last executing test programs: 5m24.302385399s ago: executing program 3 (id=1460): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd5, 0x28, 0x1b, 0x8, 0x9c0, 0x201, 0xfa4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3d, 0xae, 0xa0, 0x2, "", [{{0x9, 0x4, 0x25, 0x7, 0x0, 0x13, 0xfd, 0x42, 0xfb}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)={0x20, 0x14, 0x4, "eff3563e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5m22.189744043s ago: executing program 3 (id=1475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000004c0)="c74424000f000000c74424026a9e0000c7442406000000000f018414c1c1490fc7610dc442499e2bb9800000c00f3235004000000f30c7442402176c0000c7442406000000000fee1424240f682b430f785508b805000000b90e15900b0f01c1c4e2791828c7442400654d0000c7442402f9ca00000f011424", 0x79}], 0x1, 0x52, &(0x7f0000000000)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m21.945823935s ago: executing program 3 (id=1480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbff251000000008000300", @ANYRES32=r3], 0x34}}, 0x4054000) 5m21.899174309s ago: executing program 3 (id=1482): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 5m21.836264119s ago: executing program 3 (id=1484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="240003801c0003800c0001800800010004000000020000000000000004000000040001"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x404c094) 5m21.449910615s ago: executing program 3 (id=1490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x88f5}, @void, @eth={@broadcast, @local, @void, {@generic={0x4305}}}}, 0x12) 5m21.255091427s ago: executing program 32 (id=1490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x88f5}, @void, @eth={@broadcast, @local, @void, {@generic={0x4305}}}}, 0x12) 4m26.038701739s ago: executing program 4 (id=1973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbb00bbbbbbaaaaaaaaaabb86dd6d0020000008110000000000000000000000000000000000ff"], 0x42) 4m25.855931283s ago: executing program 4 (id=1975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty}, 0x1c) 4m25.722544872s ago: executing program 4 (id=1976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) 4m25.584193371s ago: executing program 4 (id=1979): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 4m25.39395172s ago: executing program 4 (id=1981): syz_kvm_add_vcpu$x86(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x4}) 4m24.902755536s ago: executing program 4 (id=1985): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd5, 0x28, 0x1b, 0x8, 0x9c0, 0x201, 0xfa4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3d, 0xae, 0xa0, 0x2, "", [{{0x9, 0x4, 0x25, 0x7, 0x0, 0x13, 0xfd, 0x42, 0xfb}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x10, 0x2, "cb06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0x16, 0x2, "4ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m24.530661306s ago: executing program 33 (id=1985): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xd5, 0x28, 0x1b, 0x8, 0x9c0, 0x201, 0xfa4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3d, 0xae, 0xa0, 0x2, "", [{{0x9, 0x4, 0x25, 0x7, 0x0, 0x13, 0xfd, 0x42, 0xfb}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x20, 0x10, 0x2, "cb06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0x16, 0x2, "4ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m17.168069308s ago: executing program 5 (id=2034): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa0100fe, @broadcast, 0x0, 0xffffffff, 0x0, 0x10, {@mac=@remote, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x2000, 0x0, 0xffff, 0x4, 'pimreg\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf000, 0x4}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x1fe, 0xff, 0xff]}}, {@mac=@random="e5a1091340a3", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0xff81, 0x1, 0x0, 0xb1, 0x3, 'bond0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5, 0xff03}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 4m17.041063554s ago: executing program 5 (id=2036): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000540)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r1, 0x1}, &(0x7f0000000140)=0x8) 4m16.955206578s ago: executing program 5 (id=2039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="240003801c0003800c0001800800010004000000020000000000000004000000040001"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x404c094) 4m16.89093559s ago: executing program 5 (id=2040): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 4m16.788032577s ago: executing program 5 (id=2042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 4m16.308933318s ago: executing program 5 (id=2048): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0xdd345000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x6) 4m16.075945117s ago: executing program 34 (id=2048): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0xdd345000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x6) 1m46.205814207s ago: executing program 0 (id=3571): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$DVB_DVR_DMX_QBUF(r0, 0xc0186f3f, 0x0) 1m45.277347277s ago: executing program 0 (id=3587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a33a3", 0x23}], 0x2}, 0x20008b88) 1m45.196928127s ago: executing program 0 (id=3589): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1m44.267754015s ago: executing program 0 (id=3600): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') 1m44.11538524s ago: executing program 0 (id=3602): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x7d, &(0x7f0000000080)={r1}, &(0x7f00000001c0)=0x8) 1m41.985312384s ago: executing program 0 (id=3612): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m41.715870636s ago: executing program 35 (id=3612): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 18.248309856s ago: executing program 6 (id=4463): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x7, 0x2, 0x8001, 0x1, "a09fc910bb060bdc0d40cfcd10bf99f7a0f281ca7cbeb8216bef5c543cf861aa"}) 16.554136216s ago: executing program 6 (id=4482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 15.560280121s ago: executing program 6 (id=4486): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) 15.473059168s ago: executing program 6 (id=4487): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 15.405863466s ago: executing program 6 (id=4488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x2c0, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0x5, 0xfffffffffffffffe, 0x807, 0x80000002, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x1, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x6, 0x2, 0x1, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x5, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x40fffffffd, 0xfffffffffffffffd, 0x8, 0x5, 0x7fff, 0xec, 0x219, 0x2, 0x94f, 0x5, 0x7fffffffffffffff, 0xa, 0xffffffffffffffff, 0xd, 0x11, 0xc, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x1, 0x4000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0x325, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x3, 0xe, 0xfffffffffffffff9, 0x3, 0x7, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x1, 0x1e4b, 0xffffffffffffffff, 0x79, 0x13, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8, 0xfff, 0x4, 0x3, 0xd, 0x0, 0x9, 0xffff, 0x1, 0x50, 0x1, 0x2, 0x5, 0xea7, 0x1]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x3e, 0x0, [{0xb, 0x0, 0x5, 0xc0, 0xfffffffc, 0x4, 0x1}]}) 15.138446402s ago: executing program 6 (id=4490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x4}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x47f, 0x0, 0x2}]}) 14.450985645s ago: executing program 36 (id=4490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x4}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x47f, 0x0, 0x2}]}) 4.965216681s ago: executing program 8 (id=4556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x6b, '\x00', 0x5, 0x8}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)=@arm64) 4.76934268s ago: executing program 8 (id=4557): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x20, 0x24, 0x12, {0x12, 0x0, "fcedfa253d8043e925819d25a1c63ac6"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0) 2.91339647s ago: executing program 1 (id=4572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f000047b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) 2.830572376s ago: executing program 1 (id=4574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x6f01, 0x8864}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @arp=@generic={0xd7c3e860fa23abd9, 0x88b5, 0x6, 0x0, 0x3, @multicast, "", @random="c23ebef9dcb3", "dff3"}}, 0x24) 2.729384596s ago: executing program 8 (id=4576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000023c000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x71, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.427190178s ago: executing program 1 (id=4579): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 2.297536026s ago: executing program 1 (id=4580): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0) 2.255419843s ago: executing program 8 (id=4581): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='Z/{\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c) 2.189871999s ago: executing program 1 (id=4583): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f0000902000/0x2000)=nil, 0x2000, 0x0, 0x40, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(&(0x7f0000000240), 0x0) 2.143124999s ago: executing program 8 (id=4584): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000000)={0xffffffffffffffef, "a5cf27d047ccbb89c1f100c4290def60e820cd8c04b1c593b61e33d495b06be46cdcd2311370ed9c07275742032bb2e44288967c70cd701ce0c12a45842875e8227d6cb40397f2eb7d49b3088b3ebc835bcca76ff6619e90cb54f7c521c679b25bcebda5fc398b9c05767955246311071fedaa9a378cc709642ac04d40ff2c71fa910da868fb3aed27b688940dc6a0d9d97ee7e3f9ec75fcbd8ca675953c2bea817becdc9dc1762e758c334d3b156be6923e78bbf23132ce96574d33cebd32164717acd9ede1791b611c80a8a693ed966363ce6da2a145d3dbd0a1"}) 2.12743568s ago: executing program 7 (id=4585): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) socket(0x11, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.954589811s ago: executing program 2 (id=4586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.781770515s ago: executing program 2 (id=4587): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x1, 0x7, 0xffff, 0x1, 0x5}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1fd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.709367113s ago: executing program 2 (id=4588): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x7, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x2, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0xffffffff, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffd, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0x1c23, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x82, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x401, 0x3, 0x9, 0x5, 0x42, 0x400004], [0x6, 0x6, 0xcd, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x9, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x20000005, 0x1003, 0x101, 0x1, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0xf, 0xc8, 0xee1, 0x0, 0xffff, 0x0, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x5, 0x10080, 0x6, 0x18, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.600528492s ago: executing program 1 (id=4589): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="7d717c1f8428280ab55a04c6325d699064905ef93ebd77e2efec9f53dda482c9ee2e65a7f14fb8c8ba86e1a48d2b6b6afa2f0b4ec3e4f1113ef51e3ee2e89096948f4605cb79bde9e3c35e2e8c5656e7f4e2839f750dbc54845ec35a6540a0ac354fc844277715dc45a624629d82528a3e868dc2152570c88ba2157e21a3fd45974bfeb026194d440b5318f8bc08da0d365fd550f1ddb920ad905618a7289482f74bc2e81ec9c0abf25663403ca2ad939860eef39a36235f55b27706f0bbf4a7596f3c713b3b5e96c8186e508bac854c98bcae2a79234c8f125fd1199bcc52695fe06ba43c32a91f2cabaec6291285220c54819496843f", 0xf7}, {&(0x7f0000002c40)="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", 0xf0a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="80", 0x1}], 0x1}}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 1.204709398s ago: executing program 37 (id=4589): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="7d717c1f8428280ab55a04c6325d699064905ef93ebd77e2efec9f53dda482c9ee2e65a7f14fb8c8ba86e1a48d2b6b6afa2f0b4ec3e4f1113ef51e3ee2e89096948f4605cb79bde9e3c35e2e8c5656e7f4e2839f750dbc54845ec35a6540a0ac354fc844277715dc45a624629d82528a3e868dc2152570c88ba2157e21a3fd45974bfeb026194d440b5318f8bc08da0d365fd550f1ddb920ad905618a7289482f74bc2e81ec9c0abf25663403ca2ad939860eef39a36235f55b27706f0bbf4a7596f3c713b3b5e96c8186e508bac854c98bcae2a79234c8f125fd1199bcc52695fe06ba43c32a91f2cabaec6291285220c54819496843f", 0xf7}, {&(0x7f0000002c40)="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", 0xf0a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="80", 0x1}], 0x1}}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 1.185505933s ago: executing program 2 (id=4591): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x200, 0x4, 0x1, r2}, &(0x7f0000000380)=0x10) 1.15241922s ago: executing program 7 (id=4592): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) read(r2, &(0x7f00000004c0)=""/4096, 0x1000) 981.655771ms ago: executing program 7 (id=4593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 603.732868ms ago: executing program 7 (id=4594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 467.456578ms ago: executing program 7 (id=4595): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) close(0x3) 241.724218ms ago: executing program 7 (id=4596): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 150.181198ms ago: executing program 8 (id=4597): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) 121.797823ms ago: executing program 2 (id=4598): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x7, 0x2, 0x7, 0xc, 0x2, 0xf37}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1fb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 0s ago: executing program 2 (id=4599): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) kernel console output (not intermixed with test programs): failed at offset 19/41 [ 429.068302][ T10] thrustmaster 0003:044F:B651.0060: parse failed [ 429.075171][ T10] thrustmaster 0003:044F:B651.0060: probe with driver thrustmaster failed with error -22 [ 429.160729][ T5936] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 429.259404][ T808] usb 1-1: USB disconnect, device number 76 [ 429.323926][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.343475][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.362288][ T5936] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 429.371662][ T5936] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 429.384191][ T5936] usb 7-1: Manufacturer: syz [ 429.398251][ T5936] usb 7-1: config 0 descriptor?? [ 429.410684][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 429.570745][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 429.578691][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.586999][ T10] usb 3-1: config 0 has no interface number 0 [ 429.595928][ T10] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 429.622330][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 429.644835][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 429.656994][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.675922][ T10] usb 3-1: config 0 descriptor?? [ 429.713824][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 429.916470][ T808] usb 3-1: USB disconnect, device number 83 [ 430.000872][ T5932] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 430.150668][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 430.158688][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.170361][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.181354][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 430.188059][ T5932] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 430.197396][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.213890][ T5932] usb 2-1: config 0 descriptor?? [ 430.463318][ T5936] uclogic 