last executing test programs: 19m34.934065097s ago: executing program 4 (id=647): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 19m30.752666048s ago: executing program 4 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 19m18.998951682s ago: executing program 4 (id=664): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 19m18.968892326s ago: executing program 4 (id=677): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 19m18.291813708s ago: executing program 4 (id=679): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x25, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 19m14.533330611s ago: executing program 4 (id=687): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 18m58.958378308s ago: executing program 32 (id=687): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 7m50.262686885s ago: executing program 3 (id=2677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) 7m50.039404731s ago: executing program 3 (id=2680): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x6}}}, 0x24}}, 0x0) 7m49.633277363s ago: executing program 3 (id=2685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m49.574698371s ago: executing program 3 (id=2686): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, 0x0, r1, 0x0, 0x46) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7m48.476660592s ago: executing program 3 (id=2688): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) 7m48.168265259s ago: executing program 3 (id=2689): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) 7m47.833120963s ago: executing program 33 (id=2689): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) 7.132852591s ago: executing program 5 (id=5179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0)="a750d2c528509c8fa1904611e7862e4eabe5fa8708efa91147da8ff1ed4366f5aeeba21c19e3e363aa674b8dd7cae3e47970"}, 0x20) shutdown(r6, 0x1) signalfd4(r2, &(0x7f0000000340)={[0x6]}, 0x8, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12020) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 6.692122363s ago: executing program 0 (id=5180): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x14, &(0x7f0000002400)={[{}, {0x6, 0x4e00, "4a9d6571c163"}, {}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x0, 0x10007, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r2, 0x734, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) 6.068871358s ago: executing program 5 (id=5184): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) io_uring_setup(0x6c27, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) close(r0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) 5.206221708s ago: executing program 6 (id=5192): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x80, 0x10, 0x0, {0x3, 0x0, 0x1000, 0x1, 0x5, 0x6, 0x80000000, 0xb, 0xe26, 0x5000, 0x5, 0x0, 0x0, 0x300, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) 5.083460112s ago: executing program 0 (id=5193): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) chdir(0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 4.700889086s ago: executing program 0 (id=5195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0)="a750d2c528509c8fa1904611e7862e4eabe5fa8708efa91147da8ff1ed4366f5aeeba21c19e3e363aa674b8dd7cae3e47970"}, 0x20) shutdown(r6, 0x1) signalfd4(r2, &(0x7f0000000340)={[0x6]}, 0x8, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12020) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 4.524284865s ago: executing program 5 (id=5198): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, 0x0) 4.492130156s ago: executing program 5 (id=5199): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x282, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() sendfile(r2, r0, 0x0, 0x40008) 4.180100074s ago: executing program 6 (id=5202): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) syz_io_uring_setup(0xbdc, 0x0, 0x0, &(0x7f00000001c0)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3, @ANYBLOB="7684f222bdac5555d8f51a8fb1fe230b889c89ce4fe5dd5a3a77b6514a454d127a5906203b8dcb063d12821a8e133f6d3e70d7d4c300ac1c7f81af3ccf8b841cc8e29bf0532c557b3bed6a3c6564b74b8b6505628a2e4fc69dbf90ba8acc545f3c6de0799e1dd28ce62b36b7aeade006a764cac0724515244a909ade98177a986d0b815a781c70b411d0138a74e6adeff49f6f5b8445145faa75279e2ef81b2d36cd54397117a596b6b3202896cc70fec826530d582aa98314e356828e02fe6e3eff47aad605806605a1855cb79790257d53a20d132f81"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.877999588s ago: executing program 6 (id=5203): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', 0x0}) socket$kcm(0x10, 0x3, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1f9, &(0x7f0000002280)={0x0, 0x11ab, 0x40, 0x1, 0xa2}) io_uring_setup(0x2ad3, &(0x7f0000002300)={0x0, 0xd4a6, 0x80, 0x0, 0x39f, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 3.599654578s ago: executing program 5 (id=5205): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000000) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) 3.273066517s ago: executing program 2 (id=5206): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) chdir(0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 2.816527989s ago: executing program 1 (id=5208): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000680)=""/233, 0xe9}, 0x10062) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004014}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.81216496s ago: executing program 2 (id=5209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004014}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.736638828s ago: executing program 0 (id=5210): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) 1.856197944s ago: executing program 2 (id=5211): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x50}}, 0x2004c850) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.851886862s ago: executing program 6 (id=5212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b80)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0xec6, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast}, "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"}}}, 0xed4) 1.8100135s ago: executing program 1 (id=5213): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000070601020000000000000000070000060500010007000000d1d64ea1f84efe8cb8f3c7981cee027ba0c00bb23f7fb6ceaba06b09baee1f5b45555c0de7ce75eb15733e274fe59c347c67e6d68bf26e7fdfb29b27956a4645f6c6f7cca2e85d47188a6a66d31467a6aafeadf95276f484a42fafae96bb2b4f3411da3a09fb54cacb08b682235b3a4d6a27c22606908e5da0dafe53b137411d00e38a7f2de92983490917e87b4b63acf8cf34b0fea10e5742f320563404e4047b18b16b70d675e0a06ff593bf5155793ae2df32c224776811bd67f4c43814be02007eea04ec7dd7d77c6b583c8ba9fd"], 0x1c}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080), 0x8) r3 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x10800, 0x90, 0x10}, 0x18) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire={0x40046305, 0x5}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)="aefdda9d240300005a90f505cf2d4111bae1249c834618fe550c1407962c2a772e11b44e00576641cb01aef56aedf25c37b300be8a86a66b367c31e395c6fd4beaf94cec457f6cbf01be0bee97645913d7f290f5c1decdd0972e5dfdbfd96e62a60755390afebe7423b4b5ed60ac1095b4bfb4409ecae7309b720297085e137498148845d26c0e0092836fc6f3fa61a2799ae14f5e177409af45881156cfeb9822", 0xa1}], 0x1) 1.74578678s ago: executing program 2 (id=5214): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x7) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write(r0, &(0x7f0000000100), 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000002500)="f2435f01000880000000004ebf540e86a05ee825c2cb6ca641778d55549c74cc123f3539a9e7199e5f52dba49f3e54cf5ae3e6232b5f5d6ccce71f23e244c0fe0447d81b0fb69ff12471737a1ce0878db422872e9a10193d159e2a", 0x5b, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.658987713s ago: executing program 1 (id=5215): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 1.613895671s ago: executing program 6 (id=5216): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000", @ANYBLOB="eeccf8f6d36773134e699d6103481385087268e81850a20ba44f17dbaee88b9da4b72626423b144ef1c8a341fadac302237c8dd8a4e7461399eef91dea7a568282e68e36dd9b7ae8d9abfe8a41db5778c284ea820b7e49d8d1dc0fb0eda6c1f50aa9fe5ebfb5cb023d61fa890d54f4704767d1b18ea41a09dc8acc2a1fbf0c7b31318307e19fdc7e87fa78e88c7c8bee5e710e2d19bbf3a3652aef5aefab0602d49f076c9b69258c586bc58fa6be6b0d6d43535ab0626d6c4d9070fa6aa60a9d25ba0f833f4545b7ed45c3b8fa", @ANYRES32, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x4000000) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 616.237107ms ago: executing program 1 (id=5217): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0) 572.206301ms ago: executing program 0 (id=5218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 568.191145ms ago: executing program 6 (id=5219): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket(0x25, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) chdir(0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 474.111689ms ago: executing program 0 (id=5220): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() sendfile(r2, r0, 0x0, 0x40008) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r3, 0x7000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 399.850821ms ago: executing program 5 (id=5221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004014}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 371.890691ms ago: executing program 1 (id=5222): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x9dece93493136c35, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x10, 0x7}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x41) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYRES32=r1], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 152.064709ms ago: executing program 2 (id=5223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 600.44µs ago: executing program 1 (id=5224): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000680)=""/233, 0xe9}, 0x10062) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004014}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 2 (id=5225): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x25, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) kernel console output (not intermixed with test programs): ][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1221.934529][ T5840] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1221.945994][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.000078][ T5840] usb 1-1: config 0 descriptor?? [ 1222.417334][ T5840] usbhid 1-1:0.0: can't add hid device: -71 [ 1222.437052][ T5840] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1222.473648][ T5840] usb 1-1: USB disconnect, device number 79 [ 1222.490990][T21533] kvm: kvm [21532]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x46 [ 1222.733624][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4134'. [ 1222.996041][T21545] team0 (unregistering): Port device team_slave_0 removed [ 1223.016790][T21545] team0 (unregistering): Port device team_slave_1 removed [ 1223.494320][ T30] audit: type=1400 audit(1752276447.174:1385): avc: denied { shutdown } for pid=21551 comm="syz.0.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1223.516272][T21554] vivid-000: disconnect [ 1223.531255][T21552] vivid-000: reconnect [ 1223.913727][T21563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4139'. [ 1224.244478][T21577] input: syz0 as /devices/virtual/input/input80 [ 1224.283961][T21578] bond0: entered promiscuous mode [ 1224.289288][T21578] bond_slave_0: entered promiscuous mode [ 1224.295277][T21578] bond_slave_1: entered promiscuous mode [ 1224.441266][T21582] binder: 21581:21582 ioctl c0306201 200000000240 returned -11 [ 1225.370793][T21593] bond4: (slave veth0_to_bond): Releasing active interface [ 1225.407908][T16461] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1225.422206][T21595] fuse: Unknown parameter 'user_id00000000000000000000' [ 1225.554922][T21601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4153'. [ 1225.565998][T16461] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.601236][T16461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1225.790991][T16461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1225.810428][T16461] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1225.826600][T16461] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1225.871326][T16461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.914395][T16461] usb 3-1: config 0 descriptor?? [ 1225.933913][T21611] syzkaller0: entered promiscuous mode [ 1225.956155][T21611] syzkaller0: entered allmulticast mode [ 1226.288832][T21621] input: syz0 as /devices/virtual/input/input81 [ 1226.342742][T16461] usbhid 3-1:0.0: can't add hid device: -71 [ 1226.361358][T16461] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1226.405710][T16461] usb 3-1: USB disconnect, device number 86 [ 1226.948157][ T57] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1226.948766][T21628] bond1: (slave veth0_to_bond): Releasing active interface [ 1227.127894][ T57] usb 1-1: Using ep0 maxpacket: 32 [ 1227.139196][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.194779][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.217693][ T57] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1227.236507][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.270601][ T57] usb 1-1: config 0 descriptor?? [ 1227.336543][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4164'. [ 1227.348026][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4164'. [ 1227.628163][ T5895] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1227.651740][T21646] syzkaller0: entered promiscuous mode [ 1227.657366][T21646] syzkaller0: entered allmulticast mode [ 1227.704361][ T57] savu 0003:1E7D:2D5A.0028: unknown main item tag 0x0 [ 1227.718879][ T57] savu 0003:1E7D:2D5A.0028: unknown main item tag 0x0 [ 1227.725706][ T57] savu 0003:1E7D:2D5A.0028: unknown main item tag 0x0 [ 1227.736652][ T57] savu 0003:1E7D:2D5A.0028: unknown main item tag 0x0 [ 1227.761124][ T57] savu 0003:1E7D:2D5A.0028: unknown main item tag 0x0 [ 1227.769014][ T57] savu 0003:1E7D:2D5A.0028: unbalanced collection at end of report description [ 1227.786026][ T57] savu 0003:1E7D:2D5A.0028: parse failed [ 1227.792957][ T57] savu 0003:1E7D:2D5A.0028: probe with driver savu failed with error -22 [ 1227.801449][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 1227.808063][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1227.822155][ T5895] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1227.836817][ T5895] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1227.871112][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1227.880852][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1227.890418][ T5895] usb 2-1: Product: syz [ 1227.894818][ T5895] usb 2-1: Manufacturer: syz [ 1227.899496][ T5895] usb 2-1: SerialNumber: syz [ 1227.932783][ T5895] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input82 [ 1228.220702][T16461] usb 1-1: USB disconnect, device number 80 [ 1228.230044][ T5959] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1228.413188][ T5895] usb 2-1: USB disconnect, device number 59 [ 1228.419156][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1228.449060][ T5895] appletouch 2-1:1.0: input: appletouch disconnected [ 1228.502165][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1228.545647][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1228.576659][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1228.618974][ T5959] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1228.650831][ T5959] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1228.661654][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.678416][ T5959] usb 6-1: config 0 descriptor?? [ 1229.081860][T21663] input: syz0 as /devices/virtual/input/input83 [ 1229.125478][ T5959] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1230.420350][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1230.451912][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1230.947968][T16459] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1231.057981][T16461] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1231.097884][T16459] usb 1-1: Using ep0 maxpacket: 32 [ 1231.105119][T16459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.222114][ T5959] usb 6-1: USB disconnect, device number 65 [ 1231.294781][T16461] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1231.313415][T16461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.326523][T16459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.339074][T16461] usb 2-1: config 0 descriptor?? [ 1231.344275][T16459] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1231.360313][T16461] usb 2-1: selecting invalid altsetting 1 [ 1231.375643][T16459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.397704][T16459] usb 1-1: config 0 descriptor?? [ 1231.403794][T16461] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1231.460714][T16659] udevd[16659]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.563496][T21694] xt_NFQUEUE: number of total queues is 0 [ 1231.857949][T16459] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1231.864977][T16459] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1231.874445][T16459] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1231.885263][T16459] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1231.894655][T16459] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1231.903775][T16459] savu 0003:1E7D:2D5A.002A: unbalanced collection at end of report description [ 1231.918442][T16459] savu 0003:1E7D:2D5A.002A: parse failed [ 1231.925191][T16459] savu 0003:1E7D:2D5A.002A: probe with driver savu failed with error -22 [ 1232.274537][ T5895] usb 1-1: USB disconnect, device number 81 [ 1232.283310][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4192'. [ 1232.311775][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4192'. [ 1233.058544][ T5895] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1233.219561][ T5895] usb 7-1: config 0 has an invalid interface number: 101 but max is 0 [ 1233.227751][ T5895] usb 7-1: config 0 has no interface number 0 [ 1233.236349][ T9837] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1233.247623][ T5895] usb 7-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1233.265213][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.274423][ T5895] usb 7-1: Product: syz [ 1233.280873][ T5895] usb 7-1: Manufacturer: syz [ 1233.292093][ T5895] usb 7-1: SerialNumber: syz [ 1233.302186][ T5895] usb 7-1: config 0 descriptor?? [ 1233.311037][ T5895] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1233.389779][ T9837] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1233.466611][T21743] vivid-000: disconnect [ 1233.477879][ T9837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1233.488904][ T9837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1233.509628][ T9837] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1233.522868][ T9837] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1233.532840][ T9837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.548058][ T9837] usb 3-1: config 0 descriptor?? [ 1233.734191][ T5895] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1233.741142][ T5895] gspca_pac7302 7-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 1233.758337][ T5895] usb 7-1: USB disconnect, device number 22 [ 1233.830420][ T57] usb 2-1: USB disconnect, device number 60 [ 1233.983293][ T9837] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1234.010867][T21733] vivid-000: reconnect [ 1234.103929][T21749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4204'. [ 1234.114275][T21750] ptrace attach of "./syz-executor exec"[17581] was attempted by "./syz-executor exec"[21750] [ 1234.379885][T21760] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1234.379885][T21760] The task syz.0.4206 (21760) triggered the difference, watch for misbehavior. [ 1234.557939][ T57] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1234.830413][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 1234.842262][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.855048][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1234.907094][ T57] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1234.954404][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.991005][ T57] usb 7-1: config 0 descriptor?? [ 1235.020702][ T57] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1235.625484][T21773] input: syz0 as /devices/virtual/input/input86 [ 1235.837138][ T30] audit: type=1400 audit(1752276459.514:1386): avc: denied { append } for pid=21777 comm="syz.5.4213" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1236.264245][ T5959] usb 3-1: USB disconnect, device number 87 [ 1236.288231][T16461] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1236.314445][T21787] fuse: Unknown parameter 'group_id00000000000000000000' [ 1236.502032][T16461] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.516998][T16461] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1236.530200][T16461] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1236.539578][T16461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.563425][T21792] vivid-000: disconnect [ 1236.571190][T21791] netlink: 'syz.0.4217': attribute type 6 has an invalid length. [ 1236.579042][T21791] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4217'. [ 1237.005957][T21784] vivid-000: reconnect [ 1237.219074][T21801] ptrace attach of "./syz-executor exec"[17094] was attempted by "./syz-executor exec"[21801] [ 1237.483921][T16461] usb 7-1: USB disconnect, device number 23 [ 1238.484626][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.491151][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.060597][ T9837] usb 6-1: USB disconnect, device number 66 [ 1240.363230][T21833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1240.505833][T21835] tipc: Enabled bearer , priority 0 [ 1240.542424][T21835] tipc: Resetting bearer [ 1240.626722][T21834] tipc: Disabling bearer [ 1240.808473][T21838] vivid-000: disconnect [ 1241.144024][T21830] vivid-000: reconnect [ 1241.148227][ T5895] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1241.334546][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1241.371407][ T5895] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1241.380256][ T5895] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1241.391691][ T5895] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1241.412197][ T5895] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1241.441675][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1241.497949][ T5895] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1241.536576][ T5895] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1241.565557][ T5895] usb 7-1: Product: syz [ 1241.573843][ T5895] usb 7-1: Manufacturer: syz [ 1241.581713][T21851] netlink: 'syz.5.4235': attribute type 6 has an invalid length. [ 1241.595331][ T5895] usb 7-1: SerialNumber: syz [ 1241.622474][T21851] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4235'. [ 1241.700733][ T5895] usb 7-1: config 0 descriptor?? [ 1241.776877][ T5895] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1241.897867][ T5895] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1241.972478][T21858] fuse: Unknown parameter '0x0000000000000004' [ 1242.130253][ T5959] usb 7-1: USB disconnect, device number 24 [ 1242.136213][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1242.248864][ T5959] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1243.077758][T21878] vivid-000: disconnect [ 1243.548248][T21875] vivid-000: reconnect [ 1244.322058][T21896] netlink: 'syz.2.4250': attribute type 6 has an invalid length. [ 1244.333423][T21896] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4250'. [ 1244.487916][T16461] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1244.535425][T21898] kvm: pic: non byte write [ 1244.545333][T21898] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 1244.565860][T21900] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4252'. [ 1244.811075][T16461] usb 2-1: Using ep0 maxpacket: 32 [ 1244.820987][T16461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1244.858856][T16461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1244.901079][T21905] fuse: Unknown parameter '0x0000000000000004' [ 1244.933726][T16461] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1244.954287][T16461] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1244.969212][T16461] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1244.978924][T16461] usb 2-1: Product: syz [ 1244.983397][T16461] usb 2-1: Manufacturer: syz [ 1244.988171][T16461] usb 2-1: SerialNumber: syz [ 1245.032689][T16461] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input88 [ 1245.230668][ T57] usb 2-1: USB disconnect, device number 61 [ 1245.236658][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1245.503251][ T57] appletouch 2-1:1.0: input: appletouch disconnected [ 1245.733224][T21921] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4259'. [ 1245.865769][T21929] fuse: Bad value for 'fd' [ 1247.395960][T21960] kvm: pic: non byte write [ 1248.283027][T21975] fuse: Bad value for 'fd' [ 1249.239971][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4280'. [ 1249.324029][T21989] bond0: entered promiscuous mode [ 1249.467903][T21989] bond_slave_0: entered promiscuous mode [ 1249.473827][T21989] bond_slave_1: entered promiscuous mode [ 1249.482154][T21989] batadv0: entered promiscuous mode [ 1249.488650][T21989] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1249.711296][T21997] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1250.068051][T11613] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1250.207172][T22013] netlink: 'syz.5.4288': attribute type 27 has an invalid length. [ 1250.227875][T22013] trusted_key: syz.5.4288 sent an empty control message without MSG_MORE. [ 1250.280720][T11613] usb 3-1: Using ep0 maxpacket: 8 [ 1250.295020][T11613] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1250.305174][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1250.333929][T11613] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1250.390139][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1250.406583][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1250.451722][T11613] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1250.460601][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1250.504966][T11613] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1250.532320][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1250.558936][T22019] netlink: 'syz.6.4291': attribute type 6 has an invalid length. [ 1250.570631][T22019] netlink: 199644 bytes leftover after parsing attributes in process `syz.6.4291'. [ 1250.582543][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1250.614360][T11613] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1250.625710][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1250.647967][T11613] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1250.693343][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1250.781309][T11613] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1250.936306][T11613] usb 3-1: string descriptor 0 read error: -22 [ 1250.944649][T11613] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1250.960905][T11613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.006015][T11613] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1251.251724][T22035] netlink: 'syz.5.4298': attribute type 1 has an invalid length. [ 1251.253361][ T5895] usb 3-1: USB disconnect, device number 88 [ 1251.378517][T22035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1251.446558][T22037] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1251.501011][T22000] adutux: No device or device unplugged -19 [ 1251.508709][ T57] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1251.552436][T22043] vlan2: entered allmulticast mode [ 1251.557670][T22043] veth1: entered allmulticast mode [ 1251.628540][T22043] veth1: entered promiscuous mode [ 1251.640995][T22043] veth1: left promiscuous mode [ 1251.653206][T22043] bond1: (slave vlan2): making interface the new active one [ 1251.661005][T22046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4301'. [ 1251.677387][T22043] veth1: entered promiscuous mode [ 1251.687867][ T57] usb 1-1: Using ep0 maxpacket: 32 [ 1251.695142][T22043] vlan2: entered promiscuous mode [ 1251.701341][ T57] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1251.712681][ T57] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1251.725064][T22043] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1251.733754][ T57] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1251.756007][ T57] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1251.795527][ T57] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1251.831812][ T57] usb 1-1: Product: syz [ 1251.844756][ T57] usb 1-1: Manufacturer: syz [ 1251.858259][ T57] usb 1-1: SerialNumber: syz [ 1251.888051][ T57] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input89 [ 1252.195507][T22056] kvm: pic: non byte write [ 1252.223939][T16461] usb 1-1: USB disconnect, device number 82 [ 1252.319713][T16461] appletouch 1-1:1.0: input: appletouch disconnected [ 1252.658071][T11613] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1252.889450][T11613] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 1252.897639][T11613] usb 6-1: config 0 has no interface number 0 [ 1252.936193][T11613] usb 6-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1252.967413][T11613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.028187][T11613] usb 6-1: Product: syz [ 1253.032391][T11613] usb 6-1: Manufacturer: syz [ 1253.036984][T11613] usb 6-1: SerialNumber: syz [ 1253.043875][T11613] usb 6-1: config 0 descriptor?? [ 1253.051449][T11613] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1253.219607][T22084] fuse: Unknown parameter 'fd0x0000000000000004' [ 1253.398210][ T9837] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1253.701907][ T9837] usb 1-1: config 0 has no interfaces? [ 1253.718565][ T9837] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1253.727842][ T9837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.742007][ T9837] usb 1-1: Product: syz [ 1253.746973][ T9837] usb 1-1: Manufacturer: syz [ 1253.755212][ T9837] usb 1-1: SerialNumber: syz [ 1253.762613][T22090] netlink: 'syz.2.4314': attribute type 6 has an invalid length. [ 1253.769354][ T9837] usb 1-1: config 0 descriptor?? [ 1253.770850][T11613] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1253.820542][T22090] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4314'. [ 1253.849355][T11613] gspca_pac7302 6-1:0.101: probe with driver gspca_pac7302 failed with error -110 [ 1255.432267][T11613] usb 6-1: USB disconnect, device number 67 [ 1255.782269][T22125] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1256.005839][T22140] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1256.186936][T22144] fuse: Bad value for 'fd' [ 1256.277995][T11613] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1256.372633][T22150] vivid-007: disconnect [ 1256.529428][T11613] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1256.541012][T11613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.559841][T11613] usb 2-1: config 0 descriptor?? [ 1256.866767][T11613] usb 2-1: selecting invalid altsetting 1 [ 1256.926673][T16461] usb 1-1: USB disconnect, device number 83 [ 1257.056155][T22141] xt_NFQUEUE: number of total queues is 0 [ 1257.144931][T11613] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1257.242249][T11613] usb 2-1: USB disconnect, device number 62 [ 1257.242751][T22149] vivid-007: reconnect [ 1257.391649][T22159] input: syz0 as /devices/virtual/input/input91 [ 1257.465717][ T30] audit: type=1400 audit(1752276481.144:1387): avc: denied { connect } for pid=22163 comm="syz.6.