last executing test programs: 19.301323142s ago: executing program 3 (id=626): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller1\x00'}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 15.999671902s ago: executing program 3 (id=630): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0xa2084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0x7, 0x2, 0x34d, 0x7, "150200", 0x0, 0x180}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x40, 0xe, 0x6, "12fcfe6b1384"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000440)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="403dfd000000fd08ef6e1a47506efe7658605f2eafebd0aad9cc4a701db95189485936f73cfb5fc016c363db3d6a842581db0cb945409b3cde4d43cc93ad218080817733411126430514906a6f3ebeded4239eaee6249f1c6acd72efc69b33de677d30b4f21d3e0694fe06ac82fa19cafbea61e806efc79826544dc39bf4916ba8235f04e5"], 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 15.530777351s ago: executing program 4 (id=632): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff80700", 0x12) 15.078982058s ago: executing program 4 (id=634): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) syz_open_procfs$userns(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 13.056427853s ago: executing program 4 (id=636): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 11.754695669s ago: executing program 3 (id=640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11.613583824s ago: executing program 3 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x75f18fb836a75d48) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0xff8c) syz_emit_ethernet(0x121, &(0x7f0000000340)=ANY=[], 0x0) socket(0x27, 0x1, 0x20000000) 11.351920512s ago: executing program 4 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000040), 0x1001) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) unshare(0x6a040000) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105500, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000) 11.091048948s ago: executing program 0 (id=646): socket(0xa, 0x3, 0x3a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000001b40)) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000380)={0x140, 0x1, {0x0, 0x0, 0x6, 0x1, 0x5}, 0xa4}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r6, 0x303, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x9, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1}) 8.568088758s ago: executing program 3 (id=647): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x220040, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.209714702s ago: executing program 0 (id=648): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 7.959873428s ago: executing program 4 (id=649): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) add_key(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 7.921576847s ago: executing program 1 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.782821679s ago: executing program 0 (id=652): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 6.727348348s ago: executing program 0 (id=654): socket(0x840000000002, 0x3, 0xff) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x103381) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140"], 0x0) dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 6.627734713s ago: executing program 2 (id=655): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a00)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff71, 0x1}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x4}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.524313326s ago: executing program 1 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a3200000000140000001100"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020040090900010073797a3000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 6.42366325s ago: executing program 2 (id=657): pipe2(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x5) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5.108797998s ago: executing program 2 (id=658): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xc, 0x5, 0x2, 0x9, 0x3, 0x3e, 0x7, 0x1d8, 0x40, 0x8f, 0xd2f, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4}, [{0x3, 0x7fffffff, 0x6, 0x7ff, 0x1, 0x0, 0x4, 0x6}]}, 0x78) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r8 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r8) close(r4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.057925423s ago: executing program 1 (id=659): io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 4.875557432s ago: executing program 1 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, 0x0, 0x0) socket(0xa, 0x3, 0xff) 4.663813209s ago: executing program 3 (id=661): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(0x0, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r2 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) ftruncate(r2, 0x9) fallocate(0xffffffffffffffff, 0x20000, 0x0, 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x49b40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000580)={{r1, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0}, {[0xffffffff, 0x8, 0x10000, 0x10000]}, 0x710c, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="07000000010000", 0x7) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.32224451s ago: executing program 1 (id=662): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 3.211892137s ago: executing program 4 (id=663): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 2.705113893s ago: executing program 0 (id=664): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2.584142037s ago: executing program 1 (id=665): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92c"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.168418306s ago: executing program 2 (id=666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab50447", 0x6f}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 683.0809ms ago: executing program 2 (id=667): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a00)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff71, 0x1}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x4}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 224.500913ms ago: executing program 0 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000440)={0xfffffffe, 0x0, 0x4}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095", @ANYRES8=r0], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioprio_set$uid(0x3, 0xee01, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', r3, 0x2f, 0xe, 0x4, 0x2, 0x58, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x700, 0xfffffff7, 0x4}}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c040000100001040000000000000000004800", @ANYRES32=r4, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf2500000000080001", @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 2 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x81, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) kernel console output (not intermixed with test programs): usb 2-1: Using ep0 maxpacket: 8 [ 113.937143][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.937204][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 113.937229][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.993589][ T5873] usb 2-1: config 0 descriptor?? [ 114.030136][ T5873] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 114.090981][ T1840] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.239632][ T1840] usb 5-1: Using ep0 maxpacket: 16 [ 114.269927][ T1840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.270041][ T1840] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 114.270089][ T1840] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.270169][ T1840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.328450][ T1840] usb 5-1: config 0 descriptor?? [ 114.372813][ T1840] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 114.831318][ T5873] gspca_vc032x: reg_r err -32 [ 114.831413][ T5873] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 116.062211][ T6032] overlayfs: missing 'lowerdir' [ 116.229581][ T6034] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 116.459842][ T5943] usb 2-1: USB disconnect, device number 3 [ 116.579796][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.559518][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 117.565184][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.565212][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.595614][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.595695][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.595758][ T5915] usb 4-1: Product: syz [ 117.595795][ T5915] usb 4-1: Manufacturer: syz [ 117.595839][ T5915] usb 4-1: SerialNumber: syz [ 117.683472][ T5943] usb 5-1: USB disconnect, device number 3 [ 117.851922][ T5915] usb 4-1: 0:2 : does not exist [ 117.873595][ T5915] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 118.142471][ T5915] usb 4-1: USB disconnect, device number 3 [ 118.352330][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.052869][ T6063] overlayfs: missing 'lowerdir' [ 120.319536][ T5915] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.108280][ T5943] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.239408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.389518][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 121.395213][ T5943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.395242][ T5943] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.428524][ T5943] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.428560][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.428574][ T5943] usb 1-1: Product: syz [ 121.428585][ T5943] usb 1-1: Manufacturer: syz [ 121.428595][ T5943] usb 1-1: SerialNumber: syz [ 121.474067][ T5915] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.474098][ T5915] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 121.474118][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.474168][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.476929][ T5915] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.476961][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.476984][ T5915] usb 2-1: Product: syz [ 121.476999][ T5915] usb 