last executing test programs: 4.269373247s ago: executing program 2 (id=1509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x802, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1"], 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x2, 0x0, &(0x7f00000003c0)) 4.017973409s ago: executing program 2 (id=1512): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x21) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.978431421s ago: executing program 2 (id=1513): socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.106539208s ago: executing program 2 (id=1517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x800}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x0, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r1, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@ax25={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)="28463ffd1a6ae864bdc524df15bd2d55daf23b6bf426450a5eecab8b4513a993cb3eef1302f6afe90f7b2b5dc03e1d6735e0d8662818", 0x36}, {&(0x7f0000000480)="c049f27d3541589ef5b8733aa92e", 0xe}, {&(0x7f00000004c0)="8d4ac196b88c1fa3c9d92ea276a2251a80000000cf38d517ad6faec469", 0x1d}], 0x3, &(0x7f0000002240)=ANY=[], 0x1060}, 0x0, 0x20040004}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0xc000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$dsp1(0xffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x1, @ANYBLOB='\a\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004004077920a1b4ce3790000029c9db5c0369e95f2c5395ac400"/42], 0x50) 2.979237296s ago: executing program 3 (id=1518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df3", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000000000)="378303076844268cb89e14f086dd4ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.978959281s ago: executing program 3 (id=1519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000"], 0x80}}, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000004c0)=ANY=[@ANYBLOB="c92752ede134ffffffffffff08"], 0x0) 2.867630017s ago: executing program 3 (id=1520): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xb, &(0x7f0000000000)={0x5, 0x4}) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x7, 0x0, &(0x7f00000000c0)=0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x2) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) acct(&(0x7f0000000080)='./cgroup\x00') r7 = mmap$IORING_OFF_SQ_RING(&(0x7f000084e000/0x1000)=nil, 0x1000, 0x6, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0xc0, 0x0, 0x0, 0x4) sendfile(r4, 0xffffffffffffffff, 0x0, 0x578410eb) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 2.527779381s ago: executing program 0 (id=1522): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @loopback, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x803) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabb9abbbbbbbb86dd602a8435001406fffea80000000000000000000000000001fe8000000000f1ff0000000000000000aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4100, 0x1004}], 0x1) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) 1.965604116s ago: executing program 1 (id=1525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 1.897578274s ago: executing program 1 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x14, 0x0, 0x321, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) 1.896914408s ago: executing program 1 (id=1528): syz_emit_ethernet(0x33, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x9, 0x0) epoll_create1(0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r0, 0xfffffffffffffffb, 0x3c34, 0x7}) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) preadv(r2, &(0x7f0000003300)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x0, 0x7fff) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x2082, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000100), 0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0x1a, r7, 0xc, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.549806561s ago: executing program 2 (id=1529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000008020"], 0x24}}, 0x20004040) 1.46626234s ago: executing program 2 (id=1530): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 1.285327015s ago: executing program 3 (id=1531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.123986576s ago: executing program 0 (id=1532): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 1.123076882s ago: executing program 3 (id=1533): socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r4], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1.118610628s ago: executing program 0 (id=1534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 972.479982ms ago: executing program 0 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 926.379682ms ago: executing program 1 (id=1536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004000) 925.898683ms ago: executing program 0 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 924.195812ms ago: executing program 1 (id=1538): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',', @ANYRES8=r3]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x7, 0xffffffff9080edc4, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 809.992303ms ago: executing program 0 (id=1539): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xb, &(0x7f0000000000)={0x5, 0x4}) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x7, 0x0, &(0x7f00000000c0)=0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x2) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) acct(&(0x7f0000000080)='./cgroup\x00') r7 = mmap$IORING_OFF_SQ_RING(&(0x7f000084e000/0x1000)=nil, 0x1000, 0x6, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0xc0, 0x0, 0x0, 0x4) sendfile(r4, 0xffffffffffffffff, 0x0, 0x578410eb) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 197.746865ms ago: executing program 3 (id=1540): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @loopback, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x803) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4100, 0x1004}], 0x1) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 1 (id=1541): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x404c004) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x602, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x101) openat$mice(0xffffffffffffff9c, 0x0, 0x40) r1 = fsopen(0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r3, 0x0, 0x9f) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x7fff) dup3(r4, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) ftruncate(r5, 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) kernel console output (not intermixed with test programs): 01.830053][ T841] usb 5-1: device descriptor read/8, error -71 [ 101.833083][ T5996] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22 [ 101.843992][ T55] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.846898][ T55] usb 8-1: config 0 has no interfaces? [ 101.848467][ T55] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.850991][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.854957][ T55] usb 8-1: config 0 descriptor?? [ 102.025189][ T53] usb 6-1: USB disconnect, device number 12 [ 102.061350][ T55] usb 8-1: USB disconnect, device number 20 [ 102.081716][ T841] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 102.103992][ T841] usb 5-1: device descriptor read/8, error -71 [ 102.212143][ T841] usb usb5-port1: unable to enumerate USB device [ 103.371721][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 103.525688][ T34] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 103.529688][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.533366][ T34] usb 6-1: Product: syz [ 103.535507][ T34] usb 6-1: Manufacturer: syz [ 103.537664][ T34] usb 6-1: SerialNumber: syz [ 103.542087][ T34] usb 6-1: config 0 descriptor?? [ 103.547138][ T34] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 103.555951][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.561229][ T34] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 103.566200][ T34] usb 6-1: media controller created [ 103.595059][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.638614][ T34] DVB: Unable to find symbol mt352_attach() [ 103.657248][ T7312] netlink: 'syz.3.416': attribute type 12 has an invalid length. [ 103.672019][ T34] DVB: Unable to find symbol nxt6000_attach() [ 103.674716][ T34] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 103.680868][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input22 [ 103.691007][ T34] dvb-usb: schedule remote query interval to 1000 msecs. [ 103.693612][ T34] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 103.696625][ T34] dvb-usb: bulk message failed: -22 (7/0) [ 103.698380][ T34] dvb-usb: bulk message failed: -22 (7/0) [ 103.748473][ T841] usb 6-1: USB disconnect, device number 13 [ 103.773086][ T841] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 104.617004][ T7336] syzkaller0: entered promiscuous mode [ 104.619028][ T7336] syzkaller0: entered allmulticast mode [ 104.742288][ T7342] tmpfs: Bad value for 'mpol' [ 105.581914][ T6026] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 105.711716][ T6026] usb 8-1: device descriptor read/64, error -71 [ 105.952148][ T6026] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 105.992756][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 106.002707][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 106.081772][ T6026] usb 8-1: device descriptor read/64, error -71 [ 106.195409][ T6026] usb usb8-port1: attempt power cycle [ 106.541858][ T6026] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 106.562620][ T6026] usb 8-1: device descriptor read/8, error -71 [ 106.801703][ T6026] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 106.822983][ T6026] usb 8-1: device descriptor read/8, error -71 [ 106.942461][ T6026] usb usb8-port1: unable to enumerate USB device [ 107.114984][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 107.521723][ T5948] Bluetooth: hci2: Malformed Event: 0x13 [ 107.871840][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 108.454995][ T7432] tmpfs: Bad value for 'mpol' [ 108.867070][ T7441] netlink: 112 bytes leftover after parsing attributes in process `syz.2.465'. [ 109.831885][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 109.943721][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'. [ 109.961680][ T34] usb 7-1: device descriptor read/64, error -71 [ 110.201733][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 110.341712][ T34] usb 7-1: device descriptor read/64, error -71 [ 110.452636][ T34] usb usb7-port1: attempt power cycle [ 110.664635][ T7461] tmpfs: Bad value for 'mpol' [ 110.801737][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 110.822351][ T34] usb 7-1: device descriptor read/8, error -71 [ 110.942681][ T5996] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 111.071782][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 111.102029][ T34] usb 7-1: device descriptor read/8, error -71 [ 111.113567][ T5996] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.116888][ T5996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.120037][ T5996] usb 6-1: config 0 has no interface number 0 [ 111.122659][ T5996] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.127772][ T5996] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.131285][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.136407][ T5996] usb 6-1: config 0 descriptor?? [ 111.139868][ T5996] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 111.211928][ T34] usb usb7-port1: unable to enumerate USB device [ 111.349425][ T34] usb 6-1: USB disconnect, device number 14 [ 111.865770][ T7481] tmpfs: Bad value for 'mpol' [ 112.157726][ T7492] netlink: zone id is out of range [ 112.159571][ T7492] netlink: zone id is out of range [ 112.161245][ T7492] netlink: zone id is out of range [ 112.163816][ T7492] netlink: zone id is out of range [ 112.165766][ T7492] netlink: zone id is out of range [ 112.167513][ T7492] netlink: zone id is out of range [ 112.169699][ T7492] netlink: zone id is out of range [ 112.171427][ T7492] netlink: zone id is out of range [ 112.173396][ T7492] netlink: zone id is out of range [ 112.175110][ T7492] netlink: zone id is out of range [ 112.462647][ T6026] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 112.593683][ T6026] usb 5-1: device descriptor read/64, error -71 [ 113.159319][ T7507] tmpfs: Bad value for 'mpol' [ 113.171735][ T6026] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 113.321896][ T6026] usb 5-1: device descriptor read/64, error -71 [ 113.351707][ T34] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 113.452375][ T6026] usb usb5-port1: attempt power cycle [ 113.503767][ T34] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.507235][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.511518][ T34] usb 7-1: config 0 has no interface number 0 [ 113.514377][ T34] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.520100][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.526116][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.531756][ T34] usb 7-1: config 0 descriptor?? [ 113.543044][ T34] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 113.741042][ T841] usb 7-1: USB disconnect, device number 16 [ 114.005051][ T6026] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 114.023067][ T6026] usb 5-1: device descriptor read/8, error -71 [ 114.204606][ T7514] netlink: 'syz.1.494': attribute type 12 has an invalid length. [ 114.292053][ T6026] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 114.323957][ T6026] usb 5-1: device descriptor read/8, error -71 [ 114.433409][ T6026] usb usb5-port1: unable to enumerate USB device [ 114.531780][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 114.661685][ T34] usb 7-1: device descriptor read/64, error -71 [ 114.734065][ T7518] veth1_to_bond: entered allmulticast mode [ 114.741306][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 114.757615][ T7518] bond0: (slave bond_slave_1): Releasing backup interface [ 114.771756][ T7518] veth1_to_bond (unregistering): left allmulticast mode [ 114.911846][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 115.053131][ T34] usb 7-1: device descriptor read/64, error -71 [ 115.161928][ T34] usb usb7-port1: attempt power cycle [ 115.334333][ T7532] tmpfs: Bad value for 'mpol' [ 115.501669][ T34] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 115.522430][ T34] usb 7-1: device descriptor read/8, error -71 [ 115.771883][ T34] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 115.793069][ T34] usb 7-1: device descriptor read/8, error -71 [ 115.902052][ T34] usb usb7-port1: unable to enumerate USB device [ 116.311709][ T5942] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 116.463291][ T5942] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.466782][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.471068][ T5942] usb 6-1: config 0 has no interface number 0 [ 116.473765][ T5942] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.479213][ T5942] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.483230][ T34] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 116.486671][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.492802][ T5942] usb 6-1: config 0 descriptor?? [ 116.497091][ T5942] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 116.611768][ T34] usb 5-1: device descriptor read/64, error -71 [ 116.698888][ T5942] usb 6-1: USB disconnect, device number 15 [ 116.851718][ T34] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 116.991748][ T34] usb 5-1: device descriptor read/64, error -71 [ 117.102312][ T34] usb usb5-port1: attempt power cycle [ 117.278443][ T7543] netlink: 'syz.3.506': attribute type 12 has an invalid length. [ 117.462428][ T34] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 117.482098][ T34] usb 5-1: device descriptor read/8, error -71 [ 117.721676][ T34] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 117.742332][ T34] usb 5-1: device descriptor read/8, error -71 [ 117.852722][ T34] usb usb5-port1: unable to enumerate USB device [ 118.951741][ T34] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 119.112614][ T34] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.124308][ T34] usb 8-1: config 0 has no interface number 0 [ 119.126343][ T34] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.129415][ T34] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.132548][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.139613][ T34] usb 8-1: config 0 descriptor?? [ 119.154824][ T34] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 119.358060][ T34] usb 8-1: USB disconnect, device number 25 [ 119.508031][ T7584] netlink: 'syz.2.522': attribute type 12 has an invalid length. [ 119.791776][ T841] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 119.941789][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 119.945201][ T841] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.948668][ T841] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 119.952517][ T841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 48, changing to 7 [ 119.956831][ T841] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.970702][ T841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 119.974530][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.977471][ T841] usb 5-1: Product: syz [ 119.978873][ T841] usb 5-1: Manufacturer: syz [ 119.980699][ T841] usb 5-1: SerialNumber: syz [ 119.990280][ T7585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.997835][ T841] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 120.003658][ T841] usbtest 5-1:1.0: Linux user mode ISO test driver [ 120.006338][ T841] usbtest 5-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 120.106612][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 120.110286][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 120.249375][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.256185][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.431694][ T841] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 120.571703][ T841] usb 6-1: device descriptor read/64, error -71 [ 120.821714][ T841] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 120.961820][ T841] usb 6-1: device descriptor read/64, error -71 [ 121.072135][ T841] usb usb6-port1: attempt power cycle [ 121.431777][ T841] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 121.452822][ T841] usb 6-1: device descriptor read/8, error -71 [ 121.701769][ T841] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 121.723303][ T841] usb 6-1: device descriptor read/8, error -71 [ 121.851884][ T841] usb usb6-port1: unable to enumerate USB device [ 121.941760][ T6026] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 122.094107][ T6026] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.097648][ T6026] usb 7-1: config 0 has no interface number 0 [ 122.100007][ T6026] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.103719][ T6026] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.107328][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.112850][ T6026] usb 7-1: config 0 descriptor?? [ 122.118584][ T6026] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 122.317322][ T841] usb 5-1: USB disconnect, device number 27 [ 122.327112][ T6026] usb 7-1: USB disconnect, device number 21 [ 123.842101][ T9] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 124.006377][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.009767][ T9] usb 6-1: config 0 has no interface number 0 [ 124.012130][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.015508][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.018652][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.028343][ T9] usb 6-1: config 0 descriptor?? [ 124.036681][ T9] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 124.236302][ T34] usb 6-1: USB disconnect, device number 20 [ 124.424737][ T7666] netlink: 'syz.2.554': attribute type 12 has an invalid length. [ 124.512799][ T53] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 124.674207][ T53] usb 8-1: config 0 has no interfaces? [ 124.677310][ T53] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.680333][ T53] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.683594][ T53] usb 8-1: Manufacturer: syz [ 124.692041][ T53] usb 8-1: config 0 descriptor?? [ 124.899939][ T5996] usb 8-1: USB disconnect, device number 26 [ 125.021711][ T53] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 125.181677][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 125.184694][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.188052][ T53] usb 5-1: config 0 has no interfaces? [ 125.191535][ T53] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.194787][ T53] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.197528][ T53] usb 5-1: Product: syz [ 125.198949][ T53] usb 5-1: Manufacturer: syz [ 125.200495][ T53] usb 5-1: SerialNumber: syz [ 125.206742][ T53] usb 5-1: config 0 descriptor?? [ 125.413291][ T53] usb 5-1: USB disconnect, device number 28 [ 125.557563][ T7708] team0 (unregistering): Port device team_slave_0 removed [ 125.570978][ T7708] team0 (unregistering): Port device team_slave_1 removed [ 125.692124][ T840] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 125.821700][ T34] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 125.883193][ T840] usb 6-1: config 0 has no interfaces? [ 125.885807][ T840] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 125.888647][ T840] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 125.891067][ T840] usb 6-1: Manufacturer: syz [ 125.897494][ T840] usb 6-1: config 0 descriptor?? [ 125.983397][ T34] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.986285][ T34] usb 8-1: config 0 has no interface number 0 [ 125.988343][ T34] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 125.992793][ T34] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.996093][ T34] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.999116][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.003825][ T34] usb 8-1: config 0 descriptor?? [ 126.011708][ T7717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.570'. [ 126.014344][ T34] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 126.125007][ T5996] usb 6-1: USB disconnect, device number 21 [ 126.213194][ T7710] iowarrior 8-1:0.1: Error -90 while submitting URB [ 126.218507][ T6026] usb 8-1: USB disconnect, device number 27 [ 126.478357][ T7739] fuse: Bad value for 'fd' [ 127.001699][ T34] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 127.152929][ T34] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.155764][ T34] usb 5-1: config 0 has no interface number 0 [ 127.157733][ T34] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 127.161090][ T34] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.164560][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.167263][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.170783][ T34] usb 5-1: config 0 descriptor?? [ 127.176856][ T34] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 127.261805][ T53] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 127.375824][ T7754] iowarrior 5-1:0.1: Error -90 while submitting URB [ 127.379076][ T5996] usb 5-1: USB disconnect, device number 29 [ 127.411683][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 127.418757][ T53] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.422100][ T53] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 127.425683][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 48, changing to 7 [ 127.429104][ T53] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.435324][ T53] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 127.438258][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.440763][ T53] usb 8-1: Product: syz [ 127.442233][ T53] usb 8-1: Manufacturer: syz [ 127.443639][ T53] usb 8-1: SerialNumber: syz [ 127.447598][ T7757] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 127.452428][ T53] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 127.455380][ T53] usbtest 8-1:1.0: Linux user mode ISO test driver [ 127.457419][ T53] usbtest 8-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 127.684362][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.690524][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.008629][ T7768] fuse: Bad value for 'fd' [ 128.300374][ T7763] orangefs_mount: mount request failed with -4 [ 128.491072][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 128.495578][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 128.603612][ T7780] syzkaller0: entered promiscuous mode [ 128.606015][ T7780] syzkaller0: entered allmulticast mode [ 128.681681][ T5996] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 128.741297][ T7786] syzkaller0: entered promiscuous mode [ 128.743763][ T7786] syzkaller0: entered allmulticast mode [ 128.843280][ T5996] usb 5-1: config 0 has no interfaces? [ 128.846618][ T5996] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 128.850528][ T5996] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 128.854392][ T5996] usb 5-1: Manufacturer: syz [ 128.858516][ T5996] usb 5-1: config 0 descriptor?? [ 128.881772][ T6026] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 129.034520][ T6026] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.037191][ T6026] usb 7-1: config 0 has no interface number 0 [ 129.039401][ T6026] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 129.044414][ T6026] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.048464][ T6026] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.052426][ T6026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.057658][ T6026] usb 7-1: config 0 descriptor?? [ 129.064846][ T6026] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 129.064904][ T840] usb 5-1: USB disconnect, device number 30 [ 129.211730][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 129.264160][ T7784] iowarrior 7-1:0.1: Error -90 while submitting URB [ 129.269700][ T5996] usb 7-1: USB disconnect, device number 22 [ 129.371666][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 129.375231][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.378902][ T9] usb 6-1: config 0 has no interfaces? [ 129.382286][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.385181][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.387742][ T9] usb 6-1: Product: syz [ 129.389072][ T9] usb 6-1: Manufacturer: syz [ 129.390550][ T9] usb 6-1: SerialNumber: syz [ 129.393437][ T9] usb 6-1: config 0 descriptor?? [ 129.602123][ T840] usb 6-1: USB disconnect, device number 22 [ 129.775867][ T6026] usb 8-1: USB disconnect, device number 28 [ 129.916293][ T7803] syzkaller0: entered promiscuous mode [ 129.918378][ T7803] syzkaller0: entered allmulticast mode [ 130.064429][ T7806] syzkaller0: entered promiscuous mode [ 130.066833][ T7806] syzkaller0: entered allmulticast mode [ 130.294821][ T5948] Bluetooth: hci1: Malformed Event: 0x02 [ 130.471702][ T6026] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 130.487735][ T7832] syzkaller0: entered promiscuous mode [ 130.489958][ T7832] syzkaller0: entered allmulticast mode [ 130.621836][ T6028] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 130.623038][ T6026] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.627437][ T6026] usb 6-1: config 0 has no interface number 0 [ 130.629380][ T6026] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.632856][ T6026] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 130.636192][ T6026] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.639058][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.642785][ T6026] usb 6-1: config 0 descriptor?? [ 130.644941][ T7816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.649295][ T6026] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 130.771741][ T6028] usb 8-1: Using ep0 maxpacket: 32 [ 130.774930][ T6028] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.778161][ T6028] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.785736][ T6028] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 130.789429][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 130.792447][ T6028] usb 8-1: Product: syz [ 130.794243][ T6028] usb 8-1: Manufacturer: syz [ 130.796159][ T6028] usb 8-1: SerialNumber: syz [ 130.800031][ T6028] usb 8-1: config 0 descriptor?? [ 130.854898][ T5996] usb 6-1: USB disconnect, device number 23 [ 131.008683][ T840] usb 8-1: USB disconnect, device number 29 [ 131.565367][ T7855] syzkaller0: entered promiscuous mode [ 131.567880][ T7855] syzkaller0: entered allmulticast mode [ 131.752124][ T7862] sd 0:0:0:0: PR command failed: 1026 [ 131.754515][ T7862] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 131.758036][ T7862] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 132.095089][ T7872] syzkaller0: entered promiscuous mode [ 132.097295][ T7872] syzkaller0: entered allmulticast mode [ 132.333288][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.336734][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.461888][ T5996] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 132.621689][ T5996] usb 7-1: Using ep0 maxpacket: 32 [ 132.628697][ T5996] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.634610][ T5996] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.678661][ T5996] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.684479][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.689075][ T5996] usb 7-1: Product: syz [ 132.692141][ T5996] usb 7-1: Manufacturer: syz [ 132.694814][ T5996] usb 7-1: SerialNumber: syz [ 132.705040][ T5996] usb 7-1: config 0 descriptor?? [ 133.000637][ T5996] usb 7-1: USB disconnect, device number 23 [ 133.143674][ T7893] syzkaller0: entered promiscuous mode [ 133.145642][ T7893] syzkaller0: entered allmulticast mode [ 133.351710][ T840] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 133.531734][ T840] usb 8-1: Using ep0 maxpacket: 16 [ 133.535193][ T840] usb 8-1: config 0 has an invalid interface number: 72 but max is 0 [ 133.537893][ T840] usb 8-1: config 0 has no interface number 0 [ 133.540136][ T840] usb 8-1: config 0 interface 72 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16 [ 133.543990][ T840] usb 8-1: config 0 interface 72 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 133.547716][ T840] usb 8-1: config 0 interface 72 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 133.554939][ T840] usb 8-1: New USB device found, idVendor=0dcd, idProduct=0001, bcdDevice=f8.43 [ 133.558449][ T840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.561883][ T840] usb 8-1: Product: syz [ 133.563350][ T840] usb 8-1: Manufacturer: syz [ 133.565042][ T840] usb 8-1: SerialNumber: syz [ 133.573513][ T840] usb 8-1: config 0 descriptor?? [ 133.578552][ T7891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.584069][ T7891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.632243][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.646366][ T9] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 133.807453][ T7906] hid-generic 0003:0627:0001.0001: pid 7906 passed too short report [ 136.131898][ T840] ftdi_sio 8-1:0.72: FTDI USB Serial Device converter detected [ 136.137761][ T840] ftdi_sio ttyUSB0: unknown device type: 0xf843 [ 136.144387][ T840] usb 8-1: USB disconnect, device number 30 [ 136.153456][ T840] ftdi_sio 8-1:0.72: device disconnected [ 136.551764][ T840] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 136.721690][ T840] usb 8-1: Using ep0 maxpacket: 32 [ 136.731522][ T840] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.749459][ T840] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 136.754115][ T840] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 136.761178][ T840] usb 8-1: Product: syz [ 136.764439][ T840] usb 8-1: Manufacturer: syz [ 136.767151][ T840] usb 8-1: SerialNumber: syz [ 136.789755][ T840] usb 8-1: config 0 descriptor?? [ 137.006307][ T841] usb 8-1: USB disconnect, device number 31 [ 137.202244][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.663'. [ 137.206364][ T7955] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 137.228455][ T7955] bond1 (unregistering): Released all slaves [ 137.501708][ T53] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 137.651704][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 137.656116][ T53] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 137.659606][ T53] usb 5-1: config 254 has an invalid descriptor of length 255, skipping remainder of the config [ 137.665691][ T53] usb 5-1: config 254 has no interface number 0 [ 137.668545][ T53] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 137.675141][ T53] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 59378, setting to 1024 [ 137.679813][ T53] usb 5-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.685429][ T53] usb 5-1: config 254 interface 235 has no altsetting 0 [ 137.691199][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 137.695250][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.698516][ T53] usb 5-1: Product: syz [ 137.699930][ T53] usb 5-1: Manufacturer: syz [ 137.701461][ T53] usb 5-1: SerialNumber: syz [ 137.705868][ T7957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.158842][ T53] usbtest 5-1:254.235: couldn't get endpoints, -71 [ 138.161889][ T53] usbtest 5-1:254.235: probe with driver usbtest failed with error -71 [ 138.173162][ T53] usb 5-1: USB disconnect, device number 31 [ 138.621696][ T6028] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 138.777006][ T6028] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 138.781107][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.785340][ T6028] usb 6-1: Product: syz [ 138.787567][ T6028] usb 6-1: Manufacturer: syz [ 138.789782][ T6028] usb 6-1: SerialNumber: syz [ 138.798264][ T6028] usb 6-1: config 0 descriptor?? [ 138.804174][ T6028] go7007 6-1:0.0: Sensoray 2250 found [ 138.806509][ T6028] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 138.971834][ T5996] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 139.004117][ T841] usb 6-1: USB disconnect, device number 24 [ 139.122230][ T5996] usb 5-1: Using ep0 maxpacket: 32 [ 139.125466][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.131319][ T5996] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 139.135358][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 139.138373][ T5996] usb 5-1: Product: syz [ 139.139816][ T5996] usb 5-1: Manufacturer: syz [ 139.141399][ T5996] usb 5-1: SerialNumber: syz [ 139.144898][ T5996] usb 5-1: config 0 descriptor?? [ 139.352023][ T841] usb 5-1: USB disconnect, device number 32 [ 139.841645][ T6028] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 140.023382][ T6028] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.025956][ T6028] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.029111][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.034858][ T6028] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.038312][ T6028] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.041519][ T6028] usb 6-1: Manufacturer: syz [ 140.047348][ T6028] usb 6-1: config 0 descriptor?? [ 140.051501][ T6028] igorplugusb 6-1:0.0: incorrect number of endpoints [ 140.271964][ T5996] usb 6-1: USB disconnect, device number 25 [ 140.821817][ T5996] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 140.933178][ T8007] syzkaller0: entered promiscuous mode [ 140.935519][ T8007] syzkaller0: entered allmulticast mode [ 140.973216][ T5996] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.975856][ T5996] usb 8-1: config 0 has no interface number 0 [ 140.978169][ T5996] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 140.982188][ T5996] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 140.985602][ T5996] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.988601][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.002960][ T5996] usb 8-1: config 0 descriptor?? [ 141.005180][ T7995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.023924][ T5996] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 141.184946][ T8009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.185072][ T8009] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.198732][ T8009] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.201543][ T8009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.201779][ T8009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.217354][ T53] usb 8-1: USB disconnect, device number 32 [ 141.224022][ T8009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.233243][ T8009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.235934][ T8009] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.240252][ T8009] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.466749][ T8043] fuse: Bad value for 'fd' [ 142.816233][ T8065] syzkaller0: entered promiscuous mode [ 142.818254][ T8065] syzkaller0: entered allmulticast mode [ 142.903294][ T5996] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 143.074229][ T5996] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.077575][ T5996] usb 8-1: config 0 has no interface number 0 [ 143.080131][ T5996] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 143.084667][ T5996] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 143.089043][ T5996] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.092871][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.097739][ T5996] usb 8-1: config 0 descriptor?? [ 143.105540][ T8056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.115733][ T5996] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 143.201708][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.282434][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.284728][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.362600][ T6026] usb 8-1: USB disconnect, device number 33 [ 144.524771][ T5996] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 144.673113][ T5996] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.676667][ T5996] usb 5-1: config 0 has no interface number 0 [ 144.680462][ T5996] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 144.687977][ T5996] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 144.691341][ T5996] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.711814][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.740184][ T5996] usb 5-1: config 0 descriptor?? [ 144.742476][ T8109] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.751222][ T5996] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 144.954609][ T53] usb 5-1: USB disconnect, device number 33 [ 145.281708][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.361761][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.361787][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.810782][ T53] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 145.973612][ T53] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 145.977209][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.983751][ T53] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 145.986711][ T53] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 145.989264][ T53] usb 5-1: Manufacturer: syz [ 145.992757][ T53] usb 5-1: config 0 descriptor?? [ 146.001934][ T53] igorplugusb 5-1:0.0: incorrect number of endpoints [ 146.210710][ T5996] usb 5-1: USB disconnect, device number 34 [ 146.422359][ T9] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 146.571785][ T54] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 146.576455][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.580064][ T9] usb 7-1: config 0 has no interface number 0 [ 146.582244][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 146.586048][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 146.589879][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.594159][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.600935][ T9] usb 7-1: config 0 descriptor?? [ 146.603942][ T8156] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.610040][ T9] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 146.734629][ T54] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 146.738618][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.743983][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.749710][ T54] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 146.752581][ T54] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 146.754940][ T54] usb 8-1: Manufacturer: syz [ 146.759934][ T54] usb 8-1: config 0 descriptor?? [ 146.767380][ T54] igorplugusb 8-1:0.0: incorrect number of endpoints [ 146.813543][ T53] usb 7-1: USB disconnect, device number 24 [ 146.973061][ T54] usb 8-1: USB disconnect, device number 34 [ 147.371762][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.391816][ T6028] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 147.441820][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.443849][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.555704][ T6028] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.562076][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.567729][ T6028] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.570550][ T6028] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.573237][ T6028] usb 6-1: Manufacturer: syz [ 147.582126][ T6028] usb 6-1: config 0 descriptor?? [ 147.588068][ T6028] igorplugusb 6-1:0.0: incorrect number of endpoints [ 147.793343][ T5996] usb 6-1: USB disconnect, device number 26 [ 148.651723][ T53] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 148.709065][ T8226] syzkaller0: entered promiscuous mode [ 148.711091][ T8226] syzkaller0: entered allmulticast mode [ 148.831089][ T53] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.834592][ T53] usb 6-1: config 0 has no interface number 0 [ 148.837120][ T53] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.842095][ T53] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 148.845848][ T53] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.849764][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.856359][ T53] usb 6-1: config 0 descriptor?? [ 