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1257.767530][T22172] xt_hashlimit: invalid rate [ 1257.818064][T11613] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1257.878490][ T30] audit: type=1400 audit(1752276481.554:1388): avc: denied { watch watch_reads } for pid=22177 comm="syz.1.4345" path="/proc/805" dev="proc" ino=88680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1257.997914][T11613] usb 7-1: Using ep0 maxpacket: 8 [ 1258.004650][T11613] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1258.016598][T11613] usb 7-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 1258.030924][T11613] usb 7-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 1258.045588][T11613] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1258.056687][T11613] usb 7-1: string descriptor 0 read error: -22 [ 1258.072911][T11613] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1258.083288][T11613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.110135][T11613] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1258.141412][T22183] vivid-000: disconnect [ 1258.153168][T11613] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1258.171215][T11613] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1258.182544][T11613] usb 7-1: media controller created [ 1258.198028][T16461] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1258.211017][T11613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.359572][T16461] usb 2-1: Using ep0 maxpacket: 32 [ 1258.387085][T16461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.398113][T16461] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1258.419443][T16461] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1258.437254][T16461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.462237][T16461] usb 2-1: config 0 descriptor?? [ 1258.483277][T16461] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1258.686998][T22175] vivid-000: reconnect [ 1259.268182][T11613] zl10353_read_register: readreg error (reg=127, ret==0) [ 1259.268798][T22168] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 1259.402550][T11613] usb 7-1: USB disconnect, device number 25 [ 1260.337889][ T5895] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1260.508165][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1260.518915][ T5895] usb 7-1: config 0 has an invalid interface number: 140 but max is 0 [ 1260.527152][ T5895] usb 7-1: config 0 has no interface number 0 [ 1260.560279][ T5895] usb 7-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db [ 1260.569698][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.589683][ T5895] usb 7-1: Product: syz [ 1260.597181][ T5895] usb 7-1: Manufacturer: syz [ 1260.609640][ T5895] usb 7-1: SerialNumber: syz [ 1260.624040][ T5895] usb 7-1: config 0 descriptor?? [ 1260.640800][ T5895] sierra 7-1:0.140: Sierra USB modem converter detected [ 1260.849077][ T5895] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1260.869296][ T5895] usb 7-1: USB disconnect, device number 26 [ 1260.891676][ T5895] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1260.906863][ T5895] sierra 7-1:0.140: device disconnected [ 1260.968300][ T57] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1261.150433][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 1261.157537][ T57] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1261.168342][ T57] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1261.192398][ T57] usb 3-1: string descriptor 0 read error: -22 [ 1261.199166][ T57] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1261.211468][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.231330][ T57] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1261.242172][ T57] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1261.259312][ T57] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1261.266478][ T57] usb 3-1: media controller created [ 1261.286627][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1261.312596][T11613] usb 2-1: USB disconnect, device number 63 [ 1261.614034][T22239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.721452][T22239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.870423][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1262.398123][ T57] zl10353_read_register: readreg error (reg=127, ret==0) [ 1262.398389][T22220] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1262.453507][T22257] syzkaller1: entered promiscuous mode [ 1262.460245][T22257] syzkaller1: entered allmulticast mode [ 1263.308982][T22272] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4376'. [ 1263.690581][T12799] vlan2: left promiscuous mode [ 1263.927739][T22283] vivid-000: disconnect [ 1264.372280][T22291] netlink: 'syz.1.4379': attribute type 6 has an invalid length. [ 1264.380262][T22291] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4379'. [ 1264.415878][T22277] vivid-000: reconnect [ 1264.859370][T22300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4382'. [ 1265.501422][T22319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1267.737882][ T5895] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1267.799637][T22381] fuse: Bad value for 'group_id' [ 1267.814398][T22381] fuse: Bad value for 'group_id' [ 1267.910308][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1267.924256][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.947634][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1267.965986][ T5895] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1267.975574][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.989379][ T5895] usb 7-1: config 0 descriptor?? [ 1268.000752][ T5895] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1268.927903][ T5895] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1268.974694][T22412] netlink: 'syz.5.4419': attribute type 6 has an invalid length. [ 1268.990224][T22413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.999005][T22412] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4419'. [ 1269.009141][T22413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.149253][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 1269.157388][ T5895] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1269.165902][ T5895] usb 1-1: config 0 has no interface number 0 [ 1269.176135][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1269.213304][T22421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1269.222443][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1269.240428][T22421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1269.249537][ T5895] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1269.249569][ T5895] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1269.277452][T22421] dummy0: entered promiscuous mode [ 1269.345475][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1269.398476][T22421] dummy0: left promiscuous mode [ 1269.524457][ T5895] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1269.619964][ T5895] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1269.655175][ T5895] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1269.681859][ T5895] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1269.736012][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1269.771871][ T5895] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1269.791167][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.799546][ T5895] usb 1-1: Product: syz [ 1269.803849][ T5895] usb 1-1: Manufacturer: syz [ 1269.907231][ T5895] usb 1-1: SerialNumber: syz [ 1270.047654][ T5895] usb 1-1: config 0 descriptor?? [ 1270.093054][T22404] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1270.100765][T22404] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1270.120773][ T5895] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1270.146237][ T5895] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1270.159919][ T5895] scsi host1: microtekX6 [ 1270.578891][T16461] usb 7-1: USB disconnect, device number 27 [ 1270.609659][T22451] netlink: 'syz.5.4433': attribute type 6 has an invalid length. [ 1270.639062][T22451] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4433'. [ 1270.883387][T22463] tipc: Enabled bearer , priority 0 [ 1270.891051][T22463] syzkaller0: entered promiscuous mode [ 1270.896501][T22463] syzkaller0: entered allmulticast mode [ 1270.908568][T22463] tipc: Resetting bearer [ 1271.000525][T22462] tipc: Resetting bearer [ 1271.042398][T22462] tipc: Disabling bearer [ 1271.106147][ T5895] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1271.176988][ T9837] usb 1-1: USB disconnect, device number 84 [ 1271.336045][T22476] input: syz0 as /devices/virtual/input/input95 [ 1271.381507][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 1271.502453][ T5895] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1271.511598][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1271.519708][ T5895] usb 7-1: Product: syz [ 1271.524660][ T5895] usb 7-1: Manufacturer: syz [ 1271.623346][T22485] fuse: Bad value for 'fd' [ 1271.632272][ T5895] usb 7-1: SerialNumber: syz [ 1271.649877][ T5895] usb 7-1: config 0 descriptor?? [ 1271.748230][T16461] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1272.031477][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1272.040671][T22460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1272.049638][T16461] usb 2-1: Using ep0 maxpacket: 32 [ 1272.050922][T16461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.065299][T16461] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1272.085448][T16461] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1272.097745][T16461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.143697][T16461] usb 2-1: config 0 descriptor?? [ 1272.191122][T16461] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1273.007568][T22510] tipc: Enabled bearer , priority 0 [ 1273.026607][T22510] syzkaller0: entered promiscuous mode [ 1273.035161][T22510] syzkaller0: entered allmulticast mode [ 1273.047179][T22510] tipc: Resetting bearer [ 1273.054455][T22509] tipc: Resetting bearer [ 1273.077640][T22509] tipc: Disabling bearer [ 1273.984767][T16461] usb 7-1: USB disconnect, device number 28 [ 1274.496535][T11613] usb 2-1: USB disconnect, device number 64 [ 1274.592423][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1274.648206][T16461] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1274.742159][T22541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1274.818550][T16461] usb 7-1: Using ep0 maxpacket: 32 [ 1274.837413][T16461] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.854697][ T30] audit: type=1400 audit(1752276498.484:1389): avc: denied { read } for pid=22540 comm="syz.1.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1274.916822][T16461] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1274.925983][T16461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.944485][T16461] usb 7-1: Product: syz [ 1274.964647][T16461] usb 7-1: Manufacturer: syz [ 1274.984848][T16461] usb 7-1: SerialNumber: syz [ 1275.096308][T16461] usb 7-1: config 0 descriptor?? [ 1275.119936][T16461] usb 7-1: bad CDC descriptors [ 1275.124974][T16461] usb 7-1: unsupported MDLM descriptors [ 1275.265650][T22552] tipc: Enabled bearer , priority 0 [ 1275.272867][T22552] syzkaller0: entered promiscuous mode [ 1275.278353][T22552] syzkaller0: entered allmulticast mode [ 1275.287388][T22552] tipc: Resetting bearer [ 1275.295284][T22550] tipc: Resetting bearer [ 1275.314079][T22550] tipc: Disabling bearer [ 1275.688952][T22565] TCP: TCP_TX_DELAY enabled [ 1276.096418][T22566] vivid-000: disconnect [ 1276.470763][T22561] vivid-000: reconnect [ 1276.872151][T22579] netlink: 'syz.5.4478': attribute type 1 has an invalid length. [ 1276.898500][T16461] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1276.918670][T22579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1276.954503][T22581] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1277.077548][T11613] usb 7-1: USB disconnect, device number 29 [ 1277.119256][T16461] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1277.153582][T16461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.181791][T16461] usb 1-1: config 0 descriptor?? [ 1277.191843][T16461] usb 1-1: selecting invalid altsetting 1 [ 1277.235978][T16461] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1278.815365][T22615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.824659][T22615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.879121][ T5895] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1278.966030][T22617] vivid-000: disconnect [ 1279.067957][ T5895] usb 7-1: Using ep0 maxpacket: 8 [ 1279.077175][ T5895] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.088010][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.104981][ T5895] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.121599][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.132863][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.154783][ T5895] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.165870][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.179222][ T5895] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.196094][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.208560][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.226618][ T5895] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.238462][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.257135][ T5895] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.285067][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.297284][ T5895] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.312892][ T5895] usb 7-1: string descriptor 0 read error: -22 [ 1279.322593][ T5895] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1279.333130][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.356102][ T5895] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1279.483638][T22607] vivid-000: reconnect [ 1279.547963][T22623] netlink: 'syz.2.4491': attribute type 1 has an invalid length. [ 1279.562201][T11613] usb 7-1: USB disconnect, device number 30 [ 1279.576945][T22623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1279.664129][T16461] usb 1-1: USB disconnect, device number 85 [ 1279.729790][ T30] audit: type=1400 audit(1752276503.414:1390): avc: denied { connect } for pid=22626 comm="syz.1.