last executing test programs: 6.332744728s ago: executing program 3 (id=3836): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) syz_emit_ethernet(0x0, 0x0, 0x0) 4.219936434s ago: executing program 1 (id=3858): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r2, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) syz_open_dev$dri(0x0, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) bind$vsock_stream(r5, 0x0, 0x0) r8 = pidfd_getfd(r1, r6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x60, 0x1}, {0x16}, {0x30}, {0x1, 0x1}, {0x2}, {0x1b}, {0x6c, 0x1}, {0x16, 0x1}, {0x4}, {0x3, 0x1}, {0x60, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x2}, {0x30}, {0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x40800) 3.379316511s ago: executing program 1 (id=3863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa29000008000300", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 3.268848316s ago: executing program 1 (id=3864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007"], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 3.171924253s ago: executing program 1 (id=3865): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r3 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r2, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) bind$vsock_stream(r6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = pidfd_getfd(r1, r7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x60, 0x1}, {0x16}, {0x30}, {0x1, 0x1}, {0x2}, {0x1b}, {0x6c, 0x1}, {0x16, 0x1}, {0x4}, {0x3, 0x1}, {0x60, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x2}, {0x30}, {0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x40800) 3.148643255s ago: executing program 3 (id=3866): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc2", 0xa9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) close_range(r0, 0xffffffffffffffff, 0x0) 2.805001566s ago: executing program 4 (id=3868): unshare(0x20000400) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r0, 0xe3826000) fcntl$addseals(r0, 0x409, 0xb) 2.564971887s ago: executing program 4 (id=3870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r1, 0xd13, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4049005}, 0x40040c0) 2.139769967s ago: executing program 4 (id=3871): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc2", 0xa9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080) close_range(r0, 0xffffffffffffffff, 0x0) 2.084121113s ago: executing program 3 (id=3872): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30401000000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)={0x20, 0x23, 0x5, {0x5, 0xf, "00e400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.980956108s ago: executing program 2 (id=3874): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.974289419s ago: executing program 1 (id=3875): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x173, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6174b0ba013d3cff00000000000000000000000000000000fe8000000000000000000000000000bb84"], 0x0) 1.932914738s ago: executing program 1 (id=3876): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) syz_emit_ethernet(0x0, 0x0, 0x0) 1.492461027s ago: executing program 2 (id=3877): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x70000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xfbfffff7}], 0x3, 0x40, 0x0) 1.399680541s ago: executing program 2 (id=3878): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005740)=[{{&(0x7f0000000180)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000380), 0x6e, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x10}}], 0x10}}], 0x2, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.308639427s ago: executing program 2 (id=3879): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x1, r1}]) 1.048469861s ago: executing program 2 (id=3882): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) creat(&(0x7f0000000640)='./file0\x00', 0xdf) 862.6839ms ago: executing program 2 (id=3883): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 699.890453ms ago: executing program 4 (id=3885): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r3 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r2, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) bind$vsock_stream(r6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = pidfd_getfd(r1, r7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x60, 0x1}, {0x16}, {0x30}, {0x1, 0x1}, {0x2}, {0x1b}, {0x6c, 0x1}, {0x16, 0x1}, {0x4}, {0x3, 0x1}, {0x60, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x2}, {0x30}, {0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x40800) 553.957013ms ago: executing program 0 (id=3887): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}}, 0x10) 453.152381ms ago: executing program 0 (id=3888): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x80000000, 0xf3, 0x5, 0x8, 0x722, 0xfffffff7, 0x7, 0x7f, 0x26, 0x20, {0x7, 0x6fd8e84b}, 0x3, 0xed}}) 397.266938ms ago: executing program 0 (id=3889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) 371.444848ms ago: executing program 4 (id=3890): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 295.1879ms ago: executing program 0 (id=3891): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 287.815922ms ago: executing program 3 (id=3892): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x8010, r0, 0xc703d000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 212.797215ms ago: executing program 4 (id=3893): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) alarm(0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x1, 0x4000844) shutdown(r6, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000002c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x3, 0x2f, 0x10, 0x0, 0x0, 0x80, 0x9, 0x2, 0x0, 0x0, 0x8, 0x40, 0xff, 0xff, 0x0, '\x00', 0x0, 0x200001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 133.575364ms ago: executing program 3 (id=3894): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000840)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x80, 0x100, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @empty=0x7f000000, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xba, 0x100}}}}}}}, 0x0) 114.544867ms ago: executing program 0 (id=3895): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000001080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1c, 0x58, 0x68, 0x0, 0xc0, 0x2f, 0x0, @local, @broadcast=0xfffffffe}, {{}, {}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x96, 0x1, 0x1, 0x3, 0x6, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x1, 0x1, 0x2, 0x3, 0xa2}, 0x2, {0x4, 0xd, 0x2, 0x6, 0x1, 0x0, 0x2, 0x1, 0x1}}}}}}}}, 0x0) 729.21µs ago: executing program 3 (id=3896): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0x99, 0x1201, 0x0, 0x0}], 0x1}) 0s ago: executing program 0 (id=3897): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x8501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000200)=0x1, 0x4) r3 = eventfd(0x5f0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf2, 0x207fff) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x7, 0x1, 0x0, 0xb, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000300)={0xdddd1000, 0x3000, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000370400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0101000001010000140012800e00010069703665727370616e000000100002803e00120008000100", @ANYRES32=0x0, @ANYBLOB="a922c3c716796a277d496dcabede3ca8cbab110000200000000000"], 0x44}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe8, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) kernel console output (not intermixed with test programs): ] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 1407.318027][T15516] usb 3-1: USB disconnect, device number 97 [ 1407.656704][T21901] kvm: user requested TSC rate below hardware speed [ 1408.014435][T15516] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1408.166057][T15516] usb 5-1: Using ep0 maxpacket: 8 [ 1408.179238][T15516] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1408.217830][T15516] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1408.287861][T15516] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1408.343733][T15516] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1408.432240][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1408.448681][T15516] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1408.486157][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1408.507266][T15516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.585767][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1408.705654][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1408.886117][ T10] usb 4-1: USB disconnect, device number 91 [ 1408.916435][T15516] usb 5-1: GET_CAPABILITIES returned 0 [ 1408.921924][T15516] usbtmc 5-1:16.0: can't read capabilities [ 1408.934015][T21913] kAFS: unable to lookup cell '' [ 1409.173092][T21901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.240077][T21901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.056062][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1410.164510][ T29] audit: type=1800 audit(1771361584.700:1793): pid=21925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3152" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1410.936284][T21933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3153'. [ 1411.024410][T16255] usb 5-1: USB disconnect, device number 108 [ 1411.584057][T16255] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1411.659966][T21943] input: syz1 as /devices/virtual/input/input51 [ 1411.745015][T16255] usb 5-1: Using ep0 maxpacket: 32 [ 1411.752413][T16255] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1411.774183][T16255] usb 5-1: config 0 has no interface number 0 [ 1411.804635][T16255] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1411.814021][T16255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.835160][T16255] usb 5-1: Product: syz [ 1411.843793][T16255] usb 5-1: Manufacturer: syz [ 1411.855491][T16255] usb 5-1: SerialNumber: syz [ 1411.879130][T16255] usb 5-1: config 0 descriptor?? [ 1411.906693][T16255] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1411.926076][T16255] usb 5-1: selecting invalid altsetting 1 [ 1411.935422][T16255] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1411.946669][T16255] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1411.970693][T16255] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1411.987974][T16255] usb 5-1: media controller created [ 1412.016671][T16255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1412.416392][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3154'. [ 1412.453373][T21954] openvswitch: netlink: Flow actions attr not present in new flow. [ 1412.504935][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 1412.791632][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 1412.879461][T21962] openvswitch: netlink: Flow key attr not present in new flow. [ 1412.932337][T21962] netlink: 'syz.3.3157': attribute type 5 has an invalid length. [ 1413.010931][T21962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1413.102293][T21963] ip6tnl0: Caught tx_queue_len zero misconfig [ 1413.136029][T16255] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1413.287050][T16255] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1413.312754][T21957] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 1413.832460][T21972] binder: 21965:21972 unknown command 0 [ 1413.843933][T21972] binder: 21965:21972 ioctl c0306201 2000000001c0 returned -22 [ 1415.057098][ T29] audit: type=1326 audit(1771361589.600:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.111752][ T29] audit: type=1326 audit(1771361589.600:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.198132][ T29] audit: type=1326 audit(1771361589.600:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.300157][ T29] audit: type=1326 audit(1771361589.610:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.388597][ T29] audit: type=1326 audit(1771361589.610:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.423498][ T29] audit: type=1326 audit(1771361589.610:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.450973][ T29] audit: type=1326 audit(1771361589.610:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.495588][ T29] audit: type=1326 audit(1771361589.610:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.525633][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1415.537376][ T29] audit: type=1326 audit(1771361589.610:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.587381][ T29] audit: type=1326 audit(1771361589.610:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.617685][ T29] audit: type=1326 audit(1771361589.660:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.658073][ T29] audit: type=1326 audit(1771361589.660:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21983 comm="syz.2.3161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1415.698391][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1415.712474][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.734721][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.759619][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1415.780028][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.806785][ T10] usb 3-1: config 0 descriptor?? [ 1416.310656][ T10] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 1416.511179][T21996] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 1416.565563][ T10] ft260 0003:0403:6030.001E: chip code: 6424 8183 [ 1416.597123][T16255] usb 5-1: USB disconnect, device number 109 [ 1416.820198][ T10] ft260 0003:0403:6030.001E: failed to retrieve system status [ 1416.833246][ T10] ft260 0003:0403:6030.001E: probe with driver ft260 failed with error -32 [ 1417.154493][ T10] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1417.466418][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1417.577228][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1417.674866][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1417.819750][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1417.885661][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1417.895893][T21999] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1417.914541][T21999] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1417.968785][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1418.006708][T22013] input: syz1 as /devices/virtual/input/input52 [ 1418.023083][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.208535][T22006] macvlan2: entered promiscuous mode [ 1418.253463][T22006] macvlan2: entered allmulticast mode [ 1418.282095][T22006] bond5: entered promiscuous mode [ 1418.317134][T22006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1418.366193][T22006] bond5: left promiscuous mode [ 1418.390444][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 1418.449094][ T10] usbtmc 5-1:16.0: can't read capabilities [ 1418.655005][T22004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.689300][T22004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.693468][ T10] usb 3-1: USB disconnect, device number 98 [ 1419.898633][T22035] syz.1.3169 (22035): drop_caches: 2 [ 1419.950077][T22038] kAFS: unable to lookup cell '({^@' [ 1420.571883][T16255] usb 5-1: USB disconnect, device number 110 [ 1420.921361][T22044] lo: Caught tx_queue_len zero misconfig [ 1421.275528][ T10] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1421.494619][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1421.502716][ T10] usb 5-1: config 0 has no interfaces? [ 1421.520811][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1421.547370][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1421.582333][ T10] usb 5-1: Manufacturer: syz [ 1421.598111][ T10] usb 5-1: config 0 descriptor?? [ 1421.893390][T22044] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1422.037674][T22045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.062313][T22045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1422.101764][T22061] tunl0: Caught tx_queue_len zero misconfig [ 1422.959161][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.966808][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.297092][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1423.456311][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.489783][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.539811][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1423.568308][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1423.595834][ T10] usb 4-1: Manufacturer: syz [ 1423.638448][ T10] usb 4-1: config 0 descriptor?? [ 1424.429980][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1424.429997][ T29] audit: type=1326 audit(1771361598.980:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1424.610976][ T29] audit: type=1326 audit(1771361598.980:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1424.681133][ T29] audit: type=1326 audit(1771361599.030:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1424.738993][T16255] usb 5-1: USB disconnect, device number 111 [ 1424.832460][ T29] audit: type=1326 audit(1771361599.030:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1424.870297][ T29] audit: type=1326 audit(1771361599.030:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1424.945471][ T29] audit: type=1326 audit(1771361599.030:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1425.023948][ T29] audit: type=1326 audit(1771361599.030:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1425.081608][ T29] audit: type=1326 audit(1771361599.030:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1425.182849][ T29] audit: type=1326 audit(1771361599.030:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1425.215126][ T29] audit: type=1326 audit(1771361599.030:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22065 comm="syz.3.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x7ffc0000 [ 1426.130743][T22104] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1427.291681][T22121] vlan3: entered promiscuous mode [ 1427.323970][T22121] bridge0: entered promiscuous mode [ 1428.644340][T16255] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1428.838460][T16255] usb 2-1: Using ep0 maxpacket: 8 [ 1428.909308][T16255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1428.945588][T16255] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 1428.963970][T16255] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1429.003940][T16255] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1429.092249][T16255] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.111601][T16255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.118709][ T10] uclogic 0003:256C:006D.001F: interface is invalid, ignoring [ 1429.127867][T16255] usb 2-1: Product: syz [ 1429.132139][T16255] usb 2-1: Manufacturer: syz [ 1429.142294][T16255] usb 2-1: SerialNumber: syz [ 1429.184568][T22139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1429.286173][T22139] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1429.925997][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'. [ 1430.235596][T15516] usb 4-1: USB disconnect, device number 92 [ 1431.675136][T16255] usb 2-1: bad CDC descriptors [ 1431.726417][T16255] usb 2-1: USB disconnect, device number 106 [ 1432.492192][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1432.838190][T22192] tipc: Enabled bearer , priority 0 [ 1432.859449][T22192] syzkaller0: entered promiscuous mode [ 1432.873364][T22192] syzkaller0: entered allmulticast mode [ 1432.940176][T22192] tipc: Resetting bearer [ 1432.991604][T22192] tipc: Enabled bearer , priority 10 [ 1433.006572][T22191] tipc: Resetting bearer [ 1433.041419][T22191] tipc: Disabling bearer [ 1433.455388][T16255] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1433.653525][T16255] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.691217][T16255] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1433.714076][T16255] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1433.741774][T16255] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1433.761681][T16255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.787058][T16255] usb 2-1: Product: syz [ 1433.798160][T16255] usb 2-1: Manufacturer: syz [ 1433.807224][T16255] usb 2-1: SerialNumber: syz [ 1434.969664][T22220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3206'. [ 1435.843453][T16255] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1435.861747][T16255] uvcvideo 2-1:220.0: No valid video chain found. [ 1435.888761][T16255] usb 2-1: USB disconnect, device number 107 [ 1436.030552][T22227] netlink: 'syz.2.3207': attribute type 12 has an invalid length. [ 1436.454945][T16254] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1436.653947][T16254] usb 3-1: Using ep0 maxpacket: 16 [ 1436.694958][T16254] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 1436.740971][T16254] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.813606][T22246] cifs: Unknown parameter ' [ 1436.835500][T16254] usb 3-1: config 0 has no interface number 0 [ 1437.474662][T16254] usb 3-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid maxpacket 4098, setting to 1024 [ 1437.530478][T16254] usb 3-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1437.565432][T16254] usb 3-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1437.615235][T16254] usb 3-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 1437.639929][T16254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.658421][T16254] usb 3-1: Product: syz [ 1437.672843][T16254] usb 3-1: Manufacturer: syz [ 1437.739183][T16254] usb 3-1: SerialNumber: syz [ 1437.758115][T16254] usb 3-1: config 0 descriptor?? [ 1437.846414][T22234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1437.855857][T16254] usb-storage 3-1:0.216: USB Mass Storage device detected [ 1438.200207][T22248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 1438.211028][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 1438.236330][T22248] netlink: 'syz.0.3210': attribute type 12 has an invalid length. [ 1439.049624][T22267] xt_TCPMSS: Only works on TCP SYN packets [ 1439.564066][T16255] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1439.758669][T16255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.784955][T16255] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1439.837898][T16255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.895396][T16255] usb 5-1: config 0 descriptor?? [ 1439.906389][T16254] usb 3-1: USB disconnect, device number 99 [ 1440.925843][T22285] QAT: failed to copy from user. [ 1441.025343][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 1441.201720][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1441.201758][ T29] audit: type=1326 audit(1771361615.750:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22278 comm="syz.3.3217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d9dd9c629 code=0x0 [ 1442.179071][T16255] usbhid 5-1:0.0: can't add hid device: -71 [ 1442.217259][T16255] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1442.305017][T16255] usb 5-1: USB disconnect, device number 112 [ 1443.145586][ T10] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 1443.359943][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1443.405526][ T10] usb 5-1: config 0 has no interface number 0 [ 1443.456826][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1443.473093][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1443.687967][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1443.777895][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1443.941403][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1444.045119][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1444.287074][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1444.360026][T22325] netlink: 'syz.2.3226': attribute type 15 has an invalid length. [ 1444.378776][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.402208][ T10] usb 5-1: config 0 descriptor?? [ 1444.420402][T22300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1444.429112][T22300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1444.556150][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1446.173799][ T10] usb 5-1: USB disconnect, device number 113 [ 1446.191400][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1447.202649][T22364] netlink: 'syz.3.3233': attribute type 15 has an invalid length. [ 1448.990974][T22388] kvm: user requested TSC rate below hardware speed [ 1449.253962][T16255] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1449.293340][T22385] syz.1.3238 (22385): drop_caches: 2 [ 1449.536154][T16255] usb 4-1: Using ep0 maxpacket: 8 [ 1449.621907][T16255] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1449.676769][T16255] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1449.706580][T16255] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1449.734674][T16255] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.890377][T16255] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1449.909881][T16255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.324360][T22395] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20002 [ 1450.627286][T16255] usb 4-1: GET_CAPABILITIES returned 0 [ 1450.632935][T16255] usbtmc 4-1:16.0: can't read capabilities [ 1450.804777][T16254] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1450.836864][T22388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.890712][T22388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.024685][T16254] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1451.073122][T16254] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.198474][T16254] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1451.208721][T16254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.217403][T16254] usb 5-1: Product: syz [ 1451.221804][T16254] usb 5-1: Manufacturer: syz [ 1451.226910][T16254] usb 5-1: SerialNumber: syz [ 1451.455596][T22400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1451.480376][T22400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1451.493105][T22400] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1451.521615][T22400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.532341][T22400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.544623][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1451.857729][T22413] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3244'. [ 1452.204039][T16254] usb 5-1: reset high-speed USB device number 114 using dummy_hcd [ 1452.386686][T16254] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1452.550811][ T29] audit: type=1326 audit(1771361627.100:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.593995][ T29] audit: type=1326 audit(1771361627.100:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.661502][ T29] audit: type=1326 audit(1771361627.130:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.695667][ T29] audit: type=1326 audit(1771361627.130:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.763921][ T29] audit: type=1326 audit(1771361627.130:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.811550][ T29] audit: type=1326 audit(1771361627.140:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.859016][T16254] usb 5-1: USB disconnect, device number 114 [ 1452.882653][ T29] audit: type=1326 audit(1771361627.140:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.930267][ T29] audit: type=1326 audit(1771361627.140:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1452.982304][ T29] audit: type=1326 audit(1771361627.150:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.2.3246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1453.445981][T22429] kvm: user requested TSC rate below hardware speed [ 1454.071781][ T29] audit: type=1326 audit(1771361628.610:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22438 comm="syz.2.