] usb 1-1: Manufacturer: syz [ 2070.161912][T17376] usb 1-1: SerialNumber: syz [ 2070.618062][ T1206] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7198'. [ 2070.627818][ T1206] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7198'. [ 2070.637543][ T1206] netlink: 'syz.3.7198': attribute type 3 has an invalid length. [ 2070.645853][ T1206] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7198'. [ 2071.540010][ T1206] : renamed from bridge_slave_0 [ 2071.903969][ T1216] tipc: Enabled bearer , priority 0 [ 2071.944978][ T1214] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 2071.989229][ T1214] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 2072.211777][ T1214] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7200'. [ 2072.235053][ T1216] tipc: Resetting bearer [ 2073.159400][T17376] usb 1-1: 0:2 : does not exist [ 2073.491460][T17376] usb 1-1: USB disconnect, device number 7 [ 2073.761183][ T1243] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 2075.596036][ T1257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7206'. [ 2075.943876][ T1260] random: crng reseeded on system resumption [ 2076.112528][ T1261] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 2077.755155][ T1282] usb usb8: usbfs: process 1282 (syz.1.7221) did not claim interface 0 before use [ 2079.676683][ T1300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7213'. [ 2079.997023][ T1309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7214'. [ 2080.293164][ T1307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7214'. [ 2080.559554][T17376] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2080.722370][T17376] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2080.735153][T17376] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2080.752497][T17376] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2080.763412][T17376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.924644][T17376] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2081.958064][T17376] usb 4-1: invalid MIDI out EP 0 [ 2082.707807][T17376] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2082.939720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.948704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.957031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.355786][ T1350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7224'. [ 2083.585821][T17376] usb 4-1: USB disconnect, device number 5 [ 2083.871703][ T1358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7227'. [ 2084.658562][ T1370] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2085.261729][T17376] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2085.377451][ T1383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7231'. [ 2085.449569][T17376] usb 3-1: Using ep0 maxpacket: 16 [ 2085.481580][T17376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.499981][T17376] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.562721][T17376] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2085.580505][T17376] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2085.613411][T17376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.627986][T17376] usb 3-1: config 0 descriptor?? [ 2086.463596][T17376] usbhid 3-1:0.0: can't add hid device: -71 [ 2086.510245][T17376] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2086.573168][T17376] usb 3-1: USB disconnect, device number 122 [ 2086.859591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.868088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.876501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.823042][ T1402] : entered promiscuous mode [ 2088.043291][T26755] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2088.355321][T26755] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2088.367781][T26755] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2088.381329][T26755] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2088.446632][T26755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.596501][T26755] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2088.610822][T26755] usb 3-1: invalid MIDI out EP 0 [ 2089.454201][ T1426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2089.484679][ T1426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2089.758419][ T1428] netlink: 'syz.0.7242': attribute type 1 has an invalid length. [ 2089.825273][T26755] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2089.838451][ T1428] netlink: 'syz.0.7242': attribute type 2 has an invalid length. [ 2090.237262][T26755] usb 3-1: USB disconnect, device number 123 [ 2090.570198][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 2090.570216][ T30] audit: type=1326 audit(1760562002.111:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1432 comm="syz.3.7244" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x0 [ 2090.670677][T26755] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2090.833051][T26755] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2090.859382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.867814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.876267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.914665][T26755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2091.076904][T26755] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 2091.115124][T26755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.164908][T26755] usb 3-1: config 0 descriptor?? [ 2091.550715][ T1447] fuse: Bad value for 'fd' [ 2091.643760][ T1449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2091.699957][T17376] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2091.784025][ T1451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2091.793545][ T1451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2091.806330][ T1451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7245'. [ 2092.220233][ T1461] netlink: 'syz.1.7252': attribute type 10 has an invalid length. [ 2092.260090][ T1461] netlink: 'syz.1.7252': attribute type 10 has an invalid length. [ 2092.313893][T17376] usb 4-1: Using ep0 maxpacket: 32 [ 2092.325256][T17376] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2092.334136][T17376] usb 4-1: config 0 has no interface number 0 [ 2092.340748][T17376] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2092.811391][T17376] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2093.149639][T17376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.157690][T17376] usb 4-1: Product: syz [ 2093.287539][T17376] usb 4-1: Manufacturer: syz [ 2093.300902][T17376] usb 4-1: SerialNumber: syz [ 2093.314527][T17376] usb 4-1: config 0 descriptor?? [ 2093.621431][ T1466] snd_dummy snd_dummy.0: control 2:1023:128:syz0:2 is already present [ 2093.761146][ T1470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7254'. [ 2094.460216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.468753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.477192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.635620][T26755] usbhid 3-1:0.0: can't add hid device: -71 [ 2094.642923][T26755] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2094.658715][T26755] usb 3-1: USB disconnect, device number 124 [ 2096.314889][T26757] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2096.840081][T26757] usb 2-1: Using ep0 maxpacket: 8 [ 2096.857197][T17376] f81534 4-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 2096.876471][T26757] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.894042][T26757] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2096.978905][T17376] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 2096.986530][T17376] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2097.000417][T26757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.023854][T17376] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 2097.033040][T26757] usb 2-1: Product: syz [ 2097.123717][T26757] usb 2-1: Manufacturer: syz [ 2097.362551][T17376] usb 4-1: USB disconnect, device number 6 [ 2097.368564][T26757] usb 2-1: SerialNumber: syz [ 2097.478872][ T1499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2097.494297][T26757] usb 2-1: config 0 descriptor?? [ 2097.538554][T26757] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2097.582495][T26757] usb 2-1: selecting invalid