last executing test programs: 3.38355671s ago: executing program 2 (id=9661): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.319723067s ago: executing program 2 (id=9662): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.318876261s ago: executing program 2 (id=9663): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="22003300d0000c0008021100000008021100001cffffffffffff050f04040040020000000400cd"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.249799694s ago: executing program 2 (id=9664): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@getnexthop={0x20, 0x6a, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000007771000000"], 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 2.876085731s ago: executing program 3 (id=9668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x3, 0x4002) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0xfffffffa, {0xffffffffffffffff}, {0xee00}, 0x8d3, 0x3}) sched_getattr(r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x24000085) r3 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0xff, 0x3, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x8010) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xdddd0000, 0xe, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0x7000, 0x10000, 0xd, 0x0, 0x2, 0x0, 0x0, 0x9, 0x7, 0xff, 0x0, 0x5}, {0xeeee0000, 0xeeee1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x46, 0x3, 0x0, 0x3}, {0x1, 0xffff1000, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x100000, 0x41000, 0x0, 0x74, 0x5, 0x5, 0x2, 0x0, 0x0, 0x1, 0x5}, {0x0, 0x9000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0xc, 0x9}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x5}, {0x1000, 0x3}, {0xdddd1000, 0x400}, 0xddf8ffdb, 0x0, 0x0, 0x400, 0x0, 0xf801, 0x0, [0x80000001, 0x3ff, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x3, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) 2.599668998s ago: executing program 0 (id=9671): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r1, {0x9, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) 2.418726279s ago: executing program 0 (id=9672): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 1.894687884s ago: executing program 3 (id=9673): socket$kcm(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 1.562676576s ago: executing program 0 (id=9674): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff0200"/52], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.069376981s ago: executing program 1 (id=9676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) 1.035303921s ago: executing program 1 (id=9677): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x14, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c3e17"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r1, r3}) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)}, {&(0x7f0000000340)}, {&(0x7f0000000400)="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", 0xe01}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629", 0xb9}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {0x0}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b52cd19a01844", 0x6a}, {&(0x7f0000001700)="567dde672061bf3404515d0852fd1d1f17ccfa51f23ae8fc7318bb8f550b9e0b2e3af9f50d1c0ccbe76adc32baeee13e8f009c6fe2eb40759f8385a1938e95ffbc67cc59819f5509b4b76204741df20894b1a81a77247a1eb6707d10a31168935ed151cafc78aacfc5ab2a1fe8410352369fff3112495a19d0d18c910adcca16ec1c110e383ab9c4b76f26701d399ea8cd3e30d044cd300b666c5929fbca2e52d4b480a9df35b76ae60f7dd5b5585eced76c2b5847b1b1676c5bd1c0e9eb87abc71d2497808d4580ff0864e97e7980d50565e56eacf9e592370129e3b6d10a96eb028740e18b92b2f579dcbeb7b8", 0xee}], 0x5}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000002a00)="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", 0x124}, {&(0x7f0000001600)="523e5c257d7b2c6942e6c08d24f20636032091fa40e659895af96b5a89dc630d162db8611a76f943239fd2282d602b1fca5a765637a86ef0b43b079375f37032f0c575ab2a6369cacc8d14c82b828262ba1c94d0381bd7ee459a1f60045c5f5ca37781bab5699ffa79b12e2be821530a36813788fcd89d2158299248ca7a843c3dee117c45cbd3e5f5552dc70ac2cbbd84e7671466e7de8c53c0b13316f3f7480fe0e1bee94c43e8c88d79860e1bf63aa990a4787bb508c6c89751d59b6bf45cd870bf9763672921911d01ac17d3b9689c1d322741d7d343f62661", 0xdb}], 0x2}}], 0x3, 0x40) close(r4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) socket$kcm(0x2, 0x200000000000001, 0x106) getgid() r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffe, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r10, r9, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) 1.007922829s ago: executing program 3 (id=9678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 910.435862ms ago: executing program 3 (id=9679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x3e, &(0x7f00000009c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "c43e69", 0x8, 0x84, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x2b}]}}}}}, 0x0) 831.524389ms ago: executing program 3 (id=9680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 756.851166ms ago: executing program 3 (id=9681): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@getnexthop={0x20, 0x6a, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 659.630586ms ago: executing program 0 (id=9682): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x6, 0x1, 0x3, 0x3, 0x4}) 219.670459ms ago: executing program 2 (id=9683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 152.211094ms ago: executing program 1 (id=9684): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB='b *:* \n'], 0x8) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000000340)={0x1118, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x105c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "94a7794952dbad63b98d5ab45c415c9b8f2909cccc6870a2f6df"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "7d236eaa1e05b5c7a29311791eee6f03d12e3d99efa32e277a67911748939801b05f6f06c8907fffdffe6de7970a5b6b42791615abbb3bfcb0d51bfb93ca49478e4a250542965c981631eeb00d72ba89f93cc4f491d750badb90a38b8d2f1f2a79d4d9bdf514f577ae5ca0b096db74ef105df98a8cbd7bfb148faa825bf52f3a3fb2efbbce3a5006c21566b3496026c7b457ecf97feb947ec631d94f68eb20f9fb16ce4cd45efd6e694e559d51381adcb7a8ccca99fe227b61ccea821adc86cf73bfbc7eaf1d15fc4f38a2b6b99258b9406d7063f7e54086362b1e6ee31ad8a3bf0d428d7f0f811558ddd50a55efc1b4daea2d46cad2e0b6f4f47df0a91cc3b163450aa025486de0e473c3626f1adb9dc5bbe5b274f8cab0316d04397f92031498278633563c94a87488fb81dcd470d220538cf95cda6ab394740cecaaf3ce716bc2c6316581853eaeb5a0145d8a266fb45f5fb4a327a53c85c04deec961267ecb68afc5cfb2a6f531566f0784bb3dd55c3f091ae7f7948343bdbef1fd0aeab89f325a6f7e23ce7225b147122dace063870f096ef7715f617742f925e221164d89cabe6e4cd335ed490d9c515b4abe9ef8642f3d6f4d7c50ebab672ec0694e034a2d27619a813182713a207d4900688f60e63b4e7a9df20cfecfbe94e88e36b075ab1b92c44247cc19dc26fe3d344ff79b95dc8268ad265aefd8e4fa257098e54c397d899f4ea13e035fe204979783b7b7fb74f2ffaa3c4556721e9a0579e2fc5d28ea18b68e5b366416f75b739a26ab8de17a61e0b9f6210328e43dde77639adcec1ff56afed049a419761b91c9436e0c20b320c88158b1eb6eccadb75cf6a493230a7eba59ef47d096396cdd3964f8ad09019e68feda215cc36eb89a1cbcee34cb46d1ab66f77482b1a556fc59752c32b547052aba1f7e4841acdbdc76f46fadad144c055309769265f207979cab0f894dbf4f459d8e107ded992a817a743772d221245264c52aad8b5cfe0a34595e6043b8b31f157d45121cbc7b72793ba84150a20a89cba3b521658307f50e55ea0861a59b7d58c00efdf22b8fe95d2e4b0e69e1b0e1661b90a8447535333f4d4f8d18041788c1ca020beee2fde01e67f777747a241014a78b7ef828d72c5d33226acd8ce1fef61592628385da764c3de6b9cf6ef97062cf4effd832392da02c3d850933e9c74ab5c43e220a1f37557ba7b316c1d96935613c24afd13bc792fabc5f78d57e76840a20b5d4d0b8ffe14dfc20343c58dbfda64eaa58444a8c0aefdd41c1c4a3ab151a8be88e9d4f49cbcae1eff9e6ac87aff9ce34e955096503e5a9ce0d62b874aa8f8f36e054bb68be1b767838128f01ec92bf67ecf51ee5be50d1777cec091ce7e809e86b7d5908f4edf891bab337d6ed88a3f7592eea2853dcc3b74bbe997be82c1af71b8b66280b5cdeb5c6cff26fb3450a1c9a4486daa8fb26af3da650fe5db6063c1073359f8142977db47a9f99b9443b3c2b6b2cfe48adc7ddb2c2f5c10320a65b3d8d1166630ea9ce8660502446c32e6e8981c20fc543d87b9552d7a697bcbe26e3d258aac58578770393d2386989b9232026a2b7ba0d33a32809c083a57bb7ae424ad6b5aa8e57e54a918b0cd1bb6e37ac304453268ddbde9a951d11d11ea9778e9523c1efa5cbc960b72fa27c5ebea55fa92f198d39d602a219af2edf60e43d00970c665ca779ccd88b1c1264f260266f4d32f4ccb6c98079d77b8ddb0eee82d6a48f3ba2ad859cbe4d9770145b6aba8dc27ab37d2120aed8c0ddf1f66cd1e4a4350b611cc38a71cc97c4ed855ebf80e9222302d31be52c7415158ffdc4c3f8b5c4c5014fe06ef8d162f9b5c3886392980e7e6af8e0a3da366899b516ff5658f9a7dea539f1ee1780bc4bc064b8420bdf44821fbb4d170a7321dda9e455c02099186b203d1151425c46333dc12865039c190697f71513917c1a1b94026b94a7061d07c01eb184a71e4c19d52b31f9b0d71a7734e8cdf925712b908221641df1bd87a690900c46aa4d93067fe0201e82aac8c2c4ed2d2ad5fd497f7957409de1af7ee1849435ededc37c82e48f1c85940e3b5e9e601807f1a15601a11c85a734f7284c1342c9d6fdbcd1b278342ab847c720309a2a7fee466161f9ad8b9f44f858dd0b457d5f10199585478deac5a0ba39ad9a0e47c59197d3850c6f7d1494a0d4a58ae11e4a941e3e04170221bc2cb0edd3aa84512057eae5db7fe09dcc70cf0ff2167258f1715e8d6d3f873ebaf6b086e3cf3282fda839d61a3834ec7fb05d97456d8e7b9a02ddda659191eeef715b6520f3131c64c08fe9ad4491f4c8647577d1b887da8e93c80b1cb4d5d83ea7c013321b506de68f376a130d1cf6d18d373de880da43919b7f85c250d74550d2a67380966cd46988dbfd243a9e3c9f4701550272884966a52d69cf82e8021064bd0751359c92c7d915f68400285f47cbc8dee5f0082db8fd51832d63d35c8abd54643b7b73a01da77193dae38397dea147dcebe22040f6494ffe9003750c4a45a3a287f6997e5461b23344b327edcf02a0514614f7b6c0926a22f0977061dd3b04ed079a5698e7cb0ef5ba92f310103f02557d0e4d31d7bc15387d4b933b0787fe9289a59493789f4a1e6b5e36f30f9e9ae59244ecf50d6e75d19a07bd92abff9a80ba4841aa61c677f2f0f48f55b2e7271f2a2242f38a5d92f1e2630819585afd83f53cb0677d69c930a4d1cbd42e96a068f2d855415cfe10f4b6d472d438dd6c7bbf083c275a9c0fa1626b342c06716cbfdfa0d47d26ace5223062fcc6a1a3e31a5b99699d5df721488464855397b86ada0f11544e166ff7610f592b5959f7a3e3561ad9d527dd6f7d13b085377a7c7adb0acc0c80e7c8f4049a59c4a4b5604b0f9fafd04d6acb46997d0a5ab5a92bf522840c8bcf6b41252eb6284344736410dcb0e5750fbeb134c12491b3f50912322c3a1add1f6fe588e0a832c61dc8570623861839cd201d1e77312ad7338000dfdb9dcf23f4a39135cf66f849fb94cad84880a18bb286a442fadd0985d2274bd4400a9c668c3e80057b0af2164c8262d5facaaf73624b74426d71c200d48a286aef9a6894a1d8dcf736702b1085cade1d8437245a53e995d42a2debc0f1859674b1e94e84d62a38777433f45a249e61d68cb3f2bc383eb5959366c157c52a171ab5d2e274f83025023dfc593cc3fb58cc9cf65f7f3ade4eda0b6f2b4ffce690348c63305e6a71a66232cdeaf6d50921f0fb7277a17508c3c5193f389663ebb6b54d8227f837f39734161b650d6b1a66334758209e53a88137a92fde888a103c43f6cdb9132d0d0f356224f7ee3eb25d776ea8adbbfac7e07962c32bc9a4be1034f206a6582f16701cae7aa636217823a266d2374d775556c579838ee618fd341c1e5c77574b44f1c733924e6b620d2c39dbda60344e574c75c00efd02268b84b7530918e14a1f61acc0b904fe085b88baf4952ffb0c4123fa6295a61f202364c4afc9231967c25f676f32ea7d6cf01f162ef92af9e69da22b6769c2490c0bc58101aef5e64795d0a778f66edbb020289b10f1834af161fa56a60fc72e6b5a9cc0be744ca0db38ee4391dfe20088da520cf4959f58b9068048c59d0217fd4775e1cf9c46f4c722eee5f67c3cfe3706cfd111e7ebc5562e14dfb97aa0b8a42484414259ac6fb5c3a0e346035a38e282b31f9910a68f3a0b7d8c4812a92f68ba2d39823ab42da2c3bce513bc87d07f040a1fd3a1d7f4c3fa5d0999b8d55cdf4c6e4627735e06b9b97a857ca2c7d25a7c0e11cd04d28615fd78b2ebc445437475405873f6b880a434df2c1df2d41acb7e92a83d6b42e501683dd8deea90377e083b6458c3b9239f9e76f2615bdea1b3eafcad445055d5a00c045a4579b7bda5b8c55f20ca5fb73766a31e35597f0ecc6ee1c04cb0225832bcd83e183af74365d88b183578862523ce5830c6d2204cf84a7820f8e2cf9f8a710d18707ca0d3851f4e04f543197683f17df57bb9f726b65f1d0294c2597f337db7814cb7d401294f2185a3f35be3f67b3052dc13b764b3fdf02137a2d8e74d039dac537253571e72b74082c96f1001e16eaf5933097f388aab28acf9dc2a366689d6254b52ebbc36ba57a1fa990ee75a2f7425fec54176457fb59e4711b1af3bf024b45a2b52e296bf05de861700942532dad6e3b284f6d2ecae0121b1b34785ad41f049bc78d9dcb284aee3c471fc7284ec538420b1b0a2aba13790113178f564f076ef41f79fe8071b0abca8a11a91d337ec93e51acbd1f2a03a81ffae0e84dc632c325ca69a502534c964916d77936998f71d39ff9fee937fad6474926646c8bbc66df140705d0e28ea1bfb3761e9d87d4b5afa0dc4a5357cfe203c0014251ce55e3e0304327be01eb08aa9a01504242f78bb92842151ea3277273e4d45f0d2d762a34122bf50beae968442b4203b462e8c3572db31717eabd522222817812a334c5b4b06c6ae6b7ac4f2eea34c244b7f53614a8af28b07cb3f8dc0f03cfc3ae8efc5b76a66fb87c20f4bb7c7754f1e37270f930dd496b559158516520b11b17bed80121b3f230b6ee9b54e5476036bc1fd781a3c7de4fb852586d8876c597b1ea429e100fd1fe8d2159596cbeaf37be0933ec29c74aef9d41fdc43be9e9343bffc32d7598f0b2a6596f202a4e2eeb0fa56004d28252cf963a00c4993d5b56c47838755b708da53eb4367881331dd392a16a50fa52b6d0a53793ff19c4366441ef702189fc6890456475ed77366b844523fde4ccf72133c2dcfd2e2db5cee423d6a6ffef85dac691faafd4c611b9d2199aa82f03a6c3770b6916523cc252e54b6aa2c08f8fa7f7674efee99a51a9576a6ed44820165e4b0003d1e72212104a69737276273d91411abbf9a71b66b6d4e16fca62a6b68561cbf64e73204ca12fb71aa7a66b1808bd638228596173379c00baff6ff4ba6ea4cb767c5df84baffd9900d5064d672383c9d80bf95bfe29bcea11c6a6a57467dd5871a26474606db17303abe90a53234b3d85b36dcd7e3d16e1aa3afb6cd2b7cb92b8748a649299030a14413792704d7b1a847647e46065aa1bfcca439065ab47c8a7b5598010995ceb01a589caf8d3288140f21e00b2d179e30b1dc1de371b82a3fd8470ce6f8431c70849c85e72098470692613f5a6fc6873a5ba36e9ee6f02c17841e90b3a8e459e7069bc261977b5f5ad28d9c85b6feaba011a43acd9d30fc74942befaecb377ad5e4f148b47d4602608ae6be882646341e52caac84c5c34688d2fde7b6a63d45b1ba3dc9e9bb2605b243a79c5240114187a61d569823ff37ab5a44adae985dad0c67fafdc6f9116511aa55692ca9067f2cf157da566279037b2b40afd1bb1c84bd66d4d5d053cd40e4d2d2eebc9525123f3fcecc653ce78dc95e7188e8e8954c5b9ab6cbf5f136eaa3e1d59c1c4d94512e195e4ff70c005dd72e1fecea9f817846e9ada4372543879120122182f4857561eeddf4115d8607a7f152e07e9f71d69a628936adee9c1ec032daebeed5a93e7371d2c4aa1319fbe812dcf5150fdc0d0ac2b05b777939db6f7e0c32c191e10e6f8d1540eecea2ced99ac429dfebfa1ca3a329440056a28644d26c9f56670f89b9b331c1bbc7b974d2336dc21b7669839e8d51c209302fe3f1851f5f0254c8d6ef33ab7735212cdd96186674c18095c8ecb4af1551189a73269af4eac8430f039a51e9fc62aaaa12a22f1c778a304f9eb65454cbb36b7324c2159cf71b3f0a33"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x94}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbb14}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x4}]}, 0x1118}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) r4 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000)) setresuid(0xee00, 0xee00, 0xee01) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x2000800, 0x800, 0x4d1, 0x1, 0x400, 0x0, 0x0, 0x1, 0x7}}, 0x50) 142.401922ms ago: executing program 0 (id=9685): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 107.572339ms ago: executing program 2 (id=9686): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@getnexthop={0x20, 0x6a, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 43.500203ms ago: executing program 1 (id=9687): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 43.127313ms ago: executing program 0 (id=9688): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc040) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x60, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 42.399112ms ago: executing program 1 (id=9689): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x152) 0s ago: executing program 1 (id=9690): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) kernel console output (not intermixed with test programs): cket: 16 [ 2629.672215][T11777] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2629.676538][T11777] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2629.680610][T11777] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2629.685571][T11777] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2629.689456][T11777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.692878][T11777] usb 6-1: Product: syz [ 2629.694693][T11777] usb 6-1: Manufacturer: syz [ 2629.696644][T11777] usb 6-1: SerialNumber: syz [ 2629.994341][T11699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2629.999710][T11699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2630.080002][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8653'. [ 2630.239306][T11725] syzkaller0: entered promiscuous mode [ 2630.249004][T11725] syzkaller0: entered allmulticast mode [ 2630.424903][T11777] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2630.438349][T11735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2630.441637][T11777] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2630.449268][T11736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2630.478658][T11777] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2630.485077][T11777] usb 6-1: USB disconnect, device number 88 [ 2630.496490][ T8971] udevd[8971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2630.503625][T11738] syzkaller1: entered promiscuous mode [ 2630.505328][T11741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2630.507703][T11741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2630.511355][T11738] syzkaller1: entered allmulticast mode [ 2630.518329][T11742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2630.718051][T11746] netlink: 'syz.3.8664': attribute type 2 has an invalid length. [ 2631.020150][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8665'. [ 2632.558626][T11752] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2632.601981][T11752] overlayfs: failed to set xattr on upper [ 2632.605903][T11752] overlayfs: ...falling back to