last executing test programs: 5.698788305s ago: executing program 1 (id=2504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) sendmsg$inet6(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) 2.992797481s ago: executing program 1 (id=2518): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) pipe(0x0) pipe(0x0) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x0, &(0x7f0000004540)) 2.869471699s ago: executing program 0 (id=2519): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="05000000000000", @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.591986685s ago: executing program 0 (id=2520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x123) fallocate(r1, 0x0, 0x0, 0x2000402) lseek(r1, 0x0, 0x3) 2.009641624s ago: executing program 3 (id=2524): setreuid(0xee00, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 1.932949001s ago: executing program 3 (id=2525): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48002) 1.798498276s ago: executing program 3 (id=2526): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x25dfdc01, {0x2, 0x10, 0x14, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x40010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.683114971s ago: executing program 1 (id=2527): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff, 0x101}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xffffffff, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930", 0x100, 0x880, 0x0, 0x0) 1.569549048s ago: executing program 3 (id=2528): capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f60}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x6) 1.488878444s ago: executing program 2 (id=2529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.465523937s ago: executing program 3 (id=2530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x200, 0x4) 1.413467183s ago: executing program 1 (id=2531): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) 1.298958767s ago: executing program 1 (id=2532): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000040, 0x0) 1.19859968s ago: executing program 0 (id=2533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 1.120860728s ago: executing program 0 (id=2535): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee6416", 0x3}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r4, 0x10e, 0x5, 0x0, &(0x7f0000001480)) splice(r1, &(0x7f0000000340)=0xd000, r4, 0x0, 0x7748, 0x0) recvfrom(r2, &(0x7f0000000300)=""/60, 0x3c, 0x0, 0x0, 0x0) 1.007737998s ago: executing program 4 (id=2537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) pipe(0x0) pipe(0x0) r1 = syz_open_pts(r0, 0x900) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[0x0]) 605.610534ms ago: executing program 4 (id=2538): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 545.5751ms ago: executing program 2 (id=2539): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002500)=""/4096, 0xffffffffffffffee) 507.057249ms ago: executing program 4 (id=2540): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000006e63ed62000000000000000085000000a8000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 433.557165ms ago: executing program 2 (id=2541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg0\x00'}]}}]}, 0x48}}, 0x24044094) 433.112773ms ago: executing program 3 (id=2542): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x40, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x28}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 364.096957ms ago: executing program 4 (id=2543): r0 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 360.684566ms ago: executing program 1 (id=2544): openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x0, 0x1, 0x3, 0x51}}]}}]}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 238.310189ms ago: executing program 4 (id=2545): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x28, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x28}}, 0x0) 237.223017ms ago: executing program 2 (id=2546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 169.415662ms ago: executing program 0 (id=2547): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x29, 0x4, 0x0, {0x1, 0x7fffffff, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x105081, 0x0) 146.458938ms ago: executing program 2 (id=2548): r0 = socket$packet(0x11, 0x3, 0x300) read(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0xfffffffc}, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 123.889568ms ago: executing program 4 (id=2549): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x10000, 0x105000, 0x8}) 64.183931ms ago: executing program 0 (id=2550): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4000000000004, 0x68, 0x0, 0x0, 0x19, 0x4, "faf98317e5b4140989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0091a7bdd8a0f350000000000000000000000000000000000000000000000000003", "32ffff26f7d31a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fc99a", "675237ff0700f1ff000000d81a8ca55a0f39c0180ec4dae4162e43ac61b7ad33", [0x10000000000002, 0xfffffffffffffffb]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 2 (id=2551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x2, 0x1}) kernel console output (not intermixed with test programs): 169][ T9619] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 439.590881][ T9619] veth0_vlan: left promiscuous mode [ 439.600423][ T9619] veth0_vlan: entered promiscuous mode [ 439.611472][ T9619] team0: Device veth0_vlan failed to register rx_handler [ 439.632288][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 439.632311][ T30] audit: type=1804 audit(1754619809.210:101): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.986" name="/newroot/198/file1" dev="fuse" ino=1 res=1 errno=0 [ 439.765901][ T980] sierra 5-1:0.153: device disconnected [ 440.048676][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.987'. [ 440.222888][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230079][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.260374][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.338377][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.448940][ T980] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 441.455919][ T9666] netlink: 112 bytes leftover after parsing attributes in process `syz.1.992'. [ 442.532570][ T9667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.378191][ T5931] usb 3-1: USB disconnect, device number 85 [ 443.731937][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.996'. [ 444.130018][ T9685] netlink: 'syz.2.998': attribute type 10 has an invalid length. [ 444.142935][ T9685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.998'. [ 444.349880][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.383038][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.569041][ T5954] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 444.591104][ T9693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.600655][ T9693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.616264][ T9693] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 444.624712][ T9693] veth0_vlan: left promiscuous mode [ 444.632173][ T9693] veth0_vlan: entered promiscuous mode [ 444.640437][ T9693] team0: Device veth0_vlan failed to register rx_handler [ 444.988968][ T5924] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 445.067584][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 445.128489][ T5954] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 445.166900][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.182949][ T5924] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.209861][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 445.216596][ T5954] usb 3-1: Product: syz [ 445.235317][ T5954] usb 3-1: Manufacturer: syz [ 445.240060][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 445.255783][ T5954] usb 3-1: SerialNumber: syz [ 445.268553][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.296629][ T5954] usb 3-1: config 0 descriptor?? [ 445.314689][ T5954] gspca_main: se401-2.14.0 probing 047d:5003 [ 445.338108][ T5924] usb 2-1: config 0 descriptor?? [ 445.567403][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.601924][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.713620][ T5954] gspca_se401: Bayer format not supported! [ 445.816998][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 445.839741][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 445.874018][ T5924] usb 2-1: USB disconnect, device number 65 [ 445.945135][ T5939] usb 3-1: USB disconnect, device number 86 [ 446.075283][ T9696] nvme_fabrics: missing parameter 'transport=%s' [ 446.111734][ T9696] nvme_fabrics: missing parameter 'nqn=%s' [ 446.978968][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 447.143837][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 447.155635][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 447.182867][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 447.192267][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.275026][ T9714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 447.302448][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.496279][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.615680][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.119762][ T5924] usb 2-1: USB disconnect, device number 66 [ 448.133500][ T30] audit: type=1326 audit(1754619817.590:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 448.296906][ T30] audit: type=1326 audit(1754619817.590:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 448.326492][ T30] audit: type=1326 audit(1754619817.640:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 448.374445][ T30] audit: type=1326 audit(1754619817.650:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 448.410659][ T9733] usb usb8: check_ctrlrecip: process 9733 (syz.0.1013) requesting ep 01 but needs 81 [ 448.468571][ T9733] usb usb8: usbfs: process 9733 (syz.0.1013) did not claim interface 0 before use [ 448.509404][ T9733] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 448.527734][ T30] audit: type=1326 audit(1754619817.650:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 448.571911][ T9733] fuse: Bad value for 'fd' [ 448.595371][ T30] audit: type=1326 audit(1754619817.650:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 448.738968][ T30] audit: type=1326 audit(1754619817.650:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 448.847622][ T30] audit: type=1326 audit(1754619817.650:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 449.306687][ T30] audit: type=1326 audit(1754619817.700:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 449.387819][ T30] audit: type=1326 audit(1754619817.700:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db478ebe9 code=0x7ffc0000 [ 449.598855][ T5931] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 449.914416][ T5931] usb 3-1: config 0 has no interfaces? [ 449.926134][ T5931] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 449.935827][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.954961][ T5931] usb 3-1: Product: syz [ 449.977460][ T5931] usb 3-1: Manufacturer: syz [ 449.995476][ T5931] usb 3-1: SerialNumber: syz [ 450.027927][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.033695][ T5931] usb 3-1: config 0 descriptor?? [ 450.052286][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.070246][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 450.287130][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.299854][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 450.307715][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.380972][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 450.416261][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.427875][ T9] usb 2-1: Product: syz [ 450.432890][ T9] usb 2-1: Manufacturer: syz [ 450.437550][ T9] usb 2-1: SerialNumber: syz [ 450.463494][ T9] usb 2-1: config 0 descriptor?? [ 450.472617][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 450.501075][ T9766] netlink: 'syz.0.1020': attribute type 10 has an invalid length. [ 450.532806][ T9766] veth0_vlan: left promiscuous mode [ 450.539974][ T9766] veth0_vlan: entered promiscuous mode [ 450.563776][ T9766] team0: Device veth0_vlan failed to register rx_handler [ 450.809010][ T5931] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 450.978882][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 450.997709][ T5931] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 451.016473][ T5931] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 451.035156][ T5931] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 451.046712][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 451.058203][ T5931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 451.069683][ T9] gspca_se401: Bayer format not supported! [ 451.080883][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 451.143354][ T5931] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 451.163292][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.184714][ T5931] usb 5-1: config 0 descriptor?? [ 451.285570][ T9] usb 2-1: USB disconnect, device number 67 [ 452.062182][ T44] usb 3-1: USB disconnect, device number 87 [ 453.129127][ T5924] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 453.269126][ T5924] usb 3-1: device descriptor read/64, error -71 [ 453.368870][ T44] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 453.609099][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 453.612558][ T44] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 453.636396][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.649718][ T5924] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 453.666493][ T44] usb 2-1: config 0 has no interface number 0 [ 453.689803][ T44] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 453.706575][ T44] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.733511][ T44] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 453.750633][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.767793][ T44] usb 2-1: Product: syz [ 453.776478][ T44] usb 2-1: Manufacturer: syz [ 453.785440][ T44] usb 2-1: SerialNumber: syz [ 453.802851][ T44] usb 2-1: config 0 descriptor?? [ 453.809134][ T5924] usb 3-1: device descriptor read/64, error -71 [ 453.959354][ T5924] usb usb3-port1: attempt power cycle [ 454.308940][ T5924] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 454.309408][ T5931] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 454.358281][ T5931] usb 5-1: USB disconnect, device number 79 [ 454.460162][ T5924] usb 3-1: device descriptor read/8, error -71 [ 454.468892][ T44] usb 2-1: USB disconnect, device number 68 [ 454.487556][ T5931] usblp0: removed [ 454.723804][ T5924] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 454.780418][ T5924] usb 3-1: device descriptor read/8, error -71 [ 455.270622][ T5924] usb usb3-port1: unable to enumerate USB device [ 455.398886][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 455.559074][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 455.687370][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.712896][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.910362][ T5924] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 456.078862][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 456.094123][ T5924] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 456.102494][ T5924] usb 2-1: config 0 has no interface number 0 [ 456.108701][ T5924] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 456.119832][ T5924] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 456.136009][ T5924] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 456.151434][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.160476][ T5924] usb 2-1: Product: syz [ 456.164676][ T5924] usb 2-1: Manufacturer: syz [ 456.169383][ T5924] usb 2-1: SerialNumber: syz [ 456.176859][ T5924] usb 2-1: config 0 descriptor?? [ 456.188635][ T5924] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 456.298928][ T44] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 456.395526][ T5924] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 456.411526][ T5924] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 456.472508][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.491476][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.512206][ T44] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 456.521532][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.534840][ T44] usb 3-1: config 0 descriptor?? [ 456.610404][ T980] usb 2-1: USB disconnect, device number 69 [ 456.955538][ T44] kye 0003:0458:501A.