last executing test programs: 6.948631011s ago: executing program 0 (id=2065): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)={0x20, 0x14, 0x8, "ba76053e519b7b0f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.643980936s ago: executing program 1 (id=2067): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x9c, 0x0, 0x1, 0x101, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_ZONE={0x6}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff8}]}, 0x9c}, 0x1, 0x0, 0x0, 0xab92ca7e082b7afd}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.525918782s ago: executing program 1 (id=2069): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x142aa3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) unshare(0x80) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x1ff, 0x400, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8, 0x61e], [0x2, 0x4]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) getsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, 0x0, 0x0) r12 = socket$kcm(0xa, 0x2, 0x0) r13 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010106, 0x4e22, 0x3, 'rr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.265435136s ago: executing program 2 (id=2071): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="270f66e9af4510a3098bda648fbe735f44dc3c374117cbd1872db242fa6ffe761f4e803301348b1c66233eb65cdf36d98e9ff58749e01596d96d18d293b8392831bd3f1157b5c7a071544b47038f0e9d84dd6c6c99573864f149b4b739a3014a45cb5fc921ed604416b5e57cfac2bce8d172d1588f38bc5c07d26105d1334b9d75535f2cdaecc196c1027bd8d23a5096d49d2949d7bc7f2ef545972914e519fcc2a0cc28ea1011554bf9f0447a98a815a43a15f592ec42566a199b801292e64572ff3c005bb5dd7d40882d02d956eb02a4d6af4bbeba0d24e2fb8d9bebfe8bb51053dfdf1845e3d49aebd5", @ANYRES64=0x0], 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2, 0x1062, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x91}], 0x1, 0x0, 0x0) fsmount(r2, 0x0, 0x19) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008801}, 0x808) 5.23140634s ago: executing program 0 (id=2074): r0 = syz_open_dev$sg(0x0, 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) accept4(r1, 0x0, &(0x7f0000000180), 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001406001400350077673200"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 5.212752001s ago: executing program 3 (id=2075): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xe080, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r5, 0x80796c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000881) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, 0x0, 0x0) 5.212133151s ago: executing program 2 (id=2076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r2}, 0x38) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r2}, 0x38) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffe0, 0xa}, {0xd, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0xd5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.854547689s ago: executing program 1 (id=2077): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) close(r1) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) 4.306329977s ago: executing program 3 (id=2079): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x9c, 0x0, 0x1, 0x101, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_ZONE={0x6}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff8}]}, 0x9c}, 0x1, 0x0, 0x0, 0xab92ca7e082b7afd}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.224773312s ago: executing program 0 (id=2080): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x4000000080000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0xfff) 4.185280844s ago: executing program 3 (id=2082): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x83, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x3) ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) ptrace$pokeuser(0x6, 0x0, 0x7, 0x1) keyctl$revoke(0x3, r4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x4a, {0x2, 0xfffd, @multicast2}, 'team0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.181218494s ago: executing program 2 (id=2083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.016064882s ago: executing program 0 (id=2084): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, 0x24, 0x107, 0xfffffffe, 0x0, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x86}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='schedstat\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000001b010000091400078008000140000000060800"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 3.917606367s ago: executing program 2 (id=2085): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)={0x20, 0x14, 0x5, "ba76053e51"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.838402071s ago: executing program 1 (id=2086): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.31832161s ago: executing program 2 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x90}, 0x880) syz_genetlink_get_family_id$mptcp(0x0, r5) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x1, 0x5}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x6, 0x4, 0x5, 0x5, 0x5}, {0x1, 0xdddd1000, 0x9, 0x7, 0x5, 0x42, 0x2, 0xff, 0x8, 0x7, 0xe}, {0xffffffff, 0x3000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x9, 0x19, 0x9, 0xf7, 0x3}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x1000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0x3, 0x7, 0x1, 0x7, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100c00, [0x6800000000000000, 0x4, 0x6, 0x8]}) r6 = open(&(0x7f0000001880)='./file1\x00', 0x40, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r7, r6, 0x0, 0x1000000000002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4010) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r9 = fcntl$dupfd(r8, 0x0, r8) write$binfmt_script(r9, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000001b00), 0xfffffd9d) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200620134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000ffff2cbd7000fbdbdf250000000012268030f38b787885b37fa0e3bc9fcc285912a706f68c56b5ce103c2e9351876bfa48353f0e67f1ab29e0ff30f5febc", @ANYRES32=0x0, @ANYBLOB="2911010020100000140012800c0001006d6163766c616e000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0500110002000000"], 0x4c}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) 2.093927552s ago: executing program 3 (id=2090): r0 = syz_open_dev$sg(0x0, 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) accept4(r1, 0x0, &(0x7f0000000180), 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001406001400350077673200"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 2.016588466s ago: executing program 0 (id=2091): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 1.308866652s ago: executing program 4 (id=2092): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x9c, 0x0, 0x1, 0x101, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_ZONE={0x6}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff8}]}, 0x9c}, 0x1, 0x0, 0x0, 0xab92ca7e082b7afd}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.067800705s ago: executing program 3 (id=2093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r2}, 0x38) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r2}, 0x38) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffe0, 0xa}, {0xd, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0xd5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.052724066s ago: executing program 4 (id=2094): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x4000000080000001, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0xfff) 791.959579ms ago: executing program 4 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 564.878351ms ago: executing program 2 (id=2096): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) close(r1) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) 525.931273ms ago: executing program 4 (id=2097): ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 476.177496ms ago: executing program 1 (id=2098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x1, 0x5, 0x5, 0x7}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 413.365959ms ago: executing program 4 (id=2099): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 402.485489ms ago: executing program 0 (id=2100): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x94076000) remap_file_pages(&(0x7f0000902000/0x2000)=nil, 0x2000, 0x0, 0x40, 0x1) pipe(0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x32, 0x0, 0xf, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200), &(0x7f0000000200), &(0x7f00000002c0), 0x0}, 0x40) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) close(0x3) shutdown(r2, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000280)) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x8e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="25001645de002d000000000000002c4d21799f35724cafaef15f0102749d3efd41f9d2d4ded73f8b4e44fa4a8097eff3544b8d7bbaf6fb805ed4e30e19", @ANYRES32, @ANYRES64=r1], 0x20) r5 = syz_clone(0x2482a000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x5b91, &(0x7f0000000640)={0x0, 0x78ed, 0x1001, 0x8000002, 0x2c9}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ptrace(0x10, r5) socket$qrtr(0x2a, 0x2, 0x0) 294.384955ms ago: executing program 1 (id=2101): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x83, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x3) ioctl$TCSETS(0xffffffffffffffff, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) ptrace$pokeuser(0x6, 0x0, 0x7, 0x1) keyctl$revoke(0x3, r4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x4a, {0x2, 0xfffd, @multicast2}, 'team0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 217.589259ms ago: executing program 4 (id=2102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="401714"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=2103): r0 = syz_open_dev$sg(0x0, 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) accept4(r1, 0x0, &(0x7f0000000180), 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000001406001400350077673200"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) kernel console output (not intermixed with test programs): [ 457.481883][ T4314] usb 2-1: Product: syz [ 457.486180][ T4314] usb 2-1: Manufacturer: syz [ 457.495991][ T4314] cdc_wdm 2-1:1.0: skipping garbage [ 457.501505][ T4314] cdc_wdm 2-1:1.0: skipping garbage [ 457.509509][ T4314] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 457.526730][ T4314] cdc_wdm 2-1:1.0: Unknown control protocol [ 457.699833][ T4335] usb 2-1: USB disconnect, device number 75 [ 457.809573][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 458.163112][ T9701] netlink: 'syz.2.1510': attribute type 1 has an invalid length. [ 458.237173][ T9705] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 458.280529][ T4335] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 458.391450][ T9705] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 458.482378][ T4335] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 458.491767][ T4335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.505277][ T4335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 458.568722][ T4335] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.588322][ T4335] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 458.600072][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 458.614342][ T4335] usb 2-1: Product: syz [ 458.628673][ T4335] usb 2-1: Manufacturer: syz [ 458.655850][ T4335] cdc_wdm 2-1:1.0: skipping garbage [ 458.668128][ T4335] cdc_wdm 2-1:1.0: skipping garbage [ 458.683820][ T4335] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 458.689994][ T4335] cdc_wdm 2-1:1.0: Unknown control protocol [ 459.086042][ T9711] device syzkaller0 entered promiscuous mode [ 459.175135][ T9713] device syzkaller0 entered promiscuous mode [ 459.830467][ T4314] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 460.020462][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 460.027246][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 460.049600][ T4314] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 460.070499][ T4314] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 460.078644][ T4314] usb 4-1: Product: syz [ 460.084044][ T4314] usb 4-1: Manufacturer: syz [ 460.091411][ T4314] usb 4-1: SerialNumber: syz [ 460.318632][ T9718] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1515'. [ 460.331995][ T4314] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 460.342752][ T4314] visor: probe of 4-1:1.0 failed with error -71 [ 460.357741][ T4314] usb 4-1: USB disconnect, device number 91 [ 460.410636][ T22] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 460.420003][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 460.422833][ T4348] usb 2-1: USB disconnect, device number 76 [ 460.426641][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 460.426662][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 460.560551][ T22] usb 1-1: device descriptor read/64, error -71 [ 460.645195][ T9734] device syzkaller0 entered promiscuous mode [ 460.850525][ T22] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 460.960632][ T4312] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 461.000518][ T22] usb 1-1: device descriptor read/64, error -71 [ 461.130684][ T22] usb usb1-port1: attempt power cycle [ 461.153601][ T4312] usb 2-1: config 0 has no interfaces? [ 461.169110][ T4312] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 461.185251][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.212119][ T4312] usb 2-1: Product: syz [ 461.231681][ T4312] usb 2-1: Manufacturer: syz [ 461.243467][ T4312] usb 2-1: SerialNumber: syz [ 461.262763][ T4312] usb 2-1: config 0 descriptor?? [ 461.540519][ T22] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 461.582596][ T22] usb 1-1: device descriptor read/8, error -71 [ 461.593081][ T9732] device veth0_vlan left promiscuous mode [ 461.609617][ T9732] device veth0_vlan entered promiscuous mode [ 461.660177][ T128] usb 2-1: USB disconnect, device number 77 [ 461.850460][ T22] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 461.891082][ T22] usb 1-1: device descriptor read/8, error -71 [ 461.930594][ T4314] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 462.022355][ T22] usb usb1-port1: unable to enumerate USB device [ 462.133827][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 462.143250][ T9752] device syzkaller0 entered promiscuous mode [ 462.160567][ T4314] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 