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1454.174861][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1454.325668][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1454.341400][ T10] usb 5-1: config 0 has no interfaces? [ 1454.370035][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1454.391820][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1454.413721][ T10] usb 5-1: Manufacturer: syz [ 1454.437531][ T10] usb 5-1: config 0 descriptor?? [ 1454.820830][T22436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1454.877312][T22436] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1455.066132][T16254] usb 4-1: USB disconnect, device number 93 [ 1455.239743][T22450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3251'. [ 1455.328891][T22453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3251'. [ 1456.410422][T22461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3253'. [ 1457.151624][T16254] usb 5-1: USB disconnect, device number 115 [ 1457.427782][T22476] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1457.503499][T22479] usb usb1: check_ctrlrecip: process 22479 (syz.3.3256) requesting ep 01 but needs 81 [ 1457.579584][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'. [ 1459.005640][T16255] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1459.967626][T22496] tipc: New replicast peer: 255.255.255.255 [ 1459.975106][T22496] tipc: Enabled bearer , priority 10 [ 1460.803112][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 1461.611708][T16255] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1461.679338][T16255] usb 4-1: can't read configurations, error -71 [ 1462.117340][T22533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1462.220566][T22536] netlink: 'syz.2.3264': attribute type 10 has an invalid length. [ 1462.292594][T22536] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1462.319581][T22538] netlink: 'syz.2.3264': attribute type 10 has an invalid length. [ 1462.354598][T22535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3268'. [ 1462.397177][T22538] team0: Port device netdevsim0 removed [ 1462.459374][T22538] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 1462.475670][ T58] bond0: (slave netdevsim0): link status definitely up [ 1462.492128][ T58] bond0: active interface up! [ 1462.665416][ T7999] bond0: (slave netdevsim0): interface is now down [ 1462.672299][ T7999] bond0: now running without any active interface! [ 1463.809491][T22543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1464.058572][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3271'. [ 1464.143581][T22567] hsr0: left allmulticast mode [ 1464.152068][T22567] hsr_slave_0: left allmulticast mode [ 1464.170020][T22567] hsr_slave_1: left allmulticast mode [ 1464.190738][T22567] hsr0: left promiscuous mode [ 1464.199742][T22567] bridge0: port 1(hsr0) entered disabled state [ 1464.780528][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1465.317594][T22588] netlink: 'syz.1.3276': attribute type 15 has an invalid length. [ 1465.984012][T16255] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1466.184131][T16255] usb 2-1: device descriptor read/64, error -71 [ 1466.444468][T16255] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1466.626318][T16255] usb 2-1: device descriptor read/64, error -71 [ 1466.755675][T16255] usb usb2-port1: attempt power cycle [ 1467.094120][T16255] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1467.116075][T16255] usb 2-1: device descriptor read/8, error -71 [ 1467.223648][T22607] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1467.384506][T16255] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1467.436439][T16255] usb 2-1: device descriptor read/8, error -71 [ 1467.567335][T16255] usb usb2-port1: unable to enumerate USB device [ 1467.719435][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 1468.520503][T22627] netlink: 'syz.1.3283': attribute type 15 has an invalid length. [ 1468.764674][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1468.904203][T16255] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1469.012223][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1469.087928][T22633] tipc: Enabled bearer , priority 0 [ 1469.101142][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1469.124760][T16255] usb 2-1: Using ep0 maxpacket: 32 [ 1469.140718][T16255] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1469.149200][T16255] usb 2-1: config 0 has no interface number 0 [ 1469.155725][T16255] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1469.168231][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.168279][T16255] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1469.212751][T16255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.221533][T16255] usb 2-1: Product: syz [ 1469.232601][T16255] usb 2-1: Manufacturer: syz [ 1469.243060][ T10] usb 4-1: config 0 descriptor?? [ 1469.253178][T16255] usb 2-1: SerialNumber: syz [ 1469.269845][T16255] usb 2-1: config 0 descriptor?? [ 1469.284137][T16255] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1469.450992][T22625] tipc: Disabling bearer [ 1469.518416][T16255] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1469.538425][T16255] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 1469.554496][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1469.612287][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1469.833716][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1469.876229][ T10] usb 4-1: media controller created [ 1469.937333][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1469.980270][T22645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 1470.076062][ T10] DVB: Unable to find symbol dib7000p_attach() [ 1470.091869][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1470.275168][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 1470.281385][ T10] Registered IR keymap rc-empty [ 1470.288524][ T10] dvb-usb: could not initialize remote control. [ 1470.295823][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1470.639033][T22657] input: syz0 as /devices/virtual/input/input54 [ 1470.673331][T16255] usb 4-1: USB disconnect, device number 96 [ 1470.733688][T22659] SET target dimension over the limit! [ 1470.751601][T16255] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1471.083995][T16256] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1471.258394][T16256] usb 3-1: device descriptor read/64, error -71 [ 1471.544025][T16256] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1471.714145][T16256] usb 3-1: device descriptor read/64, error -71 [ 1471.775840][T22670] Cannot find del_set index 4 as target [ 1471.824435][T16256] usb usb3-port1: attempt power cycle [ 1472.204049][T16256] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1472.245448][T16256] usb 3-1: device descriptor read/8, error -71 [ 1472.296721][ T10] usb 2-1: USB disconnect, device number 112 [ 1472.514001][T16256] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1472.556601][T16256] usb 3-1: device descriptor read/8, error -71 [ 1472.707424][T16256] usb usb3-port1: unable to enumerate USB device [ 1473.120959][T22689] netlink: 'syz.0.3294': attribute type 15 has an invalid length. [ 1473.376689][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1473.405682][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1473.574460][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1473.591168][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1473.777699][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1473.848441][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1473.865444][ T10] usb 4-1: Product: syz [ 1473.965892][ T10] usb 4-1: Manufacturer: syz [ 1474.046832][ T10] usb 4-1: SerialNumber: syz [ 1474.069073][ T10] usb 4-1: config 0 descriptor?? [ 1474.161075][T22698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1474.235442][T22687] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1474.564951][T16256] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1474.612371][T22703] input: syz0 as /devices/virtual/input/input55 [ 1474.776057][T16256] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1474.793990][T16256] usb 3-1: config 0 has no interface number 0 [ 1474.810982][T16256] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1474.838206][T16256] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1474.878834][T16256] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1474.910789][T16256] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1474.943539][T16256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.974755][T16256] usb 3-1: Product: syz [ 1474.987606][T16256] usb 3-1: Manufacturer: syz [ 1475.010140][T16256] usb 3-1: SerialNumber: syz [ 1475.023845][T16256] usb 3-1: config 0 descriptor?? [ 1475.053580][ C1] usb 3-1: NFC: Urb failure (status -71) [ 1475.060172][T16256] usb 3-1: NFC: Unable to get FW version [ 1475.066347][T16256] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 1475.108438][T22703] SET target dimension over the limit! [ 1475.819701][T22692] netlink: 'syz.4.3295': attribute type 5 has an invalid length. [ 1475.830976][T22692] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1475.949485][T22692] geneve2: entered promiscuous mode [ 1475.956699][T22692] geneve2: entered allmulticast mode [ 1476.060245][T22708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3298'. [ 1476.185577][T16256] usb 4-1: USB disconnect, device number 97 [ 1477.391101][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1477.965791][T16256] usb 3-1: USB disconnect, device number 104 [ 1480.639131][T22763] tipc: Enabled bearer , priority 0 [ 1480.683591][T22763] tipc: Resetting bearer [ 1480.828081][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1480.987936][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1481.019296][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.045667][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1481.080419][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 1481.105998][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.145924][ T10] usb 2-1: config 0 descriptor?? [ 1481.287918][T22756] tipc: Disabling bearer [ 1481.759264][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3311'. [ 1482.463294][ T10] usb 2-1: string descriptor 0 read error: -71 [ 1482.473479][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1482.732134][ T10] usb 2-1: USB disconnect, device number 113 [ 1482.838442][T22794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1483.235401][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1483.595005][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1483.611245][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1483.630413][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1483.657926][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1483.680934][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1483.744809][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1483.794697][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.024790][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 1484.044508][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1484.293216][T22787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.344949][T22787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.386311][T22812] netlink: 'syz.3.3319': attribute type 1 has an invalid length. [ 1484.400073][T22809] tipc: Enabled bearer , priority 0 [ 1484.415595][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.421943][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.439203][T16256] usb 2-1: USB disconnect, device number 114 [ 1485.171409][T22801] tipc: Disabling bearer [ 1485.402773][T22815] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1485.419380][T22815] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1486.304479][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1486.523140][ T10] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 1486.591941][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.612794][ T10] usb 3-1: config 0 has no interfaces? [ 1486.652632][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.695959][ T10] usb 3-1: config 0 has no interfaces? [ 1486.713696][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.752061][ T10] usb 3-1: config 0 has no interfaces? [ 1486.791351][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.836745][ T10] usb 3-1: config 0 has no interfaces? [ 1486.858363][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.905331][ T10] usb 3-1: config 0 has no interfaces? [ 1486.967930][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.009853][ T10] usb 3-1: config 0 has no interfaces? [ 1487.078381][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.119933][ T10] usb 3-1: config 0 has no interfaces? [ 1487.146293][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.199488][ T10] usb 3-1: config 0 has no interfaces? [ 1487.228926][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1487.272434][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.357495][ T10] usb 3-1: config 0 descriptor?? [ 1488.034225][T16256] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1488.140782][T22857] fuse: Bad value for 'fd' [ 1488.256621][T16256] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1488.266287][T16256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.274816][T16256] usb 2-1: Product: syz [ 1488.286446][T16256] usb 2-1: Manufacturer: syz [ 1488.293289][T16256] usb 2-1: SerialNumber: syz [ 1488.338518][T16256] usb 2-1: config 0 descriptor?? [ 1488.353429][T16256] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1489.328912][T22863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1489.624991][T16256] gspca_stk1135: reg_w 0x3 err -110 [ 1489.631237][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1489.653544][T16256] gspca_stk1135: Sensor write failed [ 1489.681760][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1489.765272][T16256] gspca_stk1135: Sensor write failed [ 1489.834863][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1489.937806][T16256] gspca_stk1135: Sensor read failed [ 1489.959220][ T10] usb 3-1: USB disconnect, device number 105 [ 1489.991052][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1490.038331][T16256] gspca_stk1135: Sensor read failed [ 1490.083514][T16256] gspca_stk1135: Detected sensor type unknown (0x0) [ 1490.113033][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1490.138669][T22878] xt_TCPMSS: Only works on TCP SYN packets [ 1490.172369][T16256] gspca_stk1135: Sensor read failed [ 1490.189679][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1490.202925][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1490.223323][T16256] gspca_stk1135: Sensor read failed [ 1490.251925][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1490.283890][T16256] gspca_stk1135: Sensor write failed [ 1490.302180][T16256] gspca_stk1135: serial bus timeout: status=0x00 [ 1490.317977][T16256] gspca_stk1135: Sensor write failed [ 1490.343438][T16256] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1490.489959][T22884] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1490.503610][T22878] No such timeout policy "syz1" [ 1491.416565][T16256] usb 2-1: USB disconnect, device number 115 [ 1491.454743][T22892] x_tables: ip_tables: ipcomp match: only valid for protocol 108 [ 1492.258890][T22909] xt_TCPMSS: Only works on TCP SYN packets [ 1494.437854][T22930] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[22930] [ 1494.466259][ T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1494.558609][T22938] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1494.674362][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1494.691774][ T10] usb 5-1: config 0 has no interfaces? [ 1494.734990][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1494.755453][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1494.778227][ T10] usb 5-1: Manufacturer: syz [ 1494.806681][ T10] usb 5-1: config 0 descriptor?? [ 1495.357827][T22932] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1495.988485][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 1496.342314][T22951] netlink: 'syz.2.3344': attribute type 15 has an invalid length. [ 1496.566650][T22955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.275327][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1497.295117][T16256] usb 5-1: USB disconnect, device number 116 [ 1497.415171][ T10] usb 3-1: device descriptor read/64, error -71 [ 1497.468872][T22961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 1497.656478][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1497.789756][T22966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.805699][ T10] usb 3-1: device descriptor read/64, error -71 [ 1497.915935][ T10] usb usb3-port1: attempt power cycle [ 1498.275777][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1498.336066][ T10] usb 3-1: device descriptor read/8, error -71 [ 1498.584622][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1498.627218][ T10] usb 3-1: device descriptor read/8, error -71 [ 1498.751054][ T10] usb usb3-port1: unable to enumerate USB device [ 1499.125532][T22980] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1499.145026][T22979] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1499.195149][T22979] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 1499.214311][T22981] input: syz0 as /devices/virtual/input/input56 [ 1499.273370][T22979] hsr2: entered allmulticast mode [ 1499.311223][T22979] dummy0: entered allmulticast mode [ 1499.535352][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1499.707087][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.724954][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1499.745655][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1499.831146][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.899479][ T10] usb 5-1: config 0 descriptor?? [ 1501.406659][T23009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1501.514985][ T10] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1501.677209][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1501.718386][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.769116][T23013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3357'. [ 1501.781648][ T10] usb 3-1: config 0 descriptor?? [ 1501.807710][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1503.197310][T23019] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1504.265610][T23024] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1504.363741][T16256] usb 5-1: USB disconnect, device number 117 [ 1504.929150][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1504.929176][ T29] audit: type=1326 audit(1771361679.480:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.047556][ T29] audit: type=1326 audit(1771361679.520:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.087120][T23030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1505.200633][ T29] audit: type=1326 audit(1771361679.520:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.283769][ T10] gspca_stv06xx: I2C: Read error writing address: -71 [ 1505.305232][ T29] audit: type=1326 audit(1771361679.520:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.453356][ T10] usb 3-1: USB disconnect, device number 110 [ 1505.460372][ T29] audit: type=1326 audit(1771361679.520:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.570925][ T29] audit: type=1326 audit(1771361679.530:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.695045][ T29] audit: type=1326 audit(1771361679.530:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.780880][ T29] audit: type=1326 audit(1771361679.530:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.841390][ T29] audit: type=1326 audit(1771361679.530:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.892184][ T29] audit: type=1326 audit(1771361679.530:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23027 comm="syz.4.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1505.979020][T23042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1507.494204][T16256] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1507.656567][T16256] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1507.678469][T16256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.728388][T16256] usb 2-1: config 0 descriptor?? [ 1507.761108][T16256] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1508.017011][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1508.205566][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1508.360798][T16256] gspca_stv06xx: I2C: Read error writing address: -71 [ 1508.480487][T16256] usb 2-1: USB disconnect, device number 116 [ 1509.223070][T23087] ip6gre1: entered promiscuous mode [ 1509.620964][T23084] fuse: Bad value for 'rootmode' [ 1511.463937][T23120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1511.814695][ T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1511.964728][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1511.975920][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1512.019444][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1512.070522][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1512.176950][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1512.209173][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1512.302873][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1512.357040][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.671263][ T10] usb 2-1: usb_control_msg returned -32 [ 1512.700168][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1513.066007][T23122] usbtmc 2-1:16.0: control status returned 0 [ 1513.124012][T23145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 1513.361904][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1514.552888][ T10] usb 2-1: USB disconnect, device number 117 [ 1515.076175][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3389'. [ 1516.672940][T23194] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1516.694842][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3393'. [ 1516.745975][T23195] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1516.773885][T23195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1517.084757][T16255] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1517.254822][T16255] usb 5-1: Using ep0 maxpacket: 16 [ 1517.266094][T16255] usb 5-1: config 0 has no interfaces? [ 1517.273801][T16255] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1517.283458][T16255] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1517.294505][T16255] usb 5-1: Manufacturer: syz [ 1517.311688][T16255] usb 5-1: config 0 descriptor?? [ 1517.817509][T23215] ip6gre1: entered promiscuous mode [ 1519.940233][T23238] kvm: user requested TSC rate below hardware speed [ 1520.236258][T16255] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1520.387182][ T10] usb 5-1: USB disconnect, device number 118 [ 1520.504500][T16255] usb 3-1: Using ep0 maxpacket: 8 [ 1521.105470][ T10] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1521.257160][T16255] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1521.286890][T16255] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1521.319189][ T10] usb 5-1: config 0 has no interfaces? [ 1521.331316][T16255] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1521.359165][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1521.383831][T16255] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1521.422062][T16255] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1521.442826][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.462719][T16255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.489491][ T10] usb 5-1: config 0 descriptor?? [ 1521.717571][T23254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3405'. [ 1521.759743][T23244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 1521.789421][T16255] usb 3-1: GET_CAPABILITIES returned 0 [ 1521.803563][T16255] usbtmc 3-1:16.0: can't read capabilities [ 1522.093663][T23238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.124754][T23238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.289808][T23267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3407'. [ 1523.606623][T16255] usb 3-1: USB disconnect, device number 111 [ 1524.329579][T16255] usb 5-1: USB disconnect, device number 119 [ 1524.349425][T23273] netlink: 'syz.1.3409': attribute type 15 has an invalid length. [ 1524.734389][T16255] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1524.914183][T16255] usb 2-1: Using ep0 maxpacket: 32 [ 1524.957855][T16255] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1524.984821][T16255] usb 2-1: config 0 has no interface number 0 [ 1525.000606][T16255] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1525.050909][T16255] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1525.078604][T16255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.107158][T16255] usb 2-1: Product: syz [ 1525.125615][T23296] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3413'. [ 1525.143942][T16255] usb 2-1: Manufacturer: syz [ 1525.151035][T16255] usb 2-1: SerialNumber: syz [ 1525.172890][T16255] usb 2-1: config 0 descriptor?? [ 1525.252740][T16255] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1525.268252][T23299] netlink: 'syz.4.3413': attribute type 4 has an invalid length. [ 1525.458876][T16255] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1525.479382][T16255] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 1526.384376][T23306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1526.674180][T16255] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1526.860949][T16255] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1526.860976][T16255] usb 3-1: config 0 has no interface number 0 [ 1526.861013][T16255] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1526.861038][T16255] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1526.861055][T16255] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1526.874248][T16255] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1526.874274][T16255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.874292][T16255] usb 3-1: Product: syz [ 1526.874306][T16255] usb 3-1: Manufacturer: syz [ 1526.874319][T16255] usb 3-1: SerialNumber: syz [ 1526.895366][T16255] usb 3-1: config 0 descriptor?? [ 1526.909315][ C1] usb 3-1: NFC: Urb failure (status -71) [ 1526.915087][T16255] usb 3-1: NFC: Unable to get FW version [ 1526.915457][T16255] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 1527.319780][ T10] usb 2-1: USB disconnect, device number 118 [ 1528.274096][T16255] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1528.478298][T16255] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1528.524433][T16255] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1528.590283][T16255] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1528.642021][T16255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.693321][T16255] usb 4-1: config 0 descriptor?? [ 1529.135659][T16255] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1529.156395][T16255] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1529.174636][T16255] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1529.193543][T16255] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1529.210698][T16255] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1529.221467][T16255] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1529.236659][T16255] aureal 0003:0755:2626.0020: unknown main item tag 0x0 [ 1529.305690][T16255] aureal 0003:0755:2626.0020: hidraw0: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.3-1/input0 [ 1529.457309][ T10] usb 3-1: USB disconnect, device number 112 [ 1529.484822][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3418'. [ 1529.497142][T23327] vlan3: entered promiscuous mode [ 1529.845719][ T10] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1530.007043][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1530.029551][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1530.047776][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1530.062399][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1530.085165][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1530.095479][ T10] usb 3-1: Product: syz [ 1530.099713][ T10] usb 3-1: Manufacturer: syz [ 1530.105689][ T10] usb 3-1: SerialNumber: syz [ 1530.113236][ T10] usb 3-1: config 0 descriptor?? [ 1530.128024][ T10] usb 3-1: selecting invalid altsetting 0 [ 1530.403046][T23344] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1530.527980][T23344] fuse: Unknown parameter '0x000000000000000b' [ 1531.132547][ T10] usb 4-1: USB disconnect, device number 98 [ 1531.521386][T23352] binder: 23349:23352 ioctl 400c620e 200000000100 returned -22 [ 1531.791318][T23364] netlink: 'syz.1.3427': attribute