redirect_dir=nofollow. [ 2632.612499][T11752] overlayfs: ...falling back to index=off. [ 2632.620868][T11752] overlayfs: conflicting lowerdir path [ 2632.751971][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8671'. [ 2632.866546][T11768] syzkaller0: entered promiscuous mode [ 2632.869210][T11771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2632.869354][T11768] syzkaller0: entered allmulticast mode [ 2632.934405][T11775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2632.940029][T11775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2632.961882][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8676'. [ 2632.984885][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2633.045063][T11784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2633.087379][T11777] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2633.114388][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8678'. [ 2633.287792][T11791] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2633.291068][T11791] overlayfs: failed to set xattr on upper [ 2633.293582][T11791] overlayfs: ...falling back to redirect_dir=nofollow. [ 2633.296357][T11791] overlayfs: ...falling back to index=off. [ 2633.301954][T11791] overlayfs: conflicting lowerdir path [ 2633.337490][T11777] usb 6-1: Using ep0 maxpacket: 16 [ 2633.860216][T11777] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2634.010307][T11777] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2634.017339][T11777] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2634.030098][T11777] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2634.033617][T11777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.036534][T11777] usb 6-1: Product: syz [ 2634.038002][T11777] usb 6-1: Manufacturer: syz [ 2634.039435][T11777] usb 6-1: SerialNumber: syz [ 2634.140115][T11794] netlink: 'syz.0.8680': attribute type 2 has an invalid length. [ 2634.395397][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2634.418131][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2634.895355][T11810] syzkaller0: entered promiscuous mode [ 2634.906078][T11810] syzkaller0: entered allmulticast mode [ 2635.041815][T11777] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2635.059630][T11777] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2635.125255][T11777] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2635.139425][T11777] usb 6-1: USB disconnect, device number 89 [ 2635.155193][ T8971] udevd[8971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2635.440423][T11834] netlink: 'syz.0.8695': attribute type 2 has an invalid length. [ 2635.768168][T11839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2635.826115][T11840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2636.032459][T11847] syzkaller0: entered promiscuous mode [ 2636.035061][T11847] syzkaller0: entered allmulticast mode [ 2636.242887][T11851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8700'. [ 2636.303362][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8701'. [ 2636.407593][T16475] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 2636.557384][T16475] usb 7-1: Using ep0 maxpacket: 8 [ 2636.561342][T16475] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 2636.564143][T16475] usb 7-1: config 0 has no interface number 0 [ 2636.566710][T16475] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2636.570851][T16475] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2636.574359][T16475] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2636.578824][T16475] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2636.582870][T16475] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2636.589394][T16475] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2636.593022][T16475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.595764][T16475] usb 7-1: Product: syz [ 2636.597606][T16475] usb 7-1: Manufacturer: syz [ 2636.599482][T16475] usb 7-1: SerialNumber: syz [ 2636.603060][T16475] usb 7-1: config 0 descriptor?? [ 2636.841152][T16475] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 2636.849734][T16475] usb 7-1: USB disconnect, device number 85 [ 2636.940412][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8707'. [ 2637.148801][T11870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2637.153774][T11870] overlayfs: failed to set xattr on upper [ 2637.160843][T11870] overlayfs: ...falling back to redirect_dir=nofollow. [ 2637.166031][T11870] overlayfs: ...falling back to index=off. [ 2637.172383][T11870] overlayfs: conflicting lowerdir path [ 2638.686543][T11874] netlink: 'syz.1.8710': attribute type 2 has an invalid length. [ 2638.746597][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8711'. [ 2638.775232][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8712'. [ 2638.873221][T11887] syzkaller0: entered promiscuous mode [ 2638.880802][T11887] syzkaller0: entered allmulticast mode [ 2638.897890][T11887] tipc: Enabling of bearer rejected, failed to enable media [ 2638.965500][T11892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2639.030292][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2639.207688][T11777] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2639.369234][T11777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2639.373194][T11777] usb 6-1: config 0 has no interfaces? [ 2639.378033][T11777] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2639.381439][T11777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2639.384218][T11777] usb 6-1: Product: syz [ 2639.385728][T11777] usb 6-1: Manufacturer: syz [ 2639.388362][T11777] usb 6-1: SerialNumber: syz [ 2639.396312][T11777] usb 6-1: config 0 descriptor?? [ 2639.905278][T11920] syzkaller0: entered promiscuous mode [ 2639.907102][T11920] syzkaller0: entered allmulticast mode [ 2639.911058][T11920] tipc: Enabling of bearer rejected, failed to enable media [ 2640.138636][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8732'. [ 2640.143385][T11927] syzkaller1: entered promiscuous mode [ 2640.145470][T11927] syzkaller1: entered allmulticast mode [ 2640.373285][T11942] syzkaller0: entered promiscuous mode [ 2640.375483][T11942] syzkaller0: entered allmulticast mode [ 2640.381048][T11942] tipc: Enabling of bearer rejected, failed to enable media [ 2640.624411][ T6431] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 2640.976218][T11954] netlink: 'syz.0.8741': attribute type 2 has an invalid length. [ 2641.456618][ T42] audit: type=1326 audit(1786122476.302:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.3.8744" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 2641.472122][T11963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8746'. [ 2641.518531][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8744'. [ 2641.737447][ T1033] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 2641.798308][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8752'. [ 2641.879795][T11979] syzkaller0: entered promiscuous mode [ 2641.882394][T11979] syzkaller0: entered allmulticast mode [ 2641.890753][ T1033] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 2641.894286][ T1033] usb 7-1: config 0 has no interface number 0 [ 2641.896847][ T1033] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2641.903401][ T1033] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2641.907585][ T1033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.911797][ T1033] usb 7-1: Product: syz [ 2641.913848][ T1033] usb 7-1: Manufacturer: syz [ 2641.916900][ T1033] usb 7-1: SerialNumber: syz [ 2641.922228][ T1033] usb 7-1: config 0 descriptor?? [ 2641.931441][ T1033] yurex 7-1:0.50: Could not find endpoints [ 2641.972655][ T850] usb 6-1: USB disconnect, device number 90 [ 2642.046843][T11981] syzkaller0: entered promiscuous mode [ 2642.054056][T11981] syzkaller0: entered allmulticast mode [ 2642.067448][T11981] tipc: Enabling of bearer rejected, failed to enable media [ 2642.233917][T11986] netlink: 'syz.0.8756': attribute type 2 has an invalid length. [ 2642.305167][ T6812] usb 7-1: USB disconnect, device number 86 [ 2642.353995][T11991] syzkaller0: entered promiscuous mode [ 2642.358475][T11991] syzkaller0: entered allmulticast mode [ 2642.590200][T12000] syzkaller0: entered promiscuous mode [ 2642.593325][T12000] syzkaller0: entered allmulticast mode [ 2642.987523][T16475] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2643.094385][T12010] syzkaller0: entered promiscuous mode [ 2643.096622][T12010] syzkaller0: entered allmulticast mode [ 2643.104599][T12010] tipc: Enabling of bearer rejected, failed to enable media [ 2643.161003][T16475] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2643.177172][T16475] usb 6-1: config 0 has no interfaces? [ 2643.191738][T16475] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2643.201405][T16475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2643.219280][T16475] usb 6-1: Product: syz [ 2643.229513][T16475] usb 6-1: Manufacturer: syz [ 2643.238488][T16475] usb 6-1: SerialNumber: syz [ 2643.251256][T12014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8767'. [ 2643.275005][T16475] usb 6-1: config 0 descriptor?? [ 2643.445922][T12022] syzkaller0: entered promiscuous mode [ 2643.448556][T12022] syzkaller0: entered allmulticast mode [ 2643.563642][T12025] tipc: Enabled bearer , priority 0 [ 2643.568018][T12025] syzkaller0: entered promiscuous mode [ 2643.570462][T12025] syzkaller0: entered allmulticast mode [ 2643.579806][T12025] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2643.618329][T12025] tipc: Resetting bearer [ 2643.625064][T12023] tipc: Resetting bearer [ 2643.631152][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2643.634838][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2643.654888][T12023] tipc: Disabling bearer [ 2643.847595][T12042] syzkaller0: entered promiscuous mode [ 2643.849631][T12042] syzkaller0: entered allmulticast mode [ 2643.948622][ T42] audit: type=1326 audit(1786122478.862:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.3.8782" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 2644.062310][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8782'. [ 2645.532828][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8789'. [ 2645.671884][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2645.675866][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2645.751772][ T6812] usb 6-1: USB disconnect, device number 91 [ 2645.775427][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2645.782931][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2645.883601][ T42] audit: type=1326 audit(1786122480.802:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12081 comm="syz.1.8795" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2646.155041][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8800'. [ 2646.271289][T12096] syzkaller0: entered promiscuous mode [ 2646.273537][T12096] syzkaller0: entered allmulticast mode [ 2646.576182][T12104] netlink: 'syz.2.8805': attribute type 2 has an invalid length. [ 2646.601069][T12108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8806'. [ 2646.943183][T12118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.976369][T12118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2647.004338][T12120] syzkaller0: entered promiscuous mode [ 2647.008835][T12120] syzkaller0: entered allmulticast mode [ 2647.128710][T12122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8813'. [ 2647.549143][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8821'. [ 2647.610789][T12144] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8823'. [ 2647.658740][T12147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8825'. [ 2648.024076][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2648.036608][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2648.123396][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8833'. [ 2648.130680][T12167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2648.144544][T12167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2648.320883][ T6431] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 2648.767384][ T42] audit: type=1326 audit(1786122483.682:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.1.8841" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2648.811603][T12185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8842'. [ 2648.931898][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8841'. [ 2648.976160][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2648.983396][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2648.990738][T16475] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 2649.054566][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2649.060701][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2649.127947][T16475] usb 7-1: device descriptor read/64, error -71 [ 2649.169035][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2649.175643][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2649.367515][T16475] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 2649.497483][T16475] usb 7-1: device descriptor read/64, error -71 [ 2649.608329][T16475] usb usb7-port1: attempt power cycle [ 2649.680827][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8852'. [ 2649.731566][ T6431] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 2649.947781][T16475] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 2649.978302][T16475] usb 7-1: device descriptor read/8, error -71 [ 2649.993756][T12218] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8856'. [ 2650.237522][T16475] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 2650.258619][T16475] usb 7-1: device descriptor read/8, error -71 [ 2650.291445][T12223] syzkaller0: entered promiscuous mode [ 2650.293930][T12223] syzkaller0: entered allmulticast mode [ 2650.367614][T16475] usb usb7-port1: unable to enumerate USB device [ 2650.753701][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2650.759208][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.872241][T12237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2650.876226][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2651.579719][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.582193][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.587571][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 2651.612636][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8864'. [ 2651.813720][T12249] syzkaller0: entered promiscuous mode [ 2651.816163][T12249] syzkaller0: entered allmulticast mode [ 2651.824191][T12249] tipc: Enabling of bearer rejected, failed to enable media [ 2652.011525][T12255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.018498][T12255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.201212][T12260] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8871'. [ 2652.210626][ T42] audit: type=1326 audit(1786122487.132:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12261 comm="syz.0.8872" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x0 [ 2652.401652][ T42] audit: type=1326 audit(1786122487.322:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.1.8874" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2652.515689][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8874'. [ 2652.634424][T12272] syzkaller0: entered promiscuous mode [ 2652.636209][T12272] syzkaller0: entered allmulticast mode [ 2652.641483][T12272] tipc: Enabling of bearer rejected, failed to enable media [ 2652.768255][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8877'. [ 2652.807498][ T1033] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 2652.818614][ T42] audit: type=1326 audit(1786122487.742:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.3.8878" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 2652.936218][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8878'. [ 2652.940139][ T1033] usb 7-1: device descriptor read/64, error -71 [ 2653.115979][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8879'. [ 2653.177931][ T1033] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 2653.307437][ T1033] usb 7-1: device descriptor read/64, error -71 [ 2653.319801][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8882'. [ 2653.418721][ T1033] usb usb7-port1: attempt power cycle [ 2653.688288][T12293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2653.693502][T12293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2653.699527][T12293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2653.768964][ T1033] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 2653.798158][ T1033] usb 7-1: device descriptor read/8, error -71 [ 2653.878869][ T42] audit: type=1326 audit(1786122488.802:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12298 comm="syz.0.8889" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x0 [ 2653.991580][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8889'. [ 2654.047377][ T1033] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 2654.068243][ T1033] usb 7-1: device descriptor read/8, error -71 [ 2654.178264][ T1033] usb usb7-port1: unable to enumerate USB device [ 2654.260310][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8891'. [ 2654.502587][ T6431] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 