462.250157][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10 [ 462.316142][ T4314] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 462.350896][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.366955][ T4314] usb 5-1: Product: syz [ 462.377068][ T4314] usb 5-1: Manufacturer: syz [ 462.383430][ T4314] usb 5-1: SerialNumber: syz [ 462.570674][ T4335] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 462.606262][ T4314] usb 5-1: MIDIStreaming interface descriptor not found [ 462.707505][ T4314] usb 5-1: USB disconnect, device number 90 [ 462.772697][ T4335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.789312][ T4335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.825848][ T4335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 462.857242][ T4335] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.877616][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.905533][ T4335] usb 2-1: config 0 descriptor?? [ 463.334415][ T4335] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 463.375130][ T4335] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 463.401476][ T4335] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 463.449317][ T4335] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 463.506948][ T4335] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 463.546281][ T4335] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 463.567995][ T4335] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 463.595255][ T4335] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 463.650508][ T4314] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 463.679219][ T4335] usb 2-1: USB disconnect, device number 78 [ 463.852363][ T4314] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 463.872309][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.923386][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 463.951502][ T9768] fido_id[9768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 463.967337][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.981829][ T4314] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.002425][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.013629][ T4314] usb 5-1: Product: syz [ 464.017949][ T4314] usb 5-1: Manufacturer: syz [ 464.038937][ T4314] cdc_wdm 5-1:1.0: skipping garbage [ 464.044632][ T4314] cdc_wdm 5-1:1.0: skipping garbage [ 464.066493][ T4314] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 464.076871][ T4314] cdc_wdm 5-1:1.0: Unknown control protocol [ 464.199514][ T9773] device syzkaller0 entered promiscuous mode [ 464.238719][ T4314] usb 5-1: USB disconnect, device number 91 [ 464.665648][ T9778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1533'. [ 464.833948][ T4314] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 464.899694][ T9790] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 464.965087][ T9790] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 465.041873][ T9790] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 465.042464][ T4314] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.058670][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.071515][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.081627][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.094743][ T4314] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.104297][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.112738][ T4314] usb 5-1: Product: syz [ 465.117276][ T4314] usb 5-1: Manufacturer: syz [ 465.134843][ T4314] cdc_wdm 5-1:1.0: skipping garbage [ 465.144434][ T4314] cdc_wdm 5-1:1.0: skipping garbage [ 465.157193][ T4314] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 465.168965][ T4314] cdc_wdm 5-1:1.0: Unknown control protocol [ 465.203742][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 465.263183][ T9795] device macvlan0 entered promiscuous mode [ 465.330792][ T9795] device bond14 entered promiscuous mode [ 465.371576][ T9795] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 465.395549][ T9795] device bond14 left promiscuous mode [ 466.090587][ T4314] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 466.313871][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.362456][ T4314] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.459846][ T4314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 466.489643][ T4314] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 466.498986][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 466.508590][ T4314] usb 3-1: Product: syz [ 466.513051][ T4314] usb 3-1: Manufacturer: syz [ 466.517691][ T4314] usb 3-1: SerialNumber: syz [ 466.556436][ T4314] usb 3-1: config 0 descriptor?? [ 466.726553][ T4314] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 466.754574][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.846424][ T4335] usb 3-1: USB disconnect, device number 79 [ 466.902958][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 466.909591][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 466.916269][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 466.922897][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 466.929453][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 466.936059][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 466.942618][ T4314] usb 5-1: USB disconnect, device number 92 [ 467.321753][ T9817] device syzkaller0 entered promiscuous mode [ 467.580517][ T4314] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 467.644077][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1547'. [ 467.774693][ T9827] device syzkaller0 entered promiscuous mode [ 467.793886][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.850667][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.871123][ T4314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.896720][ T4314] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.930490][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.940338][ T9829] binder: BINDER_SET_CONTEXT_MGR already set [ 467.948271][ T9829] binder: 9828:9829 ioctl 4018620d 200000004a80 returned -16 [ 467.959091][ T4314] usb 5-1: config 0 descriptor?? [ 468.301708][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 468.372488][ T4314] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 468.389092][ T4314] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 468.418061][ T4314] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 468.441273][ T4314] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 468.464305][ T4314] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 468.492222][ T4314] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 468.517165][ T4314] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 468.551672][ T4314] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 468.600583][ T4314] usb 5-1: USB disconnect, device number 93 [ 468.759731][ T9839] fido_id[9839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 468.885261][ T9841] netlink: 'syz.0.1553': attribute type 1 has an invalid length. [ 468.932725][ T9841] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 468.944809][ T9841] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 468.975295][ T9843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1553'. [ 469.228193][ T9849] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1556'. [ 469.539732][ T9861] device syzkaller0 entered promiscuous mode [ 469.573730][ T4335] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 469.756341][ T9867] loop9: detected capacity change from 0 to 7 [ 469.762827][ T4335] usb 5-1: Using ep0 maxpacket: 16 [ 469.775252][ T4347] Dev loop9: unable to read RDB block 7 [ 469.775821][ T4335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.781161][ T4347] loop9: unable to read partition table [ 469.792248][ T4312] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 469.814463][ T4335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.827498][ T4335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.828588][ T4347] loop9: partition table beyond EOD, [ 469.842254][ T4335] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.857393][ T4335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.878723][ T4335] usb 5-1: config 0 descriptor?? [ 469.881315][ T4347] truncated [ 469.898298][ T9867] Dev loop9: unable to read RDB block 7 [ 469.924520][ T9867] loop9: unable to read partition table [ 469.942868][ T9867] loop9: partition table beyond EOD, truncated [ 469.951797][ T9867] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 469.951797][ T9867] ) failed (rc=-5) [ 470.002712][ T4312] usb 3-1: config 0 has no interfaces? [ 470.011289][ T4312] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 470.058955][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.108774][ T4312] usb 3-1: Product: syz [ 470.113777][ T4312] usb 3-1: Manufacturer: syz [ 470.118541][ T4312] usb 3-1: SerialNumber: syz [ 470.126804][ T4312] usb 3-1: config 0 descriptor?? [ 470.315664][ T4335] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 470.323451][ T4335] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 470.399493][ T4335] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000B/input/input28 [ 470.517960][ T4335] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 470.576359][ T4335] usb 5-1: USB disconnect, device number 94 [ 470.681844][ T4312] usb 3-1: USB disconnect, device number 80 [ 470.825573][ T9879] fido_id[9879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 471.299115][ T9886] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 471.310395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 471.412857][ T9888] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 471.434013][ T9888] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 471.452407][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 471.468892][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'. [ 471.491836][ T9892] device macvlan3 entered promiscuous mode [ 471.518589][ T9892] device bond11 entered promiscuous mode [ 471.540670][ T4311] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 471.564533][ T9892] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 471.596976][ T9892] device bond11 left promiscuous mode [ 471.740311][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.764306][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.801278][ T4311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.840512][ T4311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.888568][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.912047][ T4311] usb 5-1: config 0 descriptor?? [ 472.340293][ T4311] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 472.364218][ T4311] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 472.392220][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 472.397472][ T4311] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 472.425017][ T4311] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 472.433130][ T4311] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 472.440879][ T4311] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 472.449633][ T4311] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 472.460276][ T4311] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 472.492981][ T9915] binder: BINDER_SET_CONTEXT_MGR already set [ 472.502810][ T9915] binder: 9914:9915 ioctl 4018620d 200000004a80 returned -16 [ 472.550655][ T4314] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 472.630678][ T4311] usb 5-1: USB disconnect, device number 95 [ 472.740504][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 472.750763][ T4314] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 472.760250][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.773354][ T4314] usb 4-1: Product: syz [ 472.781941][ T4314] usb 4-1: Manufacturer: syz [ 472.789687][ T4314] usb 4-1: SerialNumber: syz [ 472.800326][ T4314] usb 4-1: config 0 descriptor?? [ 472.814182][ T4314] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 473.740460][ T4311] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 473.940570][ T4311] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 473.954070][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.962241][ T4311] usb 2-1: Product: syz [ 473.966504][ T4311] usb 2-1: Manufacturer: syz [ 473.971226][ T4311] usb 2-1: SerialNumber: syz [ 474.242083][ T9930] device syzkaller0 entered promiscuous mode [ 474.408836][ T4311] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 474.444040][ T4311] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 474.456949][ T4311] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 474.468930][ T4311] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 474.478559][ T4311] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 474.496222][ T4311] lan78xx: probe of 2-1:1.0 failed with error -71 [ 474.525867][ T4311] usb 2-1: USB disconnect, device number 79 [ 475.225796][ T4314] gspca_sonixj: reg_w1 err -71 [ 475.290545][ T4314] sonixj: probe of 4-1:0.0 failed with error -71 [ 475.310672][ T4314] usb 4-1: USB disconnect, device number 92 [ 475.694574][ T9958] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1587'. [ 476.230485][ T4311] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 476.350224][ T9966] device syzkaller0 entered promiscuous mode [ 476.360435][ T4335] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 476.433361][ T4311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.442358][ T4311] usb 2-1: not running at top speed; connect to a high speed hub [ 476.455992][ T4311] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 476.465460][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.474194][ T4311] usb 2-1: Product: syz [ 476.478589][ T4311] usb 2-1: Manufacturer: syz [ 476.494840][ T4311] usb 2-1: SerialNumber: syz [ 476.544300][ T4335] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 476.579295][ T4335] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 476.592315][ T4335] usb 4-1: config 0 interface 0 has no altsetting 0 [ 476.635960][ T4335] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.690522][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 476.699140][ T4335] usb 4-1: Product: syz [ 476.704744][ T4335] usb 4-1: Manufacturer: syz [ 476.709648][ T4335] usb 4-1: SerialNumber: syz [ 476.729152][ T4335] usb 4-1: config 0 descriptor?? [ 476.742505][ T4311] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 476.768716][ T4335] usb 4-1: selecting invalid altsetting 0 [ 476.984979][ T9972] fuse: Bad value for 'fd' [ 477.041680][ T4335] usb 4-1: USB