148.859210][ T8212] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.866317][ T53] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 149.021696][ T5996] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 149.067975][ T6026] usb 6-1: USB disconnect, device number 27 [ 149.183929][ T5996] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 149.186879][ T5996] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.191068][ T5996] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 149.194372][ T5996] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 149.197382][ T5996] usb 7-1: Manufacturer: syz [ 149.200357][ T5996] usb 7-1: config 0 descriptor?? [ 149.206087][ T5996] igorplugusb 7-1:0.0: incorrect number of endpoints [ 149.413572][ T53] usb 7-1: USB disconnect, device number 25 [ 149.972477][ T8252] syzkaller0: entered promiscuous mode [ 149.974941][ T8252] syzkaller0: entered allmulticast mode [ 150.321761][ T5996] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 150.499702][ T5996] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.502465][ T5996] usb 5-1: config 0 has no interface number 0 [ 150.505049][ T5996] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 150.508818][ T5996] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 150.512419][ T5996] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.515457][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.519915][ T5996] usb 5-1: config 0 descriptor?? [ 150.522548][ T8258] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.529472][ T5996] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 150.561726][ T54] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 150.713473][ T54] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 150.716144][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.722649][ T54] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 150.726549][ T54] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 150.729578][ T54] usb 7-1: Manufacturer: syz [ 150.731485][ T8275] warning: `syz.1.779' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.733763][ T54] usb 7-1: config 0 descriptor?? [ 150.739173][ T5996] usb 5-1: USB disconnect, device number 35 [ 150.742656][ T54] igorplugusb 7-1:0.0: incorrect number of endpoints [ 150.801663][ T5989] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 150.945173][ T842] usb 7-1: USB disconnect, device number 26 [ 150.954452][ T5989] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 150.957947][ T5989] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.964226][ T5989] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 150.968052][ T5989] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 150.971507][ T5989] usb 8-1: Manufacturer: syz [ 150.978712][ T5989] usb 8-1: config 0 descriptor?? [ 150.982636][ T5989] igorplugusb 8-1:0.0: incorrect number of endpoints [ 151.185398][ T5996] usb 8-1: USB disconnect, device number 35 [ 151.286962][ T8279] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 151.289150][ T8279] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.292776][ T8279] vhci_hcd vhci_hcd.0: Device attached [ 151.300843][ T8280] vhci_hcd: cannot find the pending unlink 8 [ 151.304247][ T8280] vhci_hcd: connection closed [ 151.306465][ T214] vhci_hcd: stop threads [ 151.310896][ T214] vhci_hcd: release socket [ 151.312969][ T214] vhci_hcd: disconnect device [ 151.577161][ T8289] veth0_virt_wifi: entered allmulticast mode [ 152.111826][ T5996] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 152.265836][ T5996] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 152.269397][ T5996] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.275854][ T5996] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 152.279558][ T5996] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 152.282759][ T5996] usb 5-1: Manufacturer: syz [ 152.286446][ T5996] usb 5-1: config 0 descriptor?? [ 152.291030][ T5996] igorplugusb 5-1:0.0: incorrect number of endpoints [ 152.462658][ T8305] syzkaller0: entered promiscuous mode [ 152.464906][ T8305] syzkaller0: entered allmulticast mode [ 152.473963][ T8305] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 152.495082][ T5996] usb 5-1: USB disconnect, device number 36 [ 152.526478][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 152.774303][ T8325] netlink: 76 bytes leftover after parsing attributes in process `syz.1.798'. [ 152.951695][ T54] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 153.102948][ T54] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 153.105847][ T54] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.110808][ T54] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 153.115022][ T54] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 153.118531][ T54] usb 8-1: Manufacturer: syz [ 153.123237][ T54] usb 8-1: config 0 descriptor?? [ 153.128310][ T54] igorplugusb 8-1:0.0: incorrect number of endpoints [ 153.330191][ T54] usb 8-1: USB disconnect, device number 36 [ 154.019200][ T8355] syzkaller0: entered promiscuous mode [ 154.021545][ T8355] syzkaller0: entered allmulticast mode [ 154.042024][ T54] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 154.211758][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 154.214793][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 154.217939][ T54] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 154.232000][ T54] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.234971][ T54] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.237563][ T54] usb 6-1: Product: syz [ 154.238893][ T54] usb 6-1: Manufacturer: syz [ 154.240484][ T54] usb 6-1: SerialNumber: syz [ 154.242352][ T5989] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 154.246503][ T54] usb 6-1: config 0 descriptor?? [ 154.393564][ T5989] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 154.397123][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.403520][ T5989] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 154.407409][ T5989] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 154.411732][ T5989] usb 5-1: Manufacturer: syz [ 154.457373][ T5996] usb 6-1: USB disconnect, device number 28 [ 154.472407][ T5989] usb 5-1: config 0 descriptor?? [ 154.479701][ T5989] igorplugusb 5-1:0.0: incorrect number of endpoints [ 154.678797][ T6026] usb 5-1: USB disconnect, device number 37 [ 154.863648][ T8377] syzkaller0: entered promiscuous mode [ 154.865541][ T8377] syzkaller0: entered allmulticast mode [ 155.282189][ T54] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 155.309703][ T8395] misc userio: Invalid payload size [ 155.321760][ T53] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 155.431664][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 155.435521][ T54] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 155.439427][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.445170][ T54] usb 7-1: config 0 descriptor?? [ 155.451028][ T54] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 155.471869][ T5989] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 155.483308][ T53] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.485905][ T53] usb 6-1: config 0 has no interface number 0 [ 155.487879][ T53] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.491281][ T53] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 155.495740][ T53] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.499438][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.504629][ T53] usb 6-1: config 0 descriptor?? [ 155.507588][ T8387] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.514202][ T53] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 155.591759][ T6026] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 155.623976][ T5989] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.627265][ T5989] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 155.630824][ T5989] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.634075][ T5989] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.637916][ T5989] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 155.641857][ T5989] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.647327][ T5989] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.650676][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.653537][ T5989] usb 8-1: Product: syz [ 155.655010][ T5989] usb 8-1: Manufacturer: syz [ 155.659445][ T8393] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 155.664492][ T5989] cdc_wdm 8-1:1.0: skipping garbage [ 155.666378][ T5989] cdc_wdm 8-1:1.0: skipping garbage [ 155.669572][ T5989] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 155.671912][ T5989] cdc_wdm 8-1:1.0: Unknown control protocol [ 155.716829][ T5989] usb 6-1: USB disconnect, device number 29 [ 155.741675][ T6026] usb 5-1: Using ep0 maxpacket: 32 [ 155.745556][ T6026] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.752432][ T6026] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.756343][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.759408][ T6026] usb 5-1: Product: syz [ 155.760811][ T6026] usb 5-1: Manufacturer: syz [ 155.762716][ T6026] usb 5-1: SerialNumber: syz [ 155.765541][ T6026] usb 5-1: config 0 descriptor?? [ 155.767745][ T8397] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 155.936018][ T5989] usb 8-1: USB disconnect, device number 37 [ 155.974308][ T840] usb 5-1: USB disconnect, device number 38 [ 156.277432][ T8403] syzkaller0: entered promiscuous mode [ 156.279746][ T8403] syzkaller0: entered allmulticast mode [ 156.661274][ T54] gspca_vc032x: reg_w err -71 [ 156.663133][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.665375][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.667610][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.669774][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.675842][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.677948][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.680285][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.682813][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.685118][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.687387][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.689785][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.692167][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.694383][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.696286][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.698014][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.699742][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.701463][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.703305][ T54] gspca_vc032x: I2c Bus Busy Wait 00 [ 156.705074][ T54] gspca_vc032x: Unknown sensor... [ 156.706888][ T54] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 156.732339][ T54] usb 7-1: USB disconnect, device number 27 [ 156.791825][ T842] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 156.957555][ T842] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 156.960743][ T842] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.968600][ T842] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 156.972419][ T842] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 156.976468][ T842] usb 5-1: Manufacturer: syz [ 156.982144][ T842] usb 5-1: config 0 descriptor?? [ 156.989532][ T842] igorplugusb 5-1:0.0: incorrect number of endpoints [ 157.192554][ T5996] usb 5-1: USB disconnect, device number 39 [ 157.201814][ T8420] net_ratelimit: 1 callbacks suppressed [ 157.201824][ T8420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.419336][ T8440] tipc: MTU too low for tipc bearer [ 158.607864][ T8444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.931965][ T8457] veth0_virt_wifi: entered allmulticast mode [ 158.942147][ T5996] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 159.010041][ T8458] tipc: Started in network mode [ 159.011909][ T8458] tipc: Node identity 62529b9e2539, cluster identity 4711 [ 159.014538][ T8458] tipc: Enabled bearer , priority 0 [ 159.092975][ T5996] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 159.095914][ T5996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.099931][ T5996] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 159.106122][ T5996] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 159.108640][ T5996] usb 8-1: Manufacturer: syz [ 159.114774][ T5996] usb 8-1: config 0 descriptor?? [ 159.171919][ T5996] rc_core: IR keymap rc-hauppauge not found [ 159.176279][ T5996] Registered IR keymap rc-empty [ 159.180573][ T5996] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 159.188765][ T5996] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input24 [ 159.331757][ T840] usb 8-1: USB disconnect, device number 38 [ 159.808371][ T8453] tipc: Disabling bearer [ 160.610861][ T8484] qrtr: Invalid version 0 [ 161.536875][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 162.311075][ T8532] syzkaller0: entered promiscuous mode [ 162.315100][ T8532] syzkaller0: entered allmulticast mode [ 162.363373][ T8536] binder: 8535:8536 ioctl c0306201 0 returned -14 [ 162.387549][ T8536] binder: 8535:8536 ioctl c00c6211 0 returned -14 [ 162.644703][ T8555] Bluetooth: MGMT ver 1.23 [ 162.705542][ T8557] syzkaller0: entered promiscuous mode [ 162.708140][ T8557] syzkaller0: entered allmulticast mode [ 163.251770][ T5996] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 163.357394][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'. [ 163.360293][ T8572] openvswitch: netlink: Flow key attr not present in new flow. [ 163.413301][ T5996] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 163.416838][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.422417][ T5996] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 163.425337][ T5996] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 163.428075][ T5996] usb 6-1: Manufacturer: syz [ 163.432167][ T5996] usb 6-1: config 0 descriptor?? [ 163.481774][ T5996] rc_core: IR keymap rc-hauppauge not found [ 163.484381][ T5996] Registered IR keymap