last executing test programs: 29.027404443s ago: executing program 3 (id=1507): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003100)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 18.355004824s ago: executing program 3 (id=1533): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292", @ANYRES8, @ANYBLOB, @ANYRES8], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 18.32839621s ago: executing program 0 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2c) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 17.099389884s ago: executing program 0 (id=1536): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x100000) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x25000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x73, 0xd5, 0xed, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x5}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x84, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xbe, 0x7, 0x26, '\x00', 0x7}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0x9, 0x6, 0x0, '\x00', 0x8}, {0xa, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x0, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x6a, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x5}]}}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)={0x14, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) ioprio_get$uid(0x3, 0x0) 15.61421025s ago: executing program 3 (id=1542): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003100)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 11.645584788s ago: executing program 4 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x35, 0x2, 0x4, "3bd9d32ea20600000000000000e89a000000000000e9268cd237c55d618e00", 0x34343459}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000340)=0xefb, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0x388, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb82e1ba3f7b288450fd50da072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x50, 0x19c, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab"}], 0x410}, 0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.482736182s ago: executing program 4 (id=1562): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x40, 0x8000}}], 0x1, 0x24000810) 11.43933131s ago: executing program 0 (id=1563): syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x4) 11.329360288s ago: executing program 3 (id=1565): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xb0}, 0x0, 0x8400, 0x1}) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x2f5e, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 11.303230817s ago: executing program 4 (id=1566): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 11.259333463s ago: executing program 0 (id=1567): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0xc104, 0xfffffff0, 0x1, 0x81, 0xc9d}, 0x18, 0x1000) ioctl$KVM_RUN(r5, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 11.112971578s ago: executing program 2 (id=1569): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_open_dev$usbfs(0x0, 0x80, 0x309101) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xb, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x1, 0x619, 0x6, 'snmp\x00', 'syz0\x00', {0x631}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 10.938361584s ago: executing program 2 (id=1570): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@my=0x1, 0x3}, @host, 0x4, 0x10000, 0x1, 0x0, 0xffffffffffffffff, 0x4513, 0x4bc7}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000180)={{@host}, 0x600, 0x800000000000000, 0x1, 0xfffffffa}) 10.816193312s ago: executing program 2 (id=1571): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 10.319046833s ago: executing program 2 (id=1572): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) socket(0x11, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8801, 0x0, 0xd, 0x8000, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x100000000000f7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r5], 0x31) ioctl$TCFLSH(r3, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) r6 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x3, 0x5, 0x6, 0x3, 0x2, 0xa1, 0x7, 0xe}, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r6) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r7 = socket(0x22, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000180)=0x3ad3, 0x4) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0}}], 0x1, 0x4008840) 10.058513323s ago: executing program 1 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x35, 0x2, 0x4, "3bd9d32ea20600000000000000e89a000000000000e9268cd237c55d618e00", 0x34343459}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000340)=0xefb, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002400)=[{0x388, 0x1, 0x8, "244df5680b8203b6b985638f2545f2ac042a9aee660edf5459c22ed1ed6026739f79e286a1f42ab62b2270f719c0ea01f4cfde2afa600b46d7d34e10f60c895126a9adf4a9885156ee2178974a935091e8c514514f31db8fcb6395a59a1710c7cff57d7f512eb909c22710e93086e706d2a3e4c1a121465944394844b45ed609c9fabb4edaf37a3df4d37a5ea7e027b1c5b22dd328957ae0b6f90667ae9f43322d694eebddddf7f23f1943855002a99e58c8402393d5a7dfd8d88cd1fcb86fe7aac690f8fcffa5b9dc3fdbb4822e588b7773ff35873a5ea7cc83b006d00e70987f313f1b9ba1b1b93ed3eb0362a138f2fba123982919b7aa914be8ba9c71a8d76f7045daafabfb4a50993005e0686440e9f97cc259b5350c86a0effdea17facf052b6772c96ea5fedb6b9497e591f51bd0e02ac86402d6f3fe7d0e856a69c6e3d49d89ba91e2fe519d5ac2186091766c178f274e81493af54a02f7e0b3e47c0a862bd7af9712e65f74595e8c63c91a45ebd081ad910d95f26192ead1daf401b015eb772f4b91bbacf26157d5d6d626eff439e238a6dd9ebce65fb960ae90ec490d5014589a24d107c8b66a587166ce85e9bffd332defeee0c3333d15ed629874fb3259217911d50a1eec22b3c205b3c2068bdbe9d0145de5536049af47bea81d4cffdc45b277e8c06249510d2d429cb3e606d27f40918bd250818d0a09512ed8a2727c81a38e44366deb7ca5e30556b03305ae54b19cc17f6a543a9d397676d1d18c873c30f02a873c6fe6cb1c21d0ebf78c1bc732ef62cbc92e71d461886c9fa5f04d28dc4c7e3b3ed55fb39603c041d27017322610ac1a16c63c91ed376d9bba0df833d185fff47bad911c26a5918034211a3dbe77663f21a22b4bed8a3cbabfcd5622a1bbc3c015d1890391c5f5f57ff316718f57d7927f41724ee25f274c98a22d8cc1f7348cdd5ff604f4fe21d50f21a1638a75b39c6a5e5c0470812e9e7a663f4f61e6f8b008d31c6e9bd4686a17e0f4fb42c06a19436731d612990f7dbdc2d9b6dd4a5152b8cdbef0906e6f6dd07ad305da2d579fb968b000ad7075c91d35f1af5c3783cbeb9306de0cb3f086a0e2950f564b6e1d0ff9bc785d53ed0176c3feaa5356559ebf4508bccc9202ee45d1c20f768f98f60aed75b7da8dba4f1c36a8b668e3a9a19eb431d4759a7b6840c888774194f60f872790fb243fdb2fb1184bc6dd225bfdb447cc1cfa5277569536d051e806"}, {0x38, 0x108, 0x2, "d1cb82e1ba3f7b288450fd50da072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x50, 0x19c, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab"}], 0x410}, 0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.031584693s ago: executing program 2 (id=1574): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x329, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r4, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000040)=@other={0x8, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d000005240600010524"], 0x0) ioctl$IOMMU_GET_HW_INFO(r8, 0x3b8a, &(0x7f0000000080)={0x28, 0x0, r10, 0x0, 0x0}) r11 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) faccessat2(r11, &(0x7f0000000100)='./file0\x00', 0x0, 0x1100) close_range(r0, 0xffffffffffffffff, 0x0) 10.030200647s ago: executing program 3 (id=1575): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = getpgid(0x0) fcntl$setown(r5, 0x8, r6) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 9.728149143s ago: executing program 2 (id=1576): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r0, 0x0, 0x0, 0x24000810) 9.57052494s ago: executing program 1 (id=1577): syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0x34}}, 0x4) 9.159192914s ago: executing program 1 (id=1579): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r1, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.564061731s ago: executing program 1 (id=1580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b9376", 0x73}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000200)="b409e40000b7bd3f26fb", 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f00000002c0)=@generic={0x1f, "18eb3fc286f7c2defdd35a1b10b68487e7c7d9f8cca2b9869269d8b0e76d88dc3841bcdb26585eaa62529bfa557b88a6f1d53e0d0fd5c11496df35058f34222be56a4dcef91ee8806e55b51abe21f3a7981a873d1f0fc758f138e27cb569fb0c8c0bf363b59285e68908e60e7bebcc8eb45c0736454f31eb3cbfe2f3a975"}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)="429aba3173a785d97d957b5593dc771aa81b2a856c061c43f0f55c9423e8634696553546971c04ce6fe0c52187b9854f1d07ecd780d108cc67d83fee25230f9b941febcf965a1be48d011819f40c7d2dc785db26ef796fda5be0f4bb85af9f6296118fb14a71dddb436ed26af60decafab163e073a0b3b4268d116afb4fee8d3663a216e791e4a8d4b676b3dc47d2af6c236f7a897848d3323ee322f341c0b46334fe427fd9828659f7fba82", 0xac}, {&(0x7f0000000340)="30343b6325e055dba08bdbca7b020b1d72ae617ce481740ba09f", 0x1a}, {&(0x7f0000000600)="9ee6a28591610839b5f2b0149a52a9a64ca8e3f434d81c036db420e2cf4bfd0197f43e09ae1208f0441cda67d103457044070fd3490dc247d18406b8b70def8ad33b181962991a97d9fb55d099ba8c581713d99c", 0x54}, {&(0x7f0000000680)="025119ae1ddcf1085f37b3c5e6803b6e14a39928445ed56e05d14a18613fe453db9ea95cf4db48b41d745eb985530dc3041c25cc32b40e99091b13dfc3df87e7c9d929361dec7a88f81a26cf2bc391f28cb71925c86e02f96ee7c39791ced8d264588bc51b2f86e44101539fbded335dfde84b5d5031", 0x76}, {&(0x7f0000000580)="a3a6591b1dc8659cfbacba1c58388c84d1f9b68017c6bd", 0x17}, {&(0x7f00000007c0)="d5c75b5625bd80dd1ce54bfe1c51bf6d8926640c8923e737894ccb2450d6318e1481dbc0d692a395d68dd0c93cd4da39d8b01a2f0771b25297b8d5bc4d8beb621a461ce31fcfd6deb0b90c47ec2f1b703d89e71381819b062eb0708ebbad34f0329b16bc382bcef489fb2bd346ec14eb43a6289b13c0559eac8036c049a1fdba2d514fa78f153e175d8b4f9d50611776a50afc1f0d3f36aba2fe49c82f63", 0x9e}, {&(0x7f00000008c0)="03f357042fea524acab73b21d421a0f8ee55166a8615fc4df31233705b4c92a7770778fae5ecc322e019eb4e43549c84cb7452a109c50039d0e848bba92e957894369e27aa30b26a59153d9780e89a0331bb6bc4bc6fb9567f0b4d9a5bb42ba5fe903bbe3c2d5083be02575308e556932c51072e3844b087c88df67f8cf57d6003514be95059777240ce0113c31a481cbb368db6424ac23862fadcd426cfefd93b9983146bcb77d14783092a4c553ba30305717914513905bae505c9019b5d6ad6e7c31e16425c8dda34538fbf6d953aa51831017298045588", 0xd9}, {&(0x7f00000009c0)="2f56ec550c5e6d7f144a181aa9455ea664eda0ee0d7b23d10045691739f6cb41ce5298ec964efc92553375a88be9691f9641429fdd1f182436e4f9eb54e6cb1be4b3a888c1c87f4c88738f85450e38029b1ede85332e209dc253efbc91c8dd83df122d6fe923ff18bd384be47bd23be8789661f2757c81fb78dce27599fdbc96b39db100a02d6726e115a746db5004041a727ae8ac1b9ae4128ba37262219700da4ea98fd99318655d5b65e4d19a63bedae21a3ae0e16d31344f75c932ad57", 0xbf}, {&(0x7f0000000700)}], 0x9, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}}, {{&(0x7f0000000bc0)=@isdn={0x22, 0x6, 0xf8, 0x7, 0x2}, 0x80, &(0x7f0000001e80)}}], 0x2, 0x4000000) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRES8, @ANYRESDEC]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 7.389616335s ago: executing program 4 (id=1581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800290200000000000000000200000008000000000000001000098008000000", @ANYRES32=0x0, @ANYBLOB="000057e52600"], 0x2c}}, 0x84054) writev(r3, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) read$FUSE(r2, &(0x7f0000019200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f000001b240)={'\x00', 0x0, 0x800, 0x4, 0x3, 0xc361, r9}) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800dfff0700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x40, 0x3, 0x1b1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.140446489s ago: executing program 0 (id=1582): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 5.924801299s ago: executing program 1 (id=1583): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 3.88556455s ago: executing program 3 (id=1584): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) socket(0x11, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8801, 0x0, 0xd, 0x8000, 0xfffffe0000000000, 0xfa11, 0xfffffffe}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x100000000000f7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r5], 0x31) ioctl$TCFLSH(r3, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) r6 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x3, 0x5, 0x6, 0x3, 0x2, 0xa1, 0x7, 0xe}, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r6) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r7 = socket(0x22, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000180)=0x3ad3, 0x4) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0}}], 0x1, 0x4008840) 2.657100962s ago: executing program 4 (id=1585): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x3, 0xffff}, {0xfff2, 0xc}}}, 0x24}}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ff"], 0x0) 2.535984538s ago: executing program 1 (id=1586): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 890.208367ms ago: executing program 4 (id=1587): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006400602843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth0_to_bond\x00', 0x20}) r5 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0x2d}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000100)={0xfffffffffffffd27, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=1588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800290200000000000000000200000008000000000000001000098008000000", @ANYRES32=0x0, @ANYBLOB="000057e52600"], 0x2c}}, 0x84054) writev(r3, &(0x7f00000000c0)=[{&(0x7f000001b2c0)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) read$FUSE(r2, &(0x7f0000019200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f000001b240)={'\x00', 0x0, 0x800, 0x4, 0x3, 0xc361, r9}) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800dfff0700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_uring_setup(0x6ab9, &(0x7f0000000000)={0x0, 0x4, 0x40, 0x3, 0x1b1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 0:50:50 [ 131.010329][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.025787][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.031605][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.031896][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.643342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.643647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.029511][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.029528][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.067582][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.067602][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.998153][ T36] audit: type=1326 audit(1772745121.