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1279.752224][T22625] vlan2: entered allmulticast mode [ 1279.771927][T22625] veth1: entered allmulticast mode [ 1280.042443][T22646] netlink: 'syz.1.4500': attribute type 6 has an invalid length. [ 1280.052383][T22646] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4500'. [ 1280.380192][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1280.997240][T22664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4506'. [ 1281.340188][T22666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1281.416304][T22677] fuse: Unknown parameter 'grou00000000000000000000' [ 1281.475489][T22670] bond5: (slave veth9): Enslaving as an active interface with an up link [ 1281.499327][T22674] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1281.529536][T22672] kvm: kvm [22671]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 1281.542989][T22672] kvm: kvm [22671]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000046 [ 1281.566334][T22672] kvm: kvm [22671]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x84 [ 1281.582110][T22672] kvm: kvm [22671]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 1282.079032][T16461] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1282.243813][T16461] usb 1-1: Using ep0 maxpacket: 32 [ 1282.350792][T16461] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1282.364882][T16461] usb 1-1: config 0 has no interface number 0 [ 1282.508458][T16461] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1282.552997][T16461] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1282.575210][T16461] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1282.587048][T16461] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1282.599827][T16461] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1282.818176][T16461] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1282.856671][T16461] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1282.877009][T16461] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1283.020062][T16461] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1283.039269][T16461] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.096005][T16461] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1283.105280][T16461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.117369][T16461] usb 1-1: Product: syz [ 1283.124887][T16461] usb 1-1: Manufacturer: syz [ 1283.132292][T16461] usb 1-1: SerialNumber: syz [ 1283.149901][T16461] usb 1-1: config 0 descriptor?? [ 1283.161727][T22691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1283.174180][T22691] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1283.186208][T16461] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1283.194870][ T5959] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1283.210874][T16461] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1283.231904][T16461] scsi host1: microtekX6 [ 1283.348069][ T5959] usb 6-1: device descriptor read/64, error -71 [ 1283.457221][T22715] fuse: Unknown parameter 'grou00000000000000000000' [ 1283.598058][ T5959] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1283.738296][ T5959] usb 6-1: device descriptor read/64, error -71 [ 1283.851835][ T5959] usb usb6-port1: attempt power cycle [ 1284.042611][ T9837] usb 1-1: USB disconnect, device number 86 [ 1284.208781][ T5959] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1284.241313][ T5959] usb 6-1: device descriptor read/8, error -71 [ 1284.488092][ T5959] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1284.511613][ T5959] usb 6-1: device descriptor read/8, error -71 [ 1284.649170][ T5959] usb usb6-port1: unable to enumerate USB device [ 1285.104863][T22752] fuse: Unknown parameter 'grou00000000000000000000' [ 1285.425033][ T30] audit: type=1400 audit(1752276509.094:1391): avc: denied { mounton } for pid=22753 comm="syz.2.4535" path="/syzcgroup/unified/syz2/cgroup.procs" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1286.107476][ T30] audit: type=1400 audit(1752276509.784:1392): avc: denied { read } for pid=22759 comm="syz.6.4536" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1286.143768][T22764] netlink: 'syz.1.4538': attribute type 6 has an invalid length. [ 1286.162957][T22764] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1286.182329][ T30] audit: type=1400 audit(1752276509.784:1393): avc: denied { open } for pid=22759 comm="syz.6.4536" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1286.289265][ T30] audit: type=1400 audit(1752276509.844:1394): avc: denied { ioctl } for pid=22759 comm="syz.6.4536" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1286.632093][T13432] Bluetooth: hci3: command 0x0406 tx timeout [ 1287.151009][T22789] tipc: Started in network mode [ 1287.166178][T22789] tipc: Node identity 722e657a01bc, cluster identity 4711 [ 1287.263921][T22786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.273585][T22786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.283785][T22786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1287.307727][T22786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1287.347557][T22789] tipc: Enabled bearer , priority 0 [ 1287.404184][T22792] syzkaller0: entered promiscuous mode [ 1287.426362][T22792] syzkaller0: entered allmulticast mode [ 1287.584151][T22789] tipc: Resetting bearer [ 1287.592484][T22788] tipc: Resetting bearer [ 1287.615187][T22788] tipc: Disabling bearer [ 1288.154743][ T5959] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1288.298108][ T5959] usb 7-1: device descriptor read/64, error -71 [ 1288.597890][ T5959] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1288.837900][ T5959] usb 7-1: device descriptor read/64, error -71 [ 1288.948303][ T5959] usb usb7-port1: attempt power cycle [ 1289.101918][T22810] netlink: 'syz.5.4550': attribute type 6 has an invalid length. [ 1289.110266][T22810] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4550'. [ 1289.287999][ T5959] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1289.308327][ T5959] usb 7-1: device descriptor read/8, error -71 [ 1289.438106][ T5895] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1289.559517][ T5959] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1289.590478][ T5959] usb 7-1: device descriptor read/8, error -71 [ 1289.597973][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 1289.604473][ T5895] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 1289.612775][ T5895] usb 1-1: config 0 has no interface number 0 [ 1289.699356][ T5959] usb usb7-port1: unable to enumerate USB device [ 1289.709406][ T5895] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1289.729621][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.744402][ T5895] usb 1-1: Product: syz [ 1289.753929][ T5895] usb 1-1: Manufacturer: syz [ 1289.766249][ T5895] usb 1-1: SerialNumber: syz [ 1289.781095][ T5895] usb 1-1: config 0 descriptor?? [ 1289.806891][ T5895] net1080 1-1:0.183: probe with driver net1080 failed with error -22 [ 1290.128125][T22830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1291.015449][T22846] netlink: 'syz.6.4562': attribute type 6 has an invalid length. [ 1291.027443][T22846] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4562'. [ 1291.043123][T22849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1291.052958][T22842] netlink: 'syz.0.4552': attribute type 10 has an invalid length. [ 1291.066599][T22842] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4552'. [ 1291.873462][T22870] vivid-000: disconnect [ 1292.244272][T22857] vivid-000: reconnect [ 1292.826207][T16461] usb 1-1: USB disconnect, device number 87 [ 1293.047992][ T5895] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1293.208025][ T5895] usb 6-1: device descriptor read/64, error -71 [ 1293.258118][T16461] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1293.527867][ T5895] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1293.548018][T16461] usb 2-1: Using ep0 maxpacket: 8 [ 1293.555598][T16461] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.567259][T16461] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1293.580839][T16461] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1293.591474][T16461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.599848][T16461] usb 2-1: Product: syz [ 1293.604952][T16461] usb 2-1: Manufacturer: syz [ 1293.611706][T16461] usb 2-1: SerialNumber: syz [ 1293.667863][ T5895] usb 6-1: device descriptor read/64, error -71 [ 1293.778702][ T5895] usb usb6-port1: attempt power cycle [ 1293.834687][T16461] cdc_ncm 2-1:1.0: bind() failure [ 1293.842547][T16461] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1293.851030][T16461] cdc_ncm 2-1:1.1: bind() failure [ 1294.011503][T16461] usb 2-1: USB disconnect, device number 65 [ 1294.030262][T22897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4576'. [ 1294.211906][ T5895] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1294.258456][ T5895] usb 6-1: device descriptor read/8, error -71 [ 1294.311439][ T5959] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1294.360444][T22905] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 1294.386397][T22905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1294.477880][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 1294.489286][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.500489][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.510492][ T5959] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1294.519883][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.530011][ T5895] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1294.539148][ T5959] usb 1-1: config 0 descriptor?? [ 1294.568462][ T5895] usb 6-1: device descriptor read/8, error -71 [ 1294.758263][ T5895] usb usb6-port1: unable to enumerate USB device [ 1295.360729][ T5959] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1295.553091][ T5895] usb 1-1: USB disconnect, device number 88 [ 1295.573490][T22917] fido_id[22917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1296.408914][ T5895] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1296.577958][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 1296.691249][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.717956][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1296.775009][ T5895] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1296.784417][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.795231][ T5895] usb 1-1: config 0 descriptor?? [ 1296.806576][ T5895] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1297.359242][T16461] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1297.425132][T22951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.434589][T22951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.624250][T16461] usb 7-1: Using ep0 maxpacket: 8 [ 1297.644793][T16461] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.677729][T16461] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1297.694387][T16461] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1297.704171][T16461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.712517][T16461] usb 7-1: Product: syz [ 1297.728736][T16461] usb 7-1: Manufacturer: syz [ 1297.738563][T16461] usb 7-1: SerialNumber: syz [ 1297.867850][ T5895] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1297.978733][T16461] cdc_ncm 7-1:1.0: bind() failure [ 1297.993071][T16461] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1298.002724][T16461] cdc_ncm 7-1:1.1: bind() failure [ 1298.010336][ T5895] usb 2-1: device descriptor read/64, error -71 [ 1298.022463][T16461] usb 7-1: USB disconnect, device number 35 [ 1298.257875][ T5895] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1298.388033][ T5895] usb 2-1: device descriptor read/64, error -71 [ 1298.503121][ T5895] usb usb2-port1: attempt power cycle [ 1298.663633][T22964] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4596'. [ 1298.857962][ T5895] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1298.878540][ T5895] usb 2-1: device descriptor read/8, error -71 [ 1298.912235][T22975] tipc: Enabled bearer , priority 0 [ 1298.921077][T22975] syzkaller0: entered promiscuous mode [ 1298.926635][T22975] syzkaller0: entered allmulticast mode [ 1298.946803][T22975] tipc: Resetting bearer [ 1298.956326][T22974] tipc: Resetting bearer [ 1298.976157][T22974] tipc: Disabling bearer [ 1299.137914][ T5895] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1299.159388][ T5895] usb 2-1: device descriptor read/8, error -71 [ 1299.296578][ T5895] usb usb2-port1: unable to enumerate USB device [ 1299.366569][ T5888] usb 1-1: USB disconnect, device number 89 [ 1299.588640][ T5895] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1299.787873][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1299.813467][ T5895] usb 7-1: config 0 has an invalid interface number: 225 but max is 0 [ 1299.821765][ T5895] usb 7-1: config 0 has no interface number 0 [ 1299.832965][ T5895] usb 7-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1299.842047][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.850770][ T5895] usb 7-1: Product: syz [ 1299.855489][ T5895] usb 7-1: Manufacturer: syz [ 1299.860515][ T5895] usb 7-1: SerialNumber: syz [ 1299.939682][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.945968][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.989136][ T5895] usb 7-1: config 0 descriptor?? [ 1301.643696][T23017] vivid-000: disconnect [ 1302.007328][T23020] fuse: Unknown parameter 'use00000000000000000000' [ 1302.108008][ T5895] mos7840 7-1:0.225: required endpoints missing [ 1302.201170][T23013] vivid-000: reconnect [ 1302.334887][ T5895] usb 7-1: USB disconnect, device number 36 [ 1302.491972][T23031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1303.277983][T16461] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1303.441047][T16461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.451407][T16461] usb 2-1: config 0 has no interfaces? [ 1303.467018][T16461] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1303.477003][T16461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.485173][T16461] usb 2-1: Product: syz [ 1303.489524][T16461] usb 2-1: Manufacturer: syz [ 1303.494096][T16461] usb 2-1: SerialNumber: syz [ 1303.500406][T16461] usb 2-1: config 0 descriptor?? [ 1303.527897][ T5959] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1303.682297][T23057] ptrace attach of "./syz-executor exec"[16085] was attempted by "./syz-executor exec"[23057] [ 1303.794632][ T30] audit: type=1326 audit(1752276527.384:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1303.825017][ T30] audit: type=1326 audit(1752276527.384:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1303.850742][ T30] audit: type=1326 audit(1752276527.384:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1303.969927][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.049745][ T5959] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1304.059196][ T5959] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1304.071442][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.081425][ T30] audit: type=1326 audit(1752276527.384:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1304.086333][ T5959] usb 1-1: config 0 descriptor?? [ 1304.207765][ T30] audit: type=1326 audit(1752276527.384:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1304.321903][ T30] audit: type=1326 audit(1752276527.384:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1304.363940][ T5959] usb 1-1: string descriptor 0 read error: -71 [ 1304.415447][ T5959] usb 1-1: USB disconnect, device number 90 [ 1304.473327][ T30] audit: type=1326 audit(1752276527.384:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1304.554389][ T30] audit: type=1326 audit(1752276527.384:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1304.620000][ T30] audit: type=1326 audit(1752276527.384:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1304.644420][ T30] audit: type=1326 audit(1752276527.384:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23052 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad778e929 code=0x7ffc0000 [ 1305.281677][T23078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.298431][T23078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.417422][T23079] program syz.2.4629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1305.429299][T23079] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1305.722658][ T5888] usb 2-1: USB disconnect, device number 70 [ 1306.328060][ T5959] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1306.878419][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 1306.923816][ T5959] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1306.933413][ T5959] usb 6-1: config 0 has no interface number 0 [ 1306.939699][ T5959] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1306.951132][ T5959] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1306.970471][ T5959] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1306.990559][T23091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.074548][ T5959] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1307.100476][ T5959] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1307.134200][ T5959] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1307.148475][ T5959] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1307.182692][ T5959] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1307.228159][T16461] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1307.248939][ T5959] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1307.282859][ T5959] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.326365][ T5959] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1307.348541][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.356626][ T5959] usb 6-1: Product: syz [ 1307.363218][ T5959] usb 6-1: Manufacturer: syz [ 1307.368313][ T5959] usb 6-1: SerialNumber: syz [ 1307.374375][ T5959] usb 6-1: config 0 descriptor?? [ 1307.381019][T23083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1307.388732][T23083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1307.396994][ T5959] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1307.409139][T16461] usb 2-1: Using ep0 maxpacket: 32 [ 1307.515226][T16461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.534358][ T5959] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1307.546985][T16461] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1307.565079][T16461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.645696][ T5959] scsi host1: microtekX6 [ 1307.650457][T16461] usb 2-1: Product: syz [ 1307.663923][T16461] usb 2-1: Manufacturer: syz [ 1307.685270][T16461] usb 2-1: SerialNumber: syz [ 1307.708602][T16461] usb 2-1: config 0 descriptor?? [ 1307.749128][T16461] usb 2-1: bad CDC descriptors [ 1307.767319][T16461] usb 2-1: unsupported MDLM descriptors [ 1307.849799][T23107] xt_NFQUEUE: number of total queues is 0 [ 1308.328584][ T5895] usb 6-1: USB disconnect, device number 76 [ 1308.587883][ T5888] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1308.603834][T23119] input: syz0 as /devices/virtual/input/input100 [ 1308.778093][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 1308.824216][ T5888] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1308.848198][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.856428][ T5888] usb 1-1: Product: syz [ 1308.950317][ T5888] usb 1-1: Manufacturer: syz [ 1308.956943][ T5888] usb 1-1: SerialNumber: syz [ 1308.985518][ T5888] usb 1-1: config 0 descriptor?? [ 1309.002468][ T5888] gspca_main: se401-2.14.0 probing 047d:5003 [ 1309.403475][ T5888] gspca_se401: Bayer format not supported! [ 1309.479580][T23127] netlink: 'syz.5.4643': attribute type 1 has an invalid length. [ 1309.608937][ T5888] usb 1-1: USB disconnect, device number 91 [ 1309.818159][T16461] usb 2-1: USB disconnect, device number 71 [ 1309.899884][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1309.899900][ T30] audit: type=1400 audit(1752276533.584:1412): avc: denied { read } for pid=23139 comm="syz.1.4648" path="socket:[93164]" dev="sockfs" ino=93164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1309.934577][T23141] loop6: detected capacity change from 0 to 524287999 [ 1310.036589][T16659] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1310.274273][T23145] fuse: Bad value for 'fd' [ 1310.824821][T23156] input: syz0 as /devices/virtual/input/input101 [ 1310.881191][T23154] netlink: 'syz.5.4652': attribute type 6 has an invalid length. [ 1310.920550][T23154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4652'. [ 1311.013640][T23160] netlink: 'syz.5.4655': attribute type 7 has an invalid length. [ 1311.023330][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4655'. [ 1311.067896][T23161] netlink: 'syz.5.4655': attribute type 10 has an invalid length. [ 1311.083265][T23161] syz_tun: entered promiscuous mode [ 1311.099911][T23161] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1311.137922][ T5888] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1311.268962][ T5888] usb 7-1: device descriptor read/64, error -71 [ 1311.797877][ T5888] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1311.847774][T23181] fuse: Bad value for 'fd' [ 1311.937889][ T5888] usb 7-1: device descriptor read/64, error -71 [ 1312.058163][ T5888] usb usb7-port1: attempt power cycle [ 1312.072138][T23177] fuse: Invalid rootmode [ 1312.160012][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4664'. [ 1312.180827][T23191] vlan0: entered allmulticast mode [ 1312.185996][T23191] macvtap0: entered allmulticast mode [ 1312.191800][T23191] veth0_macvtap: entered allmulticast mode [ 1312.281910][T23193] netlink: 'syz.2.4665': attribute type 6 has an invalid length. [ 1312.298016][T23193] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4665'. [ 1312.365677][T23195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.404231][T23195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.409637][ T5888] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1312.439658][ T5888] usb 7-1: device descriptor read/8, error -71 [ 1312.688277][ T5888] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1312.718692][ T5888] usb 7-1: device descriptor read/8, error -71 [ 1312.828745][ T5888] usb usb7-port1: unable to enumerate USB device [ 1313.518599][T16461] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1313.554916][ T30] audit: type=1400 audit(1752276537.234:1413): avc: denied { write } for pid=23200 comm="syz.2.4668" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1313.690388][ T30] audit: type=1400 audit(1752276537.314:1414): avc: denied { read } for pid=23200 comm="syz.2.4668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1313.758048][T16461] usb 2-1: Using ep0 maxpacket: 16 [ 1313.776191][T16461] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1313.803298][T16461] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1313.818933][T16461] usb 2-1: Product: syz [ 1313.823198][T16461] usb 2-1: Manufacturer: syz [ 1313.828069][T16461] usb 2-1: SerialNumber: syz [ 1313.859288][T16461] usb 2-1: config 0 descriptor?? [ 1313.979767][T23213] input: syz0 as /devices/virtual/input/input102 [ 1314.377340][T23198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4667'. [ 1314.408405][T23198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4667'. [ 1314.587380][T23227] ptrace attach of "./syz-executor exec"[17094] was attempted by "./syz-executor exec"[23227] [ 1315.378801][ T5840] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1315.539967][ T5840] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1315.552600][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1315.610137][T23241] kvm: pic: non byte write [ 1315.611624][ T5840] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1315.625062][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.646633][ T5840] usb 6-1: config 0 descriptor?? [ 1315.663530][ T5840] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1315.830744][T16461] usb 2-1: USB disconnect, device number 72 [ 1315.839492][ T5888] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1316.008462][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1316.102097][T23257] fuse: Bad value for 'fd' [ 1316.247903][ T5888] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1316.387896][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1316.508282][ T5888] usb usb1-port1: attempt power cycle [ 1316.868071][ T5888] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1316.888379][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1317.127920][ T5888] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1317.157591][T23283] ptrace attach of "./syz-executor exec"[17094] was attempted by "./syz-executor exec"[23283] [ 1317.203820][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1317.318184][ T5888] usb usb1-port1: unable to enumerate USB device [ 1317.630348][T23285] kvm: kvm [23284]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 1317.651782][T23285] kvm: kvm [23284]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1317.665171][T23285] kvm: kvm [23284]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 1317.681126][T23285] kvm: kvm [23284]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 1317.696484][T23285] kvm: kvm [23284]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 1317.707896][T23285] kvm: kvm [23284]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1318.159286][ T5888] usb 6-1: USB disconnect, device number 77 [ 1318.656297][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4699'. [ 1318.676946][T23301] vlan3: entered allmulticast mode [ 1318.683989][T23301] macvtap0: entered allmulticast mode [ 1318.691858][T23301] veth0_macvtap: entered allmulticast mode [ 1319.160459][ T5888] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1319.327879][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1319.347128][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.364830][ T5888] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1319.391274][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.442511][ T5888] usb 1-1: Product: syz [ 1319.484171][ T5888] usb 1-1: Manufacturer: syz [ 1319.502416][ T5888] usb 1-1: SerialNumber: syz [ 1319.512243][T23314] fuse: Unknown parameter '0x0000000000000003' [ 1319.557578][ T5888] usb 1-1: config 0 descriptor?? [ 1319.574704][ T5888] usb 1-1: bad CDC descriptors [ 1319.613366][ T5888] usb 1-1: unsupported MDLM descriptors [ 1319.782287][ T5840] usb 1-1: USB disconnect, device number 96 [ 1319.791697][T23326] ptrace attach of "./syz-executor exec"[16085] was attempted by "./syz-executor exec"[23326] [ 1319.910879][ T5888] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1320.101499][ T5888] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1320.112506][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1320.126913][ T5888] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1320.153426][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.167063][ T5888] usb 6-1: config 0 descriptor?? [ 1320.183019][ T5888] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1321.127873][ T5888] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1321.387888][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1321.412366][ T5888] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 1321.421709][ T5888] usb 1-1: config 0 has no interface number 0 [ 1321.435686][ T5888] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1321.445403][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.454935][ T5888] usb 1-1: Product: syz [ 1321.459649][ T5888] usb 1-1: Manufacturer: syz [ 1321.465054][ T5888] usb 1-1: SerialNumber: syz [ 1321.479488][ T5888] usb 1-1: config 0 descriptor?? [ 1321.671313][T23353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.681463][T23353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.690889][T23353] xt_NFQUEUE: number of total queues is 0 [ 1322.079399][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4718'. [ 1322.096346][T23362] vlan3: entered allmulticast mode [ 1322.101567][T23362] macvtap0: entered allmulticast mode [ 1322.106965][T23362] veth0_macvtap: entered allmulticast mode [ 1322.288252][T23365] input: syz0 as /devices/virtual/input/input103 [ 1322.643604][ T5895] usb 6-1: USB disconnect, device number 78 [ 1323.176026][T23371] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1323.350733][T23378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.361695][T23377] fuse: Unknown parameter '0x0000000000000003' [ 1323.381351][T23378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.621147][T23381] vivid-000: disconnect [ 1323.759370][ T5888] mos7840 1-1:0.225: required endpoints missing [ 1323.802752][ T5888] usb 1-1: USB disconnect, device number 97 [ 1324.039626][T23372] vivid-000: reconnect [ 1324.379401][ T5959] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1324.393053][T23397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.406791][T23391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1324.411564][T23399] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1324.413347][T23391] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1324.440449][T23391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1324.446979][T23391] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1324.485934][T23397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.550684][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.585916][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.590045][T23391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1324.602279][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1324.616258][T23391] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1324.626784][T23391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1324.635985][T23391] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1324.645531][ T5959] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1324.649965][T23391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1324.661143][T23391] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1324.661200][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.697165][ T5959] usb 1-1: config 0 descriptor?? [ 1324.885941][T23409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4732'. [ 1324.902878][T23409] vlan3: entered allmulticast mode [ 1324.910782][T23409] macvtap0: entered allmulticast mode [ 1324.916902][T23409] veth0_macvtap: entered allmulticast mode [ 1325.028141][T16461] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1325.106729][T23411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.118605][T23411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.149652][ T5959] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1325.187895][T16461] usb 7-1: Using ep0 maxpacket: 32 [ 1325.194575][T16461] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.206091][T16461] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1325.272300][T16461] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1325.292777][T16461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.318052][T16461] usb 7-1: config 0 descriptor?? [ 1325.333680][T16461] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1325.671047][T23416] sctp: [Deprecated]: syz.1.4735 (pid 23416) Use of int in maxseg socket option. [ 1325.671047][T23416] Use struct sctp_assoc_value instead [ 1326.637919][T16461] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 1326.813636][T16461] usb 1-1: device descriptor read/64, error -32 [ 1327.188067][T16461] usb 1-1: reset high-speed USB device number 98 using dummy_hcd [ 1327.225198][T23456] input: syz0 as /devices/virtual/input/input104 [ 1327.327872][T16461] usb 1-1: device descriptor read/64, error -32 [ 1327.644225][T23463] netlink: 'syz.2.4751': attribute type 5 has an invalid length. [ 1327.659974][T23463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1327.811138][T11613] usb 7-1: USB disconnect, device number 41 [ 1328.152546][T23486] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1328.239121][ T5959] usb 1-1: USB disconnect, device number 98 [ 1328.853458][T16461] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1329.005886][T23506] vivid-000: disconnect [ 1329.047886][T16461] usb 7-1: Using ep0 maxpacket: 32 [ 1329.060473][T16461] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.077272][T16461] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1329.093625][T16461] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1329.124791][T16461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.164038][T16461] usb 7-1: config 0 descriptor?? [ 1329.180829][T16461] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1329.354093][T23495] vivid-000: reconnect [ 1330.058947][ T5840] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1330.247861][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 1330.254173][ T5840] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1330.266239][ T5840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1330.544106][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1330.557130][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1330.567484][ T5840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1330.582960][ T5840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1330.602379][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.677410][T23522] fuse: Unknown parameter 'grou00000000000000000000' [ 1330.868088][ T5840] usb 6-1: GET_CAPABILITIES returned 0 [ 1330.889395][ T5840] usbtmc 6-1:16.0: can't read capabilities [ 1331.214768][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4775'. [ 1331.266940][T23539] kvm: user requested TSC rate below hardware speed [ 1331.608808][ T5959] usb 7-1: USB disconnect, device number 42 [ 1331.659622][T23548] vivid-000: disconnect [ 1331.760508][T23551] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1331.788989][ T30] audit: type=1400 audit(1752276555.434:1415): avc: denied { create } for pid=23511 comm="syz.5.