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 456.974374][ T44] kye 0003:0458:501A.000E: hidraw0: USB HID v0.04 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 456.985359][ T44] kye 0003:0458:501A.000E: tablet-enabling feature report not found [ 456.993930][ T44] kye 0003:0458:501A.000E: tablet enabling failed [ 457.192778][ T980] usb 3-1: USB disconnect, device number 92 [ 457.448986][ T5931] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 457.608960][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 457.617291][ T5931] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 457.626307][ T5931] usb 2-1: config 0 has no interface number 0 [ 457.632629][ T5931] usb 2-1: config 0 interface 12 has no altsetting 0 [ 457.643830][ T5931] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 457.654138][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.663635][ T5931] usb 2-1: Product: syz [ 457.667832][ T5931] usb 2-1: Manufacturer: syz [ 457.673011][ T5931] usb 2-1: SerialNumber: syz [ 457.681776][ T5931] usb 2-1: config 0 descriptor?? [ 457.899351][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 457.949335][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 457.978396][ T9] usb 5-1: can't read configurations, error -71 [ 458.045522][ T9826] netlink: 'syz.4.1042': attribute type 3 has an invalid length. [ 458.066811][ T9826] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1042'. [ 458.265850][ T44] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 458.332585][ T5931] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 458.359054][ T980] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 458.369120][ T5931] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 458.376466][ T5931] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 458.402299][ T5931] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 458.415753][ T5931] usb 2-1: USB disconnect, device number 70 [ 458.444693][ T44] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.457803][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.476018][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 458.491848][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.540263][ T980] usb 4-1: not running at top speed; connect to a high speed hub [ 458.557306][ T980] usb 4-1: config 1 has an invalid interface number: 252 but max is 0 [ 458.566659][ T980] usb 4-1: config 1 has no interface number 0 [ 458.573587][ T980] usb 4-1: config 1 interface 252 has no altsetting 0 [ 458.584107][ T980] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=d4.bd [ 458.610803][ T44] usb 3-1: config 0 descriptor?? [ 458.622626][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.634310][ T980] usb 4-1: Product: syz [ 458.642276][ T980] usb 4-1: Manufacturer: syz [ 458.651490][ T980] usb 4-1: SerialNumber: syz [ 458.828367][ T9823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.859454][ T9823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.986029][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 459.008501][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 459.028123][ T980] snd-usb-audio 4-1:1.252: probe with driver snd-usb-audio failed with error -71 [ 459.053673][ T44] usb 3-1: USB disconnect, device number 93 [ 459.058978][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 459.079014][ T980] usb 4-1: USB disconnect, device number 69 [ 459.737856][ T9850] netlink: 'syz.1.1046': attribute type 1 has an invalid length. [ 459.803390][ T9850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.811466][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 459.849820][ T9853] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1046'. [ 459.957253][ T9850] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 460.387864][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.446728][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.689716][ T9873] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1056'. [ 461.079623][ T9881] FAULT_INJECTION: forcing a failure. [ 461.079623][ T9881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.141184][ T9881] CPU: 0 UID: 0 PID: 9881 Comm: syz.2.1060 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 461.141208][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.141218][ T9881] Call Trace: [ 461.141225][ T9881] [ 461.141232][ T9881] dump_stack_lvl+0x189/0x250 [ 461.141256][ T9881] ? __pfx____ratelimit+0x10/0x10 [ 461.141278][ T9881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.141300][ T9881] ? __pfx__printk+0x10/0x10 [ 461.141332][ T9881] should_fail_ex+0x414/0x560 [ 461.141376][ T9881] _copy_to_user+0x31/0xb0 [ 461.141397][ T9881] __se_sys_semctl+0x255/0x3a0 [ 461.141415][ T9881] ? __pfx___se_sys_semctl+0x10/0x10 [ 461.141457][ T9881] ? __pfx_ksys_write+0x10/0x10 [ 461.141477][ T9881] ? rcu_is_watching+0x15/0xb0 [ 461.141499][ T9881] ? do_syscall_64+0xbe/0x3b0 [ 461.141525][ T9881] do_syscall_64+0xfa/0x3b0 [ 461.141545][ T9881] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.141565][ T9881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.141581][ T9881] ? clear_bhb_loop+0x60/0xb0 [ 461.141600][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.141616][ T9881] RIP: 0033:0x7f046d38ebe9 [ 461.141630][ T9881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.141644][ T9881] RSP: 002b:00007f046e19f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 461.141660][ T9881] RAX: ffffffffffffffda RBX: 00007f046d5b5fa0 RCX: 00007f046d38ebe9 [ 461.141671][ T9881] RDX: 0000000000000014 RSI: 0000000000000001 RDI: 0000000000000002 [ 461.141680][ T9881] RBP: 00007f046e19f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.141689][ T9881] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 461.141699][ T9881] R13: 00007f046d5b6038 R14: 00007f046d5b5fa0 R15: 00007f046d6dfa28 [ 461.141722][ T9881] [ 461.142448][ T9879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1059'. [ 462.140012][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.169465][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.822548][ T9904] kvm: emulating exchange as write [ 463.384116][ T9913] binder_alloc: 9912: pid 9912 spamming oneway? 1 buffers allocated for a total size of 4096 [ 463.410465][ T9913] binder_alloc: 9912: pid 9912 spamming oneway? 2 buffers allocated for a total size of 5120 [ 463.599562][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 463.599599][ T9924] netlink: 'syz.4.1075': attribute type 11 has an invalid length. [ 463.640110][ T1112] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.640459][ T1112] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.640501][ T1112] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.640540][ T1112] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.643407][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 463.643440][ T9924] netlink: 'syz.4.1075': attribute type 11 has an invalid length. [ 484.623300][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 484.648169][ T980] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 484.808814][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 484.833174][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.948587][ T980] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 484.962053][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.977992][ T980] usb 3-1: Product: syz [ 484.988141][ T980] usb 3-1: Manufacturer: syz [ 485.003097][ T980] usb 3-1: SerialNumber: syz [ 485.073378][ T980] usb 3-1: config 0 descriptor?? [ 485.086092][ T980] hub 3-1:0.0: bad descriptor, ignoring hub [ 485.096168][ T980] hub 3-1:0.0: probe with driver hub failed with error -5 [ 486.929244][ T980] usb 3-1: USB disconnect, device number 94 [ 497.206204][ T9958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 497.212771][ T9958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 497.588830][ T44] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 497.738993][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 499.652875][ T9986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.937052][ T980] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 500.192506][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.238392][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 500.254798][ T44] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 500.271853][ T44] usb 2-1: can't read configurations, error -71 [ 500.282897][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.312046][ T980] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.328636][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.361616][ T980] usb 5-1: SerialNumber: syz [ 500.599721][ T980] usb 5-1: 0:2 : does not exist [ 500.615333][ T980] usb 5-1: unit 4 not found! [ 500.756479][ T980] usb 5-1: USB disconnect, device number 82 [ 500.904779][ T9988] udevd[9988]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.438950][ T980] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 501.662030][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.668477][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.779471][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 501.787616][T10003] netlink: 'syz.3.1095': attribute type 3 has an invalid length. [ 501.834520][T10003] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1095'. [ 501.843665][ T980] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 501.873048][ T980] usb 3-1: can't read configurations, error -71 [ 502.803631][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1096'. [ 502.819048][ T44] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 503.113345][T10014] binder: 10013:10014 ioctl c02c564a 200000000040 returned -22 [ 503.140900][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.159928][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.167518][T10014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.193707][ T44] usb 4-1: Product: syz [ 503.217537][ T44] usb 4-1: Manufacturer: syz [ 503.227493][ T44] usb 4-1: SerialNumber: syz [ 503.255403][ T44] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 503.286834][ T5939] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 503.519727][ T44] usb 4-1: USB disconnect, device number 70 [ 503.718994][ T980] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 503.904496][ T980] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.916990][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.925738][ T980] usb 3-1: Product: syz [ 503.935074][ T980] usb 3-1: Manufacturer: syz [ 503.940276][ T980] usb 3-1: SerialNumber: syz [ 504.116657][ T980] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 504.139523][ T5931] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.338858][ T5954] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 504.375452][ T980] usb 3-1: USB disconnect, device number 97 [ 504.388879][ T5939] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 504.405166][ T5939] ath9k_htc: Failed to initialize the device [ 504.439459][ T44] usb 4-1: ath9k_htc: USB layer deinitialized [ 504.519786][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 504.534007][ T5954] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 504.543925][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.569648][ T5954] usb 5-1: Product: syz [ 504.577413][ T5954] usb 5-1: Manufacturer: syz [ 504.582614][ T5954] usb 5-1: SerialNumber: syz [ 504.616485][ T5954] r8152-cfgselector 5-1: Unknown version 0x0000 [ 504.624897][ T5954] r8152-cfgselector 5-1: config 0 descriptor?? [ 504.739083][ T44] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 504.904960][ T5957] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 505.091386][ T5954] r8152-cfgselector 5-1: Unknown version 0x0000 [ 505.103338][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 505.121444][ T5954] r8152-cfgselector 5-1: bad CDC descriptors [ 505.145009][ T5957] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 505.164835][ T5954] r8152-cfgselector 5-1: USB disconnect, device number 83 [ 505.175321][ T5957] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 505.188894][ T5931] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 505.249351][ T5931] ath9k_htc: Failed to initialize the device [ 505.268980][ T5957] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.293427][ T980] usb 3-1: ath9k_htc: USB layer deinitialized [ 505.303980][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.357688][ T5957] usb 2-1: Product: syz [ 505.385936][ T5957] usb 2-1: Manufacturer: syz [ 505.401881][ T5957] usb 2-1: SerialNumber: syz [ 505.464326][ T5957] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 505.477779][ T5957] cdc_ncm 2-1:1.0: bind() failure [ 505.516683][ T5957] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 505.536865][ T5957] cdc_ncm 2-1:1.1: bind() failure [ 505.671050][ T5957] usb 2-1: USB disconnect, device number 73 [ 505.828821][ T44] usb 4-1: device descriptor read/64, error -71 [ 506.139899][ T980] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 506.168941][ T44] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 