rc-empty [ 163.487838][ T5996] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 163.494883][ T5996] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 163.640026][ T5996] usb 6-1: USB disconnect, device number 30 [ 163.853294][ T8593] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 163.855774][ T8593] netlink: 'syz.3.896': attribute type 2 has an invalid length. [ 163.859014][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 163.903461][ T8594] tipc: Started in network mode [ 163.905638][ T8594] tipc: Node identity 065fc881516e, cluster identity 4711 [ 163.909045][ T8594] tipc: Enabled bearer , priority 0 [ 164.375191][ T40] audit: type=1326 audit(1764422146.893:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.383112][ T40] audit: type=1326 audit(1764422146.893:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.390237][ T40] audit: type=1326 audit(1764422146.893:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.399038][ T40] audit: type=1326 audit(1764422146.893:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.407881][ T40] audit: type=1326 audit(1764422146.893:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.416471][ T40] audit: type=1326 audit(1764422146.893:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.422966][ T8602] capability: warning: `syz.1.901' uses deprecated v2 capabilities in a way that may be insecure [ 164.424969][ T40] audit: type=1326 audit(1764422146.893:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.437072][ T40] audit: type=1326 audit(1764422146.893:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.446238][ T40] audit: type=1326 audit(1764422146.903:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.453204][ T40] audit: type=1326 audit(1764422146.903:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.1.901" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 164.475102][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.903'. [ 164.478918][ T8605] openvswitch: netlink: Flow key attr not present in new flow. [ 164.739791][ T8590] tipc: Disabling bearer [ 165.437237][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 165.440755][ T8633] openvswitch: netlink: Flow key attr not present in new flow. [ 166.232043][ T8647] fuse: Unknown parameter 'grou00000000000000000000' [ 166.594232][ T5996] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 166.774422][ T5996] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.777862][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.781390][ T5996] usb 8-1: Product: syz [ 166.783110][ T5996] usb 8-1: Manufacturer: syz [ 166.784748][ T5996] usb 8-1: SerialNumber: syz [ 166.789283][ T5996] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 166.808065][ T8670] fuse: Unknown parameter 'grou00000000000000000000' [ 166.816515][ T841] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.428734][ T842] usb 8-1: USB disconnect, device number 39 [ 167.841749][ T841] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 167.844526][ T841] ath9k_htc: Failed to initialize the device [ 167.848077][ T842] usb 8-1: ath9k_htc: USB layer deinitialized [ 169.222368][ T8729] fuse: Unknown parameter 'group_i00000000000000000000' [ 169.709611][ T8740] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 170.185111][ T9] kernel read not supported for file /newroot/223 (pid: 9 comm: kworker/0:0) [ 170.486487][ T8756] fuse: Unknown parameter 'group_i00000000000000000000' [ 170.626808][ T8762] input: syz1 as /devices/virtual/input/input27 [ 171.214347][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 171.214364][ T40] audit: type=1326 audit(1764422153.733:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.226360][ T40] audit: type=1326 audit(1764422153.733:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.235759][ T40] audit: type=1326 audit(1764422153.733:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.261023][ T40] audit: type=1326 audit(1764422153.733:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.270871][ T40] audit: type=1326 audit(1764422153.733:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.277728][ T40] audit: type=1326 audit(1764422153.733:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.286455][ T40] audit: type=1326 audit(1764422153.733:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.294432][ T40] audit: type=1326 audit(1764422153.753:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.362892][ T40] audit: type=1326 audit(1764422153.753:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 171.372441][ T40] audit: type=1326 audit(1764422153.753:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8769 comm="syz.3.959" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 172.063368][ T8774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.202071][ T8779] mmap: syz.3.964 (8779) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.397086][ T8800] input: syz0 as /devices/virtual/input/input29 [ 173.501832][ T8805] netlink: 92 bytes leftover after parsing attributes in process `syz.0.971'. [ 173.539450][ T8806] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 173.553131][ T8808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.448186][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 175.151857][ T8834] input: syz0 as /devices/virtual/input/input30 [ 176.036880][ T8850] fuse: Unknown parameter 'grou00000000000000000000' [ 176.295626][ T8857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.521691][ T5989] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 176.671654][ T5989] usb 7-1: Using ep0 maxpacket: 8 [ 176.675639][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.680057][ T5989] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 176.685171][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 176.688746][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 176.692592][ T5989] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.698564][ T5989] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 176.701451][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 176.704167][ T5989] usb 7-1: Product: syz [ 176.705602][ T5989] usb 7-1: Manufacturer: syz [ 176.707146][ T5989] usb 7-1: SerialNumber: syz [ 176.710154][ T5989] usb 7-1: config 0 descriptor?? [ 176.918724][ T5989] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 176.921852][ T5989] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 177.119790][ T5989] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 177.123600][ T5989] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 177.128049][ T5989] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 177.322349][ T5989] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 177.376320][ T8879] input: syz0 as /devices/virtual/input/input31 [ 177.429139][ T8883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.523772][ T5989] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 177.526779][ T5989] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 177.531503][ T5989] usb 7-1: USB disconnect, device number 28 [ 177.871286][ T8889] fuse: Unknown parameter 'grou00000000000000000000' [ 179.045428][ T8911] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 179.906495][ T8929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1010'. [ 179.911446][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 180.256071][ T8936] fuse: Unknown parameter 'grou00000000000000000000' [ 180.507983][ T8941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.781669][ T5996] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 180.961757][ T5996] usb 6-1: Using ep0 maxpacket: 8 [ 180.965515][ T5996] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.969547][ T5996] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.973838][ T5996] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.978211][ T5996] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.983680][ T5996] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.987427][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.161140][ T8953] overlayfs: failed to resolve './file0': -2 [ 181.209750][ T5996] usb 6-1: GET_CAPABILITIES returned 0 [ 181.212838][ T5996] usbtmc 6-1:16.0: can't read capabilities [ 181.418000][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.423111][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.426930][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.430887][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.434727][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.438410][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.442139][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.446192][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.449729][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.453455][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.457163][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.460878][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.464598][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.468320][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.473919][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.477505][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 181.482458][ T5996] usb 6-1: USB disconnect, device number 31 [ 182.605869][ T8978] fuse: Unknown parameter 'group_i00000000000000000000' [ 183.282037][ T6026] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 183.431681][ T6026] usb 6-1: Using ep0 maxpacket: 32 [ 183.434681][ T6026] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 183.439411][ T6026] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 183.442341][ T6026] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.444921][ T6026] usb 6-1: Product: syz [ 183.446294][ T6026] usb 6-1: Manufacturer: syz [ 183.447792][ T6026] usb 6-1: SerialNumber: syz [ 183.452624][ T6026] usb 6-1: config 0 descriptor?? [ 183.455126][ T8985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.027148][ T9004] syzkaller0: entered promiscuous mode [ 184.028919][ T9004] syzkaller0: entered allmulticast mode [ 184.115377][ T6026] usb 6-1: USB disconnect, device number 32 [ 184.692249][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 184.692264][ T40] audit: type=1326 audit(1764422167.213:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.704389][ T40] audit: type=1326 audit(1764422167.213:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.713841][ T40] audit: type=1326 audit(1764422167.213:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.720568][ T40] audit: type=1326 audit(1764422167.213:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.729497][ T40] audit: type=1326 audit(1764422167.213:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.736735][ T40] audit: type=1326 audit(1764422167.213:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.815778][ T40] audit: type=1326 audit(1764422167.213:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.841697][ T40] audit: type=1326 audit(1764422167.213:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.847873][ T40] audit: type=1326 audit(1764422167.243:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9012 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.857852][ T40] audit: type=1326 audit(1764422167.243:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.2.1037" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 184.890826][ T9026] syzkaller0: entered promiscuous mode [ 184.893075][ T9026] syzkaller0: entered allmulticast mode [ 185.776952][ T9051] macsec1: entered allmulticast mode [ 185.778621][ T9051] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 186.086811][ T9056] syzkaller0: entered promiscuous mode [ 186.088971][ T9056] syzkaller0: entered allmulticast mode [ 186.222645][ T9063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1055'. [ 186.228177][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 187.304372][ T9085] syzkaller0: entered promiscuous mode [ 187.306716][ T9085] syzkaller0: entered allmulticast mode [ 189.689301][ T9139] syzkaller0: entered promiscuous mode [ 189.691094][ T9139] syzkaller0: entered allmulticast mode [ 190.726659][ T9174] syzkaller0: entered promiscuous mode [ 190.728948][ T9174] syzkaller0: entered allmulticast mode [ 191.236259][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 191.236277][ T40] audit: type=1326 audit(1764422173.753:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.247404][ T40] audit: type=1326 audit(1764422173.753:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.256020][ T40] audit: type=1326 audit(1764422173.753:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.265088][ T40] audit: type=1326 audit(1764422173.753:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.273946][ T40] audit: type=1326 audit(1764422173.753:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.280955][ T40] audit: type=1326 audit(1764422173.753:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.288163][ T40] audit: type=1326 audit(1764422173.753:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.296811][ T40] audit: type=1326 audit(1764422173.753:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.305480][ T40] audit: type=1326 audit(1764422173.763:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.314190][ T40] audit: type=1326 audit(1764422173.763:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9192 comm="syz.1.1097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 191.859851][ T9207] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1100'. [ 192.456236][ T9231] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.841843][ T9242] fuse: Bad value for 'rootmode' [ 193.665825][ T9264] fuse: Bad value for 'rootmode' [ 193.673195][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 193.764772][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.767713][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.485066][ T9302] fuse: Unknown parameter 'use00000000000000000000' [ 195.612443][ T9307] input: syz0 as /devices/virtual/input/input33 [ 197.222346][ T53] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 197.258421][ T9330] syzkaller0: entered promiscuous mode [ 197.260278][ T9330] syzkaller0: entered allmulticast mode [ 197.391722][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 197.394930][ T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 197.403852][ T53] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.407005][ T53] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.410415][ T53] usb 8-1: Product: syz [ 197.413571][ T53] usb 8-1: Manufacturer: syz [ 197.415649][ T53] usb 8-1: SerialNumber: syz [ 197.420229][ T53] usb 8-1: config 0 descriptor?? [ 197.426963][ T9326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.646365][ T53] usb 8-1: USB disconnect, device number 40 [ 197.866239][ T9343] sp0: Synchronizing with TNC [ 198.000399][ T5948] Bluetooth: hci2: Invalid handle: 0xfe00 > 0x0eff [ 198.235636][ T9355] syzkaller0: entered promiscuous mode [ 198.238164][ T9355] syzkaller0: entered allmulticast mode [ 198.765949][ T9374] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1156'. [ 198.823940][ T9376] syzkaller0: entered promiscuous mode [ 198.825897][ T9376] syzkaller0: entered allmulticast mode [ 199.062863][ T9382] fuse: Unknown parameter 'user_i00000000000000000000' [ 199.811021][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'. [ 199.912004][ T9409] fuse: Unknown parameter 'user_i00000000000000000000' [ 200.432653][ T842] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 200.594366][ T842] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.607231][ T842] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.636383][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.639498][ T842] usb 5-1: Product: syz [ 200.641119][ T842] usb 5-1: Manufacturer: syz [ 200.663697][ T842] usb 5-1: SerialNumber: syz [ 200.672927][ T842] usb 5-1: config 0 descriptor?? [ 200.676636][ T9431] block device autoloading is deprecated and will be removed. [ 200.737891][ T842] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 200.758480][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.294795][ T9437] netlink: 'syz.0.1173': attribute type 2 has an invalid length. [ 201.449794][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 201.851935][ T53] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 202.001727][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 202.008272][ T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 202.014676][ T53] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.017709][ T53] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.020418][ T53] usb 8-1: Product: syz [ 202.021922][ T53] usb 8-1: Manufacturer: syz [ 202.023564][ T53] usb 8-1: SerialNumber: syz [ 202.028097][ T53] usb 8-1: config 0 descriptor?? [ 202.030962][ T9448] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.241864][ T5989] usb 8-1: USB disconnect, device number 41 [ 203.471119][ T5989] usb 5-1: USB disconnect, device number 40 [ 204.121983][ T53] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 204.285823][ T53] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 204.288949][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.291656][ T53] usb 8-1: Product: syz [ 204.293084][ T53] usb 8-1: Manufacturer: syz [ 204.294584][ T53] usb 8-1: SerialNumber: syz [ 204.300254][ T53] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 204.317406][ T5942] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 204.733211][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 204.733221][ T40] audit: type=1326 audit(1764422187.253:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.752607][ T40] audit: type=1326 audit(1764422187.263:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.759393][ T40] audit: type=1326 audit(1764422187.263:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.771798][ T40] audit: type=1326 audit(1764422187.263:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.779340][ T40] audit: type=1326 audit(1764422187.263:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.786849][ T40] audit: type=1326 audit(1764422187.263:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.794092][ T40] audit: type=1326 audit(1764422187.263:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.800673][ T40] audit: type=1326 audit(1764422187.263:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.807294][ T40] audit: type=1326 audit(1764422187.263:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.813988][ T40] audit: type=1326 audit(1764422187.263:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x50000 [ 204.988795][ T5996] usb 8-1: USB disconnect, device number 42 [ 205.031726][ T5989] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 205.183289][ T5989] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 205.186675][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.190805][ T5989] usb 7-1: config 0 has no interface number 0 [ 205.194084][ T5989] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 205.198138][ T5989] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.205811][ T5989] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 205.209575][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.213038][ T5989] usb 7-1: Product: syz [ 205.214811][ T5989] usb 7-1: Manufacturer: syz [ 205.216776][ T5989] usb 7-1: SerialNumber: syz [ 205.220699][ T5989] usb 7-1: config 0 descriptor?? [ 205.611762][ T5942] usb 8-1: Service connection timeout for: 256 [ 205.613902][ T5942] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 205.617140][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'. [ 205.617539][ T5942] ath9k_htc: Failed to initialize the device [ 205.624310][ T5996] usb 8-1: ath9k_htc: USB layer deinitialized [ 205.630530][ T842] usb 7-1: USB disconnect, device number 29 [ 206.766525][ T9544] fuse: Bad value for 'fd' [ 207.341760][ T5989] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 207.491666][ T5989] usb 7-1: Using ep0 maxpacket: 8 [ 207.498012][ T5989] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 207.501883][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.506153][ T5989] usb 7-1: Product: syz [ 207.508070][ T5989] usb 7-1: Manufacturer: syz [ 207.510049][ T5989] usb 7-1: SerialNumber: syz [ 207.516184][ T5989] usb 7-1: config 0 descriptor?? [ 207.524479][ T5989] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 207.927856][ T5989] gspca_sonixj: reg_r err -71 [ 207.929441][ T5989] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 207.942533][ T5989] usb 7-1: USB disconnect, device number 30 [ 208.076020][ T9579] batadv_slave_0: entered promiscuous mode [ 208.078977][ T9579] macvtap1: entered promiscuous mode [ 208.081470][ T9579] macvtap1: entered allmulticast mode [ 208.083991][ T9579] batadv_slave_0: entered allmulticast mode [ 208.089978][ T9579] batman_adv: batadv0: Adding interface: macvtap1 [ 208.092803][ T9579] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.103540][ T9579] batman_adv: batadv0: Interface activated: macvtap1 [ 208.548810][ T9590] fuse: Bad value for 'fd' [ 208.761780][ T5996] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 208.911782][ T5996] usb 8-1: Using ep0 maxpacket: 32 [ 208.915777][ T5996] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 208.922633][ T5996] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.926264][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.928892][ T5996] usb 8-1: Product: syz [ 208.930260][ T5996] usb 8-1: Manufacturer: syz [ 208.932170][ T5996] usb 8-1: SerialNumber: syz [ 208.934984][ T5996] usb 8-1: config 0 descriptor?? [ 208.937247][ T9588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 208.981758][ T53] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 209.143262][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 209.145616][ T6026] usb 8-1: USB disconnect, device number 43 [ 209.146478][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 209.153620][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.156545][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.159029][ T53] usb 6-1: Product: syz [ 209.160348][ T53] usb 6-1: Manufacturer: syz [ 209.162058][ T53] usb 6-1: SerialNumber: syz [ 209.165152][ T53] usb 6-1: config 0 descriptor?? [ 209.231693][ T5989] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 209.381732][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 209.385384][ T5989] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 209.388861][ T5989] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 209.401657][ T5989] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 209.405285][ T5989] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 209.408919][ T5989] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 209.412886][ T5989] usb 5-1: config 1 interface 0 has no altsetting 0 [ 209.415400][ T5989] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 209.418826][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.434940][ T5989] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 209.631872][ T5989] scsi host6: usb-storage 5-1:1.0 [ 209.691747][ T54] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 209.831344][ T6026] usb 5-1: USB disconnect, device number 41 [ 209.832734][ T5958] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 209.845628][ T54] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.848907][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.851499][ T54] usb 7-1: Product: syz [ 209.852793][ T54] usb 7-1: Manufacturer: syz [ 209.854236][ T54] usb 7-1: SerialNumber: syz [ 209.859547][ T54] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.886290][ T54] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.300776][ T40] kauditd_printk_skb: 6430 callbacks suppressed [ 210.300789][ T40] audit: type=1326 audit(1764422192.813:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.310360][ T40] audit: type=1326 audit(1764422192.813:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.318948][ T40] audit: type=1326 audit(1764422192.813:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.326102][ T40] audit: type=1326 audit(1764422192.813:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.333589][ T40] audit: type=1326 audit(1764422192.813:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.341038][ T40] audit: type=1326 audit(1764422192.813:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.348161][ T40] audit: type=1326 audit(1764422192.813:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.355167][ T40] audit: type=1326 audit(1764422192.813:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.362392][ T40] audit: type=1326 audit(1764422192.813:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.370060][ T40] audit: type=1326 audit(1764422192.813:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x50000 [ 210.553745][ T5996] usb 7-1: USB disconnect, device number 31 [ 211.131686][ T54] usb 7-1: Service connection timeout for: 256 [ 211.133707][ T54] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 211.136426][ T54] ath9k_htc: Failed to initialize the device [ 211.138568][ T5996] usb 7-1: ath9k_htc: USB layer deinitialized [ 211.305297][ T9636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.400040][ T9638] ======================================================= [ 211.400040][ T9638] WARNING: The mand mount option has been deprecated and [ 211.400040][ T9638] and is ignored by this kernel. Remove the mand [ 211.400040][ T9638] option from the mount to silence this warning. [ 211.400040][ T9638] ======================================================= [ 211.770611][ T53] usb 6-1: USB disconnect, device number 33 [ 211.791514][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.833670][ T9641] fuse: Bad value for 'fd' [ 211.895712][ T9638] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 212.337419][ T9668] tipc: Started in network mode [ 212.339598][ T9668] tipc: Node identity e653f80f3615, cluster identity 4711 [ 212.351908][ T9668] tipc: Enabled bearer , priority 0 [ 212.355707][ T9668] syzkaller0: entered promiscuous mode [ 212.357797][ T9668] syzkaller0: entered allmulticast mode [ 212.362480][ T9668] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 212.371789][ T9668] tipc: Resetting bearer [ 212.374643][ T9668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.379191][ T9667] tipc: Resetting bearer [ 212.392151][ T9667] tipc: Disabling bearer [ 212.458766][ T9670] syzkaller0: entered promiscuous mode [ 212.460575][ T9670] syzkaller0: entered allmulticast mode [ 213.770978][ T9706] syzkaller0: entered promiscuous mode [ 213.773458][ T9706] syzkaller0: entered allmulticast mode [ 213.920717][ T9712] fuse: Bad value for 'fd' [ 215.611422][ T9747] fuse: Invalid rootmode [ 216.068600][ T9763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 216.743234][ T40] kauditd_printk_skb: 3719 callbacks suppressed [ 216.743244][ T40] audit: type=1326 audit(1764422199.253:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9770 comm="syz.1.1299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 216.752917][ T40] audit: type=1326 audit(1764422199.263:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9770 comm="syz.1.1299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 216.760717][ T40] audit: type=1326 audit(1764422199.263:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9770 comm="syz.1.1299" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 216.767772][ T40] audit: type=1326 audit(1764422199.263:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9770 comm="syz.1.1299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 216.774766][ T40] audit: type=1326 audit(1764422199.263:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9770 comm="syz.1.1299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 216.978828][ T40] audit: type=1326 audit(1764422199.493:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.2.1300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 216.985540][ T40] audit: type=1326 