altsetting 1 [ 2097.590985][ T1501] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 2098.059162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.067605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.076034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.863263][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.870098][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.990707][ T1527] sg_write: data in/out 2012/120 bytes for SCSI command 0x0-- guessing data in; [ 2098.990707][ T1527] program syz.0.7266 not setting count and/or reply_len properly [ 2099.322572][ T1530] fuse: Bad value for 'fd' [ 2099.399906][T26755] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2099.487725][T26757] usb 2-1: USB disconnect, device number 124 [ 2099.560055][T26755] usb 1-1: Using ep0 maxpacket: 16 [ 2099.568034][T26755] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 2099.587977][T26755] usb 1-1: config 252 has no interface number 0 [ 2099.595853][T26755] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2099.611851][T26755] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2099.629896][T26755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.638048][T26755] usb 1-1: Product: syz [ 2099.644019][T26755] usb 1-1: Manufacturer: syz [ 2099.648726][T26755] usb 1-1: SerialNumber: syz [ 2099.713285][T26755] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2100.662413][ T1545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7269'. [ 2100.785516][T13885] usb 1-1: Failed to submit usb control message: -110 [ 2100.793404][T13885] usb 1-1: unable to send the bmi data to the device: -110 [ 2100.951755][T13885] usb 1-1: unable to get target info from device [ 2100.958127][T13885] usb 1-1: could not get target info (-110) [ 2101.005089][T13885] usb 1-1: could not probe fw (-110) [ 2101.776228][T26753] usb 1-1: USB disconnect, device number 8 [ 2101.905511][ T1558] netlink: 'syz.0.7271': attribute type 7 has an invalid length. [ 2101.913924][ T1558] netlink: 'syz.0.7271': attribute type 8 has an invalid length. [ 2102.139069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.147388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.155868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.173287][ T1585] dvmrp1: left allmulticast mode [ 2106.059061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.067442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.064229][ T1609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7283'. [ 2107.347074][ T1599] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1514) ! [ 2109.239760][ T1640] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2109.819112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.827563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.835962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.219149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.227445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.119681][T26757] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2112.459457][T26757] usb 4-1: Using ep0 maxpacket: 32 [ 2112.467080][T26757] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2112.483892][T26757] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2112.493729][T26757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.502360][T26757] usb 4-1: Product: syz [ 2112.510749][T26757] usb 4-1: Manufacturer: syz [ 2112.515368][T26757] usb 4-1: SerialNumber: syz [ 2112.647583][T26757] usb 4-1: config 0 descriptor?? [ 2112.659935][T26757] cdc_ether 4-1:0.0: skipping garbage [ 2112.667161][T26757] usb 4-1: bad CDC descriptors [ 2112.824526][T26755] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2112.940002][T26757] usb 4-1: unsupported MDLM descriptors [ 2113.011533][T26755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2113.022252][T26755] usb 3-1: config 7 has an invalid interface number: 93 but max is 2 [ 2113.032932][T26755] usb 3-1: config 7 has an invalid interface number: 73 but max is 2 [ 2113.230165][T26755] usb 3-1: config 7 has an invalid interface number: 133 but max is 2 [ 2113.270118][T26755] usb 3-1: config 7 has an invalid interface number: 96 but max is 2 [ 2113.294235][T26755] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.402041][T26755] usb 3-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 2113.437735][T26755] usb 3-1: config 7 has no interface number 0 [ 2113.462975][ T1676] binder: 1672:1676 ioctl 4018620d 0 returned -22 [ 2113.490704][ T1676] binder: 1672:1676 ioctl c0306201 80000080 returned -14 [ 2113.583681][ T1677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7292'. [ 2114.081298][T26755] usb 3-1: config 7 has no interface number 1 [ 2114.094425][T26755] usb 3-1: config 7 has no interface number 2 [ 2114.275309][T26755] usb 3-1: config 7 has no interface number 3 [ 2114.379082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.387578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.395956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.622911][T26755] usb 3-1: config 7 interface 93 altsetting 9 bulk endpoint 0xA has invalid maxpacket 1023 [ 2114.666239][T26755] usb 3-1: config 7 interface 93 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2114.733617][T26755] usb 3-1: config 7 interface 93 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2114.966467][T26755] usb 3-1: config 7 interface 93 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 0 [ 2115.071795][T26755] usb 3-1: config 7 interface 73 altsetting 232 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2115.089893][T26755] usb 3-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x4, skipping [ 2115.105443][T26755] usb 3-1: config 7 interface 73 altsetting 232 has an invalid descriptor for endpoint zero, skipping [ 2115.130266][T26755] usb 3-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x4, skipping [ 2115.142280][T26755] usb 3-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x6, skipping [ 2115.201103][T26755] usb 3-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x8, skipping [ 2115.239534][T26755] usb 3-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x2, skipping [ 2115.274041][T26755] usb 3-1: config 7 interface 73 altsetting 232 has a duplicate endpoint with address 0x2, skipping [ 2115.308464][T26755] usb 3-1: config 7 interface 73 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2115.330459][T26755] usb 3-1: config 7 interface 73 altsetting 232 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 2115.345968][T26757] usb 4-1: USB disconnect, device number 7 [ 2115.410285][T26755] usb 3-1: config 7 interface 73 altsetting 232 has 13 endpoint descriptors, different from the interface descriptor's value: 14 [ 2115.566851][T26755] usb 3-1: too many endpoints for config 7 interface 133 altsetting 229: 92, using maximum allowed: 30 [ 2115.940006][T26755] usb 3-1: config 7 interface 133 altsetting 229 has a duplicate endpoint with address 0x6, skipping [ 2116.004661][T26755] usb 3-1: config 7 interface 133 altsetting 229 has 1 endpoint descriptor, different from the interface descriptor's value: 92 [ 2116.140196][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 2116.158252][ T1699] netdevsim netdevsim3: Direct firmware load for . [ 2116.158252][ T1699] failed with error -2 [ 2116.190142][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 2116.266005][ T1699] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 2116.266005][ T1699] [ 2116.540119][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 2116.685534][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 2116.756507][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x82, skipping [ 2116.807203][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 2116.880133][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 2116.950291][T26755] usb 3-1: config 7 interface 96 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 2117.015053][T26755] usb 3-1: config 7 interface 93 has no altsetting 0 [ 2117.031494][T26755] usb 3-1: config 7 interface 73 has no altsetting 0 [ 2117.049760][T26755] usb 3-1: config 7 interface 133 has no altsetting 0 [ 2117.070253][T26755] usb 3-1: config 7 interface 96 has no altsetting 0 [ 2117.087828][T26755] usb 3-1: string descriptor 0 read error: -71 [ 