type 15 has an invalid length. [ 1532.105399][ T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1532.306092][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1532.340767][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1532.381561][ T10] usb 2-1: config 0 has no interface number 0 [ 1532.402913][ T10] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1532.466644][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1532.503037][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.538599][ T10] usb 2-1: Product: syz [ 1532.576246][ T10] usb 2-1: Manufacturer: syz [ 1532.612561][ T10] usb 2-1: SerialNumber: syz [ 1532.642782][ T10] usb 2-1: config 0 descriptor?? [ 1532.916461][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1533.157000][ T10] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1533.182505][ T10] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 1533.610634][T23374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3428'. [ 1534.236187][ T10] usb 3-1: USB disconnect, device number 113 [ 1535.065460][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1535.226878][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1535.281554][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.319419][ T10] usb 3-1: config 0 has no interfaces? [ 1535.333085][T15520] usb 2-1: USB disconnect, device number 119 [ 1535.382925][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.417049][ T10] usb 3-1: config 0 has no interfaces? [ 1535.446101][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.482519][ T10] usb 3-1: config 0 has no interfaces? [ 1535.507219][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.541506][ T10] usb 3-1: config 0 has no interfaces? [ 1535.561137][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1535.581588][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.623052][ T10] usb 3-1: config 0 descriptor?? [ 1535.738382][T23395] loop5: detected capacity change from 0 to 3015 [ 1535.789933][T23396] loop5: detected capacity change from 3015 to 4367 [ 1535.841222][T16042] buffer_io_error: 28 callbacks suppressed [ 1535.841234][T16042] Buffer I/O error on dev loop5, logical block 545, async page read [ 1535.941301][T16042] Buffer I/O error on dev loop5, logical block 545, async page read [ 1536.193932][T16255] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 1536.272023][T23401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1536.321226][T23401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1536.376325][T16255] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1536.398075][T16255] usb 2-1: config 0 has no interface number 0 [ 1536.415978][T16255] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1536.437033][T16255] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1536.460566][T16255] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1536.478435][T16255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.502503][T16255] usb 2-1: config 0 descriptor?? [ 1536.522970][T23395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1536.579500][T16255] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1536.617578][T23408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1536.895872][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1536.905045][T16255] usb 2-1: USB disconnect, device number 120 [ 1537.288130][T23413] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1537.297641][T23413] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1537.307101][T23413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1537.319291][T23413] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1537.820304][T16255] usb 3-1: USB disconnect, device number 114 [ 1538.310912][T23240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1538.348289][T23240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1538.370815][T23240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1538.379442][T23240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1538.405302][T23240] rtc rtc0: __rtc_set_alarm: err=-22 [ 1539.657135][T23439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3441'. [ 1540.425224][T23449] pim6reg: entered allmulticast mode [ 1540.443042][T23453] pim6reg: left allmulticast mode [ 1540.915896][T23461] netlink: 'syz.1.3446': attribute type 2 has an invalid length. [ 1540.978719][T23461] : entered promiscuous mode [ 1541.350338][T23469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1541.600671][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3448'. [ 1544.184471][T23494] binder: 23489:23494 ioctl 4018620d 0 returned -22 [ 1544.582181][T23501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1544.907174][T23496] veth1_macvtap: left promiscuous mode [ 1544.912666][T23496] macsec0: entered promiscuous mode [ 1544.965036][T23496] veth1_macvtap: entered promiscuous mode [ 1544.979147][T23496] macsec0: left promiscuous mode [ 1544.992861][T23511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3455'. [ 1545.838441][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.846539][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.304060][T16255] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1546.503928][T16255] usb 4-1: Using ep0 maxpacket: 16 [ 1546.548248][T16255] usb 4-1: config 0 has no interfaces? [ 1546.573686][T16255] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1546.627549][T16255] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1546.650469][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1546.678743][T16255] usb 4-1: Manufacturer: syz [ 1546.717352][T16255] usb 4-1: config 0 descriptor?? [ 1547.843460][T23524] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1548.196527][T23542] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3461'. [ 1549.418436][ T5807] usb 4-1: USB disconnect, device number 99 [ 1549.893132][T23558] netlink: 'syz.4.3464': attribute type 15 has an invalid length. [ 1550.615232][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 1550.615249][ T29] audit: type=1326 audit(1771361725.170:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.746015][ T29] audit: type=1326 audit(1771361725.200:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.783309][ T29] audit: type=1326 audit(1771361725.200:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.809118][ T29] audit: type=1326 audit(1771361725.200:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.838402][ T29] audit: type=1326 audit(1771361725.200:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.890907][ T29] audit: type=1326 audit(1771361725.200:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.915109][ T29] audit: type=1326 audit(1771361725.200:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.945258][ T29] audit: type=1326 audit(1771361725.200:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.971155][ T29] audit: type=1326 audit(1771361725.200:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1550.995141][ T29] audit: type=1326 audit(1771361725.200:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23559 comm="syz.2.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff512b9c629 code=0x7ffc0000 [ 1551.017726][T15520] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1551.093995][ T5807] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1551.181538][T15520] usb 2-1: Using ep0 maxpacket: 32 [ 1551.188898][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.230708][T15520] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1551.264312][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 1551.275670][ T5807] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1551.286380][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.331440][T15520] usb 2-1: config 0 descriptor?? [ 1551.385592][ T5807] usb 5-1: config 0 has no interface number 0 [ 1551.416729][ T5807] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1551.478877][ T5807] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1551.514652][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.559777][ T5807] usb 5-1: Product: syz [ 1551.578742][ T5807] usb 5-1: Manufacturer: syz [ 1551.583364][ T5807] usb 5-1: SerialNumber: syz [ 1551.631199][ T5807] usb 5-1: config 0 descriptor?? [ 1551.664547][ T5807] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1551.771714][T15520] zydacron 0003:13EC:0006.0021: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 1551.859188][ T5807] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 1551.894222][ T5807] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 1553.416822][ T5807] usb 5-1: USB disconnect, device number 120 [ 1553.899329][T23606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1554.095212][ T5807] usb 2-1: USB disconnect, device number 121 [ 1554.107773][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1556.566143][T23635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.674002][T23635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1556.704517][T23240] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1556.904003][T23240] usb 2-1: Using ep0 maxpacket: 16 [ 1556.920468][T23240] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 1556.963737][T23240] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.986136][T23240] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1557.000399][T23240] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1557.007134][T23240] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1557.016429][T23240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.047624][T23240] usb 2-1: config 0 descriptor?? [ 1557.741851][T23647] netlink: 'syz.0.3483': attribute type 15 has an invalid length. [ 1558.162494][T23653] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 1559.409498][T23240] usbhid 2-1:0.0: can't add hid device: -71 [ 1559.462212][T23240] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1559.538008][T23657] macvlan0: entered promiscuous mode [ 1559.550401][T23240] usb 2-1: USB disconnect, device number 122 [ 1559.560989][T23657] macvlan0: entered allmulticast mode [ 1559.630971][T23657] bond3: entered promiscuous mode [ 1559.688573][T23657] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1559.747590][T23657] bond3: left promiscuous mode [ 1561.016712][T23691] input: syz0 as /devices/virtual/input/input58 [ 1562.135981][T23705] xt_TCPMSS: Only works on TCP SYN packets [ 1562.211397][T23705] No such timeout policy "syz1" [ 1563.242741][T23718] netlink: 'syz.3.3500': attribute type 15 has an invalid length. [ 1563.633960][ T5807] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1563.814034][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 1563.828446][ T5807] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1563.838966][ T5807] usb 4-1: config 0 has no interface number 0 [ 1563.869432][ T5807] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1563.921786][ T5807] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1563.968631][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.011545][ T5807] usb 4-1: Product: syz [ 1564.028938][ T5807] usb 4-1: Manufacturer: syz [ 1564.033548][ T5807] usb 4-1: SerialNumber: syz [ 1564.100266][ T5807] usb 4-1: config 0 descriptor?? [ 1564.134040][ T5807] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1564.385244][ T5807] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1564.392161][ T5807] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 1564.564099][T23240] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1564.736040][T23240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1564.767979][T23240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024 [ 1564.809837][T23240] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1564.843924][T23240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.869475][T23240] usb 5-1: Product: syz [ 1564.869925][T23240] usb 5-1: Manufacturer: syz [ 1564.875414][T23240] usb 5-1: SerialNumber: syz [ 1564.882632][T23240] usb 5-1: config 0 descriptor?? [ 1564.925559][T23240] uvcvideo 5-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 1564.925581][T23240] uvcvideo 5-1:0.0: No valid video chain found. [ 1565.134203][T23240] usb 5-1: USB disconnect, device number 121 [ 1565.864595][T23240] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1566.062218][T23744] macvlan0: entered allmulticast mode [ 1566.067779][ T5807] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1566.093951][T23240] usb 3-1: Using ep0 maxpacket: 8 [ 1566.111283][T23240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1566.123516][T23240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1566.147345][T23240] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1566.178286][T23240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.226237][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.237950][T23240] usb 3-1: config 0 descriptor?? [ 1566.258158][T16255] usb 4-1: USB disconnect, device number 100 [ 1566.291915][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.302876][T23240] hso 3-1:0.0: Can't find BULK IN endpoint [ 1566.357663][ T5807] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1566.378871][ T5807] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1566.409938][ T5807] usb 5-1: Manufacturer: syz [ 1566.433726][ T5807] usb 5-1: config 0 descriptor?? [ 1566.587005][T23744] macvlan0 (unregistering): left allmulticast mode [ 1566.809942][T23755] netlink: 'syz.1.3512': attribute type 1 has an invalid length. [ 1567.189311][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1567.189327][ T29] audit: type=1326 audit(1771361741.740:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.345459][ T29] audit: type=1326 audit(1771361741.770:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.398990][ T29] audit: type=1326 audit(1771361741.800:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.426966][ T29] audit: type=1326 audit(1771361741.800:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.480166][ T29] audit: type=1326 audit(1771361741.800:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.530736][ T29] audit: type=1326 audit(1771361741.800:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.559168][ T29] audit: type=1326 audit(1771361741.800:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.590082][ T29] audit: type=1326 audit(1771361741.800:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.652731][ T29] audit: type=1326 audit(1771361741.800:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1567.693793][ T29] audit: type=1326 audit(1771361741.800:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23741 comm="syz.4.