0003:256C:006D.0061: failed retrieving string descriptor #100: -71 [ 430.492039][ T5936] uclogic 0003:256C:006D.0061: failed retrieving pen parameters: -71 [ 430.501959][ T5936] uclogic 0003:256C:006D.0061: failed probing pen v1 parameters: -71 [ 430.512023][ T5936] uclogic 0003:256C:006D.0061: failed probing parameters: -71 [ 430.522106][ T5936] uclogic 0003:256C:006D.0061: probe with driver uclogic failed with error -71 [ 430.537711][ T5936] usb 7-1: USB disconnect, device number 34 [ 430.632902][ T5932] hid (null): unknown global tag 0x7d [ 430.638467][ T5932] hid (null): report_id 2747394877 is invalid [ 430.658640][ T5932] hid (null): unknown global tag 0xe [ 430.666225][ T5932] hid (null): report_id 3315148781 is invalid [ 430.713222][T14479] loop5: detected capacity change from 0 to 2640 [ 430.720444][T14479] buffer_io_error: 11 callbacks suppressed [ 430.720461][T14479] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.738974][T14479] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.747540][T14479] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.755636][T14479] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.763745][T14479] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.775392][T14479] loop5: unable to read partition table [ 430.783288][T14479] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 430.784047][T14480] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 430.801005][T14480] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 430.814841][T14480] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 430.826499][T14480] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 430.839372][T14480] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 430.841191][ T5936] usb 2-1: USB disconnect, device number 74 [ 431.053733][T14484] ªªªªªª: renamed from vlan0 (while UP) [ 431.269623][T14495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3576'. [ 431.614057][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 431.709448][T14512] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3584'. [ 431.775458][ T10] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 431.785465][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.797800][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.808890][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.823516][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.840673][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.863737][ T10] usb 7-1: config 0 descriptor?? [ 432.297145][ T10] plantronics 0003:047F:FFFF.0063: reserved main item tag 0xd [ 432.316776][ T10] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 432.563832][T14537] Invalid argument reading file caps for ./file0 [ 432.580271][ T10] usb 7-1: USB disconnect, device number 35 [ 432.668427][T14541] loop5: detected capacity change from 0 to 4096 [ 433.142441][T14553] loop5: detected capacity change from 0 to 2640 [ 433.158485][T14553] ldm_validate_partition_table(): Disk read failed. [ 433.168316][T14553] Dev loop5: unable to read RDB block 0 [ 433.180231][T14553] loop5: unable to read partition table [ 433.213022][T14553] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 433.506021][T14556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.514968][T14556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.521647][T14556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.528139][T14556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.534704][T14556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.541188][T14556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.547685][T14556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.554203][T14556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.560798][T14556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.567313][T14556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 435.220644][ T29] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 435.362021][T13068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.380759][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 435.396658][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 435.421592][ T29] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 435.458638][ T29] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 435.490283][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.512811][ T29] usb 2-1: Product: syz [ 435.527027][ T29] usb 2-1: Manufacturer: syz [ 435.540957][ T29] usb 2-1: SerialNumber: syz [ 435.687264][T13068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.799292][ T29] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 435.812236][ T29] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 435.923244][T13068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.976571][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.999691][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.009886][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.023561][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.031866][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.115798][T13068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.201902][ T29] usb 2-1: 2:1 : invalid Cluster Descriptor size [ 436.442489][ T5936] usb 2-1: USB disconnect, device number 75 [ 436.572631][T13068] bridge_slave_1: left allmulticast mode [ 436.583004][T13068] bridge_slave_1: left promiscuous mode [ 436.597796][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.634635][T13068] bridge_slave_0: left allmulticast mode [ 436.657524][T13068] bridge_slave_0: left promiscuous mode [ 436.679578][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.749399][T13068] dvmrp0: left allmulticast mode [ 437.293492][T13068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.316850][T13068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.328410][T13068] bond0 (unregistering): Released all slaves [ 437.330707][ T5932] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 437.364111][T14579] chnl_net:caif_netlink_parms(): no params data found [ 437.563731][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 437.574786][ T5932] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 437.619060][ T5932] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.723309][ T5932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 437.784500][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 437.833994][ T5932] usb 3-1: Product: syz [ 437.845952][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.847024][T14623] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3625'. [ 437.857982][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.873179][ T5932] usb 3-1: Manufacturer: syz [ 437.891082][ T5932] usb 3-1: SerialNumber: syz [ 437.903150][T14579] bridge_slave_0: entered allmulticast mode [ 437.928265][T14579] bridge_slave_0: entered promiscuous mode [ 437.954156][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.966383][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.003980][T14579] bridge_slave_1: entered allmulticast mode [ 438.032985][T14579] bridge_slave_1: entered promiscuous mode [ 438.083074][ T5850] Bluetooth: hci3: command tx timeout [ 438.133414][ T5932] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 438.355320][ T5932] usb 3-1: USB disconnect, device number 84 [ 438.445312][T14579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.588252][T14602] usblp0: removed [ 438.602249][T14579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.843381][T14579] team0: Port device team_slave_0 added [ 438.865003][T14579] team0: Port device team_slave_1 added [ 439.068822][T14579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.091672][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.178583][T14579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.240131][T13068] hsr_slave_0: left promiscuous mode [ 439.260200][T13068] hsr_slave_1: left promiscuous mode [ 439.266683][T13068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.276938][T13068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.287755][T13068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.302213][T13068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.336610][T13068] veth1_macvtap: left promiscuous mode [ 439.350313][T13068] veth0_macvtap: left promiscuous mode [ 439.363660][T13068] veth1_vlan: left promiscuous mode [ 439.375913][T13068] : left promiscuous mode [ 439.799663][T13068] team0 (unregistering): Port device team_slave_1 removed [ 439.816936][T13068] team0 (unregistering): Port device team_slave_0 removed [ 439.939457][T14579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.946966][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.973647][ T5936] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 439.982143][T14579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.145226][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.161627][ T5850] Bluetooth: hci3: command tx timeout [ 440.167512][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 440.167550][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.167573][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 440.167618][ T5936] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 440.167641][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.206473][ T5936] usb 7-1: config 0 descriptor?? [ 440.327119][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.333808][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.424318][T14579] hsr_slave_0: entered promiscuous mode [ 440.432809][T14579] hsr_slave_1: entered promiscuous mode [ 440.459851][T14579] debugfs: 'hsr0' already exists in 'hsr' [ 440.468385][T14579] Cannot create hsr debugfs directory [ 440.534565][ T5936] usbhid 7-1:0.0: can't add hid device: -71 [ 440.544918][ T5936] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 440.583900][ T5936] usb 7-1: USB disconnect, device number 36 [ 440.759311][T13068] IPVS: stop unused estimator thread 0... [ 440.809116][T14683] serio: Serial port ptm0 [ 441.090922][ T5936] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 441.260685][ T5936] usb 7-1: Using ep0 maxpacket: 32 [ 441.270264][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.304488][T14579] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 441.310020][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.340665][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.345105][T14579] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 441.380728][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 441.410037][T14579] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 441.418068][ T5936] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 441.437492][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.451953][T14579] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 441.463936][ T5936] usb 7-1: config 0 descriptor?? [ 441.531086][T14708] syzkaller1: entered promiscuous mode [ 441.540376][T14708] syzkaller1: entered allmulticast mode [ 441.851799][T14579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.884458][ T5936] hid_parser_main: 427 callbacks suppressed [ 441.884485][ T5936] betop 0003:20BC:5500.0064: unknown main item tag 0x3 [ 441.887687][T14579] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.914619][ T5936] betop 0003:20BC:5500.0064: item fetching failed at offset 2/5 [ 441.938436][ T5936] betop 0003:20BC:5500.0064: parse failed [ 441.944566][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.944711][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.968597][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.975866][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.976556][ T5936] betop 0003:20BC:5500.0064: probe with driver betop failed with error -22 [ 442.002395][T14728] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.009603][T14728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.188909][ T5915] usb 7-1: USB disconnect, device number 37 [ 442.241719][ T5850] Bluetooth: hci3: command tx timeout [ 442.485648][T14744] syzkaller1: entered promiscuous mode [ 442.500877][T14744] syzkaller1: entered allmulticast mode [ 442.675575][T14579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.890250][T14762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.362078][ T5908] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 443.476032][T14579] veth0_vlan: entered promiscuous mode [ 443.518706][T14579] veth1_vlan: entered promiscuous mode [ 443.536761][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.563911][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.590763][ T5908] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 443.602870][T14579] veth0_macvtap: entered promiscuous mode [ 443.610610][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.633544][ T5908] usb 7-1: config 0 descriptor?? [ 443.672014][T14579] veth1_macvtap: entered promiscuous mode [ 443.711711][T14579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.745480][T14579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.797990][ T1178] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.822681][ T1178] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.867165][ T1178] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.867259][ T1178] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.069280][ T5908] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 444.074835][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.094400][ T5908] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 444.101773][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.116449][ T5908] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 444.124164][ T5908] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 444.152697][ T5908] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 444.159819][ T5908] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 444.176087][ T5908] cp2112 0003:10C4:EA90.0065: unknown main item tag 0x0 [ 444.199999][ T5908] cp2112 0003:10C4:EA90.0065: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 444.206896][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.252043][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.310091][ T5908] cp2112 0003:10C4:EA90.0065: error requesting version [ 444.321607][ T5842] Bluetooth: hci3: command tx timeout [ 444.346700][ T5908] cp2112 0003:10C4:EA90.0065: probe with driver cp2112 failed with error -71 [ 444.360209][ T5908] usb 7-1: USB disconnect, device number 38 [ 444.402753][T14797] fido_id[14797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 444.940720][ T5908] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 444.975675][T14814] input: syz0 as /devices/virtual/input/input95 [ 445.014284][ T5856] udevd[5856]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 445.110813][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 445.119521][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 445.134252][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 445.147949][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 445.157172][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.165923][ T5908] usb 2-1: Product: syz [ 445.170222][ T5908] usb 2-1: Manufacturer: syz [ 445.175440][ T5908] usb 2-1: SerialNumber: syz [ 445.185569][ T5908] usb 2-1: config 0 descriptor?? [ 445.195112][ T5908] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 445.208129][ T5908] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 445.803032][ T5908] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 445.810234][ T5908] em28xx 2-1:0.0: Config register raw data: 0x41 [ 446.027179][ T9] usb 2-1: USB disconnect, device number 76 [ 446.046821][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 446.077229][ T9] em28xx 2-1:0.0: Freeing device [ 446.636351][T14840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input96 [ 447.553204][T14879] netlink: 'syz.7.3704': attribute type 11 has an invalid length. [ 447.561742][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3704'. [ 448.166109][T14903] syzkaller1: entered promiscuous mode [ 448.172244][T14903] syzkaller1: entered allmulticast mode [ 450.240718][T14792] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 450.436263][T14792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.448306][T14792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.459787][T14792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.473286][T14792] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.488279][T14792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.500001][T14792] usb 3-1: config 0 descriptor?? [ 450.923827][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.931579][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.939176][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.947874][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.955418][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.960730][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 450.963533][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.978410][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.986082][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 450.993714][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 451.001838][T14792] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 451.017668][T14792] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 451.142309][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.152673][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.163101][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.172813][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.180925][ T10] usb 7-1: SerialNumber: syz [ 451.205735][T14792] usb 3-1: USB disconnect, device number 85 [ 451.407844][ T10] usb 7-1: 0:2 : does not exist [ 451.479241][ T10] usb 7-1: USB disconnect, device number 39 [ 451.563836][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.664119][T15005] input: syz1 as /devices/virtual/input/input97 [ 452.175620][T15023] serio: Serial port ttyprintk [ 452.261240][T15030] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 452.548745][T15040] syzkaller1: entered promiscuous mode [ 452.565435][T15040] syzkaller1: entered allmulticast mode [ 453.002883][T15059] kvm: user requested TSC rate below hardware speed [ 453.068029][T15061] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 453.103668][T15061] CPU: 1 UID: 0 PID: 15061 Comm: syz.1.