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.013369][ T36] audit: type=1326 audit(1772745121.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.016777][ T36] audit: type=1326 audit(1772745121.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.053469][ T36] audit: type=1326 audit(1772745121.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.053523][ T36] audit: type=1326 audit(1772745121.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.053567][ T36] audit: type=1326 audit(1772745121.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.053661][ T36] audit: type=1326 audit(1772745121.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.053851][ T36] audit: type=1326 audit(1772745121.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.053983][ T36] audit: type=1326 audit(1772745121.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.054097][ T36] audit: type=1326 audit(1772745121.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5948 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 135.474911][ T1237] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.536739][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 135.703708][ T1237] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.703732][ T1237] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.703749][ T1237] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.732195][ T42] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.733895][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 135.767378][ T1237] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.767409][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.767428][ T1237] usb 2-1: Product: syz [ 135.767442][ T1237] usb 2-1: Manufacturer: syz [ 135.767456][ T1237] usb 2-1: SerialNumber: syz [ 135.789552][ T1165] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.868202][ T1237] hub 2-1:1.0: bad descriptor, ignoring hub [ 135.868246][ T1237] hub 2-1:1.0: probe with driver hub failed with error -5 [ 136.371685][ T1237] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 136.952138][ T1237] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 137.332033][ T1237] usb 2-1: device firmware changed [ 137.564429][ T1237] usb 2-1: USB disconnect, device number 2 [ 137.634819][ T1237] usblp0: removed [ 137.737884][ T60] Bluetooth: hci5: command 0x1003 tx timeout [ 137.772611][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.659168][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.659266][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.460544][ T6015] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19'. [ 144.605548][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 145.373521][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.573455][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 145.604661][ T10] usb 2-1: config 0 has no interfaces? [ 145.637621][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 145.637661][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.637682][ T10] usb 2-1: Product: syz [ 145.637698][ T10] usb 2-1: Manufacturer: syz [ 145.637807][ T10] usb 2-1: SerialNumber: syz [ 145.721377][ T10] usb 2-1: config 0 descriptor?? [ 146.288069][ T6002] usb 2-1: USB disconnect, device number 3 [ 147.372055][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 147.477022][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 148.306534][ T6043] syz.1.26 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.506237][ T5804] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.795930][ T5804] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.795963][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.960088][ T5804] usb 3-1: config 0 descriptor?? [ 149.289939][ T5804] cp210x 3-1:0.0: cp210x converter detected [ 149.553218][ T5804] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 149.583520][ T1237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.733440][ T1237] usb 1-1: Using ep0 maxpacket: 32 [ 149.737618][ T1237] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 149.737640][ T1237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.794102][ T1237] usb 1-1: config 0 descriptor?? [ 149.930243][ T5804] usb 3-1: cp210x converter now attached to ttyUSB0 [ 149.950285][ T1237] as10x_usb: device has been detected [ 149.951108][ T1237] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 149.984200][ T5804] usb 3-1: USB disconnect, device number 2 [ 150.308590][ T5804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.343146][ T1237] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 150.447252][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 150.447272][ T36] audit: type=1326 audit(1772745137.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.447327][ T36] audit: type=1326 audit(1772745137.370:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.492086][ T36] audit: type=1326 audit(1772745137.410:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.492233][ T36] audit: type=1326 audit(1772745137.410:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.513130][ T36] audit: type=1326 audit(1772745137.420:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.513941][ T36] audit: type=1326 audit(1772745137.430:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.553737][ T36] audit: type=1326 audit(1772745137.450:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.756687][ T6049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.763798][ T36] audit: type=1326 audit(1772745137.680:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.763950][ T36] audit: type=1326 audit(1772745137.680:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6048 comm="syz.0.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 150.842042][ T5804] cp210x 3-1:0.0: device disconnected [ 150.904210][ T1237] as10x_usb: error during firmware upload part1 [ 150.904938][ T1237] Registered device nBox DVB-T Dongle [ 150.973452][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.069554][ T1237] usb 1-1: USB disconnect, device number 2 [ 151.167462][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.167490][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.167530][ T31] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.167552][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.239263][ T31] usb 4-1: config 0 descriptor?? [ 151.403184][ T1237] Unregistered device nBox DVB-T Dongle [ 151.419443][ T1237] as10x_usb: device has been disconnected [ 153.484164][ T1237] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.092305][ T9] usb 4-1: USB disconnect, device number 2 [ 154.493066][ T6081] process 'syz.3.34' launched '/dev/fd/6' with NULL argv: empty string added [ 156.423446][ T5804] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.563507][ T5804] usb 2-1: device descriptor read/64, error -71 [ 156.960753][ T5804] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.213526][ T5804] usb 2-1: device descriptor read/64, error -71 [ 157.325348][ T5804] usb usb2-port1: attempt power cycle [ 157.692468][ T5804] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.735437][ T5804] usb 2-1: device descriptor read/8, error -71 [ 157.985709][ T5804] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.008383][ T5804] usb 2-1: device descriptor read/8, error -71 [ 158.053441][ T1237] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 158.122119][ T5804] usb usb2-port1: unable to enumerate USB device [ 158.246951][ T1237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 158.246988][ T1237] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 158.247005][ T1237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.250877][ T1237] usb 3-1: config 0 descriptor?? [ 158.251686][ T6100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.856759][ T1237] usbhid 3-1:0.0: can't add hid device: -71 [ 158.880037][ T1237] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 159.066420][ T1237] usb 3-1: USB disconnect, device number 3 [ 162.428868][ T6141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.47'. [ 168.503503][ T5804] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.643447][ T5804] usb 1-1: device descriptor read/64, error -71 [ 168.947479][ T5804] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.142001][ T5804] usb 1-1: device descriptor read/64, error -71 [ 169.246461][ T5804] usb usb1-port1: attempt power cycle [ 169.633868][ T5804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.658963][ T5804] usb 1-1: device descriptor read/8, error -71 [ 169.895602][ T5804] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.945378][ T5804] usb 1-1: device descriptor read/8, error -71 [ 170.053846][ T5804] usb usb1-port1: unable to enumerate USB device [ 170.179777][ T6194] netlink: 'syz.1.60': attribute type 34 has an invalid length. [ 170.438882][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.506647][ T6196] netlink: 'syz.3.61': attribute type 34 has an invalid length. [ 170.536534][ T6196] random: crng reseeded on system resumption [ 170.584638][ T9] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 170.655789][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 170.655826][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.655841][ T9] usb 2-1: Product: syz [ 170.655851][ T9] usb 2-1: Manufacturer: syz [ 170.655862][ T9] usb 2-1: SerialNumber: syz [ 170.722921][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 170.823232][ T5878] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.329726][ T6194] random: crng reseeded on system resumption [ 172.513359][ T5878] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 172.535906][ T5878] ath9k_htc: Failed to initialize the device [ 175.613469][ T10] usb 2-1: USB disconnect, device number 8 [ 175.690030][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 181.442026][ T36] audit: type=1326 audit(1772745168.340:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 181.442087][ T36] audit: type=1326 audit(1772745168.340:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 181.547496][ T36] audit: type=1326 audit(1772745168.470:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 181.548155][ T36] audit: type=1326 audit(1772745168.470:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 181.548407][ T36] audit: type=1326 audit(1772745168.470:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6244 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 181.699975][ T6254] netlink: 'syz.0.77': attribute type 34 has an invalid length. [ 181.835664][ T6254] random: crng reseeded on system resumption [ 185.540302][ T36] audit: type=1326 audit(1772745172.440:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6277 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 185.540351][ T36] audit: type=1326 audit(1772745172.440:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6277 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 185.540387][ T36] audit: type=1326 audit(1772745172.440:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6277 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 185.540422][ T36] audit: type=1326 audit(1772745172.440:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6277 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 185.540457][ T36] audit: type=1326 audit(1772745172.440:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6277 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 185.906665][ T42] Bluetooth: hci5: Frame reassembly failed (-84) [ 186.173630][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 186.383514][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.383540][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.383557][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.383589][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.383605][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.448031][ T9] usb 4-1: config 0 descriptor?? [ 187.243402][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 187.313461][ T6298] nvme_fabrics: missing parameter 'transport=%s' [ 187.313479][ T6298] nvme_fabrics: missing parameter 'nqn=%s' [ 187.382202][ T10] usb 4-1: USB disconnect, device number 3 [ 187.771444][ T6306] fido_id[6306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 187.955179][ T60] Bluetooth: hci5: command 0x1003 tx timeout [ 187.955364][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.367455][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 193.603506][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 193.783392][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 193.787150][ T10] usb 4-1: config 0 has no interfaces? [ 193.809774][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 193.809807][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.809828][ T10] usb 4-1: Product: syz [ 193.809843][ T10] usb 4-1: Manufacturer: syz [ 193.809858][ T10] usb 4-1: SerialNumber: syz [ 193.864477][ T10] usb 4-1: config 0 descriptor?? [ 194.236638][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.116'. [ 194.923398][ T5804] usb 4-1: USB disconnect, device number 4 [ 196.503395][ T6002] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 196.653372][ T6002] usb 3-1: Using ep0 maxpacket: 16 [ 196.655832][ T6002] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.655873][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.655894][ T6002] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.655911][ T6002] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.655928][ T6002] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.657095][ T6002] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.657115][ T6002] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.657129][ T6002] usb 3-1: Manufacturer: syz [ 196.661359][ T6002] usb 3-1: config 0 descriptor?? [ 197.299475][ T6002] rc_core: IR keymap rc-hauppauge not found [ 197.299500][ T6002] Registered IR keymap rc-empty [ 197.300374][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.320688][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.372441][ T6002] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 197.445876][ T6002] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 197.493481][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.517755][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.534136][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.557180][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.573925][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.613727][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.638045][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.655805][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.674733][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.694159][ T6002] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 197.783336][ T6002] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 197.783363][ T6002] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.819131][ T6002] usb 3-1: USB disconnect, device number 4 [ 199.483512][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.643761][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 199.645990][ T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 199.646027][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.689466][ T9] usb 3-1: config 0 descriptor?? [ 199.713475][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.752975][ T9] as10x_usb: device has been detected [ 199.763508][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 199.804739][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 199.893529][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.893561][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.941990][ T9] as10x_usb: error during firmware upload part1 [ 199.942689][ T9] Registered device nBox DVB-T Dongle [ 199.965732][ T10] usb 2-1: config 0 descriptor?? [ 200.004945][ T10] cp210x 2-1:0.0: cp210x converter detected [ 200.125065][ T5892] usb 3-1: USB disconnect, device number 5 [ 200.339215][ T5892] Unregistered device nBox DVB-T Dongle [ 200.365465][ T5892] as10x_usb: device has been disconnected [ 200.422275][ T10] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 200.442667][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 200.442869][ T10] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 200.498773][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 200.528857][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 200.528879][ T36] audit: type=1326 audit(1772745187.420:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 200.528931][ T36] audit: type=1326 audit(1772745187.450:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 200.528980][ T36] audit: type=1326 audit(1772745187.450:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 200.543581][ T10] usb 2-1: USB disconnect, device number 9 [ 200.554311][ T36] audit: type=1326 audit(1772745187.470:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8763c799 code=0x7ffc0000 [ 200.666168][ T36] audit: type=1326 audit(1772745187.590:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c875fcfce code=0x7ffc0000 [ 200.666228][ T36] audit: type=1326 audit(1772745187.590:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c8763c42b code=0x7ffc0000 [ 200.666272][ T36] audit: type=1326 audit(1772745187.590:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c8763c42b code=0x7ffc0000 [ 200.758880][ T6450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.760496][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.784813][ T10] cp210x 2-1:0.0: device disconnected [ 200.814547][ T36] audit: type=1326 audit(1772745187.710:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c8763c42b code=0x7ffc0000 [ 200.814829][ T36] audit: type=1326 audit(1772745187.740:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c8763c42b code=0x7ffc0000 [ 200.922485][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.935336][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.005020][ T36] audit: type=1326 audit(1772745187.930:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c8763c42b code=0x7ffc0000 [ 201.133419][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 201.302698][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.302718][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.302734][ T5892] usb 3-1: config 1 has no interface number 0 [ 201.302763][ T5892] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.363452][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.363484][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.363504][ T5892] usb 3-1: Product: syz [ 201.363519][ T5892] usb 3-1: Manufacturer: syz [ 201.363534][ T5892] usb 3-1: SerialNumber: syz [ 201.440084][ T5892] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 201.440135][ T5892] cdc_ncm 3-1:1.1: bind() failure [ 201.449065][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 201.738606][ T5892] usb 3-1: USB disconnect, device number 6 [ 202.822827][ T6486] netlink: 104 bytes leftover after parsing attributes in process `syz.0.154'. [ 205.594759][ T6002] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 205.797273][ T6002] usb 2-1: Using ep0 maxpacket: 32 [ 205.802204][ T6002] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 205.802239][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.828569][ T6002] usb 2-1: config 0 descriptor?? [ 205.994170][ T6002] as10x_usb: device has been detected [ 205.997421][ T6002] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 206.228187][ T6002] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 206.358329][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 206.358345][ T36] audit: type=1326 audit(1772745193.280:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.358383][ T36] audit: type=1326 audit(1772745193.280:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.358415][ T36] audit: type=1326 audit(1772745193.280:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.358445][ T36] audit: type=1326 audit(1772745193.280:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.358476][ T36] audit: type=1326 audit(1772745193.280:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.358507][ T36] audit: type=1326 audit(1772745193.280:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.358537][ T36] audit: type=1326 audit(1772745193.280:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.369889][ T6516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.378913][ T36] audit: type=1326 audit(1772745193.290:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.379111][ T36] audit: type=1326 audit(1772745193.290:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 206.379227][ T36] audit: type=1326 audit(1772745193.290:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6515 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2265cbcfce code=0x7ffc0000 [ 206.420666][ T6002] as10x_usb: error during firmware upload part1 [ 206.422434][ T6002] Registered device nBox DVB-T Dongle [ 206.541856][ T6002] usb 2-1: USB disconnect, device number 10 [ 206.917086][ T6002] Unregistered device nBox DVB-T Dongle [ 206.925469][ T6002] as10x_usb: device has been disconnected [ 207.273451][ T6002] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.447688][ T6002] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.447709][ T6002] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.447724][ T6002] usb 2-1: config 1 has no interface number 0 [ 207.447754][ T6002] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.503408][ T5804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 207.509137][ T6002] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.509159][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.509173][ T6002] usb 2-1: Product: syz [ 207.509184][ T6002] usb 2-1: Manufacturer: syz [ 207.509194][ T6002] usb 2-1: SerialNumber: syz [ 207.625558][ T6002] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing [ 207.625597][ T6002] cdc_ncm 2-1:1.1: bind() failure [ 207.660903][ T5804] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.660935][ T5804] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 207.660958][ T5804] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.732253][ T5804] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.732281][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.732295][ T5804] usb 1-1: Product: syz [ 207.732305][ T5804] usb 1-1: Manufacturer: syz [ 207.732316][ T5804] usb 1-1: SerialNumber: syz [ 207.836278][ T5804] hub 1-1:1.0: bad descriptor, ignoring hub [ 207.836307][ T5804] hub 1-1:1.0: probe with driver hub failed with error -5 [ 208.049757][ T5892] usb 2-1: USB disconnect, device number 11 [ 208.194878][ T5804] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.594018][ T5804] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 209.113782][ T5804] usb 1-1: USB disconnect, device number 8 [ 209.151250][ T5804] usblp0: removed [ 209.799630][ T6573] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 209.885519][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.190'. [ 209.986283][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.403522][ T5878] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 210.565028][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 210.588580][ T5878] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 210.588612][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.588632][ T5878] usb 1-1: Product: syz [ 210.588646][ T5878] usb 1-1: Manufacturer: syz [ 210.588660][ T5878] usb 1-1: SerialNumber: syz [ 210.654620][ T5878] usb 1-1: config 0 descriptor?? [ 210.676957][ T5878] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 211.312420][ T6605] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 211.369109][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 211.408564][ T6605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.948130][ T6620] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 212.438372][ T6633] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 212.445750][ T6633] binder: 6629:6633 ioctl c0306201 0 returned -14 [ 212.938647][ T5878] gspca_ov534_9: reg_r err -71 [ 213.223357][ T5878] gspca_ov534_9: Unknown sensor 0000 [ 213.223475][ T5878] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 213.226059][ T5878] usb 1-1: USB disconnect, device number 9 [ 215.372233][ T6670] input: syz0 as /devices/virtual/input/input6 [ 216.844364][ T5878] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.113343][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 217.116260][ T5878] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 217.116291][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.121812][ T5878] usb 3-1: config 0 descriptor?? [ 217.188551][ T5878] as10x_usb: device has been detected [ 217.189496][ T5878] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 217.243644][ T5878] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 217.247508][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 217.247527][ T36] audit: type=1326 audit(1772745204.160:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.296805][ T5878] as10x_usb: error during firmware upload part1 [ 217.297574][ T5878] Registered device nBox DVB-T Dongle [ 217.329743][ T36] audit: type=1326 audit(1772745204.220:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.329787][ T36] audit: type=1326 audit(1772745204.250:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.329819][ T36] audit: type=1326 audit(1772745204.250:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.435332][ T36] audit: type=1326 audit(1772745204.330:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.435389][ T36] audit: type=1326 audit(1772745204.330:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.435437][ T36] audit: type=1326 audit(1772745204.330:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.435482][ T36] audit: type=1326 audit(1772745204.330:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.435535][ T36] audit: type=1326 audit(1772745204.330:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.435568][ T36] audit: type=1326 audit(1772745204.330:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6697 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 217.539201][ T42] Bluetooth: hci5: Frame reassembly failed (-84) [ 217.734368][ T5804] usb 3-1: USB disconnect, device number 7 [ 217.799198][ T5804] Unregistered device nBox DVB-T Dongle [ 217.826254][ T5804] as10x_usb: device has been disconnected [ 217.969326][ T6694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.323481][ T5804] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.514026][ T5804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.514056][ T5804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 218.514078][ T5804] usb 3-1: config 1 has no interface number 0 [ 218.514124][ T5804] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.613786][ T5804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.613819][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.613839][ T5804] usb 3-1: Product: syz [ 218.613854][ T5804] usb 3-1: Manufacturer: syz [ 218.613869][ T5804] usb 3-1: SerialNumber: syz [ 218.740128][ T5804] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 218.740163][ T5804] cdc_ncm 3-1:1.1: bind() failure [ 218.936531][ T6002] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 218.958199][ T5804] usb 3-1: USB disconnect, device number 8 [ 219.250091][ T6002] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.250114][ T6002] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.250131][ T6002] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.287535][ T6002] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 219.287558][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.287572][ T6002] usb 2-1: Product: syz [ 219.287583][ T6002] usb 2-1: Manufacturer: syz [ 219.287593][ T6002] usb 2-1: SerialNumber: syz [ 219.355797][ T6002] hub 2-1:1.0: bad descriptor, ignoring hub [ 219.355828][ T6002] hub 2-1:1.0: probe with driver hub failed with error -5 [ 219.553943][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.890469][ T6002] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 220.133857][ T6002] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 220.623975][ T43] usb 2-1: USB disconnect, device number 12 [ 220.653609][ T43] usblp0: removed [ 222.876386][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 223.024710][ T43] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 223.076429][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.076461][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.076482][ T43] usb 1-1: Product: syz [ 223.076496][ T43] usb 1-1: Manufacturer: syz [ 223.076511][ T43] usb 1-1: SerialNumber: syz [ 223.131786][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.166882][ T6002] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.640657][ T6778] random: crng reseeded on system resumption [ 224.734626][ T6002] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 224.734801][ T6002] ath9k_htc: Failed to initialize the device [ 224.805418][ T10] usb 1-1: USB disconnect, device number 10 [ 224.929607][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 226.323532][ T6002] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 226.433957][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 226.690052][ T6002] usb 4-1: Using ep0 maxpacket: 8 [ 226.733083][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.733135][ T6002] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 226.733153][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.745891][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 226.747639][ T6002] usb 4-1: config 0 descriptor?? [ 226.753818][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.753874][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.753904][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.753926][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.753950][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.782423][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.782454][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.782475][ T10] usb 1-1: Manufacturer: syz [ 226.866604][ T10] usb 1-1: config 0 descriptor?? [ 227.147746][ T6002] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 227.212013][ T6002] usb 4-1: USB disconnect, device number 5 [ 227.433794][ T10] rc_core: IR keymap rc-hauppauge not found [ 227.433816][ T10] Registered IR keymap rc-empty [ 227.433970][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.453692][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.475880][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 227.480604][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 227.511796][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.543615][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.563467][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.583662][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.603649][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.623518][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.643448][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.663488][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.683458][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.703469][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.770455][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 227.770481][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.812867][ T10] usb 1-1: USB disconnect, device number 11 [ 229.296485][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 229.484701][ T9] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 229.560604][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.560628][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.560642][ T9] usb 1-1: Product: syz [ 229.560652][ T9] usb 1-1: Manufacturer: syz [ 229.560663][ T9] usb 1-1: SerialNumber: syz [ 229.618069][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 229.740922][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.209339][ T6870] random: crng reseeded on system resumption [ 231.403329][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 231.403525][ T9] ath9k_htc: Failed to initialize the device [ 232.468324][ T6002] usb 1-1: USB disconnect, device number 12 [ 232.501384][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 232.539748][ T6002] usb 1-1: ath9k_htc: USB layer deinitialized [ 233.781065][ T6926] netlink: 104 bytes leftover after parsing attributes in process `syz.1.338'. [ 236.605481][ T6984] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 236.609024][ T6984] binder: 6979:6984 ioctl c0306201 0 returned -14 [ 237.278614][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 237.278636][ T36] audit: type=1326 audit(1772745224.050:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.278687][ T36] audit: type=1326 audit(1772745224.050:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.278732][ T36] audit: type=1326 audit(1772745224.050:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.278778][ T36] audit: type=1326 audit(1772745224.050:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.278823][ T36] audit: type=1326 audit(1772745224.050:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.278868][ T36] audit: type=1326 audit(1772745224.050:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.278913][ T36] audit: type=1326 audit(1772745224.050:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.278957][ T36] audit: type=1326 audit(1772745224.050:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.279001][ T36] audit: type=1326 audit(1772745224.050:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 237.279044][ T36] audit: type=1326 audit(1772745224.050:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 238.804448][ T7018] netlink: 104 bytes leftover after parsing attributes in process `syz.0.376'. [ 242.435539][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 242.588567][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.588589][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.588606][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.591048][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.591083][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.591098][ T9] usb 2-1: Product: syz [ 242.591108][ T9] usb 2-1: Manufacturer: syz [ 242.591118][ T9] usb 2-1: SerialNumber: syz [ 242.679534][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 242.679586][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 242.914517][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.484967][ T7081] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 244.000966][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 244.001011][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 244.001039][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 244.001753][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 244.001783][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 244.328601][ T6002] usb 2-1: USB disconnect, device number 13 [ 244.339314][ T6002] usblp0: removed [ 248.465087][ T6002] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.655750][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 248.655803][ T6002] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 248.655820][ T6002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.659425][ T6002] usb 1-1: config 0 descriptor?? [ 248.660265][ T7197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.110411][ T6002] hid (null): global environment stack underflow [ 249.214550][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214593][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214621][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214648][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214675][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214702][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214734][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214762][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214789][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.214817][ T6002] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 249.219041][ T6002] asus 0003:0B05:1ABE.0002: global environment stack underflow [ 249.219063][ T6002] asus 0003:0B05:1ABE.0002: item 0 0 1 11 parsing failed [ 249.219889][ T6002] asus 0003:0B05:1ABE.0002: Asus hid parse failed: -22 [ 249.220020][ T6002] asus 0003:0B05:1ABE.0002: probe with driver asus failed with error -22 [ 249.450797][ T6002] usb 1-1: USB disconnect, device number 13 [ 250.296840][ T7229] netlink: 104 bytes leftover after parsing attributes in process `syz.1.459'. [ 253.793476][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 253.952133][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 253.952165][ T31] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 253.952185][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 253.952205][ T31] usb 2-1: config 220 has no interface number 2 [ 253.952274][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 253.952302][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 253.952321][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 253.952338][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 254.023453][ T5891] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 254.034317][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 254.034348][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.034367][ T31] usb 2-1: Product: syz [ 254.034381][ T31] usb 2-1: Manufacturer: syz [ 254.034395][ T31] usb 2-1: SerialNumber: syz [ 254.178225][ T5891] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.178265][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.230483][ T5891] usb 4-1: config 0 descriptor?? [ 254.286270][ T5891] cp210x 4-1:0.0: cp210x converter detected [ 254.359416][ T7303] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 254.368071][ T7303] binder: 7298:7303 ioctl c0306201 0 returned -14 [ 254.378248][ T7303] binder: BINDER_SET_CONTEXT_MGR already set [ 254.378337][ T7303] binder: 7298:7303 ioctl 4018620d 200000004a80 returned -16 [ 254.435192][ T31] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 254.435238][ T31] uvcvideo 2-1:220.0: No valid video chain found. [ 254.435365][ T31] usb 2-1: selecting invalid altsetting 0 [ 254.487237][ T31] usb 2-1: selecting invalid altsetting 0 [ 254.487276][ T31] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 254.491528][ T31] usb 2-1: USB disconnect, device number 14 [ 254.570009][ T5891] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 254.570032][ T5891] cp210x 4-1:0.0: querying part number failed [ 254.607535][ T5891] usb 4-1: cp210x converter now attached to ttyUSB0 [ 256.798719][ T5804] usb 4-1: USB disconnect, device number 6 [ 256.811725][ T5804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 256.812437][ T5804] cp210x 4-1:0.0: device disconnected [ 257.303543][ T5878] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 257.462300][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 257.462352][ T5878] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 257.462386][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.513081][ T5878] usb 4-1: config 0 descriptor?? [ 257.521853][ T7368] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.984837][ T5878] hid_parser_main: 375 callbacks suppressed [ 257.984856][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.984878][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.984896][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.984914][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.984932][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.984950][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.984969][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.984987][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.985005][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.985023][ T5878] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 257.987814][ T5878] asus 0003:0B05:1ABE.0003: collection stack underflow [ 257.987831][ T5878] asus 0003:0B05:1ABE.0003: item 0 2 0 12 parsing failed [ 258.005209][ T5878] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 258.005522][ T5878] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 258.183445][ T31] usb 4-1: USB disconnect, device number 7 [ 259.663531][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 259.836006][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.836028][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.836045][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.839340][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.839370][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.839390][ T31] usb 4-1: Product: syz [ 259.839404][ T31] usb 4-1: Manufacturer: syz [ 259.839417][ T31] usb 4-1: SerialNumber: syz [ 259.928684][ T31] hub 4-1:1.0: bad descriptor, ignoring hub [ 259.928725][ T31] hub 4-1:1.0: probe with driver hub failed with error -5 [ 260.246650][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 260.663416][ T9] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 261.287724][ T6002] usb 4-1: USB disconnect, device number 8 [ 261.307107][ T6002] usblp0: removed [ 262.388491][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.388567][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.775489][ T7495] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 263.839867][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'. [ 263.923744][ T7495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.177248][ T7496] bond2: entered promiscuous mode [ 264.177277][ T7496] bond2: entered allmulticast mode [ 268.403901][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 