2117.115659][T26755] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=a6.54 [ 2117.133363][T26755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.153492][T26755] usb 3-1: can't set config #7, error -71 [ 2117.163440][T26755] usb 3-1: USB disconnect, device number 125 [ 2117.691074][ T30] audit: type=1326 audit(1760562029.201:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2117.699399][ T1704] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 2118.219029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.227502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.235930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.340660][ T30] audit: type=1326 audit(1760562029.201:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2118.385296][ T30] audit: type=1326 audit(1760562029.201:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2119.227378][ T30] audit: type=1326 audit(1760562029.201:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2119.405073][ T30] audit: type=1326 audit(1760562029.201:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2119.553477][ T30] audit: type=1326 audit(1760562029.211:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2119.650622][ T30] audit: type=1326 audit(1760562029.211:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2119.723945][ T30] audit: type=1326 audit(1760562029.211:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2119.804943][ T30] audit: type=1326 audit(1760562029.211:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2119.868506][ T30] audit: type=1326 audit(1760562029.211:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1710 comm="syz.3.7301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 2120.061724][ T1729] fuse: Bad value for 'max_read' [ 2120.413162][ T1733] bridge10: entered allmulticast mode [ 2120.867940][ T1745] bridge9: entered allmulticast mode [ 2121.299467][T26757] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2121.834553][T26757] usb 1-1: Using ep0 maxpacket: 8 [ 2121.989847][T26757] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 2122.083227][T26757] usb 1-1: config 6 has no interface number 0 [ 2122.146072][T26757] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2122.329639][T26757] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2122.379071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.387478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.395910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.409998][T26757] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2122.428320][T26757] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2122.459440][T26757] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 2122.468508][T26757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.513232][T26757] usb 1-1: Product: syz [ 2122.541147][T26757] usb 1-1: Manufacturer: syz [ 2122.560245][T26757] usb 1-1: SerialNumber: syz [ 2122.654951][T26757] hso 1-1:6.2: Failed to find BULK IN ep [ 2124.512448][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7308'. [ 2124.893568][T26755] usb 1-1: USB disconnect, device number 9 [ 2126.520018][ T1789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7313'. [ 2126.553044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.561356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.569742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2128.030302][ T1810] netlink: 'syz.0.7319': attribute type 27 has an invalid length. [ 2128.046602][ T1810] lo: left allmulticast mode [ 2128.052694][ T1810] tunl0: left allmulticast mode [ 2128.061911][ T1810] gre0: left allmulticast mode [ 2128.068163][ T1810] erspan0: left allmulticast mode [ 2128.074989][ T1810] ip_vti0: left allmulticast mode [ 2128.164022][ T1810] ip6_vti0: left allmulticast mode [ 2128.170867][ T1810] sit0: left allmulticast mode [ 2128.175911][ T1810] ip6tnl0: left allmulticast mode [ 2128.182452][ T1810] ip6gre0: left allmulticast mode [ 2128.187849][ T1810] bond0: left allmulticast mode [ 2128.194044][ T1810] nlmon0: left allmulticast mode [ 2128.200558][ T1810] caif0: left allmulticast mode [ 2128.205839][ T1810] batadv0: left allmulticast mode [ 2128.212139][ T1810] veth0: left allmulticast mode [ 2128.217314][ T1810] veth1: left allmulticast mode [ 2128.224326][ T1810] wg0: left allmulticast mode [ 2128.230438][ T1810] wg1: left allmulticast mode [ 2128.235441][ T1810] wg2: left allmulticast mode [ 2128.241531][ T1810] veth0_to_bridge: left allmulticast mode [ 2128.247565][ T1810] : left allmulticast mode [ 2128.253507][ T1810] veth1_to_bridge: left allmulticast mode [ 2128.260761][ T1810] bridge_slave_1: left allmulticast mode [ 2128.266766][ T1810] veth0_to_bond: left allmulticast mode [ 2128.273841][ T1810] bond_slave_0: left allmulticast mode [ 2128.290722][ T1810] veth1_to_bond: left allmulticast mode [ 2128.296553][ T1810] bond_slave_1: left allmulticast mode [ 2128.303739][ T1810] veth0_to_team: left allmulticast mode [ 2128.310598][ T1810] team_slave_0: left allmulticast mode [ 2128.316540][ T1810] veth1_to_team: left allmulticast mode [ 2128.323148][ T1810] team_slave_1: left allmulticast mode [ 2128.370065][ T1810] veth0_to_batadv: left allmulticast mode [ 2128.376119][ T1810] batadv_slave_0: left allmulticast mode [ 2128.383378][ T1810] xfrm0: left allmulticast mode [ 2128.390334][ T1810] veth1_to_hsr: left allmulticast mode [ 2128.396614][ T1810] hsr0: left allmulticast mode [ 2128.402647][ T1810] hsr_slave_0: left allmulticast mode [ 2128.408388][ T1810] veth1_virt_wifi: left allmulticast mode [ 2128.415674][ T1810] veth0_virt_wifi: left allmulticast mode [ 2128.426102][ T1810] veth1_vlan: left allmulticast mode [ 2128.432981][ T1810] @: left allmulticast mode [ 2128.437780][ T1810] vlan1: left allmulticast mode [ 2128.444136][ T1810] macvlan0: left allmulticast mode [ 2128.450008][ T1810] macvlan1: left allmulticast mode [ 2128.455497][ T1810] ipvlan0: left allmulticast mode [ 2128.461350][ T1810] ipvlan1: left allmulticast mode [ 2128.466426][ T1810] veth0_vlan: left allmulticast mode [ 2128.473372][ T1810] veth1_macvtap: left allmulticast mode [ 2128.480266][ T1810] veth0_macvtap: left allmulticast mode [ 2128.486359][ T1810] macvtap0: left allmulticast mode [ 2128.497576][ T1810] macsec0: left allmulticast mode [ 2128.504190][ T1810] geneve0: left allmulticast mode [ 2128.510534][ T1810] geneve1: left allmulticast mode [ 2128.516387][ T1810] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 2128.524848][ T1810] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 2128.533520][ T1810] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 2128.542436][ T1810] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 2128.560434][ T1810] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 2128.567784][ T1810] bridge1: left allmulticast mode [ 2128.574143][ T1810] bond1: left allmulticast mode [ 2128.580236][ T1810] ip6erspan0: left allmulticast mode [ 2128.585835][ T1810] bridge2: left allmulticast mode [ 2128.592565][ T1810] mac80211_hwsim hwsim21 wlan2: left allmulticast mode [ 2128.600720][ T1810] bridge3: left allmulticast mode [ 2128.606083][ T1810] gre1: left allmulticast mode [ 2128.612104][ T1810] bridge4: left allmulticast mode [ 2128.617332][ T1810] bond2: left allmulticast mode [ 2128.624469][ T1810] geneve2: left allmulticast mode [ 2128.636076][ T1810] bond3: left allmulticast mode [ 2128.641723][ T1810] bridge5: left allmulticast mode [ 2128.647031][ T1810] bridge6: left allmulticast mode [ 2128.653539][ T1810] macvlan2: left allmulticast mode [ 2128.660183][ T1810] macsec1: left allmulticast mode [ 2128.665355][ T1810] macvlan4: left allmulticast mode [ 2128.702888][ T1810] vxlan0: left allmulticast mode [ 2128.708003][ T1810] sit1: left allmulticast mode [ 2128.716997][ T1810] veth2: left allmulticast mode [ 2128.723610][ T1810] veth3: left allmulticast mode [ 2128.740698][ T1810] bridge7: left allmulticast mode [ 2128.748244][ T1810] gre2: left allmulticast mode [ 2128.754057][ T1810] syztnl0: left allmulticast mode [ 2128.760018][ T1810] bond4: left allmulticast mode [ 2128.767535][ T1810] bridge8: left allmulticast mode [ 2128.775522][ T1810] gretap1: left allmulticast mode [ 2128.810046][ T1810] bridge9: left allmulticast mode [ 2128.816434][ T1810] bond5: left allmulticast mode [ 