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.103703][T15061] Tainted: [L]=SOFTLOCKUP [ 453.103711][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 453.103723][T15061] Call Trace: [ 453.103731][T15061] [ 453.103740][T15061] dump_stack_lvl+0xe8/0x150 [ 453.103785][T15061] sysfs_warn_dup+0x8e/0xa0 [ 453.103813][T15061] sysfs_do_create_link_sd+0xc0/0x110 [ 453.103844][T15061] device_add_class_symlinks+0x1cf/0x240 [ 453.103879][T15061] device_add+0x475/0xb70 [ 453.103911][T15061] wiphy_register+0x1dc5/0x2dc0 [ 453.103954][T15061] ? __pfx_wiphy_register+0x10/0x10 [ 453.103983][T15061] ? __pfx_netdev_run_todo+0x10/0x10 [ 453.104011][T15061] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 453.104060][T15061] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 453.104095][T15061] ieee80211_register_hw+0x3cb7/0x4980 [ 453.104144][T15061] ? ieee80211_register_hw+0x1881/0x4980 [ 453.104210][T15061] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 453.104245][T15061] ? __asan_memset+0x22/0x50 [ 453.104276][T15061] ? __hrtimer_setup+0x1b7/0x260 [ 453.104295][T15061] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 453.104329][T15061] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 453.104393][T15061] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 453.104417][T15061] ? kstrndup+0xbf/0x160 [ 453.104452][T15061] hwsim_new_radio_nl+0xf6a/0x1c00 [ 453.104506][T15061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 453.104542][T15061] ? rcu_is_watching+0x15/0xb0 [ 453.104575][T15061] ? trace_kmalloc+0x2a/0xf0 [ 453.104613][T15061] ? __nla_parse+0x40/0x60 [ 453.104639][T15061] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 453.104666][T15061] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 453.104703][T15061] genl_family_rcv_msg_doit+0x22a/0x330 [ 453.104739][T15061] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 453.104783][T15061] ? bpf_lsm_capable+0x9/0x20 [ 453.104805][T15061] ? security_capable+0x7e/0x2c0 [ 453.104834][T15061] genl_rcv_msg+0x61c/0x7a0 [ 453.104870][T15061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.104895][T15061] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 453.104929][T15061] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.104956][T15061] ? __skb_clone+0x63/0x7a0 [ 453.104990][T15061] netlink_rcv_skb+0x232/0x4b0 [ 453.105013][T15061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.105050][T15061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.105067][T15061] ? genl_rcv+0x19/0x40 [ 453.105113][T15061] ? down_read+0x270/0x2e0 [ 453.105142][T15061] ? genl_rcv+0xd/0x40 [ 453.105170][T15061] genl_rcv+0x28/0x40 [ 453.105194][T15061] netlink_unicast+0x80f/0x9b0 [ 453.105236][T15061] ? __pfx_netlink_unicast+0x10/0x10 [ 453.105269][T15061] ? netlink_sendmsg+0x650/0xb40 [ 453.105288][T15061] ? skb_put+0x11b/0x210 [ 453.105310][T15061] netlink_sendmsg+0x813/0xb40 [ 453.105339][T15061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.105366][T15061] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.105390][T15061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.105425][T15061] ____sys_sendmsg+0x972/0x9f0 [ 453.105452][T15061] ? __might_fault+0xaf/0x130 [ 453.105488][T15061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.105526][T15061] ? import_iovec+0x73/0xa0 [ 453.105562][T15061] ___sys_sendmsg+0x2a5/0x360 [ 453.105587][T15061] ? __lock_acquire+0x6b5/0x2cf0 [ 453.105618][T15061] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.105649][T15061] ? futex_wake+0x4ac/0x580 [ 453.105701][T15061] ? __fget_files+0x2a/0x420 [ 453.105725][T15061] ? __fget_files+0x3a0/0x420 [ 453.105762][T15061] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.105791][T15061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.105828][T15061] ? rcu_is_watching+0x15/0xb0 [ 453.105870][T15061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.105893][T15061] do_syscall_64+0x15f/0xf80 [ 453.105917][T15061] ? trace_irq_disable+0x3b/0x140 [ 453.105942][T15061] ? clear_bhb_loop+0x40/0x90 [ 453.105966][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.105985][T15061] RIP: 0033:0x7f3ae879c819 [ 453.106006][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.106022][T15061] RSP: 002b:00007f3ae96c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.106055][T15061] RAX: ffffffffffffffda RBX: 00007f3ae8a16090 RCX: 00007f3ae879c819 [ 453.106071][T15061] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 453.106085][T15061] RBP: 00007f3ae8832c91 R08: 0000000000000000 R09: 0000000000000000 [ 453.106097][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.106109][T15061] R13: 00007f3ae8a16128 R14: 00007f3ae8a16090 R15: 00007fffb50293f8 [ 453.106143][T15061] [ 453.659547][T15065] syzkaller1: entered promiscuous mode [ 453.665154][T15065] syzkaller1: entered allmulticast mode [ 453.960671][ T5932] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 454.108524][T15085] Invalid argument reading file caps for ./file0 [ 454.130691][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 454.139520][ T5932] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.160446][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.195563][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.216509][ T5932] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.241192][ T5932] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.267215][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.519210][ T5932] usb 2-1: GET_CAPABILITIES returned 0 [ 454.525696][ T5932] usbtmc 2-1:16.0: can't read capabilities [ 454.621133][ T5936] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 454.745695][T15069] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 454.777149][ T5932] usb 2-1: USB disconnect, device number 77 [ 454.795361][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.823582][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.834368][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.849077][ T5936] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.860292][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.897374][ T5936] usb 3-1: config 0 descriptor?? [ 455.381188][ T5936] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 455.614270][ T5936] usb 3-1: USB disconnect, device number 86 [ 456.545515][T15167] overlayfs: upper fs does not support file handles, falling back to index=off. [ 456.792806][T15174] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input98 [ 457.305124][T15195] syzkaller1: entered promiscuous mode [ 457.320650][T15195] syzkaller1: entered allmulticast mode [ 457.559129][T15209] Invalid argument reading file caps for ./file0 [ 457.719967][T15210] block nbd7: shutting down sockets [ 457.896535][ T30] audit: type=1326 audit(1775561823.360:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.3834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66c519c819 code=0x0 [ 458.242288][ T5932] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 458.412948][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.442693][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.469689][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 458.495093][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.549422][ T5932] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.580033][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.632236][ T5932] usb 3-1: config 0 descriptor?? [ 459.095565][ T5932] hid_parser_main: 20 callbacks suppressed [ 459.095591][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.140668][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.162360][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.201047][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.212518][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.235241][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.253229][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 459.258435][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.293344][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.320485][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.347016][ T5932] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 459.384630][ T5932] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 459.436142][ T5932] usb 3-1: USB disconnect, device number 87 [ 459.451465][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 459.476356][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 459.507955][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 459.559363][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 459.585772][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 459.605946][T15271] fido_id[15271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 459.623680][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 459.640093][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 459.653551][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.670704][ T9] usb 2-1: Product: syz [ 459.678438][ T9] usb 2-1: Manufacturer: syz [ 459.703786][ T9] usb 2-1: SerialNumber: syz [ 459.716731][ T9] usb 2-1: config 0 descriptor?? [ 460.173246][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.204147][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.224804][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.242833][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.254564][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.273422][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.293304][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.307412][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.329177][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.346158][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.359663][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.376893][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.390210][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.406163][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.424378][T15282] input: syz1 as /devices/virtual/input/input100 [ 460.433033][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.450213][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.460375][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.473603][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.480314][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 460.486920][ T9] input input99: Timeout waiting for response from device. [ 460.528793][ T9] usb 2-1: USB disconnect, device number 78 [ 461.046801][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3859'. [ 461.440846][ T5936] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 461.632651][ T5936] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 461.656537][ T5936] usb 3-1: config index 0 descriptor too short (expected 72, got 55) [ 461.682186][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 461.704646][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 461.744732][ T5936] usb 3-1: config index 1 descriptor too short (expected 72, got 55) [ 461.762160][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 461.784677][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 461.812488][ T5936] usb 3-1: config index 2 descriptor too short (expected 72, got 55) [ 461.828203][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 461.852453][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 461.894214][ T5936] usb 3-1: config index 3 descriptor too short (expected 72, got 55) [ 461.911356][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 461.936526][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 461.947754][T15311] syzkaller1: entered promiscuous mode [ 461.980247][T15311] syzkaller1: entered allmulticast mode [ 461.984865][ T5936] usb 3-1: config index 4 descriptor too short (expected 72, got 55) [ 462.004529][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 462.037741][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 462.082691][ T5936] usb 3-1: config index 5 descriptor too short (expected 72, got 55) [ 462.103741][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 462.128729][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 462.175871][ T5936] usb 3-1: config index 6 descriptor too short (expected 72, got 55) [ 462.196009][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 462.227073][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 462.287237][ T5936] usb 3-1: config index 7 descriptor too short (expected 72, got 55) [ 462.315395][ T5936] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 462.343512][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 462.392151][ T5936] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.410799][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.436685][ T5936] usb 3-1: Product: syz [ 462.451505][ T5936] usb 3-1: Manufacturer: syz [ 462.466659][ T5936] usb 3-1: SerialNumber: syz [ 462.509046][ T5936] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 462.746652][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.759583][T15327] 9p: Invalid uid '0x00000000ffffffff' [ 463.126472][T15300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.151636][T15300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.404829][ T29] usb 3-1: USB disconnect, device number 88 [ 463.853970][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 463.873085][ T10] ath9k_htc: Failed to initialize the device [ 463.892330][ T29] usb 3-1: ath9k_htc: USB layer deinitialized [ 464.135115][T15356] pim6reg1: entered allmulticast mode [ 464.280836][ T5932] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 464.450662][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 464.463765][ T5932] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 464.487459][ T5932] usb 2-1: config 0 has no interface number 0 [ 464.501689][ T5932] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 