2-1: Manufacturer: syz [ 121.578455][ T5915] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 121.830638][ T5943] usb 1-1: 0:2 : does not exist [ 121.841465][ T5915] usb 2-1: USB disconnect, device number 4 [ 122.119437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.139449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.149443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.159448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.169445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.179440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.189437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.199445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.209441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.536064][ T5943] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 123.942195][ T5943] usb 1-1: USB disconnect, device number 4 [ 123.999581][ T1840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.044444][ T6090] syzkaller0: entered promiscuous mode [ 124.044467][ T6090] syzkaller0: entered allmulticast mode [ 124.126250][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.179521][ T1840] usb 3-1: Using ep0 maxpacket: 16 [ 124.183708][ T1840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.183736][ T1840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.213448][ T1840] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.213537][ T1840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.213600][ T1840] usb 3-1: Product: syz [ 124.213637][ T1840] usb 3-1: Manufacturer: syz [ 124.213680][ T1840] usb 3-1: SerialNumber: syz [ 124.300060][ T6092] tipc: Started in network mode [ 124.300095][ T6092] tipc: Node identity 7a30e786bc5e, cluster identity 4711 [ 124.304191][ T6092] tipc: Enabled bearer , priority 0 [ 124.362275][ T6087] tipc: Resetting bearer [ 124.486829][ T1840] usb 3-1: 0:2 : does not exist [ 124.507454][ T1840] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 124.521439][ T6087] tipc: Disabling bearer [ 124.624379][ T1840] usb 3-1: USB disconnect, device number 2 [ 124.784937][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.806207][ T5915] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.930276][ T6098] overlayfs: missing 'lowerdir' [ 124.969552][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 124.972229][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.972255][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.974760][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.974788][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.974816][ T5915] usb 2-1: Product: syz [ 124.974830][ T5915] usb 2-1: Manufacturer: syz [ 124.974843][ T5915] usb 2-1: SerialNumber: syz [ 125.035742][ T5897] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 125.204616][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.205779][ T5897] usb 5-1: not running at top speed; connect to a high speed hub [ 125.207985][ T5897] usb 5-1: config 61 has an invalid interface number: 37 but max is 0 [ 125.208012][ T5897] usb 5-1: config 61 has no interface number 0 [ 125.208052][ T5897] usb 5-1: config 61 interface 37 has no altsetting 0 [ 125.251825][ T5897] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 125.252093][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.252118][ T5897] usb 5-1: Product: syz [ 125.252133][ T5897] usb 5-1: Manufacturer: syz [ 125.252149][ T5897] usb 5-1: SerialNumber: syz [ 125.305934][ T5915] usb 2-1: 0:2 : does not exist [ 125.323950][ T5915] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 125.537484][ T5915] usb 2-1: USB disconnect, device number 5 [ 126.125691][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 126.160414][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 126.161130][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 126.162250][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 126.240103][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 126.471340][ T5897] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 126.471799][ T5897] gp8psk: usb in 128 operation failed. [ 126.473488][ T5897] gp8psk: usb in 137 operation failed. [ 126.473506][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 126.473543][ T5897] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 126.530639][ T5897] usb 5-1: USB disconnect, device number 4 [ 126.896916][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.993649][ T5915] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.342816][ T5915] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.342849][ T5915] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 128.342871][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.342924][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.349478][ T5915] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.349511][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.349531][ T5915] usb 2-1: Product: syz [ 129.349546][ T5915] usb 2-1: Manufacturer: syz [ 129.682670][ T5915] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 129.832969][ T5872] usb 2-1: USB disconnect, device number 6 [ 130.128620][ T6136] syzkaller0: entered promiscuous mode [ 130.128640][ T6136] syzkaller0: entered allmulticast mode [ 130.144084][ T6136] tipc: Started in network mode [ 130.144108][ T6136] tipc: Node identity 964c30841916, cluster identity 4711 [ 130.144595][ T6136] tipc: Enabled bearer , priority 0 [ 130.172791][ T6135] tipc: Resetting bearer [ 131.036225][ T6135] tipc: Disabling bearer [ 131.630371][ T5915] tipc: Node number set to 2405052548 [ 132.153164][ T5872] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.154228][ T6156] kernel profiling enabled (shift: 17) [ 132.439516][ T5897] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.551364][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.551395][ T5872] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 132.551412][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.602346][ T5897] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.602384][ T5897] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.602411][ T5897] usb 2-1: config 1 interface 0 has no altsetting 0 [ 132.607970][ T5897] usb 2-1: string descriptor 0 read error: -22 [ 132.608066][ T5897] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 132.608089][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 132.693815][ T5872] usb 4-1: config 0 descriptor?? [ 132.984558][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.984656][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.125943][ T5872] usbhid 4-1:0.0: can't add hid device: -71 [ 133.126572][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 133.184781][ T5872] usb 4-1: USB disconnect, device number 4 [ 133.315096][ T5897] usbhid 2-1:1.0: can't add hid device: -32 [ 133.317630][ T5897] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 133.839533][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.992613][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.992642][ T10] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 133.992661][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.992704][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.996235][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.996264][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.996285][ T10] usb 3-1: Product: syz [ 133.996301][ T10] usb 3-1: Manufacturer: syz [ 134.029621][ T5943] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 134.101323][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 134.185705][ T5943] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.188012][ T5943] usb 4-1: not running at top speed; connect to a high speed hub [ 134.205108][ T5943] usb 4-1: config 61 has an invalid interface number: 37 but max is 0 [ 134.205147][ T5943] usb 4-1: config 61 has no interface number 0 [ 134.205184][ T5943] usb 4-1: config 61 interface 37 has no altsetting 0 [ 134.209480][ T5897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.224066][ T5943] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 134.224099][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.224121][ T5943] usb 4-1: Product: syz [ 134.224144][ T5943] usb 4-1: Manufacturer: syz [ 134.224159][ T5943] usb 4-1: SerialNumber: syz [ 134.325832][ T1840] usb 3-1: USB disconnect, device number 3 [ 134.394972][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 134.410833][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.410861][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.414068][ T5897] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.414097][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.414118][ T5897] usb 1-1: Product: syz [ 134.414133][ T5897] usb 1-1: Manufacturer: syz [ 134.414148][ T5897] usb 1-1: SerialNumber: syz [ 134.532340][ T10] usb 2-1: USB disconnect, device number 7 [ 134.700685][ T5897] usb 1-1: 0:2 : does not exist [ 134.733528][ T5943] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 134.738025][ T5897] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 134.745257][ T5943] gp8psk: usb in 128 operation failed. [ 134.762989][ T5943] gp8psk: usb in 137 operation failed. [ 134.763043][ T5943] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 134.763079][ T5943] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 134.795901][ T5943] usb 4-1: USB disconnect, device number 5 [ 134.843615][ T6190] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 134.843644][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.931138][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 135.141014][ T5897] usb 1-1: USB disconnect, device number 5 [ 135.186772][ T6191] usbip_core: unknown command [ 135.186789][ T6191] vhci_hcd: unknown pdu 0 [ 135.186804][ T6191] usbip_core: unknown command [ 135.199443][ T13] vhci_hcd vhci_hcd.1: stop threads [ 135.199464][ T13] vhci_hcd vhci_hcd.1: release socket [ 135.229783][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 135.261581][ T5872] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 135.261790][ T5872] usb 35-1: enqueue for inactive port 0 [ 135.340653][ T5872] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 135.458368][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.766489][ T6208] syzkaller0: entered promiscuous mode [ 135.766516][ T6208] syzkaller0: entered allmulticast mode [ 135.769945][ T5897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.838982][ T6208] tipc: Started in network mode [ 135.839174][ T6208] tipc: Node identity aeb62075d4dc, cluster identity 4711 [ 135.852868][ T6208] tipc: Enabled bearer , priority 0 [ 135.902331][ T6205] tipc: Resetting bearer [ 135.963456][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 135.966468][ T5897] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 135.966497][ T5897] usb 3-1: config 0 has no interface number 0 [ 135.966552][ T5897] usb 3-1: config 0 interface 12 has no altsetting 0 [ 136.009631][ T5897] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 136.009662][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.009682][ T5897] usb 3-1: Product: syz [ 136.009697][ T5897] usb 3-1: Manufacturer: syz [ 136.009712][ T5897] usb 3-1: SerialNumber: syz [ 136.089823][ T5897] usb 3-1: config 0 descriptor?? [ 136.327020][ T6205] tipc: Disabling bearer [ 137.815549][ T5897] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 137.815611][ T5897] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 137.815629][ T5897] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 137.815745][ T5897] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 137.914468][ T5897] usb 3-1: USB disconnect, device number 4 [ 138.269201][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 138.322651][ T5948] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 138.339514][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.494357][ T5948] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.496525][ T5948] usb 1-1: not running at top speed; connect to a high speed hub [ 138.497981][ T5948] usb 1-1: config 61 has an invalid interface number: 37 but max is 0 [ 138.498008][ T5948] usb 1-1: config 61 has no interface number 0 [ 138.498061][ T5948] usb 1-1: config 61 interface 37 has no altsetting 0 [ 138.538933][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 138.547093][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.547127][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.547170][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 138.547194][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.550636][ T5948] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 138.550724][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.550798][ T5948] usb 1-1: Product: syz [ 138.550842][ T5948] usb 1-1: Manufacturer: syz [ 138.550878][ T5948] usb 1-1: SerialNumber: syz [ 138.629666][ T10] usb 5-1: config 0 descriptor?? [ 139.085470][ T5948] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 139.085830][ T10] kye 0003:0458:5016.0001: control desc unexpectedly large [ 139.085850][ T10] kye 0003:0458:5016.0001: control desc unexpectedly large [ 139.101707][ T5948] gp8psk: usb in 128 operation failed. [ 139.110140][ T5948] gp8psk: usb in 137 operation failed. [ 139.110194][ T5948] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 139.110302][ T5948] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 139.164029][ T5872] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.212638][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0001/input/input5 [ 139.213767][ T5948] usb 1-1: USB disconnect, device number 6 [ 139.311733][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.311767][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.311797][ T5872] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 139.311814][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.338776][ T5872] usb 2-1: config 0 descriptor?? [ 140.390397][ T10] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 140.466094][ T10] usb 5-1: USB disconnect, device number 5 [ 140.491746][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 140.491875][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.582481][ T5872] usb 2-1: USB disconnect, device number 8 [ 140.911746][ T6263] fido_id[6263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 141.455332][ T5872] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.689502][ T5872] usb 4-1: device descriptor read/64, error -71 [ 143.863186][ T5915] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.867422][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.049532][ T5872] usb 4-1: device descriptor read/64, error -71 [ 144.050977][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 144.056762][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.056797][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.056837][ T5915] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 144.056862][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.141659][ T5915] usb 2-1: config 0 descriptor?? [ 144.160007][ T5872] usb usb4-port1: attempt power cycle [ 144.607223][ T6312] overlayfs: missing 'lowerdir' [ 144.617320][ T5915] kye 0003:0458:5016.0002: control desc unexpectedly large [ 144.617343][ T5915] kye 0003:0458:5016.0002: control desc unexpectedly large [ 144.663095][ T5915] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0002/input/input6 [ 144.741735][ T5915] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 144.873166][ T5915] usb 2-1: USB disconnect, device number 9 [ 145.163734][ T6316] fido_id[6316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 146.402919][ T6336] Zero length message leads to an empty skb [ 146.403508][ T6336] ======================================================= [ 146.403508][ T6336] WARNING: The mand mount option has been deprecated and [ 146.403508][ T6336] and is ignored by this kernel. Remove the mand [ 146.403508][ T6336] option from the mount to silence this warning. [ 146.403508][ T6336] ======================================================= [ 146.407253][ T6336] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[6336] [ 150.199614][ T6350] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 150.209497][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.403460][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.403497][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.403526][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.403549][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.403594][ T5872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.403618][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.477757][ T5872] usb 4-1: config 0 descriptor?? [ 150.931328][ T5872] usbhid 4-1:0.0: can't add hid device: -71 [ 150.931457][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 150.960297][ T5872] usb 4-1: USB disconnect, device number 9 [ 151.732874][ T5943] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.172890][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 152.181385][ T5943] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 152.181429][ T5943] usb 5-1: config 0 has no interface number 0 [ 152.181566][ T5943] usb 5-1: config 0 interface 12 has no altsetting 0 [ 152.346657][ T5943] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 152.346692][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.346714][ T5943] usb 5-1: Product: syz [ 152.346730][ T5943] usb 5-1: Manufacturer: syz [ 152.346752][ T5943] usb 5-1: SerialNumber: syz [ 152.451822][ T5943] usb 5-1: config 0 descriptor?? [ 152.559510][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 153.293529][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 153.293564][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.293586][ T10] usb 3-1: Product: syz [ 153.293605][ T10] usb 3-1: Manufacturer: syz [ 153.293680][ T10] usb 3-1: SerialNumber: syz [ 153.373842][ T10] usb 3-1: config 0 descriptor?? [ 153.539918][ T5873] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.589624][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 153.693429][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.693606][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.693717][ T5873] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 153.693743][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.760818][ T5873] usb 4-1: config 0 descriptor?? [ 153.920920][ T6380] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 155.361691][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 155.542994][ T5948] usb 3-1: USB disconnect, device number 5 [ 155.567248][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 155.588799][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.622269][ T5943] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 155.622327][ T5943] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 155.622345][ T5943] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 155.622439][ T5943] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 155.777922][ T5873] usb 4-1: USB disconnect, device number 10 [ 155.804789][ T5943] usb 5-1: USB disconnect, device number 6 [ 158.036951][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.360082][ T5873] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.625675][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.625739][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 158.625765][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.681802][ T5873] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 158.681836][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.686322][ T5873] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 158.686352][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.686374][ T5873] usb 4-1: Product: syz [ 158.686489][ T5873] usb 4-1: Manufacturer: syz [ 158.686506][ T5873] usb 4-1: SerialNumber: syz [ 158.937861][ T10] usb 1-1: config 0 descriptor?? [ 158.985574][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 159.068859][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 159.141051][ T5150] bcm5974 4-1:1.0: could not read from device [ 159.207377][ T5150] bcm5974 4-1:1.0: could not read from device [ 159.224928][ T5873] usb 4-1: USB disconnect, device number 11 [ 159.359517][ T5872] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 