last executing test programs: 11.264078945s ago: executing program 2 (id=1896): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg(r2, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5218) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) r6 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 9.758278283s ago: executing program 2 (id=1903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x80, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0x8, 0x20000200, 0x6, 0x6, 0x43, "682341f2fd71a6a76177920ea7e60c1acfa4a5"}) close_range(r0, 0xffffffffffffffff, 0x0) 8.515701996s ago: executing program 2 (id=1906): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "0e3ad5de"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.747264773s ago: executing program 3 (id=1915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)={0xa0000004}) 7.554840895s ago: executing program 3 (id=1916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 7.085119349s ago: executing program 3 (id=1918): socket$kcm(0x1e, 0x4, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xde5f, 0x10100, 0x2, 0x33a}, &(0x7f0000002bc0)=0x0, &(0x7f0000002900)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.619487248s ago: executing program 3 (id=1921): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syncfs(r0) syz_usb_connect(0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f0001000000000904880005ffb717000905adda0000020154090501000004007f070905020c200009027e09050f042000410f04090505"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r1, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x370e1c00d8e55e33}, 0x0) 6.501630645s ago: executing program 1 (id=1922): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000000000fe, 0x0) creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) 6.403737716s ago: executing program 1 (id=1923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a100f7f9cbe68e9, &(0x7f0000000080)={0x400, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x4e20, 0x0, @remote}}}, 0x108) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c14"], 0x30}}, 0x0) mmap(&(0x7f000090a000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x71fb9000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000026000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x68, 0x0, 0x24}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 6.260155801s ago: executing program 4 (id=1924): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) 5.940580539s ago: executing program 4 (id=1925): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5.849449992s ago: executing program 2 (id=1926): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.415139462s ago: executing program 1 (id=1928): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x2) r3 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb40684cf628e5c91) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) syz_open_pts(0xffffffffffffffff, 0x141601) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) 4.734620627s ago: executing program 4 (id=1930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe6f, 0xb, 0x8001}, {0x3, 0x11, 0x40}}, {@pci, {0x0, 0xb, 0xfba2}, {0x0, 0x11, 0x5}}, {@pci, {0x0, 0xb, 0x2}, {0x0, 0x11, 0xffff}}, {@pci, {0x0, 0xb, 0x8000}, {0x0, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0x41ed, 0x10100, 0x8000003, 0x22d, 0x0, r3}, 0x0, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "6594844326f4a23ff094cd183f5a6a24"}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfc00) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000571c0220da040d39a893010203f95109d76014c2748dcfaffaf016860109021b0001000000000924000e0741db7c2ac1c6a7fb1ca03469d3d134a7ae09c617a26c198c65a93b393b"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000080)=@secondary) 4.340976835s ago: executing program 3 (id=1931): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.239572249s ago: executing program 0 (id=1932): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.165513977s ago: executing program 1 (id=1933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x2) r3 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb40684cf628e5c91) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) syz_open_pts(0xffffffffffffffff, 0x141601) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) 4.098654861s ago: executing program 0 (id=1934): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket(0x3, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x300, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xfffffffffffffda0, &(0x7f0000000340)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000080)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000580)={0x0, "3d44709977079e9db0379e4ef29dd422"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000001fc0)=ANY=[@ANYBLOB="420000000300000000000000000000002f70726f632f7379732f6e65742f697076342f76732f7365637572655f7463701082"], 0x42) 3.096215711s ago: executing program 4 (id=1935): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000001100)={0x0, 0xaee2, 0x0, 0x3, 0x1f0}, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4096, 0x1000) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 2.997956997s ago: executing program 1 (id=1936): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r4, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r4, 0x0, 0x7, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000300)='0\x00', 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r8, r8, 0x0, 0x4800000009) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socket$kcm(0x11, 0x3, 0x0) 2.191890362s ago: executing program 2 (id=1937): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r4, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r4, 0x0, 0x7, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000300)='0\x00', 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r8, r8, 0x0, 0x4800000009) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socket$kcm(0x11, 0x3, 0x0) 2.150611136s ago: executing program 4 (id=1938): fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x7, 0x1}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='0\x00', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) 1.600814793s ago: executing program 1 (id=1939): socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 970.172111ms ago: executing program 4 (id=1940): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x4f29, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x437, &(0x7f0000000280)={0x0, 0x9146, 0x1000, 0x7, 0xff, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x260102, 0x8d, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 877.606124ms ago: executing program 0 (id=1941): r0 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) 860.449835ms ago: executing program 0 (id=1942): mq_open(0x0, 0x42, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x3f, 0x0, 0x0) 469.890311ms ago: executing program 0 (id=1943): r0 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0x8f}) 456.179482ms ago: executing program 2 (id=1944): setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x2) socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb40684cf628e5c91) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) 441.509257ms ago: executing program 3 (id=1945): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x12000, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) 0s ago: executing program 0 (id=1946): socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0], 0x54}}, 0x20000000) kernel console output (not intermixed with test programs): [ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 557.411052][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 557.521015][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 557.550846][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 557.594967][ T24] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 557.639516][ T24] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 557.648037][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 557.657198][ T24] usb 2-1: config 166 has no interface number 0 [ 557.664101][ T24] usb 2-1: config 166 has no interface number 1 [ 557.670421][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 557.688404][ T5941] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 557.702400][ T5941] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 557.712870][ T5941] usb 3-1: cp210x converter now attached to ttyUSB0 [ 557.832685][ T5941] usb 3-1: USB disconnect, device number 49 [ 557.838724][ T24] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 557.861838][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 557.871553][ T24] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 557.892450][ T24] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 557.892690][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 558.069098][ T5941] cp210x 3-1:0.0: device disconnected [ 558.084008][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 558.256293][ T24] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 558.322746][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 558.418557][ T24] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 558.494202][ T24] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 558.521001][ T24] usb 2-1: config 166 interface 177 has no altsetting 0 [ 558.557518][ T24] usb 2-1: config 166 interface 34 has no altsetting 0 [ 558.621626][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 558.640830][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.659583][ T24] usb 2-1: Product: syz [ 558.665039][ T24] usb 2-1: Manufacturer: syz [ 558.679905][ T24] usb 2-1: SerialNumber: syz [ 558.916109][ T24] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 558.991059][ T5941] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 559.116810][ T24] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 559.162674][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 559.169969][ T5941] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 559.183837][ T5941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 559.195329][ T5941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.218211][ T5941] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.234428][ T5941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.243768][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.345051][ T24] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 559.362067][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1332'. [ 559.432218][ T979] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 559.458684][ T5941] usb 4-1: GET_CAPABILITIES returned 0 [ 559.464606][ T5941] usbtmc 4-1:16.0: can't read capabilities [ 559.470813][ T5916] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 559.517965][ T24] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 559.525218][ T24] usb 2-1: No valid video chain found. [ 559.535312][ T24] usb 2-1: USB disconnect, device number 43 [ 559.645369][ T979] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 559.654798][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.688410][ T979] usb 3-1: Product: syz [ 559.696009][ T5941] usb 4-1: USB disconnect, device number 50 [ 559.702429][ T979] usb 3-1: Manufacturer: syz [ 559.707298][ T979] usb 3-1: SerialNumber: syz [ 559.710808][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 559.725564][ T979] usb 3-1: config 0 descriptor?? [ 559.739372][T12302] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 559.739581][ T979] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 050 [ 559.760842][ T5958] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 559.791351][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 559.801719][ T5916] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 559.809321][ T5916] usb 5-1: can't read configurations, error -71 [ 559.920885][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 559.927700][ T5958] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 559.937631][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 559.947321][ T5958] usb 1-1: can't read configurations, error -61 [ 560.081010][ T5958] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 560.142212][ T979] (null): failure reading functionality [ 560.150010][ T979] i2c i2c-1: connected i2c-tiny-usb device [ 560.252394][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 560.261499][ T5958] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 560.283737][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 560.300743][ T5958] usb 1-1: can't read configurations, error -61 [ 560.321025][ T5958] usb usb1-port1: attempt power cycle [ 560.362852][ T979] usb 3-1: USB disconnect, device number 50 [ 560.671109][ T5958] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 560.712570][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 560.719703][ T5958] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 560.730387][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 560.766814][ T5958] usb 1-1: can't read configurations, error -61 [ 560.822310][T12327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1337'. [ 560.990794][ T5958] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 561.022984][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 561.035500][ T5958] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 561.085671][ T5958] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 561.099027][ T5958] usb 1-1: can't read configurations, error -61 [ 561.168095][ T5958] usb usb1-port1: unable to enumerate USB device [ 561.522363][ T5916] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 561.589902][T12339] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1343'. [ 561.702998][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 561.714015][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 561.723782][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.734577][ T5916] usb 3-1: Product: syz [ 561.738770][ T5916] usb 3-1: Manufacturer: syz [ 561.744085][ T5916] usb 3-1: SerialNumber: syz [ 561.751395][ T5916] usb 3-1: config 0 descriptor?? [ 561.781305][ T36] net_ratelimit: 37 callbacks suppressed [ 561.781327][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 561.794518][ T5958] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 561.810660][T12352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.910965][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 561.950758][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 561.957497][ T5958] usb 5-1: unable to get BOS descriptor or descriptor too short [ 561.967949][ T5916] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 561.977251][ T5958] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 561.985544][ T5958] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 561.994565][ T5958] usb 5-1: config 4 has no interface number 0 [ 562.003966][ T5958] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 562.013158][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.021257][ T5958] usb 5-1: Product: syz [ 562.025473][ T5958] usb 5-1: Manufacturer: syz [ 562.030098][ T5958] usb 5-1: SerialNumber: syz [ 562.030984][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 562.060923][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 562.151000][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 562.223186][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 562.234247][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.249950][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.261714][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 