2654.966048][T12322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2654.972853][T12322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2654.982389][T12322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2655.026701][T12323] netlink: 'syz.0.8898': attribute type 2 has an invalid length. [ 2655.067928][T12326] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8900'. [ 2655.316221][ T42] audit: type=1326 audit(1786122490.232:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.3.8904" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 2655.595920][T12339] syzkaller0: entered promiscuous mode [ 2655.598097][T12339] syzkaller0: entered allmulticast mode [ 2655.608160][T12339] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2656.294308][T12372] syzkaller0: entered promiscuous mode [ 2656.296855][T12372] syzkaller0: entered allmulticast mode [ 2656.562778][T12375] netlink: 'syz.3.8916': attribute type 2 has an invalid length. [ 2656.565448][T12374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2656.624915][T12382] __nla_validate_parse: 4 callbacks suppressed [ 2656.624929][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8919'. [ 2656.631991][ T42] audit: type=1326 audit(1786122491.522:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12379 comm="syz.0.8918" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x0 [ 2657.353678][T12393] netlink: 'syz.1.8930': attribute type 2 has an invalid length. [ 2657.849501][T12403] syzkaller0: entered promiscuous mode [ 2657.851905][T12403] syzkaller0: entered allmulticast mode [ 2658.135713][T12408] syzkaller0: entered promiscuous mode [ 2658.145223][T12408] syzkaller0: entered allmulticast mode [ 2658.150180][T12408] tipc: Enabling of bearer rejected, failed to enable media [ 2658.211360][ T42] audit: type=1326 audit(1786122493.132:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.1.8934" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2658.386999][T12420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2659.206539][T12434] syzkaller0: entered promiscuous mode [ 2659.209091][T12434] syzkaller0: entered allmulticast mode [ 2659.533086][T12445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2659.551574][T12445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2659.982926][T12443] netlink: 'syz.0.8940': attribute type 2 has an invalid length. [ 2659.991328][T12452] syzkaller0: entered promiscuous mode [ 2659.996708][T12452] syzkaller0: entered allmulticast mode [ 2660.019221][T12452] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2660.292877][T12460] vlan2: entered allmulticast mode [ 2660.294800][T12460] bond0: entered allmulticast mode [ 2660.296521][T12460] bond_slave_0: entered allmulticast mode [ 2660.299063][T12460] bond_slave_1: entered allmulticast mode [ 2660.413000][T12464] syzkaller0: entered promiscuous mode [ 2660.415090][T12464] syzkaller0: entered allmulticast mode [ 2660.421235][T12464] tipc: Enabling of bearer rejected, failed to enable media [ 2660.593194][T12469] tipc: Enabled bearer , priority 0 [ 2660.598332][T12469] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2660.624127][T12468] tipc: Disabling bearer [ 2660.979140][T12478] netlink: 'syz.0.8954': attribute type 2 has an invalid length. [ 2661.490177][T12488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2661.521928][T12488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2661.807991][T12490] tipc: Enabled bearer , priority 0 [ 2661.839133][T12490] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2661.943881][T12489] tipc: Disabling bearer [ 2662.134572][T12492] syzkaller0: entered promiscuous mode [ 2662.139661][T12492] syzkaller0: entered allmulticast mode [ 2662.205218][ T6431] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 2662.293554][T12505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2662.301535][T12505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2662.316472][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8967'. [ 2662.356206][T12510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8968'. [ 2662.456893][T12512] tipc: Enabled bearer , priority 0 [ 2662.462367][T12512] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2662.484910][T12511] tipc: Disabling bearer [ 2663.368668][T12525] syzkaller0: entered promiscuous mode [ 2663.371155][T12525] syzkaller0: entered allmulticast mode [ 2663.612636][T12529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8976'. [ 2663.699463][T12531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2663.718646][T12531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2663.731195][ T42] audit: type=1326 audit(1786122498.652:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12532 comm="syz.1.8977" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2663.836219][T12541] tipc: Enabled bearer , priority 0 [ 2663.850316][T12541] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2663.906230][T12540] tipc: Disabling bearer [ 2663.915601][T12546] syzkaller0: entered promiscuous mode [ 2663.918758][T12546] syzkaller0: entered allmulticast mode [ 2664.055890][T12550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.062242][T12550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.066559][T12550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.510647][T12561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2664.695656][T12564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8991'. [ 2664.855666][T12573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8995'. [ 2664.859088][T12573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2664.861691][T12573] IPv6: NLM_F_CREATE should be set when creating new route [ 2664.864154][T12573] IPv6: NLM_F_CREATE should be set when creating new route [ 2665.296856][T12585] netlink: 'syz.3.8999': attribute type 2 has an invalid length. [ 2665.479666][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.491660][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.590437][T12592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9002'. [ 2666.037588][ T9043] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2666.217343][ T9043] usb 6-1: Using ep0 maxpacket: 16 [ 2666.228295][ T9043] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2666.237464][ T9043] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2666.249969][ T9043] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2666.265625][ T9043] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2666.274495][ T9043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.278607][ T9043] usb 6-1: Product: syz [ 2666.280428][ T9043] usb 6-1: Manufacturer: syz [ 2666.284658][ T9043] usb 6-1: SerialNumber: syz [ 2666.287605][ T6812] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 2666.315452][T12612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2666.447331][ T6812] usb 7-1: Using ep0 maxpacket: 16 [ 2666.456162][ T6812] usb 7-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 2666.464864][ T6812] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 7 [ 2666.472307][ T6812] usb 7-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 2666.476337][ T6812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.480206][ T6812] usb 7-1: Product: syz [ 2666.482234][ T6812] usb 7-1: Manufacturer: Ђ [ 2666.484249][ T6812] usb 7-1: SerialNumber: syz [ 2666.637737][T12617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2666.644837][T12617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2666.713148][ T6812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2666.717609][ T6812] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2666.731098][ T6812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2666.735639][ T6812] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 2666.749408][ T6812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2666.782356][ T6812] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 2666.811933][T12619] udevd[12619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2666.862834][ T9043] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2666.868161][ T9043] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2666.889581][ T9043] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2666.895648][ T9043] usb 6-1: USB disconnect, device number 92 [ 2666.910382][T12605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9008'. [ 2666.920231][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2666.930217][T12605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9008'. [ 2666.937184][T12605] fuse: Invalid rootmode [ 2666.954582][ T6812] usb 7-1: USB disconnect, device number 95 [ 2667.228162][T12623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2667.884467][T12639] netlink: 'syz.1.9014': attribute type 2 has an invalid length. [ 2668.663807][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9019'. [ 2669.160224][T12663] syzkaller0: entered promiscuous mode [ 2669.162052][T12663] syzkaller0: entered allmulticast mode [ 2669.694694][T12668] netlink: 'syz.3.9027': attribute type 2 has an invalid length. [ 2670.133525][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2670.140081][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2670.223490][ T42] audit: type=1326 audit(1786122505.142:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz.2.9029" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x0 [ 2670.351746][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9029'. [ 2671.490854][T12712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2671.666333][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9044'. [ 2672.304628][T12724] syzkaller0: entered promiscuous mode [ 2672.306497][T12724] syzkaller0: entered allmulticast mode [ 2672.327286][T12724] tipc: Enabled bearer , priority 0 [ 2672.334199][T12723] tipc: Resetting bearer [ 2672.349277][T12723] tipc: Disabling bearer [ 2672.377063][ T42] audit: type=1326 audit(1786122507.292:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12725 comm="syz.2.9048" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x0 [ 2672.455151][T12728] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9049'. [ 2672.493270][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9048'. [ 2672.745555][T12745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2672.804766][T12747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2672.811476][T12747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2673.043416][T12752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2673.324052][T12755] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9058'. [ 2674.184428][ T42] audit: type=1326 audit(1786122509.102:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.1.9066" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2674.348334][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9066'. [ 2674.354609][T12780] netlink: 'syz.0.9068': attribute type 2 has an invalid length. [ 2675.136432][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9071'. [ 2675.640001][ T42] audit: type=1326 audit(1786122510.562:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.2.9078" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x0 [ 2675.750635][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9078'. [ 2676.047372][ T850] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2676.103161][T12808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9080'. [ 2676.201309][ T850] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 2676.207687][ T850] usb 6-1: config 0 has no interface number 0 [ 2676.209940][ T850] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2676.216016][ T850] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2676.220557][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.223494][ T850] usb 6-1: Product: syz [ 2676.225215][ T850] usb 6-1: Manufacturer: syz [ 2676.227029][ T850] usb 6-1: SerialNumber: syz [ 2676.234134][ T850] usb 6-1: config 0 descriptor?? [ 2676.244313][ T850] yurex 6-1:0.50: Could not find endpoints [ 2676.664458][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9089'. [ 2676.859883][ T42] audit: type=1326 audit(1786122511.782:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.2.9093" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x0 [ 2676.969612][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9093'. [ 2677.236511][T12845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2677.296747][T12847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2677.304302][T12847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2678.490315][T12865] syzkaller0: entered promiscuous mode [ 2678.492634][T12865] syzkaller0: entered allmulticast mode [ 2678.696072][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9106'. [ 2678.769887][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9108'. [ 2678.825207][T12879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9110'. [ 2678.849899][ T850] usb 6-1: USB disconnect, device number 93 [ 2678.903944][T12882] netlink: 'syz.2.9112': attribute type 1 has an invalid length. [ 2678.925302][T12882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2678.939059][T12887] syzkaller0: entered promiscuous mode [ 2678.943117][T12887] syzkaller0: entered allmulticast mode [ 2678.962999][T12882] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2679.017656][ T2925] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2679.027181][ T2925] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2679.047644][ T2925] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2679.051352][ T2925] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2679.095898][T12892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2679.166504][T12894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2679.176366][T12895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9115'. [ 2679.186257][T12894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2679.517324][T16475] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 2679.687859][T16475] usb 6-1: too many configurations: 253, using maximum allowed: 8 [ 2679.693977][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.698204][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.702119][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.717001][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.728113][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.733890][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.747363][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.757406][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.762901][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.767105][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.772346][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.776457][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.781675][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.799148][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.810348][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2679.828101][T16475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.834100][T16475] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 2679.840046][T16475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.847673][T16475] usb 6-1: config 0 descriptor?? [ 2680.064424][T12904] syzkaller0: entered promiscuous mode [ 2680.066784][T12904] syzkaller0: entered allmulticast mode [ 2680.103225][T16475] usbhid 6-1:0.0: can't add hid device: -71 [ 2680.113301][T16475] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2680.129038][T16475] usb 6-1: USB disconnect, device number 94 [ 2680.204350][T12908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2680.213772][T12908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2680.617350][T16475] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 2680.738999][ T1033] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 2680.769448][T16475] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 2680.772676][T16475] usb 6-1: config 4 has no interface number 0 [ 2680.775065][T16475] usb 6-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 2680.780111][T16475] usb 6-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64 [ 2680.794983][T16475] usb 6-1: config 4 interface 44 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2680.808096][T16475] usb 6-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2680.824760][T16475] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 2680.834105][T16475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.838127][T16475] usb 6-1: Product: syz [ 2680.840036][T16475] usb 6-1: Manufacturer: syz [ 2680.841457][T16475] usb 6-1: SerialNumber: syz [ 2680.909081][ T1033] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 2680.912153][ T1033] usb 7-1: config 0 has no interface number 0 [ 2680.914562][ T1033] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2680.921139][ T1033] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2680.924564][ T1033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.928631][ T1033] usb 7-1: Product: syz [ 2680.930607][ T1033] usb 7-1: Manufacturer: syz [ 2680.932237][ T1033] usb 7-1: SerialNumber: syz [ 2680.939209][ T1033] usb 7-1: config 0 descriptor?? [ 2680.944965][ T1033] yurex 7-1:0.50: Could not find endpoints [ 2681.018760][T12918] syzkaller0: entered promiscuous mode [ 2681.021173][T12918] syzkaller0: entered allmulticast mode [ 2681.031348][T12918] tipc: Enabled bearer , priority 0 [ 2681.036823][T12917] tipc: Resetting bearer [ 2681.091394][T12917] tipc: Disabling bearer [ 2681.271715][T16475] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 2681.293389][T16475] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2681.300205][T16475] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 2681.302926][T16475] usb 6-1: media controller created [ 2681.317484][T16475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2681.384196][T16475] DVB: Unable to find symbol dib7000p_attach() [ 2681.397467][T16475] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 2681.479686][T16475] rc_core: IR keymap rc-dib0700-rc5 not found [ 2681.482186][T16475] Registered IR keymap rc-empty [ 2681.490915][T16475] dvb-usb: could not initialize remote control. [ 2681.501620][T16475] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 2681.534338][T16475] usb 6-1: USB disconnect, device number 95 [ 2681.569762][T16475] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 2681.940437][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2682.000947][T12934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2682.022023][T12934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2682.367380][ T1033] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2682.527305][ T1033] usb 6-1: Using ep0 maxpacket: 8 [ 2682.532217][ T1033] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 2682.535535][ T1033] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2682.540829][ T1033] usb 6-1: config 0 has no interface number 0 [ 2682.543383][ T1033] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2682.548580][ T1033] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2682.552779][ T1033] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2682.556545][ T1033] usb 6-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2682.564698][ T1033] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2682.567901][ T1033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.570524][ T1033] usb 6-1: Product: syz [ 2682.572110][ T1033] usb 6-1: Manufacturer: syz [ 2682.573989][ T1033] usb 6-1: SerialNumber: syz [ 2682.578529][ T1033] usb 6-1: config 0 descriptor?? [ 2682.583826][ T1033] iowarrior 6-1:0.186: no interrupt-in endpoint found [ 2683.500269][T11777] usb 7-1: USB disconnect, device number 96 [ 2683.625042][T12956] syzkaller0: entered promiscuous mode [ 2683.627095][T12956] syzkaller0: entered allmulticast mode [ 2683.633899][T12956] tipc: Enabled bearer , priority 0 [ 2683.638753][T12955] tipc: Resetting bearer [ 2683.660195][T12955] tipc: Disabling bearer [ 2684.289155][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9140'. [ 2684.306800][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9141'. [ 2684.382833][T12968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2684.388921][T12968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2685.147911][ T850] usb 6-1: USB disconnect, device number 96 [ 2685.735346][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9150'. [ 2685.825296][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9151'. [ 2686.376641][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9157'. [ 2686.397874][T11777] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 2686.563287][T11777] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 2686.571946][T11777] usb 7-1: config 0 has no interface number 0 [ 2686.581295][T11777] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2686.590087][T11777] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2686.601483][T11777] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2686.610050][T11777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2686.621061][T11777] usb 7-1: Product: syz [ 2686.624571][T11777] usb 7-1: Manufacturer: syz [ 2686.628762][T11777] usb 7-1: SerialNumber: syz [ 2686.639117][T11777] usb 7-1: config 0 descriptor?? [ 2686.652214][T11777] yurex 7-1:0.50: Could not submitting URB [ 2686.659696][T11777] yurex 7-1:0.50: probe with driver yurex failed with error -5 [ 2687.397069][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9161'. [ 2687.462130][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2687.465259][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2687.512366][T13021] usb 1-1: USB disconnect, device number 2 [ 2687.609539][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2687.613959][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.189107][ T1033] usb 7-1: USB disconnect, device number 97 [ 2689.250253][ T6431] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 2689.325390][T13045] syzkaller0: entered promiscuous mode [ 2689.330453][T13045] syzkaller0: entered allmulticast mode [ 2689.345580][T13045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2689.606743][T13052] netlink: 'syz.0.9177': attribute type 1 has an invalid length. [ 2689.630762][T13052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2689.804336][T13056] syzkaller0: entered promiscuous mode [ 2689.806400][T13056] syzkaller0: entered allmulticast mode [ 2689.959711][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.963529][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.168004][T13068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2690.641454][T13075] syzkaller1: entered promiscuous mode [ 2690.644025][T13075] syzkaller1: entered allmulticast mode [ 2690.767357][ T1033] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2690.804130][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2690.810813][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.822654][T13082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9186'. [ 2690.827143][T13082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9186'. [ 2690.834022][T13082] fuse: Invalid rootmode [ 2690.918890][ T1033] usb 6-1: Using ep0 maxpacket: 16 [ 2690.932559][ T1033] usb 6-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 2690.937826][ T1033] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 7 [ 2690.943521][ T1033] usb 6-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 2690.947163][ T1033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2690.952881][ T1033] usb 6-1: Product: syz [ 2690.954576][ T1033] usb 6-1: Manufacturer: Ђ [ 2690.956305][ T1033] usb 6-1: SerialNumber: syz [ 2691.060010][ T6431] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 2691.174692][ T1033] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2691.178949][ T1033] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2691.184945][ T1033] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2691.187948][ T1033] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 2691.194174][ T1033] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2691.222836][ T1033] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 2691.242601][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2691.338069][T16475] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 2691.375925][T13071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9183'. [ 2691.380771][T13071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9183'. [ 2691.386909][T13071] fuse: Invalid rootmode [ 2691.461410][ T1033] usb 6-1: USB disconnect, device number 97 [ 2691.507544][T16475] usb 7-1: Using ep0 maxpacket: 16 [ 2691.516594][T16475] usb 7-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 2691.521692][T16475] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 7 [ 2691.531047][T16475] usb 7-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 2691.535013][T16475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2691.538700][T16475] usb 7-1: Product: syz [ 2691.540565][T16475] usb 7-1: Manufacturer: Ђ [ 2691.542523][T16475] usb 7-1: SerialNumber: syz [ 2691.570543][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9190'. [ 2691.764476][T16475] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2691.767522][T16475] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2691.773465][T16475] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2691.776268][T16475] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 2691.787181][T16475] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2691.805908][T16475] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 2691.824841][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2691.964891][T13086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9188'. [ 2691.971665][T13086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9188'. [ 2691.982503][T13086] fuse: Invalid rootmode [ 2692.046949][ T1033] usb 7-1: USB disconnect, device number 98 [ 2692.138511][T13108] tipc: Enabling of bearer rejected, failed to enable media [ 2692.142799][T13108] syzkaller0: entered promiscuous mode [ 2692.145060][T13108] syzkaller0: entered allmulticast mode [ 2692.152470][T13108] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2692.314324][T13112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2692.317477][T13112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2692.343910][T13110] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2692.411969][T13112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2692.415604][T13112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2692.664331][ T6431] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 2692.679261][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9201'. [ 2692.846357][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9203'. [ 2692.851213][T13124] syzkaller1: entered promiscuous mode [ 2692.853529][T13124] syzkaller1: entered allmulticast mode [ 2693.049374][T13129] tipc: Enabled bearer , priority 0 [ 2693.076645][T13128] tipc: Disabling bearer [ 2693.239168][T13135] syzkaller0: entered promiscuous mode [ 2693.241556][T13135] syzkaller0: entered allmulticast mode [ 2693.591312][T13147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2694.141801][ T42] audit: type=1326 audit(1786122529.062:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13154 comm="syz.2.9213" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x0 [ 2694.285483][T13156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2694.499487][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9214'. [ 2694.778027][T13166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2695.353561][T13175] syzkaller0: entered promiscuous mode [ 2695.355919][T13175] syzkaller0: entered allmulticast mode [ 2695.417492][ T1033] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2695.567384][ T1033] usb 7-1: Using ep0 maxpacket: 16 [ 2695.572062][ T1033] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2695.578643][ T1033] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2695.586618][ T1033] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2695.591537][ T1033] usb 7-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2695.594691][ T1033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.597570][ T1033] usb 7-1: Product: syz [ 2695.599121][ T1033] usb 7-1: Manufacturer: syz [ 2695.600884][ T1033] usb 7-1: SerialNumber: syz [ 2695.864038][T13186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2695.932142][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2695.940168][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2696.155259][ T1033] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2696.170999][ T1033] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2696.244216][ T1033] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2696.259914][ T1033] usb 7-1: USB disconnect, device number 99 [ 2696.286323][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2696.345537][T13197] __nla_validate_parse: 2 callbacks suppressed [ 2696.345560][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9227'. [ 2696.444828][ T42] audit: type=1326 audit(1786122531.362:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.1.9229" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2696.728296][T13206] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2696.928165][ T6431] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 2697.016769][T13215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2697.688767][T13227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2697.735767][T13229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2698.066959][T13238] netlink: 'syz.3.9239': attribute type 1 has an invalid length. [ 2698.123802][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9239'. [ 2698.131366][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9239'. [ 2698.147172][T13238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2698.516644][ T42] audit: type=1326 audit(1786122533.432:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.0.9247" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f72fec code=0x0 [ 2698.700616][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9249'. [ 2698.781422][T13261] syzkaller0: entered promiscuous mode [ 2698.784344][T13261] syzkaller0: entered allmulticast mode [ 2698.794253][T13261] tipc: Enabled bearer , priority 0 [ 2698.800855][T13260] tipc: Resetting bearer [ 2698.826900][T13260] tipc: Disabling bearer [ 2698.850729][T13265] syzkaller0: entered promiscuous mode [ 2698.853119][T13265] syzkaller0: entered allmulticast mode [ 2698.862413][T13265] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2698.989034][T13267] syzkaller0: entered promiscuous mode [ 2698.991652][T13267] syzkaller0: entered allmulticast mode [ 2699.023886][ T6431] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 2699.386077][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2699.389526][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2699.565447][T13283] fuse: Unknown parameter 'grou00000000000000000000' [ 2699.880342][T13286] netlink: 'syz.1.9261': attribute type 1 has an invalid length. [ 2699.900345][T13286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2699.925289][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9261'. [ 2700.134763][T13293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2700.323504][T13299] netlink: 'syz.2.9265': attribute type 1 has an invalid length. [ 2700.362959][T13299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2700.422509][T13299] macvlan2: entered promiscuous mode [ 2700.424709][T13299] macvlan2: entered allmulticast mode [ 2700.427093][T13299] bond2: entered allmulticast mode [ 2700.429236][T13299] bond2: entered promiscuous mode [ 2700.432224][T13299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2700.436436][T13299] team0: Port device macvlan2 added [ 2700.547955][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2700.555960][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2700.872768][T13304] netlink: 'syz.1.9267': attribute type 1 has an invalid length. [ 2700.899129][T13304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2700.928167][T13304] macvlan2: entered promiscuous mode [ 2700.930619][T13304] macvlan2: entered allmulticast mode [ 2700.933102][T13304] bond2: entered allmulticast mode [ 2700.935304][T13304] bond2: entered promiscuous mode [ 2700.938512][T13304] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2700.943795][T13304] team0: Port device macvlan2 added [ 2701.175301][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9272'. [ 2701.357434][T16475] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2701.507305][T16475] usb 6-1: Using ep0 maxpacket: 16 [ 2701.512331][T16475] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2701.521043][T16475] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2701.530112][T16475] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2701.539776][T16475] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2701.547661][T16475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2701.551904][T16475] usb 6-1: Product: syz [ 2701.554805][T16475] usb 6-1: Manufacturer: syz [ 2701.560206][T16475] usb 6-1: SerialNumber: syz [ 2701.759824][T13323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2701.926602][T13326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.942615][T13326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2702.223904][T16475] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2702.236925][T16475] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2702.241769][T13334] netlink: 'syz.2.9277': attribute type 1 has an invalid length. [ 2702.269998][T16475] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2702.279242][T13334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2702.283945][T16475] usb 6-1: USB disconnect, device number 98 [ 2702.312917][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2702.581331][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9280'. [ 2702.594565][T13344] syzkaller1: entered promiscuous mode [ 2702.602345][T13344] syzkaller1: entered allmulticast mode [ 2702.774588][T13351] netlink: 'syz.2.9283': attribute type 1 has an invalid length. [ 2702.802636][T13351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2702.830307][T13351] macvlan3: entered promiscuous mode [ 2702.833170][T13351] macvlan3: entered allmulticast mode [ 2702.924463][T13356] syzkaller0: entered promiscuous mode [ 2702.930550][T13356] syzkaller0: entered allmulticast mode [ 2702.951935][T13356] tipc: Enabled bearer , priority 0 [ 2702.962746][T13355] tipc: Resetting bearer [ 2703.009150][T13355] tipc: Disabling bearer [ 2703.022528][T13359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.031719][T13359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.281734][T13369] netlink: 