268.668254][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.668284][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.668309][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.678783][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 268.678814][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.678835][ T9] usb 4-1: Product: syz [ 268.678849][ T9] usb 4-1: Manufacturer: syz [ 268.678863][ T9] usb 4-1: SerialNumber: syz [ 268.724309][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 268.724350][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 269.016727][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 269.573475][ T7560] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 269.993750][ T9] usb 4-1: USB disconnect, device number 9 [ 270.002984][ T9] usblp0: removed [ 271.094646][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.165744][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 271.246050][ T9] usb 4-1: config index 0 descriptor too short (expected 65426, got 146) [ 271.246080][ T9] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 271.246102][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.246121][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 271.247893][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.247917][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.247934][ T9] usb 4-1: SerialNumber: syz [ 271.325569][ T9] usb 4-1: config 0 descriptor?? [ 271.330547][ T43] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 271.330575][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 271.330624][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.330651][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.330674][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.330716][ T43] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 271.330740][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.414289][ T43] usb 1-1: config 0 descriptor?? [ 271.463406][ T5892] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 271.586558][ T31] usb 4-1: USB disconnect, device number 10 [ 271.626063][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 271.626125][ T5892] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 271.626150][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.666524][ T5892] usb 2-1: config 0 descriptor?? [ 271.667833][ T7610] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 271.942218][ T43] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0004/input/input8 [ 272.151519][ T5892] hid_parser_main: 371 callbacks suppressed [ 272.151545][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151574][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151599][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151625][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151650][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151676][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151703][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151729][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151755][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.151782][ T5892] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 272.216823][ T43] uclogic 0003:28BD:0909.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 272.275742][ T5892] asus 0003:0B05:1ABE.0005: collection stack underflow [ 272.275773][ T5892] asus 0003:0B05:1ABE.0005: item 0 2 0 12 parsing failed [ 272.281500][ T5892] asus 0003:0B05:1ABE.0005: Asus hid parse failed: -22 [ 272.281621][ T5892] asus 0003:0B05:1ABE.0005: probe with driver asus failed with error -22 [ 272.339585][ T31] usb 2-1: USB disconnect, device number 15 [ 272.353739][ T43] usb 1-1: USB disconnect, device number 14 [ 272.551611][ T7635] netlink: 'syz.3.638': attribute type 34 has an invalid length. [ 272.648211][ T7631] fido_id[7631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 272.833787][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 272.998035][ T31] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 273.030157][ T31] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.030192][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.030213][ T31] usb 4-1: Product: syz [ 273.030227][ T31] usb 4-1: Manufacturer: syz [ 273.030242][ T31] usb 4-1: SerialNumber: syz [ 273.101238][ T31] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.150020][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 273.583832][ T7635] random: crng reseeded on system resumption [ 274.455998][ T7685] mmap: syz.0.642 (7685) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 274.711069][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 274.711363][ T43] ath9k_htc: Failed to initialize the device [ 274.742933][ T31] usb 4-1: USB disconnect, device number 11 [ 274.770880][ T31] usb 4-1: ath9k_htc: USB layer deinitialized [ 275.796794][ T7653] syz.0.642 (7653) used greatest stack depth: 16952 bytes left [ 275.913399][ T5892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 275.973445][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 276.071504][ T5892] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 276.112073][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.112104][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.112132][ T5892] usb 4-1: Product: syz [ 276.112147][ T5892] usb 4-1: Manufacturer: syz [ 276.112162][ T5892] usb 4-1: SerialNumber: syz [ 276.133400][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 276.174650][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.174679][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.196996][ T5891] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 276.197028][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.197049][ T5891] usb 2-1: Product: syz [ 276.197064][ T5891] usb 2-1: Manufacturer: syz [ 276.197078][ T5891] usb 2-1: SerialNumber: syz [ 276.285072][ T5892] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.288760][ T5891] usb 2-1: config 0 descriptor?? [ 276.341753][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.792271][ T7710] random: crng reseeded on system resumption [ 276.869124][ T31] usb 4-1: USB disconnect, device number 12 [ 277.497694][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 277.497881][ T10] ath9k_htc: Failed to initialize the device [ 277.503855][ T31] usb 4-1: ath9k_htc: USB layer deinitialized [ 277.986162][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 277.986184][ T36] audit: type=1326 audit(1772745264.900:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 277.986233][ T36] audit: type=1326 audit(1772745264.900:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.243516][ T36] audit: type=1326 audit(1772745264.910:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.243691][ T36] audit: type=1326 audit(1772745264.910:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.243814][ T36] audit: type=1326 audit(1772745264.910:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.243914][ T36] audit: type=1326 audit(1772745264.920:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.244035][ T36] audit: type=1326 audit(1772745264.920:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.244141][ T36] audit: type=1326 audit(1772745264.920:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.244270][ T36] audit: type=1326 audit(1772745264.920:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.244391][ T36] audit: type=1326 audit(1772745264.930:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7777 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 278.945784][ T9] usb 2-1: USB disconnect, device number 16 [ 279.429870][ T1497] Bluetooth: hci5: Frame reassembly failed (-84) [ 280.444191][ T7814] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 280.447482][ T7814] binder: 7806:7814 ioctl c0306201 0 returned -14 [ 281.473438][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 281.480085][ T5114] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 281.743496][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.899830][ T9] usb 1-1: config index 0 descriptor too short (expected 65426, got 146) [ 281.899879][ T9] usb 1-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 281.899900][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.899919][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 281.934331][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.934363][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.934384][ T9] usb 1-1: SerialNumber: syz [ 281.986865][ T9] usb 1-1: config 0 descriptor?? [ 282.225533][ T5892] usb 1-1: USB disconnect, device number 15 [ 285.294362][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 285.475829][ T9] usb 2-1: config index 0 descriptor too short (expected 65426, got 146) [ 285.475857][ T9] usb 2-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 285.475878][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.475896][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 285.482012][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 285.482042][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 285.482063][ T9] usb 2-1: SerialNumber: syz [ 285.495092][ T9] usb 2-1: config 0 descriptor?? [ 285.733688][ T43] usb 2-1: USB disconnect, device number 17 [ 287.954540][ T5891] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 288.139991][ T5891] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 288.140038][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.140058][ T5891] usb 2-1: Product: syz [ 288.140071][ T5891] usb 2-1: Manufacturer: syz [ 288.140085][ T5891] usb 2-1: SerialNumber: syz [ 288.140780][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 288.162853][ T5891] usb 2-1: config 0 descriptor?? [ 288.463345][ T5891] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.283437][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 289.437309][ T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 289.437339][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.474462][ T43] usb 4-1: config 0 descriptor?? [ 289.491211][ T43] cp210x 4-1:0.0: cp210x converter detected [ 289.988922][ T43] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 289.988954][ T43] cp210x 4-1:0.0: querying part number failed [ 290.031338][ T43] usb 4-1: cp210x converter now attached to ttyUSB0 [ 290.073956][ T43] usb 4-1: USB disconnect, device number 13 [ 290.107855][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 290.109977][ T43] cp210x 4-1:0.0: device disconnected [ 290.778407][ T5891] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 290.812780][ T5891] usb 2-1: USB disconnect, device number 18 [ 290.921006][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 291.103377][ T5892] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 291.255988][ T5892] usb 4-1: config index 0 descriptor too short (expected 65426, got 146) [ 291.256018][ T5892] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 291.256038][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.256057][ T5892] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 291.257607][ T5892] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.257634][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.257653][ T5892] usb 4-1: SerialNumber: syz [ 291.335594][ T5892] usb 4-1: config 0 descriptor?? [ 291.463393][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 291.600199][ T31] usb 4-1: USB disconnect, device number 14 [ 291.623376][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 291.625769][ T43] usb 1-1: config 0 has no interfaces? [ 291.631022][ T43] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 291.631444][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.631468][ T43] usb 1-1: Product: syz [ 291.631483][ T43] usb 1-1: Manufacturer: syz [ 291.631497][ T43] usb 1-1: SerialNumber: syz [ 291.694703][ T43] usb 1-1: config 0 descriptor?? [ 291.734245][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 291.900703][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 291.900737][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.900758][ T9] usb 2-1: Product: syz [ 291.900773][ T9] usb 2-1: Manufacturer: syz [ 291.900787][ T9] usb 2-1: SerialNumber: syz [ 291.945884][ T9] usb 2-1: config 0 descriptor?? [ 292.044192][ T8033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.815'. [ 292.069514][ T43] usb 1-1: USB disconnect, device number 16 [ 292.169655][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 293.212989][ T8100] netlink: 104 bytes leftover after parsing attributes in process `syz.0.841'. [ 294.630264][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 294.638073][ T9] usb 2-1: USB disconnect, device number 19 [ 297.469560][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 297.469579][ T36] audit: type=1326 audit(1772745284.390:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.469629][ T36] audit: type=1326 audit(1772745284.390:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.469676][ T36] audit: type=1326 audit(1772745284.390:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.469721][ T36] audit: type=1326 audit(1772745284.390:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.469767][ T36] audit: type=1326 audit(1772745284.390:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.469824][ T36] audit: type=1326 audit(1772745284.390:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.469869][ T36] audit: type=1326 audit(1772745284.390:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.472229][ T36] audit: type=1326 audit(1772745284.390:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.494115][ T36] audit: type=1326 audit(1772745284.410:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 297.497140][ T36] audit: type=1326 audit(1772745284.420:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8135 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5e455fc799 code=0x7ffc0000 [ 300.921775][ T8203] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 300.928370][ T8203] binder: 8196:8203 ioctl c0306201 0 returned -14 [ 300.931781][ T8203] binder: BINDER_SET_CONTEXT_MGR already set [ 300.931796][ T8203] binder: 8196:8203 ioctl 4018620d 