562.272175][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 562.288279][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 562.298397][ T5958] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 562.304976][ T5958] usb 5-1: No valid video chain found. [ 562.310547][ T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 562.322190][ T5958] usb 5-1: USB disconnect, device number 50 [ 562.330823][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 562.339084][ T24] usb 2-1: Manufacturer: syz [ 562.357040][ T24] usb 2-1: config 0 descriptor?? [ 562.371890][ T5916] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 562.384640][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 562.391426][ T5916] usb 3-1: USB disconnect, device number 51 [ 562.511423][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 562.620847][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 562.731028][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 562.787177][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 562.796771][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 562.813441][ T24] usb 2-1: USB disconnect, device number 44 [ 563.043256][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.049730][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.190821][ T5916] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 563.270781][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 563.279473][ T5958] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 563.380804][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 563.387309][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.398716][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.419076][ T5916] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 563.428256][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.439766][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 563.447138][ T5958] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 563.456961][ T5916] usb 1-1: config 0 descriptor?? [ 563.471053][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.479255][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.513935][ T5958] usb 3-1: config 0 descriptor?? [ 563.520538][ T24] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 563.533181][ T5958] cp210x 3-1:0.0: cp210x converter detected [ 563.551044][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.560904][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.570370][ T24] usb 5-1: Product: syz [ 563.575160][ T24] usb 5-1: Manufacturer: syz [ 563.583131][ T24] usb 5-1: SerialNumber: syz [ 563.630844][ T3800] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 563.790946][ T3800] usb 2-1: Using ep0 maxpacket: 8 [ 563.797818][ T3800] usb 2-1: config 10 has an invalid interface number: 211 but max is 0 [ 563.806706][ T3800] usb 2-1: config 10 has no interface number 0 [ 563.812996][ T3800] usb 2-1: config 10 interface 211 altsetting 14 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 563.824672][ T3800] usb 2-1: config 10 interface 211 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 563.836827][ T3800] usb 2-1: config 10 interface 211 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 563.848175][ T3800] usb 2-1: config 10 interface 211 altsetting 14 endpoint 0x9 has an invalid bInterval 222, changing to 7 [ 563.859785][ T24] cdc_ncm 5-1:1.0: bind() failure [ 563.864890][ T3800] usb 2-1: config 10 interface 211 has no altsetting 0 [ 563.874671][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 563.881842][T12385] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 563.889613][ T24] cdc_ncm 5-1:1.1: bind() failure [ 563.897520][ T3800] usb 2-1: string descriptor 0 read error: -22 [ 563.907402][ T3800] usb 2-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=99.7e [ 563.919070][ T5916] playstation 0003:054C:05C4.0010: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 563.931406][ T24] usb 5-1: USB disconnect, device number 51 [ 563.938236][ T3800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.950295][ T5958] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 563.962968][ T3800] appletouch 2-1:10.211: Could not find int-in endpoint [ 563.976890][ T5958] usb 3-1: cp210x converter now attached to ttyUSB0 [ 563.985270][ T3800] appletouch 2-1:10.211: probe with driver appletouch failed with error -5 [ 564.001738][ T3800] usbhid 2-1:10.211: couldn't find an input interrupt endpoint [ 564.052083][T12385] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 564.060370][T12385] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 564.072443][T12385] usb 4-1: config 0 interface 0 has no altsetting 0 [ 564.081191][T12385] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 564.090449][T12385] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 564.099361][T12385] usb 4-1: Product: syz [ 564.103618][T12385] usb 4-1: Manufacturer: syz [ 564.108244][T12385] usb 4-1: SerialNumber: syz [ 564.113015][ T5916] playstation 0003:054C:05C4.0010: Invalid reportID received, expected 18 got 0 [ 564.123485][ T5916] playstation 0003:054C:05C4.0010: Failed to retrieve DualShock4 pairing info: -22 [ 564.133749][T12385] usb 4-1: config 0 descriptor?? [ 564.140214][T12385] hub 4-1:0.0: bad descriptor, ignoring hub [ 564.146333][ T5916] playstation 0003:054C:05C4.0010: Failed to get MAC address from DualShock4 [ 564.155196][T12385] hub 4-1:0.0: probe with driver hub failed with error -5 [ 564.164514][T12385] usb 4-1: selecting invalid altsetting 0 [ 564.170828][ T5916] playstation 0003:054C:05C4.0010: Failed to create dualshock4. [ 564.174237][ T5941] usb 3-1: USB disconnect, device number 52 [ 564.190784][ T5916] playstation 0003:054C:05C4.0010: probe with driver playstation failed with error -22 [ 564.197849][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 564.222307][ T5916] usb 2-1: USB disconnect, device number 45 [ 564.240464][ T5941] cp210x 3-1:0.0: device disconnected [ 564.335800][T12385] usb 1-1: USB disconnect, device number 49 [ 564.610813][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 564.760880][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 564.773257][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 564.802034][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 564.815065][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 564.828146][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 564.839739][ T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 564.860918][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.885761][ T24] usb 5-1: Product: syz [ 564.889977][ T24] usb 5-1: Manufacturer: syz [ 564.898419][ T24] usb 5-1: SerialNumber: syz [ 564.908632][ T24] usb 5-1: config 0 descriptor?? [ 564.963554][T12413] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 565.070808][T12387] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 565.136390][ T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 565.140980][ T5941] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 565.147431][ T5218] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.163912][ T5218] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.180856][T12385] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 565.211998][ T5877] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.229353][ T5218] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.255996][ T5218] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.267308][ T5218] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.276597][ T5218] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.303323][ T5941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.314792][ T5941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 565.326971][ T5941] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 565.338910][ T5941] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 565.345963][T12392] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 565.365568][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.366053][ T3800] usb 5-1: USB disconnect, device number 52 [ 565.375973][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.381099][T12385] usb 3-1: Using ep0 maxpacket: 32 [ 565.389445][ T5941] usb 2-1: Product: syz [ 565.399052][ T5941] usb 2-1: Manufacturer: syz [ 565.404338][T12385] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 565.404853][ T5941] usb 2-1: SerialNumber: syz [ 565.417117][T12385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.429339][T12407] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 565.441531][T12385] usb 3-1: config 0 descriptor?? [ 565.448400][ T5941] cdc_mbim 2-1:1.0: skipping garbage [ 565.520800][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 565.641331][T12407] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 565.648598][T12407] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 565.653910][T12385] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 565.666781][T12385] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 565.678512][T12385] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 565.681217][ T5861] usb 4-1: USB disconnect, device number 51 [ 565.694156][T12385] usb 3-1: media controller created [ 565.700240][ T24] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 565.719961][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.731453][T12385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.744162][ T24] usb 1-1: config 0 descriptor?? [ 565.759693][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 565.864343][T12385] az6027: usb out operation failed. (-71) [ 565.870529][T12385] az6027: usb out operation failed. (-71) [ 565.878095][T12385] stb0899_attach: Driver disabled by Kconfig [ 565.884806][T12385] az6027: no front-end attached [ 565.884806][T12385] [ 565.892540][T12385] az6027: usb out operation failed. (-71) [ 565.898317][T12385] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 565.906963][T12385] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 565.921147][T12385] dvb-usb: schedule remote query interval to 400 msecs. [ 565.929312][T12385] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 565.942851][T12385] usb 3-1: USB disconnect, device number 53 [ 566.034967][T12385] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 566.259727][T12407] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 566.267511][T12407] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 566.294092][ T5941] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 566.308812][ T5941] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 566.338103][ T5941] wwan wwan0: port wwan0mbim0 attached [ 566.373828][ T5941] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 9a:f9:8e:f0:92:ce [ 566.373938][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1383'. [ 566.394684][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 566.402554][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 566.409690][ T24] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 566.427671][ T24] usb 1-1: USB disconnect, device number 50 [ 566.552908][T12385] usb 2-1: USB disconnect, device number 46 [ 566.573965][T12385] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 566.722584][T12385] wwan wwan0: port wwan0mbim0 disconnected [ 566.802249][ T59] net_ratelimit: 39 callbacks suppressed [ 566.802271][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 566.952855][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 567.064624][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 567.211875][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 567.329245][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 567.425059][T12478] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1390'. [ 567.520858][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.543773][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 567.670839][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 567.702326][T12490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 567.791441][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 567.901749][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 567.970881][T12385] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 568.150862][T12385] usb 4-1: Using ep0 maxpacket: 8 [ 568.157817][T12385] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 568.169234][T12385] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 568.202974][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 568.264624][T12385] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.308741][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 568.366839][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 568.416047][T12385] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 568.466148][T12385] usb 4-1: config 168 interface 0 has no altsetting 0 [ 568.505449][T12385] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 568.515298][T12518] netlink: 'syz.0.1403': attribute type 3 has an invalid length. [ 568.552642][T12385] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 568.658790][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 568.718393][T12524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.795138][T12385] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.905726][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 569.030433][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.069434][T12385] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 569.110830][ T5861] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 569.160165][T12385] usb 4-1: config 168 interface 0 has no altsetting 0 [ 569.205537][T12385] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 569.220782][T12385] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 569.233192][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 569.282180][ T5861] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 569.341571][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.353740][T12385] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.368261][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 569.457055][T12385] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.478875][T12385] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 569.478879][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.478911][T12385] usb 4-1: config 168 interface 0 has no altsetting 0 [ 569.504348][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 569.541348][ T5861] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 569.550855][ T5861] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 569.558922][ T5861] usb 1-1: Manufacturer: syz [ 569.582129][ T5861] usb 1-1: config 0 descriptor?? [ 569.660100][T12385] usb 4-1: string descriptor 0 read error: -22 [ 569.667968][T12385] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 569.715526][T12385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.776199][T12385] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 570.032357][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 570.041284][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 570.047326][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 570.063242][ T5861] usb 1-1: USB disconnect, device number 51 [ 570.185165][ T5941] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 570.300952][ T979] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 570.435256][ T5941] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 570.447238][ T5941] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 570.462362][ T5941] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 570.480392][ T5941] usb 5-1: config 220 has no interface number 2 [ 