disconnect, device number 93 [ 477.364793][ T4311] gp8psk: usb in 146 operation failed. [ 477.373835][ T4311] gp8psk: failed to get FW version [ 477.403287][ T4311] gp8psk: usb in 149 operation failed. [ 477.430097][ T4311] gp8psk: failed to get FPGA version [ 477.445978][ T4311] gp8psk: usb in 138 operation failed. [ 477.452447][ T4311] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 477.463261][ T4311] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 477.486372][ T4311] usb 2-1: USB disconnect, device number 80 [ 477.784361][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 477.784378][ T26] audit: type=1326 audit(1776825354.824:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 477.812917][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.917563][ T26] audit: type=1326 audit(1776825354.824:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.001770][ T26] audit: type=1326 audit(1776825354.824:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.036520][ T26] audit: type=1326 audit(1776825354.854:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.074723][ T9988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1596'. [ 478.122096][ T26] audit: type=1326 audit(1776825354.864:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.255007][ T26] audit: type=1326 audit(1776825354.864:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.309793][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1598'. [ 478.338901][ T26] audit: type=1326 audit(1776825354.864:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.427132][ T26] audit: type=1326 audit(1776825354.864:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.449371][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.558461][ T9996] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1599'. [ 478.643097][ T26] audit: type=1326 audit(1776825354.864:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.665414][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.834810][ T26] audit: type=1326 audit(1776825354.864:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 478.913516][T10009] device syzkaller0 entered promiscuous mode [ 478.933766][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 479.490691][ T4335] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 479.680547][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 479.688902][ T4335] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 479.710689][ T128] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 479.741172][ T4335] usb 3-1: can't read configurations, error -61 [ 479.902479][ T128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.920454][ T4335] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 479.940213][ T128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.991882][ T128] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.023909][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.081853][ T128] usb 2-1: SerialNumber: syz [ 480.140474][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 480.157658][ T4335] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 480.253143][ T4335] usb 3-1: can't read configurations, error -61 [ 480.269770][ T4335] usb usb3-port1: attempt power cycle [ 480.308427][ T128] usb 2-1: 0:2 : does not exist [ 480.348851][T10022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.380901][ T128] usb 2-1: USB disconnect, device number 81 [ 480.451290][T10022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.581920][T10027] fuse: Bad value for 'fd' [ 480.710647][ T4335] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 480.752408][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 480.762469][ T4335] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 480.820442][ T4335] usb 3-1: can't read configurations, error -61 [ 481.040442][ T4335] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 481.057665][T10033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1609'. [ 481.081262][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 481.099815][ T4335] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 481.151998][ T4335] usb 3-1: can't read configurations, error -61 [ 481.172586][ T4335] usb usb3-port1: unable to enumerate USB device [ 481.920747][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 482.120535][T10041] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1612'. [ 482.707140][ T4335] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 482.803778][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 482.860480][ T4335] usb 3-1: device descriptor read/64, error -71 [ 483.130841][ T4335] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 483.290466][ T4335] usb 3-1: device descriptor read/64, error -71 [ 483.410874][ T4335] usb usb3-port1: attempt power cycle [ 483.820487][ T4335] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 483.892434][ T4335] usb 3-1: device descriptor read/8, error -71 [ 483.992610][T10072] binder: 10071:10072 ioctl 4018620d 0 returned -22 [ 484.170707][ T4335] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 484.222654][ T4335] usb 3-1: device descriptor read/8, error -71 [ 484.251048][ T4311] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 484.297863][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 484.341414][ T4335] usb usb3-port1: unable to enumerate USB device [ 484.442064][ T4311] usb 4-1: config 0 has no interfaces? [ 484.450016][ T4311] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 484.459442][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.467769][ T4311] usb 4-1: Product: syz [ 484.472177][ T4311] usb 4-1: Manufacturer: syz [ 484.476800][ T4311] usb 4-1: SerialNumber: syz [ 484.483713][ T4311] usb 4-1: config 0 descriptor?? [ 484.696539][ T128] usb 4-1: USB disconnect, device number 94 [ 485.051616][T10096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.073034][T10096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.920448][ T4312] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 486.011190][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 486.179660][ T4312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.198585][ T4312] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.214080][ T4312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.254581][ T4312] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 486.297474][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 486.312409][ T4312] usb 3-1: Product: syz [ 486.341252][ T4312] usb 3-1: Manufacturer: syz [ 486.349019][ T4312] usb 3-1: SerialNumber: syz [ 486.384297][ T4312] usb 3-1: config 0 descriptor?? [ 486.425437][ T4312] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 486.437763][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.615554][ T4314] usb 3-1: USB disconnect, device number 89 [ 487.670517][ T4314] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 487.800630][T10128] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 487.918859][ T4314] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 487.943549][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.003001][ T4314] usb 2-1: Product: syz [ 488.034993][ T4314] usb 2-1: Manufacturer: syz [ 488.041534][T10130] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 488.052251][T10132] binder: 10131:10132 ioctl 4018620d 0 returned -22 [ 488.054491][T10130] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 488.072313][ T4314] usb 2-1: SerialNumber: syz [ 488.080470][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 488.607819][ T4314] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 488.649373][ T4314] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 488.673320][ T4314] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 488.712018][ T4314] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 488.725776][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1640'. [ 488.735531][ T4314] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 488.749650][ T4314] lan78xx: probe of 2-1:1.0 failed with error -71 [ 488.775034][ T4314] usb 2-1: USB disconnect, device number 82 [ 489.013851][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 489.013869][ T26] audit: type=1326 audit(1776825366.054:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.092821][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.106790][ T26] audit: type=1326 audit(1776825366.094:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.143769][ T26] audit: type=1326 audit(1776825366.094:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.189379][ T26] audit: type=1326 audit(1776825366.094:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.197438][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.257138][ T26] audit: type=1326 audit(1776825366.094:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.281304][ T26] audit: type=1326 audit(1776825366.094:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.304580][ T26] audit: type=1326 audit(1776825366.094:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.328903][ T26] audit: type=1326 audit(1776825366.094:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.356669][ T26] audit: type=1326 audit(1776825366.094:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.381496][ T26] audit: type=1326 audit(1776825366.094:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 489.850518][ T4314] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 490.053361][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 490.074513][ T4314] usb 2-1: not running at top speed; connect to a high speed hub [ 490.108538][ T4314] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 490.153283][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.174628][ T4314] usb 2-1: Product: syz [ 490.183249][ T4314] usb 2-1: Manufacturer: syz [ 490.193165][ T4314] usb 2-1: SerialNumber: syz [ 490.340494][ T4312] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 490.415177][ T4314] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 490.533041][ T4312] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 490.554393][ T4312] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 490.640482][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.740082][ T4312] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 490.815297][ T4314] gp8psk: usb in 137 operation failed. [ 490.824172][ T4314] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 490.871880][ T4314] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 490.935908][ T4314] usb 2-1: USB disconnect, device number 83 [ 491.261373][T10175] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 491.443501][T10178] device syzkaller0 entered promiscuous mode [ 491.766780][T10184] binder: 10183:10184 ioctl 4018620d 0 returned -22 [ 491.781672][ T4312] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 491.803807][ T4312] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 491.849400][ T4312] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 491.881365][ T4312] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 491.904256][ T4312] usb 1-1: USB disconnect, device number 83 [ 492.385120][T10193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1655'. [ 492.651897][ T4314] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 492.700686][ T22] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 492.842499][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.867467][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.879213][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 492.898592][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 492.906202][ T22] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 492.914840][ T4314] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 492.925074][ T22] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.937463][ T4314] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 492.945895][ T22] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.956056][ T4314] usb 1-1: Manufacturer: syz [ 492.964951][ T22] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.976124][ T4314] usb 1-1: config 0 descriptor?? [ 492.988843][ T22] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.002553][ T22] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 493.012017][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.232782][ T22] usb 2-1: GET_CAPABILITIES returned 0 [ 493.238420][ T22] usbtmc 2-1:16.0: can't read capabilities [ 493.324017][T10214] device syzkaller0 entered promiscuous mode [ 493.436008][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 493.445155][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 493.454270][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 493.463374][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 493.472474][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 493.481565][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 493.515564][ T4335] usb 2-1: USB disconnect, device number 84 [ 493.605862][ T4314] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 493.625862][ T4314] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 493.657385][ T4314] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 493.678968][ T4314] usb 1-1: USB disconnect, device number 84 [ 494.262213][T10228] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 494.311711][T10228] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 494.324282][T10228] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 494.371997][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1666'. [ 494.751695][ T4335] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 494.940443][ T4335] usb 2-1: Using ep0 maxpacket: 8 [ 494.949890][ T4335] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 494.992223][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.000297][ T4335] usb 2-1: Product: syz [ 495.022238][ T4335] usb 2-1: Manufacturer: syz [ 495.032240][ T4335] usb 2-1: SerialNumber: syz [ 495.048727][ T4335] usb 2-1: config 0 descriptor?? [ 495.080206][ T4335] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 495.162773][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1671'. [ 495.443188][T10248] fuse: Invalid rootmode [ 496.560469][ T22] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 496.742763][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.753282][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.764280][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 496.773846][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 496.784050][ T22] usb 4-1: SerialNumber: syz [ 496.893928][T10263] random: crng reseeded on system resumption [ 497.001212][ T22] usb 4-1: 0:2 : does not exist [ 497.040242][ T22] usb 4-1: USB disconnect, device number 95 [ 497.286490][ T4335] gspca_sonixj: reg_w1 err -71 [ 497.350562][ T4335] sonixj: probe of 2-1:0.0 failed with error -71 [ 497.371749][ T4335] usb 2-1: USB disconnect, device number 85 [ 498.126742][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 498.271903][T10289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1684'. [ 498.873006][T10299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.938725][T10299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.366351][T10312] device syzkaller0 entered promiscuous mode [ 499.696881][T10316] binder: 10315:10316 ioctl c0306201 0 returned -14 [ 499.827476][T10319] bridge_slave_1: default FDB implementation only supports local addresses [ 500.888396][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 501.327366][T10335] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1697'. [ 501.464317][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.471163][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.623333][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'. [ 502.920453][ T22] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 503.070642][ T22] usb 2-1: device descriptor read/64, error -71 [ 503.186918][T10365] binder: 10364:10365 ioctl c0306201 0 returned -14 [ 503.360439][ T22] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 503.530473][ T22] usb 2-1: device descriptor read/64, error -71 [ 503.651527][ T22] usb usb2-port1: attempt power cycle [ 504.101787][ T22] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 504.143979][ T22] usb 2-1: device descriptor read/8, error -71 [ 504.441136][ T22] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 504.478165][T10371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.492592][ T22] usb 2-1: device descriptor read/8, error -71 [ 504.610750][ T22] usb usb2-port1: unable to enumerate USB device [ 504.640595][T10371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.151208][T10377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1709'. [ 505.277233][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 505.804532][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 505.939976][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'. [ 506.004878][T10392] sctp_transport_update_pmtu: 39 callbacks suppressed [ 506.004899][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.070910][T10395] netlink: 'syz.0.1714': attribute type 1 has an invalid length. [ 506.123204][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.137556][T10395] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address [ 506.151274][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.199204][T10395] bond13: (slave vxcan5): Error -95 calling set_mac_address [ 506.242183][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.256676][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.267984][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.281310][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.294214][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.318965][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.347264][T10392] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 506.411557][T10399] device macvlan3 entered promiscuous mode [ 506.443226][T10399] device bond13 entered promiscuous mode [ 506.467111][T10399] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 506.589108][T10399] device bond13 left promiscuous mode [ 507.772413][T10415] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 507.870243][T10420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1720'. [ 507.893794][T10418] bond20: (slave vxcan5): The slave device specified does not support setting the MAC address [ 507.896657][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 507.959024][T10418] bond20: (slave vxcan5): Error -95 calling set_mac_address [ 507.974022][T10415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1719'. [ 508.270578][T10427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1721'. [ 508.320521][ T22] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 508.390449][ T4348] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 508.513683][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.538987][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.551154][ T22] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 508.560730][ T4348] usb 2-1: device descriptor read/64, error -71 [ 508.568490][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 508.577825][ T22] usb 3-1: SerialNumber: syz [ 508.800492][ T22] usb 3-1: 0:2 : does not exist [ 508.840581][ T4348] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 508.854809][ T22] usb 3-1: USB disconnect, device number 90 [ 508.895734][ T4347] udevd[4347]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 508.922084][ T4347] udevd[4347]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 508.928218][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 509.021466][ T4348] usb 2-1: device descriptor read/64, error -71 [ 509.039507][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 509.146631][ T4348] usb usb2-port1: attempt power cycle [ 509.438942][T10447] capability: warning: `syz.2.1729' uses deprecated v2 capabilities in a way that may be insecure [ 509.562472][ T4348] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 509.621093][ T4348] usb 2-1: device descriptor read/8, error -71 [ 509.756867][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 509.766116][ T4335] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 509.900799][ T4348] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 509.930494][ T4335] usb 4-1: device descriptor read/64, error -71 [ 509.952275][ T4348] usb 2-1: device descriptor read/8, error -71 [ 510.071699][ T4348] usb usb2-port1: unable to enumerate USB device [ 510.210450][ T4335] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 510.380455][ T4335] usb 4-1: device descriptor read/64, error -71 [ 510.511657][ T4335] usb usb4-port1: attempt power cycle [ 510.710448][ T4312] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 510.831331][T10471] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 510.859031][T10471] bond16: (slave vxcan7): The slave device specified does not support setting the MAC address [ 510.873389][T10471] bond16: (slave vxcan7): Error -95 calling set_mac_address [ 510.902507][ T4312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.917399][T10474] bond16: (slave bridge10): Enslaving as an active interface with a down link [ 510.930493][ T4335] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 510.950258][ T4312] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.972074][ T4335] usb 4-1: device descriptor read/8, error -71 [ 510.978644][ T4312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 511.015985][ T4312] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.037481][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 511.056527][ T4312] usb 1-1: Product: syz [ 511.082734][ T4312] usb 1-1: Manufacturer: syz [ 511.087381][ T4312] usb 1-1: SerialNumber: syz [ 511.114579][ T4312] usb 1-1: config 0 descriptor?? [ 511.163508][ T4312] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 511.208611][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.261056][ T4335] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 511.311320][ T4335] usb 4-1: device descriptor read/8, error -71 [ 511.336941][ T4348] usb 1-1: USB disconnect, device number 85 [ 511.430612][ T4335] usb usb4-port1: unable to enumerate USB device [ 511.453835][T10478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1739'. [ 511.568668][T10480] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 512.064902][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 512.064919][ T26] audit: type=1326 audit(1776825389.104:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.123740][ T26] audit: type=1326 audit(1776825389.134:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.147985][ T26] audit: type=1326 audit(1776825389.134:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.171846][ T26] audit: type=1326 audit(1776825389.134:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.203695][ T26] audit: type=1326 audit(1776825389.144:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.258932][ T26] audit: type=1326 audit(1776825389.144:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.376753][ T26] audit: type=1326 audit(1776825389.144:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.437312][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 512.449234][ T26] audit: type=1326 audit(1776825389.144:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.478296][ T26] audit: type=1326 audit(1776825389.144:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.510622][ T26] audit: type=1326 audit(1776825389.144:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 512.540035][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 512.940620][ T4335] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 513.134323][ T4335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 513.147428][ T4335] usb 4-1: not running at top speed; connect to a high speed hub [ 513.174171][ T4335] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 513.199097][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.226395][ T4335] usb 4-1: Product: syz [ 513.239809][ T4335] usb 4-1: Manufacturer: syz [ 513.260494][ T4335] usb 4-1: SerialNumber: syz [ 513.270482][ T4312] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 513.441662][ T4312] usb 1-1: device descriptor read/64, error -71 [ 513.492558][ T4335] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 513.712405][T10516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1751'. [ 513.740723][ T4312] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 513.868453][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1752'. [ 513.895163][ T4335] gp8psk: usb out operation failed. [ 513.902343][ T4335] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 513.912847][ T4312] usb 1-1: device descriptor read/64, error -71 [ 513.929711][ T4335] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 513.960604][ T4335] usb 4-1: USB disconnect, device number 100 [ 514.040926][ T4312] usb usb1-port1: attempt power cycle [ 514.270429][ T4348] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 514.460756][ T4312] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 514.480450][ T4348] usb 5-1: Using ep0 maxpacket: 8 [ 514.496882][ T4348] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 514.511015][ T4312] usb 1-1: device descriptor read/8, error -71 [ 514.519284][ T4348] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 514.550532][ T4348] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 514.572905][ T4348] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 514.643611][ T4348] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.702846][ T4348] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.727034][ T4348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.780567][ T4312] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 514.821244][ T4312] usb 1-1: device descriptor read/8, error -71 [ 514.969850][ T4348] usb 5-1: GET_CAPABILITIES returned 0 [ 514.970634][ T4312] usb usb1-port1: unable to enumerate USB device [ 514.977278][ T4348] usbtmc 5-1:16.0: can't read capabilities [ 515.041872][ T22] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 515.220548][ T22] usb 2-1: device descriptor read/64, error -71 [ 515.510647][ T22] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 515.615090][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 515.670562][ T22] usb 2-1: device descriptor read/64, error -71 [ 515.801441][ T22] usb usb2-port1: attempt power cycle [ 516.133942][T10545] device syzkaller0 entered promiscuous mode [ 516.230631][ T22] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 516.271834][ T22] usb 2-1: device descriptor read/8, error -71 [ 516.553393][ T22] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 516.602398][ T22] usb 2-1: device descriptor read/8, error -71 [ 516.654573][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 516.731684][ T22] usb usb2-port1: unable to enumerate USB device [ 517.133940][ T4335] usb 5-1: USB disconnect, device number 96 [ 517.197678][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1764'. [ 517.610419][ T4312] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 517.620482][ T4335] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 517.770472][ T4312] usb 3-1: device descriptor read/64, error -71 [ 517.810499][ T4335] usb 5-1: Using ep0 maxpacket: 8 [ 517.820799][ T4335] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 517.870877][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.911671][ T4335] usb 5-1: Product: syz [ 517.911903][T10566] device syzkaller0 entered promiscuous mode [ 517.915876][ T4335] usb 5-1: Manufacturer: syz [ 517.915896][ T4335] usb 5-1: SerialNumber: syz [ 517.972833][ T4335] usb 5-1: config 0 descriptor?? [ 517.981672][ T4335] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 518.051968][ T4312] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 518.114910][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 518.114928][ T26] audit: type=1326 audit(1776825395.154:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 518.149716][ T26] audit: type=1326 audit(1776825395.154:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 518.173044][ T26] audit: type=1326 audit(1776825395.154:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 518.201346][ T26] audit: type=1326 audit(1776825395.154:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996b95d04e code=0x7ffc0000 [ 518.224233][ T4312] usb 3-1: device descriptor read/64, error -71 [ 518.234383][ T26] audit: type=1326 audit(1776825395.154:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 518.258312][ T26] audit: type=1326 audit(1776825395.154:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 518.296167][ T26] audit: type=1326 audit(1776825395.154:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 518.350693][ T4312] usb usb3-port1: attempt power cycle [ 518.355000][ T26] audit: type=1326 audit(1776825395.154:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996b99c819 code=0x7ffc0000 [ 518.488295][T10577] device syzkaller0 entered promiscuous mode [ 518.762158][ T4312] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 518.777853][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 518.811059][ T4312] usb 3-1: device descriptor read/8, error -71 [ 519.080581][ T4312] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 519.121814][ T4312] usb 3-1: device descriptor read/8, error -71 [ 519.250941][ T4312] usb usb3-port1: unable to enumerate USB device [ 519.354843][T10590] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1776' resets device [ 519.442137][T10592] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 519.467865][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1775'. [ 519.500371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 519.623556][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.716702][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.772741][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'. [ 519.970524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 520.251660][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.271154][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.589221][ T26] audit: type=1326 audit(1776825397.624:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10607 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 520.627489][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.640031][ T26] audit: type=1326 audit(1776825397.654:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10607 comm="syz.2.