506.385787][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 506.391540][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.416397][ T980] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 507.010302][ T980] usb 3-1: can't read configurations, error -71 [ 507.026152][ T44] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 507.057759][ T44] usb 4-1: config 0 has no interface number 0 [ 507.091771][T10046] pimreg: entered allmulticast mode [ 507.157234][ T44] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.171658][ T44] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 507.185573][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.286643][T10046] dvmrp0: left allmulticast mode [ 507.292183][T10046] pimreg: left allmulticast mode [ 507.371745][ T44] usb 4-1: Product: syz [ 507.376330][ T44] usb 4-1: Manufacturer: syz [ 507.441850][T10050] syzkaller0: entered promiscuous mode [ 507.447720][T10050] syzkaller0: entered allmulticast mode [ 507.462489][ T44] usb 4-1: SerialNumber: syz [ 507.485281][ T44] usb 4-1: config 0 descriptor?? [ 507.499299][ T44] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 507.516044][ T44] em28xx 4-1:0.132: Video interface 132 found: [ 507.903754][ T44] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 508.068823][ T980] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 508.221231][ T980] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 508.228956][ T5924] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 508.251702][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.262409][ T980] usb 3-1: config 0 has no interface number 0 [ 508.274965][ T980] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 508.288031][ T980] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.306616][ T980] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 508.326751][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.335075][ T980] usb 3-1: Product: syz [ 508.340829][ T980] usb 3-1: Manufacturer: syz [ 508.348947][ T980] usb 3-1: SerialNumber: syz [ 508.374404][ T980] usb 3-1: config 0 descriptor?? [ 508.433998][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 508.448484][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 508.465416][ T5924] usb 5-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 508.488504][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.497242][ T5924] usb 5-1: Product: syz [ 508.506516][ T5924] usb 5-1: Manufacturer: syz [ 508.513560][ T5924] usb 5-1: SerialNumber: syz [ 508.520190][T10036] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1105'. [ 508.533320][T10036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.544584][T10036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.582812][ T5924] usb 5-1: config 0 descriptor?? [ 508.598519][T10036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.642231][T10036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.662394][ T44] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 508.681060][ T44] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 508.703451][ T44] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 508.799602][ T44] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 508.817566][ T44] em28xx 4-1:0.132: analog set to bulk mode. [ 508.827599][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 508.903838][ T44] usb 4-1: USB disconnect, device number 72 [ 508.932737][ T5957] usb 3-1: USB disconnect, device number 99 [ 508.947941][ T44] em28xx 4-1:0.132: Disconnecting em28xx [ 509.524851][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 509.547158][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 509.557268][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 509.910988][ T24] usb 4-1: Decoder not found [ 509.988789][ T24] em28xx 4-1:0.132: failed to create media graph [ 510.066567][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 510.150617][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 510.258050][ T44] em28xx 4-1:0.132: Closing input extension [ 510.383912][ T44] em28xx 4-1:0.132: Freeing device [ 511.008452][T10087] kvm: pic: non byte write [ 511.350260][ T44] usb 5-1: USB disconnect, device number 84 [ 511.528970][ T5924] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 511.853207][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 511.870579][ T5924] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 511.899230][ T5924] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 512.090371][ T5924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.120897][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.544463][ T5924] usb 2-1: Product: syz [ 512.573269][ T5924] usb 2-1: Manufacturer: syz [ 512.587836][ T5924] usb 2-1: SerialNumber: syz [ 512.696334][ T5924] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 512.744965][ T5924] cdc_ncm 2-1:1.0: bind() failure [ 512.861188][ T5924] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 512.933064][ T5924] cdc_ncm 2-1:1.1: bind() failure [ 513.055215][T10113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.084561][ T5924] usb 2-1: USB disconnect, device number 74 [ 513.921819][ T5924] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 514.129652][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 514.219126][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 514.308415][ T5924] usb 3-1: config 9 has an invalid interface number: 3 but max is 2 [ 514.333413][ T5924] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 514.508364][ T5924] usb 3-1: config 9 has an invalid interface number: 150 but max is 2 [ 514.597051][ T5924] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 514.660901][ T5924] usb 3-1: config 9 has no interface number 1 [ 514.667139][ T5924] usb 3-1: config 9 has no interface number 2 [ 514.716873][ T120] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 514.735270][ T5924] usb 3-1: config 9 interface 150 altsetting 253 has a duplicate endpoint with address 0xD, skipping [ 514.893310][ T5924] usb 3-1: config 9 interface 150 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 514.949221][ T24] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 514.968974][ T9] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 515.003582][ T120] usb 5-1: config index 0 descriptor too short (expected 65426, got 146) [ 515.018107][ T5924] usb 3-1: config 9 interface 150 has no altsetting 0 [ 515.025278][ T120] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 515.037784][ T120] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 515.049904][ T120] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 515.062190][ T5924] usb 3-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=b2.3d [ 515.071797][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.080922][ T5924] usb 3-1: Product: syz [ 515.085169][ T5924] usb 3-1: Manufacturer: syz [ 515.090889][ T120] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 515.102445][ T5924] usb 3-1: SerialNumber: syz [ 515.107177][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 515.150230][ T120] usb 5-1: SerialNumber: syz [ 515.161112][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 515.162837][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 515.198176][T10133] vlan5: entered promiscuous mode [ 515.232807][T10133] dummy0: entered promiscuous mode [ 515.294474][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 515.327389][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 515.350479][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 515.351209][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 515.439098][ T9] usb 2-1: can't read configurations, error -71 [ 515.449252][ T24] usb 4-1: can't read configurations, error -71 [ 515.500224][T10144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.998311][T10144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.629370][ T5924] usb 3-1: USB disconnect, device number 100 [ 517.926537][T10169] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 518.096206][ T120] usb 5-1: USB disconnect, device number 85 [ 518.179038][ T9] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 518.187963][T10173] netlink: 'syz.2.1141': attribute type 3 has an invalid length. [ 518.247655][T10173] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1141'. [ 518.383580][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 518.404526][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 518.438148][ T9] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 518.469054][ T9] usb 4-1: config 2 has an invalid descriptor of length 110, skipping remainder of the config [ 518.498982][ T9] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 518.524160][ T9] usb 4-1: config 2 has no interface number 0 [ 518.538438][ T9] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 518.579604][ T9] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 12150, setting to 64 [ 518.609928][ T9] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 518.625266][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.649231][ T120] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 518.667921][ T9] usb 4-1: Product: syz [ 518.687068][ T9] usb 4-1: Manufacturer: syz [ 518.702576][ T9] usb 4-1: SerialNumber: syz [ 518.726426][T10164] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 518.821000][ T120] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.863729][ T120] usb 5-1: config 0 interface 0 has no altsetting 0 [ 518.896811][ T120] usb 5-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 518.932706][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.967242][ T120] usb 5-1: config 0 descriptor?? [ 519.279841][T10182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.295869][T10182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.458194][ T120] usbhid 5-1:0.0: can't add hid device: -71 [ 519.464405][ T120] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 519.478532][ T120] usb 5-1: USB disconnect, device number 86 [ 519.578976][ T5957] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 520.052611][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 520.068406][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 520.090265][ T5957] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 520.108668][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.355324][ T5957] usb 2-1: config 0 descriptor?? [ 520.374152][T10192] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 520.410060][ T9] usb 4-1: USB disconnect, device number 75 [ 520.648206][T10192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.802201][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'. [ 521.146686][T10192] input: syz0 as /devices/virtual/input/input19 [ 521.154226][T10192] input: failed to attach handler leds to device input19, error: -6 [ 521.204317][ T5957] logitech-djreceiver 0003:046D:C71B.000F: unbalanced delimiter at end of report description [ 521.253481][ T5957] logitech-djreceiver 0003:046D:C71B.000F: logi_dj_probe: parse failed [ 521.287381][ T5957] logitech-djreceiver 0003:046D:C71B.000F: probe with driver logitech-djreceiver failed with error -22 [ 521.987392][ T5954] usb 2-1: USB disconnect, device number 77 [ 521.998885][ T980] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 522.214321][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 522.244044][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 522.471488][ T980] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 522.501141][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.554158][ T980] usb 5-1: Product: syz [ 522.569262][T10232] bond0: (slave team0): Releasing backup interface [ 522.589183][ T980] usb 5-1: Manufacturer: syz [ 522.593865][ T980] usb 5-1: SerialNumber: syz [ 522.620646][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.630792][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.640599][ T980] usb 5-1: config 0 descriptor?? [ 523.042963][T10232] bond0: (slave netdevsim0): Releasing backup interface [ 523.130194][ T5957] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 523.201605][ T980] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 523.351176][ T5957] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.398845][ T5957] usb 3-1: config 0 interface 0 has no altsetting 0 [ 523.410308][ T980] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 523.431445][ T5957] usb 3-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 523.443148][ T980] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 523.456262][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.493306][ T980] usb 5-1: USB disconnect, device number 87 [ 523.504525][ T5957] usb 3-1: config 0 descriptor?? [ 523.722338][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.736163][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.757992][ T5957] usbhid 3-1:0.0: can't add hid device: -71 [ 523.783334][ T5957] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 523.815636][ T5957] usb 3-1: USB disconnect, device number 101 [ 524.955894][T10277] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 524.987508][T10277] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 525.023681][T10277] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 525.051389][T10277] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 525.071194][T10277] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 525.092266][T10277] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 525.135572][T10277] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 525.161069][T10277] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 525.205767][T10277] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 525.224409][T10277] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 525.489187][ T5957] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 525.690232][ T5957] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 525.730936][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.760615][ T5957] usb 2-1: config 0 has no interface number 0 [ 525.787210][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 525.787229][ T30] audit: type=1326 audit(1754619895.380:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 525.818920][ T5957] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 525.866222][ T5957] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.928293][ T30] audit: type=1326 audit(1754619895.380:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 525.960396][ T5957] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 525.978790][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.994338][ T5957] usb 2-1: Product: syz [ 525.998796][ T5957] usb 2-1: Manufacturer: syz [ 526.003425][ T5957] usb 2-1: SerialNumber: syz [ 526.015681][ T30] audit: type=1326 audit(1754619895.430:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 526.070824][ T5957] usb 