200000004a80 returned -16 [ 300.944803][ T5892] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 301.125744][ T5892] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 301.125777][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.160916][ T5892] usb 2-1: config 0 descriptor?? [ 301.176145][ T5892] cp210x 2-1:0.0: cp210x converter detected [ 301.441950][ T5892] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 301.441974][ T5892] cp210x 2-1:0.0: querying part number failed [ 301.570329][ T5892] usb 2-1: cp210x converter now attached to ttyUSB0 [ 301.583681][ T5892] usb 2-1: USB disconnect, device number 20 [ 301.613495][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 301.614389][ T5892] cp210x 2-1:0.0: device disconnected [ 307.099952][ T8314] geneve1: entered allmulticast mode [ 308.225138][ T8344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.944'. [ 310.113698][ T6002] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 310.274445][ T6002] usb 4-1: Using ep0 maxpacket: 16 [ 310.278400][ T6002] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.278455][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.278484][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.278507][ T6002] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 310.278533][ T6002] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.280899][ T6002] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 310.280927][ T6002] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 310.280948][ T6002] usb 4-1: Manufacturer: syz [ 310.396673][ T6002] usb 4-1: config 0 descriptor?? [ 310.833971][ T6002] rc_core: IR keymap rc-hauppauge not found [ 310.833993][ T6002] Registered IR keymap rc-empty [ 310.834187][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.854035][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.875873][ T6002] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 310.913005][ T6002] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 310.942232][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.953418][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.973898][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 310.993804][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.013402][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.033711][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.053511][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.073966][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.093588][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.113409][ T6002] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.150997][ T6002] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 311.151026][ T6002] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 311.245796][ T6002] usb 4-1: USB disconnect, device number 15 [ 312.317845][ T5892] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 312.483462][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 312.510648][ T5892] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 312.510679][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.550906][ T5892] usb 4-1: config 0 descriptor?? [ 312.569310][ T5892] as10x_usb: device has been detected [ 312.570292][ T5892] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 312.601807][ T5892] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 312.630754][ T5892] as10x_usb: error during firmware upload part1 [ 312.631459][ T5892] Registered device nBox DVB-T Dongle [ 312.806890][ T9] usb 4-1: USB disconnect, device number 16 [ 312.856736][ T9] Unregistered device nBox DVB-T Dongle [ 312.865292][ T9] as10x_usb: device has been disconnected [ 313.118840][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 313.118859][ T36] audit: type=1326 audit(1772745300.040:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.164492][ T36] audit: type=1326 audit(1772745300.040:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.166799][ T36] audit: type=1326 audit(1772745300.090:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.167643][ T36] audit: type=1326 audit(1772745300.090:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.167908][ T36] audit: type=1326 audit(1772745300.090:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.170084][ T36] audit: type=1326 audit(1772745300.090:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.170367][ T36] audit: type=1326 audit(1772745300.090:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.170537][ T36] audit: type=1326 audit(1772745300.090:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.189803][ T8419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.204791][ T36] audit: type=1326 audit(1772745300.110:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.204933][ T36] audit: type=1326 audit(1772745300.110:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.3.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 313.538801][ T6002] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 313.663357][ T6002] usb 4-1: device descriptor read/64, error -71 [ 313.903725][ T6002] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 314.033370][ T6002] usb 4-1: device descriptor read/64, error -71 [ 314.144018][ T6002] usb usb4-port1: attempt power cycle [ 314.483392][ T6002] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 314.506820][ T6002] usb 4-1: device descriptor read/8, error -71 [ 314.753461][ T6002] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 314.789046][ T6002] usb 4-1: device descriptor read/8, error -71 [ 314.895285][ T6002] usb usb4-port1: unable to enumerate USB device [ 316.133560][ T5892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 316.285525][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 316.288924][ T5892] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 316.288954][ T5892] usb 2-1: config 0 has no interface number 0 [ 316.289001][ T5892] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.289029][ T5892] usb 2-1: config 0 interface 85 has no altsetting 0 [ 316.292757][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 316.292788][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.292810][ T5892] usb 2-1: Product: syz [ 316.292825][ T5892] usb 2-1: Manufacturer: syz [ 316.292839][ T5892] usb 2-1: SerialNumber: syz [ 316.377801][ T5892] usb 2-1: config 0 descriptor?? [ 316.495439][ T31] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 316.663185][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.663261][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.663284][ T31] usb 1-1: Product: syz [ 316.663299][ T31] usb 1-1: Manufacturer: syz [ 316.663314][ T31] usb 1-1: SerialNumber: syz [ 316.698087][ T31] usb 1-1: config 0 descriptor?? [ 316.948523][ T31] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.013559][ T5892] appletouch 2-1:0.85: Failed to request geyser raw mode [ 317.013826][ T5892] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 317.055718][ T5892] usb 2-1: USB disconnect, device number 21 [ 319.149129][ T31] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 319.231479][ T31] usb 1-1: USB disconnect, device number 17 [ 320.139568][ T8600] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1063'. [ 320.223386][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 320.373415][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 320.376130][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.376187][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.376216][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.376239][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 320.376262][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.377729][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.377757][ T31] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 320.377830][ T31] usb 1-1: Manufacturer: syz [ 320.496199][ T31] usb 1-1: config 0 descriptor?? [ 320.956066][ T31] rc_core: IR keymap rc-hauppauge not found [ 320.956083][ T31] Registered IR keymap rc-empty [ 320.956214][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 320.973620][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 320.995906][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 320.998122][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 321.059157][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.073531][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.093470][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.113431][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.133452][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.153689][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.173515][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.193551][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.213623][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.236934][ T31] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.285400][ T31] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 321.285420][ T31] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 321.386184][ T31] usb 1-1: USB disconnect, device number 18 [ 322.445802][ T8644] usb usb7: usbfs: process 8644 (syz.0.1081) did not claim interface 0 before use [ 323.453401][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 323.606500][ T9] usb 4-1: config index 0 descriptor too short (expected 65426, got 146) [ 323.606531][ T9] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 323.606552][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.606571][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 323.607657][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.607677][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.607691][ T9] usb 4-1: SerialNumber: syz [ 323.695596][ T9] usb 4-1: config 0 descriptor?? [ 323.799286][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.801784][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.908108][ T9] usb 4-1: USB disconnect, device number 21 [ 325.529904][ T5892] IPVS: starting estimator thread 0... [ 325.623657][ T8710] IPVS: using max 11 ests per chain, 26400 per kthread [ 326.097719][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 326.483792][ T8738] IPv4: Oversized IP packet from 127.202.26.0 [ 328.074403][ T8764] syz_tun: entered allmulticast mode [ 328.198678][ T8763] syz_tun: left allmulticast mode [ 340.594002][ T8952] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 343.278341][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 343.783839][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 344.030918][ T43] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 344.030961][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.030981][ T43] usb 1-1: Product: syz [ 344.030995][ T43] usb 1-1: Manufacturer: syz [ 344.031009][ T43] usb 1-1: SerialNumber: syz [ 344.071775][ T43] usb 1-1: config 0 descriptor?? [ 345.096096][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 345.658524][ T43] gspca_ov534_9: reg_w failed -110 [ 346.053602][ T43] gspca_ov534_9: Unknown sensor 0000 [ 346.054805][ T43] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 346.745716][ T5891] usb 1-1: USB disconnect, device number 19 [ 359.149276][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 365.943420][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 366.033351][ T5878] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 366.118506][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 366.118529][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 366.118546][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.122080][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 366.122102][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.122116][ T43] usb 4-1: Product: syz [ 366.122127][ T43] usb 4-1: Manufacturer: syz [ 366.122137][ T43] usb 4-1: SerialNumber: syz [ 366.228063][ T43] hub 4-1:1.0: bad descriptor, ignoring hub [ 366.228091][ T43] hub 4-1:1.0: probe with driver hub failed with error -5 [ 366.315525][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 366.315563][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 366.345535][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 366.345569][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 366.400723][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 366.400755][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 366.426714][ T5878] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 366.426746][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.426767][ T5878] usb 1-1: Product: syz [ 366.426781][ T5878] usb 1-1: Manufacturer: syz [ 366.426797][ T5878] usb 1-1: SerialNumber: syz [ 366.432546][ T5878] usb 1-1: config 0 descriptor?? [ 366.478962][ T5878] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 366.479401][ T5878] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 366.608929][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 367.183484][ T5891] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 367.439621][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.461945][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.471226][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.496352][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.499746][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.654037][ T31] usb 4-1: USB disconnect, device number 22 [ 367.658312][ T31] usblp0: removed [ 369.553490][ T5816] Bluetooth: hci5: command tx timeout [ 369.750693][ T43] usb 1-1: USB disconnect, device number 20 [ 369.853368][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 369.859711][ T1403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.013572][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.013603][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.013627][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.055511][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 370.055602][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.055866][ T31] usb 4-1: Product: syz [ 370.055908][ T31] usb 4-1: Manufacturer: syz [ 370.055955][ T31] usb 4-1: SerialNumber: syz [ 370.156567][ T31] hub 4-1:1.0: bad