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1331.939720][ T30] audit: type=1400 audit(1752276555.444:1416): avc: denied { ioctl } for pid=23511 comm="syz.5.4767" path="socket:[96319]" dev="sockfs" ino=96319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1332.227876][ T5959] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1332.349891][T23540] vivid-000: reconnect [ 1332.363351][T23558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4779'. [ 1332.436163][T23560] fuse: Unknown parameter 'grou00000000000000000000' [ 1332.443240][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 1332.454058][ T5959] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1332.462320][ T5959] usb 2-1: config 0 has no interface number 0 [ 1332.480720][ T5959] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1332.542433][ T5959] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1332.573219][ T5959] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1332.587510][ T5959] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1332.599903][ T5959] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1332.611938][ T5959] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1332.622244][ T5959] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1332.632159][ T5888] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1332.645611][ T5959] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1332.656944][ T5959] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1332.667378][ T5959] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1332.682685][ T5959] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1332.694496][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.702624][ T5959] usb 2-1: Product: syz [ 1332.706846][ T5959] usb 2-1: Manufacturer: syz [ 1332.711906][ T5959] usb 2-1: SerialNumber: syz [ 1332.728349][ T5959] usb 2-1: config 0 descriptor?? [ 1332.734512][T23549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1332.743633][T23549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1332.755498][ T5959] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1332.764670][ T5959] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1332.779283][ T5888] usb 7-1: config 0 has no interfaces? [ 1332.779735][ T5959] scsi host1: microtekX6 [ 1332.802508][ T5888] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1332.815694][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.825430][ T5888] usb 7-1: Product: syz [ 1332.835013][ T5888] usb 7-1: Manufacturer: syz [ 1332.847874][ T5888] usb 7-1: SerialNumber: syz [ 1332.860089][ T5888] usb 7-1: config 0 descriptor?? [ 1332.867942][ T5840] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1332.970220][ T30] audit: type=1400 audit(1752276556.654:1417): avc: denied { accept } for pid=23573 comm="syz.2.4786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1333.027897][ T5840] usb 1-1: Using ep0 maxpacket: 32 [ 1333.035162][ T5840] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 1333.044252][ T5840] usb 1-1: config 0 has no interface number 0 [ 1333.053657][ T5840] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1333.063115][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.071282][ T5840] usb 1-1: Product: syz [ 1333.075693][ T5840] usb 1-1: Manufacturer: syz [ 1333.081715][ T5840] usb 1-1: SerialNumber: syz [ 1333.089172][ T5840] usb 1-1: config 0 descriptor?? [ 1333.091487][ T5959] usb 7-1: USB disconnect, device number 43 [ 1333.102202][ T5840] net1080 1-1:0.183: probe with driver net1080 failed with error -22 [ 1333.380602][ T5959] usb 6-1: USB disconnect, device number 79 [ 1333.513398][T16461] usb 2-1: USB disconnect, device number 73 [ 1333.728455][ T5959] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1333.885270][ T5959] usb 6-1: device descriptor read/64, error -71 [ 1334.150274][ T5959] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1334.360909][T23597] xt_nfacct: accounting object `syz0' does not exists [ 1334.418080][ T5959] usb 6-1: device descriptor read/64, error -71 [ 1334.532097][ T5959] usb usb6-port1: attempt power cycle [ 1334.887910][ T5959] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1335.030770][ T5959] usb 6-1: device descriptor read/8, error -71 [ 1335.307891][ T5959] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1335.328995][ T5959] usb 6-1: device descriptor read/8, error -71 [ 1335.558434][ T5959] usb usb6-port1: unable to enumerate USB device [ 1335.812118][ T5959] usb 1-1: USB disconnect, device number 99 [ 1336.589716][T23627] kvm: pic: non byte write [ 1337.047904][ T5888] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1337.236542][T23640] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1337.254040][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 1337.272083][ T5888] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 1337.281470][ T5888] usb 6-1: config 0 has no interface number 0 [ 1337.293477][ T5888] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1337.316871][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.364598][ T5888] usb 6-1: Product: syz [ 1337.404236][ T5888] usb 6-1: Manufacturer: syz [ 1337.478814][ T5888] usb 6-1: SerialNumber: syz [ 1337.512598][ T5888] usb 6-1: config 0 descriptor?? [ 1338.222186][T23646] fuse: Invalid rootmode [ 1339.358312][ T5895] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1339.518132][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 1339.525999][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.536711][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1339.570022][ T5895] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1339.597636][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.625582][ T5895] usb 1-1: config 0 descriptor?? [ 1339.652254][ T5895] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1339.694988][ T5888] mos7840 6-1:0.225: required endpoints missing [ 1339.707477][ T5888] usb 6-1: USB disconnect, device number 84 [ 1339.718033][ T5959] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1339.923625][ T5959] usb 7-1: Using ep0 maxpacket: 8 [ 1339.941743][ T5959] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1339.979026][ T5959] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1340.001336][ T5959] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1340.019253][ T5959] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1340.050971][ T5959] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1340.067718][ T5959] usb 7-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1340.091690][ T5959] usb 7-1: string descriptor 0 read error: -22 [ 1340.102275][ T5959] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1340.117553][ T5959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.136707][ T5959] usb 7-1: rejected 3 configurations due to insufficient available bus power [ 1340.150851][ T5959] usb 7-1: no configuration chosen from 3 choices [ 1340.670771][T23706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1340.719345][T23707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.728956][T23707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.583680][T23725] input: syz1 as /devices/virtual/input/input105 [ 1342.144673][ T5959] usb 1-1: USB disconnect, device number 100 [ 1342.411544][ T30] audit: type=1400 audit(1752276566.084:1418): avc: denied { map } for pid=23731 comm="syz.0.4834" path="socket:[97713]" dev="sockfs" ino=97713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1342.530377][ T5895] usb 7-1: USB disconnect, device number 44 [ 1343.384973][T23747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1343.716303][T23761] netlink: 'syz.5.4845': attribute type 6 has an invalid length. [ 1343.747905][T23761] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4845'. [ 1344.268243][ T5888] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1344.468100][ T5895] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1344.487854][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 1344.524809][ T5888] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1344.535445][ T5888] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1344.545894][ T5888] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1344.557138][ T5888] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1344.586325][ T5888] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1344.629843][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.640081][ T5895] usb 2-1: config 0 has no interfaces? [ 1344.649425][ T5895] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1344.658556][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.671638][ T5888] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1344.691051][ T5895] usb 2-1: Product: syz [ 1344.717930][ T5895] usb 2-1: Manufacturer: syz [ 1344.723067][ T5895] usb 2-1: SerialNumber: syz [ 1344.733795][ T5888] usb 1-1: string descriptor 0 read error: -22 [ 1344.740429][ T5888] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1344.805789][ T5895] usb 2-1: config 0 descriptor?? [ 1344.855735][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.035272][ T5888] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 1345.073337][ T5888] usb 1-1: no configuration chosen from 3 choices [ 1345.164223][T23787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4851'. [ 1345.247908][ T5895] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1345.258406][T23788] vivid-000: disconnect [ 1345.550823][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1345.613563][ T5895] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 1345.631066][ T5895] usb 7-1: config 0 has no interface number 0 [ 1345.641707][ T5895] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1345.687401][ T5895] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1345.716940][ T5895] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1345.747121][ T5895] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1345.764967][ T5895] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1345.827546][ T5895] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1345.853611][ T5895] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1345.901556][T23781] vivid-000: reconnect [ 1345.907669][ T5895] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1345.926570][ T5895] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1345.939667][ T5895] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1345.956434][ T5895] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1345.968943][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.987717][ T5895] usb 7-1: Product: syz [ 1345.997608][ T5895] usb 7-1: Manufacturer: syz [ 1346.006690][ T5895] usb 7-1: SerialNumber: syz [ 1346.026375][ T5895] usb 7-1: config 0 descriptor?? [ 1346.033582][T23779] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1346.041122][T23779] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1346.053975][ T5895] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1346.062776][ T5895] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1346.075324][ T5895] scsi host1: microtekX6 [ 1346.820965][ T5895] usb 7-1: USB disconnect, device number 45 [ 1346.877208][T11613] usb 1-1: USB disconnect, device number 101 [ 1347.036235][ T5942] usb 2-1: USB disconnect, device number 74 [ 1347.078092][ T5959] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1347.120300][T23808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1347.131958][T23806] kvm: user requested TSC rate below hardware speed [ 1347.239483][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 1347.251569][ T5959] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 1347.267731][ T5959] usb 6-1: config 0 has no interface number 0 [ 1347.292024][ T5959] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1347.322403][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.356742][ T5959] usb 6-1: Product: syz [ 1347.378125][ T5959] usb 6-1: Manufacturer: syz [ 1347.392314][ T5959] usb 6-1: SerialNumber: syz [ 1347.417726][ T5895] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1347.438905][ T5959] usb 6-1: config 0 descriptor?? [ 1347.597944][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1347.616138][ T5895] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1347.831913][ T5895] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1347.847046][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1347.861292][ T5895] usb 7-1: Product: syz [ 1347.874111][ T5895] usb 7-1: Manufacturer: syz [ 1347.888730][ T5895] usb 7-1: SerialNumber: syz [ 1347.911053][ T5895] usb 7-1: config 0 descriptor?? [ 1347.943949][T23804] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1347.954877][ T5895] hub 7-1:0.0: bad descriptor, ignoring hub [ 1347.971196][ T5895] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1348.091966][T23828] vivid-000: disconnect [ 1348.378815][ T5895] usb 7-1: USB disconnect, device number 46 [ 1348.447209][T23821] vivid-000: reconnect [ 1348.528675][T23831] netlink: 'syz.2.4864': attribute type 6 has an invalid length. [ 1348.566202][T23831] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.4864'. [ 1348.727996][T11613] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1348.890875][T11613] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1348.901931][T11613] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1348.928509][T11613] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1348.937915][T11613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.945969][T11613] usb 7-1: Product: syz [ 1348.951958][T11613] usb 7-1: Manufacturer: syz [ 1348.956669][T11613] usb 7-1: SerialNumber: syz [ 1349.077878][ T5888] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1349.191000][T11613] cdc_ncm 7-1:1.0: bind() failure [ 1349.210889][T11613] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1349.229426][T11613] cdc_ncm 7-1:1.1: bind() failure [ 1349.254530][T11613] usb 7-1: USB disconnect, device number 47 [ 1349.288014][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 1349.296328][ T5888] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1349.310184][ T5888] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1349.332419][ T5888] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1349.345594][ T5888] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1349.367344][ T5888] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1349.384956][ T5888] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1349.400383][ T5888] usb 1-1: string descriptor 0 read error: -22 [ 1349.406953][ T5888] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1349.417392][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.444524][ T5888] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 1349.454481][ T5888] usb 1-1: no configuration chosen from 3 choices [ 1349.609658][ T5888] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1349.774426][ T5959] mos7840 6-1:0.225: required endpoints missing [ 1349.791089][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.792938][ T5959] usb 6-1: USB disconnect, device number 85 [ 1349.801900][ T5888] usb 2-1: config 0 has no interfaces? [ 1349.821090][ T5888] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1349.830520][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.838754][ T5888] usb 2-1: Product: syz [ 1349.845752][ T5888] usb 2-1: Manufacturer: syz [ 1349.859186][ T5888] usb 2-1: SerialNumber: syz [ 1349.873975][ T5888] usb 2-1: config 0 descriptor?? [ 1349.932550][T23849] kvm: user requested TSC rate below hardware speed [ 1350.302750][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4876'. [ 1350.537958][ T5959] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1350.687975][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 1350.798905][ T5959] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.812973][ T5959] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1350.822506][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.833854][ T5959] usb 6-1: Product: syz [ 1350.840649][ T5959] usb 6-1: Manufacturer: syz [ 1350.847574][ T5959] usb 6-1: SerialNumber: syz [ 1350.856918][ T5959] usb 6-1: config 0 descriptor?? [ 1350.867397][ T5959] usb 6-1: bad CDC descriptors [ 1350.877020][ T5959] usb 6-1: unsupported MDLM descriptors [ 1351.070668][ T5895] usb 6-1: USB disconnect, device number 86 [ 1351.935893][T23876] vivid-000: disconnect [ 1352.077275][ T5888] usb 1-1: USB disconnect, device number 102 [ 1352.108338][T11613] usb 2-1: USB disconnect, device number 75 [ 1352.198200][ T5959] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1352.305620][T23869] vivid-000: reconnect [ 1352.387859][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 1352.394608][ T5959] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 1352.413448][ T5959] usb 6-1: config 0 has no interface number 0 [ 1352.452942][ T5959] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1352.517454][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.567846][ T5959] usb 6-1: Product: syz [ 1352.572053][ T5959] usb 6-1: Manufacturer: syz [ 1352.576980][ T5959] usb 6-1: SerialNumber: syz [ 1352.608056][ T5888] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1352.682645][ T5959] usb 6-1: config 0 descriptor?? [ 1352.831066][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1352.845931][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.943981][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.995930][ T5888] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1353.018101][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.077134][ T5888] usb 2-1: config 0 descriptor?? [ 1353.534407][ T5888] savu 0003:1E7D:2D5A.