'syz.1.9291': attribute type 1 has an invalid length. [ 2703.303143][T13369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2703.308818][T13367] tipc: Enabled bearer , priority 0 [ 2703.313358][T13367] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2703.321759][T13367] tipc: Resetting bearer [ 2703.352228][T13366] tipc: Disabling bearer [ 2703.687477][ T850] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2703.837669][ T850] usb 6-1: Using ep0 maxpacket: 16 [ 2703.842214][ T850] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2703.846143][ T850] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2703.853899][ T850] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2703.861031][ T850] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2703.864895][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.868522][ T850] usb 6-1: Product: syz [ 2703.872071][ T850] usb 6-1: Manufacturer: syz [ 2703.873707][ T850] usb 6-1: SerialNumber: syz [ 2704.235362][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2704.254151][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2704.633637][ T850] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2704.647468][ T850] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2704.731223][ T850] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2704.746786][ T850] usb 6-1: USB disconnect, device number 99 [ 2704.778137][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2704.785461][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2704.789295][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2704.795637][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2704.798674][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2704.801812][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2704.831510][T13398] netlink: 'syz.2.9301': attribute type 1 has an invalid length. [ 2704.875922][T13398] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2704.917921][T13398] macvlan3: entered promiscuous mode [ 2704.920089][T13398] macvlan3: entered allmulticast mode [ 2705.040164][ T42] audit: type=1326 audit(1786122539.962:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.9302" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x0 [ 2705.081920][ T7172] syz_tun (unregistering): left allmulticast mode [ 2705.141820][T13411] netlink: 'syz.3.9303': attribute type 1 has an invalid length. [ 2705.190631][T13411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2705.272435][T13418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2705.279827][T13417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2705.360397][ T6291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.410646][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9305'. [ 2705.511795][ T6291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.530269][T13426] netlink: 'syz.3.9307': attribute type 1 has an invalid length. [ 2705.558377][T13426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2705.599739][ T6291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.724402][ T6291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.752264][T13433] syzkaller0: entered promiscuous mode [ 2705.754785][T13433] syzkaller0: entered allmulticast mode [ 2705.935249][T13395] bridge0: port 1(bridge_slave_0) entered blocking state [ 2705.947776][T13395] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.950762][T13395] bridge_slave_0: entered allmulticast mode [ 2705.954278][T13395] bridge_slave_0: entered promiscuous mode [ 2705.959634][T13395] bridge0: port 2(bridge_slave_1) entered blocking state [ 2705.962445][T13395] bridge0: port 2(bridge_slave_1) entered disabled state [ 2705.965086][T13395] bridge_slave_1: entered allmulticast mode [ 2705.970262][T13395] bridge_slave_1: entered promiscuous mode [ 2705.999679][T13395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2706.006705][T13395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2706.036444][T13395] team0: Port device team_slave_0 added [ 2706.080231][T13395] team0: Port device team_slave_1 added [ 2706.140644][T13395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2706.143749][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2706.154863][T13395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2706.169694][T13395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2706.172599][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2706.183028][ T6812] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2706.186684][T13395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2706.238696][ T6291] bridge_slave_1: left allmulticast mode [ 2706.241064][ T6291] bridge_slave_1: left promiscuous mode [ 2706.243542][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2706.253619][ T6291] bridge_slave_0: left allmulticast mode [ 2706.255703][ T6291] bridge_slave_0: left promiscuous mode [ 2706.260263][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2706.377422][ T6812] usb 7-1: Using ep0 maxpacket: 16 [ 2706.386780][ T6812] usb 7-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 2706.396166][ T6812] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 7 [ 2706.404883][ T6812] usb 7-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 2706.409317][ T6812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.413089][ T6812] usb 7-1: Product: syz [ 2706.415240][ T6812] usb 7-1: Manufacturer: Ђ [ 2706.417464][ T6812] usb 7-1: SerialNumber: syz [ 2706.434787][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2706.443189][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2706.448315][ T6291] bond0 (unregistering): Released all slaves [ 2706.455720][ T6291] bond1 (unregistering): Released all slaves [ 2706.505270][T13395] hsr_slave_0: entered promiscuous mode [ 2706.508939][T13395] hsr_slave_1: entered promiscuous mode [ 2706.511996][T13395] debugfs: 'hsr0' already exists in 'hsr' [ 2706.514286][T13395] Cannot create hsr debugfs directory [ 2706.576551][ T6291] : left promiscuous mode [ 2706.680521][ T6812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2706.683809][ T6812] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2706.691691][ T6812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2706.691936][ T6291] tipc: Left network mode [ 2706.697042][ T6812] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 2706.715208][ T6812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2706.784223][ T6812] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 2706.821081][T12619] udevd[12619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2706.863875][ T6431] Bluetooth: hci4: command tx timeout [ 2706.866282][T13441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9310'. [ 2707.029666][ T6291] hsr_slave_0: left promiscuous mode [ 2707.032308][ T6291] hsr_slave_1: left promiscuous mode [ 2707.035149][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2707.039649][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2707.046017][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2707.050233][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2707.075371][ T6291] veth1_macvtap: left promiscuous mode [ 2707.075680][T16475] usb 7-1: USB disconnect, device number 100 [ 2707.077369][ T6291] veth0_macvtap: left promiscuous mode [ 2707.077618][ T6291] veth1_vlan: left promiscuous mode [ 2707.083436][ T6291] veth0_vlan: left promiscuous mode [ 2707.372980][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 2707.496029][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2707.500627][T13457] tipc: Enabled bearer , priority 0 [ 2707.503434][T13458] syzkaller0: entered promiscuous mode [ 2707.507367][T13458] syzkaller0: entered allmulticast mode [ 2707.546204][T13455] tipc: Resetting bearer [ 2707.556685][T13454] tipc: Resetting bearer [ 2707.576720][T13454] tipc: Disabling bearer [ 2707.886644][T13483] netlink: 'syz.1.9316': attribute type 1 has an invalid length. [ 2708.108464][T13395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2708.123297][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2708.126622][T13395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2708.134870][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2708.138439][T13395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2708.144793][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2708.149010][T13395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2708.173396][T13395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2708.343943][T13395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2708.364065][T13395] 8021q: adding VLAN 0 to HW filter on device team0 [ 2708.380097][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 2708.383203][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2708.416293][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2708.418961][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2708.474336][T13507] syzkaller0: entered promiscuous mode [ 2708.476697][T13507] syzkaller0: entered allmulticast mode [ 2708.775836][T13520] tipc: Enabled bearer , priority 0 [ 2708.781091][T13520] syzkaller0: entered promiscuous mode [ 2708.783235][T13520] syzkaller0: entered allmulticast mode [ 2708.806549][T13520] tipc: Resetting bearer [ 2708.817849][T13516] tipc: Resetting bearer [ 2708.834949][T13516] tipc: Disabling bearer [ 2708.855866][T13518] syzkaller0: entered promiscuous mode [ 2708.858335][T13518] syzkaller0: entered allmulticast mode [ 2708.947888][ T6431] Bluetooth: hci4: command tx timeout [ 2709.059358][T13395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2709.135615][T13534] syzkaller0: entered promiscuous mode [ 2709.140181][T13534] syzkaller0: entered allmulticast mode [ 2709.164300][T13534] tipc: Enabled bearer , priority 0 [ 2709.182314][T13533] tipc: Resetting bearer [ 2709.200674][T13538] netlink: 'syz.2.9329': attribute type 1 has an invalid length. [ 2709.223940][T13533] tipc: Disabling bearer [ 2709.234264][T13395] veth0_vlan: entered promiscuous mode [ 2709.263485][T13538] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2709.280491][T13395] veth1_vlan: entered promiscuous mode [ 2709.313334][T13395] veth0_macvtap: entered promiscuous mode [ 2709.324925][T13395] veth1_macvtap: entered promiscuous mode [ 2709.391768][T13395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2709.401869][T13395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2709.430239][T13540] syzkaller0: entered promiscuous mode [ 2709.432892][T13540] syzkaller0: entered allmulticast mode [ 2709.450343][ T6291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.464826][ T6291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.628729][ T6291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.662756][ T6291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2709.790716][T13551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2709.851548][ T8548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2709.873189][T13553] netlink: 'syz.2.9333': attribute type 2 has an invalid length. [ 2709.880590][ T8548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2710.110982][ T8548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2710.123482][ T8548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2710.156444][T13561] netlink: 'syz.3.9335': attribute type 1 has an invalid length. [ 2710.416021][T13561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2710.508485][T13567] tipc: Started in network mode [ 2710.510325][T13567] tipc: Node identity badd4807774a, cluster identity 4711 [ 2710.513603][T13567] tipc: Enabled bearer , priority 0 [ 2710.518608][T13567] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2710.535810][T13567] tipc: Resetting bearer [ 2710.584251][T13565] tipc: Disabling bearer [ 2710.696122][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9338'. [ 2710.703680][T13577] syzkaller1: entered promiscuous mode [ 2710.706797][T13577] syzkaller1: entered allmulticast mode [ 2710.726450][T13580] tipc: Enabled bearer , priority 0 [ 2710.729824][T13580] syzkaller0: entered promiscuous mode [ 2710.731579][T13580] syzkaller0: entered allmulticast mode [ 2710.744637][T13580] tipc: Resetting bearer [ 2710.752649][T13578] tipc: Resetting bearer [ 2710.779397][T13578] tipc: Disabling bearer [ 2710.851431][T13583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2711.017384][ T6431] Bluetooth: hci4: command tx timeout [ 2711.901775][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9345'. [ 2712.013602][T13598] netlink: 'syz.2.9343': attribute type 2 has an invalid length. [ 2712.140930][T13603] tipc: Enabled bearer , priority 0 [ 2712.152154][T13603] syzkaller0: entered promiscuous mode [ 2712.160948][T13603] syzkaller0: entered allmulticast mode [ 2712.195292][T13603] tipc: Resetting bearer [ 2712.218975][T13602] tipc: Resetting bearer [ 2712.306338][T13602] tipc: Disabling bearer [ 2712.383657][T13605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2712.884607][T13609] syzkaller0: entered promiscuous mode [ 2712.886782][T13609] syzkaller0: entered allmulticast mode [ 2713.018765][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.021375][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.097905][ T6431] Bluetooth: hci4: command tx timeout [ 2713.336533][T13617] syzkaller0: entered promiscuous mode [ 2713.349413][T13617] syzkaller0: entered allmulticast mode [ 2713.423477][ T6431] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 2713.511920][T13625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2713.600413][T13627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2713.609979][T13627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2713.662753][T13629] netlink: 'syz.3.9356': attribute type 1 has an invalid length. [ 2713.708733][T13629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2713.715153][T13631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9356'. [ 2713.807312][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9357'. [ 2714.225878][T13646] syzkaller0: entered promiscuous mode [ 2714.230064][T13646] syzkaller0: entered allmulticast mode [ 2714.435504][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9363'. [ 2714.565517][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9364'. [ 2714.932501][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9367'. [ 2715.112482][T13670] netlink: 'syz.1.9369': attribute type 1 has an invalid length. [ 2715.121410][T13669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9368'. [ 2715.163088][T13670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2715.275643][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9370'. [ 2715.284810][T13680] syzkaller1: entered promiscuous mode [ 2715.294626][T13680] syzkaller1: entered allmulticast mode [ 2715.548461][T13687] syzkaller0: entered promiscuous mode [ 2715.551152][T13687] syzkaller0: entered allmulticast mode [ 2715.594503][T13691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2715.599498][T13691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2715.600837][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9374'. [ 2715.822986][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9378'. [ 2715.955952][T13702] syzkaller0: entered promiscuous mode [ 2715.957962][T13702] syzkaller0: entered allmulticast mode [ 2716.021966][T13707] tipc: Enabled bearer , priority 0 [ 2716.026109][T13707] syzkaller0: entered promiscuous mode [ 2716.031361][T13707] syzkaller0: entered allmulticast mode [ 2716.047822][T13707] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2716.094164][T13707] tipc: Resetting bearer [ 2716.101331][T13710] netlink: 'syz.3.9383': attribute type 1 has an invalid length. [ 2716.128875][T13710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2716.165885][T13706] tipc: Resetting bearer [ 2716.223401][T13706] tipc: Disabling bearer [ 2716.247632][T13710] macvlan2: entered promiscuous mode [ 2716.249344][T13710] macvlan2: entered allmulticast mode [ 2716.265415][T13713] bond6: (slave ip6gretap1): making interface the new active one [ 2716.269311][T13713] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2716.363817][T13715] syzkaller0: entered promiscuous mode [ 2716.369708][T13715] syzkaller0: entered allmulticast mode [ 2716.431873][T13721] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9387'. [ 2716.560080][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9389'. [ 2717.015723][T13741] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2717.108831][T13748] syzkaller0: entered promiscuous mode [ 2717.114345][T13748] syzkaller0: entered allmulticast mode [ 2717.265120][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9388'. [ 2717.498277][T13757] netlink: 'syz.1.9400': attribute type 1 has an invalid length. [ 2717.532582][T13757] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2717.558579][T13757] macvlan3: entered promiscuous mode [ 2717.560446][T13757] macvlan3: entered allmulticast mode [ 2717.562517][T13757] bond5: entered allmulticast mode [ 2717.564375][T13757] bond5: entered promiscuous mode [ 2717.566768][T13757] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2717.571659][T13757] team0: Port device macvlan3 added [ 2717.574148][T13759] syzkaller0: entered promiscuous mode [ 2717.577594][T13759] syzkaller0: entered allmulticast mode [ 2717.577731][ T6812] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2717.713585][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9401'. [ 2717.729316][T13761] syzkaller1: entered promiscuous mode [ 2717.732658][T13761] syzkaller1: entered allmulticast mode [ 2717.756935][ T6812] usb 7-1: Using ep0 maxpacket: 16 [ 2717.763667][ T6812] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2717.775660][ T6812] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2717.781408][ T6812] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2717.785901][ T6812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.800760][ T6812] usb 7-1: config 0 descriptor?? [ 2717.821799][T13761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9401'. [ 2717.862503][T13770] syzkaller0: entered promiscuous mode [ 2717.867328][T13770] syzkaller0: entered allmulticast mode [ 2717.966532][T13774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9405'. [ 2718.034052][ T42] audit: type=1326 audit(1786122552.952:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.1.9406" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2718.248102][ T6812] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 2718.474521][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9409'. [ 2718.550576][T13788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9410'. [ 2718.599879][T13790] syzkaller0: entered promiscuous mode [ 2718.601738][T13790] syzkaller0: entered allmulticast mode [ 2718.929556][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9414'. [ 2719.166767][T13806] netlink: 'syz.1.9417': attribute type 1 has an invalid length. [ 2719.195133][T13806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2719.238355][T13806] macvlan4: entered promiscuous mode [ 2719.240799][T13806] macvlan4: entered allmulticast mode [ 2719.243706][T13806] bond6: entered allmulticast mode [ 2719.246178][T13806] bond6: entered promiscuous mode [ 2719.249851][T13806] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2719.256759][T13806] team0: Port device macvlan4 added [ 2719.363892][T13811] netlink: 'syz.1.9419': attribute type 1 has an invalid length. [ 2719.387562][T13811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2719.418035][T13811] macvlan5: entered promiscuous mode [ 2719.419982][T13811] macvlan5: entered allmulticast mode [ 2719.422151][T13811] bond7: entered allmulticast mode [ 2719.423942][T13811] bond7: entered promiscuous mode [ 2719.428660][T13811] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 2719.433832][T13811] team0: Port device macvlan5 added [ 2719.690231][T13816] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2720.033005][T13824] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2720.368615][T13563] usb 7-1: USB disconnect, device number 101 [ 2720.671323][T13833] bridge0: port 2(bridge_slave_1) entered disabled state [ 2720.675019][T13833] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.792224][T13833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2720.808219][T13833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2720.809887][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2720.821284][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2720.824957][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2720.827834][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2720.830683][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2720.974471][T13833] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 2721.000399][T13833] bond2: left allmulticast mode [ 2721.002151][T13833] bond2: left promiscuous mode [ 2721.006234][T13833] bond5: left allmulticast mode [ 2721.008373][T13833] bond5: left promiscuous mode [ 2721.011707][T13833] bond6: left allmulticast mode [ 2721.013380][T13833] bond6: left promiscuous mode [ 2721.016183][T13833] bond7: left allmulticast mode [ 2721.018643][T13833] bond7: left promiscuous mode [ 2721.068503][T13843] syzkaller0: entered promiscuous mode [ 2721.070495][T13843] syzkaller0: entered allmulticast mode [ 2721.089062][ T6291] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.096560][ T6291] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.137379][ T6291] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.142787][ T6291] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.313592][ T6291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.319047][ T6291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2721.650337][ T6291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.686896][ T6291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2721.832259][ T6291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.835612][ T6291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2721.916082][ T6291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2721.920142][ T6291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2722.247970][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 2722.252328][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 2722.255212][T13835] bridge_slave_0: entered allmulticast mode [ 2722.258862][T13835] bridge_slave_0: entered promiscuous mode [ 2722.275907][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 2722.280365][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 2722.282768][T13835] bridge_slave_1: entered allmulticast mode [ 2722.285447][T13835] bridge_slave_1: entered promiscuous mode [ 2722.320653][ T6291] bridge_slave_1: left allmulticast mode [ 2722.322431][ T6291] bridge_slave_1: left promiscuous mode [ 2722.324279][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2722.328348][ T6291] bridge_slave_0: left allmulticast mode [ 2722.330128][ T6291] bridge_slave_0: left promiscuous mode [ 2722.332010][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2722.448508][ T6291] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 2722.495062][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2722.500438][ T6291] bond_slave_0: left allmulticast mode [ 2722.503572][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2722.506627][ T6291] bond_slave_1: left allmulticast mode [ 2722.507416][T13563] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2722.509081][ T6291] bond0 (unregistering): Released all slaves [ 2722.516932][ T6291] bond1 (unregistering): Released all slaves [ 2722.524116][ T6291] bond2 (unregistering): left allmulticast mode [ 2722.526105][ T6291] bond2 (unregistering): left promiscuous mode [ 2722.529680][ T6291] team0: Port device macvlan2 removed [ 2722.534281][ T6291] bond2 (unregistering): Released all slaves [ 2722.543626][ T6291] bond3 (unregistering): Released all slaves [ 2722.551254][ T6291] bond4 (unregistering): Released all slaves [ 2722.562384][ T6291] bond5 (unregistering): Released all slaves [ 2722.569835][ T6291] bond6 (unregistering): Released all slaves [ 2722.597146][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2722.611992][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2722.687333][T13563] usb 6-1: Using ep0 maxpacket: 8 [ 2722.691637][T13563] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 2722.694515][T13563] usb 6-1: config 0 has no interface number 0 [ 2722.714565][T13563] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2722.725505][ T6291] : left promiscuous mode [ 2722.727592][T13563] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2722.727612][T13563] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2722.727626][T13563] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2722.727640][T13563] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2722.727652][T13563] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2722.729316][T13563] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2722.749726][T13563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2722.752272][T13563] usb 6-1: Product: syz [ 2722.753584][T13563] usb 6-1: Manufacturer: syz [ 2722.755063][T13563] usb 6-1: SerialNumber: syz [ 2722.779320][T13563] usb 6-1: config 0 descriptor?? [ 2722.820158][T13835] team0: Port device team_slave_0 added [ 2722.824055][T13835] team0: Port device team_slave_1 added [ 2722.865377][ T6291] tipc: Left network mode [ 2722.878867][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2722.895666][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2722.920332][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2722.932473][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2722.937365][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2722.947498][ T6431] Bluetooth: hci0: command tx timeout [ 2722.957775][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2722.997882][T13563] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2723.008234][T13835] hsr_slave_0: entered promiscuous mode [ 2723.010916][T13835] hsr_slave_1: entered promiscuous mode [ 2723.105324][T13885] syzkaller0: entered promiscuous mode [ 2723.107167][T13885] syzkaller0: entered allmulticast mode [ 2723.112915][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2723.194047][ T6291] hsr_slave_0: left promiscuous mode [ 2723.196010][ T6291] hsr_slave_1: left promiscuous mode [ 2723.198894][T13878] iowarrior 6-1:0.186: Error -90 while submitting URB [ 2723.201283][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2723.202885][T13563] usb 6-1: USB disconnect, device number 100 [ 2723.204500][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2723.212610][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2723.218754][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2723.234767][ T6291] veth1_macvtap: left promiscuous mode [ 2723.237099][ T6291] veth0_macvtap: left promiscuous mode [ 2723.239780][ T6291] veth1_vlan: left promiscuous mode [ 2723.242081][ T6291] veth0_vlan: left promiscuous mode [ 2723.398996][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 2723.885537][T13898] syzkaller0: entered promiscuous mode [ 2723.890848][T13898] syzkaller0: entered allmulticast mode [ 2724.226127][T13906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2724.597993][T13835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2724.605634][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2724.615431][T13835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2724.632334][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2724.638321][T13835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2724.646103][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2724.649415][T13835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2724.655896][T13835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2724.677612][T13924] tipc: Enabled bearer , priority 0 [ 2724.682285][T13924] syzkaller0: entered promiscuous mode [ 2724.684238][T13924] syzkaller0: entered allmulticast mode [ 2724.694914][T13924] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2724.716477][T13924] tipc: Resetting bearer [ 2724.721800][T13923] tipc: Resetting bearer [ 2724.736043][T13923] tipc: Disabling bearer [ 2724.765780][T13835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2724.776663][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 2724.786464][ T8548] bridge0: port 1(bridge_slave_0) entered blocking state [ 2724.789639][ T8548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2724.821260][ T8548] bridge0: port 2(bridge_slave_1) entered blocking state [ 2724.824061][ T8548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2725.017465][ T6431] Bluetooth: hci0: command tx timeout [ 2725.182206][T13952] __nla_validate_parse: 1 callbacks suppressed [ 2725.182221][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9449'. [ 2725.200288][T13945] syzkaller1: entered promiscuous mode [ 2725.205775][T13945] syzkaller1: entered allmulticast mode [ 2725.244453][T13955] tipc: Enabled bearer , priority 0 [ 2725.251900][T13955] syzkaller0: entered promiscuous mode [ 2725.254098][T13955] syzkaller0: entered allmulticast mode [ 2725.266351][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9449'. [ 2725.293544][T13955] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2725.335415][T13955] tipc: Resetting bearer [ 2725.344695][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2725.350986][T13954] tipc: Resetting bearer [ 2725.404716][T13954] tipc: Disabling bearer [ 2725.423938][T13962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2725.449703][T13835] veth0_vlan: entered promiscuous mode [ 2725.456999][T13835] veth1_vlan: entered promiscuous mode [ 2725.484012][T13835] veth0_macvtap: entered promiscuous mode [ 2725.509434][T13835] veth1_macvtap: entered promiscuous mode [ 2725.528068][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2725.537079][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2725.546921][T13965] syzkaller0: entered promiscuous mode [ 2725.549115][T13965] syzkaller0: entered allmulticast mode [ 2725.588231][T13965] tipc: Enabled bearer , priority 0 [ 2725.602554][ T6291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.614604][ T6291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.626063][T13964] tipc: Resetting bearer [ 2725.653044][T13964] tipc: Disabling bearer [ 2725.681138][T14870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2725.684495][T14870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2725.700831][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9454'. [ 2725.711470][ T8548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2725.714223][ T8548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2725.717348][ T7939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.738508][ T7939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2725.912734][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9459'. [ 2725.929320][T13979] syzkaller1: entered promiscuous mode [ 2725.932393][T13979] syzkaller1: entered allmulticast mode [ 2725.992733][T13977] syzkaller0: entered promiscuous mode [ 2725.999327][T13977] syzkaller0: entered allmulticast mode [ 2726.016015][T13983] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2726.025167][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9459'. [ 2727.097348][ T6431] Bluetooth: hci0: command tx timeout [ 2727.117517][ T1033] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2727.186419][T14013] netlink: 'syz.0.9468': attribute type 2 has an invalid length. [ 2727.225966][T14013] : entered promiscuous mode [ 2727.740650][T14020] sctp: [Deprecated]: syz.3.9470 (pid 14020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2727.740650][T14020] Use struct sctp_sack_info instead [ 2727.752436][T14020] loop5: detected capacity change from 0 to 7 [ 2727.772886][T14020] Dev loop5: unable to read RDB block 7 [ 2727.776438][T14020] loop5: unable to read partition table [ 2727.779522][T14020] loop5: partition table beyond EOD, truncated [ 2727.782521][T14020] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2727.854727][T14022] netlink: 'syz.1.9471': attribute type 1 has an invalid length. [ 2727.909387][T14024] tipc: Enabled bearer , priority 0 [ 2727.912362][T14024] syzkaller0: entered promiscuous mode [ 2727.914179][T14024] syzkaller0: entered allmulticast mode [ 2727.918813][T14024] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2727.935577][T14024] tipc: Resetting bearer [ 2727.939468][T14023] tipc: Resetting bearer [ 2727.953306][T14023] tipc: Disabling bearer [ 2728.027361][ T1033] usb 7-1: Using ep0 maxpacket: 16 [ 2728.034918][ T1033] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2728.043943][ T1033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2728.047843][ T1033] usb 7-1: Product: syz [ 2728.050064][ T1033] usb 7-1: Manufacturer: syz [ 2728.052403][ T1033] usb 7-1: SerialNumber: syz [ 2728.057871][ T1033] usb 7-1: config 0 descriptor?? [ 2728.101927][T14034] syzkaller0: entered promiscuous mode [ 2728.103632][T14034] syzkaller0: entered allmulticast mode [ 2728.111155][T14034] tipc: Enabled bearer , priority 0 [ 2728.114123][T14033] tipc: Resetting bearer [ 2728.129373][T14033] tipc: Disabling bearer [ 2728.166893][T14035] syzkaller0: entered promiscuous mode [ 2728.169782][T14035] syzkaller0: entered allmulticast mode [ 2728.463167][T14047] overlayfs: failed to resolve './bus': -2 [ 2728.502381][ T1033] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2728.508872][T14047] netlink: 'syz.1.9481': attribute type 2 has an invalid length. [ 2728.696180][T14004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2728.699723][T14004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2729.177568][ T6431] Bluetooth: hci0: command tx timeout [ 2729.191917][ T1033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2729.195411][ T1033] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2729.207351][ T1033] usb 7-1: media controller created [ 2729.214095][ T1033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2729.241415][ T1033] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2729.244080][ T1033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2729.364552][T14057] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9485'. [ 2729.446602][ T1033] usb 7-1: USB disconnect, device number 102 [ 2729.487949][ T1033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2730.333782][T14072] syzkaller0: entered promiscuous mode [ 2730.335554][T14072] syzkaller0: entered allmulticast mode [ 2730.345944][T14072] tipc: Enabled bearer , priority 0 [ 2730.350191][T14071] tipc: Resetting bearer [ 2730.365441][T14071] tipc: Disabling bearer [ 