2-1: config 0 descriptor?? [ 526.148068][ T30] audit: type=1326 audit(1754619895.430:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 526.236853][ T30] audit: type=1326 audit(1754619895.430:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 526.529456][ T5957] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 526.579648][ T5957] usb 2-1: USB disconnect, device number 78 [ 526.858600][T10306] kvm: pic: level sensitive irq not supported [ 526.865751][T10306] kvm: pic: level sensitive irq not supported [ 526.887305][T10306] kvm: pic: level sensitive irq not supported [ 526.903869][T10306] kvm: pic: level sensitive irq not supported [ 527.298994][ T5957] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 527.512535][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 527.541490][ T5957] usb 5-1: not running at top speed; connect to a high speed hub [ 527.563060][ T5957] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 527.608102][ T5957] usb 5-1: config 1 has no interface number 0 [ 527.622330][ T5957] usb 5-1: config 1 interface 138 has no altsetting 0 [ 527.644765][ T5957] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 527.662092][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.680658][ T5957] usb 5-1: Product: syz [ 527.686392][ T5957] usb 5-1: Manufacturer: syz [ 527.702827][ T5957] usb 5-1: SerialNumber: syz [ 527.894875][T10321] netlink: 'syz.2.1194': attribute type 11 has an invalid length. [ 527.978976][T10321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1194'. [ 528.051087][ T5957] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.081509][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.111458][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.139657][ T5957] usb 5-1: USB disconnect, device number 88 [ 528.232953][ T9969] udevd[9969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.307784][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 528.492731][T10332] tipc: Enabled bearer , priority 0 [ 528.678095][T10314] tipc: Disabling bearer [ 529.013959][ T30] audit: type=1326 audit(1754619898.600:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.4.1203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bd018ebe9 code=0x0 [ 530.474541][T10372] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1215'. [ 530.514763][T10372] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 530.679486][T10379] bond0: entered promiscuous mode [ 530.685554][T10379] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 531.205098][T10398] tipc: Enabled bearer , priority 0 [ 531.222998][T10399] tipc: Enabled bearer , priority 0 [ 531.252352][T10398] syzkaller0: entered promiscuous mode [ 531.262532][T10398] syzkaller0: entered allmulticast mode [ 531.281398][T10399] syzkaller0: entered promiscuous mode [ 531.297406][T10399] syzkaller0: entered allmulticast mode [ 531.360610][T10399] tipc: Resetting bearer [ 531.384100][T10398] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 531.427357][T10397] tipc: Resetting bearer [ 531.464758][T10397] tipc: Disabling bearer [ 531.496723][T10398] tipc: Resetting bearer [ 531.568906][T10410] tipc: Enabling of bearer rejected, failed to enable media [ 531.579867][T10406] syzkaller0: entered promiscuous mode [ 531.596601][T10406] syzkaller0: entered allmulticast mode [ 531.637361][T10396] tipc: Resetting bearer [ 531.677091][T10396] tipc: Disabling bearer [ 532.235550][T10442] netlink: 'syz.4.1246': attribute type 2 has an invalid length. [ 532.271452][T10442] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1246'. [ 532.521998][T10454] netlink: 'syz.1.1250': attribute type 5 has an invalid length. [ 534.100731][T10519] bridge0: port 1(syz_tun) entered blocking state [ 534.115085][T10519] bridge0: port 1(syz_tun) entered disabled state [ 534.123200][T10519] syz_tun: entered allmulticast mode [ 534.138499][T10519] syz_tun: left allmulticast mode [ 534.159770][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 534.631769][T10538] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1285'. [ 534.814868][T10544] raw_sendmsg: syz.1.1288 forgot to set AF_INET. Fix it! [ 536.057468][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 536.207978][T10593] netlink: 'syz.2.1310': attribute type 29 has an invalid length. [ 536.217898][T10595] netlink: 'syz.2.1310': attribute type 29 has an invalid length. [ 536.231806][T10593] netlink: 'syz.2.1310': attribute type 29 has an invalid length. [ 536.380903][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1311'. [ 536.390647][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 536.519210][T10601] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 536.592576][T10608] bridge0: port 2(syz_tun) entered blocking state [ 536.610442][T10608] bridge0: port 2(syz_tun) entered disabled state [ 536.617142][T10608] syz_tun: entered allmulticast mode [ 536.656385][T10608] syz_tun: left allmulticast mode [ 537.154146][T10630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1325'. [ 537.202341][T10628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1325'. [ 537.232847][T10634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1325'. [ 537.598810][ T5954] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 537.774234][ T5954] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 537.799263][ T5954] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 537.831593][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 537.852070][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.868471][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 537.910040][ T5954] usb 3-1: Product: syz [ 537.915489][ T5954] usb 3-1: Manufacturer: syz [ 537.926203][ T5954] usb 3-1: SerialNumber: syz [ 537.942525][ T5954] usb 3-1: config 0 descriptor?? [ 537.960579][ T5954] hub 3-1:0.0: bad descriptor, ignoring hub [ 537.976149][ T5954] hub 3-1:0.0: probe with driver hub failed with error -5 [ 537.996650][ T5954] usb 3-1: selecting invalid altsetting 0 [ 538.348301][ T30] audit: type=1804 audit(1754619907.950:122): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1347" name="/newroot/263/file1" dev="tmpfs" ino=1380 res=1 errno=0 [ 538.382443][ T5954] usb 3-1: USB disconnect, device number 102 [ 538.591137][T10686] netlink: 'syz.4.1350': attribute type 10 has an invalid length. [ 538.611260][T10686] bond0: (slave wlan1): Opening slave failed [ 538.696612][T10694] netlink: 183676 bytes leftover after parsing attributes in process `syz.3.1353'. [ 538.743978][T10694] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 538.788333][T10694] openvswitch: netlink: Key type 31 is not supported [ 539.193419][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 539.255092][T10708] syz_tun (unregistering): left promiscuous mode [ 539.577950][T10718] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1362'. [ 539.679545][ T5924] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 539.857831][T10729] syzkaller1: entered promiscuous mode [ 539.864022][T10729] syzkaller1: entered allmulticast mode [ 539.871209][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.898296][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.908624][ T5924] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 539.919117][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.931085][ T5924] usb 3-1: config 0 descriptor?? [ 540.028912][ T980] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 540.199051][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 540.200832][T10735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1370'. [ 540.217380][ T980] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 540.228034][ T980] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 540.262928][ T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 540.291615][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 540.311488][ T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 540.323339][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 540.348672][ T980] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 540.366294][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.401735][ T980] usb 5-1: config 0 descriptor?? [ 540.548618][ T5924] usb 3-1: string descriptor 0 read error: -22 [ 540.634908][ T980] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 540.660084][ T980] usb 5-1: USB disconnect, device number 89 [ 540.683401][ T980] usblp0: removed [ 540.741296][T10742] veth0_vlan: left promiscuous mode [ 540.755839][ T5924] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input21 [ 540.768400][T10742] veth0_vlan: entered promiscuous mode [ 540.788638][ T1112] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.799035][ T1112] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.833496][ T1112] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.873289][ T1112] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.901014][ T5924] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input22 [ 540.923396][ T1112] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.944508][ T1112] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.973233][ T5924] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input23 [ 541.006020][ T1112] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.016220][ T1112] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.105366][ T5924] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0010/input/input24 [ 541.169768][ T980] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 541.214630][ T5924] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 541.283627][ T5924] usb 3-1: USB disconnect, device number 103 [ 541.338172][T10747] fido_id[10747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 541.360157][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 541.372166][ T980] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 541.384380][ T980] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 541.404934][ T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 541.420362][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 541.439624][ T980] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 541.457631][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 541.480840][ T980] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 541.490690][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.560011][ T980] usb 5-1: config 0 descriptor?? [ 541.800181][ T980] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 542.004253][ T980] usb 5-1: USB disconnect, device number 90 [ 542.027095][ T980] usblp0: removed [ 542.626320][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.645203][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.764866][T10800] syzkaller1: entered promiscuous mode [ 542.770951][T10800] syzkaller1: entered allmulticast mode [ 542.799180][ T5924] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 542.839642][T10802] openvswitch: netlink: Key 25 has unexpected len 4 expected 16 [ 542.971497][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 542.993231][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.019007][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.033813][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.071213][ T5924] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 543.089580][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.106942][ T5924] usb 3-1: config 0 descriptor?? [ 543.371088][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 543.558341][ T5924] HID 045e:07da: Invalid code 65791 type 1 [ 543.594823][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0011/input/input25 [ 543.664303][ T5924] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 543.768906][ T5957] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 543.802457][ T980] usb 3-1: USB disconnect, device number 104 [ 543.894161][T10832] fido_id[10832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 543.972031][ T5957] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.989170][ T5957] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.019416][ T5957] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.041825][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.118005][T10843] tipc: Enabling of bearer rejected, failed to enable media [ 544.219163][T10847] netlink: 'syz.3.1420': attribute type 3 has an invalid length. [ 544.238180][T10847] netlink: 'syz.3.1420': attribute type 3 has an invalid length. [ 544.248534][T10847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1420'. [ 544.298377][ T5957] usb 5-1: usb_control_msg returned -32 [ 544.309143][ T5957] usbtmc 5-1:16.0: can't read capabilities [ 544.640932][T10858] ucma_write: process 837 (syz.2.1424) changed security contexts after opening file descriptor, this is not allowed. [ 545.166307][ T5957] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 545.318879][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 545.326815][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.348162][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 545.358299][ T5957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 545.374110][ T5957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26473, setting to 1024 [ 545.391654][ T5957] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 545.402868][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.422558][T10872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 545.436436][ T5957] hub 3-1:1.0: bad descriptor, ignoring hub [ 545.446371][ T5957] hub 3-1:1.0: probe with driver hub failed with error -5 [ 545.457353][ T5957] cdc_wdm 3-1:1.0: skipping garbage [ 545.465987][ T5957] cdc_wdm 3-1:1.0: skipping garbage [ 545.476576][ T5957] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 545.498129][ T5957] cdc_wdm 3-1:1.0: Unknown control protocol [ 545.702981][T10889] tipc: Cannot configure node identity twice [ 545.760927][ T5957] usb 3-1: USB disconnect, device number 105 [ 545.974929][T10893] syzkaller1: entered promiscuous mode [ 545.981651][T10893] syzkaller1: entered allmulticast mode [ 546.031382][T10899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.050690][T10900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1443'. [ 546.083783][T10897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1443'. [ 546.222738][T10904] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1446'. [ 546.557684][ T9] usb 5-1: USB disconnect, device number 91 [ 546.596109][T10922] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 546.713352][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.719020][ T5957] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 546.779659][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.921065][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.941157][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.962085][ T5957] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 