last executing test programs: 18m8.235979745s ago: executing program 3 (id=1695): io_setup(0x9, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x2, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) 18m6.014192195s ago: executing program 3 (id=1703): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 18m3.647275446s ago: executing program 3 (id=1706): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 18m3.573722991s ago: executing program 3 (id=1707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0xffffffffffffffff, &(0x7f0000000040)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x405c000}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) 18m1.127880554s ago: executing program 3 (id=1712): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x81, 0x3, 0x2, 0x6}, {0xfff9, 0x3, 0x1, 0x6}, {0x8, 0x3, 0x7f, 0x3ff}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r3 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40)=r3, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 17m59.535734175s ago: executing program 3 (id=1716): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 17m44.27358313s ago: executing program 32 (id=1716): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 8.369793259s ago: executing program 1 (id=4497): socket$unix(0x1, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80, 0x800) dup3(r1, r0, 0x80000) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x2000000) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, 0x0, 0x0) shutdown(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x90) 6.61215693s ago: executing program 5 (id=4503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x991, 0x8, 0x100000e, 0x2, 0x0, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.238531988s ago: executing program 5 (id=4507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000a40)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000580)="28a28ea98de88feb9d83c09f", 0xc}], 0x1}}], 0x1, 0x240040c4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x14) 6.126060504s ago: executing program 0 (id=4508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x10001}, &(0x7f0000000200)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000089a000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000380001800c000100636f756e7465720004000280080003400000010714"], 0xc8}}, 0x20050800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 5.993027061s ago: executing program 0 (id=4509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.992128168s ago: executing program 5 (id=4510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a300000000014000380080002400000040008000140000000001400000011"], 0x68}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="107b5c9b209d083fd0dee19bf2ae62f8", 0x10}, {&(0x7f0000000500)}], 0x4, 0x0, 0x0, 0x200400c4}}], 0x1, 0xc000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 5.901625351s ago: executing program 0 (id=4511): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400300012800b000100627269646765000020"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r6 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r7, &(0x7f0000000040), &(0x7f000009de80), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000000c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) socket$inet_sctp(0x2, 0x5, 0x84) 5.129310542s ago: executing program 1 (id=4512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.396084403s ago: executing program 0 (id=4515): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 4.339114223s ago: executing program 2 (id=4516): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x3, 0x38a}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40857ba, 0x0, 0xe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0xffffffffffffffff, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.220276655s ago: executing program 5 (id=4517): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/71, 0x47}], 0x1) 4.090873764s ago: executing program 1 (id=4518): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c", 0x65}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9", 0x39}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d", 0x5c}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a5", 0x33}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793ab", 0x42}, {&(0x7f0000000e80)="d317b0ddf805c029d66c50f61f6efc90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674ef0ab9b7666d0e321027fd89ef9f1f1d3f4910a68c9450f7612afb03aadb19afac0e02671e17453928eb33ee4750fc8e27637d06cd105f4bdcebd14d17825477f718939859a9cd7a685b155b9b2bebe0606a0364664ebe5cb3", 0xe4}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="9cc844fcb12a57ded285a6853f9a4574ebe46541728c1e7a9359c0240b58852b8f40b2cbd6024df9a266e7b6941b40fbd4c0258c7dcd11eac963c7fae1ab7653154e9541517041dda8f02c4146cd8d90e0b1aa9067be18", 0x57}, {&(0x7f0000000680)="5a1936d5385e89cde108d4462f0a54efe1cb5bf66b9f5d840b99be101b9b0897fe0705dae412e694472799084bec2177cc06a8f988d478bba12e760d5fa00d1c579a3ed6dba5d552d0f3e737e2597d17f2b40d5df9588ecff2824d", 0x5b}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.015799229s ago: executing program 1 (id=4519): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x6, "d9deea2a"}]}}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'sed\x00', 0x1, 0x400000, 0x4}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000160004000300fdffffffffffffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a527", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 3.767051159s ago: executing program 2 (id=4521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x1, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x0, 0x20, 0x1, {0x2}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0xf4) 3.622746381s ago: executing program 4 (id=4522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x1000000000041, 0x2000000, 0x0, 0x2004cf, 0x0, 0xa1d, 0x8, 0x5, 0x1, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x2000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0xfd}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xd000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0xe, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1, 0x4}, {0x0, 0xeeee0000, 0x9, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.236460892s ago: executing program 5 (id=4523): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32, @ANYRESDEC=r1], 0x0, 0x7, 0xffffffffffffffd2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2101) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001900010000000000fcfffffffc000000000000000000000000000000366aa12cc48b59200100000000000000000000ffff00024eff0100000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300000000000000020000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff000000000000000000000000000000000000000000000002ff0100000000000000080000ba6b6e000000000100000000"], 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000009000000000000000000000000000000000000000000000002000000000004000000ffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6f0) 3.157096498s ago: executing program 0 (id=4524): syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36d"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0xd000, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x10, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.871694877s ago: executing program 4 (id=4525): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) preadv(r2, &(0x7f0000000600)=[{&(0x7f00000036c0)=""/4092, 0xffc}], 0x1, 0x2de, 0xfffffffc) 2.694207193s ago: executing program 2 (id=4526): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}, {&(0x7f00000002c0)="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", 0x161}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff6", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="8f3c958ea6d3703a5c56e93913a020f9026f66b8f2c4079b09368d0aef659314fe95db33da10078d83a4c952fd5a4d48f0efb8a76b6ed740b6ecaba04a666502301fc31030a271f50dd4ec8122145bdee9568c78f09553a6cd170827e6f5fe1460266b9f053aee8e2aa9fb715c6eee29b8e3a86948b952d6135b558c2847e8408c4b30eca1a3d88ebe81", 0x8a}, {&(0x7f0000000440)="641e54552fc8ac277e5a1af598ce926ffb268b38ae1e5e60b060c11881534ecc5923b2b18fa7a89a36a8bbbcdde6ce7d248e6c1b4745c45e03fe23cf96a2056c3381bd28b9", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="bfa7307854b5ced8e3fe6181f0b2927a19d82138ebdfce891a6b1f827f737cd9c9d9e485868c81ef8411fecb7091268b200f2bbe9c38590fed1fa09e8e4bc82c3d22ef851d92fdbe7cf1925913265871dd7494fc6bcb405341fe7c235a3423961f545e00c5599d", 0x67}, {&(0x7f0000000780)="4519f0c6108c97e24689ff3b060d35a60b69205421e3a3db6047fb9127bddbb0e4864da0a8952a8c58e98bc326e938e1f9166f236ee16cc9011930dc27b738a009d2450b1715a6f194ff571926afa80dbe98fd655f3f0fc1fe5aabe9f4f859ede02ae210cb0cf4cd51f86c181ca9618a52d70547edb55e056b42fbf74bddee61ffee0468344b142f6f71f23351272b2bc4b59e4ea02eb73830bdf6aa34d444519fc455939cbd4bd0786195411908d0a0045a7f7114e20b2586564035", 0xbc}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000a00)="575147b922093ee13e64a63b26ed38a49d6e5fa45795c49aff94b6ce911be44e214ce364db084d8ba2f88d6d1e0c8a3b1c106eea9b0c98895e83de589853815994475d65d2c8135464c7181104b3b55412f20c8ac1f276565b82761cba133bc0c8d378", 0x63, 0x10008095, 0x0, 0x0) 2.232503049s ago: executing program 1 (id=4527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32, @ANYRESDEC=r1], 0x0, 0x7, 0xffffffffffffffd2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2101) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001900010000000000fcfffffffc000000000000000000000000000000366aa12cc48b59200100000000000000000000ffff00024eff0100000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300000000000000020000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff000000000000000000000000000000000000000000000002ff0100000000000000080000ba6b6e000000000100000000"], 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000009000000000000000000000000000000000000000000000002000000000004000000ffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa000, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6f0) 2.184440079s ago: executing program 4 (id=4528): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40025e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.822369067s ago: executing program 5 (id=4529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000580)=[{0x1000, 0x200, 0x0, 0x0}, {0x5, 0x1201, 0x0, 0x0}], 0x2}) 1.763753325s ago: executing program 2 (id=4530): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = syz_io_uring_setup(0x643c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1a4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.697351447s ago: executing program 4 (id=4531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) 1.619134375s ago: executing program 2 (id=4532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x340, 0x240, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'bond0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.511284804s ago: executing program 4 (id=4533): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x0, 0x141}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2000000008, 0xfffffffffffffffd, 0x126f, 0x0, 0x1000001000, 0x6}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x5, 0xf, 0x80000002}, 0x0, 0x0) 1.099861143s ago: executing program 2 (id=4534): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.047804086s ago: executing program 1 (id=4535): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2008df0000006eec27df1715fa8b746703659eef0341b3c87e282f57605f586deae51e4bec6888b40b5fd724648cbed20686c1221c8ca0e5426bbd6a0ac6"], 0x0, 0x0}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x3, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x6f, 0x2, 0x0, 0x10, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550002f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000001c0)) 610.998268ms ago: executing program 4 (id=4536): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 0 (id=4537): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400300012800b000100627269646765000020"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r6 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r7, &(0x7f0000000040), 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) socket$inet_sctp(0x2, 0x5, 0x84) kernel console output (not intermixed with test programs): ] usb 3-1: Manufacturer: syz [ 1751.219407][ T5923] usb 3-1: SerialNumber: syz [ 1751.230539][T23554] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1751.238914][T23554] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1751.239562][ T5923] usb 3-1: config 0 descriptor?? [ 1751.251921][T23554] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1751.279307][T23554] usb 2-1: USB disconnect, device number 118 [ 1751.299009][ T5923] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 1751.309320][T23554] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1751.323471][T23554] ftdi_sio 2-1:0.0: device disconnected [ 1751.401511][T24598] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1751.419482][T24598] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1751.498919][ T5923] pwc: Failed to set LED on/off time (-71) [ 1751.515176][ T5923] pwc: send_video_command error -71 [ 1751.525283][ T5923] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1751.534042][ T5923] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1751.668293][ T5923] usb 3-1: USB disconnect, device number 125 [ 1751.721575][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1752.087211][ T5923] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1752.351237][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1752.388575][ T5923] usb 5-1: config 0 has no interfaces? [ 1752.401004][ T5923] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1752.428338][ T5923] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1752.464281][ T5923] usb 5-1: Manufacturer: syz [ 1752.492844][ T5923] usb 5-1: config 0 descriptor?? [ 1753.609885][T24623] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1753.764767][T23554] usb 6-1: USB disconnect, device number 79 [ 1754.466530][T23554] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1754.758069][T23554] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1754.771105][T23554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1754.823302][T23554] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1754.850542][T23554] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1754.860848][T23554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.870983][T23554] usb 2-1: Product: syz [ 1754.875213][T23554] usb 2-1: Manufacturer: syz [ 1754.930164][T23554] usb 2-1: SerialNumber: syz [ 1754.939676][T23554] usb 2-1: config 0 descriptor?? [ 1754.950531][T24632] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1755.177583][T24631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1755.222351][ T5923] usb 5-1: USB disconnect, device number 110 [ 1755.459301][T24645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3667'. [ 1755.864259][T24645] IPVS: length: 149 != 17667290688 [ 1756.010328][T24652] netlink: 'syz.2.3669': attribute type 7 has an invalid length. [ 1756.973779][ T5923] usb 2-1: USB disconnect, device number 119 [ 1756.980606][T23514] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1757.157336][T23514] usb 6-1: Using ep0 maxpacket: 32 [ 1757.169039][T23514] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1757.181467][T23514] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.212667][T23514] usb 6-1: config 0 has no interface number 0 [ 1757.222810][T23514] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1757.247437][T23514] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1757.267140][T23514] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1757.284858][T23514] usb 