descriptor, ignoring hub [ 370.156610][ T31] hub 4-1:1.0: probe with driver hub failed with error -5 [ 370.375027][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 370.546621][ T1403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.672065][ T9313] chnl_net:caif_netlink_parms(): no params data found [ 370.932598][ T1403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.003417][ T9345] usb 4-1: reset high-speed USB device number 23 using dummy_hcd [ 371.569762][ T5878] usb 4-1: USB disconnect, device number 23 [ 371.574042][ T1403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.634140][ T5816] Bluetooth: hci5: command tx timeout [ 371.680730][ T5878] usblp0: removed [ 372.315034][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.315162][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.316108][ T9313] bridge_slave_0: entered allmulticast mode [ 372.349570][ T9313] bridge_slave_0: entered promiscuous mode [ 372.577438][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.577655][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.577897][ T9313] bridge_slave_1: entered allmulticast mode [ 372.587858][ T9313] bridge_slave_1: entered promiscuous mode [ 372.974975][ T9313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.255763][ T9313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.692407][ T9313] team0: Port device team_slave_0 added [ 373.709637][ T9313] team0: Port device team_slave_1 added [ 373.716291][ T5816] Bluetooth: hci5: command tx timeout [ 373.984272][ T1403] bridge_slave_1: left allmulticast mode [ 373.985158][ T1403] bridge_slave_1: left promiscuous mode [ 373.986798][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.146296][ T1403] bridge_slave_0: left allmulticast mode [ 374.146321][ T1403] bridge_slave_0: left promiscuous mode [ 374.146514][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.956775][ T5804] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 375.111769][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 375.122096][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.122153][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.122185][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 375.122207][ T5804] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 375.122224][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.135008][ T5804] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.135095][ T5804] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.135148][ T5804] usb 2-1: Manufacturer: syz [ 375.235180][ T5804] usb 2-1: config 0 descriptor?? [ 375.604020][ T5804] rc_core: IR keymap rc-hauppauge not found [ 375.604042][ T5804] Registered IR keymap rc-empty [ 375.604378][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.623538][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.654874][ T5804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 375.658564][ T5804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 375.704752][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.723758][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.743911][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.765039][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.783564][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.797410][ T5816] Bluetooth: hci5: command tx timeout [ 375.807968][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.832252][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.843436][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.866664][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.883394][ T5804] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 375.963385][ T5804] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 375.963414][ T5804] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 376.055254][ T5804] usb 2-1: USB disconnect, device number 22 [ 377.173873][ T9471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 377.225757][ T1403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.325830][ T1403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.382091][ T1403] bond0 (unregistering): Released all slaves [ 377.691015][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.691033][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.691057][ T9313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.693506][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.693521][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.693546][ T9313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.883423][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 379.083784][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 379.083818][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.145021][ T10] usb 4-1: config 0 descriptor?? [ 379.160505][ T10] cp210x 4-1:0.0: cp210x converter detected [ 379.392347][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 379.392388][ T10] cp210x 4-1:0.0: querying part number failed [ 379.466366][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 379.589636][ T9313] hsr_slave_0: entered promiscuous mode [ 379.590706][ T9313] hsr_slave_1: entered promiscuous mode [ 379.591408][ T9313] debugfs: 'hsr0' already exists in 'hsr' [ 379.613220][ T9313] Cannot create hsr debugfs directory [ 380.943609][ T1403] hsr_slave_0: left promiscuous mode [ 380.990209][ T1403] hsr_slave_1: left promiscuous mode [ 381.003729][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.003911][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.099498][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.099526][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.272887][ T1403] veth1_macvtap: left promiscuous mode [ 381.282483][ T1403] veth0_macvtap: left promiscuous mode [ 381.282876][ T1403] veth1_vlan: left promiscuous mode [ 381.308947][ T1403] veth0_vlan: left promiscuous mode [ 381.478925][ T31] usb 4-1: USB disconnect, device number 24 [ 381.524627][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 381.525411][ T31] cp210x 4-1:0.0: device disconnected [ 383.784890][ T1403] team0 (unregistering): Port device team_slave_1 removed [ 383.856063][ T1403] team0 (unregistering): Port device team_slave_0 removed [ 385.359517][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.359611][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.323386][ T5891] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 389.409503][ T9313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.483293][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 389.485795][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.485860][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.485891][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.485913][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 389.485936][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.487416][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 389.487444][ T5891] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 389.487466][ T5891] usb 4-1: Manufacturer: syz [ 389.590255][ T5891] usb 4-1: config 0 descriptor?? [ 389.590679][ T9313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.707650][ T9313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.943815][ T9313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.211134][ T5891] rc_core: IR keymap rc-hauppauge not found [ 390.211157][ T5891] Registered IR keymap rc-empty [ 390.211323][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.224243][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.249401][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 390.274301][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 390.410685][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.423676][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.453530][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.473527][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.503973][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.523557][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.543522][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.563662][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.608965][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.633499][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.653502][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.699957][ T5891] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 390.699977][ T5891] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 390.810665][ T5891] usb 4-1: USB disconnect, device number 25 [ 390.867330][ T9672] netlink: 'syz.1.1503': attribute type 2 has an invalid length. [ 391.213540][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 391.586772][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 391.586804][ T10] usb 2-1: config 1 has no interface number 0 [ 391.586852][ T10] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 391.586882][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 391.586908][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 391.661641][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 391.661665][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.661680][ T10] usb 2-1: Product: syz [ 391.661691][ T10] usb 2-1: Manufacturer: syz [ 391.661701][ T10] usb 2-1: SerialNumber: syz [ 391.664019][ T9672] @„;: entered promiscuous mode [ 391.771075][ T9675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.771332][ T9675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 392.066345][ T9672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 392.066600][ T9672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 392.652315][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.056526][ T9313] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.125420][ T737] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.128392][ T737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.278972][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.282869][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.133558][ T9723] trusted_key: encrypted_key: key user:syz not found [ 397.169948][ T10] usb 2-1: Incompatible driver and firmware versions [ 397.799352][ T9313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.885534][ T10] usb 2-1: USB disconnect, device number 23 [ 401.658210][ T9313] veth0_vlan: entered promiscuous mode [ 401.756090][ T9313] veth1_vlan: entered promiscuous mode [ 401.898417][ T9313] veth0_macvtap: entered promiscuous mode [ 401.914174][ T9313] veth1_macvtap: entered promiscuous mode [ 401.965318][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.985195][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.038917][ T737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.041543][ T737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.041593][ T737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.041641][ T737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.518824][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.518848][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.545416][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 403.731726][ T10] usb 4-1: config index 0 descriptor too short (expected 65426, got 146) [ 403.731757][ T10] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 403.731778][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.731797][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 403.753493][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 403.753564][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 403.753609][ T10] usb 4-1: SerialNumber: syz [ 403.818360][ T10] usb 4-1: config 0 descriptor?? [ 403.876781][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.876807][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.023387][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 404.023411][ T36] audit: type=1326 audit(1772745390.940:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.024810][ T36] audit: type=1326 audit(1772745390.940:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.024856][ T36] audit: type=1326 audit(1772745390.940:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.024889][ T36] audit: type=1326 audit(1772745390.940:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.024921][ T36] audit: type=1326 audit(1772745390.940:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.024953][ T36] audit: type=1326 audit(1772745390.940:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.024997][ T36] audit: type=1326 audit(1772745390.940:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.025029][ T36] audit: type=1326 audit(1772745390.940:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.025062][ T36] audit: type=1326 audit(1772745390.940:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.025099][ T36] audit: type=1326 audit(1772745390.940:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9808 comm="syz.1.