2730.455668][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2730.462313][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2730.550679][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2730.553699][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2730.781576][ T42] audit: type=1326 audit(1786122565.702:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14080 comm="syz.3.9492" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 2730.986188][T14086] syzkaller0: entered promiscuous mode [ 2730.989921][T14086] syzkaller0: entered allmulticast mode [ 2731.000813][T14086] tipc: Started in network mode [ 2731.002570][T14086] tipc: Node identity 9ae791d302e6, cluster identity 4711 [ 2731.005146][T14086] tipc: Enabled bearer , priority 0 [ 2731.010215][T14085] tipc: Resetting bearer [ 2731.027528][T14085] tipc: Disabling bearer [ 2731.148936][T14088] tipc: Enabled bearer , priority 0 [ 2731.157169][T14088] syzkaller0: entered promiscuous mode [ 2731.163602][T14088] syzkaller0: entered allmulticast mode [ 2731.182680][T14088] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 2731.208310][T14088] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 2731.212802][T14088] tipc: Resetting bearer [ 2731.219904][T14087] tipc: Resetting bearer [ 2731.236220][T14087] tipc: Disabling bearer [ 2731.412780][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9501'. [ 2731.445937][T14099] syzkaller0: entered promiscuous mode [ 2731.449147][T14099] syzkaller0: entered allmulticast mode [ 2731.456034][T14099] tipc: Enabled bearer , priority 0 [ 2731.466006][T14097] tipc: Resetting bearer [ 2731.481027][T14097] tipc: Disabling bearer [ 2731.596277][T14101] netlink: 'syz.1.9499': attribute type 2 has an invalid length. [ 2731.641007][T14106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2731.656065][T14106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2731.723935][T14108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2732.176933][T14119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2732.791087][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9512'. [ 2733.407573][ T9035] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2733.588520][ T9035] usb 7-1: Using ep0 maxpacket: 8 [ 2733.598653][ T9035] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2733.601611][ T9035] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2733.608939][ T9035] usb 7-1: config 0 has no interface number 0 [ 2733.614705][ T9035] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2733.622290][ T9035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.632927][ T9035] usb 7-1: config 0 descriptor?? [ 2733.641086][ T9035] ldusb 7-1:0.55: Interrupt in endpoint not found [ 2734.013459][ T9043] usb 7-1: USB disconnect, device number 103 [ 2734.162302][T14158] sctp: [Deprecated]: syz.1.9522 (pid 14158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2734.162302][T14158] Use struct sctp_sack_info instead [ 2734.190224][T14158] loop5: detected capacity change from 0 to 7 [ 2734.198365][T14158] Dev loop5: unable to read RDB block 7 [ 2734.200673][T14158] loop5: unable to read partition table [ 2734.204235][T14158] loop5: partition table beyond EOD, truncated [ 2734.210421][T14158] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2734.401782][T14164] netlink: 'syz.0.9525': attribute type 1 has an invalid length. [ 2734.415002][T14164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2734.435756][T14164] macvlan2: entered promiscuous mode [ 2734.437641][T14164] macvlan2: entered allmulticast mode [ 2734.439696][T14164] bond1: entered allmulticast mode [ 2734.441371][T14164] bond1: entered promiscuous mode [ 2734.443499][T14164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2734.446575][T14164] team0: Port device macvlan2 added [ 2734.466047][T14164] ip6gretap1: entered promiscuous mode [ 2734.468322][T14164] ip6gretap1: entered allmulticast mode [ 2734.471534][T14164] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2734.477508][ T9035] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2734.602024][T14170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2734.649189][ T9035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2734.652672][ T9035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2734.655732][ T9035] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2734.662728][ T9035] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2734.666456][ T9035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2734.670187][ T9035] usb 6-1: Product: syz [ 2734.672108][ T9035] usb 6-1: Manufacturer: syz [ 2734.679447][ T9035] usb 6-1: SerialNumber: syz [ 2734.685788][ T9035] usb 6-1: config 0 descriptor?? [ 2734.909763][ T9035] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2735.032230][T14184] syzkaller0: entered promiscuous mode [ 2735.034059][T14184] syzkaller0: entered allmulticast mode [ 2735.044827][T14184] tipc: Enabled bearer , priority 0 [ 2735.054883][T14183] tipc: Resetting bearer [ 2735.072324][T14183] tipc: Disabling bearer [ 2735.116986][T11777] usb 6-1: USB disconnect, device number 101 [ 2735.527298][T14199] sctp: [Deprecated]: syz.3.9538 (pid 14199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2735.527298][T14199] Use struct sctp_sack_info instead [ 2735.603047][T14200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2735.693104][T14204] sctp: [Deprecated]: syz.0.9540 (pid 14204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2735.693104][T14204] Use struct sctp_sack_info instead [ 2735.704382][T14204] loop5: detected capacity change from 0 to 7 [ 2735.711122][T14204] Dev loop5: unable to read RDB block 7 [ 2735.713079][T14204] loop5: unable to read partition table [ 2735.715096][T14204] loop5: partition table beyond EOD, truncated [ 2735.717180][T14204] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2735.732491][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2735.737672][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2737.937549][ T1033] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2738.107626][ T1033] usb 7-1: Using ep0 maxpacket: 8 [ 2738.114590][ T1033] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2738.120580][ T1033] usb 7-1: config 0 has no interface number 0 [ 2738.124033][ T1033] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2738.128086][ T1033] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2738.132110][ T1033] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2738.138874][ T1033] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2738.147287][ T1033] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2738.154886][ T1033] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2738.158534][ T1033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.167339][ T1033] usb 7-1: config 0 descriptor?? [ 2738.187929][ T1033] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2738.357837][ T42] audit: type=1326 audit(1786122573.282:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.1.9553" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84fec code=0x0 [ 2738.390952][T14229] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 2738.527991][ T9035] usb 7-1: USB disconnect, device number 104 [ 2738.535204][ T9035] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 2738.724757][T14244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2738.731786][T14244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2738.817035][T14244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2738.825850][T14244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2739.203365][T14262] sctp: [Deprecated]: syz.2.9562 (pid 14262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2739.203365][T14262] Use struct sctp_sack_info instead [ 2739.457937][T11777] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 2739.589785][T14275] netlink: 'syz.3.9566': attribute type 2 has an invalid length. [ 2739.608649][T11777] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2739.612009][T11777] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2739.615224][T11777] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2739.620580][T11777] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2739.623357][T11777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.625830][T11777] usb 7-1: Product: syz [ 2739.627146][T11777] usb 7-1: Manufacturer: syz [ 2739.629810][T11777] usb 7-1: SerialNumber: syz [ 2739.633097][T11777] usb 7-1: config 0 descriptor?? [ 2739.852754][T11777] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 2739.861434][T11777] usb 7-1: USB disconnect, device number 105 [ 2739.881737][T14285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2739.891706][T14285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.363863][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9572'. [ 2740.452989][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9575'. [ 2740.460411][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2740.467621][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.553867][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2740.559245][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.595994][T14304] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9578'. [ 2740.743820][T14308] netlink: 'syz.3.9579': attribute type 2 has an invalid length. [ 2741.550961][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9585'. [ 2741.855414][T14334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2741.860146][T14334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2742.226643][T14344] netlink: 'syz.3.9593': attribute type 2 has an invalid length. [ 2742.247402][ T1033] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2742.399326][ T1033] usb 6-1: Using ep0 maxpacket: 8 [ 2742.403624][ T1033] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2742.407060][ T1033] usb 6-1: config 0 has no interface number 0 [ 2742.409510][ T1033] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2742.413048][ T1033] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2742.416862][ T1033] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2742.421727][ T1033] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2742.425813][ T1033] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2742.436760][ T1033] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2742.446573][ T1033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2742.459879][ T1033] usb 6-1: config 0 descriptor?? [ 2742.471994][ T1033] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2742.591985][T14352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2742.671650][T14336] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 2742.680012][ T1033] usb 6-1: USB disconnect, device number 102 [ 2742.700463][ T1033] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2743.319819][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9604'. [ 2743.328827][T14370] syzkaller0: entered promiscuous mode [ 2743.330932][T14370] syzkaller0: entered allmulticast mode [ 2743.522245][T14381] syzkaller0: entered promiscuous mode [ 2743.534278][T14381] syzkaller0: entered allmulticast mode [ 2743.608125][T14383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2743.744839][T14393] sctp: [Deprecated]: syz.3.9611 (pid 14393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2743.744839][T14393] Use struct sctp_sack_info instead [ 2743.775462][T14393] loop5: detected capacity change from 0 to 7 [ 2743.780707][T14392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2743.802361][T14393] Dev loop5: unable to read RDB block 7 [ 2743.811884][T14393] loop5: unable to read partition table [ 2743.817435][T14393] loop5: partition table beyond EOD, truncated [ 2743.824086][T14393] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2744.242834][T14411] netlink: 'syz.2.9619': attribute type 1 has an invalid length. [ 2744.261295][T14411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2744.304380][T14411] bond1: (slave ip6gretap1): making interface the new active one [ 2744.307535][T14411] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2744.449140][T14418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2744.512503][T14421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2744.519040][T14421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2745.369926][T14431] netlink: 'syz.1.9626': attribute type 1 has an invalid length. [ 2745.388741][T14431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2745.406432][T14431] netlink: 'syz.1.9626': attribute type 1 has an invalid length. [ 2745.806219][T14444] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9631'. [ 2745.878826][T14448] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9633'. [ 2746.372070][T14453] syzkaller0: entered promiscuous mode [ 2746.374491][T14453] syzkaller0: entered allmulticast mode [ 2746.534441][T14456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.543768][T14456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2746.554115][T14456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2746.559294][T14456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2746.624288][T14458] syzkaller0: entered promiscuous mode [ 2746.626582][T14458] syzkaller0: entered allmulticast mode [ 2746.772415][T14463] netlink: 'syz.3.9639': attribute type 1 has an invalid length. [ 2746.813075][T14463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2746.819777][T14466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2746.884752][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2746.891373][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2747.058097][T14478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2747.274730][T14485] sctp: [Deprecated]: syz.0.9646 (pid 14485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2747.274730][T14485] Use struct sctp_sack_info instead [ 2747.284063][T14485] loop5: detected capacity change from 0 to 7 [ 2747.289235][T14485] Dev loop5: unable to read RDB block 7 [ 2747.291685][T14485] loop5: unable to read partition table [ 2747.294240][T14485] loop5: partition table beyond EOD, truncated [ 2747.297611][T14485] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2747.304958][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2747.308944][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2748.182822][T14489] syzkaller0: entered promiscuous mode [ 2748.184820][T14489] syzkaller0: entered allmulticast mode [ 2749.248648][T14495] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9650'. [ 2749.342894][T14501] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9653'. [ 2749.423759][T14503] syz.2.9654 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2749.596303][T14508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2750.145898][T14513] syzkaller0: entered promiscuous mode [ 2750.151023][T14513] syzkaller0: entered allmulticast mode [ 2750.163713][T14513] tipc: Enabling of bearer rejected, failed to enable media [ 2750.407091][T14519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2750.657175][T14528] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9662'. [ 2750.948605][ T10] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2751.099124][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2751.103250][ T10] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2751.106133][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2751.110597][ T10] usb 7-1: config 0 descriptor?? [ 2751.115483][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2751.226722][T14542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2751.497390][ T1033] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2751.647349][ T1033] usb 6-1: Using ep0 maxpacket: 16 [ 2751.653870][ T1033] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2751.659151][ T1033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.662614][ T1033] usb 6-1: Product: syz [ 2751.664561][ T1033] usb 6-1: Manufacturer: syz [ 2751.666615][ T1033] usb 6-1: SerialNumber: syz [ 2751.672689][ T1033] usb 6-1: config 0 descriptor?? [ 2752.088721][ T1033] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2752.096161][ T1033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2752.100460][ T1033] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2752.103378][ T1033] usb 6-1: media controller created [ 2752.113117][ T1033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2752.292577][T14545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2752.296959][T14545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2752.314993][ T1033] zl10353_read_register: readreg error (reg=127, ret==0) [ 2752.317436][ T1033] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2752.322947][ T1033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2752.328647][ T1033] usb 6-1: USB disconnect, device number 103 [ 2752.360618][ T1033] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2752.441120][ T42] audit: type=1326 audit(1786122587.362:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.0.9674" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x0 [ 2752.865653][T14565] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9675'. [ 2753.007154][T14573] syzkaller0: entered promiscuous mode [ 2753.010321][T14573] syzkaller0: entered allmulticast mode [ 2753.139629][T14579] syzkaller0: entered promiscuous mode [ 2753.141388][T14579] syzkaller0: entered allmulticast mode [ 2753.306322][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.310277][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2753.728949][ T1033] usb 7-1: USB disconnect, device number 106 [ 2753.956239][T14595] netlink: 'syz.0.9688': attribute type 1 has an invalid length. [ 2753.973432][T14595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2753.995324][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9688'. [ 2754.023618][T14600] [ 2754.024477][T14600] ====================================================== [ 2754.025844][T14602] netlink: 'syz.0.9691': attribute type 1 has an invalid length. [ 2754.027322][T14600] WARNING: possible circular locking dependency detected [ 2754.027338][T14600] syzkaller #0 Not tainted [ 2754.027350][T14600] ------------------------------------------------------ [ 2754.027360][T14600] syz.1.9690/14600 is trying to acquire lock: [ 2754.027372][T14600] ffff88801e422280 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 2754.036619][T14602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2754.037969][T14600] [ 2754.037969][T14600] but task is already holding lock: [ 2754.037980][T14600] ffff88801e8be118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 2754.038099][T14600] [ 2754.038099][T14600] which lock already depends on the new lock. [ 2754.038099][T14600] [ 2754.038106][T14600] [ 2754.038106][T14600] the existing dependency chain (in reverse order) is: [ 2754.038115][T14600] [ 2754.038115][T14600] -> #3 (&opts->dep_lock){+.