audit(1764422199.493:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.2.1300" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 216.992383][ T40] audit: type=1326 audit(1764422199.493:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.2.1300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 216.999047][ T40] audit: type=1326 audit(1764422199.493:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.2.1300" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 217.006187][ T40] audit: type=1326 audit(1764422199.493:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.2.1300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 217.435022][ T9794] fuse: Unknown parameter 'grou00000000000000000000' [ 219.059306][ T9835] nbd: couldn't find device at index 101 [ 219.456752][ T9847] binder: 9846:9847 unknown command 0 [ 219.458609][ T9847] binder: 9846:9847 ioctl c0306201 80000080 returned -22 [ 219.465746][ T9847] binder: 9846:9847 ioctl c0306201 800003c0 returned -14 [ 219.635901][ T5958] block nbd3: Receive control failed (result -32) [ 219.637796][ T9829] block nbd3: shutting down sockets [ 220.449623][ T9884] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.669306][ T9894] bridge0: entered promiscuous mode [ 220.672956][ T9894] bridge0: left promiscuous mode [ 220.872215][ T9902] netlink: zone id is out of range [ 220.873867][ T9902] netlink: zone id is out of range [ 220.875580][ T9902] netlink: del zone limit has 4 unknown bytes [ 223.673778][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 223.673790][ T40] audit: type=1326 audit(1764422206.193:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.682487][ T40] audit: type=1326 audit(1764422206.193:10432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.689431][ T40] audit: type=1326 audit(1764422206.193:10433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.696453][ T40] audit: type=1326 audit(1764422206.193:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.705059][ T40] audit: type=1326 audit(1764422206.193:10435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.713488][ T40] audit: type=1326 audit(1764422206.193:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.722518][ T842] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 223.733593][ T40] audit: type=1326 audit(1764422206.193:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.747747][ T40] audit: type=1326 audit(1764422206.203:10438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.757026][ T40] audit: type=1326 audit(1764422206.223:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.766060][ T40] audit: type=1326 audit(1764422206.223:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.1.1362" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 223.922046][ T842] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.926034][ T842] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.929603][ T842] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.936526][ T842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.941705][ T9964] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.950199][ T842] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.112811][ T9984] fuse: Unknown parameter 'group_id00000000000000000000' [ 224.234469][ T9986] /dev/nullb0: Can't open blockdev [ 224.671667][ T841] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 224.831685][ T5942] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 224.852197][ T841] usb 5-1: Using ep0 maxpacket: 32 [ 224.856301][ T841] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.859168][ T841] usb 5-1: config 0 has no interface number 0 [ 224.861664][ T841] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.866485][ T841] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.870388][ T841] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 224.874631][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.879919][ T841] usb 5-1: config 0 descriptor?? [ 225.001683][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 225.012434][ T5942] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 225.016030][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.018734][ T5942] usb 6-1: Product: syz [ 225.020537][ T5942] usb 6-1: Manufacturer: syz [ 225.022417][ T5942] usb 6-1: SerialNumber: syz [ 225.026053][ T5942] usb 6-1: config 0 descriptor?? [ 225.031491][ T5942] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 225.035851][ T5942] dvb-usb: bulk message failed: -22 (2/0) [ 225.041868][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.047020][ T5942] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 225.050010][ T5942] usb 6-1: media controller created [ 225.069889][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.081544][ T5942] usb 6-1: selecting invalid altsetting 7 [ 225.083702][ T5942] cxusb: set interface failed [ 225.085743][ T5942] dvb-usb: bulk message failed: -22 (1/0) [ 225.137724][ T5942] DVB: Unable to find symbol lgdt330x_attach() [ 225.139861][ T5942] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 225.182337][ T842] usb 7-1: USB disconnect, device number 32 [ 225.211714][ T5942] rc_core: IR keymap rc-dvico-portable not found [ 225.214330][ T5942] Registered IR keymap rc-empty [ 225.223254][ T5942] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 225.228604][ T5942] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input39 [ 225.238857][ T5942] dvb-usb: schedule remote query interval to 100 msecs. [ 225.241504][ T5942] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 225.246817][ T5942] usb 6-1: USB disconnect, device number 34 [ 225.279764][ T5942] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 226.021903][ T5996] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 226.175189][ T5996] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.178062][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.180346][ T5996] usb 7-1: Product: syz [ 226.181776][ T5996] usb 7-1: Manufacturer: syz [ 226.183269][ T5996] usb 7-1: SerialNumber: syz [ 226.192015][ T5996] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 226.208331][ T5996] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 226.740066][ T6009] usb 7-1: USB disconnect, device number 33 [ 227.300506][T10045] binder: 10043:10045 unknown command 0 [ 227.302777][T10045] binder: 10043:10045 ioctl c0306201 80000080 returned -22 [ 227.339618][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'. [ 227.381099][T10055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.387778][T10055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.394408][T10055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.442064][ T5996] usb 7-1: Service connection timeout for: 256 [ 227.444750][ T5996] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 227.447952][ T5996] ath9k_htc: Failed to initialize the device [ 227.450461][ T6009] usb 7-1: ath9k_htc: USB layer deinitialized [ 227.483233][ T841] usbhid 5-1:0.1: can't add hid device: -71 [ 227.485104][ T841] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 227.499045][ T841] usb 5-1: USB disconnect, device number 42 [ 227.941730][ T841] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 228.052333][T10073] binder: 10072:10073 unknown command 0 [ 228.054677][T10073] binder: 10072:10073 ioctl c0306201 80000080 returned -22 [ 228.123492][ T841] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.126456][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.128961][ T841] usb 5-1: Product: syz [ 228.130277][ T841] usb 5-1: Manufacturer: syz [ 228.131884][ T841] usb 5-1: SerialNumber: syz [ 228.137561][ T841] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 228.169160][ T6009] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 228.410041][T10082] tipc: Enabled bearer , priority 0 [ 228.413517][T10082] syzkaller0: entered promiscuous mode [ 228.416461][T10082] syzkaller0: entered allmulticast mode [ 228.426868][T10082] tipc: Resetting bearer [ 228.431237][T10081] tipc: Resetting bearer [ 228.439549][T10081] tipc: Disabling bearer [ 228.541213][T10086] binder: 10085:10086 ioctl c0306201 800003c0 returned -22 [ 228.586939][T10090] fuse: Bad value for 'user_id' [ 228.588654][T10090] fuse: Bad value for 'user_id' [ 228.682189][ T40] kauditd_printk_skb: 7161 callbacks suppressed [ 228.682199][ T40] audit: type=1326 audit(1764422211.193:17602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.685958][T10094] binder: 10093:10094 unknown command 0 [ 228.690384][ T5942] usb 5-1: USB disconnect, device number 43 [ 228.693133][ T40] audit: type=1326 audit(1764422211.203:17603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.696952][T10094] binder: 10093:10094 ioctl c0306201 80000080 returned -22 [ 228.700960][ T40] audit: type=1326 audit(1764422211.203:17604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.707728][T10094] binder: 10093:10094 ioctl c0306201 800003c0 returned -14 [ 228.710375][ T40] audit: type=1326 audit(1764422211.203:17605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.720796][ T40] audit: type=1326 audit(1764422211.203:17606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.731672][ T40] audit: type=1326 audit(1764422211.203:17607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.738236][ T40] audit: type=1326 audit(1764422211.203:17608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.751724][ T40] audit: type=1326 audit(1764422211.203:17609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.760281][ T40] audit: type=1326 audit(1764422211.203:17610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 228.768760][ T40] audit: type=1326 audit(1764422211.203:17611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10066 comm="syz.0.1395" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x50000 [ 229.441690][ T6009] usb 5-1: Service connection timeout for: 256 [ 229.443695][ T6009] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 229.446415][ T6009] ath9k_htc: Failed to initialize the device [ 229.448461][ T5942] usb 5-1: ath9k_htc: USB layer deinitialized [ 229.712185][T10119] misc userio: No port type given on /dev/userio [ 229.808253][T10122] tipc: Enabled bearer , priority 0 [ 229.815160][T10122] syzkaller0: entered promiscuous mode [ 229.819083][T10122] syzkaller0: entered allmulticast mode [ 229.833268][T10122] tipc: Resetting bearer [ 229.838225][T10121] tipc: Resetting bearer [ 229.847110][T10124] trusted_key: encrypted_key: insufficient parameters specified [ 229.858907][T10121] tipc: Disabling bearer [ 230.224672][T10139] binder: 10138:10139 unknown command 0 [ 230.226452][T10139] binder: 10138:10139 ioctl c0306201 80000080 returned -22 [ 230.238269][T10139] binder: 10138:10139 ioctl c0306201 800003c0 returned -14 [ 230.883792][T10161] syzkaller0: entered promiscuous mode [ 230.885589][T10161] syzkaller0: entered allmulticast mode [ 230.996928][T10163] tipc: Enabled bearer , priority 0 [ 231.000734][T10163] syzkaller0: entered promiscuous mode [ 231.003128][T10163] syzkaller0: entered allmulticast mode [ 231.020267][T10163] tipc: Resetting bearer [ 231.025976][T10162] tipc: Resetting bearer [ 231.040314][T10162] tipc: Disabling bearer [ 231.100499][T10167] fuse: Bad value for 'fd' [ 232.133232][T10200] binder: 10199:10200 unknown command 0 [ 232.135075][T10200] binder: 10199:10200 ioctl c0306201 80000080 returned -22 [ 232.138663][T10200] binder: 10199:10200 ioctl c0306201 800003c0 returned -14 [ 232.143177][T10200] binder_alloc: 10199: binder_alloc_buf, no vma [ 232.153827][T10202] tipc: Enabled bearer , priority 0 [ 232.156872][T10202] syzkaller0: entered promiscuous mode [ 232.158830][T10202] syzkaller0: entered allmulticast mode [ 232.169727][T10202] tipc: Resetting bearer [ 232.177703][T10201] tipc: Resetting bearer [ 232.191160][T10201] tipc: Disabling bearer [ 232.218105][T10204] kvm: pic: non byte read [ 232.219923][T10204] kvm: pic: non byte read [ 232.222064][T10204] kvm: pic: non byte read [ 232.223844][T10204] kvm: pic: non byte read [ 232.225551][T10204] kvm: pic: non byte read [ 232.227346][T10204] kvm: pic: non byte read [ 232.229117][T10204] kvm: pic: non byte read [ 232.231069][T10204] kvm: pic: non byte read [ 232.232934][T10204] kvm: pic: non byte read [ 232.234677][T10204] kvm: pic: non byte read [ 232.554316][T10222] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 232.673749][T10228] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 232.685133][T10231] tipc: Enabled bearer , priority 0 [ 232.688137][T10231] syzkaller0: entered promiscuous mode [ 232.689983][T10231] syzkaller0: entered allmulticast mode [ 232.696740][T10231] tipc: Resetting bearer [ 232.699846][T10230] tipc: Resetting bearer [ 232.707364][T10230] tipc: Disabling bearer [ 234.512984][ T5958] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 234.641790][ T5942] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 234.773661][T10278] tipc: Enabled bearer , priority 0 [ 234.781962][T10278] syzkaller0: entered promiscuous mode [ 234.783807][T10278] syzkaller0: entered allmulticast mode [ 234.791776][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 234.795331][ T5942] usb 7-1: config index 0 descriptor too short (expected 93, got 36) [ 234.797997][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.798855][T10278] tipc: Resetting bearer [ 234.802929][ T5942] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 234.806894][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 234.809624][ T5942] usb 7-1: Product: syz [ 234.809996][T10277] tipc: Resetting bearer [ 234.814408][ T5942] usb 7-1: config 0 descriptor?? [ 234.827174][T10277] tipc: Disabling bearer [ 235.029190][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.034128][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.462909][ T5942] usbhid 7-1:0.0: can't add hid device: -71 [ 235.465133][ T5942] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 235.469855][ T5942] usb 7-1: USB disconnect, device number 34 [ 235.923126][T10308] tipc: Enabled bearer , priority 0 [ 235.926110][T10308] syzkaller0: entered promiscuous mode [ 235.928104][T10308] syzkaller0: entered allmulticast mode [ 235.937975][T10308] tipc: Resetting bearer [ 235.942749][T10307] tipc: Resetting bearer [ 235.955205][T10307] tipc: Disabling bearer [ 236.176688][T10318] fuse: Unknown parameter 'user_id00000000000000000000' [ 236.221680][ T5942] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 236.372514][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 236.375715][ T5942] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 236.379114][ T5942] usb 7-1: config 0 has no interface number 0 [ 236.381980][ T5942] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.386751][ T5942] usb 7-1: config 0 interface 85 has no altsetting 0 [ 236.392614][ T5942] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 236.396436][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.399754][ T5942] usb 7-1: Product: syz [ 236.401516][ T5942] usb 7-1: Manufacturer: syz [ 236.403588][ T5942] usb 7-1: SerialNumber: syz [ 236.407643][ T5942] usb 7-1: config 0 descriptor?? [ 236.601884][T10330] tipc: Enabled bearer , priority 0 [ 236.605167][T10330] syzkaller0: entered promiscuous mode [ 236.607330][T10330] syzkaller0: entered allmulticast mode [ 236.616895][T10330] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 236.632438][T10330] tipc: Resetting bearer [ 236.638123][T10329] tipc: Resetting bearer [ 236.647305][T10329] tipc: Disabling bearer [ 236.815795][ T5942] appletouch 7-1:0.85: Geyser mode initialized. [ 236.820269][ T5942] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.85/input/input40 [ 236.854317][ T40] kauditd_printk_skb: 4801 callbacks suppressed [ 236.854333][ T40] audit: type=1326 audit(1764422219.373:22413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.866134][ T40] audit: type=1326 audit(1764422219.373:22414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.873631][ T40] audit: type=1326 audit(1764422219.383:22415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.884228][ T40] audit: type=1326 audit(1764422219.383:22416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.893106][ T40] audit: type=1326 audit(1764422219.383:22417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.901216][ T40] audit: type=1326 audit(1764422219.383:22418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.909489][ T40] audit: type=1326 audit(1764422219.383:22419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.918793][ T842] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 236.918892][ T40] audit: type=1326 audit(1764422219.383:22420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.933232][ T40] audit: type=1326 audit(1764422219.423:22421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10332 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 236.940562][ T40] audit: type=1326 audit(1764422219.443:22422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10336 comm="syz.1.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 237.099099][ T842] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.111332][ T842] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.115982][ T842] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.119776][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.139766][T10331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 237.146949][ T842] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.409846][T10338] /dev/nullb0: Can't open blockdev [ 238.346343][ T842] usb 5-1: USB disconnect, device number 44 [ 238.609047][T10350] fuse: Unknown parameter '00000000000000000000' [ 239.042341][ T841] usb 7-1: USB disconnect, device number 35 [ 239.059279][ T841] appletouch 7-1:0.85: input: appletouch disconnected [ 240.022578][T10387] fuse: Unknown parameter '00000000000000000000' [ 240.547398][T10392] binder: 10391:10392 ioctl c0306201 80000080 returned -14 [ 240.845598][T10406] ªªªªªª: renamed from lo (while UP) [ 241.555541][T10423] ptrace attach of "/syz-executor exec"[5941] was attempted by ""[10423] [ 241.561273][T10423] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1515'. [ 243.015116][ T40] kauditd_printk_skb: 137 callbacks suppressed [ 243.015132][ T40] audit: type=1326 audit(1764422225.533:22560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.042054][ T40] audit: type=1326 audit(1764422225.533:22561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.051707][ T40] audit: type=1326 audit(1764422225.533:22562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.059106][ T40] audit: type=1326 audit(1764422225.533:22563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.066052][ T40] audit: type=1326 audit(1764422225.533:22564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.074702][ T40] audit: type=1326 audit(1764422225.533:22565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.081786][ T40] audit: type=1326 audit(1764422225.533:22566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.089294][ T40] audit: type=1326 audit(1764422225.533:22567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.099653][ T40] audit: type=1326 audit(1764422225.543:22568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.110328][ T40] audit: type=1326 audit(1764422225.543:22569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10459 comm="syz.1.1528" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb1579 code=0x7ffc0000 [ 243.264262][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 243.496837][T10471] tipc: Enabled bearer , priority 0 [ 243.500944][T10471] syzkaller0: entered promiscuous mode [ 243.506532][T10471] syzkaller0: entered allmulticast mode [ 243.517331][T10471] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.528418][T10471] tipc: Resetting bearer [ 243.536663][T10470] tipc: Resetting bearer [ 243.546674][T10470] tipc: Disabling bearer [ 243.771698][ T841] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 243.941765][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 243.949259][ T841] usb 7-1: unable to get BOS descriptor or descriptor too short [ 243.955904][ T841] usb 7-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 243.962657][ T841] usb 7-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 243.971114][ T841] usb 7-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 243.980503][ T841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.984136][ T841] usb 7-1: Product: syz [ 243.985443][ T841] usb 7-1: Manufacturer: syz [ 243.986941][ T841] usb 7-1: SerialNumber: syz [ 244.139144][T10496] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 244.196564][ T841] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 244.832144][ T841] usb 7-1: reset high-speed USB device number 36 using dummy_hcd [ 244.996357][ T841] usb 7-1: unable to get BOS descriptor or descriptor too short [ 245.000398][ T841] usb 7-1: device firmware changed [ 245.003017][ T841] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 245.005424][ T841] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 245.009486][ T6027] usb 7-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 245.012792][ T841] usb 7-1: USB disconnect, device number 36 [ 245.016734][ T6027] usb 7-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 245.021718][ T6027] ------------[ cut here ]------------ [ 245.023549][ T6027] WARNING: CPU: 2 PID: 6027 at fs/kernfs/dir.c:537 kernfs_get.part.0+0x6e/0x80 [ 245.026352][ T6027] Modules linked in: [ 245.028200][ T6027] CPU: 2 UID: 0 PID: 6027 Comm: kworker/2:5 Not tainted syzkaller #0 PREEMPT(full) [ 245.031136][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.034519][ T6027] Workqueue: events request_firmware_work_func [ 245.036438][ T6027] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 245.038097][ T6027] Code: 08 20 59 ff 85 ed 74 1c e8 bf 24 59 ff be 04 00 00 00 48 89 df e8 b2 da c0 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 a3 24 59 ff 90 <0f> 0b 90 eb d9 48 89 df e8 95 d2 c0 ff eb c0 0f 1f 00 90 90 90 90 [ 245.044033][ T6027] RSP: 0018:ffffc90004d6f780 EFLAGS: 00010293 [ 245.045988][ T6027] RAX: 0000000000000000 RBX: ffff88806a84e0f0 RCX: ffffffff826332c8 [ 245.048442][ T6027] RDX: ffff888020e50000 RSI: ffffffff826332ed RDI: 0000000000000005 [ 245.050908][ T6027] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 245.051716][ T5942] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 245.053466][ T6027] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805e5eb0b0 [ 245.058399][ T6027] R13: ffff88802734e5b0 R14: 0000000000000000 R15: ffff88802734e5a8 [ 245.060964][ T6027] FS: 0000000000000000(0000) GS:ffff888097a0d000(0000) knlGS:0000000000000000 [ 245.063909][ T6027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.066035][ T6027] CR2: 0000000057a7b4c0 CR3: 000000004b268000 CR4: 0000000000352ef0 [ 245.068560][ T6027] Call Trace: [ 245.069768][ T6027] [ 245.070749][ T6027] kernfs_get+0x1f/0x30 [ 245.072497][ T6027] kobject_add_internal+0x353/0x9b0 [ 245.074181][ T6027] ? kfree_const+0x51/0x60 [ 245.075633][ T6027] kobject_add+0x16e/0x240 [ 245.077041][ T6027] ? __pfx_kobject_add+0x10/0x10 [ 245.078626][ T6027] get_device_parent+0x399/0x4e0 [ 245.080187][ T6027] device_add+0x1ad/0x1aa0 [ 245.081804][ T6027] ? __pfx_device_add+0x10/0x10 [ 245.083356][ T6027] ? __init_waitqueue_head+0xca/0x150 [ 245.085034][ T6027] firmware_fallback_sysfs+0x2ec/0xbe0 [ 245.086775][ T6027] _request_firmware+0xfe9/0x1470 [ 245.088354][ T6027] ? __pfx__request_firmware+0x10/0x10 [ 245.090010][ T6027] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 245.092093][ T6027] ? debug_object_deactivate+0x1ec/0x3a0 [ 245.093874][ T6027] request_firmware_work_func+0xea/0x250 [ 245.095608][ T6027] ? __pfx_request_firmware_work_func+0x10/0x10 [ 245.097537][ T6027] ? rcu_is_watching+0x12/0xc0 [ 245.099053][ T6027] process_one_work+0x9cf/0x1b70 [ 245.100633][ T6027] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 245.102647][ T6027] ? __pfx_process_one_work+0x10/0x10 [ 245.104364][ T6027] ? assign_work+0x1a0/0x250 [ 245.105806][ T6027] worker_thread+0x6c8/0xf10 [ 245.107300][ T6027] ? __kthread_parkme+0x19e/0x250 [ 245.108828][ T6027] ? __pfx_worker_thread+0x10/0x10 [ 245.110399][ T6027] kthread+0x3c5/0x780 [ 245.111785][ T6027] ? __pfx_kthread+0x10/0x10 [ 245.113228][ T6027] ? rcu_is_watching+0x12/0xc0 [ 245.114740][ T6027] ? __pfx_kthread+0x10/0x10 [ 245.116192][ T6027] ret_from_fork+0x675/0x7d0 [ 245.117636][ T6027] ? __pfx_kthread+0x10/0x10 [ 245.119103][ T6027] ret_from_fork_asm+0x1a/0x30 [ 245.120625][ T6027] [ 245.121686][ T6027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 245.123976][ T6027] CPU: 2 UID: 0 PID: 6027 Comm: kworker/2:5 Not tainted syzkaller #0 PREEMPT(full) [ 245.126921][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.130224][ T6027] Workqueue: events request_firmware_work_func [ 245.132176][ T6027] Call Trace: [ 245.133232][ T6027] [ 245.134155][ T6027] dump_stack_lvl+0x3d/0x1f0 [ 245.135619][ T6027] vpanic+0x640/0x6f0 [ 245.136889][ T6027] ? kernfs_get.part.0+0x6e/0x80 [ 245.138463][ T6027] panic+0xca/0xd0 [ 245.139637][ T6027] ? __pfx_panic+0x10/0x10 [ 245.141054][ T6027] ? check_panic_on_warn+0x1f/0xb0 [ 245.142680][ T6027] check_panic_on_warn+0xab/0xb0 [ 245.144250][ T6027] __warn+0xf6/0x3c0 [ 245.145526][ T6027] ? kernfs_get.part.0+0x6e/0x80 [ 245.147109][ T6027] report_bug+0x3c3/0x580 [ 245.148425][ T6027] ? kernfs_get.part.0+0x6e/0x80 [ 245.149986][ T6027] handle_bug+0x184/0x210 [ 245.151382][ T6027] exc_invalid_op+0x17/0x50 [ 245.152816][ T6027] asm_exc_invalid_op+0x1a/0x20 [ 245.154345][ T6027] RIP: 0010:kernfs_get.part.0+0x6e/0x80 [ 245.156132][ T6027] Code: 08 20 59 ff 85 ed 74 1c e8 bf 24 59 ff be 04 00 00 00 48 89 df e8 b2 da c0 ff f0 ff 03 5b 5d c3 cc cc cc cc e8 a3 24 59 ff 90 <0f> 0b 90 eb d9 48 89 df e8 95 d2 c0 ff eb c0 0f 1f 00 90 90 90 90 [ 245.162092][ T6027] RSP: 0018:ffffc90004d6f780 EFLAGS: 00010293 [ 245.163986][ T6027] RAX: 0000000000000000 RBX: ffff88806a84e0f0 RCX: ffffffff826332c8 [ 245.166454][ T6027] RDX: ffff888020e50000 RSI: ffffffff826332ed RDI: 0000000000000005 [ 245.168829][ T6027] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 245.171268][ T6027] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805e5eb0b0 [ 245.173677][ T6027] R13: ffff88802734e5b0 R14: 0000000000000000 R15: ffff88802734e5a8 [ 245.176171][ T6027] ? kernfs_get.part.0+0x48/0x80 [ 245.177692][ T6027] ? kernfs_get.part.0+0x6d/0x80 [ 245.179229][ T6027] kernfs_get+0x1f/0x30 [ 245.180523][ T6027] kobject_add_internal+0x353/0x9b0 [ 245.182125][ T6027] ? kfree_const+0x51/0x60 [ 245.183491][ T6027] kobject_add+0x16e/0x240 [ 245.184902][ T6027] ? __pfx_kobject_add+0x10/0x10 [ 245.186499][ T6027] get_device_parent+0x399/0x4e0 [ 245.188059][ T6027] device_add+0x1ad/0x1aa0 [ 245.189460][ T6027] ? __pfx_device_add+0x10/0x10 [ 245.190985][ T6027] ? __init_waitqueue_head+0xca/0x150 [ 245.192660][ T6027] firmware_fallback_sysfs+0x2ec/0xbe0 [ 245.194514][ T6027] _request_firmware+0xfe9/0x1470 [ 245.196075][ T6027] ? __pfx__request_firmware+0x10/0x10 [ 245.197742][ T6027] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 245.199596][ T6027] ? debug_object_deactivate+0x1ec/0x3a0 [ 245.201470][ T6027] request_firmware_work_func+0xea/0x250 [ 245.203255][ T6027] ? __pfx_request_firmware_work_func+0x10/0x10 [ 245.205226][ T6027] ? rcu_is_watching+0x12/0xc0 [ 245.206808][ T6027] process_one_work+0x9cf/0x1b70 [ 245.208405][ T6027] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 245.210221][ T6027] ? __pfx_process_one_work+0x10/0x10 [ 245.211961][ T6027] ? assign_work+0x1a0/0x250 [ 245.213433][ T6027] worker_thread+0x6c8/0xf10 [ 245.214909][ T6027] ? __kthread_parkme+0x19e/0x250 [ 245.216524][ T6027] ? __pfx_worker_thread+0x10/0x10 [ 245.218136][ T6027] kthread+0x3c5/0x780 [ 245.219471][ T6027] ? __pfx_kthread+0x10/0x10 [ 245.220967][ T6027] ? rcu_is_watching+0x12/0xc0 [ 245.222520][ T6027] ? __pfx_kthread+0x10/0x10 [ 245.223968][ T6027] ret_from_fork+0x675/0x7d0 [ 245.225434][ T6027] ? __pfx_kthread+0x10/0x10 [ 245.226995][ T6027] ret_from_fork_asm+0x1a/0x30 [ 245.228539][ T6027] [ 245.230168][ T6027] Kernel Offset: disabled [ 245.231556][ T6027] Rebooting in 86400 seconds..