6-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1757.318343][T23514] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1757.335783][T23514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.344153][ T5923] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1757.359047][T23514] usb 6-1: Product: syz [ 1757.369160][T23514] usb 6-1: Manufacturer: syz [ 1757.437474][T23514] usb 6-1: SerialNumber: syz [ 1757.493883][T23514] usb 6-1: config 0 descriptor?? [ 1757.508354][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1757.521375][ T5923] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1757.532886][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.543932][ T5923] usb 2-1: Product: syz [ 1757.550481][ T5923] usb 2-1: Manufacturer: syz [ 1757.555403][T24654] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1757.567637][ T5923] usb 2-1: SerialNumber: syz [ 1757.580844][ T5923] usb 2-1: config 0 descriptor?? [ 1757.590436][ T5923] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 1757.778073][T23514] usb 6-1: probing VID:PID(0424:012C) [ 1757.795552][T23514] usb 6-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1757.805175][T23514] usb 6-1: vub300 testing BULK OUT EndPoint(1) 0F [ 1757.812861][ T5923] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1757.821721][T23514] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 1757.823058][T23554] usb 2-1: USB disconnect, device number 120 [ 1757.832311][T23514] vub300 6-1:0.133: probe with driver vub300 failed with error -22 [ 1757.856297][T23514] usb 6-1: USB disconnect, device number 80 [ 1757.977021][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 1757.984208][ T5923] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1757.993021][ T5923] usb 3-1: config 0 has no interface number 0 [ 1758.003317][ T5923] usb 3-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 1758.020765][ T5923] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 1758.040032][ T5923] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1758.062746][ T5923] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 1758.077610][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.085630][ T5923] usb 3-1: Product: syz [ 1758.107143][ T5923] usb 3-1: Manufacturer: syz [ 1758.111773][ T5923] usb 3-1: SerialNumber: syz [ 1758.127683][ T5923] usb 3-1: config 0 descriptor?? [ 1758.343379][T23554] usb 3-1: USB disconnect, device number 126 [ 1758.411527][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1758.471428][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1758.471448][ T30] audit: type=1400 audit(1771429761.785:2525): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="s" pid=24669 comm="syz.4.3677" [ 1758.776890][T23554] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1758.949809][T23554] usb 2-1: Using ep0 maxpacket: 32 [ 1758.969284][ T5905] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1758.982829][T23554] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 1759.015332][T23554] usb 2-1: config 4 has no interface number 0 [ 1759.030447][T23554] usb 2-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 1759.313755][T23554] usb 2-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 21 [ 1759.328938][T23554] usb 2-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1759.342886][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 1759.349443][T23554] usb 2-1: config 4 interface 228 has no altsetting 0 [ 1759.360306][ T5905] usb 6-1: config 0 has no interfaces? [ 1759.370556][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1759.437136][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1759.477431][ T5905] usb 6-1: Manufacturer: syz [ 1759.489925][T23554] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1759.507340][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3680'. [ 1759.529327][T23554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.539273][ T5905] usb 6-1: config 0 descriptor?? [ 1759.563628][ T30] audit: type=1800 audit(1771429762.925:2526): pid=24685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3680" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 1759.566836][T23554] usb 2-1: Product: syz [ 1759.658604][T23554] usb 2-1: Manufacturer: syz [ 1759.669012][T23554] usb 2-1: SerialNumber: syz [ 1759.711997][T24677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1759.828880][T24690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1760.009091][T24690] IPVS: length: 149 != 17667290688 [ 1760.114046][T23554] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1760.442369][T23554] usb 2-1: USB disconnect, device number 121 [ 1760.932610][T24701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1761.000625][T24701] libceph: resolve '0..' (ret=-3): failed [ 1761.581174][T23554] usb 6-1: USB disconnect, device number 81 [ 1761.791603][T23553] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1761.970813][T23554] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1762.040613][T24722] input: syz1 as /devices/virtual/input/input53 [ 1762.103545][T23553] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.114060][T23553] usb 5-1: config 0 has no interfaces? [ 1762.120015][T23553] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1762.129564][T23553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.157514][T23554] usb 6-1: Using ep0 maxpacket: 32 [ 1762.197095][T23554] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1762.290010][T23553] usb 5-1: config 0 descriptor?? [ 1762.359670][T23554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.505905][T23554] usb 6-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 1762.556518][T23554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.575145][T23554] usb 6-1: Product: syz [ 1762.592022][T23554] usb 6-1: Manufacturer: syz [ 1762.606495][T23554] usb 6-1: SerialNumber: syz [ 1762.652472][T24725] No such timeout policy "syz0" [ 1762.859510][T23554] usb 6-1: USB disconnect, device number 82 [ 1763.359115][T24727] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1763.677170][T23554] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1763.729476][T24740] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1763.888796][T23554] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1763.903418][T23554] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1763.942636][T23554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1764.141849][T23554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1764.170055][T23554] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1764.275613][ T5905] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1764.307788][T23553] usb 5-1: string descriptor 0 read error: -71 [ 1764.526947][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 1764.533767][T23553] usb 5-1: USB disconnect, device number 111 [ 1764.581332][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1764.603868][ T5905] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 1764.617248][T23554] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1764.684930][ T5905] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1764.698071][T23554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.720134][T23554] usb 2-1: Product: syz [ 1764.724312][T23554] usb 2-1: Manufacturer: syz [ 1764.731312][ T5905] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1764.772024][T23554] usb 2-1: SerialNumber: syz [ 1764.779651][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3699'. [ 1764.799749][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1764.838002][T23554] usb 2-1: config 0 descriptor?? [ 1764.843154][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.852755][ T5905] usb 6-1: Product: syz [ 1764.861111][T23554] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1764.869330][T23554] imon 2-1:0.0: unable to initialize intf0, err -90 [ 1764.875961][ T5905] usb 6-1: Manufacturer: syz [ 1764.882659][T23554] imon:imon_probe: failed to initialize context! [ 1764.889646][ T5905] usb 6-1: SerialNumber: syz [ 1764.897069][T23554] imon 2-1:0.0: unable to register, err -19 [ 1764.937319][T24746] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1764.944953][T24746] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1765.013112][T24751] bond4: option broadcast_neighbor: invalid value (30) [ 1765.034735][T24751] bond4 (unregistering): Released all slaves [ 1765.143045][T23514] usb 2-1: USB disconnect, device number 122 [ 1765.191541][T24746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3697'. [ 1765.211817][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3697'. [ 1765.787112][T24764] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1765.816970][T24764] PKCS7: Only support pkcs7_signedData type [ 1766.377112][T23514] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1766.587600][T23514] usb 5-1: Using ep0 maxpacket: 16 [ 1766.602366][T23514] usb 5-1: config 0 has no interfaces? [ 1766.610988][T23514] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1766.620858][T23514] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1766.678166][T23514] usb 5-1: Manufacturer: syz [ 1766.703840][T23514] usb 5-1: config 0 descriptor?? [ 1767.184696][T24779] libceph: resolve 'c' (ret=-3): failed [ 1767.542980][ T5905] usb 6-1: bad CDC descriptors [ 1767.629910][ T5905] usb 6-1: USB disconnect, device number 83 [ 1768.140165][T24790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3709'. [ 1768.367901][T24793] netlink: 'syz.5.3710': attribute type 21 has an invalid length. [ 1768.408385][T24793] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1768.497635][T24793] netlink: 'syz.5.3710': attribute type 4 has an invalid length. [ 1768.505392][T24793] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1768.833471][T24798] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1769.023446][T24794] binder: BINDER_SET_CONTEXT_MGR already set [ 1769.030116][T24794] binder: 24780:24794 ioctl 4018620d 200000000040 returned -16 [ 1769.041435][T24794] binder: 24780:24794 ioctl c0306201 200000000300 returned -11 [ 1769.134878][T23514] usb 5-1: USB disconnect, device number 112 [ 1769.659313][T24810] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1769.898390][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1769.906196][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1770.047210][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1770.085752][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1770.123781][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1770.213213][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1770.234376][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1770.256625][T24813] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1770.416382][T24819] openvswitch: netlink: Message has 4 unknown bytes. [ 1771.277936][ T5905] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1771.338399][T23554] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1771.437241][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 1771.444134][ T5905] usb 6-1: config 0 has no interfaces? [ 1771.451669][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1771.462044][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1771.473732][ T5905] usb 6-1: Manufacturer: syz [ 1771.498689][ T5905] usb 6-1: config 0 descriptor?? [ 1771.506921][T23554] usb 2-1: Using ep0 maxpacket: 8 [ 1771.513827][T23554] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1771.524308][T23554] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1771.545672][T23554] usb 2-1: config 8 has no interface number 0 [ 1771.559590][T23554] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1771.579895][T23554] usb 2-1: string descriptor 0 read error: -22 [ 1771.590870][T23554] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1771.609429][T23554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.059500][T23554] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 1772.089842][T23554] usb 2-1: USB disconnect, device number 123 [ 1772.562322][T24846] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1772.937156][T23514] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1773.098657][T23514] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1773.108787][T23514] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1773.119125][T23514] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1773.128551][T23514] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1773.137937][T23514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.145954][T23514] usb 2-1: Product: syz [ 1773.151093][T23514] usb 2-1: Manufacturer: syz [ 1773.155737][T23514] usb 2-1: SerialNumber: syz [ 1773.163421][T23514] usb 2-1: config 0 descriptor?? [ 1773.513293][T24855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3729'. [ 1773.601930][T23514] usb 2-1: USB disconnect, device number 124 [ 1773.732920][T24857] IPVS: length: 149 != 17667290688 [ 1773.740486][T24861] : renamed from bond_slave_0 (while UP) [ 1773.864347][T23554] usb 6-1: USB disconnect, device number 84 [ 1774.093713][T24868] validate_nla: 41 callbacks suppressed [ 1774.093726][T24868] netlink: 'syz.5.3734': attribute type 7 has an invalid length. [ 1774.134402][T24868] netlink: 'syz.5.3734': attribute type 8 has an invalid length. [ 1774.162885][T24868] netlink: 'syz.5.3734': attribute type 15 has an invalid length. [ 1774.222031][T24871] netlink: 'syz.0.3735': attribute type 21 has an invalid length. [ 1774.270648][T24871] IPv6: NLM_F_CREATE should be specified when creating new route [ 1774.498185][ T5905] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1774.572061][T24887] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1774.693195][T24884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1774.866840][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 1774.884596][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1774.901922][ T5905] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1774.987103][T23554] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1775.022500][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.039540][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1775.081067][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1775.092243][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.107431][ T5905] usb 2-1: Product: syz [ 1775.113751][ T5905] usb 2-1: Manufacturer: syz [ 1775.120802][ T5905] usb 2-1: SerialNumber: syz [ 1775.177050][T23554] usb 6-1: Using ep0 maxpacket: 16 [ 1775.297549][T23554] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1775.309570][T23554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.327056][T23554] usb 6-1: Product: syz [ 1775.337216][T23554] usb 6-1: Manufacturer: syz [ 1775.347397][T23554] usb 6-1: SerialNumber: syz [ 1775.373009][T23554] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1775.380001][T23554] r8152-cfgselector 6-1: config 0 descriptor?? [ 1775.459387][ T5905] usb 2-1: 0:2 : does not exist [ 1775.534849][ T5905] usb 2-1: USB disconnect, device number 125 [ 1775.579488][T19264] udevd[19264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1775.814848][ T5905] r8152-cfgselector 6-1: USB disconnect, device number 85 [ 1776.013927][T24903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1776.277935][T24905] IPVS: length: 149 != 17667290688 [ 1776.812514][T24923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3750'. [ 1776.859244][T24922] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1776.982538][T24924] geneve2: entered promiscuous mode [ 1777.144012][T24923] IPVS: length: 149 != 17667290688 [ 1777.224096][T24933] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1777.832070][T24944] netlink: 'syz.4.3760': attribute type 21 has an invalid length. [ 1777.904077][T24944] IPv6: NLM_F_CREATE should be specified when creating new