last executing test programs: 6m17.536598167s ago: executing program 4 (id=1037): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 6m15.130944064s ago: executing program 4 (id=1062): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) pwrite64(r1, &(0x7f0000000140)='AF', 0x2, 0x8be6) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 6m14.205184595s ago: executing program 4 (id=1073): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6m14.008030004s ago: executing program 4 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 6m13.730485122s ago: executing program 4 (id=1079): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x8, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) 6m13.275611608s ago: executing program 4 (id=1085): ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) 6m12.730016411s ago: executing program 32 (id=1085): ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) 5m39.601806877s ago: executing program 2 (id=1360): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0x100, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m39.263104715s ago: executing program 2 (id=1363): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0x0, 0x0, 0x10, "0062da680000200000000000000100"}) r1 = syz_open_pts(r0, 0x20800) r2 = dup3(r1, r0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000001e80)={0xf, 0x9, 0x8, 0x3ff8, 0xb, "c89f10911a684382"}) 5m38.102355927s ago: executing program 2 (id=1376): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001380)=""/114, 0x72}], 0x2}, 0x3}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) 5m37.868987107s ago: executing program 2 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 5m37.602220338s ago: executing program 2 (id=1383): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 5m37.23438457s ago: executing program 2 (id=1388): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) fchown(r2, 0x0, 0x0) 5m36.759503151s ago: executing program 33 (id=1388): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) fchown(r2, 0x0, 0x0) 3m57.06643447s ago: executing program 5 (id=2146): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) 3m55.693319064s ago: executing program 5 (id=2160): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb56c}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xe25}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 3m54.585886816s ago: executing program 5 (id=2171): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r2, 0x103, 0x1) getdents(r2, 0x0, 0x58) 3m54.452660866s ago: executing program 5 (id=2172): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) symlink(0x0, &(0x7f00000017c0)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x245) 3m54.258982393s ago: executing program 5 (id=2175): pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 3m53.842398655s ago: executing program 5 (id=2179): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 3m53.433422442s ago: executing program 34 (id=2179): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 3m45.058340708s ago: executing program 7 (id=2248): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x0}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 3m44.836710888s ago: executing program 7 (id=2251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x38, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x9, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m44.291705615s ago: executing program 7 (id=2255): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 3m43.130246941s ago: executing program 7 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 3m42.862155764s ago: executing program 7 (id=2270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002980)=@newtfilter={0x888, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x858, 0x2, [@TCA_FLOW_POLICE={0x854, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0xffff0492, 0xfffffff8, 0xb, 0x1, 0x100, 0x6, 0x40, 0xdf25, 0xb, 0x4, 0x0, 0x7fff, 0xf67, 0x1, 0x0, 0x6, 0x4, 0x8, 0x3, 0xe82, 0xc, 0x6, 0xffff, 0x9, 0x10, 0x5, 0xe64, 0x5, 0x7, 0x8, 0x5, 0x1a501625, 0x95b, 0x568, 0x5, 0x0, 0x9, 0x1ff, 0xd4e8, 0x3bd, 0x5, 0xb, 0x3, 0x100, 0x81, 0xffffffff, 0x8000, 0x1, 0xdf1, 0x8, 0x22a3, 0x46d, 0x8000, 0x4, 0x7, 0x9aa, 0x3, 0x6, 0x8, 0x1ff, 0x2, 0x78, 0x2, 0x1, 0x3, 0x2, 0xffffffff, 0x4b0, 0x10000, 0x6, 0xfffffff5, 0x6190, 0x0, 0x7, 0x1, 0xf1ba, 0x7e46a352, 0x3, 0x62, 0xfff, 0x4, 0x6, 0x8, 0x101, 0x8, 0x9, 0xea2, 0x5, 0x10001, 0x10b, 0x2, 0x2, 0x735aa827, 0x0, 0xe3, 0x7ff, 0xcaa, 0x3, 0x90, 0x10, 0xbbc2, 0x5, 0x8, 0x5, 0x100, 0x10001, 0xbb49, 0x8001, 0x1, 0x9d6, 0x1, 0x16000000, 0xffff, 0xfffffffc, 0xc, 0x80000000, 0x4, 0x401, 0x0, 0x8, 0x6, 0x6, 0x2e11, 0x8000, 0xee, 0xa, 0x2, 0x8, 0x9, 0x0, 0xf, 0x7, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x8004, 0xd825, 0x10e, 0x4, 0x0, 0xef, 0x30000, 0x456fe48d, 0x80000000, 0x781b, 0x101, 0x8, 0x40, 0x8, 0x5, 0x6, 0xffffff01, 0xede, 0x7, 0x7b, 0x401, 0x7, 0xf, 0x4, 0x1000, 0x2, 0x5, 0xa1, 0xff, 0x10, 0x7fff, 0x8, 0x4, 0x0, 0xfffffff7, 0xa, 0x1, 0x4, 0xfffffffc, 0x2, 0x2, 0x2, 0x6, 0x8, 0x5, 0x2, 0x591, 0x0, 0x1, 0x7, 0xa542f845, 0x5, 0x4, 0x9, 0xfffffffa, 0xa, 0x4, 0x5, 0x10000, 0x0, 0x3ff, 0x6, 0x0, 0x5, 0x5, 0xe, 0x6, 0xb, 0x2, 0x8, 0x9, 0x4, 0x80, 0xb6, 0x81, 0x3b, 0x8f, 0x5, 0x10000000, 0xfffffffe, 0xc, 0x9, 0xffff, 0x34c0, 0xf547, 0x5, 0xe9a3, 0xff, 0x1000, 0x9, 0x4, 0x6, 0x81, 0x7, 0xfff, 0x93b1, 0x8, 0xffffff37, 0x5d74, 0x7, 0x3, 0x20, 0x7fff, 0x6db, 0x8, 0x8, 0xe, 0xff80, 0x800, 0x4b, 0x4, 0x9, 0x4, 0xdca9, 0x4, 0x3, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7fffffff, 0xffff, 0x5, 0x69, 0x13, 0xfff, 0xb, 0x6, 0xff, 0x6, 0x6, 0x3, 0x7, 0x9, 0x8, 0x9, 0x43, 0x77fc, 0x2, 0x1, 0x80000001, 0x8001, 0x69, 0x6, 0x708bea95, 0x3, 0x3, 0x67000000, 0x1ff, 0x9, 0x7fff, 0x4, 0x9, 0x1def, 0x0, 0x1ff, 0xdc58, 0x6, 0x80000001, 0x4, 0x1, 0x7, 0x2, 0x5, 0xa, 0x80000000, 0x6ee, 0x3, 0x4, 0x100, 0x80000000, 0x6, 0x9, 0xffffe33e, 0x69c8, 0xb6, 0x8, 0x3, 0xa0, 0x9, 0x1ad, 0x2483, 0x1, 0x3, 0x992e, 0x3, 0x3ff, 0x81, 0xac, 0x0, 0x9f, 0x1000, 0x7f, 0x8, 0x9, 0x2, 0x6, 0x3, 0x7, 0xd, 0x2, 0x1, 0xfffffff9, 0xfffffe00, 0x2, 0x0, 0x9, 0x0, 0xf, 0x7, 0x10, 0x3, 0x80000c7e, 0x0, 0x9, 0x4, 0x6, 0x9, 0x69e0, 0xff800, 0x1048, 0xb54, 0x10001, 0x80, 0xddcc, 0x8, 0x7f, 0x7ff, 0x8, 0x6, 0x6, 0xe8, 0x2, 0xffffffff, 0x0, 0xfffff001, 0x7, 0xaec, 0x0, 0x5, 0x2ae, 0x3, 0x40, 0x160c000, 0x7, 0xfce, 0x6, 0xe56, 0x7ff, 0x3, 0xf6, 0xa, 0x3, 0x7, 0x10001, 0x3ff, 0x7, 0x2, 0xfffffff8, 0x8, 0x9, 0x0, 0x1000, 0xfffffff8, 0x8, 0x7ff, 0x7, 0x8, 0x9, 0x7, 0x1, 0x79, 0x6, 0x100, 0x56, 0x5, 0x1, 0x6, 0x82, 0x1, 0x8, 0x400, 0x1, 0x1, 0x0, 0x8, 0x2, 0xffff, 0x0, 0x7, 0x2, 0x8, 0xe09, 0x7, 0x18fca8aa, 0xd6d, 0x1600000, 0x0, 0x4, 0x3, 0x7, 0x7fff, 0x10000, 0x7, 0x8, 0x400, 0x31, 0x0, 0x4, 0x2, 0x1, 0x8, 0x7, 0x10001, 0x4, 0x0, 0xa, 0xfff, 0x8, 0x8, 0x1, 0x3, 0xfffffffd, 0x5, 0x4, 0x1ff, 0x639, 0x1ff, 0x5, 0x2, 0xe, 0x1e41, 0x8, 0x800, 0xfff, 0xdc2, 0x3, 0xffffffff, 0x80000000, 0x5, 0x9, 0x4, 0x4, 0x4, 0x3, 0x1, 0x6, 0x1, 0x4, 0xd, 0xa, 0x5a6, 0x1, 0xc, 0xb, 0x8, 0x6, 0x8, 0x4, 0x8, 0x8, 0x3, 0x276, 0x5, 0xef7, 0x8, 0x5, 0x4, 0x1, 0x7, 0x1, 0x91, 0x7, 0x8, 0x67]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff9, 0x1, 0xcc, 0x4, 0x5, {0x6, 0x2, 0x12, 0x7, 0xffbf, 0x7}, {0x3, 0x0, 0x6, 0x8, 0xf9, 0x7}, 0xfff, 0x5, 0x2}}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m42.689751203s ago: executing program 7 (id=2272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3m41.821357195s ago: executing program 35 (id=2272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m14.291109686s ago: executing program 0 (id=2929): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35c", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m13.847621592s ago: executing program 0 (id=2935): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) close(r1) ioctl$TCFLSH(r0, 0x540b, 0x0) 2m13.546971218s ago: executing program 0 (id=2940): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x7, 0x0, '\x00', {0x7ff, 0xa2a, 0x4, 0x8000, r2, r3, 0x1000, '\x00', 0x1, 0x2, 0xb4e7, 0x2, {0x8003, 0x8}, {0x6, 0x10001}, {0x100000000, 0x7}, {0x4, 0xa00}, 0x8000, 0xb, 0x4, 0x3}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) 2m13.222388996s ago: executing program 0 (id=2944): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 2m13.042040951s ago: executing program 0 (id=2946): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x548) openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 2m12.502355951s ago: executing program 0 (id=2951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x28, 0xc, 0x0, 0x0, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x11, 0x0, 0x0, 0xb0d, 0x3, 0x34, 0x3e, 0x2, '\x00', 0x7, 0x3}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x8, 0x10}) 2m12.199115174s ago: executing program 36 (id=2951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x28, 0xc, 0x0, 0x0, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x11, 0x0, 0x0, 0xb0d, 0x3, 0x34, 0x3e, 0x2, '\x00', 0x7, 0x3}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x8, 0x10}) 3.801176009s ago: executing program 9 (id=3874): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6, 0x2, 0x1000, 0x4}, &(0x7f00000001c0), &(0x7f0000000040)) ppoll(&(0x7f0000000000)=[{r0, 0xa100}, {r2, 0x8444}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) 3.742486312s ago: executing program 3 (id=3875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x9, 0x0, 0x1, r2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.342799255s ago: executing program 3 (id=3876): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'hsr0\x00', 0xc}) 3.341896184s ago: executing program 9 (id=3886): ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x50}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x20, 0x2000, 0x0) 3.221595466s ago: executing program 9 (id=3877): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x3fffe, 0x2, 0x0, {0x0, r3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2a, 0x0, 0x0, 0x1000004}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.010355427s ago: executing program 9 (id=3879): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x86b2, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 2.719205467s ago: executing program 8 (id=3881): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, 0x0, 0x0) 2.405516661s ago: executing program 6 (id=3882): syz_open_dev$dri(0x0, 0x1f, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.401622562s ago: executing program 8 (id=3883): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000004c0)='B', 0x1}], 0x1, 0x0) 2.33116474s ago: executing program 3 (id=3884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.282195268s ago: executing program 8 (id=3885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 2.202345197s ago: executing program 6 (id=3887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x3}}}, 0x3a) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x2, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}]}, 0x28}}, 0x8040) 2.150780742s ago: executing program 8 (id=3888): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044) 2.10371714s ago: executing program 6 (id=3889): openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 2.082855016s ago: executing program 3 (id=3890): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') syz_io_uring_complete(r0) pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 2.026156079s ago: executing program 9 (id=3891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.687321248s ago: executing program 6 (id=3892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8094) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.583680253s ago: executing program 1 (id=3893): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0xdb2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.354401907s ago: executing program 6 (id=3894): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x6, 0xffffffff}, 0x10) sendmsg$key(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={0x0, 0x78}}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) 1.27341233s ago: executing program 1 (id=3895): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 1.13283668s ago: executing program 6 (id=3896): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'hsr0\x00', 0xc}) 962.448748ms ago: executing program 3 (id=3897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x0, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 830.830706ms ago: executing program 9 (id=3898): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 830.584242ms ago: executing program 1 (id=3899): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x5, 0x5, 0x2, [0x0, 0x0, 0x0, 0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 662.786611ms ago: executing program 8 (id=3900): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r2) 486.562683ms ago: executing program 1 (id=3901): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000500), 0x12) 331.139751ms ago: executing program 3 (id=3902): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) 190.68859ms ago: executing program 1 (id=3903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x89}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4010) 84.828153ms ago: executing program 8 (id=3904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3e8, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 0s ago: executing program 1 (id=3905): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000640)=""/201, 0xc9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) kernel console output (not intermixed with test programs): 424.835496][ T5930] usb 9-1: Using ep0 maxpacket: 16 [ 424.846553][ T5930] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 424.872423][ T5930] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.885612][ T5930] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.901621][ T5930] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.920752][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.937006][ T5930] usb 9-1: Product: syz [ 424.952000][ T5930] usb 9-1: Manufacturer: syz [ 424.957043][ T5930] usb 9-1: SerialNumber: syz [ 425.417515][ T5930] usb 9-1: 0:2 : does not exist [ 425.452694][ T5927] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 425.613629][ T5927] usb 7-1: Using ep0 maxpacket: 8 [ 425.626172][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.647355][ T5927] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 425.658410][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.672112][ T5927] usb 7-1: config 0 descriptor?? [ 425.688398][ T5927] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 426.286936][ T120] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 426.442528][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 426.463090][ T120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.479030][ T120] usb 2-1: config 0 has no interfaces? [ 426.497888][ T5930] usb 9-1: USB disconnect, device number 5 [ 426.512681][ T120] usb 2-1: New USB device found, idVendor=045e, idProduct=043a, bcdDevice=f5.69 [ 426.530456][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.541807][ T120] usb 2-1: Product: syz [ 426.563614][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.591917][ T120] usb 2-1: Manufacturer: syz [ 426.614699][ T120] usb 2-1: SerialNumber: syz [ 426.628672][ T120] usb 2-1: config 0 descriptor?? [ 427.149155][ T5927] usb 7-1: USB disconnect, device number 15 [ 427.673579][ T43] usb 2-1: USB disconnect, device number 42 [ 427.752775][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2673'. [ 427.899181][T18634] loop6: detected capacity change from 0 to 7 [ 427.952825][T18634] Dev loop6: unable to read RDB block 7 [ 427.964515][T18634] loop6: unable to read partition table [ 427.970500][T18634] loop6: partition table beyond EOD, truncated [ 427.977373][T18634] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.172441][ T5902] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 428.405267][ T5902] usb 9-1: Using ep0 maxpacket: 16 [ 428.412712][ T5902] usb 9-1: config 4 has an invalid interface number: 176 but max is 0 [ 428.492579][ T5902] usb 9-1: config 4 has no interface number 0 [ 428.525831][ T5902] usb 9-1: config 4 interface 176 has no altsetting 0 [ 428.566333][ T5902] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 428.589110][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.618018][ T5902] usb 9-1: Product: syz [ 428.628248][ T5902] usb 9-1: Manufacturer: syz [ 428.640920][ T5902] usb 9-1: SerialNumber: syz [ 428.688155][ T5902] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 429.105885][ T5902] usb 9-1: USB disconnect, device number 6 [ 429.112167][ T76] usb 9-1: Failed to submit usb control message: -71 [ 429.132790][ T76] usb 9-1: unable to send the bmi data to the device: -71 [ 429.139985][ T76] usb 9-1: unable to get target info from device [ 429.152887][ T43] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 429.167877][ T76] usb 9-1: could not get target info (-71) [ 429.175315][ T76] usb 9-1: could not probe fw (-71) [ 429.235072][T18659] usb usb8: usbfs: process 18659 (syz.6.2684) did not claim interface 11 before use [ 429.312788][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 429.320630][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 429.340645][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 429.352643][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.360905][ T43] usb 1-1: Product: syz [ 429.368158][ T43] usb 1-1: Manufacturer: syz [ 429.373507][ T43] usb 1-1: SerialNumber: syz [ 429.383919][ T43] usb 1-1: config 0 descriptor?? [ 429.394171][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 429.403531][ T43] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 429.588980][T18669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2687'. [ 429.652403][ T5930] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 429.822718][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 429.835397][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.864399][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.900982][ T5930] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 429.924420][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.955361][ T5930] usb 7-1: config 0 descriptor?? [ 430.016177][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 430.425448][ T5930] savu 0003:1E7D:2D5A.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 430.666613][ T43] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 430.691706][ T43] em28xx 1-1:0.0: board has no eeprom [ 430.798303][ T43] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 430.832341][ T43] em28xx 1-1:0.0: dvb set to bulk mode. [ 430.853857][ T5925] em28xx 1-1:0.0: Binding DVB extension [ 430.881187][ T43] usb 1-1: USB disconnect, device number 53 [ 430.913156][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 431.053480][ T5925] em28xx 1-1:0.0: Registering input extension [ 431.074757][ T43] em28xx 1-1:0.0: Closing input extension [ 431.115907][ T43] em28xx 1-1:0.0: Freeing device [ 431.594427][ T5924] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 431.772334][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 431.811721][ T5924] usb 4-1: config 4 has an invalid interface number: 176 but max is 0 [ 431.829338][ T5924] usb 4-1: config 4 has no interface number 0 [ 431.832516][ T5902] usb 7-1: reset high-speed USB device number 16 using dummy_hcd [ 431.852467][ T5924] usb 4-1: config 4 interface 176 has no altsetting 0 [ 431.889405][ T5924] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 431.908875][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.937563][ T5924] usb 4-1: Product: syz [ 431.948122][ T5924] usb 4-1: Manufacturer: syz [ 431.957774][ T5924] usb 4-1: SerialNumber: syz [ 432.000973][ T5924] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 432.268784][ T3452] usb 4-1: Failed to submit usb control message: -71 [ 432.276419][ T5924] usb 4-1: USB disconnect, device number 33 [ 432.300804][ T3452] usb 4-1: unable to send the bmi data to the device: -71 [ 432.319457][ T3452] usb 4-1: unable to get target info from device [ 432.334034][ T3452] usb 4-1: could not get target info (-71) [ 432.348110][ T3452] usb 4-1: could not probe fw (-71) [ 432.854923][ T5924] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 432.917413][T18743] syzkaller1: entered promiscuous mode [ 432.929111][T18743] syzkaller1: entered allmulticast mode [ 432.951735][ T5902] usb 7-1: device descriptor read/64, error -71 [ 433.024173][ T5924] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.051429][ T5924] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.088946][ T5924] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.110934][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.121778][ T5924] usb 9-1: SerialNumber: syz [ 433.203466][ T5902] usb 7-1: reset high-speed USB device number 16 using dummy_hcd [ 433.233286][ T5902] usb 7-1: device reset changed ep0 maxpacket size! [ 433.262725][ T5930] usb 7-1: USB disconnect, device number 16 [ 433.350850][ T5924] usb 9-1: 0:2 : does not exist [ 433.359467][ T5924] usb 9-1: unit 255 not found! [ 433.366053][ T5925] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 433.380954][ T5924] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 433.407113][ T5924] usb 9-1: USB disconnect, device number 7 [ 433.432438][ T5930] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 433.456103][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.522983][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 433.540532][ T5925] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 433.563341][T18751] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2717'. [ 433.569831][ T5925] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.588490][ T5925] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.598794][ T5925] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.611401][ T5925] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.615480][ T5930] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.633470][ T5925] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.633501][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.652181][ T5930] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 433.672709][ T5930] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.681751][ T5930] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 433.694376][ T5930] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 433.729153][ T5930] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 433.749419][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 433.772300][ T5930] usb 7-1: Product: syz [ 433.776555][ T5930] usb 7-1: Manufacturer: syz [ 433.782791][ T5902] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 433.813115][ T5930] cdc_wdm 7-1:1.0: skipping garbage [ 433.818401][ T5930] cdc_wdm 7-1:1.0: skipping garbage [ 433.830064][ T5930] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 433.837712][ T5930] cdc_wdm 7-1:1.0: Unknown control protocol [ 433.875935][ T5925] usb 1-1: GET_CAPABILITIES returned 0 [ 433.881695][ T5925] usbtmc 1-1:16.0: can't read capabilities [ 433.960069][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.970404][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 433.980924][ T5902] usb 4-1: config 1 has no interface number 0 [ 433.987188][ T5902] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.006593][ T5902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.042347][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.050431][ T5902] usb 4-1: Product: syz [ 434.064858][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 434.082398][ T5902] usb 4-1: Manufacturer: syz [ 434.087076][ T5902] usb 4-1: SerialNumber: syz [ 434.123582][ T5902] usb 4-1: selecting invalid altsetting 1 [ 434.139345][ T5927] usb 1-1: USB disconnect, device number 54 [ 434.224126][ T43] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 434.246274][ T43] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 434.262840][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 434.273197][ T9] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 434.293695][ T9] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 434.310021][ T9] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 434.334855][ T9] usb 2-1: config 250 has no interface number 0 [ 434.341295][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 434.362318][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 434.385777][ T9] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.396793][ T9] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 434.408617][ T9] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 434.422838][ T9] usb 2-1: config 250 interface 228 has no altsetting 0 [ 434.432497][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 434.441670][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 434.464476][ C0] cdc_wdm 7-1:1.0: Unexpected error -71 [ 434.466042][ T43] usb 7-1: USB disconnect, device number 17 [ 434.472009][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 434.482741][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 434.488857][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 434.502981][ T9] usb 2-1: Product: syz [ 434.507257][ T9] usb 2-1: SerialNumber: syz [ 434.522184][ T9] hub 2-1:250.228: bad descriptor, ignoring hub [ 434.528614][ T9] hub 2-1:250.228: probe with driver hub failed with error -5 [ 434.541870][ T5902] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 434.549339][ T5902] cdc_ncm 4-1:1.1: bind() failure [ 434.570636][ T5902] usb 4-1: USB disconnect, device number 34 [ 434.729592][ T9] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 435.410662][T18755] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 435.449116][ T5924] IPVS: starting estimator thread 0... [ 435.449112][T18781] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 435.462460][ T5902] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 435.552391][T18783] IPVS: using max 29 ests per chain, 69600 per kthread [ 435.627730][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 435.636250][ T5902] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 435.657470][ T5902] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.709708][ T5902] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.754214][ T5902] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.805273][ T5902] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.857488][ T5902] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.879480][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.119036][ T5902] usb 7-1: usb_control_msg returned -32 [ 436.154634][ T5924] usb 2-1: USB disconnect, device number 43 [ 436.170027][ T5902] usbtmc 7-1:16.0: can't read capabilities [ 436.181161][ T5924] usblp0: removed [ 437.245144][T18808] syzkaller0: entered promiscuous mode [ 437.262413][T18808] syzkaller0: entered allmulticast mode [ 437.271303][T18811] netlink: 'syz.0.2738': attribute type 5 has an invalid length. [ 437.288202][T18816] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 437.352786][ T5924] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 437.416962][ T43] usb 7-1: USB disconnect, device number 18 [ 437.507821][ T5924] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.519163][ T5924] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 437.550208][ T5924] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.572420][ T5924] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 437.584155][ T5924] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 437.598047][ T5924] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.608373][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.616744][ T5924] usb 9-1: Product: syz [ 437.621125][ T5924] usb 9-1: Manufacturer: syz [ 437.644699][ T5924] cdc_wdm 9-1:1.0: skipping garbage [ 437.650123][ T5924] cdc_wdm 9-1:1.0: skipping garbage [ 437.667809][ T5924] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 437.674562][ T5924] cdc_wdm 9-1:1.0: Unknown control protocol [ 438.230239][ T5930] usb 9-1: USB disconnect, device number 8 [ 438.236439][ C1] cdc_wdm 9-1:1.0: Unexpected error -71 [ 438.242456][ C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 438.612364][ T120] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 438.792644][ T120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.829204][ T120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.849753][ T120] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.872569][ T120] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.912396][ T120] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.962753][ T120] usb 7-1: config 0 descriptor?? [ 439.389988][ T120] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 439.462320][ T120] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 440.179790][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.186388][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.309920][ T43] usb 7-1: USB disconnect, device number 19 [ 443.244234][T18870] syzkaller1: entered promiscuous mode [ 443.262339][T18870] syzkaller1: entered allmulticast mode [ 444.123083][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 444.123105][ T30] audit: type=1326 audit(1750415223.707:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18890 comm="syz.3.2769" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 445.462488][ T5924] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 445.612499][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 445.632763][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.676616][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.710480][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.737267][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.812520][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.857821][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.099755][ T5930] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 446.132566][ T5924] usb 2-1: GET_CAPABILITIES returned 0 [ 446.148345][ T5924] usbtmc 2-1:16.0: can't read capabilities [ 446.282416][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 446.294209][ T5930] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 446.311038][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.332304][ T5930] usb 7-1: Product: syz [ 446.336556][ T5930] usb 7-1: Manufacturer: syz [ 446.370389][ T5930] usb 7-1: SerialNumber: syz [ 446.391142][ T5930] usb 7-1: config 0 descriptor?? [ 446.429245][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.438439][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.447590][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.458399][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.467560][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.476726][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.487966][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.497128][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.506279][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.516020][ T5902] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 446.556344][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.565537][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.574689][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.589371][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.598547][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.607680][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.626910][ T5930] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 446.640168][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.683028][ T5924] usb 2-1: USB disconnect, device number 44 [ 446.715528][ T5902] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 446.732610][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.767030][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.797111][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 446.834652][ T5902] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 446.872562][ T5902] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 446.892808][ T5902] usb 1-1: Manufacturer: syz [ 446.913589][ T5902] usb 1-1: config 0 descriptor?? [ 446.950259][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2792'. [ 447.352610][ T5902] appleir 0003:05AC:8243.003A: unknown main item tag 0x0 [ 447.381227][ T5902] appleir 0003:05AC:8243.003A: No inputs registered, leaving [ 447.412685][ T5902] appleir 0003:05AC:8243.003A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 447.461669][T18955] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 447.610652][T18955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.660968][T18961] bond3: (slave gretap1): making interface the new active one [ 447.675961][T18961] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 447.844910][ T5930] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 447.864546][ T5930] usb 7-1: USB disconnect, device number 20 [ 448.491095][T18978] loop2: detected capacity change from 0 to 7 [ 448.518513][T18978] Dev loop2: unable to read RDB block 7 [ 448.531736][T18978] loop2: unable to read partition table [ 448.539401][T18978] loop2: partition table beyond EOD, truncated [ 448.547401][T18978] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 448.628065][T18982] tipc: Started in network mode [ 448.642399][T18982] tipc: Node identity ffffa848, cluster identity 4711 [ 448.672158][T18982] tipc: Node number set to 4294944840 [ 449.343875][ T5930] usb 1-1: USB disconnect, device number 55 [ 451.434520][ T5927] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 451.614081][ T5927] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 451.642095][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.659177][ T5927] usb 7-1: config 0 descriptor?? [ 451.679858][ T5927] gspca_main: spca508-2.14.0 probing 8086:0110 [ 451.909045][ T5927] gspca_spca508: reg_read err -71 [ 451.926308][ T5927] gspca_spca508: reg_read err -71 [ 451.947856][ T5927] gspca_spca508: reg_read err -71 [ 451.960658][ T5927] gspca_spca508: reg_read err -71 [ 451.990098][ T5927] gspca_spca508: reg_read err -71 [ 452.007899][ T5927] gspca_spca508: reg write: error -71 [ 452.032564][ T5927] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 452.070702][ T5927] usb 7-1: USB disconnect, device number 21 [ 453.094274][ T5927] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 453.294686][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.312847][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.322058][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.339150][ T5927] usb 4-1: Product: syz [ 453.344265][ T5927] usb 4-1: Manufacturer: syz [ 453.348916][ T5927] usb 4-1: SerialNumber: syz [ 453.466900][T19116] netlink: 2024 bytes leftover after parsing attributes in process `syz.8.2857'. [ 453.479188][T19116] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.2857'. [ 453.496175][T19116] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.2857'. [ 453.542780][ T5924] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 453.712550][ T5924] usb 7-1: Using ep0 maxpacket: 8 [ 453.730911][ T5924] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 453.748199][ T5924] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.767801][ T5924] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.788005][ T5924] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.822348][ T5924] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.897546][ T5924] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.925287][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.175466][ T5924] usb 7-1: GET_CAPABILITIES returned 0 [ 454.211718][ T5924] usbtmc 7-1:16.0: can't read capabilities [ 454.374646][ T5927] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 454.391119][ T5927] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 454.409525][ T5927] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 454.494741][T19114] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 454.501887][ T9] usb 7-1: USB disconnect, device number 22 [ 454.511168][T19140] usbtmc 7-1:16.0: usb_control_msg returned -19 [ 454.790770][T19146] netlink: 'syz.1.2869': attribute type 9 has an invalid length. [ 454.844302][ T5927] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 454.950138][ T5927] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 454.978502][ T5927] usb 4-1: USB disconnect, device number 35 [ 454.993712][ T5927] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 456.302653][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 456.492666][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 456.502114][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.513763][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.525391][ T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 456.536507][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.548255][ T9] usb 1-1: config 0 descriptor?? [ 457.002306][T19200] netlink: 'syz.8.2891': attribute type 1 has an invalid length. [ 457.183237][T19200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.392061][ T9] letsketch 0003:6161:4D15.003B: Device info: ¥뱱霚푬쀓⠋ｴ愞팕䧘룸꧊Ɍ彷꫕燵嵴í›èª‘â†î˜ì­´ã¢é¡ºê¯µá£¸â½â½¿ì´¸èª™áŒ©ä†£á¿ªïž©îŽŠãš»é«‰æ¡ˆÌ…㲘簋䳚仴ꉗ挖䰽ﴨ픒狧￪婙䖰턖ç¨ç™±æ®«á­¯ï¯“꽾識턲蠇턪똕 [ 457.598984][ T9] letsketch 0003:6161:4D15.003B: Device info: á‘” [ 457.808767][ T9] letsketch 0003:6161:4D15.003B: Device info: à° [ 458.047944][ T9] usb 1-1: Max retries (5) exceeded reading string descriptor 1 [ 458.064219][ T9] letsketch 0003:6161:4D15.003B: probe with driver letsketch failed with error -71 [ 458.096627][ T9] usb 1-1: USB disconnect, device number 56 [ 458.272520][ T5930] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 458.443538][ T5930] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 458.475833][ T5930] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 458.522389][ T5930] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 458.554189][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.579946][ T5930] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 458.622364][ T5930] usb 4-1: Manufacturer: syz [ 458.629094][ T5930] usb 4-1: SerialNumber: syz [ 458.831910][T19241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2908'. [ 459.084272][T19225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.118590][T19225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.173496][ T5930] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 459.200555][ T5930] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 459.234095][ T5930] usb 4-1: USB disconnect, device number 36 [ 459.387141][ T5924] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 459.474581][T19261] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2916'. [ 459.584663][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 459.599132][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.632722][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.649878][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.660522][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.669751][T19265] loop2: detected capacity change from 0 to 7 [ 459.677757][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 459.679357][ T5924] usb 1-1: Product: syz [ 459.690369][ T5924] usb 1-1: Manufacturer: syz [ 459.695640][ T5924] usb 1-1: SerialNumber: syz [ 459.699455][T19265] Dev loop2: unable to read RDB block 7 [ 459.720576][T19265] loop2: unable to read partition table [ 459.742515][T19265] loop2: partition table beyond EOD, truncated [ 459.762270][T19265] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 459.872666][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.891573][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.909196][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 459.922613][ T5924] usb 1-1: 0:2 : does not exist [ 459.940883][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.952470][ T5924] usb 1-1: unit 9 not found! [ 459.970247][ T9] usb 7-1: config 0 descriptor?? [ 459.978822][ T5924] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 460.023016][ T5924] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 460.104335][ T5924] usb 1-1: USB disconnect, device number 57 [ 460.180081][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.437652][ T9] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 460.462954][ T9] cp2112 0003:10C4:EA90.003C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 460.629972][ T9] cp2112 0003:10C4:EA90.003C: Part Number: 0x82 Device Version: 0xFE [ 461.160891][T19297] loop6: detected capacity change from 0 to 7 [ 461.199126][T19297] Dev loop6: unable to read RDB block 7 [ 461.226244][T19297] loop6: AHDI p1 p2 p3 [ 461.230534][T19297] loop6: partition table partially beyond EOD, truncated [ 461.290503][T19297] loop6: p1 start 926365495 is beyond EOD, truncated [ 461.329429][T19297] loop6: p2 size 116 extends beyond EOD, truncated [ 461.338535][T19299] kvm: kvm [19298]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x9 [ 461.436862][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 461.459433][ T9] usb 7-1: USB disconnect, device number 23 [ 462.306860][ T5927] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 462.512634][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 462.568501][ T5927] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 462.628817][ T5927] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 462.663070][ T5927] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.712284][ T5927] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.721433][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.733784][ T5927] usb 9-1: Product: syz [ 462.751964][ T5927] usb 9-1: Manufacturer: syz [ 462.762707][ T5927] usb 9-1: SerialNumber: syz [ 463.216254][ T5927] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 463.240096][T19346] ÿ: renamed from bond_slave_0 [ 464.205611][ T5927] usb 9-1: current rate 9338425 is different from the runtime rate 9338507 [ 464.239979][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.250852][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.260844][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.270523][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.280059][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.530495][ T5927] usb 9-1: USB disconnect, device number 9 [ 464.740040][T19371] input: syz1 as /devices/virtual/input/input48 [ 465.061374][T19366] chnl_net:caif_netlink_parms(): no params data found [ 465.492516][T19387] kvm: user requested TSC rate below hardware speed [ 465.617205][T19366] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.638113][T19366] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.663003][T19366] bridge_slave_0: entered allmulticast mode [ 465.670964][T19366] bridge_slave_0: entered promiscuous mode [ 465.730247][T19366] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.784063][T19366] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.791408][T19366] bridge_slave_1: entered allmulticast mode [ 465.822021][T19366] bridge_slave_1: entered promiscuous mode [ 465.888174][T19406] macvlan0: entered allmulticast mode [ 465.896751][T19406] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 465.907322][T19406] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 465.956088][T19406] team0: Port device macvlan0 added [ 466.027749][T19366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.070939][T19366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.242512][T19366] team0: Port device team_slave_0 added [ 466.259403][T19366] team0: Port device team_slave_1 added [ 466.322670][ T5848] Bluetooth: hci2: command tx timeout [ 466.373976][T19366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.381056][T19366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.416578][T19366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.430624][T19366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.439618][T19366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.466976][T19366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.614125][T19366] hsr_slave_0: entered promiscuous mode [ 466.651982][T19366] hsr_slave_1: entered promiscuous mode [ 466.663659][T19366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.671312][T19366] Cannot create hsr debugfs directory [ 467.417314][T19366] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 467.497094][T19366] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 467.567093][T19366] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 467.612020][T19366] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.920930][T19366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.958269][T19366] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.982632][T17131] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.989898][T17131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.002722][ T5902] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 468.039174][T17131] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.046541][T17131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.063046][ T5930] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 468.133097][ T5894] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 468.164646][ T5902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.196177][ T5902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.220009][ T5902] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 468.237624][ T5930] usb 7-1: Using ep0 maxpacket: 8 [ 468.264108][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.274144][ T5930] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.281057][T19366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.289618][ T5930] usb 7-1: config 0 has no interface number 0 [ 468.298712][ T5930] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.312986][ T5902] usb 9-1: config 0 descriptor?? [ 468.325221][ T5930] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 468.364571][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 468.376813][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.395793][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.403433][ T5848] Bluetooth: hci2: command tx timeout [ 468.411010][ T5930] usb 7-1: config 0 descriptor?? [ 468.416906][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 468.436572][ T5930] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 468.463955][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.494649][ T5894] usb 4-1: config 0 descriptor?? [ 468.514987][T19366] veth0_vlan: entered promiscuous mode [ 468.535123][ T5894] hub 4-1:0.0: USB hub found [ 468.566944][T19366] veth1_vlan: entered promiscuous mode [ 468.635445][ T5924] usb 7-1: USB disconnect, device number 24 [ 468.665811][T19366] veth0_macvtap: entered promiscuous mode [ 468.688703][T19366] veth1_macvtap: entered promiscuous mode [ 468.708109][ T5894] hub 4-1:0.0: 1 port detected [ 468.727856][T19366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.761766][ T5902] cp2112 0003:10C4:EA90.003D: unknown main item tag 0x0 [ 468.771588][T19366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.801655][T19366] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.813439][ T5902] cp2112 0003:10C4:EA90.003D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 468.826884][T19366] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.835880][T19366] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.845009][T19366] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.955352][ T5902] cp2112 0003:10C4:EA90.003D: Part Number: 0x82 Device Version: 0xFE [ 469.065564][T17125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.104538][T17125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.174939][T17129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.192484][T17129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.315996][ T5930] hub 4-1:0.0: activate --> -90 [ 469.555148][T19470] loop2: detected capacity change from 0 to 7 [ 469.583860][T19470] Dev loop2: unable to read RDB block 7 [ 469.589528][T19470] loop2: unable to read partition table [ 469.609516][T19470] loop2: partition table beyond EOD, truncated [ 469.638427][T19470] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.846706][ T5924] usb 9-1: USB disconnect, device number 10 [ 469.925860][ T5930] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 469.936919][ T43] usb 4-1: USB disconnect, device number 37 [ 469.967463][ T5930] usb 4-1-port1: attempt power cycle [ 470.262530][ T5894] IPVS: starting estimator thread 0... [ 470.355709][T19489] IPVS: using max 27 ests per chain, 64800 per kthread [ 470.491663][ T5848] Bluetooth: hci2: command tx timeout [ 470.564185][T19495] netlink: 'syz.6.3006': attribute type 1 has an invalid length. [ 470.822318][ T5924] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 470.940578][T19501] bond2: (slave bridge1): making interface the new active one [ 470.988859][T19501] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 471.032786][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 471.050400][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.090936][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.146155][ T5924] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 471.166987][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.227542][ T5924] usb 4-1: config 0 descriptor?? [ 471.669618][ T5924] savu 0003:1E7D:2D5A.