546.972132][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.975035][T10935] syzkaller0: entered promiscuous mode [ 546.990099][ T5957] usb 3-1: config 0 descriptor?? [ 546.990787][T10935] syzkaller0: entered allmulticast mode [ 547.421506][ T5957] bigben 0003:146B:0902.0012: unexpected rdesc, please submit for review [ 547.427201][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.437258][ T5957] bigben 0003:146B:0902.0012: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 547.457183][ T5957] bigben 0003:146B:0902.0012: missing HID_OUTPUT_REPORT 0 [ 547.464832][ T5957] bigben 0003:146B:0902.0012: no output report found [ 547.481634][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.625532][ T120] usb 3-1: USB disconnect, device number 106 [ 548.055449][ T1342] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.066937][ T1342] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.087355][ T1342] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.108128][ T1342] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.129767][ T1342] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.149908][ T1342] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.174908][ T1342] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.210977][ T1342] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.562399][T10978] syzkaller1: entered promiscuous mode [ 548.578533][T10978] syzkaller1: entered allmulticast mode [ 548.673156][T10984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.799312][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 548.970866][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.013716][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.055750][ T9] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice=ff.fc [ 549.075176][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 549.100631][ T9] usb 5-1: Product: syz [ 549.104841][ T9] usb 5-1: Manufacturer: syz [ 549.124635][ T9] usb 5-1: config 0 descriptor?? [ 549.428921][ T120] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 549.538952][ T980] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 549.554713][ T9] holtek 0003:1241:5015.0013: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 549.565510][ T9] holtek 0003:1241:5015.0013: no inputs found [ 549.581980][ T120] usb 3-1: Using ep0 maxpacket: 8 [ 549.597942][ T120] usb 3-1: config 0 has no interfaces? [ 549.606226][ T120] usb 3-1: config 0 has no interfaces? [ 549.617707][ T120] usb 3-1: config 0 has no interfaces? [ 549.627280][ T120] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 549.641197][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.651482][ T120] usb 3-1: Product: syz [ 549.655786][ T120] usb 3-1: Manufacturer: syz [ 549.667220][ T120] usb 3-1: SerialNumber: syz [ 549.680096][ T120] usb 3-1: config 0 descriptor?? [ 549.689005][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 549.705841][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.725269][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.736821][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 549.748925][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 549.757458][ T120] usb 5-1: USB disconnect, device number 92 [ 549.760081][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.779435][ T980] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 549.788900][ T980] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 549.796991][ T980] usb 2-1: Manufacturer: syz [ 549.829063][ T980] usb 2-1: config 0 descriptor?? [ 549.898610][ T5924] usb 3-1: USB disconnect, device number 107 [ 550.073239][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.096258][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.198788][ T980] rc_core: IR keymap rc-hauppauge not found [ 550.204863][ T980] Registered IR keymap rc-empty [ 550.210057][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.229023][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.250413][ T980] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 550.285499][ T980] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 550.318653][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.392851][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.429160][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.451089][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 550.459123][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.490206][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.519239][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.560349][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.588960][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.622289][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.658968][ T980] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 550.699558][ T980] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 550.723667][ T980] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 550.797011][ T980] usb 2-1: USB disconnect, device number 79 [ 551.398617][T11063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 551.600272][T11071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1516'. [ 551.641488][ T1342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 551.664265][ T1342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 551.687421][ T1342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 551.717093][ T1342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 552.045155][T11091] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 552.199295][ T5924] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 552.273239][T11101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.297415][T11101] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 552.307714][T11101] tipc: Enabled bearer , priority 10 [ 552.359503][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 552.367441][ T5924] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.376489][ T5924] usb 4-1: config 0 has no interface number 0 [ 552.386973][ T5924] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 170, changing to 11 [ 552.398603][ T5924] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17412, setting to 1024 [ 552.411167][ T5924] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 552.421141][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.435720][ T5924] usb 4-1: config 0 descriptor?? [ 552.447139][T11087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 552.467090][ T5924] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 552.715762][ T5954] usb 4-1: USB disconnect, device number 76 [ 553.272465][T11128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1540'. [ 553.284665][T11126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1540'. [ 554.194656][T11138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1545'. [ 554.829293][ T6124] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.846954][ T6124] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 554.860480][ T6124] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.873101][ T6124] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 554.946481][ T6124] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.956538][ T6124] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 554.967024][ T6124] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.977153][ T6124] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.241554][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1554'. [ 555.306494][T11158] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1554'. [ 555.397073][T11170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.413180][T11170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.775911][T11211] netlink: 'syz.2.1569': attribute type 10 has an invalid length. [ 557.794141][T11211] batman_adv: batadv0: Adding interface: team0 [ 557.815455][T11211] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.898870][T11211] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 557.921936][T11214] netlink: 'syz.2.1569': attribute type 10 has an invalid length. [ 557.930369][T11214] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1569'. [ 557.942735][T11214] team0: entered promiscuous mode [ 557.961200][T11214] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.969158][T11214] batman_adv: batadv0: Interface activated: team0 [ 557.975723][T11214] batman_adv: batadv0: Interface deactivated: team0 [ 557.982471][T11214] batman_adv: batadv0: Removing interface: team0 [ 558.215087][T11214] bridge0: port 2(team0) entered blocking state [ 558.246931][T11214] bridge0: port 2(team0) entered disabled state [ 558.266178][T11214] team0: entered allmulticast mode [ 559.403320][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.465878][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.521962][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.586679][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.716975][T11246] tipc: Enabled bearer , priority 0 [ 559.727242][T11246] syzkaller0: entered promiscuous mode [ 559.733091][T11246] syzkaller0: entered allmulticast mode [ 559.794643][T11246] tipc: Resetting bearer [ 559.869198][T11245] tipc: Resetting bearer [ 559.901094][T11245] tipc: Disabling bearer [ 560.568853][ T5924] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 560.739430][ T5924] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 560.775146][ T5924] usb 2-1: config 0 has no interface number 0 [ 560.786918][ T5924] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 560.828329][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.868423][ T5924] usb 2-1: config 0 descriptor?? [ 560.908499][ T5924] gspca_main: spca561-2.14.0 probing abcd:cdee [ 561.140055][T11253] batman_adv: batadv0: Adding interface: vxlan0 [ 561.146404][T11253] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.244287][T11253] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 561.321679][ T5924] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 561.346921][ T5924] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.381351][ T5924] usb 2-1: MIDIStreaming interface descriptor not found [ 561.513348][ T5924] usb 2-1: USB disconnect, device number 80 [ 561.669575][T11295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1606'. [ 562.467659][T11306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1607'. [ 562.479041][T11306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1607'. [ 562.519884][T11306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1607'. [ 562.849483][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.879521][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.928645][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.964561][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.102097][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.108517][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.266157][ T5924] raw-gadget.2 gadget.0: failed to queue reset event [ 564.359953][ T5924] raw-gadget.2 gadget.0: failed to queue resume event [ 564.449228][ T5924] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 564.468093][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 564.477537][ T5924] raw-gadget.2 gadget.0: failed to queue reset event [ 564.558828][ T5924] raw-gadget.2 gadget.0: failed to queue resume event [ 564.630364][ T5924] usb 1-1: device descriptor read/64, error -32 [ 564.749181][ T5924] raw-gadget.2 gadget.0: failed to queue suspend event [ 564.768309][ T5924] raw-gadget.2 gadget.0: failed to queue reset event [ 564.818919][ T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 564.868873][ T5924] raw-gadget.2 gadget.0: failed to queue resume event [ 564.969294][ T5924] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 564.990861][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 564.998136][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 565.011718][ T5924] raw-gadget.2 gadget.0: failed to queue reset event [ 565.012066][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 565.062749][ T9] usb 2-1: config 0 has no interface number 0 [ 565.081554][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 170, changing to 11 [ 565.113806][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17412, setting to 1024 [ 565.139976][ T5924] raw-gadget.2 gadget.0: failed to queue resume event [ 565.158332][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 565.203743][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.233738][ T9] usb 2-1: config 0 descriptor?? [ 565.256927][T11329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.269369][ T5924] usb 1-1: device descriptor read/64, error -32 [ 565.291806][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 565.398856][ T5924] raw-gadget.2 gadget.0: failed to queue suspend event [ 565.424582][ T5924] usb usb1-port1: attempt power cycle [ 565.440832][ T5924] raw-gadget.2 gadget.0: failed to queue disconnect event [ 565.469860][ T5924] raw-gadget.2 gadget.0: failed to queue reset event [ 565.472323][ T9] usb 2-1: USB disconnect, device number 81 [ 565.559366][ T5924] raw-gadget.2 gadget.0: failed to queue resume event [ 565.578429][ T5924] raw-gadget.2 gadget.0: failed to queue reset event [ 565.605088][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1620'. [ 565.615551][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 565.664886][ T30] audit: type=1326 audit(1754619935.270:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11335 comm="syz.4.1620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bd018ebe9 code=0x0 [ 565.809236][ T5924] raw-gadget.2 gadget.0: failed to queue resume event [ 565.868853][ T5924] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 565.908966][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 565.925080][ T5924] usb 1-1: device descriptor read/8, error -32 [ 566.048908][ T5924] raw-gadget.2 gadget.0: failed to queue suspend event [ 566.069066][ T5924] raw-gadget.2 gadget.0: failed to queue reset event [ 566.169677][ T5924] raw-gadget.2 gadget.0: failed to queue resume event [ 566.228846][ T5924] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 566.264248][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 566.284765][ T5924] usb 1-1: device descriptor read/8, error -32 [ 566.411394][ T5924] raw-gadget.2 gadget.0: failed to queue suspend event [ 566.449175][ T5924] usb usb1-port1: unable to enumerate USB device [ 566.457517][T11324] usb usb1: check_ctrlrecip: process 11324 (syz.2.1615) requesting ep 01 but needs 81 [ 566.964359][T11355] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 566.977343][T11355] batman_adv: batadv0: Adding interface: team0 [ 566.983970][T11355] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.044107][T11355] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 567.067902][T11358] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 