route [ 1778.049072][T24946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1778.397298][T24957] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1778.509563][T24971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3768'. [ 1778.636727][T24973] delete_channel: no stack [ 1778.915681][T24971] IPVS: length: 149 != 17667290688 [ 1779.307299][T23514] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1779.527503][T23514] usb 6-1: Using ep0 maxpacket: 16 [ 1779.535847][T23514] usb 6-1: config 0 has no interfaces? [ 1779.543840][T23514] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1779.557190][T23514] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1779.565224][T23514] usb 6-1: Manufacturer: syz [ 1779.573376][T23514] usb 6-1: config 0 descriptor?? [ 1779.649074][T24992] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1779.910652][T24980] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1780.659009][T25002] netlink: 'syz.1.3779': attribute type 8 has an invalid length. [ 1780.757296][ T5905] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1780.938211][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1780.978599][ T5905] usb 3-1: config 0 has no interfaces? [ 1781.007135][T25008] netlink: 'syz.1.3782': attribute type 8 has an invalid length. [ 1781.025016][ T5905] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1781.047542][ T5905] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1781.084096][ T5905] usb 3-1: Manufacturer: syz [ 1781.109977][ T5905] usb 3-1: config 0 descriptor?? [ 1781.668050][ T5923] usb 6-1: USB disconnect, device number 86 [ 1781.911710][T25029] netlink: 'syz.4.3789': attribute type 7 has an invalid length. [ 1782.117852][T25034] xt_hashlimit: size too large, truncated to 1048576 [ 1782.156929][ T5923] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1782.382924][ T5923] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1782.394051][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.411197][ T5923] usb 6-1: Product: syz [ 1782.423539][ T5923] usb 6-1: Manufacturer: syz [ 1782.433803][ T5923] usb 6-1: SerialNumber: syz [ 1782.449376][ T5923] usb 6-1: config 0 descriptor?? [ 1782.670932][ T5923] hso 6-1:0.0: Can't find BULK IN endpoint [ 1782.688624][ T5923] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1782.823024][T25046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1782.833233][T25046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1782.872164][ T5905] usb 6-1: USB disconnect, device number 87 [ 1783.454475][T25056] ÿ: renamed from bond_slave_0 [ 1783.714692][ T5923] usb 3-1: USB disconnect, device number 127 [ 1783.887321][ T5905] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1784.009320][T25074] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1784.067125][ T5923] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1784.159862][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 1784.171699][T25078] netlink: 'syz.1.3812': attribute type 3 has an invalid length. [ 1784.180597][ T5905] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 1784.190840][ T5905] usb 6-1: config 254 has no interface number 0 [ 1784.197674][T25078] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3812'. [ 1784.228411][ T5923] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1784.237908][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.246031][ T5905] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1784.285609][ T5905] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1784.298224][ T5905] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1784.317126][ T5905] usb 6-1: config 254 interface 235 has no altsetting 0 [ 1784.325891][ T5923] usb 5-1: config 0 descriptor?? [ 1784.335995][ T5923] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1784.348732][ T5905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1784.363663][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1784.363891][T25080] macvlan0: Caught tx_queue_len zero misconfig [ 1784.381500][ T5905] usb 6-1: Product: syz [ 1784.390531][ T5905] usb 6-1: Manufacturer: syz [ 1784.398550][ T5905] usb 6-1: SerialNumber: syz [ 1784.422443][T25060] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1784.650611][T25060] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1784.779682][ T5923] gspca_stv06xx: I2C: Read error writing address: -71 [ 1784.805825][ T5923] usb 5-1: USB disconnect, device number 113 [ 1784.862850][ T5905] usbtest 6-1:254.235: Linux gadget zero [ 1784.871867][ T5905] usbtest 6-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1785.062929][ T5923] usb 6-1: USB disconnect, device number 88 [ 1785.158712][T25092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1785.168499][T25092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1785.528682][T25100] ip6tnl0: Caught tx_queue_len zero misconfig [ 1786.557121][T23514] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1786.640611][T25143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1786.655492][T25143] libceph: resolve '0..' (ret=-3): failed [ 1786.707042][T23514] usb 3-1: Using ep0 maxpacket: 16 [ 1786.726012][T23514] usb 3-1: config 0 has no interfaces? [ 1786.823205][T23514] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1786.898286][T23514] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1786.921458][T23514] usb 3-1: Manufacturer: syz [ 1787.095625][T23514] usb 3-1: config 0 descriptor?? [ 1787.537497][ T5905] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1787.827556][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 1787.841101][ T5905] usb 6-1: config 0 has no interfaces? [ 1787.848817][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1787.858658][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1787.868002][ T5905] usb 6-1: Manufacturer: syz [ 1788.119740][ T5905] usb 6-1: config 0 descriptor?? [ 1788.374268][T25149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3839'. [ 1788.708597][T23514] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1788.932999][T25171] netlink: 'syz.1.3848': attribute type 7 has an invalid length. [ 1788.994674][T23514] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1789.003761][T23514] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1789.014995][T23514] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1789.041530][T23514] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1789.062726][T23514] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1789.091185][T23514] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1789.101626][T23514] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1789.110225][T23514] usb 5-1: Product: syz [ 1789.115165][T23514] usb 5-1: Manufacturer: syz [ 1789.137270][T23514] cdc_wdm 5-1:1.0: skipping garbage [ 1789.142709][T23514] cdc_wdm 5-1:1.0: skipping garbage [ 1789.152167][T23514] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1789.165343][T23514] cdc_wdm 5-1:1.0: Unknown control protocol [ 1789.349452][ T5905] usb 5-1: USB disconnect, device number 114 [ 1789.501846][T23514] usb 3-1: USB disconnect, device number 2 [ 1790.181410][T25188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1790.191206][T25188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1790.773386][T23514] usb 6-1: USB disconnect, device number 89 [ 1791.639370][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.649953][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.787551][T23514] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1791.802729][ T5905] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1791.954575][T23514] usb 6-1: Using ep0 maxpacket: 16 [ 1791.976554][T23514] usb 6-1: config 0 has no interfaces? [ 1791.987129][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 1791.993208][T23514] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1792.009960][ T5905] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1792.020309][ T5905] usb 5-1: config 0 has no interface number 0 [ 1792.029687][T23514] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1792.029702][ T5905] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1792.090640][T23514] usb 6-1: Manufacturer: syz [ 1792.098970][ T5905] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1792.109681][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.132257][T23514] usb 6-1: config 0 descriptor?? [ 1792.148241][ T5905] usb 5-1: Product: syz [ 1792.184907][ T5905] usb 5-1: Manufacturer: syz [ 1792.201065][ T5905] usb 5-1: SerialNumber: syz [ 1792.267941][ T5905] usb 5-1: config 0 descriptor?? [ 1792.287908][ T5905] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1792.314525][ T5905] em28xx 5-1:0.132: Video interface 132 found: [ 1792.383374][T25212] ip6tnl0: Caught tx_queue_len zero misconfig [ 1792.840763][T25219] netlink: 'syz.1.3863': attribute type 7 has an invalid length. [ 1793.001469][ T5905] em28xx 5-1:0.132: chip ID is em2710/2820 [ 1793.261143][ T5905] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1793.271353][ T5905] em28xx 5-1:0.132: board has no eeprom [ 1793.337019][ T5905] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1793.345256][ T5905] em28xx 5-1:0.132: analog set to bulk mode. [ 1793.354431][T23554] em28xx 5-1:0.132: Registering V4L2 extension [ 1793.373569][ T5905] usb 5-1: USB disconnect, device number 115 [ 1793.398492][T23554] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1793.424906][T23554] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1793.450913][ T5905] em28xx 5-1:0.132: Disconnecting em28xx [ 1793.589425][T23554] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1793.615646][T23554] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1793.623537][T23554] em28xx 5-1:0.132: No AC97 audio processor [ 1793.642109][T23554] usb 5-1: Decoder not found [ 1793.662343][T23554] em28xx 5-1:0.132: failed to create media graph [ 1793.670271][T23554] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1793.681564][T23554] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1793.691716][ T5905] em28xx 5-1:0.132: Closing input extension [ 1793.742629][ T5905] em28xx 5-1:0.132: Freeing device [ 1793.772766][T25229] xt_hashlimit: size too large, truncated to 1048576 [ 1794.004530][T25238] tipc: Started in network mode [ 1794.027138][T25238] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 1794.075991][T25238] tipc: Enabled bearer , priority 10 [ 1794.184398][T25244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1794.195764][T25244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1794.352100][ T5905] usb 6-1: USB disconnect, device number 90 [ 1795.087075][T23514] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1795.187120][ T5923] tipc: Node number set to 10398378 [ 1795.247061][T23514] usb 6-1: Using ep0 maxpacket: 16 [ 1795.258428][T23514] usb 6-1: config 0 has no interfaces? [ 1795.281618][T23514] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1795.328248][T23514] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1795.347061][T23514] usb 6-1: Manufacturer: syz [ 1795.370916][T23514] usb 6-1: config 0 descriptor?? [ 1796.277864][T23514] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1796.319855][T25307] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1796.437533][T23514] usb 2-1: Using ep0 maxpacket: 16 [ 1796.448711][T23514] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1796.461029][T23514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.470955][T23514] usb 2-1: Product: syz [ 1796.480676][T23514] usb 2-1: Manufacturer: syz [ 1796.488980][T23514] usb 2-1: SerialNumber: syz [ 1796.505192][T23514] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1796.525360][T23514] r8152-cfgselector 2-1: config 0 descriptor?? [ 1796.547480][ T5923] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1796.697081][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1796.703801][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.721717][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1796.765649][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1796.787738][T23514] r8152-cfgselector 2-1: Needed 2 retries to read version [ 1796.802240][ T5923] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1796.812508][T23514] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1796.844172][T23514] r8152-cfgselector 2-1: bad CDC descriptors [ 1796.877168][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1796.925792][ T5923] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1796.938539][ T5923] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1796.949512][ T5923] usb 5-1: Manufacturer: syz [ 1796.982416][ T5923] usb 5-1: config 0 descriptor?? [ 1797.002038][ T5905] r8152-cfgselector 2-1: USB disconnect, device number 126 [ 1797.319015][ T5923] rc_core: IR keymap rc-hauppauge not found [ 1797.325798][ T5923] Registered IR keymap rc-empty [ 1797.354163][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.377867][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.394573][T25309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.403643][T25309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.411066][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1797.448695][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input54 [ 1797.515865][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.548752][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.568007][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.582925][T25319] netlink: 'syz.1.3899': attribute type 6 has an invalid length. [ 1797.617871][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.648725][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.677202][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.719539][T23554] usb 6-1: USB disconnect, device number 91 [ 1797.728426][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.768110][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.807085][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.859721][ T5923] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1797.895104][ T5923] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1797.905637][ T5923] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1797.960993][ T5923] usb 5-1: USB disconnect, device number 116 [ 1797.987073][T23514] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1798.178595][T23514] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1798.203706][T23514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1798.215901][T23514] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1798.230213][T23514] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 1798.240711][T23514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.257461][T25336] netlink: 'syz.2.3905': attribute type 7 has an invalid length. [ 1798.278961][T25335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3906'. [ 1798.464950][T23514] usb 2-1: config 0 descriptor?? [ 1798.481050][T25321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1798.929959][T23514] wacom 0003:056A:00DE.0010: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 1799.021940][T23514] wacom 0003:056A:00DE.0010: hidraw0: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.1-1/input0 [ 1799.079963][T23514] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00DE.0010/input/input55 [ 1799.197073][T23513] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1799.212123][T23514] usb 2-1: USB disconnect, device number 127 [ 1799.357096][T23513] usb 5-1: Using ep0 maxpacket: 16 [ 1799.364043][T23513] usb 5-1: config 0 has no interfaces? [ 1799.376285][T23513] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1799.390476][T23513] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1799.400157][T23513] usb 5-1: Manufacturer: syz [ 1799.427516][T23513] usb 5-1: config 0 descriptor?? [ 