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 471.933793][ T5924] usb 4-1: USB disconnect, device number 42 [ 472.003524][ T5894] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 472.162906][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 472.173490][ T5894] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 472.183862][ T5894] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 472.202532][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 472.232414][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.244551][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 472.262303][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.293330][ T5894] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 472.332322][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.376441][ T5894] usb 2-1: config 0 descriptor?? [ 472.612522][ T5848] Bluetooth: hci2: command tx timeout [ 472.622791][ T5894] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 472.742873][ T5894] usb 2-1: USB disconnect, device number 45 [ 472.800345][ T5894] usblp0: removed [ 472.935276][T19534] input: syz1 as /devices/virtual/input/input49 [ 473.162433][ T5894] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 473.322581][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 473.338873][ T5894] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 473.372681][ T5894] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 473.391644][ T5894] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 473.422707][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.482742][T19549] ÿ: renamed from bond_slave_0 (while UP) [ 473.494083][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 473.532337][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.566106][ T5894] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 473.567364][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3027'. [ 473.622994][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.673804][ T5894] usb 2-1: config 0 descriptor?? [ 473.909880][ T5894] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 474.468854][ T5924] usb 2-1: USB disconnect, device number 46 [ 474.486643][ T5924] usblp0: removed [ 474.504499][T19579] input: syz0 as /devices/virtual/input/input50 [ 475.943459][ T30] audit: type=1326 audit(1750415255.507:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7fc00000 [ 476.042292][ T5894] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 476.216564][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 476.236767][ T5894] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 476.254536][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.274884][ T5894] usb 7-1: Product: syz [ 476.284706][ T5894] usb 7-1: Manufacturer: syz [ 476.307411][ T5894] usb 7-1: SerialNumber: syz [ 476.316012][ T5894] usb 7-1: config 0 descriptor?? [ 476.616422][ T30] audit: type=1326 audit(1750415256.197:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.1.3048" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf712e539 code=0x7fc00000 [ 476.753271][ T5894] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 476.954669][ T5894] gspca_sunplus: reg_w_riv err -71 [ 477.028115][ T5894] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 477.053907][ T5894] usb 7-1: USB disconnect, device number 25 [ 477.340591][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 477.600542][T19643] loop6: detected capacity change from 0 to 7 [ 477.617420][T19643] Dev loop6: unable to read RDB block 7 [ 477.631278][T19643] loop6: AHDI p1 p2 [ 477.662581][T19643] loop6: partition table partially beyond EOD, truncated [ 477.669939][T19643] loop6: p1 start 926365495 is beyond EOD, truncated [ 477.881441][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 478.112370][ T5930] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 478.297697][ T5930] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 478.346548][ T5930] usb 9-1: config 0 has no interface number 0 [ 478.532648][ T5930] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 478.632898][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.708431][ T5930] usb 9-1: Product: syz [ 478.725897][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3073'. [ 478.742386][ T5930] usb 9-1: Manufacturer: syz [ 478.747072][ T5930] usb 9-1: SerialNumber: syz [ 478.811942][ T5930] usb 9-1: config 0 descriptor?? [ 479.508235][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3079'. [ 479.528225][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3079'. [ 479.558847][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 479.863183][T19676] netlink: 'syz.6.3076': attribute type 2 has an invalid length. [ 479.886952][ T5930] asix 9-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 479.916030][ T5930] asix 9-1:0.239: probe with driver asix failed with error -71 [ 479.931205][ T5930] usb 9-1: USB disconnect, device number 11 [ 480.206834][ T5925] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 480.413989][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 480.435367][ T5925] usb 4-1: config 0 has no interfaces? [ 480.465842][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.524668][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.551053][ T5925] usb 4-1: Product: syz [ 480.566425][ T5925] usb 4-1: Manufacturer: syz [ 480.589027][ T5925] usb 4-1: SerialNumber: syz [ 480.604642][ T5925] usb 4-1: config 0 descriptor?? [ 480.817019][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 480.919165][ T5925] usb 4-1: USB disconnect, device number 43 [ 482.373189][T19744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 482.869103][T19756] IPv4: Oversized IP packet from 127.202.26.0 [ 483.662823][ T5930] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 483.832525][ T5930] usb 9-1: Using ep0 maxpacket: 32 [ 483.882067][ T5930] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 483.921168][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.955457][ T5930] usb 9-1: Product: syz [ 483.959714][ T5930] usb 9-1: Manufacturer: syz [ 484.003794][ T5930] usb 9-1: SerialNumber: syz [ 484.025943][ T5930] usb 9-1: config 0 descriptor?? [ 484.065653][ T5930] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 484.323175][ T5894] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 484.575315][ T5894] usb 10-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 484.608497][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.636017][ T5894] usb 10-1: config 0 descriptor?? [ 484.663066][ T5894] gspca_main: spca508-2.14.0 probing 8086:0110 [ 484.688279][T19791] Failed to get privilege flags for destination (handle=0x0:0x20000) [ 484.860493][ T5894] gspca_spca508: reg_read err -32 [ 484.873081][ T5894] gspca_spca508: reg_read err -32 [ 484.886460][ T5894] gspca_spca508: reg_read err -32 [ 485.032642][ T5902] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 485.095572][ T5894] gspca_spca508: reg_read err -32 [ 485.192578][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 485.206707][ T5902] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 485.218458][ T5902] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.230520][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.243685][ T5902] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.260066][ T5902] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.290018][ T5902] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.304244][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.318286][ T5894] gspca_spca508: reg write: error -71 [ 485.325888][ T5894] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 485.362658][ T5894] usb 10-1: USB disconnect, device number 2 [ 485.461942][ T5930] gspca_stk1135: reg_w 0xf err -71 [ 485.473311][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.490191][ T5930] gspca_stk1135: Sensor write failed [ 485.495893][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.503797][ T5930] gspca_stk1135: Sensor write failed [ 485.510850][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.517528][ T5930] gspca_stk1135: Sensor read failed [ 485.523478][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.530000][ T5930] gspca_stk1135: Sensor read failed [ 485.535908][ T5930] gspca_stk1135: Detected sensor type unknown (0x0) [ 485.543235][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.549781][ T5930] gspca_stk1135: Sensor read failed [ 485.558734][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.566103][ T5902] usb 4-1: GET_CAPABILITIES returned 0 [ 485.571631][ T5902] usbtmc 4-1:16.0: can't read capabilities [ 485.577837][ T5930] gspca_stk1135: Sensor read failed [ 485.586524][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.595039][ T5930] gspca_stk1135: Sensor write failed [ 485.603796][ T5930] gspca_stk1135: serial bus timeout: status=0x00 [ 485.610176][ T5930] gspca_stk1135: Sensor write failed [ 485.619285][ T5930] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 485.639130][ T5930] usb 9-1: USB disconnect, device number 12 [ 485.752911][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 485.850148][ T5925] usb 4-1: USB disconnect, device number 44 [ 485.912574][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 485.945039][ T43] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 485.959700][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.982729][ T43] usb 7-1: Product: syz [ 485.987390][ T43] usb 7-1: Manufacturer: syz [ 486.001792][ T43] usb 7-1: SerialNumber: syz [ 486.010237][ T43] usb 7-1: config 0 descriptor?? [ 486.027433][ T43] gspca_main: se401-2.14.0 probing 047d:5003 [ 486.408972][T17121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.428797][ T43] gspca_se401: Frame size: 0x2 1/4th janggu [ 486.447294][ T43] gspca_se401: Frame size: 0x127 bayer [ 486.468922][ T43] gspca_se401: Frame size: 256x0 bayer [ 486.477443][ T43] gspca_se401: Frame size: 0x0 1/16th janggu [ 486.492384][ T43] gspca_se401: Frame size: 0x4 bayer [ 486.593790][T17121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.663044][ T43] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51 [ 486.711671][ T43] usb 7-1: USB disconnect, device number 26 [ 486.801141][T17121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.995882][T17121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.512961][T17121] bridge_slave_1: left allmulticast mode [ 487.541812][T17121] bridge_slave_1: left promiscuous mode [ 487.582618][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.681024][T17121] bridge_slave_0: left allmulticast mode [ 487.722728][T17121] bridge_slave_0: left promiscuous mode [ 487.728631][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.742642][ T5930] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 487.932652][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 487.959698][T19855] loop2: detected capacity change from 0 to 3 [ 487.995173][T19855] ldm_validate_privheads(): Disk read failed. [ 488.041720][T19855] Dev loop2: unable to read RDB block 3 [ 488.061740][T19855] loop2: unable to read partition table [ 488.087330][T19855] loop2: partition table beyond EOD, truncated [ 488.141526][T19855] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 488.191656][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.236234][ T5930] usb 2-1: too many configurations: 105, using maximum allowed: 8 [ 488.269259][ T5930] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 488.294887][ T5930] usb 2-1: can't read configurations, error -71 [ 488.690448][ T30] audit: type=1326 audit(1750415268.277:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 488.792595][ T30] audit: type=1326 audit(1750415268.317:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 488.868251][ T30] audit: type=1326 audit(1750415268.327:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 488.942567][ T30] audit: type=1326 audit(1750415268.327:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 489.031037][ T30] audit: type=1326 audit(1750415268.327:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 489.081537][ T30] audit: type=1326 audit(1750415268.327:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 489.126113][ T30] audit: type=1326 audit(1750415268.327:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 489.161887][ T30] audit: type=1326 audit(1750415268.327:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19883 comm="syz.9.3149" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 489.592713][T17121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.603885][T17121] bond0 (unregistering): Released all slaves [ 489.633500][T17121] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 489.660896][T17121] bond1 (unregistering): Released all slaves [ 489.959751][T19907] loop2: detected capacity change from 0 to 7 [ 490.019218][T19907] Dev loop2: unable to read RDB block 7 [ 490.039447][T19907] loop2: unable to read partition table [ 490.084662][T19907] loop2: partition table beyond EOD, truncated [ 490.113403][T19907] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 490.302458][ T5930] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 490.522833][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 490.545678][ T5930] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 490.596224][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.627016][ T5930] usb 7-1: Product: syz [ 490.631270][ T5930] usb 7-1: Manufacturer: syz [ 490.647541][ T5930] usb 7-1: SerialNumber: syz [ 490.699881][ T5930] r8152-cfgselector 7-1: Unknown version 0x0000 [ 490.727614][ T5930] r8152-cfgselector 7-1: config 0 descriptor?? [ 490.846072][ T5924] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 491.017736][T17121] hsr_slave_0: left promiscuous mode [ 491.059774][ T5924] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 491.075889][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.078537][T17121] hsr_slave_1: left promiscuous mode [ 491.130567][ T5924] usb 2-1: Product: syz [ 491.131130][T17121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.146273][ T5924] usb 2-1: Manufacturer: syz [ 491.175384][ T5924] usb 2-1: SerialNumber: syz [ 491.175963][T17121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.201877][ T5924] usb 2-1: config 0 descriptor?? [ 491.214031][ T5924] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 491.246702][T17121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.295860][T17121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.444271][T17121] veth1_macvtap: left promiscuous mode [ 491.467682][T17121] veth0_macvtap: left promiscuous mode [ 491.487585][T17121] veth1_vlan: left promiscuous mode [ 491.509927][T17121] veth0_vlan: left promiscuous mode [ 492.457800][ T9] usb 2-1: USB disconnect, device number 49 [ 492.750598][T17121] team0 (unregistering): Port device team_slave_1 removed [ 492.828214][T17121] team0 (unregistering): Port device team_slave_0 removed [ 493.332418][ T5930] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 493.504240][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 493.531456][ T5930] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 493.541198][ T5930] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.571208][ T5930] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.581492][ T5930] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 493.591786][ T5930] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.611664][ T5930] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 493.647152][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.819072][T19912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.841872][T19912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 493.854404][T19912] bridge_slave_0: default FDB implementation only supports local addresses [ 493.902985][ T5930] usb 2-1: GET_CAPABILITIES returned 0 [ 493.915256][ T5924] r8152-cfgselector 7-1: USB disconnect, device number 27 [ 493.918950][ T5930] usbtmc 2-1:16.0: can't read capabilities [ 494.234549][T19967] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 494.239202][ T5894] usb 2-1: USB disconnect, device number 50 [ 495.082773][T20011] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3188'. [ 495.122752][T20011] Unsupported xt match [ 495.122776][T20011] unable to load match [ 495.492362][ T5894] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 495.682760][ T5894] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 495.691885][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.741092][ T5894] usb 2-1: Product: syz [ 495.751204][ T5894] usb 2-1: Manufacturer: syz [ 495.774873][ T5894] usb 2-1: SerialNumber: syz [ 495.797287][ T5894] usb 2-1: config 0 descriptor?? [ 495.995396][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 496.212300][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.252012][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.295656][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.333163][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.362333][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.387433][ T9] usb 9-1: config 0 descriptor?? [ 496.672642][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3203'. [ 496.849649][ T9] plantronics 0003:047F:FFFF.003F: reserved main item tag 0xe [ 496.866702][ T9] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 496.885736][ T9] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 496.921745][ T9] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 497.026708][ T30] audit: type=1804 audit(1750415276.617:590): pid=20073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3205" name="/" dev="pidfs" ino=20071 res=1 errno=0 [ 497.143556][ T9] usb 9-1: USB disconnect, device number 13 [ 497.230921][ T5894] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 497.247318][ T5894] usb 2-1: USB disconnect, device number 51 [ 497.360489][ T5894] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 497.406193][ T5502] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 497.431361][ T5894] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 498.502523][ T5894] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 498.572328][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 498.724377][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.785484][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.832647][ T5894] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 498.841796][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.904128][ T5894] usb 7-1: config 0 descriptor?? [ 499.355612][ T5894] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 499.363895][ T5930] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 499.384628][ T5894] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 499.429040][ T5894] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0040/input/input52 [ 499.510279][ T5894] cm6533_jd 0003:0D8C:0022.0040: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 499.561935][ T5930] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.592317][ T5930] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 499.631611][ T5894] usb 7-1: USB disconnect, device number 28 [ 499.642315][ T5930] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.678408][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.743013][T20124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 499.767822][ T5930] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.828105][T20142] fido_id[20142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 500.168637][ T5925] usb 2-1: USB disconnect, device number 52 [ 500.982891][ T5930] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 501.002758][ T5925] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 501.178752][ T5930] usb 10-1: config 0 has an invalid interface number: 230 but max is 0 [ 501.182924][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 501.212244][ T5930] usb 10-1: config 0 has no interface number 0 [ 501.214989][ T5925] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.218493][ T5930] usb 10-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 501.218524][ T5930] usb 10-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 501.239873][ T5925] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.286674][ T5930] usb 10-1: config 0 interface 230 has no altsetting 0 [ 501.302361][ T5930] usb 10-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 501.332147][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.340476][ T5930] usb 10-1: Product: syz [ 501.363088][ T5925] usb 9-1: config 0 interface 0 has no altsetting 0 [ 501.366130][ T5930] usb 10-1: Manufacturer: syz [ 501.370778][ T5925] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 501.412249][ T5930] usb 10-1: SerialNumber: syz [ 501.447767][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.481321][ T5930] usb 10-1: config 0 descriptor?? [ 501.493528][ T5925] usb 9-1: config 0 descriptor?? [ 501.519694][T20171] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 501.560082][T20171] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 501.621969][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.628446][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.642695][ T5930] ums-usbat 10-1:0.230: USB Mass Storage device detected [ 501.692371][ T5930] ums-usbat 10-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 501.772412][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 501.969777][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.011734][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 502.031976][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.053207][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.070327][T20190] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 502.086556][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.222319][ T5924] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 502.241857][ T5902] usb 9-1: USB disconnect, device number 14 [ 502.356163][ T5925] usb 2-1: USB disconnect, device number 53 [ 502.397250][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 502.409247][ T5924] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 502.443546][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.473730][ T5924] usb 7-1: config 0 descriptor?? [ 502.496018][ T5924] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 503.327906][ T5925] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 503.509189][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 503.539454][ T5925] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 503.577270][ T5925] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 503.598945][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 503.632480][ T5925] usb 4-1: Product: syz [ 503.644581][ T5925] usb 4-1: Manufacturer: syz [ 503.669689][ T5925] usb 4-1: SerialNumber: syz [ 503.686402][ T5925] usb 4-1: config 0 descriptor?? [ 503.737199][T20224] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 503.756219][ T5925] hub 4-1:0.0: bad descriptor, ignoring hub [ 503.801797][ T5925] hub 4-1:0.0: probe with driver hub failed with error -5 [ 503.981050][ T5925] usb 7-1: USB disconnect, device number 29 [ 504.161279][ T5930] ums-usbat 10-1:0.230: probe with driver ums-usbat failed with error -5 [ 504.210542][ T5930] usb 10-1: USB disconnect, device number 3 [ 504.477145][T20224] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 504.526764][T20224] usb 4-1: device reset changed ep0 maxpacket size! [ 504.569321][ T24] usb 4-1: USB disconnect, device number 45 [ 504.682920][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 504.734667][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 504.870379][T20269] bond0: entered promiscuous mode [ 504.874838][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 504.878157][T20269] ÿ: entered promiscuous mode [ 504.908971][T20269] bond_slave_1: entered promiscuous mode [ 504.915650][ T5925] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 504.920354][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 504.939264][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.952401][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 504.965202][ T24] usb 4-1: config 0 has no interfaces? [ 504.982354][ T9] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 504.990984][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.001105][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.010576][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.053835][ T9] usb 2-1: config 0 descriptor?? [ 505.058842][ T24] usb 4-1: Product: syz [ 505.066909][ T24] usb 4-1: Manufacturer: syz [ 505.071742][ T24] usb 4-1: SerialNumber: syz [ 505.081309][T20259] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 505.102736][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 505.111164][ T24] usb 4-1: config 0 descriptor?? [ 505.162473][ T5925] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 505.171254][ T5925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.214314][ T5925] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.267368][ T5925] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.286302][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.312368][ T5925] usb 7-1: Product: syz [ 505.321404][ T5925] usb 7-1: Manufacturer: syz [ 505.332781][ T5925] usb 7-1: SerialNumber: syz [ 505.333442][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 505.375792][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 505.407887][ T5902] usb 4-1: USB disconnect, device number 46 [ 505.441961][ T9] usb 2-1: USB disconnect, device number 54 [ 505.783647][ T5925] usb 7-1: 0:2 : does not exist [ 506.294310][ T24] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 506.465036][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.497086][ T24] usb 4-1: config 0 has no interfaces? [ 506.517558][ T24] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 506.537746][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.551651][ T24] usb 4-1: Product: syz [ 506.575239][ T24] usb 4-1: Manufacturer: syz [ 506.579932][ T24] usb 4-1: SerialNumber: syz [ 506.590932][ T43] usb 7-1: USB disconnect, device number 30 [ 506.617005][ T24] usb 4-1: config 0 descriptor?? [ 506.672590][ T5925] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 506.842566][ T5925] usb 10-1: Using ep0 maxpacket: 8 [ 506.871913][T20320] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3280'. [ 506.878500][ T5925] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 506.893434][ T5925] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.905872][ T5925] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.937795][ T5925] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 506.955424][ T5925] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.974784][ T9] usb 4-1: USB disconnect, device number 47 [ 506.991066][ T5925] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.008335][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.249477][ T5925] usb 10-1: GET_CAPABILITIES returned 0 [ 507.282732][ T5925] usbtmc 10-1:16.0: can't read capabilities [ 507.621591][ T24] usb 10-1: USB disconnect, device number 4 [ 507.628027][T20311] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 507.643523][T20335] usbtmc 10-1:16.0: usb_control_msg returned -19 [ 508.102438][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 508.272382][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 508.286570][ T9] usb 4-1: config index 0 descriptor too short (expected 38678, got 435) [ 508.302585][ T9] usb 4-1: config 228 has too many interfaces: 239, using maximum allowed: 32 [ 508.321769][ T9] usb 4-1: config 228 has an invalid descriptor of length 0, skipping remainder of the config [ 508.342434][ T9] usb 4-1: config 228 has 0 interfaces, different from the descriptor's value: 239 [ 508.364602][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 508.380281][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.397755][ T9] usb 4-1: Product: syz [ 508.412055][ T9] usb 4-1: Manufacturer: syz [ 508.428231][ T9] usb 4-1: SerialNumber: syz [ 508.993026][ T5924] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 509.178145][ T5924] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.202038][ T5924] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.243826][ T5924] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.275030][ T9] usb 4-1: USB disconnect, device number 48 [ 509.301383][ T5924] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 509.349950][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.402342][ T5924] usb 9-1: Product: syz [ 509.406677][ T5924] usb 9-1: Manufacturer: syz [ 509.411307][ T5924] usb 9-1: SerialNumber: syz [ 509.466194][T20377] loop6: detected capacity change from 0 to 7 [ 509.474363][T20377] Dev loop6: unable to read RDB block 7 [ 509.480007][T20377] loop6: AHDI p4 [ 509.484975][T20377] loop6: partition table partially beyond EOD, truncated [ 509.678216][ T5924] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 509.907062][ T43] usb 9-1: USB disconnect, device number 15 [ 509.962000][ T43] usblp0: removed [ 510.432828][ T9] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 510.680687][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 