2128.834359][ T1810] erspan1: left allmulticast mode [ 2128.873889][ T1810] mac80211_hwsim hwsim42 wlan3: left allmulticast mode [ 2128.951111][ T1810] veth0_to_hsr.3: left allmulticast mode [ 2128.956792][ T1810] veth0_to_hsr: left allmulticast mode [ 2128.963487][ T1810] gtp0: left allmulticast mode [ 2128.968711][ T1810] vxlan1: left allmulticast mode [ 2129.066119][ T1810] gtp1: left allmulticast mode [ 2129.113750][ T1810] syztnl1: left allmulticast mode [ 2129.180151][ T1810] bond6: left allmulticast mode [ 2129.234586][ T1810] geneve3: left allmulticast mode [ 2129.262700][ T1810] geneve4: left allmulticast mode [ 2129.267978][ T1810] gre3: left allmulticast mode [ 2129.285941][ T1810] mac80211_hwsim hwsim50 wlan4: left allmulticast mode [ 2129.294507][ T1810] mac80211_hwsim hwsim52 wlan5: left allmulticast mode [ 2129.302638][ T1810] syztnl2: left allmulticast mode [ 2129.368232][ T1810] erspan2: left allmulticast mode [ 2129.582067][ T1810] gtp2: left promiscuous mode [ 2129.586806][ T1810] gtp2: left allmulticast mode [ 2130.619139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.627574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.635867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2131.610705][ T1853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7327'. [ 2131.635689][ T1853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7327'. [ 2131.672434][ T1853] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2131.976723][ T1860] netlink: 'syz.4.7330': attribute type 10 has an invalid length. [ 2132.113511][ T1861] netlink: 'syz.4.7330': attribute type 10 has an invalid length. [ 2132.923983][ T1860] bond0: (slave netdevsim0): Releasing backup interface [ 2133.046570][ T1861] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2133.113051][ T1867] input: syz1 as /devices/virtual/input/input364 [ 2134.630311][T26753] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2134.699140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2134.835909][T26753] usb 4-1: Using ep0 maxpacket: 16 [ 2134.932914][T26753] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.990578][T26753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2135.066551][T26753] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2135.270703][T26753] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2135.280344][T26753] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2135.295289][T26753] usb 4-1: Manufacturer: syz [ 2135.306041][T26753] usb 4-1: config 0 descriptor?? [ 2136.559621][T26753] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2136.709555][T26753] usb 3-1: Using ep0 maxpacket: 16 [ 2136.716905][T26753] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2136.731516][T26753] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2136.747358][T26753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.763892][T26753] usb 3-1: Product: syz [ 2136.771383][T26753] usb 3-1: Manufacturer: syz [ 2136.778542][T26753] usb 3-1: SerialNumber: syz [ 2136.794526][T26753] usb 3-1: config 0 descriptor?? [ 2136.811273][T26753] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 2136.822724][T26753] gspca_stv06xx: st6422 sensor detected [ 2137.463143][T26757] usb 4-1: USB disconnect, device number 8 [ 2137.829069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.837567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.462253][ T1920] loop6: detected capacity change from 0 to 63 [ 2138.652444][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2138.710536][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2138.736916][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2138.870361][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2138.945148][T27417] Buffer I/O error on dev loop6, logical block 0, async page read [ 2139.190506][T26755] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2139.379868][T26755] usb 1-1: Using ep0 maxpacket: 32 [ 2139.388620][T26755] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 2139.403579][T26755] usb 1-1: config 0 has no interface number 0 [ 2139.414236][T26755] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 2139.481741][T26755] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 2139.553603][T26755] usb 1-1: Product: syz [ 2139.557798][T26755] usb 1-1: Manufacturer: syz [ 2139.598747][T26755] usb 1-1: config 0 descriptor?? [ 2140.028510][ T1932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7341'. [ 2140.121206][T26753] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 2140.144065][ T1934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7341'. [ 2140.255442][T26753] usb 3-1: USB disconnect, device number 126 [ 2141.099042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.107567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.115893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.056996][T26753] usb 1-1: USB disconnect, device number 10 [ 2143.864138][ T1980] Invalid option length (64407) for dns_resolver key [ 2143.962580][ T1982] bridge0: entered allmulticast mode [ 2144.779029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.787403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.827908][ T1990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7358'. [ 2144.857165][ T1990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7358'. [ 2144.890073][ T1990] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2146.103392][ T2009] input: syz0 as /devices/virtual/input/input365 [ 2148.139631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2148.148085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2148.156512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2148.533293][ T2044] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2148.896725][ T2050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7376'. [ 2148.988526][ T2052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7377'. [ 2149.079956][ T2053] loop6: detected capacity change from 0 to 524287999 [ 2149.646211][ T2059] openvswitch: netlink: Message has 2 unknown bytes. [ 2149.663995][ T2059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2149.874652][ T2067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7384'. [ 2151.464467][ T2087] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 2151.719613][T26753] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2151.895473][ T2094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7393'. [ 2151.939823][T26753] usb 3-1: Using ep0 maxpacket: 8 [ 2151.958341][T26753] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 2151.976647][T26753] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 2152.059508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.067957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.076444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.156884][T26753] usb 3-1: config 0 has no interface number 0 [ 2152.242572][T26753] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2152.284239][T26753] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2152.369961][T26753] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2152.480227][T26753] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2152.500269][T26753] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2152.522968][T26753] usb 3-1: Product: syz [ 2152.534967][T26753] usb 3-1: config 0 descriptor?? [ 2152.545808][ T2086] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2153.007582][T26753] usb 3-1: USB disconnect, device number 127 [ 2154.399455][T26757] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2154.669570][T26757] usb 2-1: Using ep0 maxpacket: 16 [ 2155.227301][T26757] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 2155.282474][ T2139] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 2155.436020][T26757] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 2155.449477][T26757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 2155.498492][T26757] usb 2-1: Product: syz [ 2155.508754][T26757] usb 2-1: Manufacturer: syz [ 2155.514221][T26757] usb 2-1: SerialNumber: syz [ 2155.525384][T26757] usb 2-1: config 0 descriptor?? [ 2155.534691][T26757] pwc: Philips SPC 880NC USB webcam detected. [ 2155.774580][T26757] pwc: Warning: more than 1 configuration available. [ 2155.913360][T26757] pwc: Failed to set LED on/off time (-71) [ 2155.920260][T26757] pwc: send_video_command error -71 [ 2155.925480][T26757] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2155.937400][T26757] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2155.964796][T26757] usb 2-1: USB disconnect, device number 125 [ 2156.851654][ T2157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7408'. [ 2156.884028][ T2157] openvswitch: netlink: Missing key (keys=40, expected=80) [ 2157.536257][ T2176] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 2159.066161][ T2220] wg1: entered promiscuous mode [ 2159.099721][ T2220] wg1: entered allmulticast mode [ 2159.672518][ T2248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7445'. [ 2159.690810][ T2248] loop6: detected capacity change from 0 to 524287999 [ 2159.957853][T26753] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2160.480036][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.486387][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.530140][T26753] usb 2-1: Using ep0 maxpacket: 8 [ 2160.544957][T26753] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 2160.574140][T26753] usb 2-1: config 6 has no interface number 0 [ 2160.591151][T26753] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2160.624876][T26753] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2160.670422][T26753] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2160.788615][T26753] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2160.883415][T26753] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 2160.912401][T26753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.940483][T26753] usb 2-1: Product: syz [ 2160.955522][T26753] usb 2-1: Manufacturer: syz [ 2160.990637][T26753] usb 2-1: SerialNumber: syz [ 2161.098669][T26753] hso 2-1:6.2: Failed to find BULK IN ep [ 2161.126879][ T2268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7455'. [ 2163.195224][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7465'. [ 2163.899889][T26753] usb 2-1: USB disconnect, device number 126 [ 2165.057519][ T2323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7476'. [ 2165.564462][ T2337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7477'. [ 2165.579562][ T2337] loop6: detected capacity change from 0 to 524287999 [ 2165.894431][ T2345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7483'. [ 2166.363730][ T2350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7484'. [ 2166.885927][ T2353] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2166.892484][ T2353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2166.929816][ T2353] vhci_hcd vhci_hcd.0: Device attached [ 2167.048466][ T2356] vhci_hcd: connection closed [ 2167.048766][ T1161] vhci_hcd: stop threads [ 2167.062083][ T1161] vhci_hcd: release socket [ 2167.066811][ T1161] vhci_hcd: disconnect device [ 2167.109790][ T2361] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2167.475446][ T2369] bridge10: entered allmulticast mode [ 2168.160754][ T2386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2169.138516][ T2393] batadv_slave_1: entered promiscuous mode [ 2169.510365][ T2408] tipc: Enabling of bearer rejected, already enabled [ 2169.965212][ T2420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7507'. [ 2170.029647][ T2420] batman_adv: batadv0: Removing interface: dummy0 [ 2170.161639][T26753] hid_parser_main: 5 callbacks suppressed [ 2170.161654][T26753] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 2170.211996][T26753] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2170.315270][ T2428] fido_id[2428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2174.674616][ T2556] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[2556] [ 2174.720275][T26753] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2175.155237][T26753] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2175.164341][T26753] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2175.233677][T26753] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.298438][T26753] usb 3-1: config 220 has no interface number 2 [ 2175.311415][T26753] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2175.333777][T26753] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2175.356825][T26753] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2175.371086][T26753] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2175.391428][T26753] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2175.406154][T26753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.415671][T26753] usb 3-1: Product: syz [ 2175.427114][T26753] usb 3-1: Manufacturer: syz [ 2175.432889][T26753] usb 3-1: SerialNumber: syz [ 2175.694381][T26753] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2175.753761][T26753] uvcvideo 3-1:220.0: No valid video chain found. [ 2175.774000][T26753] usb 3-1: selecting invalid altsetting 0 [ 2175.807692][T26753] usb 3-1: selecting invalid altsetting 0 [ 2175.843974][T26753] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 2175.890552][T26753] usb 3-1: USB disconnect, device number 2 [ 2176.829452][T26757] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2176.989471][T26757] usb 3-1: Using ep0 maxpacket: 8 [ 2177.003488][T26757] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2177.028829][T26757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.183410][T26757] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2177.301181][T26757] pvrusb2: ********** [ 2177.305427][T26757] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2177.337609][T26757] pvrusb2: Important functionality might not be entirely working. [ 2177.493363][T26757] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2177.534305][T26757] pvrusb2: ********** [ 2177.552744][ T2346] pvrusb2: Invalid write control endpoint [ 2177.722250][ T2346] pvrusb2: Invalid write control endpoint [ 2177.734291][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2177.763463][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2177.772821][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2177.821074][ T2346] pvrusb2: Device being rendered inoperable [ 2177.866061][ T2616] pvrusb2: Attempted to execute control transfer when device not ok [ 2177.887887][T26755] usb 3-1: USB disconnect, device number 3 [ 2177.906484][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2177.933685][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2177.950494][ T2346] pvrusb2: Attached sub-driver cx25840 [ 2177.956922][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2177.998219][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2178.760076][T26755] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2179.034782][T26755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2179.047900][T26755] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 2179.061057][T26755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.072054][T26755] usb 2-1: config 0 descriptor?? [ 2179.139480][T26757] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2179.359963][T26757] usb 3-1: Using ep0 maxpacket: 32 [ 2179.367217][T26757] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2179.382972][T26757] usb 3-1: config 0 has no interface number 0 [ 2179.396611][T26757] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2179.406426][T26757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.422359][T26757] usb 3-1: Product: syz [ 2179.429651][T26757] usb 3-1: Manufacturer: syz [ 2179.436764][T26757] usb 3-1: SerialNumber: syz [ 2179.451588][T26757] usb 3-1: config 0 descriptor?? [ 2179.462574][T26757] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2179.476740][T26757] usb 3-1: selecting invalid altsetting 1 [ 2179.486682][T26757] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2179.506364][T26757] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2179.525728][T26757] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2179.534825][T26757] usb 3-1: media controller created [ 2179.544245][T26755] cherry 0003:046A:0023.0077: bogus close delimiter [ 2179.558289][T26755] cherry 0003:046A:0023.0077: item 0 1 2 10 parsing failed [ 2179.567807][T26755] cherry 0003:046A:0023.0077: probe with driver cherry failed with error -22 [ 2179.621361][T26757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2179.746503][T26755] usb 2-1: USB