464.516347][ T5932] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 464.531643][ T5932] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 464.542292][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.551295][ T5932] usb 2-1: Product: syz [ 464.559265][ T5932] usb 2-1: Manufacturer: syz [ 464.570610][ T5932] usb 2-1: SerialNumber: syz [ 464.605939][ T5932] usb 2-1: config 0 descriptor?? [ 464.627019][T15352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.645564][T15352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.709566][T15369] input: syz0 as /devices/virtual/input/input101 [ 464.885447][T15352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.902667][T15352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 465.543833][ T5932] asix 2-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 72 [ 465.620665][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 465.763203][ T9] usb 2-1: USB disconnect, device number 79 [ 465.804513][ T10] usb 7-1: config 0 has no interfaces? [ 465.810108][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 465.820718][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.832428][ T10] usb 7-1: config 0 descriptor?? [ 466.053489][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.062407][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.071812][ T5932] usb 7-1: USB disconnect, device number 40 [ 466.600829][T14792] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 466.761517][T15410] loop5: detected capacity change from 0 to 4095 [ 466.791971][T14792] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 466.825709][T14792] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 466.851504][T14792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.876699][T14792] usb 2-1: Product: syz [ 466.886340][T14792] usb 2-1: Manufacturer: syz [ 466.909933][T14792] usb 2-1: SerialNumber: syz [ 466.946339][T14792] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 467.461563][ T10] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 467.632768][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 467.648819][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.664551][ T10] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 467.677550][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.701776][ T10] usb 3-1: config 0 descriptor?? [ 467.721056][T15424] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 467.769891][T14792] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 467.797362][T14792] usb 2-1: USB disconnect, device number 80 [ 468.120838][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 468.146194][ T10] hid_parser_main: 5 callbacks suppressed [ 468.146220][ T10] a4tech 0003:09DA:0006.0069: unknown main item tag 0x3 [ 468.159552][ T10] a4tech 0003:09DA:0006.0069: unknown global tag 0xe [ 468.168428][ T10] a4tech 0003:09DA:0006.0069: item 0 1 1 14 parsing failed [ 468.176697][ T10] a4tech 0003:09DA:0006.0069: parse failed [ 468.182669][ T10] a4tech 0003:09DA:0006.0069: probe with driver a4tech failed with error -22 [ 468.270867][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 468.277800][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.288673][ T9] usb 7-1: config 0 has no interfaces? [ 468.298314][ T9] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 468.309138][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.320462][ T9] usb 7-1: Product: syz [ 468.325360][ T9] usb 7-1: Manufacturer: syz [ 468.330110][ T9] usb 7-1: SerialNumber: syz [ 468.340494][ T9] usb 7-1: config 0 descriptor?? [ 468.378940][ T5932] usb 3-1: USB disconnect, device number 89 [ 468.572361][ T9] usb 7-1: USB disconnect, device number 41 [ 468.979575][T15451] syzkaller1: entered promiscuous mode [ 468.985280][T15451] syzkaller1: entered allmulticast mode [ 469.540823][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 469.700648][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 469.707966][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.717242][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 469.729590][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.740031][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.748444][ T9] usb 2-1: Product: syz [ 469.752809][ T9] usb 2-1: Manufacturer: syz [ 469.757528][ T9] usb 2-1: SerialNumber: syz [ 469.988899][T15460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 470.011841][T15462] binder: 15461:15462 ioctl c0306201 2000000001c0 returned -22 [ 470.191542][T15470] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3940'. [ 470.380845][ T5936] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 470.522632][T14792] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 470.542571][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 470.551648][ T5936] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.566683][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.592252][ T5936] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 470.608900][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.623578][ T5936] usb 3-1: config 0 descriptor?? [ 470.680688][T14792] usb 7-1: Using ep0 maxpacket: 32 [ 470.700476][T14792] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 470.724434][T14792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.739050][T14792] usb 7-1: config 0 descriptor?? [ 470.748438][T14792] gspca_main: sunplus-2.14.0 probing 041e:400b [ 470.852142][ T9] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 470.880378][ T9] cdc_ncm 2-1:1.0: bind() failure [ 470.895319][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 470.905868][ T9] cdc_ncm 2-1:1.1: bind() failure [ 470.917798][ T9] usb 2-1: USB disconnect, device number 81 [ 471.060341][ T5936] mcp2221 0003:04D8:00DD.006A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 471.087026][T15488] overlayfs: failed to resolve './cgroup': -2 [ 471.483301][ T9] usb 3-1: USB disconnect, device number 90 [ 471.507568][T15500] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 471.732152][T15508] could not open pipe file descriptor [ 471.789188][T14792] gspca_sunplus: reg_w_riv err -71 [ 471.801789][T14792] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 471.815125][T14792] usb 7-1: USB disconnect, device number 42 [ 472.059730][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 472.299637][T15529] evm: overlay not supported [ 472.479473][T15535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.698643][T15547] netlink: 'syz.1.3977': attribute type 4 has an invalid length. [ 472.762878][T15550] syzkaller1: entered promiscuous mode [ 472.768544][T15550] syzkaller1: entered allmulticast mode [ 472.944389][ T29] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 473.114992][ T29] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 473.132335][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.143569][ T29] usb 7-1: Product: syz [ 473.147813][ T29] usb 7-1: Manufacturer: syz [ 473.153011][ T29] usb 7-1: SerialNumber: syz [ 473.163293][ T29] usb 7-1: config 0 descriptor?? [ 473.164231][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'. [ 473.589716][ T29] usb 7-1: Firmware: major: 12, minor: 178, hardware type: ATUSB (1) [ 473.792759][ T29] usb 7-1: failed to fetch extended address, random address set [ 473.812018][T14792] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 473.875997][ T29] usb 7-1: USB disconnect, device number 43 [ 473.989244][T14792] usb 2-1: Using ep0 maxpacket: 8 [ 474.018325][T14792] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 474.029673][T14792] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.041372][T14792] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.052198][T14792] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.064650][T14792] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.078244][T14792] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.087752][T14792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.321808][T14792] usb 2-1: usb_control_msg returned -32 [ 474.336411][T14792] usbtmc 2-1:16.0: can't read capabilities [ 474.684539][T15618] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 474.840672][ T5908] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 474.884306][ T5936] usb 2-1: USB disconnect, device number 82 [ 474.992973][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.003284][ T5908] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 475.013417][ T5908] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.031325][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 475.040720][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 475.048830][ T5908] usb 3-1: Product: syz [ 475.053960][ T5908] usb 3-1: Manufacturer: syz [ 475.058587][ T5908] usb 3-1: SerialNumber: syz [ 475.277364][ T5908] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 91 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 476.130659][ T5936] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 476.300708][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 476.315277][ T5936] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice= 0.40 [ 476.324842][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.334311][ T5936] usb 2-1: Product: syz [ 476.339717][ T5936] usb 2-1: Manufacturer: syz [ 476.344760][ T5936] usb 2-1: SerialNumber: syz [ 476.362803][ T5936] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 476.488474][ T5936] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 476.987949][T15655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.063123][ T5936] usb 2-1: USB disconnect, device number 83 [ 477.511525][T15667] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4029'. [ 477.544936][T15668] input: syz1 as /devices/virtual/input/input102 [ 477.661165][T15475] usb 3-1: USB disconnect, device number 91 [ 477.697158][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 477.745401][T15475] usblp0: removed [ 477.755015][ T9632] udevd[9632]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 477.822542][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 478.456596][T15698] syzkaller1: entered promiscuous mode [ 478.468939][T15700] input: syz0 as /devices/virtual/input/input103 [ 478.469068][T15698] syzkaller1: entered allmulticast mode [ 478.618902][T15705] syzkaller1: entered promiscuous mode [ 478.629263][T15705] syzkaller1: entered allmulticast mode [ 479.249219][T15735] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4057'. [ 479.520940][ T5908] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 479.627922][T15749] 9pnet: p9_errstr2errno: server reported unknown error [ 479.661507][T15754] netlink: 'syz.1.4067': attribute type 29 has an invalid length. [ 479.692970][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 479.704839][T15754] netlink: 'syz.1.4067': attribute type 29 has an invalid length. [ 479.717264][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 479.727638][ T5908] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 479.727822][T15754] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4067'. [ 479.736373][ T5908] usb 7-1: config 0 has no interface number 0 [ 479.759802][ T5908] usb 7-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 479.779440][ T5908] usb 7-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 479.793506][ T5908] usb 7-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 479.805350][ T5908] usb 7-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 479.815917][ T5908] usb 7-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 479.826267][ T5908] usb 7-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 479.837510][ T5908] usb 7-1: config 0 interface 122 has no altsetting 0 [ 479.848630][ T5908] usb 7-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 479.858205][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.868042][ T5908] usb 7-1: Product: syz [ 479.874366][ T5908] usb 7-1: Manufacturer: syz [ 479.879501][ T5908] usb 7-1: SerialNumber: syz [ 479.889517][ T5908] usb 7-1: config 0 descriptor?? [ 479.897102][T15737] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 479.906580][T15737] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 480.152421][ T5908] pl2303 7-1:0.122: pl2303 converter detected [ 480.176694][ T5908] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 480.216842][ T5908] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 480.236455][ T5908] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 480.259602][ T5908] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 480.303291][ T5908] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 480.316558][ T5908] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 480.343962][ T5908] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 480.353288][ T5908] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 480.362962][ T5908] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 480.375492][ T5908] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 480.401516][ T5908] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 480.427256][ T5908] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 480.444499][ T5908] usb 7-1: USB disconnect, device number 44 [ 480.482924][ T5908] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 480.516434][ T5908] pl2303 7-1:0.122: device disconnected [ 480.585784][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4076'. [ 480.606286][T15780] block nbd1: Unsupported socket: should be TCP or UNIX. [ 480.641860][T14792] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 480.670316][T14792] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 481.564778][T15832] netlink: 'syz.2.4081': attribute type 3 has an invalid length. [ 481.881136][T15783] hid-generic 0000:0000:0000.006B: pid 15783 passed too large report [ 481.922519][ T9] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 481.971566][T15475] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 481.986585][ T9] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 482.160747][T15475] usb 7-1: Using ep0 maxpacket: 16 [ 482.170177][T15475] usb 7-1: unable to get BOS descriptor or descriptor too short [ 482.186428][T15475] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 482.212897][T15475] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 482.230716][T15475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.238933][T15475] usb 7-1: Product: syz [ 482.245020][T15475] usb 7-1: Manufacturer: syz [ 482.249807][T15475] usb 7-1: SerialNumber: syz [ 482.299724][T15852] input: syz1 as /devices/virtual/input/input104 [ 482.307236][T15852] input: failed to attach handler leds to device input104, error: -6 [ 482.506462][T15475] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 482.516591][T15475] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 482.684214][T15863] bridge0: port 3(erspan0) entered blocking state [ 482.692470][T15863] bridge0: port 3(erspan0) entered disabled state [ 482.699288][T15863] erspan0: entered allmulticast mode [ 482.713874][T15863] erspan0: entered promiscuous mode [ 482.930254][T15475] usb 7-1: 2:1 : can't get Cluster Descriptor [ 482.976364][T15871] net_ratelimit: 13068 callbacks suppressed [ 482.976384][T15871] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.186119][T15475] usb 7-1: USB disconnect, device number 45 [ 483.640952][ T5936] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 483.814155][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 483.825989][ T5936] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 483.850788][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.858937][ T5936] usb 2-1: Product: syz [ 483.874216][ T5936] usb 2-1: Manufacturer: syz [ 483.878996][ T5936] usb 2-1: SerialNumber: syz [ 483.888813][ T5936] usb 2-1: config 0 descriptor?? [ 483.903740][ T5936] gspca_main: spca508-2.14.0 probing 041e:4018 [ 484.130770][ T5936] gspca_spca508: reg_read err -32 [ 484.146197][ T5936] gspca_spca508: reg_read err -32 [ 484.158871][ T5936] gspca_spca508: reg_read err -32 [ 484.370972][ T5936] gspca_spca508: reg_read err -71 [ 484.393330][ T5936] gspca_spca508: reg write: error -71 [ 484.410852][ T5936] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 484.433319][T15922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.440823][ T5936] usb 2-1: USB disconnect, device number 84 [ 484.735690][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4121'. [ 484.748469][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4121'. [ 484.879940][T15939] syzkaller1: entered promiscuous mode [ 484.887861][T15939] syzkaller1: entered allmulticast mode [ 485.113898][T15948] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4128'. [ 485.899199][T15978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 485.942763][T15978] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 486.354145][T15991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.521038][ T5936] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 486.690712][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 486.707222][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.729653][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.765290][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 486.810772][ T5936] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 486.821757][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.838803][ T5936] usb 7-1: config 0 descriptor?? [ 487.369968][ T5936] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.006D/input/input105 [ 487.464867][T16020] syzkaller1: entered promiscuous mode [ 487.482607][T16020] syzkaller1: entered allmulticast mode [ 487.526542][ T5936] microsoft 0003:045E:07DA.006D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 487.624544][ T5936] usb 7-1: USB disconnect, device number 46 [ 487.782915][T16023] fido_id[16023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 487.826381][T14792] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 488.002315][T14792] usb 2-1: Using ep0 maxpacket: 8 [ 488.022679][T14792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.057131][T14792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 488.091762][T14792] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 488.105211][T14792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.120382][T14792] usb 2-1: config 0 descriptor?? [ 488.416342][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4170'. [ 488.546529][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x2 [ 488.566235][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.584433][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.598672][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.614300][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.635319][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.655231][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.680299][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.688357][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.691506][T16047] syzkaller1: entered promiscuous mode [ 488.699173][T14792] sony 0003:054C:0268.006E: unknown main item tag 0x0 [ 488.720895][T16047] syzkaller1: entered allmulticast mode [ 488.731179][T14792] sony 0003:054C:0268.006E: hiddev0,hidraw0: USB HID vff.fc Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 488.763068][T14792] sony 0003:054C:0268.006E: failed to claim input [ 488.799440][T14792] usb 2-1: USB disconnect, device number 85 [ 488.864016][T16050] fido_id[16050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 489.737355][T16071] netlink: 762 bytes leftover after parsing attributes in process `syz.6.4182'. [ 489.890939][ T5936] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 490.062905][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.090784][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.112174][ T5936] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 490.123557][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.139207][ T5936] usb 2-1: config 0 descriptor?? [ 490.264546][T16083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4187'. [ 490.594732][ T5936] playstation 0003:054C:0DF2.006F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 490.976441][ T5936] playstation 0003:054C:0DF2.006F: Failed to retrieve feature with reportID 32: -32 [ 490.991156][ T5936] playstation 0003:054C:0DF2.006F: Failed to retrieve DualSense firmware info: -32 [ 491.008665][ T5936] playstation 0003:054C:0DF2.006F: Failed to get firmware info from DualSense [ 491.021210][ T5936] playstation 0003:054C:0DF2.006F: Failed to create dualsense. [ 491.040462][ T5936] playstation 0003:054C:0DF2.006F: probe with driver playstation failed with error -32 [ 491.068251][ T5936] usb 2-1: USB disconnect, device number 86 [ 491.876312][T16116] syzkaller1: entered promiscuous mode [ 491.898510][T16116] syzkaller1: entered allmulticast mode [ 492.572375][T15475] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 492.751747][T15475] usb 3-1: Using ep0 maxpacket: 32 [ 492.774757][T15475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.809330][T15475] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.840574][T15475] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 492.854773][T16141] loop5: detected capacity change from 0 to 7 [ 492.860003][T15475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.913780][T15475] usb 3-1: config 0 descriptor?? [ 492.939212][T16141] Dev loop5: unable to read RDB block 7 [ 492.954306][T16141] loop5: unable to read partition table [ 492.967292][T16141] loop5: partition table beyond EOD, truncated [ 492.985966][T16141] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 493.131424][ T5932] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 493.315045][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.315108][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.317022][ T5932] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.381008][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.402609][ T5932] usb 2-1: SerialNumber: syz [ 493.411434][T15475] savu 0003:1E7D:2D5A.0070: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 493.664793][ T5932] usb 2-1: 0:2 : does not exist [ 493.714847][ T5908] usb 3-1: USB disconnect, device number 92 [ 493.826671][ T5932] usb 2-1: USB disconnect, device number 87 [ 493.908343][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.349730][T16169] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4222'. [ 494.385441][T16169] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4222'. [ 494.950795][ T5932] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 495.080753][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 495.100746][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 495.115278][ T5932] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 495.125495][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.135238][ T5932] usb 3-1: Product: syz [ 495.139494][ T5932] usb 3-1: Manufacturer: syz [ 495.144256][ T5932] usb 3-1: SerialNumber: syz [ 495.152331][ T5932] usb 3-1: config 0 descriptor?? [ 495.240817][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 495.248042][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.259176][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.271862][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.291725][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 495.306398][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.322894][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.334136][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.344280][ T9] usb 7-1: Manufacturer: syz [ 495.354231][ T9] usb 7-1: config 0 descriptor?? [ 495.377784][ T5932] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 495.713478][ T9] rc_core: IR keymap rc-hauppauge not found [ 495.727614][ T9] Registered IR keymap rc-empty [ 495.732789][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 495.751552][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 495.783512][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 495.803286][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input106 [ 495.826839][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 495.862366][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 495.892350][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 495.921241][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 495.961648][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 495.991174][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 496.013257][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 496.051019][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 496.071035][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 496.090905][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 496.114739][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 496.125280][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 496.142191][ T9] usb 7-1: USB disconnect, device number 47 [ 496.208059][ T5932] usb write operation failed. (-71) [ 496.233566][ T5932] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 496.245214][ T5932] dvbdev: DVB: registering new adapter (Terratec H7) [ 496.252890][ T5932] usb 3-1: media controller created [ 496.259763][ T5932] usb read operation failed. (-71) [ 496.266477][ T5932] usb write operation failed. (-71) [ 496.277185][ T5932] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 496.289269][ T5932] usb 3-1: USB disconnect, device number 93 [ 496.920650][ T5932] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 497.080656][ T5932] usb 7-1: Using ep0 maxpacket: 8 [ 497.087979][ T5932] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 497.097418][ T5932] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 497.108935][ T5932] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 497.120370][ T5932] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 497.132529][ T5932] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 497.143485][ T5932] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.157117][ T5932] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.166591][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.201707][ T5936] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 497.212674][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4246'. [ 497.371370][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 497.381352][ T5936] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 497.386699][ T5932] usb 7-1: usb_control_msg returned -32 [ 497.392910][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.396718][ T5932] usbtmc 7-1:16.0: can't read capabilities [ 497.407365][ T5936] usb 3-1: config 0 descriptor?? [ 497.658974][ T5936] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 497.682820][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.713801][ T5936] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 497.732331][ T5936] usb 3-1: media controller created [ 497.764508][T16244] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 497.775527][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.794154][ T5932] usb 7-1: USB disconnect, device number 48 [ 497.845901][T16248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4255'. [ 497.872637][ T5936] az6027: usb out operation failed. (-71) [ 497.889299][ T5936] az6027: usb out operation failed. (-71) [ 497.899468][ T5936] stb0899_attach: Driver disabled by Kconfig [ 497.917335][ T5936] az6027: no front-end attached [ 497.917335][ T5936] [ 497.941012][ T5936] az6027: usb out operation failed. (-71) [ 497.952587][ T5936] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 497.978033][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input107 [ 498.017111][ T5936] dvb-usb: schedule remote query interval to 400 msecs. [ 498.025853][ T5936] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 498.044546][ T5936] usb 3-1: USB disconnect, device number 94 [ 498.189337][ T5936] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 498.200833][T14792] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 498.365225][T14792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 498.380963][T14792] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 498.393707][T14792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.403387][T14792] usb 2-1: Product: syz [ 498.408156][T14792] usb 2-1: Manufacturer: syz [ 498.413480][T14792] usb 2-1: SerialNumber: syz [ 498.559927][T15799] Bluetooth: hci4: Frame reassembly failed (-84) [ 499.236057][T14792] usb 2-1: current rate 1070888 is different from the runtime rate 48000 [ 499.445879][ T5936] usb 2-1: USB disconnect, device number 88 [ 500.150829][ T5932] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 500.300904][T14792] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 500.310001][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.321509][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.331385][ T5932] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.344377][ T5932] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.353934][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.364289][ T5932] usb 7-1: config 0 descriptor?? [ 500.474747][T14792] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.484954][T14792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.494223][T14792] usb 2-1: Product: syz [ 500.499018][T14792] usb 2-1: Manufacturer: syz [ 500.504800][T14792] usb 2-1: SerialNumber: syz [ 500.513510][T14792] usb 2-1: config 0 descriptor?? [ 500.564137][ T5842] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 500.567254][ T5850] Bluetooth: hci4: command 0x1003 tx timeout [ 500.667659][T16291] syzkaller1: entered promiscuous mode [ 500.673424][T16291] syzkaller1: entered allmulticast mode [ 500.728751][T14792] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 500.986136][ T5932] usbhid 7-1:0.0: can't add hid device: -71 [ 500.992620][ T5932] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 501.004136][ T5932] usb 7-1: USB disconnect, device number 49 [ 501.080873][ T5936] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 501.230735][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 501.238092][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 501.248068][ T5936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.258671][ T5936] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 501.270398][ T5936] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 501.281417][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.289489][ T5936] usb 3-1: Product: syz [ 501.294297][ T5936] usb 3-1: Manufacturer: syz [ 501.299169][ T5936] usb 3-1: SerialNumber: syz [ 501.444426][T16297] input: syz0 as /devices/virtual/input/input108 [ 501.542022][T14792] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 501.592824][T14792] usb 2-1: USB disconnect, device number 89 [ 501.768763][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.775647][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.775893][ T5936] usb 3-1: USB disconnect, device number 95 [ 502.740758][T14792] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 502.890740][ T29] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 502.898468][T14792] usb 3-1: Using ep0 maxpacket: 16 [ 502.905902][T14792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.917570][T14792] usb 3-1: config 0 interface 0 has no altsetting 0 [ 502.927498][T14792] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 502.937067][T14792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.945461][T14792] usb 3-1: Product: syz [ 502.949712][T14792] usb 3-1: Manufacturer: syz [ 502.954741][T14792] usb 3-1: SerialNumber: syz [ 502.962957][T14792] usb 3-1: config 0 descriptor?? [ 503.050705][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 503.057674][ T29] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 503.066510][ T29] usb 2-1: config 1 has no interface number 0 [ 503.072948][ T29] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 503.083335][ T29] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 503.093764][ T29] usb 2-1: config 1 interface 105 has no altsetting 0 [ 503.102692][ T29] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 503.112215][ T29] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 503.121134][ T29] usb 2-1: Product: syz [ 503.125580][ T29] usb 2-1: Manufacturer: syz [ 503.140612][ T29] usb 2-1: SerialNumber: syz [ 503.156711][T16329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 503.175963][T16329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 503.196299][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 503.210203][T14792] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input109 [ 503.244724][T14792] imon:send_packet: packet tx failed (-71) [ 503.270730][T14792] imon 3-1:0.0: panel buttons/knobs setup failed [ 503.352373][T14792] rc_core: IR keymap rc-imon-pad not found [ 503.358482][T14792] Registered IR keymap rc-empty [ 503.364277][T14792] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 503.387346][T14792] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 503.427571][T14792] imon:send_packet: packet tx failed (-71) [ 503.462891][T14792] imon 3-1:0.0: remote input dev register failed [ 503.477175][T14792] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 503.547561][ T30] audit: type=1326 audit(1775561869.010:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.6.4292" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66c519c819 code=0x0 [ 503.549813][T14792] imon 3-1:0.0: unable to initialize intf0, err 0 [ 503.579355][T16337] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4293'. [ 503.580100][T14792] imon:imon_probe: failed to initialize context! [ 503.599234][T14792] imon 3-1:0.0: unable to register, err -19 [ 503.603003][T16337] gretap0: entered promiscuous mode [ 503.614941][T16329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 503.633363][T16337] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4293'. [ 503.649582][T14792] usb 3-1: USB disconnect, device number 96 [ 503.650838][T16337] 0ªî{X¹¦: renamed from gretap0 [ 503.657830][T16329] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 503.674207][T16337] 0ªî{X¹¦: left promiscuous mode [ 503.679392][T16337] 0ªî{X¹¦: entered allmulticast mode [ 503.696893][T16337] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 503.825699][T16341] syzkaller1: entered promiscuous mode [ 503.832389][T16341] syzkaller1: entered allmulticast mode [ 504.012227][T14792] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 504.183571][T14792] usb 3-1: Using ep0 maxpacket: 16 [ 504.198973][T16350] syzkaller1: entered promiscuous mode [ 504.203328][T14792] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.204799][T16350] syzkaller1: entered allmulticast mode [ 504.221279][T14792] usb 3-1: config 0 interface 0 has no altsetting 0 [ 504.245453][T14792] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 504.274156][T14792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.282808][T14792] usb 3-1: Product: syz [ 504.289436][ T29] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 504.302672][T14792] usb 3-1: Manufacturer: syz [ 504.312150][T14792] usb 3-1: SerialNumber: syz [ 504.317046][ T29] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 504.333177][T14792] usb 3-1: config 0 descriptor?? [ 504.377683][ T29] aqc111 2-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 504.401018][ T29] usb 2-1: USB disconnect, device number 90 [ 504.455664][ T29] aqc111 2-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 504.601065][ T29] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 504.624750][ T29] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 504.671061][ T29] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 504.686595][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4301'. [ 504.744133][T14792] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input111 [ 504.889649][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4303'. [ 504.921745][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 505.138482][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 505.146663][T14792] imon:send_packet: packet tx failed (-71) [ 505.182787][T14792] imon 3-1:0.0: panel buttons/knobs setup failed [ 505.297395][T14792] rc_core: IR keymap rc-imon-pad not found [ 505.312829][T14792] Registered IR keymap rc-empty [ 505.318184][T14792] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 505.352747][T14792] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 505.388701][T14792] imon:send_packet: packet tx failed (-71) [ 505.422001][T14792] imon 3-1:0.0: remote input dev register failed [ 505.437168][T14792] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 505.450701][ T5894] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 505.501499][T14792] imon 3-1:0.0: unable to initialize intf0, err 0 [ 505.514029][T14792] imon:imon_probe: failed to initialize context! [ 505.522112][T14792] imon 3-1:0.0: unable to register, err -19 [ 505.556669][T14792] usb 3-1: USB disconnect, device number 97 [ 505.622736][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 505.649531][ T5894] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.691251][ T5894] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 505.724794][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 505.752403][ T5894] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 505.766550][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.795530][ T5894] usb 2-1: Product: syz [ 505.810634][ T5894] usb 2-1: Manufacturer: syz [ 505.823363][ T5894] usb 2-1: SerialNumber: syz [ 505.850046][ T5894] usb 2-1: config 0 descriptor?? [ 505.962787][ T29] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 506.123910][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 506.137536][ T29] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 506.167953][ T29] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.170180][T16398] netlink: 'syz.7.4318': attribute type 58 has an invalid length. [ 506.200098][ T29] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.226444][ T29] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 506.244800][ T29] usb 7-1: config 7 interface 0 has no altsetting 0 [ 506.251727][ T29] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 506.260986][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.282342][ T5894] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 506.574023][T16407] vivid-000: disconnect [ 506.582242][T16406] vivid-000: reconnect [ 506.713473][ T29] hid (null): invalid report_count -599907494 [ 506.719862][ T29] hid (null): unknown global tag 0xc [ 506.750353][ T29] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0071/input/input113 [ 506.883807][ T29] kye 0003:0458:5010.0071: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 506.952193][ T5894] usb 2-1: USB disconnect, device number 91 [ 506.976408][ T29] usb 7-1: USB disconnect, device number 50 [ 507.156952][T16420] fido_id[16420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 507.490163][T16433] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4330'. [ 507.810752][ T29] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 507.973519][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.003700][ T29] usb 3-1: config 0 has no interface number 0 [ 508.014429][ T29] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 508.027218][ T29] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.038914][ T29] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.054644][ T29] usb 3-1: config 0 interface 1 has no altsetting 0 [ 508.061374][ T29] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 508.070671][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.086328][ T29] usb 3-1: config 0 descriptor?? [ 508.242804][ T5936] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 508.413960][ T5936] usb 7-1: Using ep0 maxpacket: 8 [ 508.422557][ T5936] usb 7-1: unable to get BOS descriptor or descriptor too short [ 508.433915][ T5936] usb 7-1: config 1 has an invalid interface number: 22 but max is 2 [ 508.446198][ T5936] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.456895][ T5936] usb 7-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 508.468776][ T5936] usb 7-1: config 1 has no interface number 3 [ 508.475324][ T5936] usb 7-1: too many endpoints for config 1 interface 22 altsetting 224: 96, using maximum allowed: 30 [ 508.487060][ T5936] usb 7-1: config 1 interface 22 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 508.500915][ T5936] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.514618][ T5936] usb 7-1: config 1 interface 22 has no altsetting 0 [ 508.522205][ T29] hid (null): invalid report_count 252767622 [ 508.522560][ T5936] usb 7-1: config 1 interface 2 has no altsetting 0 [ 508.538238][ T5936] usb 7-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 508.549147][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.557290][ T5936] usb 7-1: Product: syz [ 508.562555][ T5936] usb 7-1: Manufacturer: syz [ 508.567396][ T5936] usb 7-1: SerialNumber: syz [ 508.729023][ T29] input: HID 145f:0212 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0072/input/input114 [ 508.813457][ T5936] usb 7-1: 1:1 : no cluster descriptor [ 508.824276][ T5936] usb 7-1: selecting invalid altsetting 0 [ 508.825985][ T29] input: HID 145f:0212 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0072/input/input115 [ 508.897931][ T29] uclogic 0003:145F:0212.0072: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.2-1/input1 [ 508.966574][ T29] usb 3-1: USB disconnect, device number 98 [ 509.076959][T16470] fido_id[16470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 509.124080][ T5936] usb 7-1: USB disconnect, device number 51 [ 509.233536][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.739504][T16484] syzkaller1: entered promiscuous mode [ 509.745390][T16484] syzkaller1: entered allmulticast mode [ 510.080213][T16494] netlink: 'syz.2.4359': attribute type 21 has an invalid length. [ 510.096820][T16494] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4359'. [ 510.731136][ T5894] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 510.758382][T16523] syzkaller1: entered promiscuous mode [ 510.764590][T16523] syzkaller1: entered allmulticast mode [ 510.896342][ T5894] usb 3-1: config 1 interface 0 has no altsetting 0 [ 510.917462][ T5894] usb 3-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 510.937499][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.950239][ T5894] usb 3-1: Product: syz [ 510.954960][ T5894] usb 3-1: Manufacturer: syz [ 510.959784][ T5894] usb 3-1: SerialNumber: syz [ 511.153172][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4375'. [ 511.166544][T16532] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4375'. [ 511.236649][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input116 [ 511.330297][ T5196] bcm5974 3-1:1.0: could not read from device [ 511.349067][ T5196] bcm5974 3-1:1.0: could not read from device [ 511.397426][ T5894] usb 3-1: USB disconnect, device number 99 [ 511.410013][ T5196] bcm5974 3-1:1.0: could not read from device [ 511.449405][T16540] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4379'. [ 511.567571][T16544] autofs: Bad value for 'fd' [ 511.642690][T16547] syzkaller1: entered promiscuous mode [ 511.648367][T16547] syzkaller1: entered allmulticast mode [ 512.860813][ T5894] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 513.022319][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.062578][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 513.082984][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 513.111431][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.131808][ T5894] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.141238][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.167272][ T5894] usb 3-1: config 0 descriptor?? [ 513.597997][ T5894] hid_parser_main: 33 callbacks suppressed [ 513.598024][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.644996][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.663765][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.684316][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.699438][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.709801][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.725760][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.745809][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.757416][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.779514][ T5894] plantronics 0003:047F:FFFF.0073: unknown main item tag 0x0 [ 513.828105][ T5894] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 513.906930][ T5894] usb 3-1: USB disconnect, device number 100 [ 514.070075][T16621] fido_id[16621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 514.840885][T16649] tun0: tun_chr_ioctl cmd 2148553947 [ 514.861768][T16649] tun0: tun_chr_ioctl cmd 1074025673 [ 514.962396][ T29] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 515.049126][T16652] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4431'. [ 515.155981][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.176076][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.190050][T16643] atomic_op ffff88802c345998 conn xmit_atomic 0000000000000000 [ 515.209201][ T29] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 515.239353][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 515.247535][ T29] usb 3-1: SerialNumber: syz [ 515.462793][T16660] GUP no longer grows the stack in syz.6.4435 (16660): 200000004000-20000000a000 (200000002000) [ 515.474718][T16660] CPU: 0 UID: 0 PID: 16660 Comm: syz.6.4435 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.474754][T16660] Tainted: [L]=SOFTLOCKUP [ 515.474761][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.474774][T16660] Call Trace: [ 515.474783][T16660] [ 515.474792][T16660] dump_stack_lvl+0xe8/0x150 [ 515.474829][T16660] __get_user_pages+0x2378/0x2720 [ 515.474877][T16660] ? mtree_load+0x12a/0x780 [ 515.474916][T16660] get_user_pages_remote+0x2f6/0xab0 [ 515.474944][T16660] ? __pfx_mtree_load+0x10/0x10 [ 515.474978][T16660] ? __pfx_get_user_pages_remote+0x10/0x10 [ 515.475004][T16660] ? __access_remote_vm+0xa3/0x6f0 [ 515.475031][T16660] ? __access_remote_vm+0x42c/0x6f0 [ 515.475069][T16660] __access_remote_vm+0x222/0x6f0 [ 515.475107][T16660] ? __pfx___access_remote_vm+0x10/0x10 [ 515.475139][T16660] ? alloc_pages_noprof+0x13b/0x2a0 [ 515.475166][T16660] proc_pid_cmdline_read+0x419/0x7f0 [ 515.475199][T16660] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 515.475228][T16660] ? rw_verify_area+0x2a6/0x4d0 [ 515.475263][T16660] vfs_readv+0x587/0x840 [ 515.475290][T16660] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 515.475319][T16660] ? __pfx_vfs_readv+0x10/0x10 [ 515.475360][T16660] ? __fget_files+0x2a/0x420 [ 515.475390][T16660] ? __fget_files+0x3a0/0x420 [ 515.475415][T16660] ? __fget_files+0x2a/0x420 [ 515.475450][T16660] __x64_sys_preadv+0x19f/0x2a0 [ 515.475471][T16660] ? __pfx___se_sys_futex+0x10/0x10 [ 515.475501][T16660] ? __pfx___x64_sys_preadv+0x10/0x10 [ 515.475533][T16660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.475566][T16660] do_syscall_64+0x15f/0xf80 [ 515.475591][T16660] ? trace_irq_disable+0x3b/0x140 [ 515.475614][T16660] ? clear_bhb_loop+0x40/0x90 [ 515.475641][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.475661][T16660] RIP: 0033:0x7f66c519c819 [ 515.475680][T16660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.475696][T16660] RSP: 002b:00007f66c6045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 515.475719][T16660] RAX: ffffffffffffffda RBX: 00007f66c5415fa0 RCX: 00007f66c519c819 [ 515.475735][T16660] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 515.475748][T16660] RBP: 00007f66c5232c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 515.475762][T16660] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 515.475774][T16660] R13: 00007f66c5416038 R14: 00007f66c5415fa0 R15: 00007ffe95cc0f38 [ 515.475807][T16660] [ 515.477655][ T29] usb 3-1: 0:2 : does not exist [ 515.769665][ T29] usb 3-1: USB disconnect, device number 101 [ 515.816180][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.140786][ T5908] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 