570.492019][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 570.507936][ T979] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 570.541322][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 570.596085][ T5941] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 570.609784][ T979] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.623979][ T5941] usb 5-1: config 220 interface 0 has no altsetting 0 [ 570.634536][ T5941] usb 5-1: config 220 interface 76 has no altsetting 0 [ 570.645289][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 570.674180][ T5941] usb 5-1: config 220 interface 1 has no altsetting 0 [ 570.765376][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 570.833291][ T979] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 570.841564][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 570.841702][ T5941] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 570.862695][ T979] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.875374][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 570.886853][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.896755][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 570.908437][ T5941] usb 5-1: Product: syz [ 570.928392][ T5941] usb 5-1: Manufacturer: syz [ 570.933426][ T5941] usb 5-1: SerialNumber: syz [ 570.941581][ T979] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 570.967894][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 570.992046][T12551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.009078][ T979] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.183563][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.204038][ T5941] usb 5-1: selecting invalid altsetting 0 [ 571.215275][ T5941] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 571.225316][ T979] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 571.239501][ T5941] usb 5-1: No valid video chain found. [ 571.261404][ T979] usb 3-1: string descriptor 0 read error: -22 [ 571.267812][ T5941] usb 5-1: selecting invalid altsetting 0 [ 571.277164][ T979] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 571.286419][ T5941] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 571.295874][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.305433][ T5941] usb 5-1: USB disconnect, device number 53 [ 571.342143][ T979] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 571.362701][T12552] CIFS: VFS: Malformed UNC in devname [ 571.747017][ T5941] usb 3-1: USB disconnect, device number 54 [ 571.910992][ T12] net_ratelimit: 36 callbacks suppressed [ 571.911009][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 572.040869][ T3800] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 572.100968][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 572.190805][ T3800] usb 5-1: Using ep0 maxpacket: 16 [ 572.201164][ T3800] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.212491][ T3800] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.222079][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 572.233863][ T3800] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.274132][ T3800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.282236][ T3800] usb 5-1: Product: syz [ 572.289458][ T3800] usb 5-1: Manufacturer: syz [ 572.296830][ T3800] usb 5-1: SerialNumber: syz [ 572.330906][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 572.461497][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 572.489653][T12568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1417'. [ 572.579662][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 572.701186][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 572.719081][ T3800] usb 5-1: 0:2 : does not exist [ 572.724123][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 572.820819][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 572.940912][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 573.128914][ T3800] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 573.152635][ T3800] usb 5-1: USB disconnect, device number 54 [ 573.237265][T12578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1420'. [ 573.334495][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.371816][T12385] usb 4-1: USB disconnect, device number 52 [ 573.553784][T12585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.890934][ T3800] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 573.898691][T12385] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 574.055324][ T3800] usb 1-1: config 0 has no interfaces? [ 574.060980][T12385] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 574.075770][ T3800] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 574.091364][T12385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.106805][ T3800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.115290][T12385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.125443][ T3800] usb 1-1: Product: syz [ 574.129666][ T3800] usb 1-1: Manufacturer: syz [ 574.134510][ T3800] usb 1-1: SerialNumber: syz [ 574.139418][T12385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 574.153817][ T3800] usb 1-1: config 0 descriptor?? [ 574.167518][T12385] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 574.177771][T12385] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 574.186352][T12385] usb 4-1: Manufacturer: syz [ 574.203647][T12385] usb 4-1: config 0 descriptor?? [ 574.406518][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1424'. [ 574.426001][ T5941] usb 1-1: USB disconnect, device number 52 [ 574.647945][T12385] usbhid 4-1:0.0: can't add hid device: -71 [ 574.655624][T12385] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 574.667601][T12385] usb 4-1: USB disconnect, device number 53 [ 574.839212][T12617] ip6gretap0: entered promiscuous mode [ 574.851400][T12617] macsec1: entered promiscuous mode [ 574.870892][T12617] ip6gretap0: left promiscuous mode [ 575.223589][T12631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.369610][T12637] CIFS: VFS: Malformed UNC in devname [ 575.800798][ T5941] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 576.612255][ T5941] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 576.620604][ T5941] usb 4-1: config 0 has no interface number 0 [ 576.668361][ T5941] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 576.722051][ T5941] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 576.753246][ T5941] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 576.756598][T12655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.815066][ T5941] usb 4-1: config 0 interface 20 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 576.872556][ T5941] usb 4-1: config 0 interface 20 has no altsetting 0 [ 576.883704][ T5941] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 576.893805][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.912743][ T5941] usb 4-1: Product: syz [ 576.921419][ T5941] usb 4-1: Manufacturer: syz [ 576.928541][ T5941] usb 4-1: SerialNumber: syz [ 576.944828][ T5941] usb 4-1: config 0 descriptor?? [ 577.013127][ T2957] net_ratelimit: 31 callbacks suppressed [ 577.013148][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 577.141926][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 577.158738][ T5941] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 577.167302][T12677] usb usb8: usbfs: process 12677 (syz.0.1456) did not claim interface 0 before use [ 577.173453][ T5941] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 577.184956][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 577.204916][ T5941] keyspan 4-1:0.20: unsupported endpoint type 0 [ 577.213704][ T5941] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 577.223969][ T5941] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 577.231841][ T5941] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 577.231900][ T5941] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 577.231955][ T5941] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 577.233419][ T5941] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 577.236747][ T5941] usb 4-1: USB disconnect, device number 54 [ 577.250897][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 577.273197][ T5941] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 577.309489][ T5941] keyspan 4-1:0.20: device disconnected [ 577.349252][T12683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.360818][ T979] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 577.390838][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 577.398157][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 577.410500][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 577.429865][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 577.451991][ T9] usb 5-1: Product: syz [ 577.476502][ T9] usb 5-1: Manufacturer: syz [ 577.481838][ T9] usb 5-1: SerialNumber: syz [ 577.513884][T12687] CIFS: VFS: Malformed UNC in devname [ 577.920820][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.118318][ T979] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.129177][ T9] usb 5-1: config 0 descriptor?? [ 578.129988][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 578.134248][ T979] usb 3-1: config 0 has no interface number 0 [ 578.161770][ T979] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 578.173903][T12659] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 578.181445][ T979] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 578.226526][ T979] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 578.250824][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.263221][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 578.270355][ T979] usb 3-1: config 0 descriptor?? [ 578.276080][T12671] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 578.294656][ T979] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 578.411780][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 578.425937][ T979] usb 5-1: USB disconnect, device number 55 [ 578.515304][ T9] usb 3-1: USB disconnect, device number 55 [ 578.543908][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 578.631176][T12709] CIFS: VFS: Malformed UNC in devname [ 578.960814][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.233032][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 579.330217][T12712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.341354][ T5916] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 579.505080][ T5916] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 579.518873][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.528164][ T5916] usb 4-1: Product: syz [ 579.533742][ T5916] usb 4-1: Manufacturer: syz [ 579.538887][ T5916] usb 4-1: SerialNumber: syz [ 579.554196][ T5916] usb 4-1: config 0 descriptor?? [ 579.681281][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 579.694282][ T5916] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 579.839717][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 579.852293][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.863585][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.873958][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 579.935855][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 579.945122][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 579.953306][ T9] usb 1-1: Manufacturer: syz [ 579.959982][ T9] usb 1-1: config 0 descriptor?? [ 580.264357][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1477'. [ 580.414476][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 580.420577][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 580.440436][ T9] usb 1-1: USB disconnect, device number 53 [ 580.727456][ T5916] gspca_sunplus: reg_r err -71 [ 580.732382][ T5916] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 580.782084][ T5916] usb 4-1: USB disconnect, device number 55 [ 581.473472][T12750] netlink: 'syz.0.1481': attribute type 2 has an invalid length. [ 581.770268][T12757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1482'. [ 581.880778][T12385] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 582.030888][T12385] usb 5-1: Using ep0 maxpacket: 16 [ 582.037292][ T12] net_ratelimit: 20 callbacks suppressed [ 582.037313][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 582.080830][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 582.199707][ T3800] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 582.250012][T12385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.277771][T12385] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.352760][T12385] usb 5-1: config 0 interface 0 has no altsetting 0 [ 582.377741][T12385] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 582.383791][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 582.406223][T12385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.421937][ T3800] usb 4-1: Using ep0 maxpacket: 32 [ 582.433822][ T3800] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 582.452738][T12385] usb 5-1: config 0 descriptor?? [ 582.472194][ T5916] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 582.506521][ T3800] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 582.522771][ T3800] usb 4-1: can't read configurations, error -61 [ 582.540792][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 582.650784][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 582.685200][ T3800] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 582.703965][ T5916] usb 3-1: config 0 has no interfaces? [ 582.734610][ T5916] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 582.744501][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.752698][ T5916] usb 3-1: Product: syz [ 582.757235][ T5916] usb 3-1: Manufacturer: syz [ 582.763038][ T5916] usb 3-1: SerialNumber: syz [ 582.776727][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 582.793193][ T5916] usb 3-1: config 0 descriptor?? [ 582.850811][ T3800] usb 4-1: Using ep0 maxpacket: 32 [ 582.857414][ T3800] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 582.883592][ T3800] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 582.892741][ T3800] usb 4-1: can't read configurations, error -61 [ 582.901397][T12385] apple 0003:05AC:0247.0011: fixing up Magic Keyboard JIS report descriptor [ 582.913857][ T3800] usb usb4-port1: attempt power cycle [ 582.920038][T12385] apple 0003:05AC:0247.0011: unexpected long global item [ 582.927400][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 582.936798][T12385] apple 0003:05AC:0247.0011: parse failed [ 582.946639][T12780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.960414][T12385] apple 0003:05AC:0247.0011: probe with driver apple failed with error -22 [ 583.055161][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 583.107721][ T979] usb 5-1: USB disconnect, device number 56 [ 583.120828][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.148994][T12782] CIFS: VFS: Malformed UNC in devname [ 583.590826][ T3800] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 583.611367][ T3800] usb 4-1: Using ep0 maxpacket: 32 [ 583.620048][ T3800] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 583.632102][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 583.902125][ T3800] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 583.916782][ T3800] usb 4-1: can't read configurations, error -61 [ 584.100892][ T3800] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 584.133316][ T3800] usb 4-1: Using ep0 maxpacket: 32 [ 584.139936][ T3800] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 584.155672][ T3800] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 584.164832][ T3800] usb 4-1: can't read configurations, error -61 [ 