510.712615][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 510.727824][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.754294][ T9] usb 4-1: Product: syz [ 510.762756][ T9] usb 4-1: Manufacturer: syz [ 510.772932][ T9] usb 4-1: SerialNumber: syz [ 511.148567][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 511.222020][ T9] usb 4-1: USB disconnect, device number 49 [ 511.272552][ T9] usblp0: removed [ 511.509803][T17127] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.781331][T17127] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.274361][T17127] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.638817][T17127] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 512.824787][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 512.843178][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 512.858510][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 512.873672][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 512.892619][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.945086][T17127] team0: Port device macvlan0 removed [ 512.961537][ T30] audit: type=1326 audit(1750415292.547:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.089994][ T30] audit: type=1326 audit(1750415292.547:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.143933][T17127] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.157798][ T30] audit: type=1326 audit(1750415292.597:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.211985][ T30] audit: type=1326 audit(1750415292.597:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.274719][ T30] audit: type=1326 audit(1750415292.597:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.337688][ T30] audit: type=1326 audit(1750415292.597:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.373589][ T30] audit: type=1326 audit(1750415292.597:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.512446][ T30] audit: type=1326 audit(1750415292.597:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.559474][ T30] audit: type=1326 audit(1750415292.597:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.639201][ T30] audit: type=1326 audit(1750415292.597:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.3.3333" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 513.931126][T17127] bridge_slave_1: left allmulticast mode [ 513.937114][T17127] bridge_slave_1: left promiscuous mode [ 513.943457][T17127] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.964597][T17127] bridge_slave_0: left allmulticast mode [ 513.970340][T17127] bridge_slave_0: left promiscuous mode [ 513.976769][T17127] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.684155][T17127] bond2 (unregistering): (slave bridge1): Releasing active interface [ 514.902575][T20531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3348'. [ 514.967719][ T5848] Bluetooth: hci3: command tx timeout [ 515.012163][T17127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.045561][T17127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.069281][T17127] bond0 (unregistering): Released all slaves [ 515.089649][T17127] bond1 (unregistering): Released all slaves [ 515.108536][T17127] bond2 (unregistering): Released all slaves [ 515.293121][T20536] loop2: detected capacity change from 0 to 7 [ 515.328692][T20536] Dev loop2: unable to read RDB block 7 [ 515.352357][T20536] loop2: AHDI p2 p3 [ 515.369212][T20536] loop2: partition table partially beyond EOD, truncated [ 515.415180][T20536] loop2: p3 start 335544320 is beyond EOD, truncated [ 515.647285][T20488] chnl_net:caif_netlink_parms(): no params data found [ 515.792932][T20551] syzkaller1: entered promiscuous mode [ 515.798487][T20551] syzkaller1: entered allmulticast mode [ 515.977184][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 516.138602][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 516.168614][T17127] hsr_slave_0: left promiscuous mode [ 516.194493][ T9] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 516.210725][T17127] hsr_slave_1: left promiscuous mode [ 516.219645][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.224008][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 516.237739][T17127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.257089][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.276142][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.277797][T20546] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 516.305708][T17127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.341166][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.369904][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 516.436910][T20573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3359'. [ 516.498720][T17127] veth1_macvtap: left promiscuous mode [ 516.511656][T17127] veth0_macvtap: left promiscuous mode [ 516.603406][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 516.617330][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.664819][ T24] usb 9-1: config 0 has no interfaces? [ 516.705013][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 516.718557][ T43] usb 10-1: USB disconnect, device number 5 [ 516.750316][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.782163][ T24] usb 9-1: Product: syz [ 516.796903][ T24] usb 9-1: Manufacturer: syz [ 516.819747][ T24] usb 9-1: SerialNumber: syz [ 516.855959][ T24] usb 9-1: config 0 descriptor?? [ 517.051465][ T5848] Bluetooth: hci3: command tx timeout [ 517.089229][ T5924] usb 9-1: USB disconnect, device number 16 [ 518.110564][T17127] team0 (unregistering): Port device team_slave_1 removed [ 518.112762][ T5930] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 518.213678][T17127] team0 (unregistering): Port device team_slave_0 removed [ 518.284755][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.296177][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.306708][ T5930] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.326980][ T5930] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.336535][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.360222][ T5930] usb 9-1: config 0 descriptor?? [ 518.807491][ T5930] plantronics 0003:047F:FFFF.0042: reserved main item tag 0xd [ 518.838158][ T5930] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 518.863785][ T5930] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 519.086248][ T9] usb 9-1: USB disconnect, device number 17 [ 519.122829][ T5848] Bluetooth: hci3: command tx timeout [ 520.390741][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3375'. [ 520.410112][T20620] syz_tun: entered allmulticast mode [ 520.430961][T20488] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.460907][T20488] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.472957][T20488] bridge_slave_0: entered allmulticast mode [ 520.481054][T20488] bridge_slave_0: entered promiscuous mode [ 520.515533][T20488] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.564160][T20488] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.597098][T20488] bridge_slave_1: entered allmulticast mode [ 520.619345][T20488] bridge_slave_1: entered promiscuous mode [ 520.834091][T20617] syz_tun: left allmulticast mode [ 520.903271][T20488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.957751][T20488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.064987][T17127] IPVS: stop unused estimator thread 0... [ 521.203025][ T5848] Bluetooth: hci3: command tx timeout [ 521.583170][T20488] team0: Port device team_slave_0 added [ 521.641106][T20488] team0: Port device team_slave_1 added [ 521.955686][T20488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.978358][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.040216][T20488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.099997][T20488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.127665][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.181198][T20488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.607947][T20488] hsr_slave_0: entered promiscuous mode [ 522.628484][T20488] hsr_slave_1: entered promiscuous mode [ 523.831624][T20713] loop8: detected capacity change from 0 to 7 [ 523.880984][ T5887] Dev loop8: unable to read RDB block 7 [ 523.954770][ T5887] loop8: AHDI p3 [ 523.963784][ T5887] loop8: partition table partially beyond EOD, truncated [ 524.011240][ T5887] Dev loop8: unable to read RDB block 7 [ 524.028179][ T5887] loop8: AHDI p3 [ 524.038751][ T5887] loop8: partition table partially beyond EOD, truncated [ 524.095707][T20713] Dev loop8: unable to read RDB block 7 [ 524.101358][T20713] loop8: AHDI p3 [ 524.136453][T20713] loop8: partition table partially beyond EOD, truncated [ 524.167974][T20716] Dev loop8: unable to read RDB block 7 [ 524.180040][T20716] loop8: AHDI p3 [ 524.184899][T20716] loop8: partition table partially beyond EOD, truncated [ 524.722794][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 524.912281][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 524.941651][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 524.962078][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 524.986807][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.021914][T20731] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 525.038634][T20488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 525.061906][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.137764][T20488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 525.245903][T20488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 525.305254][T20488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 525.402602][ T9] usb 9-1: USB disconnect, device number 18 [ 525.573916][T20755] syzkaller1: entered promiscuous mode [ 525.579467][T20755] syzkaller1: entered allmulticast mode [ 525.805809][T20488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.889977][T20488] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.977558][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.984836][T17125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.986044][T20762] loop2: detected capacity change from 0 to 7 [ 526.019840][T20762] Dev loop2: unable to read RDB block 7 [ 526.020965][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.027443][T20762] loop2: AHDI p2 p3 [ 526.032645][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.048679][T20762] loop2: partition table partially beyond EOD, truncated [ 526.057160][T20762] loop2: p3 start 335544320 is beyond EOD, truncated [ 526.243081][T20488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.329116][T20488] veth0_vlan: entered promiscuous mode [ 526.345625][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3419'. [ 526.359734][T20488] veth1_vlan: entered promiscuous mode [ 526.495307][T20488] veth0_macvtap: entered promiscuous mode [ 526.527602][T20488] veth1_macvtap: entered promiscuous mode [ 526.596444][T20488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.631792][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 526.631811][ T30] audit: type=1326 audit(1750415306.217:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3411" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 526.673333][T20488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.710815][T20488] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.751077][T20488] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.792298][T20488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.810115][T20488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.206478][T17131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.242853][T17131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.502738][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.541151][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.950090][T20782] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3412'. [ 528.000553][T20784] netlink: 'syz.3.3412': attribute type 2 has an invalid length. [ 529.250575][T20842] loop2: detected capacity change from 0 to 7 [ 529.304163][T20842] Dev loop2: unable to read RDB block 7 [ 529.362885][T20842] loop2: unable to read partition table [ 529.389152][T20842] loop2: partition table beyond EOD, truncated [ 529.451787][T20842] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.484625][T20908] loop3: detected capacity change from 0 to 1 [ 531.504371][T20908] loop3: [POWERTEC] p1 p2 [ 531.509133][T20908] loop3: p1 size 256 extends beyond EOD, truncated [ 531.545594][T20908] loop3: p2 start 1886744434 is beyond EOD, truncated [ 531.565869][T20907] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 531.758989][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 536.387161][T21035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3486'. [ 537.090285][ T30] audit: type=1326 audit(1750415316.677:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.163943][ T30] audit: type=1326 audit(1750415316.677:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.245734][ T30] audit: type=1326 audit(1750415316.677:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.386264][ T30] audit: type=1326 audit(1750415316.677:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.523327][ T30] audit: type=1326 audit(1750415316.677:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.612131][ T30] audit: type=1326 audit(1750415316.677:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.680375][T21068] loop7: detected capacity change from 0 to 16384 [ 537.696847][ T30] audit: type=1326 audit(1750415316.707:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.793017][ T30] audit: type=1326 audit(1750415316.707:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.820197][ T43] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 537.861043][ T30] audit: type=1326 audit(1750415316.707:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21053 comm="syz.8.3491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 537.893182][T21071] loop7: detected capacity change from 16384 to 16383 [ 538.012052][ T43] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 538.041771][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.091496][T21077] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3499'. [ 538.108685][ T43] usb 7-1: config 0 descriptor?? [ 539.278379][T21075] netlink: 'syz.8.3498': attribute type 2 has an invalid length. [ 539.570154][ T43] usb 7-1: Cannot set autoneg [ 539.582594][ T43] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 539.629300][ T43] usb 7-1: USB disconnect, device number 31 [ 542.440486][T21173] syzkaller1: entered promiscuous mode [ 542.459859][T21173] syzkaller1: entered allmulticast mode [ 543.059640][T21188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3530'. [ 543.412305][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 543.602705][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 543.646110][ T9] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 543.667444][ T9] usb 9-1: config 0 has no interface number 0 [ 543.682981][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 543.697481][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.706446][ T9] usb 9-1: Product: syz [ 543.710776][ T9] usb 9-1: Manufacturer: syz [ 543.716177][ T9] usb 9-1: SerialNumber: syz [ 543.724832][ T9] usb 9-1: config 0 descriptor?? [ 543.750908][ T9] smsc95xx v2.0.0 [ 543.763551][T21211] syzkaller1: entered promiscuous mode [ 543.773330][T21211] syzkaller1: entered allmulticast mode [ 544.105740][T21221] loop6: detected capacity change from 0 to 7 [ 544.155554][T21221] Dev loop6: unable to read RDB block 7 [ 544.161258][T21221] loop6: unable to read partition table [ 544.172690][T21221] loop6: partition table beyond EOD, truncated [ 544.179351][T21221] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 