567.114129][T11358] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1622'. [ 567.125759][T11358] team0: entered promiscuous mode [ 567.133893][T11358] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.143003][T11358] batman_adv: batadv0: Interface activated: team0 [ 567.149913][T11358] batman_adv: batadv0: Interface deactivated: team0 [ 567.156994][T11358] batman_adv: batadv0: Removing interface: team0 [ 567.186560][T11358] bridge0: port 1(team0) entered blocking state [ 567.193293][T11358] bridge0: port 1(team0) entered disabled state [ 567.203853][T11358] team0: entered allmulticast mode [ 567.291500][T11358] team0: left allmulticast mode [ 567.740168][ T5924] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 567.919240][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 567.951069][ T5924] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.989203][ T5924] usb 2-1: config 0 has no interface number 0 [ 568.022070][ T5924] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 170, changing to 11 [ 568.086397][ T5924] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17412, setting to 1024 [ 568.145856][ T5924] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 568.194730][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.245207][ T5924] usb 2-1: config 0 descriptor?? [ 568.262383][T11363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 568.293370][ T5924] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 568.483689][ T5924] usb 2-1: USB disconnect, device number 82 [ 570.377199][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 570.452048][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 570.462214][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 570.481069][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 571.993497][T11443] tipc: Enabled bearer , priority 0 [ 572.017239][T11443] syzkaller0: entered promiscuous mode [ 572.028875][T11443] syzkaller0: entered allmulticast mode [ 572.115799][T11443] tipc: Resetting bearer [ 572.122828][T11447] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 572.152093][T11442] tipc: Resetting bearer [ 572.299088][T11442] tipc: Disabling bearer [ 572.375324][T11452] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4 [ 572.716656][T11463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1673'. [ 573.219382][T11481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.335573][ T5924] IPVS: starting estimator thread 0... [ 573.342309][T11481] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 573.372484][T11490] tipc: Failed to remove unknown binding: 66,1,1/0:3176357222/3176357224 [ 573.405650][T11481] tipc: Failed to remove unknown binding: 66,1,1/0:3176357222/3176357224 [ 573.417517][T11481] tipc: Failed to remove unknown binding: 66,1,1/0:3176357222/3176357224 [ 573.448498][T11481] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1681'. [ 573.459411][T11491] IPVS: using max 26 ests per chain, 62400 per kthread [ 574.913505][T11519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1696'. [ 575.634623][T11533] tipc: Can't bind to reserved service type 1 [ 576.020722][T11541] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1704'. [ 576.953440][T11557] input: syz1 as /devices/virtual/input/input27 [ 578.377140][T11586] tipc: Resetting bearer [ 578.591907][ T6124] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.623603][ T6124] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.635854][ T6124] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.007279][T11598] lo: entered allmulticast mode [ 579.551114][T11611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1731'. [ 579.561279][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1729'. [ 579.571088][T11606] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1729'. [ 579.628330][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'. [ 580.508498][T11644] sctp: [Deprecated]: syz.2.1744 (pid 11644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.508498][T11644] Use struct sctp_sack_info instead [ 580.551723][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1743'. [ 580.797914][T11652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.893398][T11651] sctp: [Deprecated]: syz.3.1745 (pid 11651) Use of int in maxseg socket option. [ 580.893398][T11651] Use struct sctp_assoc_value instead [ 581.149222][T11667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1756'. [ 581.157236][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1755'. [ 581.182839][T11669] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 581.431341][T11675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1757'. [ 581.448187][T11672] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1757'. [ 581.814049][T11687] kernel profiling enabled (shift: 17) [ 581.912572][T11690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.089686][T11690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.296039][T11729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1781'. [ 583.324793][T11731] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 583.618789][ T120] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 583.769414][ T120] usb 3-1: Using ep0 maxpacket: 8 [ 583.776579][ T120] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.784959][ T120] usb 3-1: config 0 has no interface number 0 [ 583.791634][ T120] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 23556, setting to 64 [ 583.802702][ T120] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.812038][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.823091][ T120] usb 3-1: config 0 descriptor?? [ 583.838869][ T120] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 584.047679][ T9] usb 3-1: USB disconnect, device number 108 [ 584.651064][T11766] syzkaller1: entered promiscuous mode [ 584.657491][T11766] syzkaller1: entered allmulticast mode [ 584.908109][ T1112] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.924149][ T1112] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.945089][ T1112] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.962490][ T1112] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 586.037240][T11795] __nla_validate_parse: 3 callbacks suppressed [ 586.037261][T11795] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1809'. [ 586.376583][T11813] netlink: del zone limit has 4 unknown bytes [ 586.466391][T11815] tipc: Enabled bearer , priority 0 [ 586.492315][T11815] syzkaller0: entered promiscuous mode [ 586.508448][T11815] syzkaller0: entered allmulticast mode [ 586.542241][T11815] tipc: Resetting bearer [ 586.573374][T11814] tipc: Resetting bearer [ 586.656234][T11814] tipc: Disabling bearer [ 586.765496][T11828] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1823'. [ 586.952323][T11834] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 587.378554][T11863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1835'. [ 587.390248][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1835'. [ 587.401490][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1835'. [ 587.679328][T11869] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1839'. [ 588.160041][ T120] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 588.345344][ T120] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 588.360594][ T120] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 588.399211][ T120] usb 4-1: config 0 interface 0 has no altsetting 0 [ 588.415550][ T1112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.424606][ T120] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 588.424646][ T120] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 588.424669][ T120] usb 4-1: Product: syz [ 588.424686][ T120] usb 4-1: Manufacturer: syz [ 588.424703][ T120] usb 4-1: SerialNumber: syz [ 588.471212][ T120] usb 4-1: config 0 descriptor?? [ 588.476723][ T1112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.492494][ T120] hub 4-1:0.0: bad descriptor, ignoring hub [ 588.499895][ T1112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.515199][ T120] hub 4-1:0.0: probe with driver hub failed with error -5 [ 588.563329][ T120] usb 4-1: selecting invalid altsetting 0 [ 588.665506][T11905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.789740][ T120] usb 4-1: USB disconnect, device number 77 [ 589.047749][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1859'. [ 589.063658][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 589.073629][T11917] netlink: 'syz.4.1859': attribute type 18 has an invalid length. [ 589.303167][T11928] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 589.308911][T11927] IPVS: stopping backup sync thread 11928 ... [ 589.348467][T11923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1861'. [ 589.358563][T11923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1861'. [ 592.131499][T11990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1887'. [ 592.147648][T11988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1887'. [ 592.170439][T11989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1887'. [ 592.566531][T12005] binder: 12004:12005 ioctl c0306201 0 returned -14 [ 592.602156][T12005] binder: BINDER_SET_CONTEXT_MGR already set [ 592.613886][T12005] binder: 12004:12005 ioctl 4018620d 200000000040 returned -16 [ 593.433708][T12033] binder: 12032:12033 ioctl c0306201 0 returned -14 [ 593.703727][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1910'. [ 593.723734][T12045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1910'. [ 593.743729][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1910'. [ 593.765524][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1910'. [ 594.459588][T12059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 594.468914][T12059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 594.809137][ T5954] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 594.848955][ T5957] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 594.992340][ T5954] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 595.005230][ T5954] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 595.009118][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 595.038612][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.038769][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 595.077505][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.096922][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.114852][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.124794][ T5957] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 595.130978][ T5954] usb 3-1: Product: syz [ 595.148757][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.152678][ T5954] usb 3-1: Manufacturer: syz [ 595.168543][ T5954] usb 3-1: SerialNumber: syz [ 595.186475][ T5957] usb 4-1: config 0 descriptor?? [ 595.195422][ T5954] usb 3-1: config 0 descriptor?? [ 595.259898][ T5954] hub 3-1:0.0: bad descriptor, ignoring hub [ 595.276075][ T5954] hub 3-1:0.0: probe with driver hub failed with error -5 [ 595.334663][ T5954] usb 3-1: selecting invalid altsetting 0 [ 595.569840][ T120] usb 3-1: USB disconnect, device number 109 [ 595.712221][ T5957] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0014/input/input28 [ 595.841469][ T5957] appleir 0003:05AC:8241.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 596.322095][T12100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1933'. [ 596.489734][T12099] bond0 (unregistering): Released all slaves [ 597.058855][ T5957] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 597.220693][ T5957] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 597.243332][ T5957] usb 2-1: config 0 has no interface number 0 [ 597.259027][ T5957] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 597.265451][T12137] __nla_validate_parse: 2 callbacks suppressed [ 597.265474][T12137] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1951'. [ 597.283042][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.311461][ T5957] usb 2-1: config 0 descriptor?? [ 597.326930][ T5957] gspca_main: spca561-2.14.0 probing abcd:cdee [ 597.530945][ T5957] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 597.556113][ T5957] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.575996][ T5957] usb 2-1: MIDIStreaming interface descriptor not found [ 597.615325][ T5954] usb 4-1: USB disconnect, device number 78 [ 597.705523][ T5957] usb 2-1: USB disconnect, device number 83 [ 597.790696][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 597.805691][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 597.827709][T12154] netlink: 'syz.2.1958': attribute type 18 has an invalid length. [ 597.995256][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 598.085536][T12162] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1963'. [ 598.262562][T12170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1962'. [ 598.305140][T12164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1962'. [ 598.357243][T12168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1962'. [ 598.885741][ T5954] IPVS: starting estimator thread 0... [ 598.974507][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 598.988792][T12202] IPVS: using max 25 ests per chain, 60000 per kthread [ 599.767360][T12222] tipc: Enabled bearer , priority 0 [ 599.796428][T12222] syzkaller0: entered promiscuous mode [ 599.809010][T12222] syzkaller0: entered allmulticast mode [ 599.841305][T12222] tipc: Resetting bearer [ 599.884200][T12221] tipc: Resetting bearer [ 599.919928][T12221] tipc: Disabling bearer [ 600.589054][ T5954] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 600.740602][T12261] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2003'. [ 600.766456][ T5954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.804848][ T5954] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 600.831046][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.854649][ T5954] usb 4-1: config 0 descriptor?? [ 600.874775][ T5954] pwc: Askey VC010 type 2 USB webcam detected. [ 600.959178][T12265] kvm: vcpu 0: requested 3584 ns lapic timer period limited to 200000 ns [ 601.274294][ T5954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 601.285621][ T5954] pwc: recv_control_msg error -32 req 02 val 2700 [ 601.305811][ T5954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 601.320697][ T5954] pwc: recv_control_msg error -32 req 04 val 1000 [ 601.344900][ T5954] pwc: recv_control_msg error -32 req 04 val 1300 [ 601.358887][ T5954] pwc: recv_control_msg error -32 req 04 val 1400 [ 601.380053][ T5954] pwc: recv_control_msg error -32 req 02 val 2000 [ 601.388480][ T5954] pwc: recv_control_msg error -32 req 02 val 2100 [ 601.402986][ T5954] pwc: recv_control_msg error -32 req 04 val 1500 [ 601.415284][ T5954] pwc: recv_control_msg error -32 req 02 val 2500 [ 601.629469][ T5954] pwc: recv_control_msg error -32 req 02 val 2600 [ 601.636904][ T5954] pwc: recv_control_msg error -32 req 02 val 2900 [ 601.645470][ T5954] pwc: recv_control_msg error -32 req 02 val 2800 [ 601.656666][ T5954] pwc: recv_control_msg error -32 req 04 val 1100 [ 601.665782][ T5954] pwc: recv_control_msg error -71 req 04 val 1200 [ 601.704191][ T5954] pwc: Registered as video103. [ 601.796594][ T5954] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 601.899639][ T5954] usb 4-1: USB disconnect, device number 79 [ 602.826767][T12336] __nla_validate_parse: 1 callbacks suppressed [ 602.826788][T12336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2032'. [ 602.865630][T12327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2032'. [ 602.886605][T12333] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2032'. [ 602.897181][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 603.534786][ T5954] IPVS: starting estimator thread 0... [ 603.649681][T12368] IPVS: using max 29 ests per chain, 69600 per kthread [ 603.758821][ T5957] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 603.914841][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.938753][ T5957] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 603.947923][ T5957] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 603.969199][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.992577][ T5957] usb 3-1: config 0 descriptor?? [ 604.021503][ T5957] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 604.028269][ T5957] dvb-usb: bulk message failed: -22 (3/0) [ 604.060855][ T5957] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 604.090340][ T5957] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 604.097489][ T5957] usb 3-1: media controller created [ 604.121295][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.143704][ T5957] dvb-usb: bulk message failed: -22 (6/0) [ 604.153279][ T5957] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 604.197055][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 604.218956][T12390] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2058'. [ 604.224597][T12366] dvb-usb: bulk message failed: -22 (2/0) [ 604.270324][ T5957] dvb-usb: schedule remote query interval to 150 msecs. [ 604.282907][ T5957] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 604.327072][ T5957] usb 3-1: USB disconnect, device number 110 [ 604.474672][ T5957] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 604.658596][T12403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.670789][T12403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.734290][T12401] syzkaller0: entered promiscuous mode [ 604.756896][T12401] syzkaller0: entered allmulticast mode [ 607.780619][T12458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.823555][T12458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.429793][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.443450][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.790667][T12463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2083'. [ 609.294470][T12476] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 609.316976][T12476] trusted_key: encrypted_key: insufficient parameters specified [ 610.184060][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 610.279043][T12499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2097'. [ 610.318974][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2097'. [ 610.372561][T12499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2097'. [ 610.396469][T12499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2097'. [ 611.073347][T12526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.083971][T12526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.833978][T12546] netlink: 'syz.4.2116': attribute type 72 has an invalid length. [ 611.852364][T12546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2116'. [ 612.066154][ T30] audit: type=1326 audit(1754619981.670:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca238ebe9 code=0x7ffc0000 [ 612.307401][ T30] audit: type=1326 audit(1754619981.750:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca238ebe9 code=0x7ffc0000 [ 612.404138][T12561] tipc: Enabled bearer , priority 0 [ 612.434540][ T30] audit: type=1326 audit(1754619981.760:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f9ca238ebe9 code=0x7ffc0000 [ 612.466853][T12562] syzkaller0: entered promiscuous mode [ 612.493345][T12562] syzkaller0: entered allmulticast mode [ 612.547174][ T30] audit: type=1326 audit(1754619981.760:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca238ebe9 code=0x7ffc0000 [ 612.556215][T12561] tipc: Resetting bearer [ 612.584025][T12559] tipc: Resetting bearer [ 612.585231][ T30] audit: type=1326 audit(1754619981.760:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12551 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca238ebe9 code=0x7ffc0000 [ 612.657511][T12559] tipc: Disabling bearer [ 613.540873][T12583] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 613.882892][T12593] binder: BINDER_SET_CONTEXT_MGR already set [ 613.894076][T12593] binder: 12590:12593 ioctl 4018620d 200000000040 returned -16 [ 614.717928][T12606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2140'. [ 614.742334][T12606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2140'. [ 614.782132][T12606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2140'. [ 614.815950][T12606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2140'. [ 615.686519][T12623] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 615.846537][T12626] IPVS: stopping backup sync thread 12627 ... [ 615.853814][T12627] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 615.941434][T12626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2149'. [ 616.044963][T12626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2149'. [ 616.194112][T12638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2152'. [ 616.253237][T12636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2152'. [ 617.197370][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 617.358967][T12656] tipc: Disabling bearer [ 619.104973][T12691] netlink: 'syz.0.2173': attribute type 5 has an invalid length. [ 619.121380][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2173'. [ 621.044731][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 621.081361][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 621.183962][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 621.231498][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 621.664687][T12742] syzkaller1: entered promiscuous mode [ 621.673334][T12742] syzkaller1: entered allmulticast mode [ 622.532281][T12782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.845683][T12792] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 622.857840][T12791] IPVS: stopping backup sync thread 12792 ... [ 622.868241][T12791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2216'. [ 622.877999][T12791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2216'. [ 622.939407][ T5954] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 623.093940][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.105699][ T5954] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 623.117142][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.148989][ T5954] usb 2-1: config 0 descriptor?? [ 623.167750][ T5954] pwc: Askey VC010 type 2 USB webcam detected. [ 623.226314][T12802] binder: 12801:12802 ioctl c0306201 0 returned -14 [ 623.450384][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2224'. [ 623.570758][ T5954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 623.588484][ T5954] pwc: recv_control_msg error -32 req 02 val 2700 [ 623.615090][ T5954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 623.632797][ T5954] pwc: recv_control_msg error -32 req 04 val 1000 [ 623.648617][ T5954] pwc: recv_control_msg error -32 req 04 val 1300 [ 623.720365][ T5954] pwc: recv_control_msg error -32 req 04 val 1400 [ 623.782532][ T5954] pwc: recv_control_msg error -32 req 02 val 2000 [ 623.791673][ T5954] pwc: recv_control_msg error -32 req 02 val 2100 [ 623.817990][ T5954] pwc: recv_control_msg error -32 req 04 val 1500 [ 624.041345][ T5954] pwc: recv_control_msg error -71 req 02 val 2400 [ 624.058029][ T5954] pwc: recv_control_msg error -71 req 02 val 2600 [ 624.075783][ T5954] pwc: recv_control_msg error -71 req 02 val 2900 [ 624.113522][ T5954] pwc: recv_control_msg error -71 req 02 val 2800 [ 624.138250][ T5954] pwc: recv_control_msg error -71 req 04 val 1100 [ 624.156979][ T5954] pwc: recv_control_msg error -71 req 04 val 1200 [ 624.183854][ T5954] pwc: Registered as video103. [ 624.212321][ T5954] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 624.465536][ T5954] usb 2-1: USB disconnect, device number 84 [ 624.561212][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.567616][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.731218][ T5954] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 625.919125][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 625.983832][ T5954] usb 3-1: config 8 has an invalid interface number: 57 but max is 0 [ 626.002407][ T5954] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 626.031776][ T5954] usb 3-1: config 8 has no interface number 0 [ 626.052782][ T5954] usb 3-1: config 8 interface 57 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 626.072314][ T5954] usb 3-1: config 8 interface 57 has no altsetting 0 [ 626.084488][ T5954] usb 3-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44 [ 626.094217][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.117197][ T5954] usb 3-1: Product: syz [ 626.122299][ T5954] usb 3-1: Manufacturer: syz [ 626.127005][ T5954] usb 3-1: SerialNumber: syz [ 626.366044][ T5954] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.381105][ T5954] usb 3-1: MIDIStreaming interface descriptor not found [ 626.464695][ T5954] usb 3-1: USB disconnect, device number 111 [ 627.042659][T12889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2254'. [ 627.350786][T12896] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 627.362180][T12896] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 629.025311][T12924] kvm: pic: level sensitive irq not supported [ 629.025628][T12924] kvm: pic: non byte read [ 629.036761][T12924] kvm: pic: level sensitive irq not supported [ 629.036842][T12924] kvm: pic: non byte read [ 629.052759][T12924] kvm: pic: level sensitive irq not supported [ 629.053402][T12924] kvm: pic: non byte read [ 629.064500][T12924] kvm: pic: level sensitive irq not supported [ 629.064581][T12924] kvm: pic: non byte read [ 629.080246][T12924] kvm: pic: level sensitive irq not supported [ 629.080314][T12924] kvm: pic: non byte read [ 629.131587][T12924] kvm: pic: level sensitive irq not supported [ 629.131681][T12924] kvm: pic: non byte read [ 629.168011][T12924] kvm: pic: level sensitive irq not supported [ 629.168077][T12924] kvm: pic: non byte read [ 629.180571][T12924] kvm: pic: level sensitive irq not supported [ 629.180643][T12924] kvm: pic: non byte read [ 629.194816][T12924] kvm: pic: level sensitive irq not supported [ 629.194883][T12924] kvm: pic: non byte read [ 629.567151][T12938] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 629.581298][T12937] IPVS: stopping backup sync thread 12938 ... [ 629.622213][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2274'. [ 629.638799][T12937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2274'. [ 630.930127][T12958] kvm: pic: single mode not supported [ 630.930228][T12958] kvm: pic: non byte read [ 630.989224][T12958] kvm: pic: single mode not supported [ 630.990002][T12958] kvm: pic: level sensitive irq not supported [ 630.995722][T12958] kvm: pic: single mode not supported [ 632.771921][T13002] netlink: 'syz.0.2295': attribute type 5 has an invalid length. [ 633.617092][T13024] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2303'. [ 633.968631][T13035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2308'. [ 635.066809][ T5957] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 635.301739][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 636.228809][ T30] audit: type=1326 audit(1754620005.830:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 636.331787][ T30] audit: type=1326 audit(1754620005.830:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 636.438502][ T30] audit: type=1326 audit(1754620005.870:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 636.572670][ T30] audit: type=1326 audit(1754620005.870:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 636.688027][ T30] audit: type=1326 audit(1754620005.870:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 636.744565][T13105] syzkaller1: entered promiscuous mode [ 636.758227][T13105] syzkaller1: entered allmulticast mode [ 636.847204][ T30] audit: type=1326 audit(1754620005.870:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 636.945501][ T30] audit: type=1326 audit(1754620005.870:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 636.998577][ T30] audit: type=1326 audit(1754620005.870:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 637.057368][ T30] audit: type=1326 audit(1754620005.870:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 637.115226][ T30] audit: type=1326 audit(1754620005.870:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046d38ebe9 code=0x7ffc0000 [ 637.229082][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 637.251646][ T5957] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 637.272881][ T5957] usb 5-1: can't read configurations, error -71 [ 638.292252][T13147] usb usb8: usbfs: process 13147 (syz.4.2352) did not claim interface 0 before use [ 638.364576][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2354'. [ 638.503815][T13159] netlink: 344 bytes leftover after parsing attributes in process `syz.4.2356'. [ 638.911297][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2360'. [ 638.922524][T13171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2360'. [ 638.934388][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2360'. [ 638.945870][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2360'. [ 640.298189][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 640.883875][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2371'. [ 640.925938][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 640.979332][T13200] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2371'. [ 641.084462][T13202] syzkaller0: entered promiscuous mode [ 641.118789][T13202] syzkaller0: entered allmulticast mode [ 642.672733][T13242] fuse: Unknown parameter 'grou00000000000000000000' [ 643.666878][T13272] fuse: Unknown parameter 'grou00000000000000000000' [ 643.817960][T13278] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 643.827533][T13274] IPVS: stopping backup