584.172961][ T3800] usb usb4-port1: unable to enumerate USB device [ 584.196600][T12793] bond0: entered allmulticast mode [ 584.250410][T12793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.707272][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1501'. [ 585.420833][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 585.530821][ T979] usb 3-1: USB disconnect, device number 56 [ 585.586465][ T24] usb 4-1: config 0 has no interfaces? [ 585.594625][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 585.611660][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.625639][ T24] usb 4-1: Product: syz [ 585.630102][ T24] usb 4-1: Manufacturer: syz [ 585.649622][ T24] usb 4-1: SerialNumber: syz [ 585.666148][ T24] usb 4-1: config 0 descriptor?? [ 585.890894][ T979] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 585.905627][T12812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1502'. [ 586.035711][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.061192][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.076932][ T979] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 586.094971][ T979] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 586.120137][ T979] usb 3-1: config 0 has no interface number 0 [ 586.130575][ T979] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 586.141301][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.154041][ T979] usb 3-1: Product: syz [ 586.158247][ T979] usb 3-1: Manufacturer: syz [ 586.279045][ T979] usb 3-1: SerialNumber: syz [ 586.310659][ T979] usb 3-1: config 0 descriptor?? [ 586.394769][T12831] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 586.620912][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 586.662005][ T5941] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 586.740953][ T979] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 586.749482][ T979] usb 3-1: No valid video chain found. [ 586.757641][ T979] usb 3-1: USB disconnect, device number 57 [ 586.771413][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 586.779279][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 586.787695][ T9] usb 2-1: config 0 has no interface number 0 [ 586.793951][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 586.805725][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 586.817814][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 586.839338][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 586.930623][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 586.944996][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 586.957153][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.967713][T12841] netlink: 'syz.4.1512': attribute type 2 has an invalid length. [ 586.982116][ T9] usb 2-1: config 0 descriptor?? [ 587.004585][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 587.106202][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 587.115338][ T5941] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 587.123419][ T5941] usb 1-1: can't read configurations, error -71 [ 587.131438][ T49] net_ratelimit: 29 callbacks suppressed [ 587.131453][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 587.254632][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 587.263568][ T9] usb 2-1: USB disconnect, device number 47 [ 587.269575][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 587.276392][T12833] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19 [ 587.290813][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 587.299737][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 587.371011][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 587.408182][T12845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1513'. [ 587.482693][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 587.600949][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 587.712303][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 587.830841][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 587.920359][ T9] usb 4-1: USB disconnect, device number 60 [ 587.941088][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 588.051555][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 588.431877][T12870] netlink: 'syz.0.1521': attribute type 2 has an invalid length. [ 588.634093][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 588.843240][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 588.870114][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 588.878507][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 588.920862][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 589.035010][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.112478][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.208944][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.229574][ T9] usb 3-1: config 0 descriptor?? [ 589.245386][T12875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 589.662462][ T9] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 589.741607][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 589.940845][T12385] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 589.953040][ T9] usb 3-1: USB disconnect, device number 58 [ 590.091387][T12385] usb 2-1: Using ep0 maxpacket: 8 [ 590.099054][T12385] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 590.108661][T12385] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.123371][T12385] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.133841][T12385] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.145847][T12385] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.159673][T12385] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.170924][T12385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.250795][ T3800] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 590.423459][ T3800] usb 1-1: Using ep0 maxpacket: 16 [ 590.565519][T12385] usb 2-1: usb_control_msg returned -32 [ 590.572551][ T3800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.584615][T12385] usbtmc 2-1:16.0: can't read capabilities [ 590.645046][ T3800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.876745][T12933] netlink: 202368 bytes leftover after parsing attributes in process `syz.3.1543'. [ 590.880117][ T3800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 590.897903][ T3800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 590.908026][ T3800] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.994556][ T3800] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 591.033652][ T3800] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 591.058508][ T3800] usb 1-1: Manufacturer: syz [ 591.077175][ T3800] usb 1-1: config 0 descriptor?? [ 591.125198][ T9] usb 2-1: USB disconnect, device number 48 [ 591.218044][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1544'. [ 591.756073][ T3800] rc_core: IR keymap rc-hauppauge not found [ 591.780057][ T3800] Registered IR keymap rc-empty [ 591.804490][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 591.856533][T12948] netlink: 'syz.4.1548': attribute type 29 has an invalid length. [ 591.888438][T12948] netlink: 'syz.4.1548': attribute type 29 has an invalid length. [ 591.947453][T12948] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1548'. [ 591.964093][T12948] unsupported nla_type 58 [ 591.987491][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.011420][T12951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1547'. [ 592.091559][ T3800] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 592.201722][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1549'. [ 592.298742][ T3800] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 592.324586][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.350918][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.351108][ T59] net_ratelimit: 34 callbacks suppressed [ 592.351126][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 592.381978][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.401182][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.420938][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.440935][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.460911][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.480885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.521010][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.541734][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 592.641646][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.671428][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.741158][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 592.767892][ T3800] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.805856][ T3800] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 592.851949][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 592.860863][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 592.870091][ T3800] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 592.960907][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 593.033380][ T9] usb 4-1: config 0 has no interfaces? [ 593.041979][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 593.052240][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.060236][ T9] usb 4-1: Product: syz [ 593.080928][ T3800] usb 1-1: USB disconnect, device number 56 [ 593.096690][ T9] usb 4-1: Manufacturer: syz [ 593.107222][ T9] usb 4-1: SerialNumber: syz [ 593.120875][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 593.164344][ T9] usb 4-1: config 0 descriptor?? [ 593.240969][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 593.351577][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 593.520917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.080860][ T3800] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 594.260958][ T3800] usb 2-1: Using ep0 maxpacket: 32 [ 594.289012][ T3800] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 594.314035][ T3800] usb 2-1: config 0 has no interface number 0 [ 594.339497][ T3800] usb 2-1: config 0 interface 12 has no altsetting 0 [ 594.358552][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1560'. [ 594.381425][ T3800] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 594.598908][ T3800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.610341][ T3800] usb 2-1: Product: syz [ 594.617408][ T3800] usb 2-1: Manufacturer: syz [ 594.629561][ T3800] usb 2-1: SerialNumber: syz [ 594.651214][ T3800] usb 2-1: config 0 descriptor?? [ 595.497752][T12995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.704589][T13002] netlink: 'syz.4.1564': attribute type 22 has an invalid length. [ 595.750906][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 595.903932][T13002] netlink: 'syz.4.1564': attribute type 22 has an invalid length. [ 595.904491][ T2994] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.927201][ T3800] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 595.940934][ T3800] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 595.958577][ T3800] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 595.965769][ T10] usb 4-1: USB disconnect, device number 61 [ 596.006383][ T2994] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.025556][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 596.038473][ T3800] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 596.047003][ T2994] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.079370][ T2994] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.088612][ T3800] usb 2-1: USB disconnect, device number 49 [ 596.210801][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 596.379173][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 596.388316][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.413035][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.449761][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 596.459872][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.473109][ T9] usb 1-1: Product: syz [ 596.477640][ T9] usb 1-1: Manufacturer: syz [ 596.515720][ T9] usb 1-1: SerialNumber: syz [ 596.536083][ T9] usb 1-1: config 0 descriptor?? [ 596.573881][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1567'. [ 596.750075][ T10] usb 1-1: USB disconnect, device number 57 [ 596.831018][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 596.992614][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.003084][ T9] usb 3-1: config 0 has no interfaces? [ 597.009073][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 597.090565][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.129845][ T9] usb 3-1: config 0 descriptor?? [ 597.381210][ T2957] net_ratelimit: 32 callbacks suppressed [ 597.381234][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 597.452956][T12385] usb 3-1: USB disconnect, device number 59 [ 597.503505][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 597.641140][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 597.670864][ T3800] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 597.680818][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 597.760927][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 597.820977][ T3800] usb 1-1: Using ep0 maxpacket: 8 [ 597.835072][ T3800] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 597.843949][ T3800] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 597.857166][ T3800] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 597.867977][ T3800] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 597.878500][ T3800] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.892050][ T3800] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 597.901687][ T3800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.911835][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 597.987803][T13046] "syz.1.1580" (13046) uses obsolete ecb(arc4) skcipher [ 597.994934][T12385] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 598.021010][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 598.126417][ T3800] usb 1-1: usb_control_msg returned -32 [ 598.135090][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 598.139895][ T3800] usbtmc 1-1:16.0: can't read capabilities [ 598.159329][T12385] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 598.175946][T12385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.186114][T12385] usb 4-1: Product: syz [ 598.191706][T12385] usb 4-1: Manufacturer: syz [ 598.203317][T12385] usb 4-1: SerialNumber: syz [ 598.212639][T12385] usb 4-1: config 0 descriptor?? [ 598.260872][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 598.269019][T13069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.372531][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 598.508727][T13075] usbtmc 1-1:16.0: control status returned 0 [ 598.521098][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 598.624935][T12385] airspy 4-1:0.0: Board ID: 00 [ 598.651658][T12385] airspy 4-1:0.0: Firmware version: [ 598.682595][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 598.824119][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.825974][ T3800] usb 1-1: USB disconnect, device number 58 [ 598.838884][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.856739][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 598.889729][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 598.900024][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 598.911607][ T10] usb 3-1: Manufacturer: syz [ 598.918633][ T10] usb 3-1: config 0 descriptor?? [ 599.334362][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 599.341954][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 599.372781][ T10] usb 3-1: USB disconnect, device number 60 [ 