159.378418][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.388803][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.396360][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.397106][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.397917][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 159.398601][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 159.399285][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 159.439896][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 159.440810][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 159.447105][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 159.469454][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 159.470166][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 159.470846][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 159.471513][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 159.527158][ T5872] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.527195][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.527221][ T5872] usb 3-1: Product: syz [ 159.527232][ T5872] usb 3-1: Manufacturer: syz [ 159.527243][ T5872] usb 3-1: SerialNumber: syz [ 159.588848][ T5872] usb 3-1: config 0 descriptor?? [ 159.674707][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.713241][ T10] pwc: Registered as video103. [ 159.724832][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 159.766120][ T10] usb 1-1: USB disconnect, device number 7 [ 159.819815][ T5872] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.889541][ T5948] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.039555][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 160.067222][ T5948] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 160.067264][ T5948] usb 2-1: config 0 has no interface number 0 [ 160.067872][ T5948] usb 2-1: config 0 interface 12 has no altsetting 0 [ 160.097076][ T5948] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 160.097165][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.097188][ T5948] usb 2-1: Product: syz [ 160.097204][ T5948] usb 2-1: Manufacturer: syz [ 160.097218][ T5948] usb 2-1: SerialNumber: syz [ 160.131362][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.175419][ T5948] usb 2-1: config 0 descriptor?? [ 160.282483][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 160.286719][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.286777][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 160.286825][ T5873] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.286849][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.360241][ T5873] usb 5-1: config 0 descriptor?? [ 160.380889][ T5873] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 160.399854][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.529535][ T1840] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.549548][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 160.552388][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.552418][ T9] usb 4-1: config 0 has no interface number 0 [ 160.555649][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 160.555680][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.555702][ T9] usb 4-1: Product: syz [ 160.555717][ T9] usb 4-1: Manufacturer: syz [ 160.555733][ T9] usb 4-1: SerialNumber: syz [ 160.616884][ T9] usb 4-1: config 0 descriptor?? [ 160.632533][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 160.689713][ T1840] usb 1-1: Using ep0 maxpacket: 16 [ 160.698119][ T1840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.698245][ T1840] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 160.698293][ T1840] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.698318][ T1840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.765058][ T1840] usb 1-1: config 0 descriptor?? [ 160.786447][ T1840] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 160.831682][ T5886] usb 5-1: USB disconnect, device number 7 [ 160.951627][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 161.039610][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 161.104860][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 161.286766][ T5872] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 161.334387][ T1840] usb 1-1: USB disconnect, device number 8 [ 161.372734][ T5872] usb 3-1: USB disconnect, device number 6 [ 161.783029][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.822086][ T5886] usb 4-1: USB disconnect, device number 12 [ 162.061408][ T5948] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 162.061468][ T5948] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 162.061487][ T5948] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 162.061580][ T5948] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 162.181219][ T5948] usb 2-1: USB disconnect, device number 10 [ 162.196979][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 162.260387][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 162.261415][ T5886] quatech2 4-1:0.51: device disconnected [ 162.603073][ T1840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.769710][ T1840] usb 1-1: Using ep0 maxpacket: 16 [ 162.772154][ T1840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.772181][ T1840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.777060][ T1840] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.777105][ T1840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.777128][ T1840] usb 1-1: Product: syz [ 162.777144][ T1840] usb 1-1: Manufacturer: syz [ 162.777159][ T1840] usb 1-1: SerialNumber: syz [ 163.052365][ T1840] usb 1-1: 0:2 : does not exist [ 163.057374][ T1840] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 163.214886][ T1840] usb 1-1: USB disconnect, device number 9 [ 163.439238][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.459644][ T5886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 164.459768][ T5948] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 164.619742][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 164.621999][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.622054][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 164.622104][ T5886] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.622129][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.628510][ T5948] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 164.628540][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.628561][ T5948] usb 2-1: Product: syz [ 164.628576][ T5948] usb 2-1: Manufacturer: syz [ 164.628590][ T5948] usb 2-1: SerialNumber: syz [ 164.653802][ T5886] usb 4-1: config 0 descriptor?? [ 164.746735][ T5886] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 164.763873][ T5948] usb 2-1: config 0 descriptor?? [ 164.913793][ T5886] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.943874][ T5943] usb 4-1: USB disconnect, device number 13 [ 164.993647][ T5948] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.070002][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 165.076794][ T5886] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 165.076823][ T5886] usb 1-1: config 0 has no interface number 0 [ 165.076944][ T5886] usb 1-1: config 0 interface 12 has no altsetting 0 [ 165.108447][ T5886] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 165.108470][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.108484][ T5886] usb 1-1: Product: syz [ 165.108495][ T5886] usb 1-1: Manufacturer: syz [ 165.108505][ T5886] usb 1-1: SerialNumber: syz [ 165.174806][ T5886] usb 1-1: config 0 descriptor?? [ 166.199888][ T5872] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 166.369643][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 166.373852][ T5872] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 166.373872][ T5872] usb 4-1: config 0 has no interface number 0 [ 166.373922][ T5872] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 166.378742][ T5872] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 166.378763][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.378777][ T5872] usb 4-1: Product: syz [ 166.378990][ T5872] usb 4-1: Manufacturer: syz [ 166.379002][ T5872] usb 4-1: SerialNumber: syz [ 166.490293][ T5948] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 166.546489][ T5872] usb 4-1: config 0 descriptor?? [ 166.549247][ T6498] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.566900][ T5948] usb 2-1: USB disconnect, device number 11 [ 166.799746][ T6498] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.875056][ T5886] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 166.875098][ T5886] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 166.875111][ T5886] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 166.875214][ T5886] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 166.962961][ T5886] usb 1-1: USB disconnect, device number 10 [ 167.279640][ T5872] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.279928][ T5872] asix 4-1:0.188: probe with driver asix failed with error -71 [ 167.327367][ T5872] usb 4-1: USB disconnect, device number 14 [ 168.991920][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 169.166395][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.166429][ T9] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 169.166451][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.166500][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.215478][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.215529][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.215567][ T9] usb 1-1: Product: syz [ 169.215583][ T9] usb 1-1: Manufacturer: syz [ 169.260092][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 169.260136][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 169.269712][ T5872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.507073][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.508268][ T5872] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 169.508306][ T5872] usb 3-1: can't read configurations, error -71 [ 169.641411][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 170.279529][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.431579][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 170.433947][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.433974][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.433995][ T9] usb 2-1: config 0 has no interface number 0 [ 170.434041][ T9] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.439252][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 170.439282][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.439302][ T9] usb 2-1: Product: syz [ 170.439317][ T9] usb 2-1: Manufacturer: syz [ 170.504420][ T9] usb 2-1: SerialNumber: syz [ 170.534649][ T9] usb 2-1: config 0 descriptor?? [ 170.545182][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 170.598943][ T6539] ptrace attach of "./syz-executor exec"[5803] was attempted by "./syz-executor exec"[6539] [ 170.761523][ T9] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 170.762502][ T9] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 170.967266][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.968921][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.002317][ T9] usb 2-1: USB disconnect, device number 12 [ 171.210333][ T5872] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.384392][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 171.387052][ T5872] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 171.387081][ T5872] usb 5-1: config 0 has no interface number 0 [ 171.387128][ T5872] usb 5-1: config 0 interface 12 has no altsetting 0 [ 171.394537][ T5872] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 171.394612][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.394655][ T5872] usb 5-1: Product: syz [ 171.394671][ T5872] usb 5-1: Manufacturer: syz [ 171.394686][ T5872] usb 5-1: SerialNumber: syz [ 171.457241][ T5872] usb 5-1: config 0 descriptor?? [ 171.687841][ T1840] usb 1-1: USB disconnect, device number 11 [ 173.919941][ T5872] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 173.920276][ T5872] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 173.920346][ T5872] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 173.921602][ T5872] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 174.214047][ T5872] usb 5-1: USB disconnect, device number 8 [ 175.796331][ T5872] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 176.350653][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.350864][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 176.350905][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 176.350967][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 176.351042][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.478880][ T5872] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 176.478912][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 176.478935][ T5872] usb 5-1: Product: syz [ 176.478950][ T5872] usb 5-1: Manufacturer: syz [ 176.478966][ T5872] usb 5-1: SerialNumber: syz [ 176.597322][ T5872] usb 5-1: config 0 descriptor?? [ 176.816779][ T5872] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 176.817095][ T5872] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 176.843233][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 176.843752][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 176.881266][ T5872] usb 5-1: USB disconnect, device number 9 [ 178.859471][ T5948] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.029411][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 179.035224][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.035253][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.038512][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.038543][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.038564][ T5948] usb 5-1: Product: syz [ 179.038580][ T5948] usb 5-1: Manufacturer: syz [ 179.038595][ T5948] usb 5-1: SerialNumber: syz [ 179.611318][ T6635] ptrace attach of "./syz-executor exec"[5805] was attempted by "./syz-executor exec"[6635] [ 180.224366][ T5948] usb 5-1: 0:2 : does not exist [ 180.238690][ T5948] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 180.301539][ T5948] usb 5-1: USB disconnect, device number 10 [ 180.423982][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.798548][ T6645] ptrace attach of "./syz-executor exec"[5803] was attempted by "./syz-executor exec"[6645] [ 183.871813][ T6685] fuse: Unknown parameter 'user_id00000000000000000000' [ 184.793422][ T6712] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[6712] [ 185.477314][ T5948] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.910386][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.915707][ T5948] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.916479][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.099311][ T5948] usb 5-1: config 0 descriptor?? [ 186.166832][ T5948] pwc: Askey VC010 type 2 USB webcam detected. [ 186.356119][ T6717] binder: 6716:6717 ioctl 4018620d 0 returned -22 [ 186.536685][ T5948] pwc: recv_control_msg error -32 req 02 val 2b00 [ 186.537205][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 186.537347][ T5948] pwc: recv_control_msg error -32 req 02 val 2700 [ 186.537722][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 186.537857][ T5948] pwc: recv_control_msg error -32 req 02 val 2c00 [ 186.538272][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 186.538422][ T5948] pwc: recv_control_msg error -32 req 04 val 1000 [ 186.538784][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 186.538919][ T5948] pwc: recv_control_msg error -32 req 04 val 1300 [ 186.540874][ T5948] pwc: recv_control_msg error -71 req 04 val 1400 [ 186.543388][ T5948] pwc: recv_control_msg error -71 req 02 val 2000 [ 186.545550][ T5948] pwc: recv_control_msg error -71 req 02 val 2100 [ 186.546586][ T5948] pwc: recv_control_msg error -71 req 04 val 1500 [ 186.548656][ T5948] pwc: recv_control_msg error -71 req 02 val 2500 [ 186.549270][ T5948] pwc: recv_control_msg error -71 req 02 val 2400 [ 186.551814][ T5948] pwc: recv_control_msg error -71 req 02 val 2600 [ 186.552679][ T5948] pwc: recv_control_msg error -71 req 02 val 2900 [ 186.553751][ T5948] pwc: recv_control_msg error -71 req 02 val 2800 [ 186.554501][ T5948] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.555114][ T5948] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.564811][ T5948] pwc: Registered as video103. [ 186.573138][ T5948] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 186.586163][ T5948] usb 5-1: USB disconnect, device number 11 [ 189.329118][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 189.329143][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 189.441653][ T6750] binder: 6749:6750 ioctl c0306201 0 returned -14 [ 189.496933][ T6754] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 189.496955][ T6754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.497073][ T6754] vhci_hcd vhci_hcd.0: Device attached [ 189.510070][ T5943] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 189.790126][ T5948] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.022623][ T5886] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 190.028134][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 190.144373][ T5943] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 190.144405][ T5943] usb 2-1: config 0 has no interface number 0 [ 190.148039][ T5943] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 190.148078][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.148098][ T5943] usb 2-1: Product: syz [ 190.148113][ T5943] usb 2-1: Manufacturer: syz [ 190.148128][ T5943] usb 2-1: SerialNumber: syz [ 190.202830][ T5943] usb 2-1: config 0 descriptor?? [ 190.224789][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 190.235457][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.235484][ T5948] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.260591][ T5948] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 190.260622][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.260644][ T5948] usb 3-1: Product: syz [ 190.260660][ T5948] usb 3-1: Manufacturer: syz [ 190.260676][ T5948] usb 3-1: SerialNumber: syz [ 190.271584][ T5948] usb 3-1: config 0 descriptor?? [ 190.655329][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 190.655363][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 192.733574][ T6776] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[6776] [ 192.776190][ T5943] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 192.795158][ T5943] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 192.958910][ T5943] usb 2-1: USB disconnect, device number 13 [ 193.105435][ T5948] usb 3-1: USB disconnect, device number 9 [ 193.462300][ T6756] vhci_hcd: connection reset by peer [ 193.468679][ T6715] vhci_hcd vhci_hcd.3: stop threads [ 193.482226][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 193.508561][ T6715] vhci_hcd vhci_hcd.3: release socket [ 193.508684][ T6715] vhci_hcd vhci_hcd.3: disconnect device [ 193.791921][ T5943] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 194.561123][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.561185][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 194.561215][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 194.561243][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 194.561267][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 194.568792][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.568863][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.578911][ T5943] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 194.578952][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 194.578974][ T5943] usb 2-1: Product: syz [ 194.578990][ T5943] usb 2-1: Manufacturer: syz [ 194.579005][ T5943] usb 2-1: SerialNumber: syz [ 195.199567][ T5886] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 195.353202][ T5943] usb 2-1: config 0 descriptor?? [ 195.629014][ T6787] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 195.639622][ T5943] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 195.639953][ T5943] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 195.679856][ T5943] usb 2-1: USB disconnect, device number 14 [ 195.756033][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 195.756052][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 195.953276][ T6810] binder: BINDER_SET_CONTEXT_MGR already set [ 195.953293][ T6810] binder: 6809:6810 ioctl 4018620d 200000004a80 