516.310609][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 516.322285][ T5908] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 516.339842][ T5908] usb 7-1: config 179 has no interface number 0 [ 516.348820][ T5908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 516.360053][ T5908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 516.371462][ T5908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 516.382672][ T5908] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 516.394472][ T5908] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 516.407958][ T5908] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 516.419613][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.433907][T16664] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 516.550815][T15475] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 516.675531][ T5908] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input117 [ 516.721422][T15475] usb 2-1: Using ep0 maxpacket: 32 [ 516.733210][T15475] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 516.753004][T15475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.778615][T15475] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 516.876247][T16664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.888407][T16664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.113445][ T5894] usb 7-1: USB disconnect, device number 52 [ 517.113549][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 517.128028][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 517.492082][T16683] netlink: 'syz.2.4444': attribute type 1 has an invalid length. [ 517.791698][T15475] gspca_nw80x: reg_w err -71 [ 517.797700][T15475] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 517.811495][T15475] usb 2-1: USB disconnect, device number 92 [ 518.001209][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4449'. [ 518.413573][T16708] syzkaller1: entered promiscuous mode [ 518.419253][T16708] syzkaller1: entered allmulticast mode [ 518.634411][T16715] pim6reg1: entered promiscuous mode [ 518.639877][T16715] pim6reg1: entered allmulticast mode [ 519.094447][T16727] kvm: kvm [16726]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 519.220796][T15475] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 519.236215][T16732] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 519.340145][T16739] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 519.393641][T15475] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.406425][T15475] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.418399][T15475] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 519.428443][T15475] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.450050][T15475] usb 7-1: config 0 descriptor?? [ 519.872164][T15475] hid_parser_main: 5 callbacks suppressed [ 519.872189][T15475] cm6533_jd 0003:0D8C:0022.0074: unknown main item tag 0x0 [ 519.886234][T15475] cm6533_jd 0003:0D8C:0022.0074: unknown main item tag 0x0 [ 519.896442][T15475] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0074/input/input118 [ 519.923399][T15475] cm6533_jd 0003:0D8C:0022.0074: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 520.084960][T14792] usb 7-1: USB disconnect, device number 53 [ 520.269676][T16752] pim6reg1: entered promiscuous mode [ 520.275879][T16752] pim6reg1: entered allmulticast mode [ 520.534964][T16762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.588653][T16764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4479'. [ 520.727522][T16766] kvm: user requested TSC rate below hardware speed [ 521.140734][ T5908] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 521.220947][ T29] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 521.301007][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 521.308430][ T5908] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 521.317798][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.328036][ T5908] usb 3-1: config 0 descriptor?? [ 521.380982][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 521.388762][ T29] usb 2-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.400072][ T29] usb 2-1: config 0 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.413312][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 521.420246][ T29] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 521.429808][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.441745][ T29] usb 2-1: config 0 descriptor?? [ 521.548919][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 521.567104][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.578110][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 521.585509][ T5908] usb 3-1: media controller created [ 521.617613][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.005477][ T29] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0075/input/input119 [ 522.024453][T16786] syzkaller1: entered promiscuous mode [ 522.070583][T16786] syzkaller1: entered allmulticast mode [ 522.168866][ T29] sony 0003:054C:03D5.0075: input,hidraw0: USB HID v0.08 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 522.371061][ T5908] az6027: usb out operation failed. (-71) [ 522.384933][T15815] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.411446][ T5908] stb0899_attach: Driver disabled by Kconfig [ 522.432043][ T5908] az6027: no front-end attached [ 522.432043][ T5908] [ 522.449466][ T5908] az6027: usb out operation failed. (-71) [ 522.462611][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 522.504942][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input120 [ 522.543355][ T5908] dvb-usb: schedule remote query interval to 400 msecs. [ 522.569544][ T5908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 522.595487][T14792] usb 2-1: USB disconnect, device number 93 [ 522.617938][ T5908] usb 3-1: USB disconnect, device number 102 [ 522.687658][T15815] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.818769][T16793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.836072][ T5908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 522.853122][T15815] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.014431][T15815] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.052289][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 523.072299][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 523.085075][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 523.097706][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 523.108872][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.423418][T16811] Bluetooth: hci1: invalid length 3, exp 2 for type 3 [ 523.455319][T16809] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 523.639837][T16796] chnl_net:caif_netlink_parms(): no params data found [ 523.858603][T15815] bridge_slave_1: left allmulticast mode [ 523.865386][T15815] bridge_slave_1: left promiscuous mode [ 523.872223][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.882172][T15815] bridge_slave_0: left allmulticast mode [ 523.887844][T15815] bridge_slave_0: left promiscuous mode [ 523.894805][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.117430][T15815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.126901][T15815] bond_slave_0: left promiscuous mode [ 524.135413][T15815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.145436][T15815] bond_slave_1: left promiscuous mode [ 524.153382][T15815] bond0 (unregistering): Released all slaves [ 524.164924][T16796] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.172370][T16796] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.179673][T16796] bridge_slave_0: entered allmulticast mode [ 524.187477][T16796] bridge_slave_0: entered promiscuous mode [ 524.197346][T16796] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.204983][T16796] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.212663][T16796] bridge_slave_1: entered allmulticast mode [ 524.239147][T16796] bridge_slave_1: entered promiscuous mode [ 524.294775][T15815] tipc: Left network mode [ 524.302966][T16796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.337200][T16796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.426348][T16796] team0: Port device team_slave_0 added [ 524.435758][T16796] team0: Port device team_slave_1 added [ 524.528248][T16796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.539091][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.567756][T16796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.609533][T16796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.616991][T16796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.647793][T16796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.799714][T16796] hsr_slave_0: entered promiscuous mode [ 524.816922][T16796] hsr_slave_1: entered promiscuous mode [ 524.825279][T16796] debugfs: 'hsr0' already exists in 'hsr' [ 524.831698][T16796] Cannot create hsr debugfs directory [ 524.917191][T15815] hsr_slave_0: left promiscuous mode [ 524.924118][T15815] hsr_slave_1: left promiscuous mode [ 524.938642][T15815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.946467][T15815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.956227][T15815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.972141][T15815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.994093][T15815] veth1_macvtap: left promiscuous mode [ 524.999972][T15815] veth0_macvtap: left promiscuous mode [ 525.008697][T15815] veth1_vlan: left promiscuous mode [ 525.014192][T15815] veth0_vlan: left promiscuous mode [ 525.208866][ T5842] Bluetooth: hci0: command tx timeout [ 525.278027][T15815] team0 (unregistering): Port device team_slave_1 removed [ 525.306987][T15815] team0 (unregistering): Port device team_slave_0 removed [ 525.840051][T15815] IPVS: stop unused estimator thread 0... [ 526.066282][T16796] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.105868][T16796] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.134928][T16796] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.221316][T16796] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 526.629768][T16796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.680270][T16796] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.698608][T15799] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.706144][T15799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.737392][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.744777][T15815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.754893][ T29] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 526.929900][ T29] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 526.961034][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 526.992288][ T29] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 527.011301][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.046725][ T29] usb 2-1: Product: syz [ 527.062107][ T29] usb 2-1: Manufacturer: syz [ 527.078091][ T29] usb 2-1: SerialNumber: syz [ 527.113210][ T29] usb 2-1: config 0 descriptor?? [ 527.139926][ T29] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 527.280868][ T5842] Bluetooth: hci0: command tx timeout [ 527.358736][T16796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.368506][T16890] pim6reg1: entered promiscuous mode [ 527.389562][T16890] pim6reg1: entered allmulticast mode [ 527.771682][T16905] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 527.943086][T16796] veth0_vlan: entered promiscuous mode [ 527.959757][T16796] veth1_vlan: entered promiscuous mode [ 528.059455][T16796] veth0_macvtap: entered promiscuous mode [ 528.077411][T16796] veth1_macvtap: entered promiscuous mode [ 528.121643][T16796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.143234][T16796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.154278][ T29] gspca_sunplus: reg_r err -71 [ 528.168030][ T29] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 528.192721][T15809] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.195089][ T29] usb 2-1: USB disconnect, device number 94 [ 528.228458][T15809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.275800][T15809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.340236][T15809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.371118][ T5908] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 528.469178][T15815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.488815][T15815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.540169][T15813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.540766][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 528.549494][T15813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.586153][ T5908] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 528.600421][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.631558][ T5908] usb 3-1: Product: syz [ 528.636126][ T5908] usb 3-1: Manufacturer: syz [ 528.643793][ T5908] usb 3-1: SerialNumber: syz [ 528.658911][ T5908] usb 3-1: config 0 descriptor?? [ 528.682156][ T5908] gspca_main: se401-2.14.0 probing 047d:5003 [ 529.114156][ T5908] gspca_se401: ExtraFeatures: 48 [ 529.127966][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.147544][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.169490][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.185296][ T5908] gspca_se401: Frame size: 1x0 bayer [ 529.201877][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.223708][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.244027][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.259560][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.283462][ T5908] gspca_se401: Frame size: 0x0 1/16th janggu [ 529.302537][ T5908] gspca_se401: Frame size: 68x8196 bayer [ 529.349159][ T5908] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input121 [ 529.361385][ T5842] Bluetooth: hci0: command tx timeout [ 529.404335][ T5908] usb 3-1: USB disconnect, device number 103 [ 529.870700][ T808] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 530.021667][ T808] usb 9-1: Using ep0 maxpacket: 32 [ 530.031334][ T808] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.057767][ T808] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.072165][ T808] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.085788][T16952] netlink: 'syz.1.4524': attribute type 29 has an invalid length. [ 530.093713][ T808] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 530.093752][ T808] usb 9-1: config 0 interface 0 has no altsetting 0 [ 530.093795][ T808] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 530.093820][ T808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.122054][ T808] usb 9-1: config 0 descriptor?? [ 530.140713][T16953] netlink: 'syz.1.4524': attribute type 29 has an invalid length. [ 530.165793][T16952] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4524'. [ 530.197541][T16952] unsupported nla_type 58 [ 530.364125][T16957] input: syz1 as /devices/virtual/input/input122 [ 530.387971][T16959] ubi31: attaching mtd0 [ 530.396213][T16959] ubi31 error: ubi_attach_mtd_dev: bad VID header (18) or data offsets (82) [ 530.602404][ T808] hid-thrustmaster 0003:044F:B65D.0076: unknown main item tag 0x0 [ 530.617762][T16966] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.635049][ T808] hid-thrustmaster 0003:044F:B65D.0076: unknown main item tag 0x0 [ 530.655094][ T808] hid-thrustmaster 0003:044F:B65D.0076: item fetching failed at offset 2/5 [ 530.684334][ T808] hid-thrustmaster 0003:044F:B65D.0076: parse failed with error -22 [ 530.706593][ T808] hid-thrustmaster 0003:044F:B65D.0076: probe with driver hid-thrustmaster failed with error -22 [ 530.818124][T16975] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 530.834193][ T808] usb 9-1: USB disconnect, device number 2 [ 531.250781][ T24] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 531.402950][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 531.431485][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 531.441026][ T5842] Bluetooth: hci0: command tx timeout [ 531.458944][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.467608][ T24] usb 3-1: Product: syz [ 531.472275][ T24] usb 3-1: Manufacturer: syz [ 