599.427452][T12385] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 599.442274][T12385] airspy 4-1:0.0: Registered as swradio24 [ 599.448525][T12385] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 599.463079][T12385] usb 4-1: USB disconnect, device number 62 [ 599.700995][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 599.853296][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 599.867822][ T3800] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 599.868938][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 599.885892][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.894214][ T9] usb 1-1: Product: syz [ 599.898424][ T9] usb 1-1: Manufacturer: syz [ 599.903124][ T9] usb 1-1: SerialNumber: syz [ 599.912609][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input28 [ 600.020956][ T3800] usb 2-1: Using ep0 maxpacket: 32 [ 600.047257][ T3800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.073371][ T3800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.100142][ T3800] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 600.122914][ T5218] bcm5974 1-1:1.0: could not read from device [ 600.140320][ T5218] bcm5974 1-1:1.0: could not read from device [ 600.147554][ T3800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.150113][ T9] usb 1-1: USB disconnect, device number 59 [ 600.163569][ T5218] bcm5974 1-1:1.0: could not read from device [ 600.173172][ T5218] bcm5974 1-1:1.0: could not read from device [ 600.196753][ T3800] usb 2-1: config 0 descriptor?? [ 600.258751][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1595'. [ 600.398368][T13101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1597'. [ 600.412391][T13101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1597'. [ 600.614732][ T3800] ft260 0003:0403:6030.0013: unknown main item tag 0x7 [ 600.825830][ T3800] ft260 0003:0403:6030.0013: chip code: 6424 8183 [ 601.026463][ T3800] ft260 0003:0403:6030.0013: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 601.208320][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 601.227098][ T3800] ft260 0003:0403:6030.0013: failed to retrieve status: -32, no wakeup [ 601.342451][T13126] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1607'. [ 601.447239][ T3800] ft260 0003:0403:6030.0013: failed to reset I2C controller: -71 [ 601.495328][ T3800] usb 2-1: USB disconnect, device number 50 [ 601.838345][T12385] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 602.248575][T12385] usb 1-1: config 0 has no interfaces? [ 602.264870][T12385] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 602.278311][T12385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.306401][T12385] usb 1-1: Product: syz [ 602.320524][T12385] usb 1-1: Manufacturer: syz [ 602.328844][T12385] usb 1-1: SerialNumber: syz [ 602.348224][T12385] usb 1-1: config 0 descriptor?? [ 602.491502][ T2957] net_ratelimit: 36 callbacks suppressed [ 602.491523][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 602.606653][T13134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1610'. [ 602.888308][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 602.895782][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.906229][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.924999][ T30] audit: type=1326 audit(1755565364.809:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13170 comm="syz.2.1622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc84038ebe9 code=0x0 [ 602.941803][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.011508][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 603.124596][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 603.247394][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 603.361123][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 603.471266][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 603.583459][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 603.701006][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 603.808137][T13195] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 603.947105][T13195] bond1: entered promiscuous mode [ 603.979624][T13195] bond1: entered allmulticast mode [ 604.035075][T13200] bond1: (slave geneve2): making interface the new active one [ 604.048576][T13200] geneve2: entered promiscuous mode [ 604.096273][T13200] geneve2: entered allmulticast mode [ 604.107433][T13200] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 604.438697][ T10] usb 1-1: USB disconnect, device number 60 [ 604.932238][T13226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.039819][T13232] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1642'. [ 605.052025][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 605.191112][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 605.342837][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 605.367855][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.379324][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.389210][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 605.420749][T12385] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 605.420801][ T5941] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 605.439488][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 605.450216][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 605.461530][ T10] usb 3-1: Manufacturer: syz [ 605.470511][ T10] usb 3-1: config 0 descriptor?? [ 605.544799][T13258] geneve3: entered promiscuous mode [ 605.582773][T12385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 605.589934][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1651'. [ 605.595631][T12385] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 605.603505][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 605.617643][T12385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.628749][ T5941] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 605.630599][T12385] usb 2-1: config 0 descriptor?? [ 605.637465][ T5941] usb 1-1: config 0 has no interface number 0 [ 605.646663][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1651'. [ 605.655678][ T5941] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 605.666769][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.675107][ T5941] usb 1-1: Product: syz [ 605.680604][ T5941] usb 1-1: Manufacturer: syz [ 605.686244][ T5941] usb 1-1: SerialNumber: syz [ 605.695193][ T5941] usb 1-1: config 0 descriptor?? [ 605.705806][ T5941] smsc95xx v2.0.0 [ 605.868713][T12385] usbhid 2-1:0.0: can't add hid device: -71 [ 605.880090][T12385] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 606.132115][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 606.139477][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 606.155441][ T10] usbhid 3-1:0.0: can't add hid device: -32 [ 606.158281][T12385] usb 2-1: USB disconnect, device number 51 [ 606.168308][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 606.204269][ T10] usb 3-1: USB disconnect, device number 61 [ 606.446393][T13271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1653'. [ 606.490780][T12385] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 606.662043][T12385] usb 2-1: Using ep0 maxpacket: 32 [ 606.721671][T12385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 606.770919][T12385] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 606.810081][T12385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.824416][T12385] usb 2-1: config 0 descriptor?? [ 607.063886][T12385] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 607.086484][T12385] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 607.428306][ T5941] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 607.449944][ T5941] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 607.516268][ T5941] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 607.529071][ T5941] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 607.570796][ T2994] net_ratelimit: 31 callbacks suppressed [ 607.570813][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 607.590913][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 607.696228][T13238] ldusb 2-1:0.0: Read buffer overflow, 413 bytes dropped [ 607.705794][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 607.713113][ T5941] usb 1-1: USB disconnect, device number 61 [ 607.736191][T12385] usb 2-1: USB disconnect, device number 52 [ 607.744854][T12385] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 607.840830][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 607.944690][T13290] CIFS: VFS: Malformed UNC in devname [ 608.047627][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 608.080797][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.196540][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 608.267311][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 608.464991][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 608.631212][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 608.691830][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1668'. [ 608.762498][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 608.788053][T13320] netlink: 'syz.2.1666': attribute type 2 has an invalid length. [ 608.870963][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 608.990867][ T3800] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 609.120842][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 609.200886][ T3800] usb 5-1: Using ep0 maxpacket: 16 [ 609.537781][ T3800] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 609.562270][ T3800] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 609.599568][ T3800] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.623446][ T3800] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 609.680436][ T3800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.718030][ T3800] usb 5-1: Product: syz [ 609.728477][ T3800] usb 5-1: Manufacturer: syz [ 609.738623][ T3800] usb 5-1: SerialNumber: syz [ 609.982662][ T3800] usb 5-1: 0:2 : does not exist [ 609.999721][ T3800] usb 5-1: USB disconnect, device number 57 [ 610.493796][T13355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.576769][T13360] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 610.729372][T13355] CIFS: VFS: Malformed UNC in devname [ 611.467061][T13380] netlink: 'syz.0.1688': attribute type 2 has an invalid length. [ 612.226698][ T5941] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 612.374265][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 612.479856][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.491413][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.511269][ T5941] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 612.530758][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.540525][ T5941] usb 3-1: config 0 descriptor?? [ 612.614624][ T36] net_ratelimit: 32 callbacks suppressed [ 612.614647][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 612.641466][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 612.649089][ T10] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 612.657833][ T10] usb 4-1: config 0 has no interface number 0 [ 612.668438][ T10] usb 4-1: config 0 interface 230 has no altsetting 0 [ 612.707251][ T10] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 612.716522][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.729266][ T10] usb 4-1: Product: syz [ 612.740825][ T10] usb 4-1: Manufacturer: syz [ 612.770203][ T10] usb 4-1: SerialNumber: syz [ 612.787069][ T10] usb 4-1: config 0 descriptor?? [ 612.800930][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 612.808762][ T10] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 612.821412][ T10] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 612.940792][ T979] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 612.941364][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 612.966979][ T5941] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 612.979742][ T5941] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 612.998253][ T5941] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0014/input/input29 [ 613.025247][ T5941] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 613.049409][T13420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.138092][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 613.147647][ T979] usb 2-1: config 0 has no interfaces? [ 613.170207][T13424] CIFS: VFS: Malformed UNC in devname [ 613.260936][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 613.280803][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.289255][ T979] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 613.299882][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.308712][ T979] usb 2-1: Product: syz [ 613.313173][ T3800] usb 3-1: USB disconnect, device number 62 [ 613.313173][ T979] usb 2-1: Manufacturer: syz [ 613.344242][ T979] usb 2-1: SerialNumber: syz [ 613.357064][ T979] usb 2-1: config 0 descriptor?? [ 613.371823][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 613.491122][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 613.588776][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1699'. [ 613.601126][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 613.720888][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 613.728891][T13427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.739563][T13427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.827676][T13431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.853444][T13431] bond2: (slave wlan0): Opening slave failed [ 614.131978][T13449] netlink: 'syz.4.1704': attribute type 2 has an invalid length. [ 614.831217][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1711'. [ 615.134909][ T10] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 615.308181][ T3800] usb 4-1: USB disconnect, device number 63 [ 615.669713][T13474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1715'. [ 615.729137][T12385] usb 2-1: USB disconnect, device number 53 [ 616.075540][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'. [ 616.889094][T13503] netlink: 'syz.2.1724': attribute type 2 has an invalid length. [ 617.660758][T12385] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 617.700987][ T12] net_ratelimit: 36 callbacks suppressed [ 617.701010][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 617.899325][T12385] usb 4-1: config 0 has no interfaces? [ 617.911106][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 617.912871][T12385] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 617.943955][T12385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.960749][ T3800] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 618.021359][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 618.038657][T12385] usb 4-1: Product: syz [ 618.047191][T12385] usb 4-1: Manufacturer: syz [ 618.061161][T12385] usb 4-1: SerialNumber: syz [ 618.077617][T12385] usb 4-1: config 0 descriptor?? [ 618.134084][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 618.172725][T13517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.200834][ T3800] usb 1-1: Using ep0 maxpacket: 16 [ 618.219741][ T3800] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 618.229422][ T3800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.302592][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 618.360416][ T3800] usb 1-1: Product: syz [ 618.371855][T13519] CIFS: VFS: Malformed UNC in devname [ 618.407645][ T3800] usb 1-1: Manufacturer: syz [ 618.421098][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 618.480830][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 618.559702][ T3800] usb 1-1: SerialNumber: syz [ 618.570265][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 618.589524][ T3800] usb 1-1: config 0 descriptor?? [ 618.684924][ T3800] as10x_usb: device has been detected [ 618.690882][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 618.764847][ T3800] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 618.811194][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 618.841946][ T3800] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 618.856361][ T3800] as10x_usb: error during firmware upload part1 [ 618.864847][T13513] random: crng reseeded on system resumption [ 618.920605][ T3800] Registered device Sky IT Digital Key (green led) [ 618.944145][ T3800] usb 1-1: USB disconnect, device number 62 [ 619.014897][ T3800] Unregistered device Sky IT Digital Key (green led) [ 619.018706][ T3800] as10x_usb: device has been disconnected [ 619.215771][T13535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1734'. [ 619.361597][T12385] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 619.581985][T13537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.704844][T12385] usb 3-1: Using ep0 maxpacket: 16 [ 619.717961][T12385] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 619.733778][T12385] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 619.764379][T13542] CIFS: VFS: Malformed UNC in devname [ 619.964558][T12385] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.106682][T12385] usb 3-1: config 1 interface 0 has no altsetting 0 [ 620.129977][T12385] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 620.139455][T12385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.157778][T12385] usb 3-1: Product: syz [ 620.170991][T12385] usb 3-1: Manufacturer: syz [ 620.185395][T12385] usb 3-1: SerialNumber: syz [ 620.246265][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 620.334487][ T3800] usb 4-1: USB disconnect, device number 64 [ 620.404538][T13554] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 620.417094][T12385] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 620.645607][T12385] usb 3-1: USB disconnect, device number 63 [ 620.654555][T12385] usblp0: removed [ 620.746703][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 620.782303][T13572] netlink: 'syz.0.1743': attribute type 2 has an invalid length. [ 621.911158][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'. [ 622.278764][T13602] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1750'. [ 622.387516][T13604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1753'. [ 622.510834][T12385] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 622.709302][T12385] usb 2-1: config 0 has no interfaces? [ 622.718280][T12385] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 622.728480][ T59] net_ratelimit: 28 callbacks suppressed [ 622.728494][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 622.763015][T12385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.817681][T12385] usb 2-1: Product: syz [ 622.827305][T12385] usb 2-1: Manufacturer: syz [ 622.838362][T12385] usb 2-1: SerialNumber: syz [ 622.873675][T12385] usb 2-1: config 0 descriptor?? [ 622.931042][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 623.040974][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 623.181403][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 623.360862][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 623.410843][T12385] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 623.541650][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 623.555069][T13621] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 623.563929][T13621] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 623.571934][T12385] usb 1-1: Using ep0 maxpacket: 8 [ 623.584314][T12385] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 623.594603][T12385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.602902][T12385] usb 1-1: Product: syz [ 623.607408][T12385] usb 1-1: Manufacturer: syz [ 623.614211][T12385] usb 1-1: SerialNumber: syz [ 623.622634][T12385] usb 1-1: config 0 descriptor?? [ 623.651209][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 623.690793][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.761994][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 623.833441][T12385] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 623.870878][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 624.232453][T13633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1764'. [ 624.485484][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.492083][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.777944][T13643] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1767'. [ 625.131736][ T979] usb 2-1: USB disconnect, device number 54 [ 625.544168][T12385] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 625.555237][T12385] usb 1-1: USB disconnect, device number 63 [ 625.562822][ T5948] udevd[5948]: setting mode of /dev/bus/usb/001/063 to 020664 failed: No such file or directory [ 625.594247][ T5948] udevd[5948]: setting owner of /dev/bus/usb/001/063 to uid=0, gid=0 failed: No such file or directory [ 625.765674][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 625.831168][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 626.016586][ T24] usb 5-1: config 0 has no interfaces? [ 626.029092][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 626.040540][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.049142][ T24] usb 5-1: Product: syz [ 626.055469][ T24] usb 5-1: Manufacturer: syz [ 626.060418][ T24] usb 5-1: SerialNumber: syz [ 626.067307][ T24] usb 5-1: config 0 descriptor?? [ 626.130305][T13663] gtp0: entered promiscuous mode [ 626.287426][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1770'. [ 626.351352][T13679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.369331][T13679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.670832][ T979] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 626.835914][ T979] usb 3-1: config 0 has no interfaces? [ 626.844981][ T979] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 626.948841][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.958519][ T979] usb 3-1: Product: syz [ 626.963543][ T979] usb 3-1: Manufacturer: syz [ 626.968356][ T979] usb 3-1: SerialNumber: syz [ 626.987575][ T979] usb 3-1: config 0 descriptor?? [ 627.037462][T13684] binder: BINDER_SET_CONTEXT_MGR already set [ 627.066707][T13684] binder: 13683:13684 ioctl 4018620d 200000000200 returned -16 [ 627.403097][T13692] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1782'. [ 627.652819][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 627.684584][T13699] veth5: entered promiscuous mode [ 627.689775][T13699] veth5: entered allmulticast mode [ 627.695936][T13699] bridge3: port 1(veth5) entered blocking state [ 627.702796][T13699] bridge3: port 1(veth5) entered disabled state [ 627.711406][T13699] bridge3: port 1(veth5) entered blocking state [ 627.717722][T13699] bridge3: port 1(veth5) entered forwarding state [ 627.731451][ T12] net_ratelimit: 34 callbacks suppressed [ 627.731466][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 627.748134][T13697] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 627.840865][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.862942][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 627.991224][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 628.020780][ T979] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 628.034773][T13710] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 628.101364][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 628.160768][ T24] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 628.190902][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 628.196432][ T59] bridge3: port 1(veth5) entered disabled state [ 628.206767][ T979] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 628.220774][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 628.232651][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.264332][ T979] usb 2-1: config 0 descriptor?? [ 628.274930][ T979] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 628.312292][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 628.320622][ T24] usb 1-1: config 0 has no interface number 0 [ 628.327221][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 628.338434][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 628.348609][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 628.359825][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 628.369217][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.383498][ T24] usb 1-1: config 0 descriptor?? [ 628.416531][T13707] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 628.431924][ T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 628.451067][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 628.544848][ T24] usb 5-1: USB disconnect, device number 58 [ 628.568262][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 628.604402][T13712] usb usb8: usbfs: process 13712 (syz.4.1789) did not claim interface 0 before use [ 628.700881][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 628.714175][T13714] netlink: 'syz.4.1790': attribute type 1 has an invalid length. [ 628.783138][ T24] usb 1-1: USB disconnect, device number 64 [ 628.783238][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 628.868615][T13714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.887559][T13718] bond3: (slave dummy0): making interface the new active one [ 628.896312][T13718] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 628.932117][T13714] netlink: 'syz.4.1790': attribute type 10 has an invalid length. [ 628.940125][T13714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1790'. [ 629.013304][T13714] dummy0: entered promiscuous mode [ 629.030053][T13714] bond3: (slave dummy0): Releasing active interface [ 629.260504][ T24] usb 3-1: USB disconnect, device number 64 [ 629.410192][T13727] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1794'. [ 629.630774][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 629.645232][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1795'. [ 629.740189][T13735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1796'. [ 629.790856][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 629.801667][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 629.820388][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 629.831233][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 629.840473][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 629.853418][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 629.868246][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 629.886174][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 629.886523][ T979] gspca_vc032x: reg_w err -71 [ 629.895776][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.900133][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.900148][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.900157][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.900166][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.917339][ T24] usb 3-1: config 0 descriptor?? [ 629.957344][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.962762][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.968088][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.973718][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.979037][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.984874][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.990232][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.995637][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.010154][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.020779][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.026103][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.040902][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.046246][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.054867][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.061497][ T979] gspca_vc032x: Unknown sensor... [ 630.067041][ T979] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 630.087393][ T979] usb 2-1: USB disconnect, device number 55 [ 630.125531][T13747] netlink: 'syz.0.1801': attribute type 29 has an invalid length. [ 630.135303][T13747] netlink: 'syz.0.1801': attribute type 29 has an invalid length. [ 630.143685][T13748] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 630.159514][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 630.181138][T13748] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 630.200997][ T24] usb 3-1: USB disconnect, device number 65 [ 630.215647][ T24] usblp0: removed [ 630.640964][T12385] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 630.690744][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 630.801491][T13760] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 630.871107][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 630.888331][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 630.919839][T12385] usb 1-1: config 0 has no interfaces? [ 630.937544][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 630.950926][T12385] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 630.964910][T12385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.978626][T12385] usb 1-1: Product: syz [ 630.986168][T13762] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1805'. [ 631.044892][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 631.055435][T12385] usb 1-1: Manufacturer: syz [ 631.060121][T12385] usb 1-1: SerialNumber: syz [ 631.065316][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 631.079096][T12385] usb 1-1: config 0 descriptor?? [ 631.086598][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 631.112538][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 631.126614][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 631.138121][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.170618][ T24] usb 3-1: config 0 descriptor?? [ 631.384171][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 631.618534][ T9] usb 3-1: USB disconnect, device number 66 [ 631.626378][ T9] usblp0: removed [ 632.801941][ T12] net_ratelimit: 36 callbacks suppressed [ 632.801964][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 633.040842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.170797][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 633.292503][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 633.374715][T13802] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1816'. [ 633.403130][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 633.410770][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 633.531023][ T5941] usb 1-1: USB disconnect, device number 65 [ 633.539071][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 633.570725][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 633.585430][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 633.664283][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 633.667757][ T2994] bond1: (slave bridge2): failed to get link speed/duplex [ 633.701187][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 633.711746][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.725319][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 633.755130][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.778281][T13812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1821'. [ 633.910093][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 634.078922][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 