1799.842188][T25362] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3915'. [ 1800.283599][T25371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1800.297604][T25371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1800.707276][T25382] netlink: 'syz.2.3923': attribute type 7 has an invalid length. [ 1800.748445][T23554] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1800.917213][T23554] usb 6-1: Using ep0 maxpacket: 32 [ 1800.924398][T23554] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1800.935420][T23554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.947269][T23554] usb 6-1: config 0 descriptor?? [ 1800.965619][T23554] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1801.641781][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1801.702318][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1801.764433][T23554] gspca_sunplus: reg_w_riv err -71 [ 1801.778100][T23554] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1801.795951][T23554] usb 6-1: USB disconnect, device number 92 [ 1801.810628][ T5905] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1801.841621][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.854277][T23552] usb 5-1: USB disconnect, device number 117 [ 1801.892964][ T5905] usb 2-1: Product: syz [ 1801.899657][ T5905] usb 2-1: Manufacturer: syz [ 1801.905896][ T5905] usb 2-1: SerialNumber: syz [ 1802.113583][T25402] loop5: detected capacity change from 0 to 7 [ 1802.134544][T25402] Dev loop5: unable to read RDB block 7 [ 1802.172937][ T5905] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1802.190871][ T5905] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1802.203397][T25402] loop5: AHDI p1 [ 1802.203495][ T5905] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1802.216234][T25402] loop5: partition table partially beyond EOD, truncated [ 1802.266083][ T5905] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1802.282482][ T5905] usb 2-1: USB disconnect, device number 2 [ 1802.510120][T25412] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1802.707127][T23514] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1802.848966][ T5905] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1802.867079][T23514] usb 3-1: Using ep0 maxpacket: 8 [ 1802.887923][T23514] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1802.918991][T23514] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1802.943107][T23514] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1802.987504][T23514] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1803.009307][T23514] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1803.037283][ T5905] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1803.057385][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1803.064556][ T5905] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1803.074413][T23514] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1803.074985][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.097154][T23514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.100495][ T5905] usb 5-1: config 0 descriptor?? [ 1803.356056][T23514] usb 3-1: GET_CAPABILITIES returned 0 [ 1803.364803][T23514] usbtmc 3-1:16.0: can't read capabilities [ 1803.550863][ T5905] apple 0003:05AC:027A.0011: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 1803.574272][ T5923] usb 3-1: USB disconnect, device number 3 [ 1803.657069][T23514] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1803.798876][ T5923] usb 5-1: USB disconnect, device number 118 [ 1803.808786][T23514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.847765][T23514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1803.860239][T23514] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1803.884076][T23514] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 1803.904464][T23514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.915946][T23514] usb 2-1: config 0 descriptor?? [ 1804.067683][T25430] binder: 25429:25430 ioctl c018620c 2000000002c0 returned -1 [ 1804.207854][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3947'. [ 1804.581304][T25457] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1804.615407][T23514] usb 2-1: string descriptor 0 read error: -71 [ 1804.654315][T23514] uclogic 0003:5543:3031.0012: failed retrieving string descriptor #200: -71 [ 1804.677235][T23514] uclogic 0003:5543:3031.0012: failed retrieving pen parameters: -71 [ 1804.755265][T23514] uclogic 0003:5543:3031.0012: failed probing pen v2 parameters: -71 [ 1804.790682][T23514] uclogic 0003:5543:3031.0012: failed probing parameters: -71 [ 1804.813638][T23514] uclogic 0003:5543:3031.0012: probe with driver uclogic failed with error -71 [ 1804.841778][T23514] usb 2-1: USB disconnect, device number 3 [ 1805.664225][T25467] IPVS: length: 149 != 17667290688 [ 1806.519449][T25497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3972'. [ 1806.787055][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1806.887904][T25517] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1806.900494][T23514] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1807.147064][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 1807.153912][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1807.166525][ T5905] usb 2-1: config 0 has no interface number 0 [ 1807.177524][ T5905] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.197019][ T5905] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.207035][T23514] usb 5-1: Using ep0 maxpacket: 16 [ 1807.386335][ T5905] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1807.387408][T23514] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.408992][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.427270][T23514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1807.450983][ T5905] usb 2-1: config 0 descriptor?? [ 1807.469742][T23514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1807.495907][T23514] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1807.519360][T23514] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1807.550118][T23514] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1807.560676][T23514] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1807.574118][T23514] usb 5-1: Manufacturer: syz [ 1807.732743][T23514] usb 5-1: config 0 descriptor?? [ 1808.038705][T25527] IPVS: length: 149 != 17667290688 [ 1808.114866][T25531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1808.135034][ T5905] uclogic 0003:28BD:0071.0013: pen parameters not found [ 1808.154514][T25531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1808.156523][ T5905] uclogic 0003:28BD:0071.0013: interface is invalid, ignoring [ 1808.195079][ T5905] usb 2-1: USB disconnect, device number 4 [ 1808.207137][T23514] rc_core: IR keymap rc-hauppauge not found [ 1808.213147][T23514] Registered IR keymap rc-empty [ 1808.287372][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.318918][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.349047][T23514] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1808.364333][T23514] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input58 [ 1808.388811][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.407136][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.429577][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.457159][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.487128][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.507283][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.527366][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.547248][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.567947][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.588322][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.607520][T23514] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1808.651957][T23514] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1808.672999][T23514] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1808.717033][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1808.725633][T23514] usb 5-1: USB disconnect, device number 119 [ 1808.808603][T25550] dummy0: Caught tx_queue_len zero misconfig [ 1808.815132][T25550] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3992'. [ 1808.829512][T25550] netem: unknown loss type 13 [ 1808.834781][T25550] netem: change failed [ 1808.898579][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 1808.912984][ T5923] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1808.942119][T25554] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1808.965831][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.986050][ T5923] usb 3-1: Product: syz [ 1808.993665][ T5923] usb 3-1: Manufacturer: syz [ 1809.007157][ T5923] usb 3-1: SerialNumber: syz [ 1809.019254][ T5923] usb 3-1: config 0 descriptor?? [ 1809.029570][ T5923] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1809.046613][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 1809.052428][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1809.077241][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 1809.083006][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1809.223798][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1809.306120][T25561] dvb-usb: bulk message failed: -22 (8/0) [ 1809.339846][T25561] ttusb2: there might have been an error during control message transfer. (rlen = 22, was 0) [ 1809.362252][ T5923] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1809.386815][T25561] ttusb2: i2c transfer failed. [ 1809.397554][ T5923] usb 3-1: media controller created [ 1809.415779][T25564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3996'. [ 1809.448585][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1809.474306][T25559] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1809.499602][ T5923] usb 3-1: selecting invalid altsetting 3 [ 1809.506420][ T5923] ttusb2: set interface to alts=3 failed [ 1809.569488][T25559] bond6 (unregistering): Released all slaves [ 1809.603761][ T5923] DVB: Unable to find symbol tda10086_attach() [ 1809.614069][ T5923] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1809.663022][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 1809.727404][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1809.737999][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 1809.743713][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1809.808297][ T5923] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1810.021770][ T5923] usb 3-1: USB disconnect, device number 4 [ 1810.077873][ T5923] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1810.217039][ T5905] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1810.420083][ T5905] usb 6-1: config 0 has no interfaces? [ 1810.431569][ T5905] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1810.457087][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.486517][ T5905] usb 6-1: Product: syz [ 1810.490723][ T5905] usb 6-1: Manufacturer: syz [ 1810.495325][ T5905] usb 6-1: SerialNumber: syz [ 1810.537624][ T5905] usb 6-1: config 0 descriptor?? [ 1810.628711][T25582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4001'. [ 1810.705655][T25584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1811.007521][T25587] IPVS: length: 149 != 17667290688 [ 1811.750158][T25608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1811.759677][T25608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1811.887766][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1812.047383][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 1812.061732][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.081382][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.104654][ T5905] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1812.117340][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.133578][ T5905] usb 2-1: config 0 descriptor?? [ 1812.419295][T25614] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1812.573963][ T5905] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1812.647154][ T5905] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 1812.657264][ T5905] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 1812.784052][ T5905] usb 2-1: USB disconnect, device number 5 [ 1812.867813][ T5923] usb 6-1: USB disconnect, device number 93 [ 1812.979460][T25619] xt_connbytes: Forcing CT accounting to be enabled [ 1813.351304][T25633] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4018'. [ 1813.427453][ T5905] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1813.510219][T25633] IPVS: length: 149 != 17667290688 [ 1813.618678][ T5905] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.629993][ T6943] IPVS: ip_vs_send_async error -101 [ 1813.636021][ T5905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1813.679600][ T5905] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1813.693720][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1813.707536][ T5905] usb 6-1: SerialNumber: syz [ 1813.718188][T25643] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1813.798996][T25647] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1813.957948][ T5905] usb 6-1: 0:2 : does not exist [ 1814.060494][ T5905] usb 6-1: USB disconnect, device number 94 [ 1814.160345][T19264] udevd[19264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1814.479757][T23552] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1814.598470][T25662] wg0: Caught tx_queue_len zero misconfig [ 1814.614878][T25662] sch_tbf: burst 0 is lower than device wg0 mtu (1420) ! [ 1814.649878][T23552] usb 5-1: Using ep0 maxpacket: 8 [ 1814.657154][T23552] usb 5-1: config 16 has an invalid interface number: 124 but max is 0 [ 1814.684210][T23552] usb 5-1: config 16 has no interface number 0 [ 1814.705615][T23552] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= c.1b [ 1814.742869][T23552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.829264][T23552] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1814.885978][T25674] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1815.035175][T23552] usb 5-1: USB disconnect, device number 120 [ 1815.473421][T25712] netlink: 'syz.2.4053': attribute type 3 has an invalid length. [ 1815.478076][T25713] delete_channel: no stack [ 1815.507180][T25712] netlink: 812 bytes leftover after parsing attributes in process `syz.2.4053'. [ 1816.466996][T23514] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1816.633020][T23514] usb 5-1: Using ep0 maxpacket: 32 [ 1816.641000][T23514] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1816.665613][T23514] usb 5-1: config 0 has no interface number 0 [ 1816.674787][T23514] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.689941][T23514] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.702003][T23514] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1816.711962][T23514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.724593][T23514] usb 5-1: config 0 descriptor?? [ 1816.883964][T25756] tipc: Started in network mode [ 1816.890857][T25756] tipc: Node identity ac1414aa, cluster identity 4711 [ 1816.907593][T25756] tipc: Enabled bearer , priority 10 [ 1817.017597][T25761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4075'. [ 1817.178010][T25767] pimreg: tun_chr_ioctl cmd 1074812117 [ 1817.317780][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1817.358733][T23514] uclogic 0003:28BD:0094.0015: pen parameters not found [ 1817.365976][T23514] uclogic 0003:28BD:0094.0015: interface is invalid, ignoring [ 1817.477137][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 1817.483712][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1817.492677][ T5923] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1817.502151][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.512881][ T5923] usb 3-1: Product: syz [ 1817.517526][ T5923] usb 3-1: Manufacturer: syz [ 1817.522115][ T5923] usb 3-1: SerialNumber: syz [ 1817.527256][T23513] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1817.538331][ T5923] usb 3-1: config 0 descriptor?? [ 1817.577852][ T5905] usb 5-1: USB disconnect, device number 121 [ 1817.667052][T23552] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1817.677071][T23513] usb 6-1: Using ep0 maxpacket: 8 [ 1817.683906][T23513] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1817.695802][T23513] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1817.706364][T23513] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1817.717149][T23513] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1817.730317][T23513] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1817.739471][T23513] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.828659][T23552] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1817.838179][T23552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.849189][T23552] usb 2-1: config 0 descriptor?? [ 1817.896973][ T5905] tipc: Node number set to 2886997162 [ 1817.957237][ T5923] gs_usb 3-1:0.0: Configuring for 242 interfaces [ 1817.965449][T23513] usb 6-1: usb_control_msg returned -32 [ 1817.971546][T23513] usbtmc 6-1:16.0: can't read capabilities [ 1818.058084][T23552] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1818.258873][T23552] [drm:udl_init] *ERROR* Selecting channel failed [ 1818.308043][T23552] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1818.331066][T23552] [drm] Initialized udl on minor 2 [ 1818.351660][T23552] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1818.373229][ T5923] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1818.385209][T23552] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1818.579343][ T5905] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1818.599361][T23552] usb 2-1: USB disconnect, device number 6 [ 1818.607700][ T5905] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1818.618587][ T5923] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1818.659578][ T5923] usb 3-1: USB disconnect, device number 5 [ 1818.935362][T25782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1819.381927][T25801] syzkaller1: entered promiscuous mode [ 1819.388364][T25801] syzkaller1: entered allmulticast mode [ 1819.407438][T23552] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1819.578893][T23552] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1819.591955][T23552] usb 5-1: config 1 has no interface number 0 [ 1819.600941][T23552] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1819.613284][T23552] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1819.623662][T23552] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.638637][T23552] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1819.649870][T23552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.658939][T23552] usb 5-1: Product: syz [ 1819.663271][T23552] usb 5-1: Manufacturer: syz [ 1819.668863][T23552] usb 5-1: SerialNumber: syz [ 1819.683199][T25792] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1819.898873][T25792] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1819.973519][T25822] bond0: (slave syz_tun): Releasing backup interface [ 1819.994923][T25822] bond0: (slave 30): Releasing backup interface [ 1820.011816][T25822] bond0: (slave bond_slave_1): Releasing backup interface [ 1820.034454][T25822] team0: Port device team_slave_0 removed [ 1820.060888][T25822] team0: Port device team_slave_1 removed [ 1820.085051][T25822] team0: Port device batadv0 removed [ 1820.114834][T25822] team0: Port device batadv1 removed [ 1820.132740][T25822] bond3: (slave gretap0): Releasing active interface [ 1820.182158][T23552] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1820.337331][ T5905] usb 6-1: USB disconnect, device number 95 [ 1820.722776][ T5905] usb 5-1: USB disconnect, device number 122 [ 1820.733816][ T5905] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 1820.963592][ T5905] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1821.337576][T25873] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4123'. [ 1821.627109][ T5905] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1821.718976][T25877] IPVS: length: 149 != 17667290688 [ 1821.798011][T25891] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1821.917169][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 1821.932071][ T5905] usb 2-1: config 0 has no interfaces? [ 1821.974638][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1821.997255][T23552] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1822.037196][ T5905] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1822.060724][ T5905] usb 2-1: Manufacturer: syz [ 1822.093637][ T5905] usb 2-1: config 0 descriptor?? [ 1822.167502][T23552] usb 3-1: Using ep0 maxpacket: 32 [ 1822.199070][T23552] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1822.216108][T23552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1822.239901][T23552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1822.251969][T23552] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1822.264484][T23552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.265949][T25906] netlink: 35284 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1822.288282][T23552] usb 3-1: config 0 descriptor?? [ 1822.294148][T25888] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1822.309184][T23552] hub 3-1:0.0: USB hub found [ 1822.368426][T25906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4133'. [ 1822.377148][T25912] Invalid argument reading file caps for ./file0 [ 1822.532612][T23552] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 1822.752127][T23552] usbhid 3-1:0.0: can't add hid device: -71 [ 1822.773030][T23552] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1822.827955][T23552] usb 3-1: USB disconnect, device number 6 [ 1823.047554][ T5905] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1823.242024][ T5905] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 1823.267481][ T5905] usb 5-1: config 0 has no interface number 0 [ 1823.273630][ T5905] usb 5-1: config 0 interface 166 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1823.317608][ T5905] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 1823.338303][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.369438][ T5905] usb 5-1: Product: syz [ 1823.375989][ T5905] usb 5-1: Manufacturer: syz [ 1823.382961][ T5905] usb 5-1: SerialNumber: syz [ 1823.399631][ T5905] usb 5-1: config 0 descriptor?? [ 1823.405618][T25923] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1823.461972][T25942] syzkaller1: entered promiscuous mode [ 1823.470037][T25942] syzkaller1: entered allmulticast mode [ 1823.620511][T25923] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1823.650898][ T5905] net1080 5-1:0.166 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 5e:df:1b:c9:50:7d [ 1823.686426][T25946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4143'. [ 1823.841442][ T5923] usb 5-1: USB disconnect, device number 123 [ 1823.848979][ T5923] net1080 5-1:0.166 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 1823.892566][T25946] IPVS: length: 149 != 17667290688 [ 1824.516598][ T5905] usb 2-1: USB disconnect, device number 7 [ 1824.562289][T25970] team_slave_1: Caught tx_queue_len zero misconfig [ 1824.957088][ T5923] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1825.139048][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 1825.192431][T26000] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1825.239225][T26003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4156'. [ 1825.271483][ T5923] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1825.283016][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.362909][ T5923] usb 6-1: Product: syz [ 1825.368683][ T5923] usb 6-1: Manufacturer: syz [ 1825.373473][ T5923] usb 6-1: SerialNumber: syz [ 1825.407436][ T5923] usb 6-1: config 0 descriptor?? [ 1825.555829][ T5923] gspca_main: se401-2.14.0 probing 047d:5003 [ 1825.910045][T26013] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1825.977860][T26018] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4160'. [ 1826.171302][ T5923] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input59 [ 1826.315581][T26025] syzkaller1: entered promiscuous mode [ 1826.347099][T26025] syzkaller1: entered allmulticast mode [ 1826.373559][ T5923] usb 6-1: USB disconnect, device number 96 [ 1826.557306][ T5905] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1826.583158][T26028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4164'. [ 1826.733771][ T5905] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1826.744692][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.777599][ T5905] usb 2-1: config 0 descriptor?? [ 1826.855471][T26037] syzkaller1: entered promiscuous mode [ 1826.861582][T26037] syzkaller1: entered allmulticast mode [ 1827.050528][T26043] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1827.097147][T23552] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1827.195872][ T5905] ath6kl: Failed to read usb control message: -71 [ 1827.207169][ T5905] ath6kl: Unable to read the bmi data from the device: -71 [ 1827.218688][ T5905] ath6kl: Unable to recv target info: -71 [ 1827.246279][ T5905] ath6kl: Failed to init ath6kl core: -71 [ 1827.259812][ T5905] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1827.282127][ T5905] usb 2-1: USB disconnect, device number 8 [ 1827.318972][T23552] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1827.330056][T23552] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1827.352058][T23552] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1827.368555][T23552] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1827.387654][T23552] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1827.409804][T23552] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1827.419622][T23552] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1827.428239][T23552] usb 5-1: Product: syz [ 1827.432444][T23552] usb 5-1: Manufacturer: syz [ 1827.444906][T23552] cdc_wdm 5-1:1.0: skipping garbage [ 1827.450746][T23552] cdc_wdm 5-1:1.0: skipping garbage [ 1827.458071][T23552] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1827.464283][T23552] cdc_wdm 5-1:1.0: Unknown control protocol [ 1827.702368][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.708987][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.717687][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.724299][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.730978][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.737571][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.744270][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.750888][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.757611][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.764220][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.771123][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.777714][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.784159][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.790743][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.797444][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.804030][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.810575][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.817164][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.823699][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1827.830290][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1827.837642][T23552] usb 5-1: USB disconnect, device number 124 [ 1827.843655][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1828.066361][T26050] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1828.184664][T26052] loop8: detected capacity change from 0 to 8 [ 1828.203196][T26052] Dev loop8: unable to read RDB block 8 [ 1828.215289][T26052] loop8: unable to read partition table [ 1828.222245][T26052] loop8: partition table beyond EOD, truncated [ 1828.227049][ T5923] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1828.229229][T26052] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1828.399032][ T5923] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1828.411102][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.448774][ T5923] usb 2-1: config 0 descriptor?? [ 1828.459600][ T5923] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1829.262645][ T5923] gspca_cpia1: usb_control_msg 02, error -71 [ 1829.269780][ T5923] gspca_cpia1: usb_control_msg 05, error -71 [ 1829.276354][ T5923] gspca_cpia1: usb_control_msg 04, error -71 [ 1829.283238][ T5923] cpia1 2-1:0.0: probe with driver cpia1 failed with error -71 [ 1829.304065][ T5923] usb 2-1: USB disconnect, device number 9 [ 1829.468640][T26071] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4179'. [ 1829.680608][T26071] IPVS: length: 149 != 17667290688 [ 1830.544267][T26083] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1831.687387][T23552] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1831.732379][T26106] syzkaller1: entered promiscuous mode [ 1831.749515][T26106] syzkaller1: entered allmulticast mode [ 1831.857052][T23552] usb 6-1: Using ep0 maxpacket: 16 [ 1831.880330][T26110] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1831.900811][T23552] usb 6-1: config 173 has too many interfaces: 43, using maximum allowed: 32 [ 1831.920586][T23552] usb 6-1: config 173 has 1 interface, different from the descriptor's value: 43 [ 1832.056184][T23552] usb 6-1: config 173 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1832.069071][T23552] usb 6-1: config 173 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1832.079777][T23552] usb 6-1: config 173 interface 0 has no altsetting 0 [ 1832.125300][T26112] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1832.150854][T23552] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1832.160895][T23552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.380780][T26097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.395778][T26097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.763454][T26129] syzkaller1: entered promiscuous mode [ 1832.769345][T26129] syzkaller1: entered allmulticast mode [ 1832.883325][T26132] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1832.896257][ T5923] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1832.983422][T23513] usb 6-1: USB disconnect, device number 97 [ 1833.077106][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 1833.090524][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.127820][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1833.154407][ T5923] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1833.176020][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.279632][ T5923] usb 3-1: Product: syz [ 1833.435260][ T5923] usb 3-1: Manufacturer: syz [ 1833.478916][ T5923] usb 3-1: SerialNumber: syz [ 1833.801960][ T5923] usb 3-1: 0:2 : does not exist [ 1833.864379][ T5923] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1833.952474][ T5923] usb 3-1: USB disconnect, device number 7 [ 1833.966916][T23552] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1834.138006][T23552] usb 6-1: Using ep0 maxpacket: 32 [ 1834.145505][T23552] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1834.154700][T23552] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1834.180366][T23552] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1834.196563][T23552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1834.230119][T23552] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1834.267809][T23552] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1834.322847][T26153] netlink: 'syz.1.4211': attribute type 4 has an invalid length. [ 