disconnect, device number 127 [ 2180.526729][ T2729] 8021q: adding VLAN 0 to HW filter on device team0 [ 2180.573539][ T2729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2180.711700][T26757] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2180.746884][T26757] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2180.764828][T26757] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2180.953225][ T2740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7612'. [ 2180.985004][T26757] usb 3-1: USB disconnect, device number 4 [ 2181.629398][T26757] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2181.792362][T26757] usb 4-1: Using ep0 maxpacket: 8 [ 2181.810751][T26757] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2181.821309][T26757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.832202][ T2761] vlan1: entered promiscuous mode [ 2181.837308][T26757] usb 4-1: Product: syz [ 2181.844400][T26757] usb 4-1: Manufacturer: syz [ 2181.849656][ T2761] bond0: entered promiscuous mode [ 2181.854851][T26757] usb 4-1: SerialNumber: syz [ 2181.860178][ T2761] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2181.870874][T26757] usb 4-1: config 0 descriptor?? [ 2181.890074][T26757] gspca_main: se401-2.14.0 probing 047d:5003 [ 2182.523090][T26757] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input367 [ 2182.728359][T26757] usb 4-1: USB disconnect, device number 9 [ 2182.887429][ T2787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7629'. [ 2183.806826][ T2834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7649'. [ 2183.836225][ T2834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7649'. [ 2185.330572][ T2897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7670'. [ 2185.354847][ T2897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7670'. [ 2185.759729][T26757] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2185.931644][T26757] usb 1-1: Using ep0 maxpacket: 8 [ 2185.947554][T26757] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 2185.978232][T26757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.001796][T26757] usb 1-1: Product: syz [ 2186.004326][ T2935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7687'. [ 2186.006101][T26757] usb 1-1: Manufacturer: syz [ 2186.025555][T26757] usb 1-1: SerialNumber: syz [ 2186.041338][T26757] usb 1-1: config 0 descriptor?? [ 2186.072522][T26757] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 2186.102516][T26757] dvb-usb: bulk message failed: -22 (2/0) [ 2186.124003][T26757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2186.135481][T26757] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 2186.146022][T26757] usb 1-1: media controller created [ 2186.184020][T26757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2186.271962][ T2907] dvb-usb: bulk message failed: -22 (4/0) [ 2186.282040][ T2907] cxusb: i2c read failed [ 2186.287287][T26757] cxusb: set interface failed [ 2186.295248][T26757] dvb-usb: bulk message failed: -22 (1/0) [ 2186.324908][T26757] DVB: Unable to find symbol mt352_attach() [ 2186.331327][T26757] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 2186.389548][T26757] rc_core: IR keymap rc-dvico-portable not found [ 2186.396031][T26757] Registered IR keymap rc-empty [ 2186.402224][T26757] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2186.414521][T26757] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input368 [ 2186.427872][T26757] dvb-usb: schedule remote query interval to 100 msecs. [ 2186.435395][T26757] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 2186.451474][T26757] usb 1-1: USB disconnect, device number 11 [ 2186.541246][T26757] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 2187.065344][ T2968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7702'. [ 2189.107207][ T3017] netlink: 'syz.2.7723': attribute type 3 has an invalid length. [ 2189.119539][ T3017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7723'. [ 2190.367381][ T3050] syzkaller1: entered promiscuous mode [ 2190.384312][ T3050] syzkaller1: entered allmulticast mode [ 2191.113278][ T3074] syzkaller1: entered promiscuous mode [ 2191.136225][ T3074] syzkaller1: entered allmulticast mode [ 2191.419934][ T3088] vlan0: entered allmulticast mode [ 2192.931063][T26757] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2193.121846][T26757] usb 3-1: Using ep0 maxpacket: 32 [ 2193.151083][T26757] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2193.391412][T26757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.400637][T26757] usb 3-1: Product: syz [ 2193.419928][T26757] usb 3-1: Manufacturer: syz [ 2193.424567][T26757] usb 3-1: SerialNumber: syz [ 2193.463393][T26757] usb 3-1: config 0 descriptor?? [ 2193.677333][T26757] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 005 [ 2193.769570][T17376] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2193.879782][ T3108] i2c i2c-1: adapter quirk: no zero length (addr 0x0041, size 0, read) [ 2193.891075][T26757] usb 3-1: USB disconnect, device number 5 [ 2193.929506][T17376] usb 1-1: Using ep0 maxpacket: 16 [ 2193.936925][T17376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2193.959783][T17376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2193.973902][T17376] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2193.993497][T17376] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2194.009589][T17376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.031669][T17376] usb 1-1: config 0 descriptor?? [ 2194.082491][ T3145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7780'. [ 2194.542194][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.572726][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.606376][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.614734][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.629587][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.636992][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.657271][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.708221][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.793441][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2194.974057][T17376] microsoft 0003:045E:07DA.0078: unknown main item tag 0x0 [ 2195.053893][T17376] HID 045e:07da: Invalid code 65791 type 1 [ 2195.079515][T26757] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2195.135770][T17376] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0078/input/input369 [ 2195.144915][ T3176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2195.217838][T17376] microsoft 0003:045E:07DA.0078: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2195.241328][T17376] usb 1-1: USB disconnect, device number 12 [ 2195.291239][T26757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2195.305138][T26757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2195.341336][T26757] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 2195.362447][T26757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.386522][T26757] usb 3-1: config 0 descriptor?? [ 2195.395749][ T3178] fido_id[3178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2195.855287][T26757] logitech 0003:046D:C294.0079: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 2195.887042][T26757] logitech 0003:046D:C294.0079: no inputs found [ 2196.077944][T26757] usb 3-1: USB disconnect, device number 6 [ 2196.141107][ T3190] fido_id[3190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2196.764643][ T3211] input: syz1 as /devices/virtual/input/input370 [ 2196.816300][ T3211] input: failed to attach handler leds to device input370, error: -6 [ 2199.650424][T26753] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2199.809479][T26753] usb 2-1: Using ep0 maxpacket: 8 [ 2199.903857][T26753] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2199.959963][T26753] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2199.986903][T26753] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2200.007221][T26753] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2200.037765][T26753] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2200.058082][T26753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.298276][T26753] usb 2-1: GET_CAPABILITIES returned 0 [ 2200.304980][T26753] usbtmc 2-1:16.0: can't read capabilities [ 2200.649627][ T3252] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 2200.697431][T26757] usb 2-1: USB disconnect, device number 2 [ 2201.080520][ T3273] binder: 3272:3273 ioctl c0306201 0 returned -14 [ 2202.151307][ T3300] netlink: 51 bytes leftover after parsing attributes in process `syz.1.7840'. [ 2204.040107][ T3342] "syz.1.7858" (3342) uses obsolete ecb(arc4) skcipher [ 2204.374118][ T3345] netlink: 'syz.1.7859': attribute type 16 has an invalid length. [ 2204.411888][ T3345] netlink: 'syz.1.7859': attribute type 17 has an invalid length. [ 2204.532926][ T3345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2204.730698][T26753] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2204.889597][T26753] usb 1-1: Using ep0 maxpacket: 32 [ 2204.896468][T26753] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2204.911271][T26753] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2204.924946][T26753] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2204.943697][T26753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2204.963624][T26753] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2204.974400][T26753] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2204.990409][T26753] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2205.003350][T26753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.009426][T17376] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2205.046293][T26753] usb 1-1: config 0 descriptor?? [ 2205.230905][T17376] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 2205.240421][T17376] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 2205.255881][T17376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2205.277888][T26753] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2205.311881][T17376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2205.349996][T17376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2205.373426][T17376] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 2205.404479][T17376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.435867][T17376] usb 4-1: config 0 descriptor?? [ 2205.481473][ C0] usblp0: nonzero read bulk status received: -71 [ 2205.490546][T26753] usb 1-1: USB disconnect, device number 13 [ 2205.513724][T26753] usblp0: removed [ 2205.865888][T17376] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.007A/input/input371 [ 2205.948515][T17376] uclogic 0003:28BD:0909.007A: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 2206.125932][T17376] usb 4-1: USB disconnect, device number 10 [ 2206.221755][ T3380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7874'. [ 2206.361557][ T3378] fido_id[3378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2206.613292][ T3390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7879'. [ 2207.928249][ T3434] tipc: Enabled bearer , priority 0 [ 2208.617568][ T3449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7900'. [ 2210.023760][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2210.023779][ T30] audit: type=1326 audit(1760562121.561:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.060840][ T30] audit: type=1326 audit(1760562121.601:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.086205][ T30] audit: type=1326 audit(1760562121.601:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.132921][ T30] audit: type=1326 audit(1760562121.601:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.157921][ T30] audit: type=1326 audit(1760562121.601:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.182559][ T30] audit: type=1326 audit(1760562121.601:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.206707][ T30] audit: type=1326 audit(1760562121.601:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.438272][ T30] audit: type=1326 audit(1760562121.601:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.552640][ T30] audit: type=1326 audit(1760562121.601:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.593054][ T30] audit: type=1326 audit(1760562121.601:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3471 comm="syz.1.7909" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 2210.653459][ T3481] netlink: 'syz.2.7912': attribute type 4 has an invalid length. [ 2210.687792][ T3481] netlink: 'syz.2.7912': attribute type 4 has an invalid length. [ 2211.194959][ T3483] tipc: Resetting bearer [ 2212.203841][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7925'. [ 2213.010316][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7931'. [ 2213.764842][ T3551] bond0: (slave bridge0): Releasing backup interface [ 2214.123300][ T3558] netlink: 'syz.2.7941': attribute type 10 has an invalid length. [ 2214.300139][ T3551] : left promiscuous mode [ 2214.330279][ T3551] bridge0: port 1() entered disabled state [ 2214.713779][ T3412] Set syz1 is full, maxelem 65536 reached [ 2215.492229][ T3551] bridge_slave_1: left allmulticast mode [ 2215.507334][ T3551] bridge_slave_1: left promiscuous mode [ 2215.545831][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2215.566340][ T3551] bond0: (slave bond_slave_0): Releasing backup interface [ 2215.585412][ T3551] bond0: (slave bond_slave_1): Releasing backup interface [ 2215.602221][ T3551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2216.259914][T26753] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2216.462556][T26753] usb 2-1: Using ep0 maxpacket: 16 [ 2216.513354][T26753] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 2216.523841][T26753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.590100][T26753] usb 2-1: Product: syz [ 2216.603653][T26753] usb 2-1: Manufacturer: syz [ 2216.628474][T26753] usb 2-1: SerialNumber: syz [ 2216.656235][T26753] usb 2-1: config 0 descriptor?? [ 2216.683676][T26753] usb 2-1: bad CDC descriptors [ 2216.894158][T26753] usb 2-1: USB disconnect, device number 3 [ 2220.339569][T26753] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2220.491855][T26753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2220.510175][T26753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2220.534229][T26753] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2220.569719][T26753] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2220.590094][T26753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.612407][T26753] usb 1-1: config 0 descriptor?? [ 2220.750188][ T3563] Set syz1 is full, maxelem 65536 reached [ 2221.063925][T26753] plantronics 0003:047F:FFFF.007B: reserved main item tag 0xd [ 2221.154881][T26753] plantronics 0003:047F:FFFF.007B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2221.389491][T26757] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2221.551733][T26757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.562974][T26757] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2221.626535][T26757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.676677][T26757] usb 3-1: config 0 descriptor?? [ 2221.751366][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.757710][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.802311][T26757] pwc: Askey VC010 type 2 USB webcam detected. [ 2222.204187][T26757] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2222.211936][T26757] pwc: recv_control_msg error -32 req 02 val 2700 [ 2222.220490][T26757] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2222.239450][T26757] pwc: recv_control_msg error -32 req 04 val 1000 [ 2222.259311][T26757] pwc: recv_control_msg error -32 req 04 val 1300 [ 2222.282261][T26757] pwc: recv_control_msg error -32 req 04 val 1400 [ 2222.301001][T26757] pwc: recv_control_msg error -32 req 02 val 2000 [ 2222.520608][T26757] pwc: recv_control_msg error -71 req 04 val 1500 [ 2222.537799][T26757] pwc: recv_control_msg error -71 req 02 val 2500 [ 2222.558547][T26757] pwc: recv_control_msg error -71 req 02 val 2400 [ 2222.567529][T26757] pwc: recv_control_msg error -71 req 02 val 2600 [ 2222.576116][T26757] pwc: recv_control_msg error -71 req 02 val 2900 [ 2222.613989][T26757] pwc: recv_control_msg error -71 req 02 val 2800 [ 2222.628674][T26757] pwc: recv_control_msg error -71 req 04 val 1100 [ 2222.648426][T26757] pwc: recv_control_msg error -71 req 04 val 1200 [ 2222.673166][T26757] pwc: Registered as video103. [ 2222.696817][T26757] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input372 [ 