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1353.929699][T16461] usb 2-1: USB disconnect, device number 76 [ 1354.362715][T23908] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1354.704442][ T5959] mos7840 6-1:0.225: required endpoints missing [ 1354.793031][ T5959] usb 6-1: USB disconnect, device number 87 [ 1355.256238][ T5888] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1355.380064][ T5959] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1355.430636][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.449183][ T5888] usb 2-1: config 0 has no interfaces? [ 1355.459830][ T5888] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1355.471378][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.489283][ T5888] usb 2-1: Product: syz [ 1355.495406][ T5888] usb 2-1: Manufacturer: syz [ 1355.500277][ T5888] usb 2-1: SerialNumber: syz [ 1355.506336][ T5888] usb 2-1: config 0 descriptor?? [ 1355.537876][ T5959] usb 7-1: Using ep0 maxpacket: 32 [ 1355.549609][ T5959] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.616232][ T5959] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1355.727520][ T5959] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1355.755647][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.777905][ T5959] usb 7-1: config 0 descriptor?? [ 1355.803577][ T5959] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1356.723948][T23948] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1356.761993][T23948] bond5: (slave veth13): Enslaving as an active interface with an up link [ 1357.175211][T23963] binder: BINDER_SET_CONTEXT_MGR already set [ 1357.181561][T23963] binder: 23961:23963 ioctl 4018620d 200000000280 returned -16 [ 1357.190764][T23963] binder: 23961:23963 ioctl c0306201 200000000240 returned -11 [ 1357.869861][ T5959] usb 2-1: USB disconnect, device number 77 [ 1357.992832][T23978] vivid-000: disconnect [ 1358.189322][ T5895] usb 7-1: USB disconnect, device number 48 [ 1358.411512][T23972] vivid-000: reconnect [ 1358.673484][T23998] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4916'. [ 1358.869452][T23996] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4916'. [ 1359.743204][T24028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.757720][T24028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.457913][T16461] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1360.608011][T16461] usb 2-1: Using ep0 maxpacket: 32 [ 1360.616077][T16461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.655189][T16461] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1360.669824][T16461] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1360.679105][T16461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.689879][T16461] usb 2-1: config 0 descriptor?? [ 1360.717308][T16461] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1361.352866][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.363642][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.593304][T24059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1362.744755][T24062] bond6: (slave veth15): Enslaving as an active interface with an up link [ 1362.832590][T24070] fuse: Bad value for 'fd' [ 1362.969034][T24074] vivid-000: disconnect [ 1363.100444][T24075] netlink: 'syz.2.4937': attribute type 6 has an invalid length. [ 1363.128776][T24075] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4937'. [ 1363.215364][ T5888] usb 2-1: USB disconnect, device number 78 [ 1363.420464][T24055] vivid-000: reconnect [ 1363.487385][T24085] binder: BINDER_SET_CONTEXT_MGR already set [ 1363.493532][T24085] binder: 24084:24085 ioctl 4018620d 200000000280 returned -16 [ 1363.503550][T24085] binder: 24084:24085 ioctl c0306201 200000000240 returned -11 [ 1363.711549][T24094] netlink: 'syz.2.4943': attribute type 1 has an invalid length. [ 1363.781034][T24094] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1363.824428][T24096] bond7: (slave veth0_to_bond): making interface the new active one [ 1363.837142][T24096] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1363.958124][ T5888] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1364.118092][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1364.127874][ T5888] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 1364.139150][ T5888] usb 2-1: config 0 has no interface number 0 [ 1364.164898][ T5888] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1364.180761][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.197838][ T5888] usb 2-1: Product: syz [ 1364.202124][ T5888] usb 2-1: Manufacturer: syz [ 1364.209693][ T5888] usb 2-1: SerialNumber: syz [ 1364.225515][ T5888] usb 2-1: config 0 descriptor?? [ 1364.227242][T24110] fuse: Invalid rootmode [ 1364.232947][ T5888] net1080 2-1:0.183: probe with driver net1080 failed with error -22 [ 1364.569678][ T5959] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1364.727860][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 1364.734511][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.744685][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1364.757652][ T5959] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1364.766947][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.780291][ T5959] usb 1-1: config 0 descriptor?? [ 1364.790986][ T5959] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1365.239188][T24130] vivid-000: disconnect [ 1365.588649][T24133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.618932][T24133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.872950][T24126] vivid-000: reconnect [ 1366.194181][T24138] fuse: Invalid rootmode [ 1366.390740][T24151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.399887][T24151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.450360][T24153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4965'. [ 1367.246691][ T5959] usb 2-1: USB disconnect, device number 79 [ 1367.336653][ T5888] usb 1-1: USB disconnect, device number 103 [ 1367.511470][T24174] vivid-000: disconnect [ 1367.597868][ T5895] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1367.799871][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1367.817495][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1367.893785][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1367.940281][T24162] vivid-000: reconnect [ 1367.970228][ T5895] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1368.028981][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.085544][ T5895] usb 6-1: config 0 descriptor?? [ 1368.232620][ T5888] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1368.323663][ T5895] ath6kl: Failed to submit usb control message: -71 [ 1368.343153][ T5895] ath6kl: unable to send the bmi data to the device: -71 [ 1368.378644][ T5895] ath6kl: Unable to send get target info: -71 [ 1368.386222][ T5895] ath6kl: Failed to init ath6kl core: -71 [ 1368.396420][ T5895] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1368.417676][ T5895] usb 6-1: USB disconnect, device number 88 [ 1368.437936][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 1368.446326][ T5888] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1368.465134][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1368.477658][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1368.489222][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1368.503277][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1368.517611][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1368.527230][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.873084][ T5888] usb 2-1: GET_CAPABILITIES returned 0 [ 1368.881721][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 1369.317844][ T5888] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1369.478108][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 1369.498906][ T5888] usb 6-1: config 0 has an invalid interface number: 183 but max is 0 [ 1369.507344][ T5888] usb 6-1: config 0 has no interface number 0 [ 1369.527268][ T5888] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1369.536494][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.547275][ T5888] usb 6-1: Product: syz [ 1369.551801][ T5888] usb 6-1: Manufacturer: syz [ 1369.556401][ T5888] usb 6-1: SerialNumber: syz [ 1369.568295][ T5888] usb 6-1: config 0 descriptor?? [ 1369.576688][ T5888] net1080 6-1:0.183: probe with driver net1080 failed with error -22 [ 1369.588041][T16461] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1369.760256][T16461] usb 1-1: Using ep0 maxpacket: 32 [ 1369.767382][T16461] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.781577][T16461] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1369.794919][T16461] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1369.806986][T16461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.818266][T16461] usb 1-1: config 0 descriptor?? [ 1369.828708][T16461] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1369.884360][T24226] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1371.005048][ T5895] usb 2-1: USB disconnect, device number 80 [ 1372.354574][T16461] usb 1-1: USB disconnect, device number 104 [ 1372.935051][T16461] usb 6-1: USB disconnect, device number 89 [ 1373.080866][T24278] netlink: 'syz.5.5000': attribute type 6 has an invalid length. [ 1373.097376][T24278] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5000'. [ 1374.138010][T16461] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1374.303571][T16461] usb 6-1: Using ep0 maxpacket: 8 [ 1374.323422][T16461] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1374.343793][T16461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1374.370023][T16461] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1374.402902][T16461] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1374.424579][T16461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1374.483347][T16461] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1374.626559][T16461] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1374.659625][ T5888] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1374.667716][T16461] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1374.714664][T16461] usb 6-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1374.738973][T16461] usb 6-1: string descriptor 0 read error: -22 [ 1374.745316][T16461] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1374.754896][T16461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.801399][T16461] adutux 6-1:168.0: interrupt endpoints not found [ 1374.970242][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1374.981968][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1374.995498][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1375.013442][ T5888] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1375.024127][ T9837] usb 6-1: USB disconnect, device number 90 [ 1375.031221][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.060300][ T5888] usb 7-1: config 0 descriptor?? [ 1375.369220][ T5888] ath6kl: Failed to submit usb control message: -71 [ 1375.383833][ T5888] ath6kl: unable to send the bmi data to the device: -71 [ 1375.396104][ T5888] ath6kl: Unable to send get target info: -71 [ 1375.634054][T24325] loop6: detected capacity change from 0 to 524287999 [ 1375.643656][ T5888] ath6kl: Failed to init ath6kl core: -71 [ 1375.658671][ T5888] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1375.706171][T16659] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1375.725759][ T5888] usb 7-1: USB disconnect, device number 49 [ 1377.717972][ T5888] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1377.718019][T24357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.765270][T24357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.898126][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 1377.916173][ T5888] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1378.003711][ T5888] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1378.050024][ T5888] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1378.115989][ T5888] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1378.226308][ T5888] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1378.317613][ T5888] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1378.347362][T24360] fuse: Invalid rootmode [ 1378.352013][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.585353][ T5888] usb 6-1: GET_CAPABILITIES returned 0 [ 1378.591314][ T5888] usbtmc 6-1:16.0: can't read capabilities [ 1379.588883][T24383] loop6: detected capacity change from 0 to 524287999 [ 1379.614717][T24377] kvm: kvm [24376]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1379.634390][T16659] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1379.634529][T24377] kvm: kvm [24376]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1379.935910][T24389] fuse: Unknown parameter 'use00000000000000000000000' [ 1380.247020][T16659] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1380.549880][T16461] usb 6-1: USB disconnect, device number 91 [ 1380.873079][T24414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.893009][T24419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5044'. [ 1380.934605][T24414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.534796][T24428] kvm: pic: non byte write [ 1381.727851][T16461] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1381.812479][T24418] fuse: Invalid rootmode [ 1381.877961][T16461] usb 2-1: Using ep0 maxpacket: 32 [ 1381.884916][T16461] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 1381.895506][T16461] usb 2-1: config 0 has no interface number 0 [ 