1834.333269][T23552] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1834.336440][T26153] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4211'. [ 1834.377138][T26153] wlan1: mtu less than device minimum [ 1834.382642][T23552] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1834.401364][T23552] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1834.411368][T26156] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1834.412083][T23552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.455167][T23552] usb 6-1: config 0 descriptor?? [ 1834.466149][T26144] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1834.552298][T26165] Invalid argument reading file caps for ./file0 [ 1834.599527][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 1834.684654][T23552] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 98 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1834.787320][T23554] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1834.867086][T23552] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1834.891879][ C1] usblp0: nonzero read bulk status received: -71 [ 1834.904982][ T5905] usb 6-1: USB disconnect, device number 98 [ 1834.915769][ T5905] usblp0: removed [ 1834.947199][T23554] usb 2-1: Using ep0 maxpacket: 16 [ 1834.953932][T23554] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.965984][T23554] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1834.974097][T23554] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1834.983822][T23554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.001810][T23554] usb 2-1: config 0 descriptor?? [ 1835.017306][T23552] usb 3-1: Using ep0 maxpacket: 16 [ 1835.024189][T23552] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1835.033096][T23552] usb 3-1: config 0 has no interface number 0 [ 1835.043187][T23552] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1835.054221][T23552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.063328][T23552] usb 3-1: Product: syz [ 1835.068552][T23552] usb 3-1: Manufacturer: syz [ 1835.073322][T23552] usb 3-1: SerialNumber: syz [ 1835.091631][T23552] usb 3-1: config 0 descriptor?? [ 1835.100714][T23552] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1835.417926][T26163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.428337][T26163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1835.477928][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.505138][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.513420][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.521310][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.528928][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.535925][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.543336][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.551070][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.559250][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.566249][T23554] cougar 0003:060B:500A.0017: unknown main item tag 0x0 [ 1835.582339][T23554] cougar 0003:060B:500A.0017: item 0 2 0 8 parsing failed [ 1835.590500][T23554] cougar 0003:060B:500A.0017: parse failed [ 1835.596377][T23554] cougar 0003:060B:500A.0017: probe with driver cougar failed with error -22 [ 1835.627343][ T5905] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1835.659953][ T5923] usb 2-1: USB disconnect, device number 10 [ 1835.779921][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.791755][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.801629][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1835.814880][ T5905] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1835.824346][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.835381][ T5905] usb 5-1: config 0 descriptor?? [ 1836.114802][T23552] gspca_spca1528: reg_w err -71 [ 1836.122857][T23552] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1836.135159][T23552] usb 3-1: USB disconnect, device number 8 [ 1836.250366][ T5905] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 1836.265991][ T5905] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1836.518314][T23552] usb 5-1: USB disconnect, device number 125 [ 1836.647243][T26183] netlink: 'syz.2.4222': attribute type 5 has an invalid length. [ 1836.807906][T26188] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1837.094432][ T5923] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1837.668176][ T5923] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1837.703660][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 1837.714039][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 1837.840883][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 1837.856855][ T5923] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.872876][ T5923] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.925472][ T5923] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.944238][ T5923] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1837.957982][ T5923] usb 2-1: config 7 interface 0 has no altsetting 0 [ 1837.964734][ T5923] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1837.974518][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.057245][T23552] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1838.207228][T23552] usb 3-1: Using ep0 maxpacket: 8 [ 1838.214502][T23552] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1838.227235][T23552] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1838.243536][T23552] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1838.254595][T23552] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1838.266027][T23552] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1838.280811][T23552] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1838.291627][T23552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.455314][ T5923] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.001A/input/input61 [ 1838.569554][ T5923] kye 0003:0458:5010.001A: input,hiddev1,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 1838.854201][ T5923] usb 2-1: USB disconnect, device number 11 [ 1838.949533][T23513] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1839.003560][T26223] fido_id[26223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1839.107097][T23513] usb 5-1: Using ep0 maxpacket: 16 [ 1839.159190][T26231] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 1839.218223][T23515] usb 3-1: USB disconnect, device number 9 [ 1839.268314][T23513] usb 5-1: config 0 has no interfaces? [ 1839.286090][T23513] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1839.295859][T23513] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1839.305141][T23513] usb 5-1: Manufacturer: syz [ 1839.320554][T23513] usb 5-1: config 0 descriptor?? [ 1839.347064][T23514] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1839.487472][T26238] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1839.545551][T23514] usb 6-1: Using ep0 maxpacket: 8 [ 1839.554247][T23514] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1839.563054][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1839.625862][T23514] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1839.800076][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1839.820236][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1839.864024][T23514] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1839.873742][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1840.027752][T26244] batadv_slave_1: entered promiscuous mode [ 1840.037076][T26242] batadv_slave_1: left promiscuous mode [ 1840.128437][T23514] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1840.140770][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1840.184944][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1840.267370][T23514] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1840.274826][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1840.288654][T23514] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1840.311184][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1840.380217][T26246] IPVS: length: 149 != 17667290688 [ 1840.512752][T23514] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1840.548433][T23514] usb 6-1: string descriptor 0 read error: -22 [ 1840.569743][T23514] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1840.607678][T23514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.618969][T26250] netlink: 'syz.1.4243': attribute type 7 has an invalid length. [ 1840.788132][T23514] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1841.054851][T23514] usb 6-1: USB disconnect, device number 99 [ 1841.160655][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4248'. [ 1841.172957][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4248'. [ 1841.310773][T26267] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1841.592764][T23513] usb 5-1: USB disconnect, device number 126 [ 1842.821125][T26286] IPv6: sit1: Disabled Multicast RS [ 1843.137219][T23513] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1843.397148][T23513] usb 3-1: Using ep0 maxpacket: 8 [ 1843.437532][T23513] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1843.448123][T23513] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1843.470360][T23513] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1843.496411][T23513] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1843.523930][T23513] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1843.533837][T23513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.759790][T23513] usb 3-1: GET_CAPABILITIES returned 0 [ 1843.769409][T23513] usbtmc 3-1:16.0: can't read capabilities [ 1843.857043][T23514] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1844.000966][T26317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1844.050954][T23514] usb 6-1: Using ep0 maxpacket: 16 [ 1844.053906][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.065619][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.074737][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.083813][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.098537][T26314] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1844.127448][T23514] usb 6-1: config 0 has no interfaces? [ 1844.214417][T23514] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1844.223950][T23514] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1844.239314][T26314] bond5 (unregistering): Released all slaves [ 1844.258061][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.267188][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.276280][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.285351][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.374181][T23514] usb 6-1: Manufacturer: syz [ 1844.379943][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.389041][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.398137][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.407205][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.416265][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.425333][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.434392][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1844.504525][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1844.556703][T23514] usb 6-1: config 0 descriptor?? [ 1844.799503][T23513] usb 3-1: USB disconnect, device number 10 [ 1845.901821][T26348] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1846.047421][T23513] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1846.147747][T23514] usb 6-1: USB disconnect, device number 100 [ 1846.228681][T23513] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1846.313088][T23513] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1846.340673][T23513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1846.382586][T23513] usb 3-1: SerialNumber: syz [ 1846.567215][T23514] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1846.761156][T23514] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.784496][T23514] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1846.877219][T23514] usb 6-1: config 1 has no interface number 0 [ 1846.894440][T23514] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.916118][T23514] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1847.055770][T23514] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1847.068671][T23514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.086095][T23513] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1847.099467][T23514] usb 6-1: Product: syz [ 1847.103628][T23514] usb 6-1: Manufacturer: syz [ 1847.128684][T23514] usb 6-1: SerialNumber: syz [ 1847.189459][T23514] usb 6-1: selecting invalid altsetting 1 [ 1847.226227][T26354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1847.282482][T26354] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1847.358905][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1847.500060][T26364] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1847.524103][T23513] usb 3-1: USB disconnect, device number 11 [ 1847.531546][T23513] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1847.600870][T23514] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 1847.624191][T23514] cdc_ncm 6-1:1.1: bind() failure [ 1848.219937][T26387] ªªªªªª: renamed from vlan0 [ 1848.540762][T26400] syzkaller1: entered promiscuous mode [ 1848.546281][T26400] syzkaller1: entered allmulticast mode [ 1848.765050][T26409] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1848.814450][T26409] bond2 (unregistering): Released all slaves [ 1849.045337][T26420] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1849.392063][T23513] usb 6-1: USB disconnect, device number 101 [ 1849.877060][T23552] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1849.900749][T23513] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1850.039622][T23552] usb 2-1: config 0 has no interfaces? [ 1850.187068][T23514] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1850.350797][T23513] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1850.373110][T23552] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1850.373168][T23513] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1850.382789][T23552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.395127][T23513] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 54297, setting to 1023 [ 1850.418229][T23552] usb 2-1: Product: syz [ 1850.427585][T23552] usb 2-1: Manufacturer: syz [ 1850.433088][T23552] usb 2-1: SerialNumber: syz [ 1850.460458][T23514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.475216][T23514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.500118][T23513] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1850.501019][T23552] usb 2-1: config 0 descriptor?? [ 1850.521971][T23514] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1850.563201][T23513] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1850.576103][T23514] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1850.591982][T23513] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1850.607875][T23514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.622171][T23513] usb 6-1: Product: syz [ 1850.629958][T23513] usb 6-1: Manufacturer: syz [ 1850.640084][T23514] usb 3-1: config 0 descriptor?? [ 1850.647388][T23513] usb 6-1: SerialNumber: syz [ 1850.670832][T23513] usb 6-1: config 0 descriptor?? [ 1850.690198][T23513] usb 6-1: selecting invalid altsetting 0 [ 1851.077750][T23513] usb 6-1: USB disconnect, device number 102 [ 1851.192846][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1851.421109][T23514] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1851.480100][T23514] usb 3-1: USB disconnect, device number 12 [ 1851.660575][T26449] fido_id[26449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1852.276756][T23552] usb 2-1: USB disconnect, device number 12 [ 