returned -16 [ 195.973383][ T6810] binder: 6809:6810 ioctl c0306201 0 returned -14 [ 197.256509][ T6818] fuse: Unknown parameter '0x0000000000000004' [ 197.536115][ T6826] overlayfs: failed to resolve './file0': -2 [ 198.406812][ T6827] ptrace attach of "./syz-executor exec"[5805] was attempted by "./syz-executor exec"[6827] [ 199.169526][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 199.343529][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.343561][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.343609][ T5915] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.343626][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.398738][ T5915] usb 3-1: config 0 descriptor?? [ 199.416332][ T5915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 199.486510][ T6853] binder: 6852:6853 ioctl c0306201 0 returned -14 [ 199.539539][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 199.692106][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.692814][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 199.692836][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 199.692856][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 199.692872][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.695535][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 199.695566][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 199.695581][ T10] usb 1-1: Product: syz [ 199.695591][ T10] usb 1-1: Manufacturer: syz [ 199.695602][ T10] usb 1-1: SerialNumber: syz [ 199.787623][ T10] usb 1-1: config 0 descriptor?? [ 199.997299][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 199.997506][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 200.017216][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 200.017633][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 200.041563][ T10] usb 1-1: USB disconnect, device number 12 [ 201.945411][ T5943] usb 3-1: USB disconnect, device number 10 [ 202.331323][ T6884] fuse: Unknown parameter '0x0000000000000004' [ 204.089162][ T6892] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[6892] [ 204.276721][ T6895] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 204.376669][ T6899] overlayfs: failed to resolve './file0': -2 [ 204.581420][ T1840] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 204.742836][ T1840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.742894][ T1840] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 204.742923][ T1840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 204.742952][ T1840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 204.742976][ T1840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.746348][ T1840] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 204.746381][ T1840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 204.746403][ T1840] usb 4-1: Product: syz [ 204.746419][ T1840] usb 4-1: Manufacturer: syz [ 204.746435][ T1840] usb 4-1: SerialNumber: syz [ 204.758869][ T1840] usb 4-1: config 0 descriptor?? [ 204.799485][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 204.968262][ T1840] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 204.968282][ T1840] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 206.149663][ T1840] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 206.149691][ T1840] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 206.150000][ T1840] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 206.169775][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 206.193956][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.193986][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.220214][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.220302][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.220324][ T10] usb 3-1: Product: syz [ 206.220340][ T10] usb 3-1: Manufacturer: syz [ 206.220356][ T10] usb 3-1: SerialNumber: syz [ 206.356328][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 206.356730][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 206.357138][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 206.427415][ T1840] usb 4-1: USB disconnect, device number 15 [ 206.517872][ T10] usb 3-1: 0:2 : does not exist [ 206.530439][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 206.619605][ T10] usb 3-1: USB disconnect, device number 11 [ 206.648995][ T6918] fuse: Unknown parameter '0x0000000000000004' [ 206.732477][ T5872] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.778111][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.869451][ T5872] usb 5-1: device descriptor read/64, error -71 [ 207.164414][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 207.833646][ T6929] overlayfs: missing 'workdir' [ 208.044917][ T5872] usb 5-1: device descriptor read/64, error -71 [ 208.164216][ T5872] usb usb5-port1: attempt power cycle [ 208.273658][ T5915] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.239451][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 209.241734][ T5915] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 209.241763][ T5915] usb 1-1: config 0 has no interface number 0 [ 209.247711][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.247744][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.247759][ T5915] usb 1-1: Product: syz [ 209.247769][ T5915] usb 1-1: Manufacturer: syz [ 209.247780][ T5915] usb 1-1: SerialNumber: syz [ 209.271665][ T5915] usb 1-1: config 0 descriptor?? [ 209.289560][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 209.323154][ T5872] usb 5-1: device descriptor read/8, error -71 [ 209.667190][ T5872] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 209.716490][ T5872] usb 5-1: device descriptor read/8, error -71 [ 209.969489][ T6945] ptrace attach of "./syz-executor exec"[5803] was attempted by "./syz-executor exec"[6945] [ 210.666315][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 210.666350][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.667419][ T5872] usb usb5-port1: unable to enumerate USB device [ 210.897109][ T5915] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 210.897516][ T5915] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 211.509574][ T1840] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 211.619457][ T5915] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.662789][ T1840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.662819][ T1840] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 211.669081][ T1840] usb 2-1: string descriptor 0 read error: -22 [ 211.669182][ T1840] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 211.669207][ T1840] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 211.789543][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 211.792791][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.794067][ T5915] usb 5-1: config 4 has an invalid interface number: 21 but max is 3 [ 211.794095][ T5915] usb 5-1: config 4 has an invalid interface number: 196 but max is 3 [ 211.794117][ T5915] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 211.794138][ T5915] usb 5-1: config 4 has 2 interfaces, different from the descriptor's value: 4 [ 211.794222][ T5915] usb 5-1: config 4 has no interface number 0 [ 211.794234][ T5915] usb 5-1: config 4 has no interface number 1 [ 211.794274][ T5915] usb 5-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 211.794290][ T5915] usb 5-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 211.794305][ T5915] usb 5-1: config 4 interface 21 altsetting 14 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 211.794324][ T5915] usb 5-1: config 4 interface 21 altsetting 14 endpoint 0x87 has invalid maxpacket 1023, setting to 64 [ 211.794344][ T5915] usb 5-1: config 4 interface 21 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 211.794364][ T5915] usb 5-1: config 4 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 903, setting to 64 [ 211.794383][ T5915] usb 5-1: config 4 interface 21 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 211.794403][ T5915] usb 5-1: config 4 interface 21 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 211.794419][ T5915] usb 5-1: config 4 interface 21 altsetting 14 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 211.794439][ T5915] usb 5-1: too many endpoints for config 4 interface 196 altsetting 172: 82, using maximum allowed: 30 [ 211.794469][ T5915] usb 5-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0xA, skipping [ 211.794485][ T5915] usb 5-1: config 4 interface 196 altsetting 172 has an invalid descriptor for endpoint zero, skipping [ 211.794500][ T5915] usb 5-1: config 4 interface 196 altsetting 172 has 3 endpoint descriptors, different from the interface descriptor's value: 82 [ 211.794520][ T5915] usb 5-1: config 4 interface 21 has no altsetting 0 [ 211.794532][ T5915] usb 5-1: config 4 interface 196 has no altsetting 0 [ 211.797261][ T5915] usb 5-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=11.15 [ 211.797295][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.797316][ T5915] usb 5-1: Product: syz [ 211.797331][ T5915] usb 5-1: Manufacturer: syz [ 211.797346][ T5915] usb 5-1: SerialNumber: syz [ 211.979236][ T6966] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 211.980062][ T1840] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 212.139474][ T1840] usb 4-1: Using ep0 maxpacket: 16 [ 212.140192][ T10] usb 1-1: USB disconnect, device number 13 [ 212.143181][ T1840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.143207][ T1840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.147568][ T1840] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.147599][ T1840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.147620][ T1840] usb 4-1: Product: syz [ 212.147635][ T1840] usb 4-1: Manufacturer: syz [ 212.147650][ T1840] usb 4-1: SerialNumber: syz [ 212.308826][ T5915] usb 5-1: USB disconnect, device number 16 [ 212.634002][ T1840] usb 4-1: 0:2 : does not exist [ 212.673805][ T1840] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 213.453232][ T1840] usb 4-1: USB disconnect, device number 16 [ 213.664076][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.792889][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 214.019635][ T1840] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 214.099556][ T5872] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 214.129603][ T5943] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 214.169580][ T1840] usb 5-1: Using ep0 maxpacket: 32 [ 214.171695][ T1840] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 214.171725][ T1840] usb 5-1: config 0 has no interface number 0 [ 214.171775][ T1840] usb 5-1: config 0 interface 12 has no altsetting 0 [ 214.174667][ T1840] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 214.174690][ T1840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.174704][ T1840] usb 5-1: Product: syz [ 214.174715][ T1840] usb 5-1: Manufacturer: syz [ 214.174726][ T1840] usb 5-1: SerialNumber: syz [ 214.179190][ T1840] usb 5-1: config 0 descriptor?? [ 214.289654][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 214.292155][ T5943] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 214.292261][ T5943] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.292291][ T5943] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.292328][ T5943] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 214.292357][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.379591][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 214.387550][ T5872] usb 1-1: config 49 has too many interfaces: 222, using maximum allowed: 32 [ 214.387582][ T5872] usb 1-1: config 49 has 1 interface, different from the descriptor's value: 222 [ 214.387636][ T5872] usb 1-1: config 49 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 214.387667][ T5872] usb 1-1: config 49 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 214.439598][ T5872] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 214.439629][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.439649][ T5872] usb 1-1: Product: syz [ 214.439665][ T5872] usb 1-1: Manufacturer: syz [ 214.439680][ T5872] usb 1-1: SerialNumber: syz [ 214.459115][ T5943] usb 3-1: config 0 descriptor?? [ 214.495066][ T6990] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 214.675601][ T809] usb 2-1: USB disconnect, device number 15 [ 214.781521][ T5872] hub 1-1:49.0: bad descriptor, ignoring hub [ 214.781564][ T5872] hub 1-1:49.0: probe with driver hub failed with error -5 [ 214.836221][ T5872] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:49.0/input/input10 [ 214.969445][ T5943] logitech 0003:046D:C24F.0003: unknown main item tag 0x6 [ 214.969496][ T5943] logitech 0003:046D:C24F.0003: invalid report_size 26545 [ 214.969570][ T5943] logitech 0003:046D:C24F.0003: item 0 2 1 7 parsing failed [ 214.971932][ T5943] logitech 0003:046D:C24F.0003: parse failed [ 214.972574][ T5943] logitech 0003:046D:C24F.0003: probe with driver logitech failed with error -22 [ 215.040789][ T5872] usb 1-1: USB disconnect, device number 14 [ 215.129836][ T5948] usb 3-1: USB disconnect, device number 12 [ 215.615009][ T7005] overlayfs: missing 'lowerdir' [ 216.049000][ T7011] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[7011] [ 216.907847][ T1840] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 216.907908][ T1840] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 216.907927][ T1840] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 216.908020][ T1840] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 216.969750][ T1840] usb 5-1: USB disconnect, device number 17 [ 217.073405][ T7017] kAFS: unable to lookup cell 'ßñÏ(,c¾ûL' [ 217.409531][ T5948] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 217.437005][ T7022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.441476][ T7022] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 217.505383][ T7022] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 217.564098][ T7022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.564211][ T7022] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 217.581990][ T5948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.582109][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 217.582129][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 217.582148][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 217.582164][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.584984][ T5948] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 217.585015][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 217.585037][ T5948] usb 4-1: Product: syz [ 217.585052][ T5948] usb 4-1: Manufacturer: syz [ 217.585067][ T5948] usb 4-1: SerialNumber: syz [ 217.595474][ T5948] usb 4-1: config 0 descriptor?? [ 217.694202][ T7022] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 217.754068][ T7022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.754296][ T7022] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 217.844336][ T7022] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 217.933159][ T5948] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 217.933188][ T5948] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 217.976173][ T7022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.976273][ T7022] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.070334][ T7022] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.070443][ T7022] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.133588][ T7022] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.134024][ T5948] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 218.134040][ T5948] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 218.134266][ T5948] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 218.136903][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 218.191483][ T5948] usb 4-1: USB disconnect, device number 17 [ 218.479482][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 218.546595][ T5943] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 218.647644][ T5811] Bluetooth: hci3: Unknown advertising packet type: 0x11 [ 218.647670][ T5811] Bluetooth: hci3: Unknown advertising packet type: 0x17 [ 218.647686][ T5811] Bluetooth: hci3: Unknown advertising packet type: 0x1d [ 218.647705][ T5811] Bluetooth: hci3: Malformed LE Event: 0x0d [ 218.693841][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.693933][ T5915] usb 3-1: too many configurations: 21, using maximum allowed: 8 [ 218.694928][ T5915] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 218.694964][ T5915] usb 3-1: can't read configurations, error -71 [ 218.900236][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 218.904950][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.904978][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.941036][ T5943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.941059][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.941073][ T5943] usb 5-1: Product: syz [ 218.941084][ T5943] usb 5-1: Manufacturer: syz [ 218.941141][ T5943] usb 5-1: SerialNumber: syz [ 219.139562][ T5948] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 219.175927][ T7045] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 219.175963][ T7045] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 219.176003][ T7045] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 219.219414][ T5943] usb 5-1: 0:2 : does not exist [ 219.224144][ T5943] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 219.270047][ T5948] usb 1-1: device descriptor read/64, error -71 [ 219.334952][ T5943] usb 5-1: USB disconnect, device number 18 [ 219.510999][ T5948] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 219.533221][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.609499][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.643487][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.659454][ T5948] usb 1-1: device descriptor read/64, error -71 [ 219.769466][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.770351][ T5948] usb usb1-port1: attempt power cycle [ 219.909920][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.011068][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 220.063041][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 220.065199][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 220.065228][ T10] usb 2-1: config 0 has no interface number 0 [ 220.065282][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 220.068065][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 220.068096][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.068111][ T10] usb 2-1: Product: syz [ 220.068122][ T10] usb 2-1: Manufacturer: syz [ 220.068132][ T10] usb 2-1: SerialNumber: syz [ 220.089568][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.109471][ T5948] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 220.120876][ T10] usb 2-1: config 0 descriptor?? [ 220.140233][ T5948] usb 1-1: device descriptor read/8, error -71 [ 220.148012][ T5872] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 220.589480][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 220.590581][ T5872] usb 5-1: no configurations [ 220.590617][ T5872] usb 5-1: can't read configurations, error -22 [ 220.645837][ T5873] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 221.299497][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 221.314798][ T5873] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 221.314832][ T5873] usb 4-1: config 0 has no interface number 0 [ 221.322472][ T5873] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 221.322714][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.322738][ T5873] usb 4-1: Product: syz [ 221.322754][ T5873] usb 4-1: Manufacturer: syz [ 221.322769][ T5873] usb 4-1: SerialNumber: syz [ 221.349663][ T5873] usb 4-1: config 0 descriptor?? [ 221.491710][ T5948] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 221.510192][ T5948] usb 1-1: device descriptor read/8, error -71 [ 221.590832][ T5872] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.609541][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.627255][ T5948] usb usb1-port1: unable to enumerate USB device [ 221.689577][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 221.739453][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 221.740694][ T5872] usb 5-1: no configurations [ 221.740710][ T5872] usb 5-1: can't read configurations, error -22 [ 221.741830][ T5872] usb