544.557287][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 544.600011][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 544.885320][T21235] bond0: entered promiscuous mode [ 544.898134][T21235] bond_slave_0: entered promiscuous mode [ 544.910966][T21235] bond_slave_1: entered promiscuous mode [ 545.030547][ T9] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 545.073063][ T9] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 545.106954][ T9] usb 9-1: USB disconnect, device number 19 [ 545.602463][ T5894] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 545.782453][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 545.810411][ T5894] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 545.840721][ T5894] usb 7-1: config 0 has no interface number 0 [ 545.873213][ T5894] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 545.918044][ T5894] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 545.954680][ T5894] usb 7-1: config 0 interface 41 has no altsetting 0 [ 545.980557][ T5894] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 545.997763][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.017965][ T5894] usb 7-1: Product: syz [ 546.043091][ T5894] usb 7-1: Manufacturer: syz [ 546.058137][ T5894] usb 7-1: SerialNumber: syz [ 546.093289][ T5894] usb 7-1: config 0 descriptor?? [ 546.130287][T21250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 546.171372][T21250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 546.438228][T21250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 546.481822][T21250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 546.953464][ T5894] Error reading MAC address [ 546.967607][T21250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 546.992729][T21250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 547.362669][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 547.622451][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 547.637554][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.657507][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.686370][ T5894] sr9700 7-1:0.41 eth13: register 'sr9700' at usb-dummy_hcd.6-1, CoreChip SR9700 USB Ethernet, 0e:2f:85:f6:e2:33 [ 547.725101][ T9] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 547.741767][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.784797][ T5894] usb 7-1: USB disconnect, device number 32 [ 547.801941][ T5894] sr9700 7-1:0.41 eth13: unregister 'sr9700' usb-dummy_hcd.6-1, CoreChip SR9700 USB Ethernet [ 547.821712][ T9] usb 10-1: config 0 descriptor?? [ 548.325693][ T9] savu 0003:1E7D:2D5A.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 548.504556][ T30] audit: type=1326 audit(1750415328.097:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21308 comm="syz.3.3578" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 548.552604][ T43] usb 10-1: USB disconnect, device number 6 [ 548.797901][T21316] syzkaller1: entered promiscuous mode [ 548.822529][T21316] syzkaller1: entered allmulticast mode [ 550.608579][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 550.627017][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 550.636592][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 550.657154][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 550.684127][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 550.692341][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 550.723637][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 550.731176][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 550.738988][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 550.746543][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 550.792603][ T5924] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 550.974478][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 550.983556][ T5924] usb 9-1: config index 0 descriptor too short (expected 42, got 18) [ 550.992937][ T5924] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 551.021465][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 551.043826][ T5924] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 551.053866][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 551.063344][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 551.064913][ T5924] usb 9-1: Product: syz [ 551.094018][ T5924] usb 9-1: SerialNumber: syz [ 551.100863][T21373] netlink: 'syz.3.3603': attribute type 5 has an invalid length. [ 551.122804][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3603'. [ 551.172374][ T5924] r8152-cfgselector 9-1: Unknown version 0x0000 [ 551.178699][ T5924] r8152-cfgselector 9-1: config 0 descriptor?? [ 551.199500][ T5924] hub 9-1:0.0: bad descriptor, ignoring hub [ 551.215694][ T5924] hub 9-1:0.0: probe with driver hub failed with error -5 [ 551.222663][ T5894] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 551.319293][T21373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 551.335071][T21373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 551.345880][T21373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 551.359979][T21373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 551.369469][T21373] geneve2: entered promiscuous mode [ 551.379016][T21373] geneve2: entered allmulticast mode [ 551.394781][ T5894] usb 10-1: config 0 has no interfaces? [ 551.432446][ T5894] usb 10-1: config 0 has no interfaces? [ 551.451368][ T5925] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 551.453083][ T5894] usb 10-1: config 0 has no interfaces? [ 551.478469][ T5894] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 551.509231][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 551.539742][ T5894] usb 10-1: Product: syz [ 551.547186][ T5894] usb 10-1: Manufacturer: syz [ 551.554741][ T5894] usb 10-1: SerialNumber: syz [ 551.582650][ T5894] usb 10-1: config 0 descriptor?? [ 551.642512][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 551.651972][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.672329][ T5925] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 551.691738][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.729447][ T5925] usb 7-1: config 0 descriptor?? [ 551.773381][ T5924] r8152-cfgselector 9-1: reset high-speed USB device number 20 using dummy_hcd [ 551.853552][ T5894] usb 10-1: USB disconnect, device number 7 [ 551.962963][ T5925] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 552.059405][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3607'. [ 552.071089][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3607'. [ 552.082311][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3607'. [ 552.195954][ T5894] usb 7-1: USB disconnect, device number 33 [ 552.302753][ T5924] r8152-cfgselector 9-1: USB disconnect, device number 20 [ 552.853305][T21399] input: syz0 as /devices/virtual/input/input54 [ 553.158806][T21407] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.3615'. [ 553.222145][T21407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3615'. [ 553.242300][ T5925] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 553.417864][T21409] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3617'. [ 553.577477][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 553.599869][ T5925] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.612398][ T5925] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 553.662997][ T5925] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 553.717639][ T5925] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.740262][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.792240][ T5925] usb 9-1: Product: syz [ 553.800211][ T5925] usb 9-1: Manufacturer: syz [ 553.811096][ T5925] usb 9-1: SerialNumber: syz [ 553.947413][T21419] netlink: 'syz.3.3622': attribute type 33 has an invalid length. [ 553.962568][T21419] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3622'. [ 554.026429][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 554.148757][T21423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.533497][ T5925] usb 9-1: USB disconnect, device number 21 [ 554.597290][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.970700][ T30] audit: type=1326 audit(1750415337.547:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21514 comm="syz.1.3658" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x0 [ 558.512284][ T5925] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 558.692517][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 558.702006][ T5925] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 558.717137][ T5925] usb 7-1: config 0 has no interface number 0 [ 558.725960][ T5925] usb 7-1: config 0 interface 184 has no altsetting 0 [ 558.736066][ T5925] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 558.749858][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.764794][ T5925] usb 7-1: Product: syz [ 558.773870][ T5925] usb 7-1: Manufacturer: syz [ 558.787482][ T5925] usb 7-1: SerialNumber: syz [ 558.807014][ T5925] usb 7-1: config 0 descriptor?? [ 558.843078][ T5925] smsc75xx v1.0.0 [ 558.847275][T21535] net_ratelimit: 22 callbacks suppressed [ 558.847292][T21535] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 559.476610][ T5925] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 559.500588][ T5925] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 559.606501][ T30] audit: type=1326 audit(1750415339.197:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21550 comm="syz.3.3668" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf710e539 code=0x0 [ 559.893523][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3670'. [ 559.997305][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3670'. [ 560.018423][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3670'. [ 560.401913][ T5925] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 560.470648][ T5925] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 560.521463][ T5925] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 560.551584][ T5925] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 560.621818][ T5925] usb 7-1: USB disconnect, device number 34 [ 562.033338][ T5894] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 562.192370][ T5894] usb 10-1: Using ep0 maxpacket: 32 [ 562.200876][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.236256][ T5894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.266781][ T5894] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 562.307561][ T5894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.342397][ T5925] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 562.364686][ T5894] usb 10-1: config 0 descriptor?? [ 562.569169][ T5925] usb 4-1: config 0 has no interfaces? [ 562.628827][ T5925] usb 4-1: config 0 has no interfaces? [ 562.663307][ T5925] usb 4-1: config 0 has no interfaces? [ 562.712651][ T5925] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 562.721772][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 562.742442][ T5925] usb 4-1: Product: syz [ 562.749835][ T5925] usb 4-1: Manufacturer: syz [ 562.762274][ T5925] usb 4-1: SerialNumber: syz [ 562.784101][ T5925] usb 4-1: config 0 descriptor?? [ 562.843222][ T5894] ft260 0003:0403:6030.0044: unknown main item tag 0x0 [ 563.047692][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.054404][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.113394][ T5894] ft260 0003:0403:6030.0044: chip code: 0000 0000 [ 563.170889][ T5930] usb 4-1: USB disconnect, device number 50 [ 563.225360][T21605] binder: 21600:21605 ioctl c0306201 800000c0 returned -14 [ 563.314115][ T5894] ft260 0003:0403:6030.0044: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 563.519573][ T5894] ft260 0003:0403:6030.0044: failed to retrieve status: -32, no wakeup [ 563.864693][ T5894] ft260 0003:0403:6030.0044: failed to reset I2C controller: -71 [ 563.938613][ T5894] usb 10-1: USB disconnect, device number 8 [ 565.453778][ T5894] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 565.632498][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 565.665650][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.732453][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.787572][ T5894] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 565.829630][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.875486][ T5894] usb 7-1: config 0 descriptor?? [ 566.343745][ T5894] savu 0003:1E7D:2D5A.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 566.402312][T21640] netlink: 'syz.1.3700': attribute type 2 has an invalid length. [ 566.641811][ T5894] usb 7-1: USB disconnect, device number 35 [ 570.392320][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 570.564984][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 570.588681][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.600995][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.616223][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 570.642042][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 570.658464][ T9] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 570.668115][ T9] usb 10-1: Manufacturer: syz [ 570.703695][ T9] usb 10-1: config 0 descriptor?? [ 570.762504][ T5902] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 571.011890][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 571.072696][ T5902] usb 7-1: config index 0 descriptor too short (expected 42, got 18) [ 571.082575][ T5902] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 571.110923][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 571.191951][ T5902] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 571.268955][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 571.301190][ T9] appleir 0003:05AC:8243.0046: unknown main item tag 0x0 [ 571.312249][ T5902] usb 7-1: Product: syz [ 571.316483][ T5902] usb 7-1: SerialNumber: syz [ 571.333210][ T9] appleir 0003:05AC:8243.0046: No inputs registered, leaving [ 571.360838][ T5902] r8152-cfgselector 7-1: Unknown version 0x0000 [ 571.382137][ T9] appleir 0003:05AC:8243.0046: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 571.396760][ T5902] r8152-cfgselector 7-1: config 0 descriptor?? [ 571.413685][ T5902] hub 7-1:0.0: bad descriptor, ignoring hub [ 571.474505][ T5902] hub 7-1:0.0: probe with driver hub failed with error -5 [ 572.211903][ T5902] r8152-cfgselector 7-1: reset high-speed USB device number 36 using dummy_hcd [ 572.511598][ T9] usb 10-1: USB disconnect, device number 9 [ 572.912763][ T9] r8152-cfgselector 7-1: USB disconnect, device number 36 [ 574.192651][ T5902] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 574.362452][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 574.370875][ T5902] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 574.391780][ T5902] usb 4-1: config 0 has no interface number 0 [ 574.398454][ T5902] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 574.423860][ T5902] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 574.440577][ T5902] usb 4-1: config 0 interface 41 has no altsetting 0 [ 574.460715][ T5902] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 574.476751][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.499748][ T5902] usb 4-1: Product: syz [ 574.508696][ T5902] usb 4-1: Manufacturer: syz [ 574.526671][ T5902] usb 4-1: SerialNumber: syz [ 574.558080][ T5902] usb 4-1: config 0 descriptor?? [ 574.601696][T21770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.623234][T21770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.881999][T21770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 574.912497][T21770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.360373][ T5902] Error reading MAC address [ 575.383588][T21770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.392104][T21770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 