1852.890193][T26475] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1853.077406][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.087066][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.535931][T26493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4313'. [ 1853.937113][T23552] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1854.117181][T23552] usb 5-1: Using ep0 maxpacket: 16 [ 1854.262476][T23552] usb 5-1: config 0 has no interfaces? [ 1854.378627][T23552] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1854.397239][T23552] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1854.415526][T23552] usb 5-1: Manufacturer: syz [ 1854.422700][T23552] usb 5-1: config 0 descriptor?? [ 1854.541657][T26503] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1854.626436][T26503] bond6 (unregistering): Released all slaves [ 1854.977361][T26508] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1855.033318][T26508] bond7 (unregistering): Released all slaves [ 1855.157082][T23513] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1855.157207][T23552] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1855.473833][T23513] usb 6-1: config 0 has no interfaces? [ 1855.498495][T23513] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1855.514528][T23552] usb 3-1: config 0 has no interfaces? [ 1855.530158][T23513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.555712][T23513] usb 6-1: Product: syz [ 1855.561464][T23552] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1855.573874][T23552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.592404][T23513] usb 6-1: Manufacturer: syz [ 1855.592411][T23552] usb 3-1: Product: syz [ 1855.592426][T23552] usb 3-1: Manufacturer: syz [ 1855.617109][T23552] usb 3-1: SerialNumber: syz [ 1855.620608][T23513] usb 6-1: SerialNumber: syz [ 1855.629158][T23552] usb 3-1: config 0 descriptor?? [ 1855.668249][T23513] usb 6-1: config 0 descriptor?? [ 1856.640200][ T5905] usb 5-1: USB disconnect, device number 127 [ 1857.084953][T26552] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1857.324064][ T5905] usb 6-1: USB disconnect, device number 103 [ 1857.563016][T23552] usb 3-1: USB disconnect, device number 13 [ 1858.477087][T23513] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1858.826277][T23513] usb 3-1: Using ep0 maxpacket: 16 [ 1858.838323][T23513] usb 3-1: config 0 has no interfaces? [ 1858.845857][T23513] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1858.856307][T23513] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1858.906296][T23513] usb 3-1: Manufacturer: syz [ 1858.913028][T23513] usb 3-1: config 0 descriptor?? [ 1859.088333][T26586] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1859.198992][T26586] bond6 (unregistering): Released all slaves [ 1859.565956][T23513] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1859.920033][T23513] usb 6-1: config 0 has no interfaces? [ 1859.938181][T23513] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1859.957893][T23513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.991462][T23513] usb 6-1: Product: syz [ 1860.001833][T23513] usb 6-1: Manufacturer: syz [ 1860.048357][T23513] usb 6-1: SerialNumber: syz [ 1860.093424][T23513] usb 6-1: config 0 descriptor?? [ 1860.187908][T26610] xt_hashlimit: size too large, truncated to 1048576 [ 1860.698151][T26619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1860.960898][T26619] IPVS: length: 149 != 17667290688 [ 1861.244710][T23552] usb 3-1: USB disconnect, device number 14 [ 1861.546425][T26626] sctp: [Deprecated]: syz.1.4350 (pid 26626) Use of int in max_burst socket option. [ 1861.546425][T26626] Use struct sctp_assoc_value instead [ 1862.137760][T26632] delete_channel: no stack [ 1862.200976][T23552] usb 6-1: USB disconnect, device number 104 [ 1862.922315][T26648] netlink: 'syz.5.4358': attribute type 14 has an invalid length. [ 1862.930945][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4358'. [ 1863.007369][T26648] netlink: 'syz.5.4358': attribute type 14 has an invalid length. [ 1863.039667][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4358'. [ 1863.415009][T26660] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1863.497910][T26662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4360'. [ 1863.677325][T23552] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1863.847471][T23552] usb 3-1: Using ep0 maxpacket: 16 [ 1863.884090][T26662] IPVS: length: 149 != 17667290688 [ 1863.997453][T23552] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1864.030420][T23552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.054877][T23552] usb 3-1: Product: syz [ 1864.067182][T23552] usb 3-1: Manufacturer: syz [ 1864.099636][T23552] usb 3-1: SerialNumber: syz [ 1864.360834][T26672] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1864.409211][T26672] bond6 (unregistering): Released all slaves [ 1864.655582][T23552] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1864.937027][T23513] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1865.094840][T23552] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 1865.129397][T23513] usb 6-1: config 0 has no interfaces? [ 1865.159729][T23513] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1865.161789][T23552] usb 3-1: USB disconnect, device number 15 [ 1865.169555][T23513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.192147][T23513] usb 6-1: Product: syz [ 1865.204214][T19264] udevd[19264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1865.207141][T23513] usb 6-1: Manufacturer: syz [ 1865.277370][T23513] usb 6-1: SerialNumber: syz [ 1865.309076][T23513] usb 6-1: config 0 descriptor?? [ 1866.748271][T26730] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1867.224366][T23513] usb 6-1: USB disconnect, device number 105 [ 1867.731699][T23513] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1867.888786][T23513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.907523][T23513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1867.933744][T23513] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1867.957969][T23513] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1867.973758][T23513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.002910][T23513] usb 5-1: config 0 descriptor?? [ 1868.499836][T23513] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1868.608205][T26784] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1868.708074][T26791] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1868.724755][T23513] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1868.784527][T26784] bond7 (unregistering): Released all slaves [ 1869.008302][T23513] usb 6-1: Using ep0 maxpacket: 16 [ 1869.050658][T23513] usb 6-1: config 0 has no interfaces? [ 1869.108000][T23513] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1869.117755][T23513] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1869.125889][T23513] usb 6-1: Manufacturer: syz [ 1869.142505][T23513] usb 6-1: config 0 descriptor?? [ 1869.148123][ T6943] IPVS: ip_vs_send_async error -101 [ 1869.267138][T23514] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1869.733194][T23514] usb 3-1: config 0 has no interfaces? [ 1869.744396][T23514] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1869.757593][T23514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.767255][T23514] usb 3-1: Product: syz [ 1869.773870][T23514] usb 3-1: Manufacturer: syz [ 1869.779042][ C1] plantronics 0003:047F:FFFF.001C: usb_submit_urb(ctrl) failed: -1 [ 1869.792847][T23514] usb 3-1: SerialNumber: syz [ 1869.869864][T23514] usb 3-1: config 0 descriptor?? [ 1870.558049][T23515] usb 5-1: USB disconnect, device number 2 [ 1870.989646][T26816] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4413'. [ 1871.387023][T23552] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1871.510689][ T5905] usb 3-1: USB disconnect, device number 16 [ 1871.576392][T23552] usb 5-1: Using ep0 maxpacket: 8 [ 1871.592728][T23552] usb 5-1: config 162 has an invalid interface number: 166 but max is 0 [ 1871.607983][T23552] usb 5-1: config 162 has no interface number 0 [ 1871.614434][T23552] usb 5-1: config 162 interface 166 has no altsetting 0 [ 1871.652173][T23552] usb 5-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 1871.669249][T23515] hid_parser_main: 832 callbacks suppressed [ 1871.669263][T23515] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1871.743857][ T5905] usb 6-1: USB disconnect, device number 106 [ 1871.753326][T23552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.772111][T23552] usb 5-1: Product: syz [ 1871.782332][T23552] usb 5-1: Manufacturer: syz [ 1871.792905][T23515] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1871.824127][T23552] usb 5-1: SerialNumber: syz [ 1871.969791][T26831] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1872.103232][T23552] appledisplay 5-1:162.166: Could not find int-in endpoint [ 1872.134862][T23552] usbhid 5-1:162.166: couldn't find an input interrupt endpoint [ 1872.275765][T23552] usb 5-1: USB disconnect, device number 3 [ 1872.357145][T23554] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1872.534456][T23554] usb 6-1: Using ep0 maxpacket: 8 [ 1872.544087][T23554] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1872.570801][T23554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.588253][T23554] usb 6-1: Product: syz [ 1872.595431][T23554] usb 6-1: Manufacturer: syz [ 1872.631578][T23554] usb 6-1: SerialNumber: syz [ 1872.729347][T23554] usb 6-1: config 0 descriptor?? [ 1872.949598][T26824] hid-generic 0000:0000:0000.001D: pid 26824 passed too large report [ 1872.963264][T23554] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1873.168738][T26842] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1873.185537][T23554] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1873.237559][T23554] usb 6-1: USB disconnect, device number 107 [ 1873.578283][T23554] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1873.878750][T23554] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1873.917868][T23554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.944325][T23554] usb 5-1: config 0 descriptor?? [ 1873.971536][T23554] cp210x 5-1:0.0: cp210x converter detected [ 1873.987164][T23514] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1873.994851][T23515] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1874.207057][T23515] usb 2-1: Using ep0 maxpacket: 16 [ 1874.212361][T23514] usb 3-1: Using ep0 maxpacket: 16 [ 1874.221574][T23514] usb 3-1: config 0 has no interfaces? [ 1874.228833][T23514] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1874.238726][T23514] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1874.247797][T23515] usb 2-1: config 0 has no interfaces? [ 1874.260203][T23514] usb 3-1: Manufacturer: syz [ 1874.374425][T23515] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1874.419512][T23514] usb 3-1: config 0 descriptor?? [ 1874.430236][T26874] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1874.459119][T23515] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1874.471615][T23554] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1874.480072][T23515] usb 2-1: Manufacturer: syz [ 1874.530720][T23515] usb 2-1: config 0 descriptor?? [ 1874.821882][T23554] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1875.061192][T23554] usb 5-1: USB disconnect, device number 4 [ 1875.070223][T23554] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1875.108717][T23554] cp210x 5-1:0.0: device disconnected [ 1876.694042][T23554] usb 3-1: USB disconnect, device number 17 [ 1876.945883][T23515] usb 2-1: USB disconnect, device number 13 [ 1877.026412][T26925] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1877.237971][T26929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4449'. [ 1877.263656][T26929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4449'. [ 1877.685813][T26943] fuse: root generation should be zero [ 1877.759067][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1877.769741][T26948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1877.787601][T23554] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1877.854678][T26950] netlink: 'syz.5.4457': attribute type 1 has an invalid length. [ 1877.977584][T23554] usb 2-1: Using ep0 maxpacket: 8 [ 1877.986427][T23554] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1877.995777][T23554] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1878.007822][T23554] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1878.019024][T23554] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1878.071898][T23554] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1878.084334][T23554] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1878.114503][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1878.124870][T23554] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1878.135844][T23554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.156005][T26960] bond6: entered promiscuous mode [ 1878.176314][T26960] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1878.210460][T26963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1878.229511][T26963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1878.274112][T26960] bond6: (slave vti1): refused to change device type [ 1878.406562][T23552] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1878.431295][T23554] usb 2-1: usb_control_msg returned -32 [ 1878.455375][T23554] usbtmc 2-1:16.0: can't read capabilities [ 1878.597045][T23552] usb 5-1: Using ep0 maxpacket: 16 [ 1878.617641][T23552] usb 5-1: config 0 has no interfaces? [ 1878.639880][T23552] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1878.667327][T23552] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1878.692876][T23552] usb 5-1: Manufacturer: syz [ 1878.739389][T23552] usb 5-1: config 0 descriptor?? [ 1878.793256][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1878.805763][T26976] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1878.813207][T26976] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 1878.822452][T23552] usb 2-1: USB disconnect, device number 14 [ 1879.070086][T26978] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 1879.101351][T26978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1879.261725][T26981] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4467'. [ 1879.648582][T26993] delete_channel: no stack [ 1880.060378][T26998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1880.070296][T26998] openvswitch: netlink: Flow key attr not present in new flow. [ 1880.677400][T23554] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1880.848091][T23554] usb 6-1: Using ep0 maxpacket: 32 [ 1880.877213][T23554] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1880.897720][T23554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.909217][T23554] usb 6-1: Product: syz [ 1880.915298][T23554] usb 6-1: Manufacturer: syz [ 1880.955407][T23515] usb 5-1: USB disconnect, device number 5 [ 1880.996221][T23554] usb 6-1: SerialNumber: syz [ 1881.107618][T23554] usb 6-1: config 0 descriptor?? [ 1881.218721][T27032] IPVS: length: 149 != 17667290688 [ 1881.242806][T27037] netlink: 'syz.4.4488': attribute type 1 has an invalid length. [ 1881.373961][T23554] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 108 [ 1881.627671][T27048] delete_channel: no stack [ 1881.771366][T27051] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1881.998083][T23515] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1882.159110][T23515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.171222][T23515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.181779][T23515] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1882.250183][T23515] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1882.260219][T23515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.262033][T23554] usb 