+.}-{4:4}: [ 2754.038148][T14600] lock_acquire+0x1b9/0x370 [ 2754.058757][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9691'. [ 2754.061372][T14600] __mutex_lock+0x1a4/0x1bd0 [ 2754.071445][T14600] usbg_make_tpg+0x1a4/0x620 [ 2754.073563][T14600] target_fabric_make_tpg+0xab/0x8c0 [ 2754.075948][T14600] configfs_mkdir+0x51e/0xb70 [ 2754.078092][T14600] vfs_mkdir+0x361/0x850 [ 2754.080094][T14600] filename_mkdirat+0x48b/0x5e0 [ 2754.082304][T14600] __ia32_sys_mkdir+0x6a/0x90 [ 2754.084450][T14600] __do_fast_syscall_32+0xe7/0x970 [ 2754.086790][T14600] do_fast_syscall_32+0x32/0x70 [ 2754.088988][T14600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2754.091718][T14600] [ 2754.091718][T14600] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 2754.094731][T14600] lock_acquire+0x1b9/0x370 [ 2754.096622][T14600] __mutex_lock+0x1a4/0x1bd0 [ 2754.098670][T14600] usbg_make_tpg+0x10b/0x620 [ 2754.100794][T14600] target_fabric_make_tpg+0xab/0x8c0 [ 2754.103087][T14600] configfs_mkdir+0x51e/0xb70 [ 2754.105078][T14600] vfs_mkdir+0x361/0x850 [ 2754.106916][T14600] filename_mkdirat+0x48b/0x5e0 [ 2754.108621][T14600] __ia32_sys_mkdir+0x6a/0x90 [ 2754.110296][T14600] __do_fast_syscall_32+0xe7/0x970 [ 2754.112179][T14600] do_fast_syscall_32+0x32/0x70 [ 2754.113988][T14600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2754.116225][T14600] [ 2754.116225][T14600] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 2754.118671][T14600] lock_acquire+0x1b9/0x370 [ 2754.120330][T14600] __mutex_lock+0x1a4/0x1bd0 [ 2754.121989][T14600] configfs_rmdir+0x5ae/0x950 [ 2754.123556][T14600] vfs_rmdir+0x328/0x8a0 [ 2754.125081][T14600] filename_rmdir+0x31a/0x5c0 [ 2754.126853][T14600] __ia32_sys_rmdir+0x45/0x60 [ 2754.129096][T14600] __do_fast_syscall_32+0xe7/0x970 [ 2754.130963][T14600] do_fast_syscall_32+0x32/0x70 [ 2754.132673][T14600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2754.134822][T14600] [ 2754.134822][T14600] -> #0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}: [ 2754.137743][T14600] check_prev_add+0xeb/0xe60 [ 2754.139386][T14600] __lock_acquire+0x136c/0x1a40 [ 2754.141122][T14600] lock_acquire+0x1b9/0x370 [ 2754.142704][T14600] down_write+0x8b/0x1f0 [ 2754.144199][T14600] configfs_depend_item_unlocked+0xf3/0x6a0 [ 2754.146244][T14600] usbg_make_tpg+0x261/0x620 [ 2754.147922][T14600] target_fabric_make_tpg+0xab/0x8c0 [ 2754.149871][T14600] configfs_mkdir+0x51e/0xb70 [ 2754.151581][T14600] vfs_mkdir+0x361/0x850 [ 2754.153156][T14600] filename_mkdirat+0x48b/0x5e0 [ 2754.154885][T14600] __ia32_sys_mkdir+0x6a/0x90 [ 2754.156840][T14600] __do_fast_syscall_32+0xe7/0x970 [ 2754.158693][T14600] do_fast_syscall_32+0x32/0x70 [ 2754.160587][T14600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2754.162818][T14600] [ 2754.162818][T14600] other info that might help us debug this: [ 2754.162818][T14600] [ 2754.166070][T14600] Chain exists of: [ 2754.166070][T14600] &sb->s_type->i_mutex_key#28 --> tpg_instances_lock --> &opts->dep_lock [ 2754.166070][T14600] [ 2754.171472][T14600] Possible unsafe locking scenario: [ 2754.171472][T14600] [ 2754.173924][T14600] CPU0 CPU1 [ 2754.175686][T14600] ---- ---- [ 2754.177470][T14600] lock(&opts->dep_lock); [ 2754.178914][T14600] lock(tpg_instances_lock); [ 2754.181267][T14600] lock(&opts->dep_lock); [ 2754.183505][T14600] lock(&sb->s_type->i_mutex_key#28); [ 2754.185259][T14600] [ 2754.185259][T14600] *** DEADLOCK *** [ 2754.185259][T14600] [ 2754.187974][T14600] 5 locks held by syz.1.9690/14600: [ 2754.189683][T14600] #0: ffff888021d2a450 (sb_writers#16){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 2754.192782][T14600] #1: ffff888012d9ba40 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 2754.196305][T14600] #2: ffffffff8fd83428 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 2754.199430][T14600] #3: ffffffff9024e740 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 2754.202548][T14600] #4: ffff88801e8be118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 2754.205570][T14600] [ 2754.205570][T14600] stack backtrace: [ 2754.207737][T14600] CPU: 2 UID: 0 PID: 14600 Comm: syz.1.9690 Not tainted syzkaller #0 PREEMPT(full) [ 2754.207755][T14600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2754.207763][T14600] Call Trace: [ 2754.207769][T14600] [ 2754.207775][T14600] dump_stack_lvl+0x100/0x190 [ 2754.207820][T14600] print_circular_bug.cold+0x178/0x1c7 [ 2754.207840][T14600] check_noncircular+0x146/0x160 [ 2754.207860][T14600] check_prev_add+0xeb/0xe60 [ 2754.207878][T14600] __lock_acquire+0x136c/0x1a40 [ 2754.207897][T14600] ? rcu_is_watching+0x12/0xc0 [ 2754.207921][T14600] lock_acquire+0x1b9/0x370 [ 2754.207945][T14600] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 2754.207970][T14600] ? __pfx___might_resched+0x10/0x10 [ 2754.208001][T14600] down_write+0x8b/0x1f0 [ 2754.208028][T14600] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 2754.208044][T14600] ? __pfx_down_write+0x10/0x10 [ 2754.208062][T14600] configfs_depend_item_unlocked+0xf3/0x6a0 [ 2754.208076][T14600] ? __lock_acquire+0x49f/0x1a40 [ 2754.208094][T14600] usbg_make_tpg+0x261/0x620 [ 2754.208109][T14600] ? __pfx_usbg_make_tpg+0x10/0x10 [ 2754.208124][T14600] ? find_held_lock+0x2b/0x80 [ 2754.208141][T14600] ? __pfx_usbg_make_tpg+0x10/0x10 [ 2754.208159][T14600] target_fabric_make_tpg+0xab/0x8c0 [ 2754.208185][T14600] configfs_mkdir+0x51e/0xb70 [ 2754.208205][T14600] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 2754.208228][T14600] ? __pfx_configfs_mkdir+0x10/0x10 [ 2754.208252][T14600] vfs_mkdir+0x361/0x850 [ 2754.208276][T14600] filename_mkdirat+0x48b/0x5e0 [ 2754.208289][T14600] ? __pfx_filename_mkdirat+0x10/0x10 [ 2754.208301][T14600] ? strncpy_from_user+0x19d/0x2d0 [ 2754.208353][T14600] ? do_getname+0x191/0x390 [ 2754.208367][T14600] __ia32_sys_mkdir+0x6a/0x90 [ 2754.208380][T14600] __do_fast_syscall_32+0xe7/0x970 [ 2754.208397][T14600] do_fast_syscall_32+0x32/0x70 [ 2754.208416][T14600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2754.208431][T14600] RIP: 0023:0xf7f84fec [ 2754.208448][T14600] Code: Unable to access opcode bytes at 0xf7f84fc2. [ 2754.208462][T14600] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 2754.208475][T14600] RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 00000000000001ff [ 2754.208482][T14600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2754.208489][T14600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2754.208496][T14600] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2754.208503][T14600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2754.208514][T14600] [ 2754.292448][ T1033] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 2754.308143][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2754.311034][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2754.700360][ T1033] usb 7-1: device descriptor read/all, error -71 [ 2754.910508][ T6291] bridge_slave_1: left allmulticast mode [ 2754.912701][ T6291] bridge_slave_1: left promiscuous mode [ 2754.914638][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2754.917710][ T6291] bridge_slave_0: left allmulticast mode [ 2754.919580][ T6291] bridge_slave_0: left promiscuous mode [ 2754.921412][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2754.982481][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2754.985973][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2754.989493][ T6291] bond0 (unregistering): Released all slaves [ 2754.992971][ T6291] bond1 (unregistering): Released all slaves [ 2754.999263][ T6291] team0: Port device macvlan2 removed [ 2755.002812][ T6291] bond2 (unregistering): Released all slaves [ 2755.006759][ T6291] bond3 (unregistering): Released all slaves [ 2755.011262][ T6291] bond4 (unregistering): Released all slaves [ 2755.015527][ T6291] team0: Port device macvlan3 removed [ 2755.018815][ T6291] bond5 (unregistering): Released all slaves [ 2755.023467][ T6291] team0: Port device macvlan4 removed [ 2755.026300][ T6291] bond6 (unregistering): Released all slaves [ 2755.037118][ T6291] team0: Port device macvlan5 removed [ 2755.041852][ T6291] bond7 (unregistering): Released all slaves [ 2755.048405][ T6291] bond8 (unregistering): Released all slaves [ 2755.116974][ T6291] : left promiscuous mode [ 2755.149882][ T6291] tipc: Left network mode [ 2755.188958][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2755.279984][ T6291] hsr_slave_0: left promiscuous mode [ 2755.283043][ T6291] hsr_slave_1: left promiscuous mode [ 2755.285061][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2755.287893][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2755.341359][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 2755.387020][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2755.543704][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2755.657682][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2755.678952][ T6291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.752454][ T6291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.779988][ T6291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.830833][ T6291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.918476][ T6291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.950103][ T6291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2755.992240][ T6291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.007384][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2756.050952][ T6291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.104712][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2756.129000][ T6291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.185395][ T6291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.220597][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2756.231122][ T6291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.261050][ T6291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.328623][ T6291] bridge_slave_1: left allmulticast mode [ 2756.330527][ T6291] bridge_slave_1: left promiscuous mode [ 2756.332429][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2756.335497][ T6291] bridge_slave_0: left allmulticast mode [ 2756.337708][ T6291] bridge_slave_0: left promiscuous mode [ 2756.339680][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.344642][ T6291] bridge_slave_1: left allmulticast mode [ 2756.346595][ T6291] bridge_slave_1: left promiscuous mode [ 2756.348615][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2756.351583][ T6291] bridge_slave_0: left allmulticast mode [ 2756.353412][ T6291] bridge_slave_0: left promiscuous mode [ 2756.355256][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.364549][ T6291] bridge_slave_1: left allmulticast mode [ 2756.366840][ T6291] bridge_slave_1: left promiscuous mode [ 2756.375822][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2756.381628][ T6291] bridge_slave_0: left allmulticast mode [ 2756.383973][ T6291] bridge_slave_0: left promiscuous mode [ 2756.386368][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.430075][ T6291] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 2756.447134][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2756.451015][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2756.454363][ T6291] bond0 (unregistering): Released all slaves [ 2756.471144][ T6291] bond1 (unregistering): Released all slaves [ 2756.481961][ T6291] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 2756.500237][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2756.504026][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2756.507414][ T6291] bond0 (unregistering): Released all slaves [ 2756.512152][ T6291] bond1 (unregistering): Released all slaves [ 2756.516457][ T6291] bond2 (unregistering): Released all slaves [ 2756.521667][ T6291] bond3 (unregistering): Released all slaves [ 2756.525654][ T6291] bond4 (unregistering): Released all slaves [ 2756.530581][ T6291] bond5 (unregistering): Released all slaves [ 2756.534590][ T6291] bond6 (unregistering): Released all slaves [ 2756.540244][ T6291] bond7 (unregistering): Released all slaves [ 2756.547634][ T6291] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2756.551176][ T6291] ip6gretap1 (unregistering): left allmulticast mode [ 2756.566774][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2756.594026][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2756.597733][ T6291] bond0 (unregistering): Released all slaves [ 2756.601036][ T6291] bond1 (unregistering): left allmulticast mode [ 2756.603079][ T6291] bond1 (unregistering): left promiscuous mode [ 2756.606273][ T6291] team0: Port device macvlan2 removed [ 2756.610111][ T6291] bond1 (unregistering): Released all slaves [ 2756.614394][ T6291] bond2 (unregistering): Released all slaves [ 2756.618732][ T6291] bond3 (unregistering): Released all slaves [ 2756.623615][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2756.723017][ T6291] : left promiscuous mode [ 2756.754711][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2756.782702][ T6291] : left promiscuous mode [ 2756.828660][ T6291] tipc: Left network mode [ 2756.830898][ T6291] tipc: Left network mode [ 2756.832952][ T6291] tipc: Left network mode [ 2756.856866][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2757.003124][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2757.084399][ T6291] hsr_slave_0: left promiscuous mode [ 2757.087140][ T6291] hsr_slave_1: left promiscuous mode [ 2757.089958][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2757.093019][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2757.096288][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2757.099722][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2757.105291][ T6291] hsr_slave_0: left promiscuous mode [ 2757.109315][ T6291] hsr_slave_1: left promiscuous mode [ 2757.111885][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2757.114868][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2757.119993][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2757.122991][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2757.128864][ T6291] hsr_slave_0: left promiscuous mode [ 2757.131483][ T6291] hsr_slave_1: left promiscuous mode [ 2757.133796][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2757.136252][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2757.139186][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2757.141642][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2757.148550][ T6291] veth1_macvtap: left promiscuous mode [ 2757.150534][ T6291] veth0_macvtap: left promiscuous mode [ 2757.152362][ T6291] veth1_vlan: left promiscuous mode [ 2757.154103][ T6291] veth0_vlan: left promiscuous mode [ 2757.156409][ T6291] veth1_macvtap: left promiscuous mode [ 2757.158346][ T6291] veth0_macvtap: left promiscuous mode [ 2757.160605][ T6291] veth1_vlan: left promiscuous mode [ 2757.162825][ T6291] veth0_vlan: left promiscuous mode [ 2757.165745][ T6291] veth1_macvtap: left promiscuous mode [ 2757.168523][ T6291] veth0_macvtap: left promiscuous mode [ 2757.170725][ T6291] veth1_vlan: left promiscuous mode [ 2757.172411][ T6291] veth0_vlan: left promiscuous mode [ 2757.291942][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 2757.296546][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 2757.353453][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 2757.442564][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 2757.447424][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 2757.472601][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2757.600178][ T5443] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2757.742974][ T5443] 8021q: adding VLAN 0 to HW filter on device eth16 [ 2757.890710][ T5443] 8021q: adding VLAN 0 to HW filter on device eth15 [ 2758.049772][ T5443] 8021q: adding VLAN 0 to HW filter on device eth17