634.086535][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.093811][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 634.099862][ T24] usbtmc 3-1:16.0: can't read capabilities [ 634.299847][ T24] usb 3-1: USB disconnect, device number 67 [ 634.784544][T13833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.027088][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 635.080449][T13841] CIFS: VFS: Malformed UNC in devname [ 635.280905][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 635.287760][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 635.296240][ T24] usb 5-1: config 0 has no interface number 0 [ 635.315016][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 635.352748][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 635.366388][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 635.574604][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 635.635852][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 635.670764][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 635.698901][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.722265][ T24] usb 5-1: config 0 descriptor?? [ 635.739933][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 635.748706][ T9] usb 4-1: config 0 has no interfaces? [ 635.766195][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 635.786228][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.807716][ T9] usb 4-1: Product: syz [ 635.837194][ T9] usb 4-1: Manufacturer: syz [ 635.852013][ T9] usb 4-1: SerialNumber: syz [ 635.875384][ T9] usb 4-1: config 0 descriptor?? [ 636.039742][T13862] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1837'. [ 636.420804][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 636.600473][ T979] usb 5-1: USB disconnect, device number 59 [ 636.600562][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 636.610870][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 636.618205][ T979] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 636.634038][ T9] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 636.644261][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.688348][ T9] usb 1-1: config 0 has no interfaces? [ 636.758540][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 636.781164][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.830109][ T9] usb 1-1: config 0 descriptor?? [ 637.403773][ T3800] usb 1-1: USB disconnect, device number 66 [ 637.470831][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 637.635929][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 637.646015][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 637.657048][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 637.716785][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 637.726617][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 637.742532][ T24] usb 3-1: Product: syz [ 637.752406][ T24] usb 3-1: Manufacturer: syz [ 637.760310][ T24] usb 3-1: SerialNumber: syz [ 637.781028][T12385] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 637.891943][ T36] net_ratelimit: 35 callbacks suppressed [ 637.891991][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 637.940859][T12385] usb 2-1: Using ep0 maxpacket: 32 [ 637.948786][T12385] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 637.957627][T12385] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 637.966991][T12385] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 637.986288][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 637.998548][T12385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 638.009951][T12385] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 638.018689][T13879] trusted_key: encrypted_key: insufficient parameters specified [ 638.027451][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 638.031558][T12385] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 638.050248][T12385] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 638.059854][T12385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.075815][T12385] usb 2-1: config 0 descriptor?? [ 638.150975][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 638.231670][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1847'. [ 638.240817][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.261230][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 638.291343][T12385] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 638.324350][T12385] usb 2-1: USB disconnect, device number 56 [ 638.338610][T12385] usblp1: removed [ 638.370899][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 638.480977][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 638.601424][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 638.720786][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 638.737532][ T9] usb 3-1: USB disconnect, device number 68 [ 638.744689][ T9] usblp0: removed [ 638.810826][T12385] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 638.840810][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 638.898157][ T5941] usb 4-1: USB disconnect, device number 65 [ 638.982909][T12385] usb 2-1: Using ep0 maxpacket: 32 [ 639.011302][T12385] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 639.021833][T12385] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 639.030616][T12385] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 639.040225][T12385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.051401][T12385] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 639.061236][T12385] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 639.090973][T12385] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 639.095853][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 639.100183][T12385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.106708][T12385] usb 2-1: config 0 descriptor?? [ 639.353131][T12385] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 639.382161][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 639.394383][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 639.536331][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 639.719514][T13908] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1854'. [ 639.790792][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 639.826739][T12385] usb 2-1: USB disconnect, device number 57 [ 639.854715][T12385] usblp0: removed [ 639.946772][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 640.180840][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 640.190795][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 640.238061][ T9] usb 3-1: Product: syz [ 640.244030][ T9] usb 3-1: Manufacturer: syz [ 640.254322][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 640.259549][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 640.277710][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 640.283699][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 640.553659][ T5958] usb 3-1: USB disconnect, device number 69 [ 640.850844][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 641.650786][ T5958] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 641.864132][ T5958] usb 4-1: config 8 has an invalid interface number: 101 but max is 0 [ 641.873170][ T5958] usb 4-1: config 8 has no interface number 0 [ 641.879257][ T5958] usb 4-1: config 8 interface 101 has no altsetting 0 [ 641.912131][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'. [ 641.959532][ T5958] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 641.973893][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.464504][ T5958] usb 4-1: string descriptor 0 read error: -71 [ 642.475179][ T5958] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 642.560189][ T5958] gspca_sunplus: reg_w_riv err -71 [ 642.578039][ T5958] sunplus 4-1:8.101: probe with driver sunplus failed with error -71 [ 642.611048][ T5958] usb 4-1: USB disconnect, device number 66 [ 642.932976][ T2957] net_ratelimit: 29 callbacks suppressed [ 642.932993][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 643.070740][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 643.328029][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 643.446365][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 643.453713][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.620796][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 643.751211][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 643.948601][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1870'. [ 644.016447][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 644.401272][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 644.480794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.667986][T13975] syzkaller0: entered promiscuous mode [ 644.674974][T13975] syzkaller0: entered allmulticast mode [ 644.812964][T13983] netlink: 'syz.3.1874': attribute type 2 has an invalid length. [ 645.181957][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1875'. [ 646.110855][T14002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1878'. [ 646.745173][T14010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.080870][ T5958] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 647.232362][ T5958] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 647.255925][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.277000][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.287792][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 647.315047][ T5958] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 647.324483][ T5958] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 647.339715][ T5958] usb 4-1: Manufacturer: syz [ 647.350974][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 647.367053][ T5958] usb 4-1: config 0 descriptor?? [ 647.504547][ T9] usb 3-1: config 0 has no interfaces? [ 647.515147][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 647.524699][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.537064][ T9] usb 3-1: Product: syz [ 647.541730][ T9] usb 3-1: Manufacturer: syz [ 647.546461][ T9] usb 3-1: SerialNumber: syz [ 647.701476][ T9] usb 3-1: config 0 descriptor?? [ 647.881569][ T5958] usbhid 4-1:0.0: can't add hid device: -71 [ 647.889915][ T5958] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 647.912793][ T5958] usb 4-1: USB disconnect, device number 67 [ 647.933924][ T9] usb 3-1: USB disconnect, device number 70 [ 648.011475][ T1092] net_ratelimit: 22 callbacks suppressed [ 648.011500][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 648.133265][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 648.293271][T13985] bond1: (slave bridge2): failed to get link speed/duplex [ 648.401336][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 648.525172][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 648.640773][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 648.741898][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 649.004176][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 649.106607][T14063] netlink: 'syz.1.1895': attribute type 2 has an invalid length. [ 649.185586][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 649.300794][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 650.202355][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1900'. [ 650.398558][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'. [ 651.011735][ T979] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 651.195403][ T979] usb 4-1: config 0 has no interfaces? [ 651.204194][ T979] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 651.213457][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.254581][ T979] usb 4-1: Product: syz [ 651.400318][ T979] usb 4-1: Manufacturer: syz [ 651.405819][ T979] usb 4-1: SerialNumber: syz [ 651.412680][ T979] usb 4-1: config 0 descriptor?? [ 651.621583][ T5941] usb 4-1: USB disconnect, device number 68 [ 651.746692][T14097] binder: 14096:14097 unknown command 0 [ 651.752772][T14097] binder: 14096:14097 ioctl c0306201 200000000080 returned -22 [ 651.765210][T14097] binder: 14096:14097 ioctl c0306201 200000000280 returned -11 [ 651.781718][ T30] audit: type=1326 audit(1755565413.669:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.4.1908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cd298ebe9 code=0x0 [ 651.981522][ T979] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 652.133352][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.158031][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.169117][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.194496][ T979] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.204023][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.233886][ T979] usb 3-1: config 0 descriptor?? [ 652.315844][T14112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 652.933917][ T979] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 653.122713][ T1092] net_ratelimit: 33 callbacks suppressed [ 653.122737][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 653.143099][T14095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.180285][T14095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.372606][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 653.422844][T12385] usb 3-1: USB disconnect, device number 71 [ 653.546068][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 653.568734][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 653.691108][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 653.831330][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 653.840794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.910867][ T979] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 653.942501][T13985] bond1: (slave bridge2): failed to get link speed/duplex [ 654.009496][T14145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1923'. [ 654.096631][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 654.110960][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 654.234246][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 654.275901][ T979] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 654.290797][ T979] usb 4-1: config 0 has no interface number 0 [ 654.314002][ T979] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 654.328925][ T979] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 654.357694][ T979] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 654.379357][ T1092] bond1: (slave bridge2): failed to get link speed/duplex [ 654.389518][ T979] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 654.415843][ T979] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.655116][ T979] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 654.666862][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.703686][ T979] usb 4-1: config 0 descriptor?? [ 654.711015][T12385] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 654.743971][ T979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 654.899912][T12385] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 654.921270][T12385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.946801][T12385] usb 3-1: config 0 descriptor?? [ 655.856721][ T9] usb 4-1: USB disconnect, device number 69 [ 655.862974][ T979] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 656.022612][ T979] usb 5-1: config 0 has no interfaces? [ 656.038891][ T979] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 656.058892][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.071091][ T979] usb 5-1: Product: syz [ 656.075340][ T979] usb 5-1: Manufacturer: syz [ 656.086306][ T979] usb 5-1: SerialNumber: syz [ 656.092740][ T979] usb 5-1: config 0 descriptor?? [ 656.240856][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 