531.477835][ T24] usb 3-1: SerialNumber: syz [ 531.487596][ T24] usb 3-1: config 0 descriptor?? [ 531.488265][T16995] syzkaller1: entered promiscuous mode [ 531.496590][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 531.510454][ T24] usb 3-1: Detected FT-X [ 531.513352][T16998] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4544'. [ 531.531034][T16995] syzkaller1: entered allmulticast mode [ 531.710417][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 531.820894][T17007] input: syz0 as /devices/virtual/input/input123 [ 532.163050][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 532.365534][ T24] usb 3-1: USB disconnect, device number 104 [ 532.445975][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 532.471902][ T24] ftdi_sio 3-1:0.0: device disconnected [ 532.760796][T15475] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 532.773225][ T29] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 532.858401][T17031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.939907][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 532.943497][T15475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.962305][ T29] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 532.978570][T15475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.983188][ T29] usb 2-1: config 8 has no interface number 0 [ 532.991664][T15475] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.009543][T15475] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.016326][ T29] usb 2-1: config 8 interface 206 has no altsetting 0 [ 533.024251][T15475] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.035139][T17033] syzkaller1: entered promiscuous mode [ 533.044689][T17033] syzkaller1: entered allmulticast mode [ 533.044896][T15475] usb 9-1: config 0 descriptor?? [ 533.058020][ T29] usb 2-1: string descriptor 0 read error: -22 [ 533.072923][ T29] usb 2-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 533.086227][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.139289][ T29] go7007 2-1:8.206: probe with driver go7007 failed with error -12 [ 533.401608][ T5894] usb 2-1: USB disconnect, device number 95 [ 533.495320][T15475] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x1 [ 533.514781][T15475] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x4 [ 533.553519][T15475] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 533.862960][ T5894] usb 9-1: USB disconnect, device number 3 [ 534.147963][T17060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 534.434227][T17066] netlink: 2300 bytes leftover after parsing attributes in process `syz.2.4573'. [ 534.754637][T17074] syzkaller1: entered promiscuous mode [ 534.774538][T17074] syzkaller1: entered allmulticast mode [ 535.157451][ T30] audit: type=1326 audit(1775561900.620:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.7.4585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77e559c819 code=0x0 [ 535.196222][ T30] audit: type=1800 audit(1775561900.650:25): pid=17088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4582" name="file0" dev="tmpfs" ino=5966 res=0 errno=0 [ 535.356582][T14448] bridge0: port 3(syz_tun) entered disabled state [ 535.429153][T14448] syz_tun (unregistering): left allmulticast mode [ 535.439677][T14448] syz_tun (unregistering): left promiscuous mode [ 535.443160][T15475] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 535.452514][T14448] bridge0: port 3(syz_tun) entered disabled state [ 535.604511][T15475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.629403][T15475] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.666472][T15475] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 535.688455][T15475] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.745344][T15475] usb 9-1: config 0 descriptor?? [ 535.815908][T13068] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.129756][T13068] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.196689][T15475] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 536.220744][T15475] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 536.232346][T15475] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 536.248957][T15475] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 536.274165][T15475] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 536.291699][T15475] elan 0003:04F3:0755.0078: failed to start in urb: -90 [ 536.320260][T15475] elan 0003:04F3:0755.0078: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 536.378675][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.395286][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 536.405272][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 536.423594][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.433770][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.451298][T15475] usb 9-1: USB disconnect, device number 4 [ 536.499912][T13068] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.657548][T13068] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.661478][T17118] netlink: 'syz.7.4594': attribute type 2 has an invalid length. [ 536.956743][T13068] bridge_slave_1: left allmulticast mode [ 536.971914][T13068] bridge_slave_1: left promiscuous mode [ 536.985935][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.009748][T13068] bridge_slave_0: left allmulticast mode [ 537.027447][T13068] bridge_slave_0: left promiscuous mode [ 537.034040][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.324318][T13068] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 537.334311][T13068] bridge0 (unregistering): left promiscuous mode [ 537.368087][T13068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.377217][T13068] bond_slave_0: left promiscuous mode [ 537.384791][T13068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.390628][T15475] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 537.402931][T13068] bond_slave_1: left promiscuous mode [ 537.409310][T13068] bond0 (unregistering): Released all slaves [ 537.470955][ T5915] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 537.518620][T17113] chnl_net:caif_netlink_parms(): no params data found [ 537.569939][T15475] usb 9-1: Using ep0 maxpacket: 32 [ 537.606194][T15475] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 537.624304][T15475] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 537.652374][T15475] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 537.660860][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 537.670090][T15475] usb 9-1: Product: syz [ 537.675978][T15475] usb 9-1: Manufacturer: syz [ 537.681176][ T5915] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 537.693309][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.701887][T15475] usb 9-1: SerialNumber: syz [ 537.743088][T15475] usb 9-1: config 0 descriptor?? [ 537.754711][ T5915] usb 3-1: config 0 descriptor?? [ 537.771823][T17125] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 537.829125][ T5915] as10x_usb: device has been detected [ 537.851837][T15475] hub 9-1:0.0: bad descriptor, ignoring hub [ 537.866110][ T5915] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 537.891876][T15475] hub 9-1:0.0: probe with driver hub failed with error -5 [ 537.957865][T17113] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.965581][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.973961][T13068] IPVS: stopping master sync thread 15030 ... [ 538.011028][T17113] bridge_slave_0: entered allmulticast mode [ 538.052634][T17113] bridge_slave_0: entered promiscuous mode [ 538.077071][T17113] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.078037][T17129] ------------[ cut here ]------------ [ 538.090185][T17129] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 538.090205][T17129] WARNING: kernel/locking/mutex.c:611 at __mutex_lock+0x11c1/0x1420, CPU#1: syz.2.4599/17129 [ 538.092619][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.096219][T17129] Modules linked in: [ 538.117786][T17129] CPU: 1 UID: 0 PID: 17129 Comm: syz.2.4599 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.121702][ T5915] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 538.129064][T17129] Tainted: [L]=SOFTLOCKUP [ 538.142051][T17129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.152357][T17129] RIP: 0010:__mutex_lock+0x11c8/0x1420 [ 538.157866][T17129] Code: 33 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 02 00 00 83 3d 9c f8 77 04 00 75 13 48 8d 3d 6f 10 7b 04 48 c7 c6 a0 e8 cc 8b <67> 48 0f b9 3a 90 e9 91 ef ff ff 90 0f 0b 90 e9 a6 f3 ff ff 90 0f [ 538.177811][T17129] RSP: 0018:ffffc9000474fa20 EFLAGS: 00010246 [ 538.184024][T17129] RAX: 0000000000000000 RBX: 1ffff920008e9f5c RCX: 0000000000080000 [ 538.192085][T17129] RDX: ffffc900064e3000 RSI: ffffffff8bcce8a0 RDI: ffffffff903709a0 [ 538.192247][T17113] bridge_slave_1: entered allmulticast mode [ 538.200085][T17129] RBP: ffffc9000474fbd8 R08: ffffffff9033f1c3 R09: 1ffffffff2067e38 [ 538.200103][T17129] R10: dffffc0000000000 R11: fffffbfff2067e39 R12: ffff888044696b30 [ 538.200118][T17129] R13: dffffc0000000000 R14: ffff888044696000 R15: 0000000000000000 [ 538.200133][T17129] FS: 00007f78e9dfd6c0(0000) GS:ffff888125304000(0000) knlGS:0000000000000000 [ 538.200151][T17129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.246688][T17129] CR2: 0000001b31e1fff8 CR3: 0000000044094000 CR4: 00000000003526f0 [ 538.254839][T17129] Call Trace: [ 538.258171][T17129] [ 538.261166][T17129] ? trace_contention_end+0x3d/0x140 [ 538.266497][T17129] ? __mutex_lock+0x320/0x1420 [ 538.271390][T17129] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 538.277066][T17129] ? __pfx___mutex_lock+0x10/0x10 [ 538.281647][T17113] bridge_slave_1: entered promiscuous mode [ 538.288068][T17129] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 538.288111][T17129] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.299765][T17129] ? do_raw_spin_lock+0x12b/0x2f0 [ 538.304897][T17129] as102_dvb_dmx_start_feed+0x70/0x290 [ 538.310406][T17129] dmx_section_feed_start_filtering+0x518/0x6c0 [ 538.316911][T17129] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 538.322581][T17129] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 538.328089][T17129] dvb_demux_do_ioctl+0x470/0x540 [ 538.333212][T17129] dvb_usercopy+0x199/0x2e0 [ 538.337760][T17129] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 538.343540][T17129] ? __pfx_dvb_usercopy+0x10/0x10 [ 538.348845][T17129] ? __fget_files+0x3a0/0x420 [ 538.353743][T17129] ? __fget_files+0x2a/0x420 [ 538.358378][T17129] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 538.363767][T17129] dvb_demux_ioctl+0x29/0x40 [ 538.368391][T17129] __se_sys_ioctl+0xfc/0x170 [ 538.373152][T17129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.379272][T17129] do_syscall_64+0x15f/0xf80 [ 538.380719][T15475] usb 9-1: USB disconnect, device number 5 [ 538.383918][T17129] ? trace_irq_disable+0x3b/0x140 [ 538.394799][T17129] ? clear_bhb_loop+0x40/0x90 [ 538.399525][T17129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.405855][T17129] RIP: 0033:0x7f78e8f9c819 [ 538.410335][T17129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.430034][T17129] RSP: 002b:00007f78e9dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.438648][T17129] RAX: ffffffffffffffda RBX: 00007f78e9215fa0 RCX: 00007f78e8f9c819 [ 538.446886][T17129] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 538.455059][T17129] RBP: 00007f78e9032c91 R08: 0000000000000000 R09: 0000000000000000 [ 538.463236][T17129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.466533][T13068] IPVS: stopping backup sync thread 15500 ... [ 538.471260][T17129] R13: 00007f78e9216038 R14: 00007f78e9215fa0 R15: 00007ffeefcc0e08 [ 538.471287][T17129] [ 538.471300][T17129] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 538.471319][T17129] CPU: 1 UID: 0 PID: 17129 Comm: syz.2.4599 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.471347][T17129] Tainted: [L]=SOFTLOCKUP [ 538.471354][T17129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.471366][T17129] Call Trace: [ 538.471373][T17129] [ 538.471381][T17129] vpanic+0x56c/0xa60 [ 538.471404][T17129] ? __pfx__printk+0x10/0x10 [ 538.471424][T17129] ? __pfx_vpanic+0x10/0x10 [ 538.471439][T17129] ? is_bpf_text_address+0x292/0x2b0 [ 538.471463][T17129] ? is_bpf_text_address+0x26/0x2b0 [ 538.471487][T17129] panic+0xc5/0xd0 [ 538.471503][T17129] ? __pfx_panic+0x10/0x10 [ 538.471525][T17129] __warn+0x315/0x4c0 [ 538.471540][T17129] ? __mutex_lock+0x11c1/0x1420 [ 538.471566][T17129] ? __mutex_lock+0x11c1/0x1420 [ 538.471590][T17129] __report_bug+0x29a/0x540 [ 538.471615][T17129] ? __mutex_lock+0x11c1/0x1420 [ 538.471639][T17129] ? __pfx___report_bug+0x10/0x10 [ 538.471663][T17129] ? __lock_acquire+0x6b5/0x2cf0 [ 538.471695][T17129] ? __page_table_check_ptes_set+0x6f/0x320 [ 538.471722][T17129] ? pfn_valid+0x125/0x4c0 [ 538.471743][T17129] ? pfn_valid+0x440/0x4c0 [ 538.471764][T17129] report_bug_entry+0x19a/0x290 [ 538.471786][T17129] ? __mutex_lock+0x11c8/0x1420 [ 538.471808][T17129] ? __mutex_lock+0x11cd/0x1420 [ 538.471830][T17129] handle_bug+0xce/0x200 [ 538.471855][T17129] exc_invalid_op+0x1a/0x50 [ 538.471879][T17129] asm_exc_invalid_op+0x1a/0x20 [ 538.471898][T17129] RIP: 0010:__mutex_lock+0x11c8/0x1420 [ 538.471924][T17129] Code: 33 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 36 02 00 00 83 3d 9c f8 77 04 00 75 13 48 8d 3d 6f 10 7b 04 48 c7 c6 a0 e8 cc 8b <67> 48 0f b9 3a 90 e9 91 ef ff ff 90 0f 0b 90 e9 a6 f3 ff ff 90 0f [ 538.471940][T17129] RSP: 0018:ffffc9000474fa20 EFLAGS: 00010246 [ 538.471959][T17129] RAX: 0000000000000000 RBX: 1ffff920008e9f5c RCX: 0000000000080000 [ 538.471972][T17129] RDX: ffffc900064e3000 RSI: ffffffff8bcce8a0 RDI: ffffffff903709a0 [ 538.471986][T17129] RBP: ffffc9000474fbd8 R08: ffffffff9033f1c3 R09: 1ffffffff2067e38 [ 538.472000][T17129] R10: dffffc0000000000 R11: fffffbfff2067e39 R12: ffff888044696b30 [ 538.472014][T17129] R13: dffffc0000000000 R14: ffff888044696000 R15: 0000000000000000 [ 538.472034][T17129] ? trace_contention_end+0x3d/0x140 [ 538.472054][T17129] ? __mutex_lock+0x320/0x1420 [ 538.472079][T17129] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 538.472099][T17129] ? __pfx___mutex_lock+0x10/0x10 [ 538.472121][T17129] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 538.472147][T17129] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.472169][T17129] ? do_raw_spin_lock+0x12b/0x2f0 [ 538.472193][T17129] as102_dvb_dmx_start_feed+0x70/0x290 [ 538.472212][T17129] dmx_section_feed_start_filtering+0x518/0x6c0 [ 538.472242][T17129] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 538.472266][T17129] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 538.472287][T17129] dvb_demux_do_ioctl+0x470/0x540 [ 538.472308][T17129] dvb_usercopy+0x199/0x2e0 [ 538.472327][T17129] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 538.472348][T17129] ? __pfx_dvb_usercopy+0x10/0x10 [ 538.472369][T17129] ? __fget_files+0x3a0/0x420 [ 538.472391][T17129] ? __fget_files+0x2a/0x420 [ 538.472414][T17129] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 538.472433][T17129] dvb_demux_ioctl+0x29/0x40 [ 538.472453][T17129] __se_sys_ioctl+0xfc/0x170 [ 538.472471][T17129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.472490][T17129] do_syscall_64+0x15f/0xf80 [ 538.472513][T17129] ? trace_irq_disable+0x3b/0x140 [ 538.472533][T17129] ? clear_bhb_loop+0x40/0x90 [ 538.472553][T17129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.472571][T17129] RIP: 0033:0x7f78e8f9c819 [ 538.472588][T17129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.472602][T17129] RSP: 002b:00007f78e9dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.472621][T17129] RAX: ffffffffffffffda RBX: 00007f78e9215fa0 RCX: 00007f78e8f9c819 [ 538.472634][T17129] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 538.472647][T17129] RBP: 00007f78e9032c91 R08: 0000000000000000 R09: 0000000000000000 [ 538.472659][T17129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.472679][T17129] R13: 00007f78e9216038 R14: 00007f78e9215fa0 R15: 00007ffeefcc0e08 [ 538.472698][T17129] [ 538.477550][T17129] Kernel Offset: disabled