1381.906235][T16461] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 1381.922485][T16461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.932478][T16461] usb 2-1: Product: syz [ 1381.936792][T16461] usb 2-1: Manufacturer: syz [ 1381.943616][T16461] usb 2-1: SerialNumber: syz [ 1381.956627][T16461] usb 2-1: config 0 descriptor?? [ 1384.371714][T16461] mos7840 2-1:0.225: required endpoints missing [ 1384.380519][T16461] usb 2-1: USB disconnect, device number 81 [ 1384.433119][T24474] binder: BINDER_SET_CONTEXT_MGR already set [ 1384.439220][T24474] binder: 24473:24474 ioctl 4018620d 200000000280 returned -16 [ 1384.447586][T24474] binder: 24473:24474 ioctl c0306201 200000000240 returned -11 [ 1385.852151][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5065'. [ 1385.882174][T24494] kvm: kvm [24492]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 1385.913781][T24494] kvm: kvm [24492]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x80 [ 1387.894612][T24568] vivid-000: disconnect [ 1388.307836][T24550] vivid-000: reconnect [ 1389.202996][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5090'. [ 1389.222156][T24603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5090'. [ 1391.677073][T24652] vivid-000: disconnect [ 1391.777877][ T5888] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1391.819692][T24654] netlink: 'syz.5.5107': attribute type 1 has an invalid length. [ 1391.853893][T24654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1391.865803][T24654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5107'. [ 1391.880179][T24654] bond3: (slave veth0_to_bond): making interface the new active one [ 1391.893880][T24654] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1391.923324][T24657] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5108'. [ 1391.939833][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.950305][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1391.959783][ T5888] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1391.969077][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.986067][ T5888] usb 2-1: config 0 descriptor?? [ 1392.130587][T24639] vivid-000: reconnect [ 1392.351691][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5111'. [ 1392.461638][T24672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5111'. [ 1394.469314][T16461] usb 2-1: USB disconnect, device number 82 [ 1395.208981][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5125'. [ 1395.220867][T24722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5125'. [ 1395.425150][T24729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1396.425852][ T5942] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1396.587850][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 1396.594448][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.632208][ T5942] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1396.657318][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.753341][ T5942] usb 1-1: Product: syz [ 1396.757975][ T5942] usb 1-1: Manufacturer: syz [ 1396.762686][ T5942] usb 1-1: SerialNumber: syz [ 1396.772067][ T5942] usb 1-1: config 0 descriptor?? [ 1396.783906][ T5942] usb 1-1: bad CDC descriptors [ 1396.796365][ T5942] usb 1-1: unsupported MDLM descriptors [ 1397.310697][ T5942] usb 1-1: USB disconnect, device number 105 [ 1397.334164][T24762] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5136'. [ 1397.639036][T24773] netlink: 'syz.5.5141': attribute type 6 has an invalid length. [ 1397.653172][T24773] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5141'. [ 1398.204707][T24793] kvm: pic: non byte write [ 1399.070579][T24817] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1400.509580][T24838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1403.863898][T24913] fuse: Invalid rootmode [ 1404.519763][T24940] netlink: 'syz.2.5190': attribute type 6 has an invalid length. [ 1404.537829][T24940] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5190'. [ 1405.611718][T24976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.620407][T24976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.796244][T24982] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5202'. [ 1408.180634][T25023] binder: BINDER_SET_CONTEXT_MGR already set [ 1408.186760][T25023] binder: 25019:25023 ioctl 4018620d 200000000280 returned -16 [ 1408.210260][T25023] binder: 25019:25023 ioctl c0306201 200000000240 returned -11 [ 1408.270001][T25026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5214'. [ 1409.835251][T25047] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5222'. [ 1409.987959][ T31] INFO: task kworker/1:1:57 blocked for more than 143 seconds. [ 1409.996267][ T31] Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 [ 1410.014223][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1410.057328][ T31] task:kworker/1:1 state:D stack:17016 pid:57 tgid:57 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1410.165767][ T31] Workqueue: usb_hub_wq hub_event [ 1410.178175][ T31] Call Trace: [ 1410.191713][ T31] [ 1410.228293][ T31] __schedule+0x116a/0x5de0 [ 1410.257843][ T31] ? __pfx___schedule+0x10/0x10 [ 1410.264906][ T31] ? find_held_lock+0x2b/0x80 [ 1410.271641][ T31] ? schedule+0x2d7/0x3a0 [ 1410.277137][ T31] schedule+0xe7/0x3a0 [ 1410.286821][ T31] schedule_timeout+0x257/0x290 [ 1410.355560][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1410.401670][ T31] ? mark_held_locks+0x49/0x80 [ 1410.417250][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1410.432854][ T31] __wait_for_common+0x2fc/0x4e0 [ 1410.439140][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1410.444629][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1410.450244][ T31] ? __pfx_device_del+0x10/0x10 [ 1410.455398][ T31] ? kobject_put+0xab/0x5a0 [ 1410.460066][ T31] i2c_del_adapter+0x546/0x6f0 [ 1410.528239][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1410.535578][ T31] ? kfree+0x2b4/0x4d0 [ 1410.550036][ T31] ? media_device_cleanup+0x53/0x80 [ 1410.555477][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 1410.561896][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 1410.569613][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 1410.586135][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1410.608219][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1410.640565][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1410.646570][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 1410.652893][ T31] usb_probe_interface+0x303/0x9c0 [ 1410.659789][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1410.668005][ T31] really_probe+0x23e/0xa90 [ 1410.675889][ T31] __driver_probe_device+0x1de/0x440 [ 1410.685954][ T31] driver_probe_device+0x4c/0x1b0 [ 1410.696058][ T31] __device_attach_driver+0x1df/0x310 [ 1410.704904][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1410.715057][ T31] bus_for_each_drv+0x156/0x1e0 [ 1410.725209][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1410.735320][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1410.743949][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1410.752443][ T31] __device_attach+0x1e4/0x4b0 [ 1410.760865][ T31] ? __pfx___device_attach+0x10/0x10 [ 1410.768263][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1410.775600][ T31] bus_probe_device+0x17f/0x1c0 [ 1410.782518][ T31] device_add+0x1148/0x1a70 [ 1410.787933][ T31] ? __pfx_device_add+0x10/0x10 [ 1410.796040][ T31] ? usb_cache_string+0xf2/0x150 [ 1410.821198][T25053] caif:caif_disconnect_client(): nothing to disconnect [ 1410.830893][ T31] usb_set_configuration+0x1187/0x1e20 [ 1410.836588][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1410.843318][ T31] usb_generic_driver_probe+0xb1/0x110 [ 1410.850659][ T31] usb_probe_device+0xef/0x3e0 [ 1410.855558][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1410.861203][ T31] really_probe+0x23e/0xa90 [ 1410.866042][ T31] __driver_probe_device+0x1de/0x440 [ 1410.874694][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 1410.884407][ T31] driver_probe_device+0x4c/0x1b0 [ 1410.889784][ T31] __device_attach_driver+0x1df/0x310 [ 1410.895232][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1410.901279][ T31] bus_for_each_drv+0x156/0x1e0 [ 1410.906194][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1410.911668][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1410.916885][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1410.925845][ T31] __device_attach+0x1e4/0x4b0 [ 1410.930869][ T31] ? __pfx___device_attach+0x10/0x10 [ 1410.936339][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1410.941746][ T31] bus_probe_device+0x17f/0x1c0 [ 1410.946669][ T31] device_add+0x1148/0x1a70 [ 1410.951241][ T31] ? __pfx_device_add+0x10/0x10 [ 1410.956157][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 1410.961976][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1410.967942][ T31] usb_new_device+0xd07/0x1a20 [ 1410.972785][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1410.978671][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1410.983932][ T31] ? mark_held_locks+0x49/0x80 [ 1410.988807][ T31] hub_event+0x2eb7/0x4fa0 [ 1410.993307][ T31] ? __pfx_hub_event+0x10/0x10 [ 1410.998135][ T31] ? ioread8+0xa0/0xa0 [ 1411.002340][ T31] ? rcu_is_watching+0x12/0xc0 [ 1411.007181][ T31] process_one_work+0x9cf/0x1b70 [ 1411.012570][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 1411.017940][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1411.023411][ T31] ? assign_work+0x1a0/0x250 [ 1411.030001][ T31] worker_thread+0x6c8/0xf10 [ 1411.034760][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1411.040105][ T31] kthread+0x3c5/0x780 [ 1411.044247][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.048900][ T31] ? rcu_is_watching+0x12/0xc0 [ 1411.053693][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.059597][ T31] ret_from_fork+0x5d7/0x6f0 [ 1411.064357][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.069050][ T31] ret_from_fork_asm+0x1a/0x30 [ 1411.073886][ T31] [ 1411.078948][ T31] [ 1411.078948][ T31] Showing all locks held in the system: [ 1411.086733][ T31] 1 lock held by khungtaskd/31: [ 1411.091740][ T31] #0: ffffffff8e5c4e80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1411.101710][ T31] 5 locks held by kworker/1:1/57: [ 1411.106744][ T31] #0: ffff88823be10148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1411.117852][ T31] #1: ffffc900015e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1411.129236][ T31] #2: ffff888144bd2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1411.138552][ T31] #3: ffff888075b02198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1411.148055][ T31] #4: ffff88805312b160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1411.157556][ T31] 2 locks held by getty/5603: [ 1411.162323][ T31] #0: ffff88814caa90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1411.172162][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1411.182374][ T31] 3 locks held by kworker/1:4/5888: [ 1411.187584][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1411.198171][ T31] #1: ffffc90003effd10 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1411.209384][ T31] #2: ffffffff8e5d0340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1411.219444][ T31] 1 lock held by syz.5.5221/25045: [ 1411.224562][ T31] #0: ffffffff8e5d0340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1411.234621][ T31] [ 1411.236960][ T31] ============================================= [ 1411.236960][ T31] [ 1411.245688][ T31] NMI backtrace for cpu 0 [ 1411.245701][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 1411.245722][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1411.245732][ T31] Call Trace: [ 1411.245739][ T31] [ 1411.245746][ T31] dump_stack_lvl+0x116/0x1f0 [ 1411.245774][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1411.245795][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1411.245821][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1411.245842][ T31] watchdog+0xf70/0x12c0 [ 1411.245866][ T31] ? __pfx_watchdog+0x10/0x10 [ 1411.245883][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1411.245907][ T31] ? __kthread_parkme+0x19e/0x250 [ 1411.245933][ T31] ? __pfx_watchdog+0x10/0x10 [ 1411.245952][ T31] kthread+0x3c5/0x780 [ 1411.245970][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.245988][ T31] ? rcu_is_watching+0x12/0xc0 [ 1411.246010][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.246027][ T31] ret_from_fork+0x5d7/0x6f0 [ 1411.246051][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.246066][ T31] ret_from_fork_asm+0x1a/0x30 [ 1411.246096][ T31] [ 1411.246118][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1411.366352][ C1] NMI backtrace for cpu 1 [ 1411.366368][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 1411.366386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1411.366394][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1411.366416][ C1] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 d9 21 00 fb f4 7c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1411.366429][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1411.366441][ C1] RAX: 0000000005368ed3 RBX: 0000000000000001 RCX: ffffffff8b883c79 [ 1411.366451][ C1] RDX: 0000000000000000 RSI: ffffffff8de32a16 RDI: ffffffff8c158f60 [ 1411.366460][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 1411.366469][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 1411.366477][ C1] R13: ffff88801e2b2440 R14: ffffffff90a98350 R15: 0000000000000000 [ 1411.366486][ C1] FS: 0000000000000000(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 1411.366501][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1411.366510][ C1] CR2: 0000200000013000 CR3: 000000002a4e2000 CR4: 00000000003526f0 [ 1411.366519][ C1] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 1411.366528][ C1] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1411.366537][ C1] Call Trace: [ 1411.366541][ C1] [ 1411.366546][ C1] default_idle+0x13/0x20 [ 1411.366567][ C1] default_idle_call+0x6d/0xb0 [ 1411.366579][ C1] do_idle+0x391/0x510 [ 1411.366598][ C1] ? __pfx_do_idle+0x10/0x10 [ 1411.366614][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 1411.366634][ C1] cpu_startup_entry+0x4f/0x60 [ 1411.366650][ C1] start_secondary+0x21d/0x2b0 [ 1411.366669][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1411.366688][ C1] common_startup_64+0x13e/0x148 [ 1411.366706][ C1] [ 1411.571521][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1411.578411][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 1411.590198][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1411.600236][ T31] Call Trace: [ 1411.603499][ T31] [ 1411.606412][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1411.610997][ T31] panic+0x71c/0x800 [ 1411.614880][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1411.620777][ T31] ? __pfx_panic+0x10/0x10 [ 1411.625196][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1411.630576][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1411.636551][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1411.641913][ T31] ? watchdog+0xdda/0x12c0 [ 1411.646316][ T31] ? watchdog+0xdcd/0x12c0 [ 1411.650720][ T31] watchdog+0xdeb/0x12c0 [ 1411.654955][ T31] ? __pfx_watchdog+0x10/0x10 [ 1411.659621][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1411.664806][ T31] ? __kthread_parkme+0x19e/0x250 [ 1411.669820][ T31] ? __pfx_watchdog+0x10/0x10 [ 1411.674484][ T31] kthread+0x3c5/0x780 [ 1411.678538][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.683113][ T31] ? rcu_is_watching+0x12/0xc0 [ 1411.687866][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.692439][ T31] ret_from_fork+0x5d7/0x6f0 [ 1411.697017][ T31] ? __pfx_kthread+0x10/0x10 [ 1411.701590][ T31] ret_from_fork_asm+0x1a/0x30 [ 1411.706346][ T31] [ 1411.709570][ T31] Kernel Offset: disabled [ 1411.713875][ T31] Rebooting in 86400 seconds..