656.313155][T14172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1930'. [ 656.385563][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.394956][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.410716][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 656.420555][ T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 656.437802][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 656.446865][ T9] usb 4-1: config 0 has no interface number 0 [ 656.457343][ T9] usb 4-1: config 0 interface 89 has no altsetting 0 [ 656.496549][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 656.501631][ T5958] usb 5-1: USB disconnect, device number 60 [ 656.585989][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.610803][ T24] usb 1-1: device descriptor read/64, error -71 [ 656.627130][ T9] usb 4-1: Product: syz [ 656.638133][ T9] usb 4-1: Manufacturer: syz [ 656.645353][ T9] usb 4-1: SerialNumber: syz [ 656.652824][ T9] usb 4-1: config 0 descriptor?? [ 656.668734][ T9] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 656.684394][ T9] em28xx 4-1:0.89: Video interface 89 found: bulk [ 656.850792][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 657.000883][ T24] usb 1-1: device descriptor read/64, error -71 [ 657.124780][ T24] usb usb1-port1: attempt power cycle [ 657.295649][ T9] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 657.369284][T14197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.460873][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 657.469526][T12385] pegasus 3-1:0.0: setup Pegasus II specific registers [ 657.487496][T14199] CIFS: VFS: Malformed UNC in devname [ 657.502840][ T24] usb 1-1: device descriptor read/8, error -71 [ 657.592733][T12385] pegasus 3-1:0.0: can't locate MII phy, using default [ 657.623431][T12385] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 06:ae:df:0c:ce:3b [ 657.654819][T12385] usb 3-1: USB disconnect, device number 72 [ 657.741426][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 657.773133][ T24] usb 1-1: device descriptor read/8, error -71 [ 657.899242][ T24] usb usb1-port1: unable to enumerate USB device [ 658.190773][ T49] net_ratelimit: 34 callbacks suppressed [ 658.190797][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 658.244278][T14211] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 658.342493][T14215] CIFS: VFS: Malformed UNC in devname [ 658.524837][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 658.641037][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 658.760764][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 658.982001][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 659.004769][ T9] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 659.040830][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.120085][ T9] em28xx 4-1:0.89: board has no eeprom [ 659.127045][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 659.203558][ T9] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 659.241059][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 659.260819][ T9] em28xx 4-1:0.89: analog set to bulk mode. [ 659.308080][ T979] em28xx 4-1:0.89: Registering V4L2 extension [ 659.381164][ T2957] bond1: (slave bridge2): failed to get link speed/duplex [ 659.410317][ T9] usb 4-1: USB disconnect, device number 70 [ 659.561916][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 659.583058][ T9] em28xx 4-1:0.89: Disconnecting em28xx [ 659.759916][ T979] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 659.762608][T14240] program syz.0.1943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.775293][ T979] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 659.975465][ T979] em28xx 4-1:0.89: No AC97 audio processor [ 659.992075][ T979] usb 4-1: Decoder not found [ 659.996983][ T979] em28xx 4-1:0.89: failed to create media graph [ 660.228027][ T979] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 660.304598][ T979] em28xx 4-1:0.89: Registering snapshot button... [ 660.304610][T14248] ================================================================== [ 660.304625][T14248] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 660.326513][T14248] Read of size 8 at addr ffff888027074740 by task v4l_id/14248 [ 660.334083][T14248] [ 660.336441][T14248] CPU: 1 UID: 0 PID: 14248 Comm: v4l_id Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 660.336468][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.336482][T14248] Call Trace: [ 660.336490][T14248] [ 660.336500][T14248] dump_stack_lvl+0x189/0x250 [ 660.336529][T14248] ? rcu_is_watching+0x15/0xb0 [ 660.336552][T14248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.336574][T14248] ? rcu_is_watching+0x15/0xb0 [ 660.336593][T14248] ? lock_release+0x4b/0x3e0 [ 660.336623][T14248] ? __virt_addr_valid+0x1c8/0x5c0 [ 660.336648][T14248] ? __virt_addr_valid+0x4a5/0x5c0 [ 660.336674][T14248] print_report+0xca/0x240 [ 660.336693][T14248] ? v4l2_fh_open+0xc7/0x430 [ 660.336721][T14248] kasan_report+0x118/0x150 [ 660.336751][T14248] ? v4l2_fh_open+0xc7/0x430 [ 660.336782][T14248] v4l2_fh_open+0xc7/0x430 [ 660.336813][T14248] em28xx_v4l2_open+0x157/0x9a0 [ 660.336844][T14248] v4l2_open+0x20c/0x360 [ 660.336876][T14248] chrdev_open+0x4c9/0x5e0 [ 660.336915][T14248] ? __pfx_chrdev_open+0x10/0x10 [ 660.336945][T14248] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 660.336978][T14248] ? __pfx_chrdev_open+0x10/0x10 [ 660.337007][T14248] do_dentry_open+0x950/0x13f0 [ 660.337033][T14248] vfs_open+0x3b/0x340 [ 660.337051][T14248] ? path_openat+0x2ecd/0x3830 [ 660.337076][T14248] path_openat+0x2ee5/0x3830 [ 660.337099][T14248] ? arch_stack_walk+0xfc/0x150 [ 660.337130][T14248] ? stack_depot_save_flags+0x40/0x860 [ 660.337162][T14248] ? __pfx_path_openat+0x10/0x10 [ 660.337184][T14248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.337212][T14248] do_filp_open+0x1fa/0x410 [ 660.337237][T14248] ? __pfx_do_filp_open+0x10/0x10 [ 660.337269][T14248] ? _raw_spin_unlock+0x28/0x50 [ 660.337293][T14248] ? alloc_fd+0x64c/0x6c0 [ 660.337326][T14248] do_sys_openat2+0x121/0x1c0 [ 660.337348][T14248] ? __pfx_do_sys_openat2+0x10/0x10 [ 660.337368][T14248] ? lock_release+0x4b/0x3e0 [ 660.337399][T14248] ? do_user_addr_fault+0xc8a/0x1390 [ 660.337431][T14248] __x64_sys_openat+0x138/0x170 [ 660.337454][T14248] do_syscall_64+0xfa/0x3b0 [ 660.337483][T14248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.337503][T14248] ? clear_bhb_loop+0x60/0xb0 [ 660.337525][T14248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.337546][T14248] RIP: 0033:0x7f8c2cea7407 [ 660.337564][T14248] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 660.337583][T14248] RSP: 002b:00007ffe62e2a9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 660.337607][T14248] RAX: ffffffffffffffda RBX: 00007f8c2d653880 RCX: 00007f8c2cea7407 [ 660.337622][T14248] RDX: 0000000000000000 RSI: 00007ffe62e2bf1c RDI: ffffffffffffff9c [ 660.337636][T14248] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 660.337648][T14248] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 660.337661][T14248] R13: 00007ffe62e2abf0 R14: 00007f8c2d7ba000 R15: 000055e92e2db4d8 [ 660.337683][T14248] [ 660.337691][T14248] [ 660.634314][T14248] Allocated by task 979: [ 660.638544][T14248] kasan_save_track+0x3e/0x80 [ 660.643221][T14248] __kasan_kmalloc+0x93/0xb0 [ 660.647818][T14248] __kmalloc_cache_noprof+0x230/0x3d0 [ 660.653181][T14248] em28xx_v4l2_init+0x10b/0x2e70 [ 660.658109][T14248] em28xx_init_extension+0x11d/0x1c0 [ 660.663377][T14248] process_scheduled_works+0xade/0x17b0 [ 660.668911][T14248] worker_thread+0x8a0/0xda0 [ 660.673500][T14248] kthread+0x70e/0x8a0 [ 660.677557][T14248] ret_from_fork+0x3f9/0x770 [ 660.682132][T14248] ret_from_fork_asm+0x1a/0x30 [ 660.686899][T14248] [ 660.689208][T14248] Freed by task 979: [ 660.693083][T14248] kasan_save_track+0x3e/0x80 [ 660.697841][T14248] kasan_save_free_info+0x46/0x50 [ 660.702940][T14248] __kasan_slab_free+0x5b/0x80 [ 660.707705][T14248] kfree+0x18e/0x440 [ 660.711601][T14248] em28xx_v4l2_init+0x1683/0x2e70 [ 660.716615][T14248] em28xx_init_extension+0x11d/0x1c0 [ 660.721887][T14248] process_scheduled_works+0xade/0x17b0 [ 660.727425][T14248] worker_thread+0x8a0/0xda0 [ 660.732011][T14248] kthread+0x70e/0x8a0 [ 660.736155][T14248] ret_from_fork+0x3f9/0x770 [ 660.740736][T14248] ret_from_fork_asm+0x1a/0x30 [ 660.745499][T14248] [ 660.747808][T14248] The buggy address belongs to the object at ffff888027074000 [ 660.747808][T14248] which belongs to the cache kmalloc-8k of size 8192 [ 660.761978][T14248] The buggy address is located 1856 bytes inside of [ 660.761978][T14248] freed 8192-byte region [ffff888027074000, ffff888027076000) [ 660.775941][T14248] [ 660.778602][T14248] The buggy address belongs to the physical page: [ 660.785001][T14248] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27070 [ 660.793749][T14248] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 660.802232][T14248] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 660.809773][T14248] page_type: f5(slab) [ 660.813757][T14248] raw: 00fff00000000040 ffff88801a442280 ffffea0000a28200 0000000000000002 [ 660.822453][T14248] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 660.831139][T14248] head: 00fff00000000040 ffff88801a442280 ffffea0000a28200 0000000000000002 [ 660.839820][T14248] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 660.848674][T14248] head: 00fff00000000003 ffffea00009c1c01 00000000ffffffff 00000000ffffffff [ 660.857426][T14248] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 660.866083][T14248] page dumped because: kasan: bad access detected [ 660.872481][T14248] page_owner tracks the page as allocated [ 660.878179][T14248] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 13638, tgid 13635 (syz.4.1766), ts 625355906308, free_ts 625351893098 [ 660.898058][T14248] post_alloc_hook+0x240/0x2a0 [ 660.903007][T14248] get_page_from_freelist+0x21e4/0x22c0 [ 660.908543][T14248] __alloc_frozen_pages_noprof+0x181/0x370 [ 660.914335][T14248] alloc_pages_mpol+0x232/0x4a0 [ 660.919178][T14248] allocate_slab+0x8a/0x370 [ 660.923667][T14248] ___slab_alloc+0xbeb/0x1410 [ 660.928342][T14248] __kvmalloc_node_noprof+0x429/0x5f0 [ 660.933791][T14248] netlink_alloc_large_skb+0x5d/0x110 [ 660.939180][T14248] netlink_sendmsg+0x5c6/0xb30 [ 660.944038][T14248] __sock_sendmsg+0x219/0x270 [ 660.948793][T14248] sock_sendmsg+0x158/0x230 [ 660.953371][T14248] splice_to_socket+0x8ff/0xf10 [ 660.958212][T14248] direct_splice_actor+0xfe/0x160 [ 660.963227][T14248] splice_direct_to_actor+0x5a8/0xcc0 [ 660.968590][T14248] do_splice_direct+0x181/0x270 [ 660.973428][T14248] do_sendfile+0x4da/0x7e0 [ 660.977835][T14248] page last free pid 13638 tgid 13635 stack trace: [ 660.984318][T14248] __free_frozen_pages+0xbc4/0xd30 [ 660.989433][T14248] __slab_free+0x303/0x3c0 [ 660.993849][T14248] qlist_free_all+0x97/0x140 [ 660.998429][T14248] kasan_quarantine_reduce+0x148/0x160 [ 661.003973][T14248] __kasan_slab_alloc+0x22/0x80 [ 661.008826][T14248] __kmalloc_noprof+0x224/0x4f0 [ 661.013670][T14248] copy_splice_read+0x143/0xa50 [ 661.018529][T14248] splice_direct_to_actor+0x4a9/0xcc0 [ 661.023911][T14248] do_splice_direct+0x181/0x270 [ 661.028844][T14248] do_sendfile+0x4da/0x7e0 [ 661.033418][T14248] __se_sys_sendfile64+0x13e/0x190 [ 661.038554][T14248] do_syscall_64+0xfa/0x3b0 [ 661.043070][T14248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.048973][T14248] [ 661.051375][T14248] Memory state around the buggy address: [ 661.057092][T14248] ffff888027074600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.065232][T14248] ffff888027074680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.073377][T14248] >ffff888027074700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.081530][T14248] ^ [ 661.087781][T14248] ffff888027074780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.095842][T14248] ffff888027074800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.103893][T14248] ================================================================== [ 661.148622][ T979] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input31 [ 661.171062][T14248] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 661.178393][T14248] CPU: 1 UID: 0 PID: 14248 Comm: v4l_id Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 661.190203][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.200260][T14248] Call Trace: [ 661.203886][T14248] [ 661.206862][T14248] dump_stack_lvl+0x99/0x250 [ 661.212075][T14248] ? __asan_memcpy+0x40/0x70 [ 661.216674][T14248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.221877][T14248] ? __pfx__printk+0x10/0x10 [ 661.226473][T14248] vpanic+0x281/0x750 [ 661.230456][T14248] ? preempt_schedule+0xae/0xc0 [ 661.235311][T14248] ? __pfx_vpanic+0x10/0x10 [ 661.239920][T14248] ? preempt_schedule_common+0x83/0xd0 [ 661.245397][T14248] ? preempt_schedule+0xae/0xc0 [ 661.250338][T14248] ? __pfx_preempt_schedule+0x10/0x10 [ 661.256064][T14248] panic+0xb9/0xc0 [ 661.259790][T14248] ? __pfx_panic+0x10/0x10 [ 661.264206][T14248] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 661.270110][T14248] ? v4l2_fh_open+0xc7/0x430 [ 661.274705][T14248] check_panic_on_warn+0x89/0xb0 [ 661.279645][T14248] ? v4l2_fh_open+0xc7/0x430 [ 661.284242][T14248] end_report+0x78/0x160 [ 661.288500][T14248] kasan_report+0x129/0x150 [ 661.293010][T14248] ? v4l2_fh_open+0xc7/0x430 [ 661.297603][T14248] v4l2_fh_open+0xc7/0x430 [ 661.302031][T14248] em28xx_v4l2_open+0x157/0x9a0 [ 661.306886][T14248] v4l2_open+0x20c/0x360 [ 661.311137][T14248] chrdev_open+0x4c9/0x5e0 [ 661.315558][T14248] ? __pfx_chrdev_open+0x10/0x10 [ 661.320503][T14248] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 661.326837][T14248] ? __pfx_chrdev_open+0x10/0x10 [ 661.331802][T14248] do_dentry_open+0x950/0x13f0 [ 661.336572][T14248] vfs_open+0x3b/0x340 [ 661.340639][T14248] ? path_openat+0x2ecd/0x3830 [ 661.345594][T14248] path_openat+0x2ee5/0x3830 [ 661.350183][T14248] ? arch_stack_walk+0xfc/0x150 [ 661.355044][T14248] ? stack_depot_save_flags+0x40/0x860 [ 661.360513][T14248] ? __pfx_path_openat+0x10/0x10 [ 661.365452][T14248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.371527][T14248] do_filp_open+0x1fa/0x410 [ 661.376035][T14248] ? __pfx_do_filp_open+0x10/0x10 [ 661.381073][T14248] ? _raw_spin_unlock+0x28/0x50 [ 661.385942][T14248] ? alloc_fd+0x64c/0x6c0 [ 661.390279][T14248] do_sys_openat2+0x121/0x1c0 [ 661.395046][T14248] ? __pfx_do_sys_openat2+0x10/0x10 [ 661.400358][T14248] ? lock_release+0x4b/0x3e0 [ 661.405041][T14248] ? do_user_addr_fault+0xc8a/0x1390 [ 661.410336][T14248] __x64_sys_openat+0x138/0x170 [ 661.415185][T14248] do_syscall_64+0xfa/0x3b0 [ 661.419792][T14248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.425871][T14248] ? clear_bhb_loop+0x60/0xb0 [ 661.430561][T14248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.436450][T14248] RIP: 0033:0x7f8c2cea7407 [ 661.440869][T14248] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 661.460675][T14248] RSP: 002b:00007ffe62e2a9a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 661.469114][T14248] RAX: ffffffffffffffda RBX: 00007f8c2d653880 RCX: 00007f8c2cea7407 [ 661.477173][T14248] RDX: 0000000000000000 RSI: 00007ffe62e2bf1c RDI: ffffffffffffff9c [ 661.485145][T14248] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 661.493113][T14248] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 661.501084][T14248] R13: 00007ffe62e2abf0 R14: 00007f8c2d7ba000 R15: 000055e92e2db4d8 [ 661.509146][T14248] [ 661.512424][T14248] Kernel Offset: disabled [ 661.516738][T14248] Rebooting in 86400 seconds..