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1568.357701][T23772] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 1568.438098][T16255] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1568.687963][T16255] usb 2-1: Using ep0 maxpacket: 16 [ 1568.730231][T16255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1568.761811][T16255] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 1568.782734][T16255] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.818324][T16255] usb 2-1: config 13 has no interface number 0 [ 1568.838290][T16255] usb 2-1: config 13 interface 50 altsetting 167 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1568.851838][T23240] usb 3-1: USB disconnect, device number 115 [ 1568.980461][T16255] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1569.065614][T16255] usb 2-1: config 13 interface 50 has no altsetting 0 [ 1569.139610][T16255] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1569.211388][T16255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.300691][T16255] usb 2-1: Product: syz [ 1569.353732][T16255] usb 2-1: Manufacturer: syz [ 1569.422020][T16255] usb 2-1: SerialNumber: syz [ 1569.545815][ T5807] uclogic 0003:256C:006D.0022: failed retrieving Huion firmware version: -71 [ 1569.583637][ T5807] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 1569.658486][ T5807] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 1569.720312][ T5807] usb 5-1: USB disconnect, device number 122 [ 1570.751737][T23774] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1570.815969][T23774] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1571.097682][T16255] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1571.172812][T16255] usb 2-1: MIDIStreaming interface descriptor not found [ 1571.449625][T23807] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1571.531978][T23807] netdevsim netdevsim1: Direct firmware load for / [ 1571.531978][T23807] failed with error -2 [ 1571.583267][T16255] usb 2-1: USB disconnect, device number 123 [ 1571.609687][T23807] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 1571.609687][T23807] [ 1572.788850][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1573.189607][T23830] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3523'. [ 1573.755648][T23240] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1573.925834][T23240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.957126][T23240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.015641][T23240] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1574.029424][T23240] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1574.093427][T23240] usb 5-1: Manufacturer: syz [ 1574.125138][T23240] usb 5-1: config 0 descriptor?? [ 1574.191595][T23839] libceph: resolve 'c' (ret=-3): failed [ 1574.898842][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 1574.898880][ T29] audit: type=1326 audit(1771361749.450:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.096750][ T29] audit: type=1326 audit(1771361749.450:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.333233][ T29] audit: type=1326 audit(1771361749.480:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.397641][ T29] audit: type=1326 audit(1771361749.480:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.421331][ T29] audit: type=1326 audit(1771361749.480:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.468292][ T29] audit: type=1326 audit(1771361749.480:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.534946][ T29] audit: type=1326 audit(1771361749.480:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.579094][ T29] audit: type=1326 audit(1771361749.480:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.636079][ T29] audit: type=1326 audit(1771361749.480:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.691083][ T29] audit: type=1326 audit(1771361749.480:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23831 comm="syz.4.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1575.902154][T23860] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3532'. [ 1577.898205][T23240] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 1577.956363][T23240] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 1577.984064][T23240] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 1578.059743][T23240] usb 5-1: USB disconnect, device number 123 [ 1578.209284][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1579.648246][T23901] usb usb8: usbfs: process 23901 (syz.4.3541) did not claim interface 0 before use [ 1579.681079][T23901] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1579.806935][T23905] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1579.825936][T23905] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1580.472920][T23917] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1580.663950][T23240] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1580.783922][T16255] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1580.834110][T23240] usb 3-1: Using ep0 maxpacket: 8 [ 1580.857049][T23240] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1580.885285][T23240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.911573][T23240] usb 3-1: Product: syz [ 1580.935732][T23240] usb 3-1: Manufacturer: syz [ 1580.945659][T16255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.965564][T23240] usb 3-1: SerialNumber: syz [ 1580.985311][T23240] usb 3-1: config 0 descriptor?? [ 1580.990729][T16255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.018373][T23240] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1581.036007][T16255] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1581.047964][T23240] pctv452e: pctv452e_power_ctrl: 1 [ 1581.047964][T23240] [ 1581.072413][T16255] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1581.082536][T23240] usb 3-1: selecting invalid altsetting 3 [ 1581.088375][T16255] usb 2-1: Manufacturer: syz [ 1581.093639][T23240] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1581.093639][T23240] [ 1581.107871][T16255] usb 2-1: config 0 descriptor?? [ 1581.143288][T23240] dvb-usb: bulk message failed: -22 (5/0) [ 1581.186492][T23240] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1581.200071][T23240] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1581.227617][T23240] usb 3-1: media controller created [ 1581.232891][T23240] dvb-usb: bulk message failed: -22 (8/0) [ 1581.256581][T23240] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1581.290730][T23240] dvb-usb: MAC address reading failed. [ 1581.320901][T23240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1581.336515][T23917] dvb-usb: bulk message failed: -22 (7/0) [ 1581.342458][T23917] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 1581.385909][T23240] DVB: Unable to find symbol stb0899_attach() [ 1581.392042][T23240] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1581.456194][T23240] rc_core: IR keymap rc-tt-1500 not found [ 1581.462056][T23240] Registered IR keymap rc-empty [ 1581.474807][T23240] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1581.490171][T23240] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input59 [ 1581.523104][T23240] dvb-usb: schedule remote query interval to 100 msecs. [ 1581.530179][T23240] pctv452e: pctv452e_power_ctrl: 0 [ 1581.530179][T23240] [ 1581.553152][T23240] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1581.643976][T23240] dvb-usb: bulk message failed: -22 (4/0) [ 1581.649825][T23240] dvb-usb: error -22 while querying for an remote control event. [ 1581.766274][T23240] dvb-usb: bulk message failed: -22 (4/0) [ 1581.773896][T23240] dvb-usb: error -22 while querying for an remote control event. [ 1581.855344][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1581.855360][ T29] audit: type=1326 audit(1771361756.410:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1581.911771][T23240] dvb-usb: bulk message failed: -22 (4/0) [ 1581.932549][T23240] dvb-usb: error -22 while querying for an remote control event. [ 1581.952802][ T29] audit: type=1326 audit(1771361756.440:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1581.990020][ T29] audit: type=1326 audit(1771361756.450:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.043603][ T29] audit: type=1326 audit(1771361756.450:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.068869][ T29] audit: type=1326 audit(1771361756.450:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.098496][T23240] dvb-usb: bulk message failed: -22 (4/0) [ 1582.120180][T23240] dvb-usb: error -22 while querying for an remote control event. [ 1582.172281][ T29] audit: type=1326 audit(1771361756.450:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.228615][ T29] audit: type=1326 audit(1771361756.450:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.251422][T23240] dvb-usb: bulk message failed: -22 (4/0) [ 1582.269092][T23240] dvb-usb: error -22 while querying for an remote control event. [ 1582.302480][ T29] audit: type=1326 audit(1771361756.450:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.357371][ T29] audit: type=1326 audit(1771361756.450:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.393957][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1582.402569][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1582.422864][ T29] audit: type=1326 audit(1771361756.450:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23921 comm="syz.1.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1582.504059][T23240] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1582.527469][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1582.534899][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1582.663972][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1582.673252][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1582.693965][T23240] usb 5-1: Using ep0 maxpacket: 16 [ 1582.701575][T23240] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1582.711295][T23240] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1582.741262][T23240] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.772253][T23942] netlink: zone id is out of range [ 1582.779075][T23942] netlink: zone id is out of range [ 1582.787962][T23942] netlink: zone id is out of range [ 1582.803953][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1582.810957][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1582.826000][T23240] usb 5-1: config 13 has no interface number 0 [ 1582.869876][T23942] netlink: zone id is out of range [ 1582.887749][T23240] usb 5-1: config 13 interface 50 altsetting 167 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1582.910793][T23942] netlink: zone id is out of range [ 1582.935404][T23240] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1582.954274][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1582.961500][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1582.991083][T23942] netlink: zone id is out of range [ 1583.000850][T23942] netlink: zone id is out of range [ 1583.026114][T23942] netlink: zone id is out of range [ 1583.032294][T23240] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1583.070227][T23942] netlink: zone id is out of range [ 1583.096931][T23240] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1583.115334][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1583.121068][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1583.165690][T23240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.219945][T23240] usb 5-1: Product: syz [ 1583.253180][T23240] usb 5-1: Manufacturer: syz [ 1583.274037][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1583.291925][T23240] usb 5-1: SerialNumber: syz [ 1583.297951][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1583.308575][T23939] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1583.464334][T16254] dvb-usb: bulk message failed: -22 (4/0) [ 1583.472098][T16254] dvb-usb: error -22 while querying for an remote control event. [ 1583.613969][T16254] dvb-usb: bulk message failed: -22 (4/0) [ 1583.629798][T16254] dvb-usb: error -22 while querying for an remote control event. [ 1583.824147][T16254] dvb-usb: bulk message failed: -22 (4/0) [ 1583.829937][T16254] dvb-usb: error -22 while querying for an remote control event. [ 1584.003943][T16254] dvb-usb: bulk message failed: -22 (4/0) [ 1584.009860][T16254] dvb-usb: error -22 while querying for an remote control event. [ 1584.161878][T16255] uclogic 0003:256C:006D.0024: failed retrieving Huion firmware version: -71 [ 1584.183899][T16254] dvb-usb: bulk message failed: -22 (4/0) [ 1584.194869][T16254] dvb-usb: error -22 while querying for an remote control event. [ 1584.210753][T16255] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 1584.261423][T16255] uclogic 0003:256C:006D.0024: probe with driver uclogic failed with error -71 [ 1584.325837][T16255] usb 2-1: USB disconnect, device number 124 [ 1584.415613][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1584.443350][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1584.593989][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1584.599783][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1584.638590][T23964] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 1584.650772][T23964] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 1584.733896][ T5807] dvb-usb: bulk message failed: -22 (4/0) [ 1584.755038][ T10] usb 3-1: USB disconnect, device number 116 [ 1584.794780][ T5807] dvb-usb: error -22 while querying for an remote control event. [ 1584.814437][T23240] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1584.821439][T23240] usb 5-1: MIDIStreaming interface descriptor not found [ 1584.977895][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1584.991669][T23976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'. [ 1585.362359][T23240] usb 5-1: USB disconnect, device number 124 [ 1585.386067][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1585.440288][T16280] udevd[16280]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1585.577177][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.591648][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.606448][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1585.622875][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1585.635379][ T10] usb 2-1: Manufacturer: syz [ 1585.643191][ T10] usb 2-1: config 0 descriptor?? [ 1586.133771][T24003] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3575'. [ 1586.293979][T23240] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1586.456957][T23240] usb 3-1: Using ep0 maxpacket: 32 [ 1586.522880][T23240] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1586.625359][T23240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.700094][T23240] usb 3-1: Product: syz [ 1586.725657][T23240] usb 3-1: Manufacturer: syz [ 1586.730272][T23240] usb 3-1: SerialNumber: syz [ 1586.812461][T23240] usb 3-1: config 0 descriptor?? [ 1586.872266][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1586.872281][ T29] audit: type=1326 audit(1771361761.420:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23982 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1586.902829][ T29] audit: type=1326 audit(1771361761.420:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23982 comm="syz.1.