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa97e59c819 code=0x7ffc0000 [ 520.699443][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.830745][ T4335] gspca_sonixj: reg_w1 err -110 [ 520.890530][ T4335] sonixj: probe of 5-1:0.0 failed with error -110 [ 521.136609][ T4335] usb 5-1: USB disconnect, device number 97 [ 522.130449][ T4335] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 522.322358][ T4335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.339188][ T4335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.377863][ T4335] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 522.407547][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.455586][ T4335] usb 2-1: config 0 descriptor?? [ 522.830673][ T22] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 522.873178][T10636] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 522.886078][ T4335] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 522.894708][ T4335] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 522.905756][ T4335] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000E/input/input30 [ 522.924753][T10636] bond21: (slave vxcan5): The slave device specified does not support setting the MAC address [ 522.925788][ T4335] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 522.938059][T10636] bond21: (slave vxcan5): Error -95 calling set_mac_address [ 522.993944][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1788'. [ 523.020576][ T22] usb 3-1: device descriptor read/64, error -71 [ 523.104016][ T4314] usb 2-1: USB disconnect, device number 98 [ 523.140683][ T4312] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 523.290563][ T4312] usb 5-1: device descriptor read/64, error -71 [ 523.298498][T10644] device syzkaller0 entered promiscuous mode [ 523.310644][ T22] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 523.480482][ T22] usb 3-1: device descriptor read/64, error -71 [ 523.560479][ T4312] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 523.622981][ T22] usb usb3-port1: attempt power cycle [ 523.710653][ T4312] usb 5-1: device descriptor read/64, error -71 [ 523.830745][ T4312] usb usb5-port1: attempt power cycle [ 523.899763][T10653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1793'. [ 524.050603][ T22] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 524.092493][ T22] usb 3-1: device descriptor read/8, error -71 [ 524.260642][ T4312] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 524.311164][ T4312] usb 5-1: device descriptor read/8, error -71 [ 524.360425][ T22] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 524.401100][ T22] usb 3-1: device descriptor read/8, error -71 [ 524.520630][ T22] usb usb3-port1: unable to enumerate USB device [ 524.590652][ T4312] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 524.642035][ T4312] usb 5-1: device descriptor read/8, error -71 [ 524.705048][T10665] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 524.761853][ T4312] usb usb5-port1: unable to enumerate USB device [ 524.996780][T10668] random: crng reseeded on system resumption [ 525.718122][T10677] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 525.959459][T10681] device syzkaller0 entered promiscuous mode [ 526.527573][T10688] device syzkaller0 entered promiscuous mode [ 527.230628][ T4348] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 527.440536][ T4348] usb 1-1: Using ep0 maxpacket: 32 [ 527.447799][ T4348] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.500088][ T4348] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.532945][ T4348] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 527.573227][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.581522][ T4348] usb 1-1: Product: syz [ 527.598716][ T4348] usb 1-1: Manufacturer: syz [ 527.623302][ T4348] usb 1-1: SerialNumber: syz [ 527.676545][ T4348] usb 1-1: config 0 descriptor?? [ 528.690483][ T4348] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 528.867230][ T4348] usb 5-1: device descriptor read/64, error -71 [ 529.143172][ T4348] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 529.307578][ T4348] usb 5-1: device descriptor read/64, error -71 [ 529.431248][ T4348] usb usb5-port1: attempt power cycle [ 529.491760][ T4335] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 529.686300][ T4335] usb 3-1: Using ep0 maxpacket: 16 [ 529.703993][ T4335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.715208][ T4335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.732930][ T4335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 529.747320][ T4335] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 529.757497][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.792169][ T4335] usb 3-1: config 0 descriptor?? [ 529.840941][ T4348] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 529.884775][ T4348] usb 5-1: device descriptor read/8, error -71 [ 530.002830][ T4314] usb 1-1: USB disconnect, device number 90 [ 530.177958][ T4348] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 530.218025][ T4348] usb 5-1: device descriptor read/8, error -71 [ 530.264959][ T4335] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 530.276745][ T4335] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 530.343612][ T4335] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input31 [ 530.362630][ T4348] usb usb5-port1: unable to enumerate USB device [ 530.423921][ T4335] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 530.488809][ T4335] usb 3-1: USB disconnect, device number 99 [ 530.628739][T10720] fido_id[10720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 531.504399][T10727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.685749][T10736] random: crng reseeded on system resumption [ 532.132727][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 534.294715][T10776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1823'. [ 534.478194][T10778] device syzkaller0 entered promiscuous mode [ 537.150485][ T4314] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 537.376076][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 537.419060][ T4314] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 537.444353][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.471001][ T4314] usb 4-1: Product: syz [ 537.475200][ T4314] usb 4-1: Manufacturer: syz [ 537.480742][ T4314] usb 4-1: SerialNumber: syz [ 537.559012][ T4314] usb 4-1: config 0 descriptor?? [ 537.583415][ T4314] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 538.990694][ T4312] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 539.206848][ T4312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.219147][ T4312] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.235475][ T4312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.246782][ T4312] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 539.261306][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 539.269706][ T4312] usb 2-1: Product: syz [ 539.275752][ T4312] usb 2-1: Manufacturer: syz [ 539.280904][ T4312] usb 2-1: SerialNumber: syz [ 539.295284][ T4312] usb 2-1: config 0 descriptor?? [ 539.347906][ T4312] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 539.363603][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.405320][ T4314] gspca_sonixj: reg_r err -32 [ 539.490506][ T4314] sonixj: probe of 4-1:0.0 failed with error -32 [ 539.534018][ T4335] usb 2-1: USB disconnect, device number 99 [ 539.832561][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 539.832580][ T26] audit: type=1326 audit(1776825416.874:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 539.852472][T10838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.935326][ T26] audit: type=1326 audit(1776825416.884:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 539.969629][ T26] audit: type=1326 audit(1776825416.884:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.003139][T10838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.025018][ T26] audit: type=1326 audit(1776825416.884:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.049953][ T26] audit: type=1326 audit(1776825416.884:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.079084][ T26] audit: type=1326 audit(1776825416.884:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.127787][ T26] audit: type=1326 audit(1776825416.884:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.152636][ T26] audit: type=1326 audit(1776825416.884:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.176829][ T26] audit: type=1326 audit(1776825416.884:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.254432][ T26] audit: type=1326 audit(1776825416.884:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.0.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f73c9d9c819 code=0x7ffc0000 [ 540.471783][ T4312] usb 4-1: USB disconnect, device number 101 [ 542.082966][T10866] device syzkaller0 entered promiscuous mode [ 542.380468][ T4335] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 542.580509][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 542.589313][ T4335] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 542.625459][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.643487][ T4335] usb 3-1: Product: syz [ 542.662009][ T4335] usb 3-1: Manufacturer: syz [ 542.666682][ T4335] usb 3-1: SerialNumber: syz [ 542.685444][ T4335] usb 3-1: config 0 descriptor?? [ 542.699388][ T4335] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 542.961232][ T4312] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 543.162217][ T4312] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 543.172427][ T4312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.182778][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 543.191918][ T4312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.204670][ T4312] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 543.213987][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.222220][ T4312] usb 2-1: Product: syz [ 543.226528][ T4312] usb 2-1: Manufacturer: syz [ 543.236291][ T4312] cdc_wdm 2-1:1.0: skipping garbage [ 543.241767][ T4312] cdc_wdm 2-1:1.0: skipping garbage [ 543.249217][ T4312] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 543.255408][ T4312] cdc_wdm 2-1:1.0: Unknown control protocol [ 543.453169][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.471277][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.481729][ T4312] usb 2-1: USB disconnect, device number 100 [ 543.550234][T10887] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 543.619945][T10889] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 543.653077][T10889] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 543.739932][T10887] bond14: (slave bridge11): Enslaving as an active interface with a down link [ 544.020615][ T4314] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 544.212147][ T4314] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 544.236007][ T4314] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 544.285530][ T4314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 544.306078][ T4314] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.316340][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.324797][ T4314] usb 5-1: Product: syz [ 544.329088][ T4314] usb 5-1: Manufacturer: syz [ 544.383188][T10897] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 544.390255][ T4314] usb 5-1: SerialNumber: syz [ 544.407540][ T4314] usb 5-1: config 0 descriptor?? [ 544.431481][T10897] bond22: (slave vxcan5): The slave device specified does not support setting the MAC address [ 544.445133][T10897] bond22: (slave vxcan5): Error -95 calling set_mac_address [ 544.459298][ T4314] usb 5-1: selecting invalid altsetting 0 [ 544.492203][T10901] bond22: (slave bridge13): Enslaving as an active interface with a down link [ 544.671481][ T4314] usb 5-1: USB disconnect, device number 106 [ 544.739532][T10906] device syzkaller0 entered promiscuous mode [ 544.832216][T10908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1860'. [ 544.906253][ T4335] gspca_ov534_9: reg_r err -32 [ 545.192138][T10921] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 545.280476][ T4335] gspca_ov534_9: Unknown sensor 0000 [ 545.280544][ T4335] ov534_9: probe of 3-1:0.0 failed with error -22 [ 545.294927][ T4335] usb 3-1: USB disconnect, device number 100 [ 545.593888][T10927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1866'. [ 545.888581][T10932] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 545.934207][T10932] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 545.977218][T10932] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 546.065385][T10934] bond8: (slave bridge8): Enslaving as an active interface with a down link [ 546.090772][ T128] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 546.193496][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 546.282118][ T128] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 546.302206][ T128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.319689][ T128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 546.343199][ T128] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.365892][ T128] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 546.379597][ T128] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 546.388401][ T128] usb 5-1: Product: syz [ 546.395126][ T128] usb 5-1: Manufacturer: syz [ 546.417211][ T128] cdc_wdm 5-1:1.0: skipping garbage [ 546.423389][ T128] cdc_wdm 5-1:1.0: skipping garbage [ 546.454862][ T128] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 546.475841][ T128] cdc_wdm 5-1:1.0: Unknown control protocol [ 546.631549][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.658277][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.701325][ T4335] usb 5-1: USB disconnect, device number 107 [ 547.689366][T10950] device syzkaller0 entered promiscuous mode [ 547.844749][T10952] device syzkaller0 entered promiscuous mode [ 548.335321][T10960] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 548.429068][T10965] bond17: (slave vxcan7): The slave device specified does not support setting the MAC address [ 548.527548][T10965] bond17: (slave vxcan7): Error -95 calling set_mac_address [ 548.603485][T10960] device macvlan0 entered promiscuous mode [ 548.646172][T10960] device bond17 entered promiscuous mode [ 548.653107][T10960] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 548.680631][ T4314] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 548.688554][T10960] device bond17 left promiscuous mode [ 548.866913][T10977] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 548.884550][ T4314] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 548.908441][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.924695][ T4314] usb 4-1: Product: syz [ 548.932016][T10977] bond18: (slave vxcan7): The slave device specified does not support setting the MAC address [ 548.942594][ T4314] usb 4-1: Manufacturer: syz [ 548.947464][ T4314] usb 4-1: SerialNumber: syz [ 548.959852][T10977] bond18: (slave vxcan7): Error -95 calling set_mac_address [ 548.985701][T10974] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1880'. [ 549.005569][T10979] bond18: (slave bridge11): Enslaving as an active interface with a down link [ 549.159641][ T4314] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 549.184662][ T4314] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 549.210888][ T4314] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 549.238022][ T4314] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 549.249196][ T4314] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 549.274851][ T4314] lan78xx: probe of 4-1:1.0 failed with error -71 [ 549.317792][ T4314] usb 4-1: USB disconnect, device number 102 [ 549.672844][T10985] device syzkaller0 entered promiscuous mode [ 549.770434][ T4348] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 549.950564][ T4348] usb 1-1: device descriptor read/64, error -71 [ 550.089969][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1885'. [ 550.250417][ T4348] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 550.421015][ T4348] usb 1-1: device descriptor read/64, error -71 [ 550.550733][ T4348] usb usb1-port1: attempt power cycle [ 550.650616][ T4314] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 550.841863][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.878623][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.929332][ T4314] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 550.954500][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.962882][ T4348] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 550.999803][ T4314] usb 2-1: config 0 descriptor?? [ 551.011877][ T4348] usb 1-1: device descriptor read/8, error -71 [ 551.291066][ T4348] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 551.331699][ T4348] usb 1-1: device descriptor read/8, error -71 [ 551.447671][ T4314] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 551.455804][ T4348] usb usb1-port1: unable to enumerate USB device [ 551.472566][ T4314] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 551.494975][ T4314] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0010/input/input32 [ 551.514814][ T4314] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 551.643377][ T4314] usb 2-1: USB disconnect, device number 101 [ 551.698940][T11014] fido_id[11014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 551.715285][ T4312] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 551.911602][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 551.919018][ T4312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.950433][ T4312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.013370][ T4312] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 552.023626][ T4312] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 552.033683][ T4312] usb 4-1: Product: syz [ 552.038210][ T4312] usb 4-1: Manufacturer: syz [ 552.047829][ T4312] hub 4-1:4.0: USB hub found [ 552.244063][T11022] device syzkaller0 entered promiscuous mode [ 552.260768][ T4312] hub 4-1:4.0: 2 ports detected [ 552.281955][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1897'. [ 552.416220][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 552.416238][ T26] audit: type=1326 audit(1776825429.454:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.474552][ T26] audit: type=1326 audit(1776825429.454:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.499909][ T26] audit: type=1326 audit(1776825429.464:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.533639][ T26] audit: type=1326 audit(1776825429.464:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.558614][ T26] audit: type=1326 audit(1776825429.464:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.585568][ T26] audit: type=1326 audit(1776825429.464:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb9ef5d04e code=0x7ffc0000 [ 552.644505][ T26] audit: type=1326 audit(1776825429.464:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.668570][ T26] audit: type=1326 audit(1776825429.464:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.702511][ T26] audit: type=1326 audit(1776825429.464:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.724322][T11039] netlink: 'syz.2.1902': attribute type 1 has an invalid length. [ 552.734032][ T26] audit: type=1326 audit(1776825429.464:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz.4.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 552.760467][ T4314] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 552.817019][T11042] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address [ 552.830235][T11042] bond16: (slave vxcan3): Error -95 calling set_mac_address [ 552.850785][T11036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1899'. [ 552.871826][T11039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1902'. [ 552.900710][T11039] device macvlan0 entered promiscuous mode [ 552.920423][ T4314] usb 2-1: device descriptor read/64, error -71 [ 552.927439][T11039] device bond16 entered promiscuous mode [ 552.945983][T11039] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 552.969462][T11039] device bond16 left promiscuous mode [ 553.200448][ T4314] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 553.360625][ T4314] usb 2-1: device descriptor read/64, error -71 [ 553.480609][ T4314] usb usb2-port1: attempt power cycle [ 553.513018][ T4312] hub 4-1:4.0: activate --> -90 [ 553.722736][ T4312] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 553.730411][ T4335] usb 4-1: USB disconnect, device number 103 [ 553.900735][ T4314] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 553.942863][ T4314] usb 2-1: device descriptor read/8, error -71 [ 554.041684][T11053] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 554.093484][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 554.216589][ T4314] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 554.251797][ T4314] usb 2-1: device descriptor read/8, error -71 [ 554.380687][ T4314] usb usb2-port1: unable to enumerate USB device [ 555.051671][ T4312] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 555.241029][ T4312] usb 3-1: device descriptor read/64, error -71 [ 555.521646][ T4312] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 555.700896][ T128] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 555.710461][ T4312] usb 3-1: device descriptor read/64, error -71 [ 555.831352][ T4312] usb usb3-port1: attempt power cycle [ 555.894418][ T128] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 555.926262][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.938620][ T128] usb 5-1: config 0 descriptor?? [ 555.966177][ T128] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 556.081576][ T4335] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 556.240440][ T4312] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 556.271305][ T4312] usb 3-1: device descriptor read/8, error -71 [ 556.281837][ T4335] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 556.291414][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.299988][ T4335] usb 2-1: Product: syz [ 556.306016][ T4335] usb 2-1: Manufacturer: syz [ 556.317287][ T4335] usb 2-1: SerialNumber: syz [ 556.378295][ T128] gspca_cpia1: usb_control_msg 03, error -71 [ 556.380448][ T7] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 556.394558][ T128] gspca_cpia1: usb_control_msg 01, error -71 [ 556.402012][ T128] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 556.430806][ T128] usb 5-1: USB disconnect, device number 108 [ 556.529466][ T4335] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 556.541251][ T4312] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 556.557611][ T4335] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 556.574161][ T4335] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 556.587537][ T4312] usb 3-1: device descriptor read/8, error -71 [ 556.593866][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 556.599471][ T4335] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 556.613158][ T7] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 556.633818][ T4335] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 556.643176][ T7] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 556.662315][ T4335] lan78xx: probe of 2-1:1.0 failed with error -71 [ 556.680164][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 556.693095][ T4335] usb 2-1: USB disconnect, device number 106 [ 556.699747][ T7] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 556.709507][ T7] usb 4-1: Product: syz [ 556.715497][ T7] usb 4-1: Manufacturer: syz [ 556.722231][ T4312] usb usb3-port1: unable to enumerate USB device [ 556.743400][ T7] hub 4-1:4.0: bad descriptor, ignoring hub [ 556.758298][ T7] hub: probe of 4-1:4.0 failed with error -5 [ 556.771565][ T7] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 557.265023][T11095] device syzkaller0 entered promiscuous mode [ 557.442633][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 557.470443][ T4335] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 557.672347][ T4335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.701046][ T4335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.721059][ T4335] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 557.745371][ T4335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.761196][ T4348] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 557.772376][ T4335] usb 2-1: SerialNumber: syz [ 557.962400][ T4348] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 557.993499][ T4348] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 558.011676][ T128] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 558.022554][ T4335] usb 2-1: 0:2 : does not exist [ 558.051771][ T4348] usb 1-1: config 0 interface 0 has no altsetting 0 [ 558.062857][ T4348] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 558.072186][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 558.080668][ T4348] usb 1-1: Product: syz [ 558.085258][ T4348] usb 1-1: Manufacturer: syz [ 558.089896][ T4348] usb 1-1: SerialNumber: syz [ 558.092160][ T4335] usb 2-1: USB disconnect, device number 107 [ 558.096503][ T4348] usb 1-1: config 0 descriptor?? [ 558.110057][ T4348] usb 1-1: selecting invalid altsetting 0 [ 558.210454][ T128] usb 3-1: Using ep0 maxpacket: 16 [ 558.217928][ T128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.228532][ T128] usb 3-1: config 0 has no interfaces? [ 558.235055][ T128] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 558.247590][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.262302][ T128] usb 3-1: config 0 descriptor?? [ 558.326047][ T7] usb 1-1: USB disconnect, device number 95 [ 558.698634][T11117] netlink: 'syz.1.1925': attribute type 1 has an invalid length. [ 558.725971][T11117] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 558.737733][T11117] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 558.781308][T11121] bond9: (slave bridge9): Enslaving as an active interface with a down link [ 559.603405][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1929'. [ 559.784542][T11143] device syzkaller0 entered promiscuous mode [ 560.082581][ T4348] usb 4-1: USB disconnect, device number 104 [ 560.626835][ T4335] usb 3-1: USB disconnect, device number 105 [ 560.749882][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 561.133218][ T4335] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 561.328261][ T4335] usb 3-1: Using ep0 maxpacket: 32 [ 561.348289][ T4335] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 561.358011][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.366715][ T4335] usb 3-1: Product: syz [ 561.371434][ T4335] usb 3-1: Manufacturer: syz [ 561.376132][ T4335] usb 3-1: SerialNumber: syz [ 561.393623][ T4335] usb 3-1: config 0 descriptor?? [ 561.626831][ T4335] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 106 [ 562.136180][T11170] random: crng reseeded on system resumption [ 562.906564][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.913374][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.087466][T11145] device syzkaller0 entered promiscuous mode [ 563.880636][ T4348] usb 3-1: USB disconnect, device number 106 [ 564.150765][ T4311] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 564.361377][ T4311] usb 1-1: Using ep0 maxpacket: 32 [ 564.371290][ T4311] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 564.396162][ T4311] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.438432][ T4311] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 564.457186][ T4311] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 564.468322][ T4311] usb 1-1: Product: syz [ 564.488038][ T4311] usb 1-1: Manufacturer: syz [ 564.505665][ T4311] hub 1-1:4.0: bad descriptor, ignoring hub [ 564.514799][ T4311] hub: probe of 1-1:4.0 failed with error -5 [ 564.523193][ T4311] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 566.137248][T11201] device syzkaller0 entered promiscuous mode [ 566.225760][T11198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 566.554406][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 566.721545][ T4348] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 566.912904][ T4348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.923362][ T4348] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.984029][ T4348] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 567.013107][ T4348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.029486][ T4348] usb 3-1: SerialNumber: syz [ 567.249619][ T4348] usb 3-1: 0:2 : does not exist [ 567.285298][ T4348] usb 3-1: USB disconnect, device number 107 [ 567.351771][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.368980][T11222] random: crng reseeded on system resumption [ 567.470473][ T4314] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 567.680825][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 567.689854][ T4314] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 567.722810][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.734730][ T4314] usb 5-1: Product: syz [ 567.739302][ T4314] usb 5-1: Manufacturer: syz [ 567.741674][ T4311] usb 1-1: USB disconnect, device number 96 [ 567.744519][ T4314] usb 5-1: SerialNumber: syz [ 567.786129][ T4314] usb 5-1: config 0 descriptor?? [ 567.998754][ T4314] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 109 [ 568.108611][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 569.088127][T11247] device syzkaller0 entered promiscuous mode [ 569.488789][T11249] device syzkaller0 entered promiscuous mode [ 569.845370][T11254] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 569.896949][T11254] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 569.949280][T11254] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 570.009390][T11259] bond10: (slave bridge10): Enslaving as an active interface with a down link [ 570.183940][ T4335] usb 5-1: USB disconnect, device number 109 [ 570.340509][ T4311] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 570.565807][ T4311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.588666][ T4311] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.602798][ T4311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 570.614806][ T4311] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.625378][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.633846][ T4311] usb 4-1: Product: syz [ 570.638397][ T4311] usb 4-1: Manufacturer: syz [ 570.644555][ T4311] usb 4-1: SerialNumber: syz [ 570.665226][ T4311] usb 4-1: config 0 descriptor?? [ 570.794207][ T4311] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 570.857500][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.915979][ T4311] usb 4-1: USB disconnect, device number 105 [ 571.748750][T11283] device syzkaller0 entered promiscuous mode [ 572.095550][T11290] device syzkaller0 entered promiscuous mode [ 572.170607][ T4335] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 572.326705][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 572.369483][ T4335] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 572.391594][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.412370][ T4335] usb 1-1: Product: syz [ 572.416619][ T4335] usb 1-1: Manufacturer: syz [ 572.432319][ T4335] usb 1-1: SerialNumber: syz [ 572.651907][ T4314] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 572.682962][T11306] device syzkaller0 entered promiscuous mode [ 572.850479][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 572.857209][ T4335] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 572.870135][ T4314] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 572.879659][ T4335] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 572.902240][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.915528][ T4314] usb 2-1: Product: syz [ 572.919800][ T4314] usb 2-1: Manufacturer: syz [ 572.937789][ T4335] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 572.950415][ T4314] usb 2-1: SerialNumber: syz [ 572.953244][ T4335] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 572.967491][ T4335] lan78xx: probe of 1-1:1.0 failed with error -71 [ 572.971716][ T4314] usb 2-1: config 0 descriptor?? [ 572.986187][ T4335] usb 1-1: USB disconnect, device number 97 [ 573.209461][ T4314] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 108 [ 573.520529][ T4335] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 573.723966][ T4335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.743741][ T4335] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.776000][ T4335] usb 3-1: config 0 interface 0 has no altsetting 0 [ 573.788200][T11320] device syzkaller0 entered promiscuous mode [ 573.817864][ T4335] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 573.831376][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 573.839685][ T4335] usb 3-1: Product: syz [ 573.845474][ T4335] usb 3-1: Manufacturer: syz [ 573.855679][ T4335] usb 3-1: SerialNumber: syz [ 573.887976][ T4335] usb 3-1: config 0 descriptor?? [ 573.936360][ T4335] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 574.020109][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.114938][ T4314] usb 3-1: USB disconnect, device number 108 [ 574.790508][T11333] device syzkaller0 entered promiscuous mode [ 575.053342][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1987'. [ 575.163301][T11342] device syzkaller0 entered promiscuous mode [ 575.399699][ T128] usb 2-1: USB disconnect, device number 108 [ 575.517824][T11351] device syzkaller0 entered promiscuous mode [ 575.680636][ T4335] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 575.754736][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 575.884044][ T4335] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 575.930441][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.972007][ T4335] usb 4-1: Product: syz [ 576.022061][ T4335] usb 4-1: Manufacturer: syz [ 576.040741][ T4335] usb 4-1: SerialNumber: syz [ 576.064547][ T4335] usb 4-1: config 0 descriptor?? [ 576.086380][ T4335] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 576.154640][T11367] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 576.278243][T11369] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 576.299632][T11346] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 576.314497][T11346] pit: kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 576.324108][T11346] pit: kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 576.325631][T11369] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 576.350919][T11346] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 576.388002][T11346] pit: kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 576.390455][T11367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1996'. [ 576.421937][T11346] pit: kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 576.444985][T11346] pit: kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 576.456901][T11346] pit: kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 576.469322][T11346] pit: kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 576.470046][T11370] device macvlan0 entered promiscuous mode [ 576.491817][T11346] pit: kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 576.527018][T11370] device bond11 entered promiscuous mode [ 576.544174][ T4335] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 576.575015][T11370] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 576.583121][ T4335] sq905c 4-1:0.0: Get version command failed [ 576.592651][ T4335] sq905c: probe of 4-1:0.0 failed with error -71 [ 576.633420][ T4335] usb 4-1: USB disconnect, device number 106 [ 576.655251][T11370] device bond11 left promiscuous mode [ 576.746953][T11372] device syzkaller0 entered promiscuous mode [ 577.608179][T11385] device syzkaller0 entered promiscuous mode [ 577.786961][T11389] device syzkaller0 entered promiscuous mode [ 577.921033][ T7] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 578.110491][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 578.120642][ T7] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 578.166037][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.171937][T11407] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 578.183765][ T7] usb 4-1: Product: syz [ 578.188320][ T7] usb 4-1: Manufacturer: syz [ 578.194579][ T7] usb 4-1: SerialNumber: syz [ 578.207597][ T7] usb 4-1: config 0 descriptor?? [ 578.252296][T11409] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 578.266392][T11409] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 578.303056][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2009'. [ 578.346924][T11407] device macvlan0 entered promiscuous mode [ 578.368863][T11407] device bond12 entered promiscuous mode [ 578.397219][T11407] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 578.423649][ T7] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 107 [ 578.465544][T11407] device bond12 left promiscuous mode [ 578.980621][ T128] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 579.172425][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.191192][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.221889][ T128] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 579.240782][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.265029][ T128] usb 2-1: config 0 descriptor?? [ 579.393407][T11418] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 579.452616][T11418] bond19: (slave vxcan7): The slave device specified does not support setting the MAC address [ 579.466835][T11418] bond19: (slave vxcan7): Error -95 calling set_mac_address [ 579.493072][T11423] bond19: (slave bridge12): Enslaving as an active interface with a down link [ 579.682236][ T128] usbhid 2-1:0.0: can't add hid device: -71 [ 579.689401][ T128] usbhid: probe of 2-1:0.0 failed with error -71 [ 579.698712][ T128] usb 2-1: USB disconnect, device number 109 [ 580.101931][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2015'. [ 580.261480][T11429] device syzkaller0 entered promiscuous mode [ 580.390422][ T7] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 580.580537][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 580.588455][ T7] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 580.607831][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.623956][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.634487][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 580.644713][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.657939][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 580.667483][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.692176][ T128] usb 4-1: USB disconnect, device number 107 [ 580.763251][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 580.818599][T11442] device syzkaller0 entered promiscuous mode [ 580.892527][ T7] usb 5-1: GET_CAPABILITIES returned 0 [ 580.898081][ T7] usbtmc 5-1:16.0: can't read capabilities [ 581.095217][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.104427][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.113591][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.122737][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.131981][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.141145][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.150494][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.159557][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.168802][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.213409][T11448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.252276][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.261706][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.270848][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.279900][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.289070][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.298117][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 581.307430][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 581.316491][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.407320][ T7] usb 5-1: USB disconnect, device number 110 [ 581.760604][ T128] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 581.974389][ T128] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 581.984551][ T128] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 581.995628][ T128] usb 2-1: Product: syz [ 582.000014][ T128] usb 2-1: SerialNumber: syz [ 582.008787][ T128] usb 2-1: config 0 descriptor?? [ 582.321414][ T128] usb 2-1: USB disconnect, device number 110 [ 583.490510][ T7] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 583.681067][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 583.699420][ T7] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 583.744077][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.760255][ T7] usb 4-1: Product: syz [ 583.767602][ T7] usb 4-1: Manufacturer: syz [ 583.774333][ T7] usb 4-1: SerialNumber: syz [ 583.792452][ T7] usb 4-1: config 0 descriptor?? [ 583.890419][ T4314] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 584.005038][ T7] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 108 [ 584.021103][T11486] MPTCP: kernel_bind error, err=-98 [ 584.050465][ T4314] usb 5-1: device descriptor read/64, error -71 [ 584.360474][ T4314] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 584.520616][ T4314] usb 5-1: device descriptor read/64, error -71 [ 584.651065][ T4314] usb usb5-port1: attempt power cycle [ 584.967466][T11498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2035'. [ 585.081266][ T4314] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 585.121713][ T4314] usb 5-1: device descriptor read/8, error -71 [ 585.401250][ T4314] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 585.431770][ T4314] usb 5-1: device descriptor read/8, error -71 [ 585.550558][ T4314] usb usb5-port1: unable to enumerate USB device [ 585.800048][T11504] device syzkaller0 entered promiscuous mode [ 586.203997][ T7] usb 4-1: USB disconnect, device number 108 [ 586.839229][T11521] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 