6-1: USB disconnect, device number 108 [ 1882.271765][T23515] usb 3-1: config 0 descriptor?? [ 1882.967202][T23552] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1883.016406][T23515] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1883.147253][T23552] usb 2-1: Using ep0 maxpacket: 16 [ 1883.296165][T27076] IPVS: length: 149 != 17667290688 [ 1883.312716][T23552] usb 2-1: config 0 has no interfaces? [ 1883.413174][T23552] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1883.430322][T23552] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1883.463447][T23552] usb 2-1: Manufacturer: syz [ 1883.502600][T23552] usb 2-1: config 0 descriptor?? [ 1883.518599][T23515] usb 3-1: USB disconnect, device number 18 [ 1883.525097][T27078] plantronics 0003:047F:FFFF.001E: usb_submit_urb(ctrl) failed: -19 [ 1883.573840][T27075] fido_id[27075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1883.887020][T23554] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1884.037428][T23554] usb 5-1: Using ep0 maxpacket: 32 [ 1884.043884][T23554] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.065085][T23554] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1884.097469][T23554] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1884.127191][T23554] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1884.153083][T23554] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1884.163531][T23554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.174056][T23554] usb 5-1: Product: syz [ 1884.218198][T23554] usb 5-1: Manufacturer: syz [ 1884.255767][T23554] usb 5-1: SerialNumber: syz [ 1884.286327][T27098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4506'. [ 1884.296721][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1884.313477][T23554] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input63 [ 1884.413360][T23515] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1884.517666][T23554] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1884.528138][T23554] (id 0x00) [ 1884.612792][T23515] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.624770][T23515] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1884.627014][T23554] rc_core: IR keymap rc-imon-pad not found [ 1884.642461][T23554] Registered IR keymap rc-empty [ 1884.642589][T23515] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1884.915045][T23554] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1885.077969][T23515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1885.107602][T23515] usb 3-1: SerialNumber: syz [ 1885.159965][T23554] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1885.189674][T23554] imon:send_packet: packet tx failed (-71) [ 1885.227153][T23554] imon 5-1:155.0: remote input dev register failed [ 1885.238401][T23554] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 1885.270819][T23554] imon 5-1:155.0: unable to initialize intf0, err 0 [ 1885.284495][T23554] imon:imon_probe: failed to initialize context! [ 1885.307781][T23554] imon 5-1:155.0: unable to register, err -19 [ 1885.315403][T23552] usb 2-1: USB disconnect, device number 15 [ 1885.368896][T23515] usb 3-1: 0:2 : does not exist [ 1885.480910][T23554] usb 5-1: USB disconnect, device number 6 [ 1885.531104][T23515] usb 3-1: USB disconnect, device number 19 [ 1886.085402][T27125] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1886.318120][T27129] sg_read: process 3973 (syz.2.4516) changed security contexts after opening file descriptor, this is not allowed. [ 1886.615026][T27145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1886.625663][T27145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1887.064268][T27153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1888.407133][T27175] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1889.067220][T23554] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1889.283445][T23554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.320335][T23554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.333493][T23554] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1889.344965][T23554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.373425][T23554] usb 6-1: config 0 descriptor?? [ 1889.667138][T23515] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1889.687083][T23514] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1889.799845][T23554] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 1889.817526][T23515] usb 3-1: Using ep0 maxpacket: 16 [ 1889.823735][T23554] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1889.828119][T23515] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1889.846151][T23515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.862364][T23515] usb 3-1: Product: syz [ 1889.868765][T23514] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1889.887216][T23515] usb 3-1: Manufacturer: syz [ 1889.891995][T23514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.900529][T23515] usb 3-1: SerialNumber: syz [ 1889.916228][T23515] usb 3-1: config 0 descriptor?? [ 1889.921381][T23514] usb 2-1: Product: syz [ 1889.925575][T23514] usb 2-1: Manufacturer: syz [ 1889.941057][T23515] appledisplay 3-1:0.0: Could not find int-in endpoint [ 1889.948482][T23514] usb 2-1: SerialNumber: syz [ 1889.968278][T23515] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1889.984236][T23514] usb 2-1: config 0 descriptor?? [ 1889.991668][T23514] hub 2-1:0.0: bad descriptor, ignoring hub [ 1889.999807][T23514] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1890.001134][T23554] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 1890.117229][T23552] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1890.204259][T23514] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1890.218020][T23514] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1890.229763][T23514] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1890.239520][T23514] usb 2-1: media controller created [ 1890.261618][T23514] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1890.277230][T23552] usb 5-1: Using ep0 maxpacket: 8 [ 1890.285745][T23552] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1890.294552][T23552] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1890.307301][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1890.315611][T23515] usb 3-1: USB disconnect, device number 20 [ 1890.321402][T23552] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1890.341234][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1890.361296][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1890.373994][T23514] DVB: Unable to find symbol dib7000p_attach() [ 1890.374246][T23552] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1890.381041][T23514] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1890.394914][T23552] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1890.465133][T23552] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1890.479632][T23552] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1890.480746][T23514] rc_core: IR keymap rc-dib0700-rc5 not found [ 1890.491044][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1890.491100][T23552] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1890.491124][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1890.491147][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1890.491171][T23552] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1890.491194][T23552] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1890.492410][T23552] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1890.528359][T23514] Registered IR keymap rc-empty [ 1890.538859][T23552] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1890.557826][T23514] dvb-usb: could not initialize remote control. [ 1890.559452][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1890.578345][T23514] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1890.621334][T27180] ------------[ cut here ]------------ [ 1890.623747][T23552] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1890.627372][T27180] usb 2-1: BOGUS control dir, pipe 80001080 doesn't match bRequestType c0 [ 1890.640025][T23552] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1890.648426][T27180] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.5.4529/27180 [ 1890.648472][T27180] Modules linked in: [ 1890.675761][T27180] CPU: 0 UID: 0 PID: 27180 Comm: syz.5.4529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1890.687477][T27180] Tainted: [L]=SOFTLOCKUP [ 1890.691818][T27180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1890.702412][T27180] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1890.708601][T27180] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1890.729632][T27180] RSP: 0018:ffffc90003747948 EFLAGS: 00010246 [ 1890.735736][T27180] RAX: 0000000000000000 RBX: ffff88805e549500 RCX: 0000000080001080 [ 1890.744298][T27180] RDX: ffff888086c99560 RSI: ffffffff8c7ee160 RDI: ffffffff901eacf0 [ 1890.753564][T27180] RBP: 1ffff1101239ff5c R08: 00000000000000c0 R09: 0000000000000000 [ 1890.762103][T27180] R10: ffffc90003747a40 R11: fffff520006e8f54 R12: ffff888072149100 [ 1890.770645][T27180] R13: ffff888091cffae0 R14: 0000000080001080 R15: ffff888086c99560 [ 1890.779480][T27180] FS: 00007eff157da6c0(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1890.789026][T27180] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1890.795626][T27180] CR2: 0000001b31e1cff8 CR3: 000000007c8a8000 CR4: 00000000003526f0 [ 1890.804192][T27180] Call Trace: [ 1890.808075][T27180] [ 1890.811031][T27180] ? __init_swait_queue_head+0xa9/0x150 [ 1890.817138][T27180] usb_start_wait_urb+0x12b/0x510 [ 1890.822186][T27180] ? rcu_is_watching+0x15/0xb0 [ 1890.827671][T27180] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1890.833235][T27180] ? trace_kmalloc+0x2a/0x110 [ 1890.838517][T27180] usb_control_msg+0x232/0x3e0 [ 1890.843306][T27180] dib0700_i2c_xfer+0xbb2/0xf80 [ 1890.848688][T27180] __i2c_transfer+0x79a/0x2020 [ 1890.853474][T27180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1890.859745][T27180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1890.865574][T27180] ? i2c_transfer+0xc8/0x2d0 [ 1890.870265][T27180] i2c_transfer+0x1cc/0x2d0 [ 1890.874794][T27180] i2cdev_ioctl_rdwr+0x460/0x740 [ 1890.879844][T27180] i2cdev_ioctl+0x6a5/0x880 [ 1890.884364][T27180] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1890.889955][T27180] ? __fget_files+0x3a0/0x420 [ 1890.894658][T27180] ? __fget_files+0x2a/0x420 [ 1890.899905][T27180] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1890.904875][T27180] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1890.910445][T27180] __se_sys_ioctl+0xfc/0x170 [ 1890.915060][T27180] do_syscall_64+0x14d/0xf80 [ 1890.920313][T27180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.926394][T27180] ? clear_bhb_loop+0x40/0x90 [ 1890.931523][T27180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.937721][T27180] RIP: 0033:0x7eff1499c629 [ 1890.942128][T27180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1890.962195][T27180] RSP: 002b:00007eff157da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1890.970876][T27180] RAX: ffffffffffffffda RBX: 00007eff14c15fa0 RCX: 00007eff1499c629 [ 1890.979253][T27180] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004 [ 1890.987633][T27180] RBP: 00007eff14a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1890.995600][T27180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1891.003977][T27180] R13: 00007eff14c16038 R14: 00007eff14c15fa0 R15: 00007eff14d3fa48 [ 1891.012233][T27180] [ 1891.015265][T27180] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1891.022532][T27180] CPU: 0 UID: 0 PID: 27180 Comm: syz.5.4529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1891.033458][T27180] Tainted: [L]=SOFTLOCKUP [ 1891.037776][T27180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1891.047814][T27180] Call Trace: [ 1891.051097][T27180] [ 1891.054029][T27180] vpanic+0x56c/0xa60 [ 1891.058014][T27180] ? __pfx__printk+0x10/0x10 [ 1891.062583][T27180] ? __pfx_vpanic+0x10/0x10 [ 1891.067075][T27180] ? is_bpf_text_address+0x292/0x2b0 [ 1891.072372][T27180] ? is_bpf_text_address+0x26/0x2b0 [ 1891.077576][T27180] panic+0xc5/0xd0 [ 1891.081290][T27180] ? __pfx_panic+0x10/0x10 [ 1891.085728][T27180] __warn+0x315/0x4f0 [ 1891.089728][T27180] ? usb_submit_urb+0x1052/0x18b0 [ 1891.094769][T27180] ? usb_submit_urb+0x1052/0x18b0 [ 1891.099786][T27180] __report_bug+0x29a/0x540 [ 1891.104288][T27180] ? usb_submit_urb+0x1052/0x18b0 [ 1891.109315][T27180] ? __pfx___report_bug+0x10/0x10 [ 1891.114350][T27180] ? lockdep_hardirqs_on+0x7a/0x110 [ 1891.119565][T27180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1891.125380][T27180] report_bug_entry+0x19a/0x290 [ 1891.130247][T27180] ? usb_submit_urb+0x1114/0x18b0 [ 1891.135267][T27180] ? usb_submit_urb+0x1119/0x18b0 [ 1891.140276][T27180] handle_bug+0xca/0x200 [ 1891.144527][T27180] exc_invalid_op+0x1a/0x50 [ 1891.149029][T27180] asm_exc_invalid_op+0x1a/0x20 [ 1891.153873][T27180] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1891.159516][T27180] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1891.179133][T27180] RSP: 0018:ffffc90003747948 EFLAGS: 00010246 [ 1891.185211][T27180] RAX: 0000000000000000 RBX: ffff88805e549500 RCX: 0000000080001080 [ 1891.193177][T27180] RDX: ffff888086c99560 RSI: ffffffff8c7ee160 RDI: ffffffff901eacf0 [ 1891.201139][T27180] RBP: 1ffff1101239ff5c R08: 00000000000000c0 R09: 0000000000000000 [ 1891.209107][T27180] R10: ffffc90003747a40 R11: fffff520006e8f54 R12: ffff888072149100 [ 1891.217072][T27180] R13: ffff888091cffae0 R14: 0000000080001080 R15: ffff888086c99560 [ 1891.225071][T27180] ? usb_submit_urb+0x10a3/0x18b0 [ 1891.230110][T27180] ? __init_swait_queue_head+0xa9/0x150 [ 1891.235671][T27180] usb_start_wait_urb+0x12b/0x510 [ 1891.240692][T27180] ? rcu_is_watching+0x15/0xb0 [ 1891.245450][T27180] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1891.251002][T27180] ? trace_kmalloc+0x2a/0x110 [ 1891.255693][T27180] usb_control_msg+0x232/0x3e0 [ 1891.260462][T27180] dib0700_i2c_xfer+0xbb2/0xf80 [ 1891.265346][T27180] __i2c_transfer+0x79a/0x2020 [ 1891.270131][T27180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1891.275947][T27180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1891.281779][T27180] ? i2c_transfer+0xc8/0x2d0 [ 1891.286381][T27180] i2c_transfer+0x1cc/0x2d0 [ 1891.290888][T27180] i2cdev_ioctl_rdwr+0x460/0x740 [ 1891.295830][T27180] i2cdev_ioctl+0x6a5/0x880 [ 1891.300334][T27180] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1891.305379][T27180] ? __fget_files+0x3a0/0x420 [ 1891.310065][T27180] ? __fget_files+0x2a/0x420 [ 1891.314666][T27180] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1891.319599][T27180] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1891.324616][T27180] __se_sys_ioctl+0xfc/0x170 [ 1891.329209][T27180] do_syscall_64+0x14d/0xf80 [ 1891.333803][T27180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.339860][T27180] ? clear_bhb_loop+0x40/0x90 [ 1891.344544][T27180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.350437][T27180] RIP: 0033:0x7eff1499c629 [ 1891.354850][T27180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.374459][T27180] RSP: 002b:00007eff157da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1891.382887][T27180] RAX: ffffffffffffffda RBX: 00007eff14c15fa0 RCX: 00007eff1499c629 [ 1891.390852][T27180] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004 [ 1891.398813][T27180] RBP: 00007eff14a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1891.406791][T27180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1891.414765][T27180] R13: 00007eff14c16038 R14: 00007eff14c15fa0 R15: 00007eff14d3fa48 [ 1891.422755][T27180] [ 1891.425929][T27180] Kernel Offset: disabled [ 1891.430239][T27180] Rebooting in 86400 seconds..