2222.778525][T26757] usb 3-1: USB disconnect, device number 7 [ 2223.282261][T26753] usb 1-1: USB disconnect, device number 14 [ 2223.566931][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7985'. [ 2223.792841][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2223.792859][ T30] audit: type=1326 audit(1760562135.331:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.020712][ T30] audit: type=1326 audit(1760562135.331:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.072055][ T30] audit: type=1326 audit(1760562135.361:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.104716][ T30] audit: type=1326 audit(1760562135.361:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.128340][ T30] audit: type=1326 audit(1760562135.361:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.156274][ T3718] input: syz1 as /devices/virtual/input/input373 [ 2224.171486][ T30] audit: type=1326 audit(1760562135.361:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.198406][ T30] audit: type=1326 audit(1760562135.401:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.247606][ T3715] kvm: pic: non byte read [ 2224.270497][ T3715] kvm: pic: non byte read [ 2224.275140][ T3715] kvm: pic: non byte read [ 2224.284787][ T3715] kvm: pic: non byte read [ 2224.294847][ T30] audit: type=1326 audit(1760562135.401:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.321488][ T3715] kvm: pic: non byte read [ 2224.325922][ T3715] kvm: pic: non byte read [ 2224.351865][ T3715] kvm: pic: non byte read [ 2224.356473][ T3715] kvm: pic: non byte read [ 2224.363950][ T3715] kvm: pic: non byte read [ 2224.368512][ T3715] kvm: pic: non byte read [ 2224.417380][ T30] audit: type=1326 audit(1760562135.401:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2224.472759][ T30] audit: type=1326 audit(1760562135.401:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3707 comm="syz.0.7986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2227.722377][ T3769] [ 2227.724755][ T3769] ============================================ [ 2227.730905][ T3769] WARNING: possible recursive locking detected [ 2227.737076][ T3769] syzkaller #0 Not tainted [ 2227.741497][ T3769] -------------------------------------------- [ 2227.747641][ T3769] syz.4.8006/3769 is trying to acquire lock: [ 2227.753614][ T3769] ffff888057188d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 2227.764607][ T3769] [ 2227.764607][ T3769] but task is already holding lock: [ 2227.771972][ T3769] ffff888057188d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 2227.781811][ T3769] and the lock comparison function returns 0: [ 2227.787861][ T3769] [ 2227.787861][ T3769] other info that might help us debug this: [ 2227.795986][ T3769] Possible unsafe locking scenario: [ 2227.795986][ T3769] [ 2227.803417][ T3769] CPU0 [ 2227.806679][ T3769] ---- [ 2227.809941][ T3769] lock(&dev_instance_lock_key#20); [ 2227.815220][ T3769] lock(&dev_instance_lock_key#20); [ 2227.820496][ T3769] [ 2227.820496][ T3769] *** DEADLOCK *** [ 2227.820496][ T3769] [ 2227.828622][ T3769] May be due to missing lock nesting notation [ 2227.828622][ T3769] [ 2227.836935][ T3769] 2 locks held by syz.4.8006/3769: [ 2227.842139][ T3769] #0: ffffffff8f4dfc08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 2227.851098][ T3769] #1: ffff888057188d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 2227.861356][ T3769] [ 2227.861356][ T3769] stack backtrace: [ 2227.867229][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.4.8006 Not tainted syzkaller #0 PREEMPT(full) [ 2227.867246][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2227.867256][ T3769] Call Trace: [ 2227.867264][ T3769] [ 2227.867272][ T3769] dump_stack_lvl+0x189/0x250 [ 2227.867293][ T3769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2227.867308][ T3769] ? __pfx__printk+0x10/0x10 [ 2227.867323][ T3769] ? print_lock_name+0xde/0x100 [ 2227.867338][ T3769] print_deadlock_bug+0x28b/0x2a0 [ 2227.867360][ T3769] validate_chain+0x1a3f/0x2140 [ 2227.867388][ T3769] __lock_acquire+0xab9/0xd20 [ 2227.867407][ T3769] ? __netdev_update_features+0xcb1/0x1be0 [ 2227.867420][ T3769] lock_acquire+0x120/0x360 [ 2227.867436][ T3769] ? __netdev_update_features+0xcb1/0x1be0 [ 2227.867460][ T3769] __mutex_lock+0x187/0x1350 [ 2227.867475][ T3769] ? __netdev_update_features+0xcb1/0x1be0 [ 2227.867489][ T3769] ? stack_trace_save+0x9c/0xe0 [ 2227.867503][ T3769] ? __pfx_stack_trace_save+0x10/0x10 [ 2227.867518][ T3769] ? stack_depot_save_flags+0x40/0x860 [ 2227.867533][ T3769] ? __netdev_update_features+0xcb1/0x1be0 [ 2227.867547][ T3769] ? __pfx___mutex_lock+0x10/0x10 [ 2227.867562][ T3769] ? bond_fix_features+0x191/0x1d0 [ 2227.867583][ T3769] __netdev_update_features+0xcb1/0x1be0 [ 2227.867601][ T3769] ? __pfx___netdev_update_features+0x10/0x10 [ 2227.867615][ T3769] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2227.867634][ T3769] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2227.867656][ T3769] ? cfg80211_netdev_notifier_call+0x1e5/0x1440 [ 2227.867673][ T3769] ? __wake_up_common_lock+0x190/0x1f0 [ 2227.867688][ T3769] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 2227.867705][ T3769] ? consume_skb+0xce/0xf0 [ 2227.867723][ T3769] ? netlink_broadcast_filtered+0xf55/0x1000 [ 2227.867743][ T3769] netdev_change_features+0x72/0xd0 [ 2227.867756][ T3769] ? __pfx_netdev_change_features+0x10/0x10 [ 2227.867771][ T3769] ? netif_set_tso_max_size+0x10e/0x1d0 [ 2227.867792][ T3769] bond_compute_features+0x615/0x680 [ 2227.867815][ T3769] ? __pfx_bond_compute_features+0x10/0x10 [ 2227.867838][ T3769] bond_netdev_event+0x72e/0xe80 [ 2227.867857][ T3769] ? __pfx_bond_netdev_event+0x10/0x10 [ 2227.867875][ T3769] ? inetdev_event+0x464/0x15b0 [ 2227.867892][ T3769] ? igmp_netdev_event+0x7c/0x770 [ 2227.867910][ T3769] notifier_call_chain+0x1b6/0x3e0 [ 2227.867932][ T3769] netdev_features_change+0x85/0xc0 [ 2227.867948][ T3769] ? __pfx_netdev_features_change+0x10/0x10 [ 2227.867965][ T3769] ? security_capable+0x7e/0x2e0 [ 2227.867981][ T3769] dev_ethtool+0x1541/0x19c0 [ 2227.867998][ T3769] ? __pfx_dev_ethtool+0x10/0x10 [ 2227.868016][ T3769] ? dev_load+0x21/0x1f0 [ 2227.868033][ T3769] dev_ioctl+0x392/0x1150 [ 2227.868051][ T3769] compat_sock_ioctl+0xc3b/0xc80 [ 2227.868069][ T3769] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2227.868088][ T3769] ? __fget_files+0x3a0/0x420 [ 2227.868105][ T3769] ? __fget_files+0x2a/0x420 [ 2227.868123][ T3769] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2227.868145][ T3769] __ia32_compat_sys_ioctl+0x543/0x840 [ 2227.868161][ T3769] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2227.868177][ T3769] ? __se_sys_futex_time32+0x360/0x3e0 [ 2227.868197][ T3769] ? rcu_is_watching+0x15/0xb0 [ 2227.868216][ T3769] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2227.868231][ T3769] ? lockdep_hardirqs_on+0x9c/0x150 [ 2227.868245][ T3769] __do_fast_syscall_32+0xb6/0x2b0 [ 2227.868261][ T3769] ? lockdep_hardirqs_on+0x9c/0x150 [ 2227.868275][ T3769] do_fast_syscall_32+0x34/0x80 [ 2227.868289][ T3769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2227.868306][ T3769] RIP: 0023:0xf7f03539 [ 2227.868321][ T3769] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2227.868335][ T3769] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2227.868351][ T3769] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008946 [ 2227.868362][ T3769] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2227.868371][ T3769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2227.868380][ T3769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2227.868390][ T3769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2227.868404][ T3769] [ 2228.339883][T26753] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2228.491073][T26753] usb 4-1: Using ep0 maxpacket: 32 [ 2228.497677][T26753] usb 4-1: config 0 has no interfaces? [ 2228.505440][T26753] usb 4-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 2228.515132][T26753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.523933][T26753] usb 4-1: Product: syz [ 2228.528119][T26753] usb 4-1: Manufacturer: syz [ 2228.533155][T26753] usb 4-1: SerialNumber: syz [ 2228.540441][T26753] usb 4-1: config 0 descriptor?? [ 2229.267151][T26753] usb 4-1: USB disconnect, device number 11