587.132072][T11528] MPTCP: kernel_bind error, err=-98 [ 587.247098][T11532] device syzkaller0 entered promiscuous mode [ 587.344173][T11535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2047'. [ 587.657538][T11540] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 587.701616][ T7] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 587.725792][T11540] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address [ 587.747875][T11540] bond13: (slave vxcan5): Error -95 calling set_mac_address [ 587.775742][T11544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2050'. [ 587.798035][T11544] device macvlan0 entered promiscuous mode [ 587.806485][T11544] device bond13 entered promiscuous mode [ 587.812941][T11544] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 587.823841][T11544] device bond13 left promiscuous mode [ 587.892008][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.934942][ T7] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 587.944779][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.954900][ T7] usb 1-1: Product: syz [ 587.959619][ T7] usb 1-1: Manufacturer: syz [ 587.971791][ T7] usb 1-1: SerialNumber: syz [ 587.980620][ T4314] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 587.999330][ T7] usb 1-1: config 0 descriptor?? [ 588.160640][ T4314] usb 5-1: device descriptor read/64, error -71 [ 588.430539][ T4314] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 588.590631][ T4314] usb 5-1: device descriptor read/64, error -71 [ 588.710609][ T4314] usb usb5-port1: attempt power cycle [ 589.130584][ T4314] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 589.172809][ T4314] usb 5-1: device descriptor read/8, error -71 [ 589.360166][T11570] fuse: Unknown parameter 'fd0x0000000000000003' [ 589.451053][ T4314] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 589.492650][ T4314] usb 5-1: device descriptor read/8, error -71 [ 589.620646][ T4314] usb usb5-port1: unable to enumerate USB device [ 589.767072][T11575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 589.974099][T11577] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 589.999891][T11577] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 590.012078][T11577] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 590.048333][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2062'. [ 590.062203][T11579] device macvlan0 entered promiscuous mode [ 590.069495][T11579] device bond14 entered promiscuous mode [ 590.076497][T11579] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 590.086669][T11579] device bond14 left promiscuous mode [ 590.326821][T11584] MPTCP: kernel_bind error, err=-98 [ 590.489057][ T7] usb 1-1: USB disconnect, device number 98 [ 590.726765][T11591] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 590.808196][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 590.920493][ T7] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 591.145592][ T7] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 591.182248][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.245192][ T7] usb 1-1: Product: syz [ 591.249685][ T7] usb 1-1: Manufacturer: syz [ 591.270105][ T7] usb 1-1: SerialNumber: syz [ 591.685586][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 591.719873][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 591.760620][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 591.798034][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 591.807998][ T7] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 591.819445][ T7] lan78xx: probe of 1-1:1.0 failed with error -71 [ 591.867382][ T7] usb 1-1: USB disconnect, device number 99 [ 592.334223][T11617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.121545][T11630] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2078'. [ 593.151123][T11630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2078'. [ 593.396080][T11640] device syzkaller0 entered promiscuous mode [ 593.446771][T11642] MPTCP: kernel_bind error, err=-98 [ 593.659313][T11648] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 593.695382][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2084'. [ 593.900432][ T7] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 594.095244][ T7] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 594.111917][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.127416][ T7] usb 3-1: Product: syz [ 594.144942][ T7] usb 3-1: Manufacturer: syz [ 594.157873][ T7] usb 3-1: SerialNumber: syz [ 594.606349][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 594.639999][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 594.682595][T11661] netlink: 'syz.4.2087': attribute type 1 has an invalid length. [ 594.692659][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 594.723721][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 594.751696][ T7] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 594.775365][ T7] lan78xx: probe of 3-1:1.0 failed with error -71 [ 594.815186][ T7] usb 3-1: USB disconnect, device number 109 [ 594.862143][T11663] bond20: (slave vxcan7): The slave device specified does not support setting the MAC address [ 594.876600][T11663] bond20: (slave vxcan7): Error -95 calling set_mac_address [ 594.947255][T11664] bond20: (slave bridge13): Enslaving as an active interface with a down link [ 595.274540][T11668] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 595.468699][T11670] bond21: (slave vxcan7): The slave device specified does not support setting the MAC address [ 595.538423][T11670] bond21: (slave vxcan7): Error -95 calling set_mac_address [ 595.566137][T11672] bond21: (slave bridge14): Enslaving as an active interface with a down link [ 595.629689][T11671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2089'. [ 595.780444][ T7] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 595.973021][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.989738][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.010434][ T7] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 596.027537][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.065429][ T7] usb 1-1: config 0 descriptor?? [ 596.484934][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 596.496195][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 596.516524][ T7] usb 1-1: USB disconnect, device number 100 [ 596.735695][T11686] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 596.783348][T11691] device syzkaller0 entered promiscuous mode [ 597.106786][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 597.106805][ T26] audit: type=1326 audit(1776825474.144:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 597.205044][ T26] audit: type=1326 audit(1776825474.184:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 597.278631][ T26] audit: type=1326 audit(1776825474.184:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 597.359485][ T26] audit: type=1326 audit(1776825474.184:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 597.397882][ T26] audit: type=1326 audit(1776825474.184:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb9ef5d04e code=0x7ffc0000 [ 597.485749][ T26] audit: type=1326 audit(1776825474.184:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb9ef5d04e code=0x7ffc0000 [ 597.585662][ T26] audit: type=1326 audit(1776825474.184:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 597.636972][ T26] audit: type=1326 audit(1776825474.184:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 597.687466][ T26] audit: type=1326 audit(1776825474.194:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 597.700592][ T128] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 597.717995][T11715] mmap: syz.0.2100 (11715) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 597.732552][T11715] [ 597.734928][T11715] ====================================================== [ 597.741973][T11715] WARNING: possible circular locking dependency detected [ 597.749013][T11715] syzkaller #0 Not tainted [ 597.753709][T11715] ------------------------------------------------------ [ 597.760744][T11715] syz.0.2100/11715 is trying to acquire lock: [ 597.766800][T11715] ffff8880264a3b60 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 597.777498][T11715] [ 597.777498][T11715] but task is already holding lock: [ 597.784853][T11715] ffff888076a8a6d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 597.794858][T11715] [ 597.794858][T11715] which lock already depends on the new lock. [ 597.794858][T11715] [ 597.805259][T11715] [ 597.805259][T11715] the existing dependency chain (in reverse order) is: [ 597.814614][T11715] [ 597.814614][T11715] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 597.822169][T11715] down_read_killable+0x4c/0x340 [ 597.827630][T11715] mmap_read_lock_killable+0x1d/0x60 [ 597.833435][T11715] lock_mm_and_find_vma+0x2b1/0x2f0 [ 597.839168][T11715] do_user_addr_fault+0x2db/0xb10 [ 597.844729][T11715] exc_page_fault+0x60/0x100 [ 597.849836][T11715] asm_exc_page_fault+0x22/0x30 [ 597.855221][T11715] fault_in_readable+0x13e/0x1f0 [ 597.860706][T11715] fault_in_iov_iter_readable+0xbb/0x2e0 [ 597.866864][T11715] generic_perform_write+0x1f1/0x5c0 [ 597.872669][T11715] __generic_file_write_iter+0x148/0x2a0 [ 597.878909][T11715] generic_file_write_iter+0xab/0x2e0 [ 597.884800][T11715] vfs_write+0x4b1/0xa30 [ 597.889586][T11715] ksys_write+0x14c/0x250 [ 597.894449][T11715] do_syscall_64+0x4c/0xa0 [ 597.899389][T11715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.905820][T11715] [ 597.905820][T11715] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 597.914521][T11715] __lock_acquire+0x2d07/0x7d10 [ 597.919899][T11715] lock_acquire+0x1bb/0x4a0 [ 597.922712][ T128] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 597.924929][T11715] down_write+0x36/0x60 [ 597.938689][T11715] process_measurement+0x3a2/0x1c30 [ 597.944420][T11715] ima_file_mmap+0x102/0x150 [ 597.949536][T11715] __se_sys_remap_file_pages+0x559/0x7b0 [ 597.955694][T11715] do_syscall_64+0x4c/0xa0 [ 597.960816][T11715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.967233][T11715] [ 597.967233][T11715] other info that might help us debug this: [ 597.967233][T11715] [ 597.977455][T11715] Possible unsafe locking scenario: [ 597.977455][T11715] [ 597.984899][T11715] CPU0 CPU1 [ 597.990427][T11715] ---- ---- [ 597.995784][T11715] lock(&mm->mmap_lock); [ 598.000157][T11715] lock(&sb->s_type->i_mutex_key#13); [ 598.008254][T11715] lock(&mm->mmap_lock); [ 598.015099][T11715] lock(&sb->s_type->i_mutex_key#13); [ 598.020581][T11715] [ 598.020581][T11715] *** DEADLOCK *** [ 598.020581][T11715] [ 598.028735][T11715] 1 lock held by syz.0.2100/11715: [ 598.033928][T11715] #0: ffff888076a8a6d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 598.044369][T11715] [ 598.044369][T11715] stack backtrace: [ 598.050249][T11715] CPU: 0 PID: 11715 Comm: syz.0.2100 Not tainted syzkaller #0 [ 598.057702][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 598.067751][T11715] Call Trace: [ 598.071028][T11715] [ 598.073957][T11715] dump_stack_lvl+0x188/0x24e [ 598.078640][T11715] ? load_image+0x400/0x400 [ 598.083148][T11715] ? show_regs_print_info+0x12/0x12 [ 598.088525][T11715] ? print_circular_bug+0x12b/0x1a0 [ 598.093729][T11715] check_noncircular+0x296/0x330 [ 598.098757][T11715] ? look_up_lock_class+0x75/0x140 [ 598.103877][T11715] ? add_chain_block+0x940/0x940 [ 598.108916][T11715] ? lockdep_lock+0xf1/0x1f0 [ 598.113525][T11715] ? _find_first_zero_bit+0xcf/0x100 [ 598.118827][T11715] __lock_acquire+0x2d07/0x7d10 [ 598.123697][T11715] ? ima_match_policy+0x107/0x2120 [ 598.128836][T11715] ? __lock_acquire+0x7d10/0x7d10 [ 598.133902][T11715] ? verify_lock_unused+0x140/0x140 [ 598.139380][T11715] ? ima_match_policy+0x107/0x2120 [ 598.144501][T11715] ? ima_match_policy+0x2093/0x2120 [ 598.149703][T11715] lock_acquire+0x1bb/0x4a0 [ 598.154215][T11715] ? process_measurement+0x3a2/0x1c30 [ 598.159602][T11715] ? __might_sleep+0xd0/0xd0 [ 598.164195][T11715] ? read_lock_is_recursive+0x10/0x10 [ 598.169585][T11715] ? ima_get_action+0x71/0xa0 [ 598.174288][T11715] down_write+0x36/0x60 [ 598.178538][T11715] ? process_measurement+0x3a2/0x1c30 [ 598.183906][T11715] process_measurement+0x3a2/0x1c30 [ 598.189109][T11715] ? ima_file_mmap+0x150/0x150 [ 598.193870][T11715] ? aa_file_perm+0x112/0xf00 [ 598.198648][T11715] ? aa_file_perm+0x112/0xf00 [ 598.203331][T11715] ? mtree_load+0x100/0xa70 [ 598.207840][T11715] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 598.214003][T11715] ima_file_mmap+0x102/0x150 [ 598.218609][T11715] ? end_current_label_crit_section+0x14b/0x170 [ 598.224861][T11715] ? ima_file_free+0x3e0/0x3e0 [ 598.229624][T11715] ? common_file_perm+0x171/0x1c0 [ 598.234737][T11715] ? bpf_lsm_mmap_file+0x5/0x10 [ 598.239590][T11715] ? security_mmap_file+0x11b/0x180 [ 598.244889][T11715] __se_sys_remap_file_pages+0x559/0x7b0 [ 598.250542][T11715] ? lockdep_hardirqs_on+0x94/0x140 [ 598.255745][T11715] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 598.261469][T11715] ? lock_chain_count+0x20/0x20 [ 598.266385][T11715] ? lockdep_hardirqs_on+0x94/0x140 [ 598.271785][T11715] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 598.277501][T11715] do_syscall_64+0x4c/0xa0 [ 598.281918][T11715] ? clear_bhb_loop+0x60/0xb0 [ 598.286592][T11715] ? clear_bhb_loop+0x60/0xb0 [ 598.291265][T11715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.297170][T11715] RIP: 0033:0x7f73c9d9c819 [ 598.301641][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.321349][T11715] RSP: 002b:00007f73cad1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 598.329873][T11715] RAX: ffffffffffffffda RBX: 00007f73ca016090 RCX: 00007f73c9d9c819 [ 598.337858][T11715] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000902000 [ 598.345836][T11715] RBP: 00007f73c9e32c91 R08: 0000000000000001 R09: 0000000000000000 [ 598.353822][T11715] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 598.361807][T11715] R13: 00007f73ca016128 R14: 00007f73ca016090 R15: 00007ffffbf26eb8 [ 598.369779][T11715] [ 598.387958][ T26] audit: type=1326 audit(1776825474.194:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ef9c819 code=0x7ffc0000 [ 598.415503][ T128] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 598.440619][ T128] usb 5-1: Product: syz [ 598.449270][ T128] usb 5-1: SerialNumber: syz [ 598.463534][ T128] usb 5-1: config 0 descriptor?? [ 598.650832][T11704] ptrace attach of "./syz-executor exec"[11718] was attempted by "./syz-executor exec"[11704] [ 598.894375][ T128] usb 5-1: USB disconnect, device number 119