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2265cfc799 code=0x7ffc0000 [ 404.040049][ T31] usb 4-1: USB disconnect, device number 26 [ 404.399313][ T1126] Bluetooth: hci0: Frame reassembly failed (-84) [ 406.373291][ T5816] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 407.723378][ T5804] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 407.853346][ T5804] usb 2-1: device descriptor read/64, error -71 [ 408.103491][ T5804] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 408.254335][ T5804] usb 2-1: device descriptor read/64, error -71 [ 408.368094][ T5804] usb usb2-port1: attempt power cycle [ 408.744877][ T5804] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 408.783773][ T5804] usb 2-1: device descriptor read/8, error -71 [ 409.033365][ T5804] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 409.085482][ T5804] usb 2-1: device descriptor read/8, error -71 [ 409.193665][ T5804] usb usb2-port1: unable to enumerate USB device [ 409.649459][ T5804] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 409.837034][ T5804] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 409.837059][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.837074][ T5804] usb 5-1: Product: syz [ 409.837085][ T5804] usb 5-1: Manufacturer: syz [ 409.837096][ T5804] usb 5-1: SerialNumber: syz [ 409.841466][ T5804] usb 5-1: config 0 descriptor?? [ 410.085233][ T5804] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.087940][ T5804] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 412.095066][ T5804] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 412.095196][ T5804] usb 5-1: media controller created [ 412.285795][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.309330][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.330529][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.332905][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.347428][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.349657][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.789110][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 412.959402][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 412.961396][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.961463][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.961493][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 412.961510][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 412.961530][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.962741][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 412.962770][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 412.962791][ T10] usb 2-1: Manufacturer: syz [ 413.130370][ T10] usb 2-1: config 0 descriptor?? [ 413.233024][ T5804] i2c i2c-1: Added multiplexed i2c bus 2 [ 413.233053][ T5804] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 413.235189][ T5804] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 413.235744][ T5804] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 413.450624][ T5804] DVB: Unable to find symbol r820t_attach() [ 413.514284][ T10] rc_core: IR keymap rc-hauppauge not found [ 413.514307][ T10] Registered IR keymap rc-empty [ 413.514464][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.544666][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.592948][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 413.610180][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 413.704955][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.723573][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.754752][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.773384][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.809818][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.833394][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.863405][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.893430][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.923965][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.954791][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.002055][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 414.002076][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 414.052887][ T10] usb 2-1: USB disconnect, device number 28 [ 414.201187][ T5804] usb 5-1: USB disconnect, device number 2 [ 414.433633][ T5816] Bluetooth: hci0: command tx timeout [ 414.583394][ T5804] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 414.778986][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 414.779020][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 414.839465][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 414.839499][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 414.846473][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 414.846576][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 414.862483][ T5804] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 414.862515][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.862536][ T5804] usb 5-1: Product: syz [ 414.862550][ T5804] usb 5-1: Manufacturer: syz [ 414.862566][ T5804] usb 5-1: SerialNumber: syz [ 414.962133][ T5804] usb 5-1: config 0 descriptor?? [ 414.984189][ T5804] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 414.984340][ T5804] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 415.324768][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 415.473339][ T9] usb 2-1: device descriptor read/64, error -71 [ 416.103298][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 416.160025][ T4376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.243098][ T9] usb 2-1: device descriptor read/64, error -71 [ 416.355845][ T9] usb usb2-port1: attempt power cycle [ 416.514773][ T5816] Bluetooth: hci0: command tx timeout [ 416.700781][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 416.714571][ T9] usb 2-1: device descriptor read/8, error -71 [ 416.869637][ T4376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.953420][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 416.974356][ T9] usb 2-1: device descriptor read/8, error -71 [ 417.052857][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 417.052885][ T36] audit: type=1326 audit(1772745403.920:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.052925][ T36] audit: type=1326 audit(1772745403.930:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.052958][ T36] audit: type=1326 audit(1772745403.930:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.052991][ T36] audit: type=1326 audit(1772745403.930:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.053023][ T36] audit: type=1326 audit(1772745403.930:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.053056][ T36] audit: type=1326 audit(1772745403.930:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.053088][ T36] audit: type=1326 audit(1772745403.930:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.053121][ T36] audit: type=1326 audit(1772745403.930:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.058032][ T36] audit: type=1326 audit(1772745403.930:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.058207][ T36] audit: type=1326 audit(1772745403.940:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9945 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8176b5c799 code=0x7ffc0000 [ 417.083734][ T9] usb usb2-port1: unable to enumerate USB device [ 417.373093][ T737] Bluetooth: hci2: Frame reassembly failed (-84) [ 417.698099][ T4376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.877311][ T43] usb 5-1: USB disconnect, device number 3 [ 418.169875][ T4376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.363381][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 418.603461][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 418.603493][ T43] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 418.603531][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 418.606610][ T5114] Bluetooth: hci0: command tx timeout [ 418.615519][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 418.615623][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.615705][ T43] usb 5-1: Product: syz [ 418.615756][ T43] usb 5-1: Manufacturer: syz [ 418.615796][ T43] usb 5-1: SerialNumber: syz [ 418.922817][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 419.089242][ T43] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 419.089297][ T43] uvcvideo 5-1:220.0: No valid video chain found. [ 419.108707][ T43] usb 5-1: USB disconnect, device number 4 [ 419.313337][ T5816] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 419.972385][ T9966] netlink: 'syz.4.1587': attribute type 2 has an invalid length. [ 420.274802][ T9966] @„;: entered promiscuous mode [ 420.433541][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 420.588994][ T5891] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 420.589016][ T5891] usb 5-1: config 1 has no interface number 0 [ 420.589049][ T5891] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 420.589068][ T5891] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 420.589086][ T5891] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 420.595043][ T5891] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 420.595075][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.595096][ T5891] usb 5-1: Product: syz [ 420.595111][ T5891] usb 5-1: Manufacturer: syz [ 420.595125][ T5891] usb 5-1: SerialNumber: syz [ 420.684125][ T5816] Bluetooth: hci0: command tx timeout [ 420.744980][ T9968] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 420.745832][ T9968] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 420.870055][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.870176][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.870411][ T9922] bridge_slave_0: entered allmulticast mode [ 420.895197][ T9922] bridge_slave_0: entered promiscuous mode [ 420.968938][ T9966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 420.969163][ T9966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 421.255990][ T4376] bridge_slave_1: left allmulticast mode [ 421.256022][ T4376] bridge_slave_1: left promiscuous mode [ 421.302585][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.435566][ T43] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 421.643758][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 421.643794][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 421.654133][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 421.654166][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 421.658549][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 421.658586][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 421.664435][ T43] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 421.664466][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.664487][ T43] usb 1-1: Product: syz [ 421.664502][ T43] usb 1-1: Manufacturer: syz [ 421.664516][ T43] usb 1-1: SerialNumber: syz [ 421.790318][ T43] usb 1-1: config 0 descriptor?? [ 421.824401][ T43] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 421.825255][ T43] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 421.853704][ T43] ================================================================== [ 421.853793][ T43] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 421.854072][ T43] Read of size 8 at addr ffffc9000f259008 by task kworker/1:1/43 [ 421.854092][ T43] [ 421.854151][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.854176][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.854191][ T43] Workqueue: usb_hub_wq hub_event [ 421.854319][ T43] Call Trace: [ 421.854332][ T43] [ 421.854342][ T43] dump_stack_lvl+0xe8/0x150 [ 421.854457][ T43] print_report+0xba/0x230 [ 421.854510][ T43] ? __list_add_valid_or_report+0x4e/0x130 [ 421.854571][ T43] kasan_report+0x117/0x150 [ 421.854681][ T43] ? __list_add_valid_or_report+0x4e/0x130 [ 421.854722][ T43] __list_add_valid_or_report+0x4e/0x130 [ 421.854760][ T43] kcov_remote_stop+0x457/0x680 [ 421.854835][ T43] hub_event+0x49d8/0x4f60 [ 421.854894][ T43] ? __pfx_hub_event+0x10/0x10 [ 421.854933][ T43] ? process_scheduled_works+0xa25/0x1830 [ 421.854983][ T43] ? process_scheduled_works+0xa25/0x1830 [ 421.855013][ T43] process_scheduled_works+0xb02/0x1830 [ 421.855058][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.855093][ T43] ? assign_work+0x3d5/0x5e0 [ 421.855124][ T43] worker_thread+0xa50/0xfc0 [ 421.855167][ T43] kthread+0x388/0x470 [ 421.855188][ T43] ? __pfx_worker_thread+0x10/0x10 [ 421.855217][ T43] ? __pfx_kthread+0x10/0x10 [ 421.855241][ T43] ret_from_fork+0x51e/0xb90 [ 421.855285][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 421.855314][ T43] ? __switch_to+0xc7d/0x1450 [ 421.855358][ T43] ? __pfx_kthread+0x10/0x10 [ 421.855381][ T43] ret_from_fork_asm+0x1a/0x30 [ 421.855412][ T43] [ 421.855456][ T43] [ 421.855462][ T43] The buggy address belongs to a vmalloc virtual mapping [ 421.855506][ T43] Memory state around the buggy address: [ 421.855542][ T43] ffffc9000f258f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 421.855568][ T43] ffffc9000f258f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 421.855613][ T43] >ffffc9000f259000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 421.855626][ T43] ^ [ 421.855637][ T43] ffffc9000f259080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 421.855651][ T43] ffffc9000f259100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 421.855662][ T43] ================================================================== [ 421.855689][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 421.855707][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 421.855733][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.855748][ T43] Workqueue: usb_hub_wq hub_event [ 421.855779][ T43] Call Trace: [ 421.855788][ T43] [ 421.855797][ T43] vpanic+0x56c/0xa60 [ 421.855841][ T43] ? __pfx_vpanic+0x10/0x10 [ 421.855874][ T43] ? __pfx___schedule+0x10/0x10 [ 421.855972][ T43] panic+0xc5/0xd0 [ 421.856004][ T43] ? __pfx_panic+0x10/0x10 [ 421.856037][ T43] ? preempt_schedule_thunk+0x16/0x30 [ 421.856069][ T43] ? __list_add_valid_or_report+0x4e/0x130 [ 421.856105][ T43] check_panic_on_warn+0x89/0xb0 [ 421.856138][ T43] ? __list_add_valid_or_report+0x4e/0x130 [ 421.856173][ T43] end_report+0x73/0x180 [ 421.856207][ T43] ? __list_add_valid_or_report+0x4e/0x130 [ 421.856240][ T43] kasan_report+0x128/0x150 [ 421.856274][ T43] ? __list_add_valid_or_report+0x4e/0x130 [ 421.856313][ T43] __list_add_valid_or_report+0x4e/0x130 [ 421.856351][ T43] kcov_remote_stop+0x457/0x680 [ 421.856382][ T43] hub_event+0x49d8/0x4f60 [ 421.856441][ T43] ? __pfx_hub_event+0x10/0x10 [ 421.856478][ T43] ? process_scheduled_works+0xa25/0x1830 [ 421.856506][ T43] ? process_scheduled_works+0xa25/0x1830 [ 421.856538][ T43] process_scheduled_works+0xb02/0x1830 [ 421.856581][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.856614][ T43] ? assign_work+0x3d5/0x5e0 [ 421.856646][ T43] worker_thread+0xa50/0xfc0 [ 421.856692][ T43] kthread+0x388/0x470 [ 421.856715][ T43] ? __pfx_worker_thread+0x10/0x10 [ 421.856745][ T43] ? __pfx_kthread+0x10/0x10 [ 421.856767][ T43] ret_from_fork+0x51e/0xb90 [ 421.856799][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 421.856830][ T43] ? __switch_to+0xc7d/0x1450 [ 421.856857][ T43] ? __pfx_kthread+0x10/0x10 [ 421.856881][ T43] ret_from_fork_asm+0x1a/0x30 [ 421.856911][ T43] [ 421.857519][ T43] Kernel Offset: disabled