sync thread 13278 ... [ 643.847767][T13274] __nla_validate_parse: 3 callbacks suppressed [ 643.847785][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2399'. [ 643.869334][T13274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2399'. [ 644.509422][ T120] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 644.659167][ T120] usb 3-1: Using ep0 maxpacket: 8 [ 644.692096][ T120] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.721775][ T120] usb 3-1: config 0 has no interface number 0 [ 644.743472][ T120] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 23556, setting to 64 [ 644.764852][ T120] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 644.774681][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.800126][ T120] usb 3-1: config 0 descriptor?? [ 644.822619][ T120] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 645.029625][ T5957] usb 3-1: USB disconnect, device number 112 [ 646.002040][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.048118][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.399839][T13336] syzkaller1: entered promiscuous mode [ 646.418761][T13336] syzkaller1: entered allmulticast mode [ 646.738939][ T5957] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 646.899637][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 646.911715][ T5957] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 646.931091][ T5957] usb 4-1: config 0 has no interface number 0 [ 646.951593][ T5957] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 23556, setting to 64 [ 646.990200][ T5957] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 647.222421][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.240884][ T5957] usb 4-1: config 0 descriptor?? [ 647.248617][ T5957] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 647.460554][ T5957] usb 4-1: USB disconnect, device number 80 [ 647.899585][ T980] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 648.060928][ T980] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 648.088786][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.101274][ T980] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 648.134093][ T980] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 648.185865][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2442'. [ 648.189318][ T980] usb 5-1: Manufacturer: syz [ 648.259610][ T980] usb 5-1: config 0 descriptor?? [ 648.423023][T13386] binder: 13385:13386 ioctl c0306201 200000000040 returned -14 [ 648.468769][ T980] rc_core: IR keymap rc-hauppauge not found [ 648.474737][ T980] Registered IR keymap rc-empty [ 648.491852][ T980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 648.534135][ T980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 648.765119][T13397] rc rc0: two consecutive events of type space [ 648.966517][ T980] usb 5-1: USB disconnect, device number 95 [ 649.203481][T13404] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 649.203703][T13403] IPVS: stopping backup sync thread 13404 ... [ 649.223749][T13403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2449'. [ 649.234104][T13403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2449'. [ 649.859517][T13424] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2458'. [ 649.881847][T13428] tipc: Enabled bearer , priority 0 [ 649.894721][T13428] tipc: Resetting bearer [ 649.942488][T13425] tipc: Disabling bearer [ 650.733382][T13447] binder: 13446:13447 ioctl c0306201 200000000040 returned -22 [ 651.209337][ T980] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 651.370983][ T980] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 651.383403][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.415780][ T980] usb 4-1: config 0 descriptor?? [ 651.437189][ T980] cp210x 4-1:0.0: cp210x converter detected [ 651.641340][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.670999][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.786175][T13467] netlink: 'syz.3.2469': attribute type 10 has an invalid length. [ 651.827377][T13467] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 652.452321][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'. [ 654.107317][ T980] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 654.161455][ T980] cp210x 4-1:0.0: querying part number failed [ 654.232565][ T980] usb 4-1: cp210x converter now attached to ttyUSB0 [ 654.259261][ T980] usb 4-1: USB disconnect, device number 81 [ 654.286654][ T980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 654.340273][ T980] cp210x 4-1:0.0: device disconnected [ 657.358769][ T980] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 657.597319][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 657.684557][ T980] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.696973][ T980] usb 4-1: config 0 has no interface number 0 [ 657.740343][ T980] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 23556, setting to 64 [ 657.797248][ T980] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 657.813715][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.891497][ T980] usb 4-1: config 0 descriptor?? [ 657.940886][ T980] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 658.143271][ T5954] usb 4-1: USB disconnect, device number 82 [ 660.709007][T13652] fuse: Bad value for 'user_id' [ 660.713943][T13652] fuse: Bad value for 'user_id' [ 660.780573][ T5957] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 660.859536][T13658] [ 660.861920][T13658] ====================================================== [ 660.868958][T13658] WARNING: possible circular locking dependency detected [ 660.876005][T13658] 6.16.0-syzkaller-11952-g6e64f4580381 #0 Not tainted [ 660.882770][T13658] ------------------------------------------------------ [ 660.889789][T13658] syz.0.2550/13658 is trying to acquire lock: [ 660.895860][T13658] ffff88801b2ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 660.906143][T13658] [ 660.906143][T13658] but task is already holding lock: [ 660.913504][T13658] ffff888142b2d8f8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 660.923283][T13658] [ 660.923283][T13658] which lock already depends on the new lock. [ 660.923283][T13658] [ 660.933696][T13658] [ 660.933696][T13658] the existing dependency chain (in reverse order) is: [ 660.942705][T13658] [ 660.942705][T13658] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 660.951315][T13658] lock_acquire+0x120/0x360 [ 660.956429][T13658] blk_alloc_queue+0x538/0x620 [ 660.961730][T13658] __blk_mq_alloc_disk+0x15c/0x340 [ 660.967381][T13658] loop_add+0x411/0xad0 [ 660.972069][T13658] loop_init+0xd9/0x170 [ 660.976774][T13658] do_one_initcall+0x233/0x820 [ 660.982072][T13658] do_initcall_level+0x104/0x190 [ 660.987642][T13658] do_initcalls+0x59/0xa0 [ 660.992590][T13658] kernel_init_freeable+0x334/0x4b0 [ 660.998321][T13658] kernel_init+0x1d/0x1d0 [ 661.003193][T13658] ret_from_fork+0x3fc/0x770 [ 661.008486][T13658] ret_from_fork_asm+0x1a/0x30 [ 661.013792][T13658] [ 661.013792][T13658] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 661.021016][T13658] lock_acquire+0x120/0x360 [ 661.026077][T13658] fs_reclaim_acquire+0x72/0x100 [ 661.031557][T13658] kmem_cache_alloc_noprof+0x44/0x3c0 [ 661.037482][T13658] __kernfs_iattrs+0xd9/0x320 [ 661.042775][T13658] kernfs_iop_setattr+0xea/0x3f0 [ 661.048237][T13658] notify_change+0xb33/0xe40 [ 661.053361][T13658] do_truncate+0x1a4/0x220 [ 661.058307][T13658] path_openat+0x306c/0x3830 [ 661.063432][T13658] do_filp_open+0x1fa/0x410 [ 661.068555][T13658] do_sys_openat2+0x121/0x1c0 [ 661.073762][T13658] __x64_sys_openat+0x138/0x170 [ 661.079139][T13658] do_syscall_64+0xfa/0x3b0 [ 661.084172][T13658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.090605][T13658] [ 661.090605][T13658] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 661.099488][T13658] validate_chain+0xb9b/0x2140 [ 661.104806][T13658] __lock_acquire+0xab9/0xd20 [ 661.110116][T13658] lock_acquire+0x120/0x360 [ 661.115153][T13658] down_read+0x46/0x2e0 [ 661.119843][T13658] kernfs_iop_getattr+0x9e/0x450 [ 661.125328][T13658] vfs_getattr_nosec+0x2e1/0x430 [ 661.130821][T13658] loop_assign_backing_file+0x222/0x400 [ 661.136898][T13658] lo_ioctl+0x1860/0x1d00 [ 661.141839][T13658] blkdev_ioctl+0x5a8/0x6d0 [ 661.146869][T13658] __se_sys_ioctl+0xfc/0x170 [ 661.151991][T13658] do_syscall_64+0xfa/0x3b0 [ 661.157037][T13658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.163474][T13658] [ 661.163474][T13658] other info that might help us debug this: [ 661.163474][T13658] [ 661.173716][T13658] Chain exists of: [ 661.173716][T13658] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 661.173716][T13658] [ 661.188190][T13658] Possible unsafe locking scenario: [ 661.188190][T13658] [ 661.195650][T13658] CPU0 CPU1 [ 661.201161][T13658] ---- ---- [ 661.206536][T13658] lock(&q->q_usage_counter(io)#24); [ 661.212015][T13658] lock(fs_reclaim); [ 661.218538][T13658] lock(&q->q_usage_counter(io)#24); [ 661.226463][T13658] rlock(&root->kernfs_iattr_rwsem); [ 661.231847][T13658] [ 661.231847][T13658] *** DEADLOCK *** [ 661.231847][T13658] [ 661.239995][T13658] 3 locks held by syz.0.2550/13658: [ 661.245198][T13658] #0: ffff888024d85400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xfbf/0x1d00 [ 661.254191][T13658] #1: ffff888142b2d8f8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 661.264395][T13658] #2: ffff888142b2d930 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 661.274870][T13658] [ 661.274870][T13658] stack backtrace: [ 661.280761][T13658] CPU: 0 UID: 0 PID: 13658 Comm: syz.0.2550 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 661.280785][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.280797][T13658] Call Trace: [ 661.280806][T13658] [ 661.280816][T13658] dump_stack_lvl+0x189/0x250 [ 661.280844][T13658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.280866][T13658] ? __pfx__printk+0x10/0x10 [ 661.280896][T13658] print_circular_bug+0x2ee/0x310 [ 661.280918][T13658] check_noncircular+0x134/0x160 [ 661.280941][T13658] validate_chain+0xb9b/0x2140 [ 661.280961][T13658] ? tomoyo_path_perm+0x1e3/0x4b0 [ 661.280990][T13658] __lock_acquire+0xab9/0xd20 [ 661.281019][T13658] ? kernfs_iop_getattr+0x9e/0x450 [ 661.281038][T13658] lock_acquire+0x120/0x360 [ 661.281064][T13658] ? kernfs_iop_getattr+0x9e/0x450 [ 661.281088][T13658] down_read+0x46/0x2e0 [ 661.281113][T13658] ? kernfs_iop_getattr+0x9e/0x450 [ 661.281132][T13658] kernfs_iop_getattr+0x9e/0x450 [ 661.281153][T13658] vfs_getattr_nosec+0x2e1/0x430 [ 661.281173][T13658] loop_assign_backing_file+0x222/0x400 [ 661.281196][T13658] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 661.281216][T13658] ? schedule+0x91/0x360 [ 661.281247][T13658] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 661.281289][T13658] lo_ioctl+0x1860/0x1d00 [ 661.281311][T13658] ? __pfx_lo_ioctl+0x10/0x10 [ 661.281327][T13658] ? css_rstat_updated+0x23a/0x4f0 [ 661.281348][T13658] ? __lock_acquire+0xab9/0xd20 [ 661.281376][T13658] ? __lock_acquire+0xab9/0xd20 [ 661.281405][T13658] ? __lock_acquire+0xab9/0xd20 [ 661.281435][T13658] ? __lock_acquire+0xab9/0xd20 [ 661.281467][T13658] ? is_bpf_text_address+0x26/0x2b0 [ 661.281496][T13658] ? is_bpf_text_address+0x292/0x2b0 [ 661.281522][T13658] ? is_bpf_text_address+0x26/0x2b0 [ 661.281549][T13658] ? kernel_text_address+0xa5/0xe0 [ 661.281573][T13658] ? __kernel_text_address+0xd/0x40 [ 661.281597][T13658] ? unwind_get_return_address+0x4d/0x90 [ 661.281617][T13658] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.281638][T13658] ? arch_stack_walk+0xfc/0x150 [ 661.281663][T13658] ? stack_trace_save+0x9c/0xe0 [ 661.281682][T13658] ? __pfx_stack_trace_save+0x10/0x10 [ 661.281703][T13658] ? stack_depot_save_flags+0x40/0x860 [ 661.281726][T13658] ? kasan_save_track+0x4f/0x80 [ 661.281747][T13658] ? kasan_save_track+0x3e/0x80 [ 661.281767][T13658] ? kasan_save_free_info+0x46/0x50 [ 661.281784][T13658] ? __kasan_slab_free+0x5b/0x80 [ 661.281806][T13658] ? kfree+0x18e/0x440 [ 661.281826][T13658] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 661.281846][T13658] ? security_file_ioctl+0xcb/0x2d0 [ 661.281865][T13658] ? __se_sys_ioctl+0x47/0x170 [ 661.281884][T13658] ? do_syscall_64+0xfa/0x3b0 [ 661.281906][T13658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.281933][T13658] ? __asan_memset+0x22/0x50 [ 661.281952][T13658] ? blk_get_meta_cap+0x140/0x710 [ 661.281975][T13658] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 661.281999][T13658] ? kasan_quarantine_put+0xdd/0x220 [ 661.282024][T13658] ? blkdev_common_ioctl+0xff7/0x2550 [ 661.282049][T13658] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 661.282071][T13658] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 661.282096][T13658] ? do_vfs_ioctl+0xbe8/0x1430 [ 661.282118][T13658] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 661.282144][T13658] ? __lock_acquire+0xab9/0xd20 [ 661.282177][T13658] ? __pfx_lo_ioctl+0x10/0x10 [ 661.282195][T13658] blkdev_ioctl+0x5a8/0x6d0 [ 661.282219][T13658] ? __pfx_blkdev_ioctl+0x10/0x10 [ 661.282248][T13658] ? __fget_files+0x2a/0x420 [ 661.282276][T13658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 661.282299][T13658] ? __pfx_blkdev_ioctl+0x10/0x10 [ 661.282324][T13658] __se_sys_ioctl+0xfc/0x170 [ 661.282347][T13658] do_syscall_64+0xfa/0x3b0 [ 661.282369][T13658] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.282391][T13658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.282408][T13658] ? clear_bhb_loop+0x60/0xb0 [ 661.282428][T13658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.282447][T13658] RIP: 0033:0x7f9ca238ebe9 [ 661.282466][T13658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.282484][T13658] RSP: 002b:00007f9ca3193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.282504][T13658] RAX: ffffffffffffffda RBX: 00007f9ca25b5fa0 RCX: 00007f9ca238ebe9 [ 661.282517][T13658] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 661.282529][T13658] RBP: 00007f9ca2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 661.282540][T13658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.282551][T13658] R13: 00007f9ca25b6038 R14: 00007f9ca25b5fa0 R15: 00007f9ca26dfa28 [ 661.282570][T13658] [ 661.842026][ T5957] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 661.850958][ T5957] usb 2-1: config 0 has no interface number 0 [ 661.857176][ T5957] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 661.866481][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.876538][ T5957] usb 2-1: config 0 descriptor?? [ 661.884199][ T5957] gspca_main: spca561-2.14.0 probing abcd:cdee [ 662.106205][ T5957] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 662.115253][ T5957] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.122312][ T5957] usb 2-1: MIDIStreaming interface descriptor not found [ 662.152401][ T5957] usb 2-1: USB disconnect, device number 85