576.072477][ T5902] sr9700 4-1:0.41 eth13: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 4e:e1:db:91:df:34 [ 576.121745][ T5902] usb 4-1: USB disconnect, device number 51 [ 576.160014][ T5902] sr9700 4-1:0.41 eth13: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 577.067668][T21846] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 577.350320][T21849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 577.382053][ T5902] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 577.409195][ T5902] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 578.417163][ T5902] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 578.602828][ T5902] usb 10-1: Using ep0 maxpacket: 16 [ 578.631286][ T5902] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.677209][ T5902] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.715056][ T5902] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 578.747416][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.783521][ T5902] usb 10-1: config 0 descriptor?? [ 579.243175][ T5902] hid-multitouch 0003:1FD2:6007.0048: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 579.389705][T21899] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 579.642614][ T9] usb 10-1: USB disconnect, device number 10 [ 579.737452][T21900] fido_id[21900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 580.381921][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3788'. [ 580.401675][T21918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3788'. [ 580.845211][T21934] futex_wake_op: syz.6.3795 tries to shift op by 144; fix this program [ 580.888046][ T30] audit: type=1326 audit(1750415360.477:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21929 comm="syz.1.3793" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e539 code=0x0 [ 581.422383][ T5925] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 581.622822][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 581.644145][ T5925] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 581.683180][ T5925] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 581.705157][ T5925] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 581.719800][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.753062][ T5925] usb 9-1: Product: syz [ 581.767501][ T5925] usb 9-1: Manufacturer: syz [ 581.779347][ T5925] usb 9-1: SerialNumber: syz [ 581.802972][ T5925] usb 9-1: config 0 descriptor?? [ 581.827948][ T5925] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 581.858017][ T5925] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 581.960314][T21960] loop2: detected capacity change from 0 to 7 [ 581.987043][T21960] Dev loop2: unable to read RDB block 7 [ 582.002627][T21960] loop2: unable to read partition table [ 582.022746][T21960] loop2: partition table beyond EOD, truncated [ 582.045121][T21960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 582.471889][ T5925] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 582.485360][ T5925] em28xx 9-1:0.0: Config register raw data: 0x2f [ 582.507105][ T5925] em28xx 9-1:0.0: I2S Audio (1 sample rate(s)) [ 582.532613][ T5925] em28xx 9-1:0.0: No AC97 audio processor [ 583.282413][ T5924] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 583.302346][ T5930] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 583.326037][ T5925] usb 9-1: USB disconnect, device number 22 [ 583.457644][ T5930] usb 4-1: config index 0 descriptor too short (expected 31, got 27) [ 583.472606][ T5930] usb 4-1: config 1 interface 0 has no altsetting 0 [ 583.483436][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 583.498322][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 583.507798][ T5930] usb 4-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 583.516113][ T5930] usb 4-1: Product: syz [ 583.520539][ T5930] usb 4-1: Manufacturer: syz [ 583.526213][ T5930] usb 4-1: SerialNumber: syz [ 583.568069][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.606486][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.634216][ T5924] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 583.653782][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.717983][ T5924] usb 2-1: config 0 descriptor?? [ 583.786253][T21998] vivid-000: disconnect [ 583.796206][T21997] vivid-000: reconnect [ 583.949142][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3818'. [ 584.165893][ T5930] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 584.281564][ T5924] savu 0003:1E7D:2D5A.0049: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 584.455733][ T5930] usb 4-1: USB disconnect, device number 52 [ 584.481205][ T5930] usblp0: removed [ 584.533217][ T5924] usb 2-1: USB disconnect, device number 55 [ 584.738649][T22014] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3823'. [ 586.831228][T22056] syzkaller1: entered promiscuous mode [ 586.836970][T22056] syzkaller1: entered allmulticast mode [ 586.883201][T22034] netlink: 'syz.3.3829': attribute type 2 has an invalid length. [ 588.717814][T22085] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3847'. [ 589.076636][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3852'. [ 589.136240][T22100] xt_limit: Overflow, try lower: 330673899/4200216962 [ 589.274745][T22098] syzkaller1: entered promiscuous mode [ 589.282912][T22106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3854'. [ 589.310283][T22098] syzkaller1: entered allmulticast mode [ 589.527893][T22106] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3854'. [ 590.222373][ T5930] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 590.382257][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 590.389840][ T5930] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 590.399366][ T5930] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.572248][ T5930] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.584287][ T5930] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.593533][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.601569][ T5930] usb 7-1: Product: syz [ 590.644058][ T5930] usb 7-1: Manufacturer: syz [ 590.649035][ T5930] usb 7-1: SerialNumber: syz [ 590.722669][T22083] Bluetooth: hci2: command 0x0406 tx timeout [ 591.075535][ T5930] usb 7-1: 0:2 : does not exist [ 591.442464][T22151] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.3870'. [ 591.492289][T22151] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3870'. [ 592.297407][ T5930] usb 7-1: 1:0: cannot get min/max values for control 6 (id 1) [ 592.355960][ T5930] usb 7-1: USB disconnect, device number 37 [ 592.422038][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.446732][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3878'. [ 593.841090][T22206] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.148994][T22195] netlink: 'syz.8.3888': attribute type 2 has an invalid length. [ 594.625210][T22222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 595.506468][T22241] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 595.518410][T22241] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 595.526827][T22241] CPU: 0 UID: 0 PID: 22241 Comm: syz.8.3904 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 595.538894][T22241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.548954][T22241] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 595.554806][T22241] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 6b 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 3c 6b 30 f8 4d 8b 24 24 e8 13 00 [ 595.574432][T22241] RSP: 0018:ffffc9000e4f67d0 EFLAGS: 00010202 [ 595.580511][T22241] RAX: 0000000000000083 RBX: ffff8880328a9620 RCX: 0000000000000002 [ 595.588481][T22241] RDX: ffff8880314f1e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.596524][T22241] RBP: ffff8880328a9637 R08: 0000000000000000 R09: ffffffff89d47e66 [ 595.604530][T22241] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: 0000000000000418 [ 595.612508][T22241] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110065152c6 [ 595.620485][T22241] FS: 0000000000000000(0000) GS:ffff888125c51000(0063) knlGS:00000000f50eeb40 [ 595.629428][T22241] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 595.636018][T22241] CR2: 000000002c414ffc CR3: 00000000336d4000 CR4: 00000000003526f0 [ 595.643997][T22241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.651974][T22241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 595.659955][T22241] Call Trace: [ 595.663257][T22241] [ 595.666196][T22241] nexthop_get_nhc_lookup+0x1af/0x400 [ 595.671589][T22241] fib_table_lookup+0xf26/0x16e0 [ 595.676554][T22241] fib_lookup+0x1c5/0x440 [ 595.680901][T22241] ? fib_lookup+0x76/0x440 [ 595.685363][T22241] ip_route_output_key_hash_rcu+0x2fb/0x23a0 [ 595.691388][T22241] ? ip_route_output_key_hash+0xde/0x2e0 [ 595.697032][T22241] ? ip_route_output_key_hash+0xde/0x2e0 [ 595.702677][T22241] ip_route_output_key_hash+0x1b9/0x2e0 [ 595.708255][T22241] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 595.714349][T22241] ? crng_make_state+0x34c/0x700 [ 595.719297][T22241] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.724511][T22241] ? crng_make_state+0x3fc/0x700 [ 595.729465][T22241] ip_route_output_flow+0x2a/0x150 [ 595.734590][T22241] sctp_v4_get_dst+0x3c7/0x1200 [ 595.739467][T22241] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 595.744768][T22241] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 595.750676][T22241] ? __debug_object_init+0x1a2/0x3c0 [ 595.755972][T22241] ? dst_release+0x72/0x1b0 [ 595.760488][T22241] sctp_transport_route+0x118/0x2f0 [ 595.765703][T22241] sctp_ootb_pkt_new+0x28b/0x3c0 [ 595.770655][T22241] sctp_sf_tabort_8_4_8+0x30/0x3f0 [ 595.775779][T22241] sctp_do_sm+0x1e7/0x5a20 [ 595.780224][T22241] ? __pfx_sctp_cname+0x10/0x10 [ 595.785087][T22241] ? stack_depot_save_flags+0x40/0x900 [ 595.790581][T22241] ? kasan_save_track+0x4f/0x80 [ 595.795471][T22241] ? kasan_save_track+0x3e/0x80 [ 595.800336][T22241] ? __pfx_sctp_do_sm+0x10/0x10 [ 595.805203][T22241] ? ip_protocol_deliver_rcu+0x2e0/0x440 [ 595.810841][T22241] ? ip_local_deliver_finish+0x2fb/0x580 [ 595.816479][T22241] ? NF_HOOK+0x309/0x3a0 [ 595.820728][T22241] ? NF_HOOK+0x309/0x3a0 [ 595.824974][T22241] ? __netif_receive_skb+0x143/0x380 [ 595.830279][T22241] ? sctp_inq_pop+0xc46/0x1010 [ 595.835079][T22241] ? sctp_auth_recv_cid+0x75/0x230 [ 595.840198][T22241] sctp_endpoint_bh_rcv+0x591/0x7e0 [ 595.845417][T22241] sctp_rcv+0x1ca6/0x2490 [ 595.849753][T22241] ? raw_local_deliver+0x30d/0xe90 [ 595.854881][T22241] ? __pfx_sctp_rcv+0x10/0x10 [ 595.859567][T22241] ? raw_local_deliver+0xd88/0xe90 [ 595.864687][T22241] ? __lock_acquire+0xab9/0xd20 [ 595.869551][T22241] ? raw_local_deliver+0x30d/0xe90 [ 595.874676][T22241] ? __pfx_sctp4_rcv+0x10/0x10 [ 595.879444][T22241] ip_protocol_deliver_rcu+0x2e0/0x440 [ 595.884914][T22241] ? ip_local_deliver_finish+0x1fa/0x580 [ 595.890569][T22241] ip_local_deliver_finish+0x2fb/0x580 [ 595.896038][T22241] NF_HOOK+0x309/0x3a0 [ 595.900117][T22241] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 595.906103][T22241] ? NF_HOOK+0x9a/0x3a0 [ 595.910269][T22241] ? __pfx_NF_HOOK+0x10/0x10 [ 595.914881][T22241] ? ip_rcv_finish_core+0xda3/0x1c00 [ 595.920172][T22241] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 595.926156][T22241] ? skb_dst+0x4f/0xd0 [ 595.930232][T22241] ? ip_local_deliver+0x12a/0x1b0 [ 595.935266][T22241] NF_HOOK+0x309/0x3a0 [ 595.939345][T22241] ? __pfx_ip_rcv_finish+0x10/0x10 [ 595.944462][T22241] ? NF_HOOK+0x9a/0x3a0 [ 595.948629][T22241] ? __pfx_NF_HOOK+0x10/0x10 [ 595.953228][T22241] ? ip_rcv_core+0x7f7/0xd00 [ 595.957824][T22241] ? __pfx_ip_rcv_finish+0x10/0x10 [ 595.962943][T22241] ? __pfx_ip_rcv+0x10/0x10 [ 595.967456][T22241] __netif_receive_skb+0x143/0x380 [ 595.972591][T22241] ? netif_receive_skb+0x115/0x790 [ 595.977714][T22241] netif_receive_skb+0x1cb/0x790 [ 595.982661][T22241] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 595.988476][T22241] ? _copy_from_iter+0x24c/0x16f0 [ 595.993520][T22241] ? __pfx_netif_receive_skb+0x10/0x10 [ 595.998990][T22241] ? skb_partial_csum_set+0x107/0x360 [ 596.004371][T22241] ? tun_rx_batched+0x160/0x730 [ 596.009234][T22241] tun_rx_batched+0x1b9/0x730 [ 596.013924][T22241] ? __lock_acquire+0xab9/0xd20 [ 596.018787][T22241] ? __pfx_tun_rx_batched+0x10/0x10 [ 596.024024][T22241] ? tun_get_user+0x2549/0x3ce0 [ 596.028891][T22241] tun_get_user+0x298e/0x3ce0 [ 596.033603][T22241] ? tun_get_user+0x2549/0x3ce0 [ 596.038485][T22241] ? aa_file_perm+0x11f/0xed0 [ 596.043170][T22241] ? __pfx_tun_get_user+0x10/0x10 [ 596.048203][T22241] ? aa_file_perm+0x11f/0xed0 [ 596.052890][T22241] ? aa_file_perm+0x3e7/0xed0 [ 596.057582][T22241] ? ref_tracker_alloc+0x318/0x460 [ 596.062705][T22241] ? __lock_acquire+0xab9/0xd20 [ 596.067568][T22241] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 596.073039][T22241] ? tun_get+0x1c/0x2f0 [ 596.077211][T22241] ? tun_get+0x1c/0x2f0 [ 596.081376][T22241] ? tun_get+0x1c/0x2f0 [ 596.085545][T22241] tun_chr_write_iter+0x113/0x200 [ 596.090581][T22241] vfs_write+0x548/0xa90 [ 596.094835][T22241] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 596.100390][T22241] ? __pfx_vfs_write+0x10/0x10 [ 596.105173][T22241] ? __fget_files+0x2a/0x420 [ 596.109772][T22241] ksys_write+0x145/0x250 [ 596.114101][T22241] ? __pfx_ksys_write+0x10/0x10 [ 596.118952][T22241] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 596.125552][T22241] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.130763][T22241] __do_fast_syscall_32+0xb6/0x2b0 [ 596.135901][T22241] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.141113][T22241] do_fast_syscall_32+0x34/0x80 [ 596.145966][T22241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.152305][T22241] RIP: 0023:0xf70fe539 [ 596.156376][T22241] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 596.175987][T22241] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 596.184407][T22241] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 596.192387][T22241] RDX: 000000000000004e RSI: 0000000000000000 RDI: 0000000000000000 [ 596.200375][T22241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.208347][T22241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 596.216319][T22241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.224302][T22241] [ 596.227330][T22241] Modules linked in: [ 596.231387][T22241] ---[ end trace 0000000000000000 ]--- [ 596.236875][T22241] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 596.242714][T22241] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 6b 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 3c 6b 30 f8 4d 8b 24 24 e8 13 00 [ 596.262356][T22241] RSP: 0018:ffffc9000e4f67d0 EFLAGS: 00010202 [ 596.268432][T22241] RAX: 0000000000000083 RBX: ffff8880328a9620 RCX: 0000000000000002 [ 596.276457][T22241] RDX: ffff8880314f1e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.284454][T22241] RBP: ffff8880328a9637 R08: 0000000000000000 R09: ffffffff89d47e66 [ 596.292447][T22241] R10: dffffc0000000000 R11: fffffbfff1f421ff R12: 0000000000000418 [ 596.300430][T22241] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110065152c6 [ 596.308427][T22241] FS: 0000000000000000(0000) GS:ffff888125c51000(0063) knlGS:00000000f50eeb40 [ 596.317378][T22241] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 596.323984][T22241] CR2: 000000002c414ffc CR3: 00000000336d4000 CR4: 00000000003526f0 [ 596.331962][T22241] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 596.339982][T22241] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 596.347983][T22241] Kernel panic - not syncing: Fatal exception in interrupt [ 596.355559][T22241] Kernel Offset: disabled [ 596.359896][T22241] Rebooting in 86400 seconds..