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f39c629 code=0x7ffc0000 [ 1587.313218][T23240] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1587.338264][T23240] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1587.459144][T23240] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1587.496222][T23240] usb 3-1: USB disconnect, device number 117 [ 1587.620606][T24028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1587.729741][T24032] bond0: option min_links: invalid value (18446744073709551612) [ 1587.755074][T24032] bond0: option min_links: allowed values 0 - 2147483647 [ 1587.829555][T24028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1588.228693][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1588.251200][T24047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3592'. [ 1588.261212][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1588.264473][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1589.176652][ T10] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 1589.188327][ T10] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 1589.242964][ T10] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 1589.254654][T24059] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1589.731250][T24079] netlink: 'syz.0.3600': attribute type 21 has an invalid length. [ 1589.818018][T24059] usb 3-1: Using ep0 maxpacket: 32 [ 1589.973421][ T10] usb 2-1: USB disconnect, device number 125 [ 1590.089205][T24059] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1590.110036][T24059] usb 3-1: config 0 has no interface number 0 [ 1590.149276][T24059] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1590.162193][T24059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.239608][T24059] usb 3-1: Product: syz [ 1590.282566][T24100] net_ratelimit: 381 callbacks suppressed [ 1590.282576][T24100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1590.316219][T24059] usb 3-1: Manufacturer: syz [ 1590.325244][T24059] usb 3-1: SerialNumber: syz [ 1590.350012][T24059] usb 3-1: config 0 descriptor?? [ 1590.457565][T24059] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1590.833385][T24059] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1590.936753][T24059] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1590.996381][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 14 [ 1591.917093][T24116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1592.295717][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1592.304782][T24059] usb 3-1: USB disconnect, device number 118 [ 1592.313664][T24059] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1592.342442][T24059] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1592.369550][T24059] quatech2 3-1:0.51: device disconnected [ 1593.173955][ T5807] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1593.292386][T24136] dlm: non-version read from control device 217 [ 1593.344002][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 1593.356595][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1593.368044][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1593.391256][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1593.405209][ T5807] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1593.415610][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.423775][ T5807] usb 5-1: Product: syz [ 1593.428936][ T5807] usb 5-1: Manufacturer: syz [ 1593.433526][ T5807] usb 5-1: SerialNumber: syz [ 1593.454383][ T5807] usb 5-1: config 0 descriptor?? [ 1593.464301][T24126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1593.473532][ T5807] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 1593.491529][ T5807] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 1593.527733][T24143] netlink: 'syz.1.3622': attribute type 3 has an invalid length. [ 1593.735559][T24059] usb 5-1: USB disconnect, device number 125 [ 1593.743981][ T5807] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1593.915932][ T5807] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 1593.939276][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.956067][ T5807] usb 4-1: config 0 has no interface number 0 [ 1593.962405][ T5807] usb 4-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1593.974738][ T5807] usb 4-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1594.003330][ T5807] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1594.021168][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.031370][ T5807] usb 4-1: Product: syz [ 1594.047066][ T5807] usb 4-1: Manufacturer: syz [ 1594.051924][ T5807] usb 4-1: SerialNumber: syz [ 1594.060668][ T5807] usb 4-1: config 0 descriptor?? [ 1594.066690][T24141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1594.108603][ T5807] hdpvr 4-1:0.33: Could not find bulk-in endpoint [ 1594.117872][ T5807] hdpvr 4-1:0.33: probe with driver hdpvr failed with error -12 [ 1594.413530][T24157] usb usb8: usbfs: process 24157 (syz.4.3628) did not claim interface 0 before use [ 1596.172807][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1596.826395][ T29] audit: type=1326 audit(1771361771.380:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24190 comm="syz.3.3638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d9dd9c629 code=0x0 [ 1597.187277][ T5807] usb 4-1: USB disconnect, device number 101 [ 1597.675595][T24059] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1597.954921][T24059] usb 3-1: Using ep0 maxpacket: 8 [ 1598.075017][T24059] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1598.096398][T24059] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1598.108097][T24059] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1598.119469][T24059] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.133644][T24059] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1598.149218][T24059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.236314][T24227] lo: Caught tx_queue_len zero misconfig [ 1598.307944][T24230] program syz.4.3650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1598.491573][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1598.605454][T24059] usb 3-1: GET_CAPABILITIES returned 0 [ 1598.707300][T24059] usbtmc 3-1:16.0: can't read capabilities [ 1598.830847][T24198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.909791][T24198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.729133][T24247] IPv6: Can't replace route, no match found [ 1600.237017][ T10] usb 3-1: USB disconnect, device number 119 [ 1600.435935][T24274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3665'. [ 1602.576115][T24336] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3685'. [ 1603.241030][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1603.354123][ T5807] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1603.566852][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.602215][ T5807] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1603.636869][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.660192][T24368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 1603.673056][ T5807] usb 4-1: config 0 descriptor?? [ 1604.331345][ T5807] razer 0003:1532:010E.0026: failed to enable macro keys: -71 [ 1604.363392][ T5807] razer 0003:1532:010E.0026: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 1604.440643][ T5807] usb 4-1: USB disconnect, device number 102 [ 1604.498861][T24379] fido_id[24379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1605.050195][T24400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3710'. [ 1605.072394][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3710'. [ 1605.819017][T24415] netlink: 'syz.2.3715': attribute type 58 has an invalid length. [ 1605.828518][T24415] netlink: 468 bytes leftover after parsing attributes in process `syz.2.3715'. [ 1606.504240][ T5807] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1606.664622][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 1606.671456][ T5807] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1606.692423][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1606.713717][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1606.732317][ T5807] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1606.761122][ T5807] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1606.780275][T24450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3726'. [ 1606.790871][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.024127][ T5807] usb 5-1: GET_CAPABILITIES returned 0 [ 1607.033400][ T5807] usbtmc 5-1:16.0: can't read capabilities [ 1607.243788][T24424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.277940][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.284410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.292672][T24424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.617708][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 1609.290022][T23240] usb 5-1: USB disconnect, device number 126 [ 1609.934505][T24518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3753'. [ 1610.028680][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1610.982269][T24543] netlink: 'syz.3.3765': attribute type 8 has an invalid length. [ 1611.160787][T24549] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3763'. [ 1611.182914][T24551] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1611.361118][T24558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3768'. [ 1611.660756][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1611.707698][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1611.962100][T24574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3773'. [ 1613.079978][T24582] macsec3: entered promiscuous mode [ 1613.262877][T24590] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1613.459510][T24596] ipvlan2: entered allmulticast mode [ 1613.466311][T24596] syz_tun: entered allmulticast mode [ 1613.761354][T24603] delete_channel: no stack [ 1613.824948][T23240] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1614.016415][T23240] usb 4-1: Using ep0 maxpacket: 16 [ 1614.029772][T23240] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.068102][T23240] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1614.081638][T23240] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1614.099066][T23240] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1614.121463][T23240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.123155][T24618] netlink: 'syz.2.3793': attribute type 3 has an invalid length. [ 1614.139477][T23240] usb 4-1: config 0 descriptor?? [ 1614.296068][T24626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1614.445655][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1614.568768][T23240] mcp2200 0003:04D8:00DF.0027: item 0 4 0 9 parsing failed [ 1614.588981][T23240] mcp2200 0003:04D8:00DF.0027: can't parse reports [ 1614.612615][T23240] mcp2200 0003:04D8:00DF.0027: probe with driver mcp2200 failed with error -22 [ 1614.644195][ T5807] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1614.770587][T23240] usb 4-1: USB disconnect, device number 103 [ 1614.825395][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 1614.837881][ T5807] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1614.856498][ T5807] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1614.866618][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.875463][ T5807] usb 3-1: Product: syz [ 1614.879889][ T5807] usb 3-1: Manufacturer: syz [ 1614.889153][ T5807] usb 3-1: SerialNumber: syz [ 1614.922526][ T5807] usb 3-1: config 0 descriptor?? [ 1614.939419][ T5807] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1614.960857][ T5807] usb 3-1: setting power ON [ 1614.971661][ T5807] dvb-usb: bulk message failed: -22 (2/0) [ 1614.988774][T24649] netlink: 'syz.4.3804': attribute type 1 has an invalid length. [ 1615.035493][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1615.089252][ T5807] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1615.163433][ T5807] usb 3-1: media controller created [ 1615.171666][T24631] cxusb: i2c rd: len=80 is too big! [ 1615.171666][T24631] [ 1615.208257][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1615.250302][ T5807] usb 3-1: selecting invalid altsetting 6 [ 1615.274271][ T5807] usb 3-1: digital interface selection failed (-22) [ 1615.283782][ T29] audit: type=1326 audit(1771361789.830:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.313962][ T5807] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1615.373897][ T5807] usb 3-1: setting power OFF [ 1615.392234][ T5807] dvb-usb: bulk message failed: -22 (2/0) [ 1615.401459][ T29] audit: type=1326 audit(1771361789.860:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.426596][ T5807] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1615.450651][ T5807] (NULL device *): no alternate interface [ 1615.478560][ T29] audit: type=1326 audit(1771361789.880:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.545331][ T5807] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1615.571276][ T5807] usb 3-1: USB disconnect, device number 120 [ 1615.583886][ T29] audit: type=1326 audit(1771361789.910:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.708708][ T29] audit: type=1326 audit(1771361789.910:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.762894][ T29] audit: type=1326 audit(1771361789.910:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.819132][ T29] audit: type=1326 audit(1771361789.910:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.871849][ T29] audit: type=1326 audit(1771361789.920:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.943779][ T29] audit: type=1326 audit(1771361789.920:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1615.994024][ T29] audit: type=1326 audit(1771361789.920:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24646 comm="syz.4.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea68d9c629 code=0x7ffc0000 [ 1616.036946][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3810'. [ 1616.296180][T24653] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1616.341981][T24653] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1616.569480][T24691] veth1: Caught tx_queue_len zero misconfig [ 1617.063600][T24700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3821'. [ 1617.211567][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3821'. [ 1618.966339][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 1619.023424][T24730] netlink: 'syz.2.3830': attribute type 21 has an invalid length. [ 1619.039943][T24730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3830'. [ 1619.421061][T24760] netlink: 'syz.1.3844': attribute type 2 has an invalid length. [ 1619.440539][T24760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3844'. [ 1620.167910][T24778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1621.314603][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1621.485477][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1621.493094][ T10] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1621.538095][ T10] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1621.549677][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.559904][ T10] usb 5-1: Product: syz [ 1621.565561][ T10] usb 5-1: Manufacturer: syz [ 1621.571012][ T10] usb 5-1: SerialNumber: syz [ 1621.582618][ T10] usb 5-1: config 0 descriptor?? [ 1621.598297][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1621.608024][ T10] usb 5-1: setting power ON [ 1621.612677][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1621.627098][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1621.656344][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1621.685822][ T10] usb 5-1: media controller created [ 1621.708230][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.756272][ T10] usb 5-1: selecting invalid altsetting 6 [ 1621.763647][ T10] usb 5-1: digital interface selection failed (-22) [ 1621.772279][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1621.783087][ T10] usb 5-1: setting power OFF [ 1621.792534][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1621.799257][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1621.814976][ T10] (NULL device *): no alternate interface [ 1621.815687][T24788] dvb-usb: bulk message failed: -22 (4/0) [ 1621.842660][T24788] cxusb: i2c read failed [ 1622.011683][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1622.099836][T24813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 1622.100314][ T10] usb 5-1: USB disconnect, device number 127 [ 1623.644033][T23240] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1623.837420][T23240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1623.858235][T23240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.884600][T23240] usb 4-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 1623.907438][T23240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.937607][T23240] usb 4-1: config 0 descriptor?? [ 1623.978688][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 1624.360441][T23240] hid (null): unknown global tag 0xe [ 1624.410345][T23240] hid-generic 0003:04F3:0001.0028: unknown main item tag 0x0 [ 1624.430616][T23240] hid-generic 0003:04F3:0001.0028: unknown global tag 0xe [ 1624.446672][T23240] hid-generic 0003:04F3:0001.0028: item 0 0 1 14 parsing failed [ 1624.487941][T23240] hid-generic 0003:04F3:0001.0028: probe with driver hid-generic failed with error -22 [ 1624.630060][ T10] usb 4-1: USB disconnect, device number 104 [ 1624.974967][T24059] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1625.138910][T24059] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.183512][T24059] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1625.212362][T24059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.234636][T24059] usb 3-1: Product: syz [ 1625.240847][T24059] usb 3-1: Manufacturer: syz [ 1625.261949][T24059] usb 3-1: SerialNumber: syz [ 1625.311916][T24059] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1625.705375][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1625.875395][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1625.882925][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1625.906033][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.958042][ T10] usb 4-1: config 0 descriptor?? [ 1626.131067][T24059] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1626.167061][T24059] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1626.207297][T24059] usb 3-1: media controller created [ 1626.225389][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1626.252806][T24059] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1626.263002][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1626.288695][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1626.307005][ T10] usb 4-1: media controller created [ 1626.390356][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1626.427452][T24899] ------------[ cut here ]------------ [ 1626.433356][T24899] usb 3-1: BOGUS control dir, pipe 80007980 doesn't match bRequestType c0 [ 1626.442177][T24899] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.3.3896/24899 [ 1626.452620][T24899] Modules linked in: [ 1626.456845][T24899] CPU: 1 UID: 0 PID: 24899 Comm: syz.3.3896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.467850][T24899] Tainted: [L]=SOFTLOCKUP [ 1626.472175][T24899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1626.482809][T24899] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1626.488467][T24899] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1626.508161][T24899] RSP: 0018:ffffc900042bf8c8 EFLAGS: 00010246 [ 1626.514255][T24899] RAX: 0000000000000000 RBX: ffff888051e76d00 RCX: 0000000080007980 [ 1626.522227][T24899] RDX: ffff8880335188a0 RSI: ffffffff8c7edaa0 RDI: ffffffff901ea9b0 [ 1626.530326][T24899] RBP: 1ffff1100b734a74 R08: 00000000000000c0 R09: 0000000000000000 [ 1626.538310][T24899] R10: ffffc900042bf9c0 R11: fffff52000857f44 R12: ffff888050af9100 [ 1626.546304][T24899] R13: ffff88805b9a53a0 R14: 0000000080007980 R15: ffff8880335188a0 [ 1626.554869][T24899] FS: 00007f4d9ec6e6c0(0000) GS:ffff88812556a000(0000) knlGS:0000000000000000 [ 1626.563897][T24899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1626.570479][T24899] CR2: 000000110c3a82fa CR3: 0000000028b08000 CR4: 00000000003526f0 [ 1626.578473][T24899] DR0: 0000000000000000 DR1: 00000000000001f8 DR2: 000000007a08253c [ 1626.586467][T24899] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1626.594548][T24899] Call Trace: [ 1626.597825][T24899] [ 1626.600741][T24899] ? __init_swait_queue_head+0xa9/0x150 [ 1626.606307][T24899] usb_start_wait_urb+0x12b/0x510 [ 1626.611319][T24899] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1626.616902][T24899] usb_control_msg+0x232/0x3e0 [ 1626.621678][T24899] gl861_ctrl_msg+0x207/0x420 [ 1626.626384][T24899] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1626.631574][T24899] gl861_i2c_master_xfer+0x439/0x6a0 [ 1626.637155][T24899] __i2c_transfer+0x79a/0x2020 [ 1626.641905][T24899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1626.647726][T24899] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1626.653517][T24899] ? i2c_transfer+0xc8/0x2d0 [ 1626.658125][T24899] i2c_transfer+0x1cc/0x2d0 [ 1626.662612][T24899] i2cdev_ioctl_rdwr+0x460/0x740 [ 1626.667739][T24899] i2cdev_ioctl+0x6a5/0x880 [ 1626.672228][T24899] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1626.677261][T24899] ? __fget_files+0x3a0/0x420 [ 1626.681922][T24899] ? __fget_files+0x2a/0x420 [ 1626.686532][T24899] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1626.691452][T24899] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1626.696490][T24899] __se_sys_ioctl+0xfc/0x170 [ 1626.701063][T24899] do_syscall_64+0x14d/0xf80 [ 1626.705661][T24899] ? trace_irq_disable+0x3b/0x150 [ 1626.710669][T24899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.716942][T24899] ? clear_bhb_loop+0x40/0x90 [ 1626.721602][T24899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.727520][T24899] RIP: 0033:0x7f4d9dd9c629 [ 1626.731919][T24899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.751536][T24899] RSP: 002b:00007f4d9ec6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1626.759960][T24899] RAX: ffffffffffffffda RBX: 00007f4d9e015fa0 RCX: 00007f4d9dd9c629 [ 1626.767985][T24899] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 1626.776634][T24899] RBP: 00007f4d9de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1626.784646][T24899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.792612][T24899] R13: 00007f4d9e016038 R14: 00007f4d9e015fa0 R15: 00007f4d9e13fa48 [ 1626.800614][T24899] [ 1626.803636][T24899] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1626.810952][T24899] CPU: 1 UID: 0 PID: 24899 Comm: syz.3.3896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.821862][T24899] Tainted: [L]=SOFTLOCKUP [ 1626.826162][T24899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1626.836200][T24899] Call Trace: [ 1626.839457][T24899] [ 1626.842370][T24899] vpanic+0x56c/0xa60 [ 1626.846336][T24899] ? __pfx__printk+0x10/0x10 [ 1626.850904][T24899] ? __pfx_vpanic+0x10/0x10 [ 1626.855402][T24899] ? is_bpf_text_address+0x292/0x2b0 [ 1626.860678][T24899] ? is_bpf_text_address+0x26/0x2b0 [ 1626.865861][T24899] panic+0xc5/0xd0 [ 1626.869564][T24899] ? __pfx_panic+0x10/0x10 [ 1626.873978][T24899] __warn+0x315/0x4f0 [ 1626.877958][T24899] ? usb_submit_urb+0x1052/0x18b0 [ 1626.882962][T24899] ? usb_submit_urb+0x1052/0x18b0 [ 1626.887966][T24899] __report_bug+0x29a/0x540 [ 1626.892452][T24899] ? usb_submit_urb+0x1052/0x18b0 [ 1626.897498][T24899] ? __pfx___report_bug+0x10/0x10 [ 1626.902507][T24899] ? lockdep_hardirqs_on+0x7a/0x110 [ 1626.907683][T24899] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1626.913476][T24899] report_bug_entry+0x19a/0x290 [ 1626.918332][T24899] ? usb_submit_urb+0x1114/0x18b0 [ 1626.923333][T24899] ? usb_submit_urb+0x1119/0x18b0 [ 1626.928333][T24899] handle_bug+0xca/0x200 [ 1626.932558][T24899] exc_invalid_op+0x1a/0x50 [ 1626.937043][T24899] asm_exc_invalid_op+0x1a/0x20 [ 1626.941870][T24899] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1626.947492][T24899] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1626.967077][T24899] RSP: 0018:ffffc900042bf8c8 EFLAGS: 00010246 [ 1626.973123][T24899] RAX: 0000000000000000 RBX: ffff888051e76d00 RCX: 0000000080007980 [ 1626.981073][T24899] RDX: ffff8880335188a0 RSI: ffffffff8c7edaa0 RDI: ffffffff901ea9b0 [ 1626.989023][T24899] RBP: 1ffff1100b734a74 R08: 00000000000000c0 R09: 0000000000000000 [ 1626.996982][T24899] R10: ffffc900042bf9c0 R11: fffff52000857f44 R12: ffff888050af9100 [ 1627.004953][T24899] R13: ffff88805b9a53a0 R14: 0000000080007980 R15: ffff8880335188a0 [ 1627.012923][T24899] ? usb_submit_urb+0x10a3/0x18b0 [ 1627.017934][T24899] ? __init_swait_queue_head+0xa9/0x150 [ 1627.023469][T24899] usb_start_wait_urb+0x12b/0x510 [ 1627.028486][T24899] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1627.034046][T24899] usb_control_msg+0x232/0x3e0 [ 1627.038848][T24899] gl861_ctrl_msg+0x207/0x420 [ 1627.043511][T24899] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1627.048707][T24899] gl861_i2c_master_xfer+0x439/0x6a0 [ 1627.053986][T24899] __i2c_transfer+0x79a/0x2020 [ 1627.058742][T24899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1627.064536][T24899] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1627.070336][T24899] ? i2c_transfer+0xc8/0x2d0 [ 1627.074922][T24899] i2c_transfer+0x1cc/0x2d0 [ 1627.079442][T24899] i2cdev_ioctl_rdwr+0x460/0x740 [ 1627.084377][T24899] i2cdev_ioctl+0x6a5/0x880 [ 1627.088874][T24899] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1627.093890][T24899] ? __fget_files+0x3a0/0x420 [ 1627.098575][T24899] ? __fget_files+0x2a/0x420 [ 1627.103172][T24899] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1627.108096][T24899] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1627.113119][T24899] __se_sys_ioctl+0xfc/0x170 [ 1627.117689][T24899] do_syscall_64+0x14d/0xf80 [ 1627.122262][T24899] ? trace_irq_disable+0x3b/0x150 [ 1627.127268][T24899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.133311][T24899] ? clear_bhb_loop+0x40/0x90 [ 1627.137970][T24899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.143853][T24899] RIP: 0033:0x7f4d9dd9c629 [ 1627.148291][T24899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.167877][T24899] RSP: 002b:00007f4d9ec6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1627.176271][T24899] RAX: ffffffffffffffda RBX: 00007f4d9e015fa0 RCX: 00007f4d9dd9c629 [ 1627.184226][T24899] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 1627.192189][T24899] RBP: 00007f4d9de32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1627.200144][T24899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1627.208098][T24899] R13: 00007f4d9e016038 R14: 00007f4d9e015fa0 R15: 00007f4d9e13fa48 [ 1627.216061][T24899] [ 1627.219410][T24899] Kernel Offset: disabled [ 1627.223716][T24899] Rebooting in 86400 seconds..