usb5-port1: attempt power cycle [ 221.792817][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 221.792852][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 221.851468][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout [ 222.002273][ T5873] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 222.002937][ T5873] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 222.089478][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 222.089597][ T5872] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 222.114517][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 222.118668][ T5872] usb 5-1: no configurations [ 222.118689][ T5872] usb 5-1: can't read configurations, error -22 [ 222.169655][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.194125][ T10] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 222.194177][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 222.194189][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 222.194252][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 222.249654][ T5872] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 222.270171][ T10] usb 2-1: USB disconnect, device number 16 [ 222.270768][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 222.272906][ T5872] usb 5-1: no configurations [ 222.272919][ T5872] usb 5-1: can't read configurations, error -22 [ 222.273638][ T5872] usb usb5-port1: unable to enumerate USB device [ 222.397237][ T5915] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 223.099444][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 223.104500][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.104528][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.112884][ T5915] usb 1-1: Dual-Role OTG device on HNP port [ 223.113244][ T5915] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.113271][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.113292][ T5915] usb 1-1: Product: syz [ 223.113308][ T5915] usb 1-1: Manufacturer: syz [ 223.113323][ T5915] usb 1-1: SerialNumber: syz [ 223.374069][ T5915] usb 1-1: 0:2 : does not exist [ 223.374167][ T5915] usb 1-1: unit 6 not found! [ 223.439031][ T809] usb 4-1: USB disconnect, device number 18 [ 223.560611][ T5872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 223.586925][ T5915] usb 1-1: USB disconnect, device number 19 [ 223.658010][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.730911][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 223.731004][ T5872] usb 2-1: no configurations [ 223.731018][ T5872] usb 2-1: can't read configurations, error -22 [ 223.762418][ T5886] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 223.783674][ T5811] Bluetooth: hci2: Malformed LE Event: 0x0d [ 223.867752][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.867806][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.919457][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 223.925660][ T5886] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 223.925684][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.925698][ T5886] usb 3-1: Product: syz [ 223.925709][ T5886] usb 3-1: Manufacturer: syz [ 223.925720][ T5886] usb 3-1: SerialNumber: syz [ 224.032274][ T5886] usb 3-1: config 0 descriptor?? [ 224.069978][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.249691][ T5804] Bluetooth: hci4: command 0x0c1a tx timeout [ 224.602485][ T5886] usb read operation failed. (-32) [ 224.709527][ T5873] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 225.427785][ T5886] usb write operation failed. (-71) [ 225.428620][ T5886] usb write operation failed. (-71) [ 225.428642][ T5886] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 225.568827][ T5886] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 225.568866][ T5886] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 225.681879][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.682401][ T5873] usb 1-1: not running at top speed; connect to a high speed hub [ 225.683672][ T5873] usb 1-1: config 61 has an invalid interface number: 37 but max is 0 [ 225.683696][ T5873] usb 1-1: config 61 has no interface number 0 [ 225.683725][ T5873] usb 1-1: config 61 interface 37 has no altsetting 0 [ 225.687465][ T5873] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 225.687495][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.687517][ T5873] usb 1-1: Product: syz [ 225.687532][ T5873] usb 1-1: Manufacturer: syz [ 225.687548][ T5873] usb 1-1: SerialNumber: syz [ 225.964052][ T5873] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 226.039513][ T5872] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 226.150517][ T7101] tipc: New replicast peer: 255.255.255.255 [ 226.152997][ T5873] gp8psk: usb in 128 operation failed. [ 226.190868][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 226.193543][ T5872] usb 2-1: config index 0 descriptor too short (expected 29222, got 36) [ 226.193574][ T5872] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 226.193602][ T5872] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 226.193671][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.193703][ T5872] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.193729][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.193753][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.193798][ T5872] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 226.193822][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.259426][ T5915] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 226.263974][ T7101] tipc: Enabled bearer , priority 10 [ 226.312139][ T5872] usb 2-1: config 0 descriptor?? [ 226.357867][ T5873] gp8psk: usb in 146 operation failed. [ 226.357884][ T5873] gp8psk: failed to get FW version [ 226.358201][ T5873] gp8psk: usb in 149 operation failed. [ 226.358211][ T5873] gp8psk: failed to get FPGA version [ 226.359970][ T5873] usb 1-1: Direct firmware load for dvb-usb-gp8psk-02.fw failed with error -2 [ 226.360051][ T5873] usb 1-1: Falling back to sysfs fallback for: dvb-usb-gp8psk-02.fw [ 226.469485][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 226.471228][ T5915] usb 5-1: no configurations [ 226.471245][ T5915] usb 5-1: can't read configurations, error -22 [ 226.520114][ T36] usb 2-1: USB disconnect, device number 19 [ 226.599714][ T5915] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 226.710880][ T5872] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 226.760796][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 226.761861][ T5915] usb 5-1: no configurations [ 226.761878][ T5915] usb 5-1: can't read configurations, error -22 [ 226.762229][ T5915] usb usb5-port1: attempt power cycle [ 226.941171][ T5872] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 226.941228][ T5872] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 226.941302][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.986736][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 226.986770][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 226.986828][ T5872] usb 4-1: Product: syz [ 226.986884][ T5872] usb 4-1: Manufacturer: syz [ 226.986905][ T5872] usb 4-1: SerialNumber: syz [ 226.999457][ T36] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 227.111658][ T5915] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 227.176927][ T5897] tipc: Node number set to 2053775477 [ 227.204769][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 227.249519][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 227.346840][ T36] usb 2-1: config index 0 descriptor too short (expected 29222, got 36) [ 227.346880][ T36] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 227.347715][ T36] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 227.349164][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.350150][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.350180][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.350204][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.350254][ T36] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 227.350284][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.433612][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 227.475587][ T5915] usb 5-1: no configurations [ 227.475611][ T5915] usb 5-1: can't read configurations, error -22 [ 227.625548][ T5872] usb 4-1: config 0 descriptor?? [ 227.679441][ T36] usb 2-1: config 0 descriptor?? [ 227.701698][ T5915] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 227.743559][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 227.768472][ T5915] usb 5-1: no configurations [ 227.768599][ T5915] usb 5-1: can't read configurations, error -22 [ 227.774073][ T5915] usb usb5-port1: unable to enumerate USB device [ 228.014805][ T5872] usb 4-1: selecting invalid altsetting 0 [ 228.204692][ T7111] fuse: Bad value for 'fd' [ 228.261985][ T5872] usb 4-1: USB disconnect, device number 19 [ 228.397800][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.743470][ T809] usb 2-1: USB disconnect, device number 20 [ 230.143186][ T7138] fuse: Bad value for 'fd' [ 230.209501][ T809] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 230.219555][ T810] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 230.363065][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.363839][ T809] usb 2-1: not running at top speed; connect to a high speed hub [ 230.368027][ T809] usb 2-1: config 61 has an invalid interface number: 37 but max is 0 [ 230.368058][ T809] usb 2-1: config 61 has no interface number 0 [ 230.368097][ T809] usb 2-1: config 61 interface 37 has no altsetting 0 [ 230.382928][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 230.418395][ T810] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 230.418425][ T810] usb 5-1: config 0 has no interface number 0 [ 230.418560][ T809] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 230.418587][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.418608][ T809] usb 2-1: Product: syz [ 230.418624][ T809] usb 2-1: Manufacturer: syz [ 230.418639][ T809] usb 2-1: SerialNumber: syz [ 230.467797][ T810] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 230.467832][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.467853][ T810] usb 5-1: Product: syz [ 230.467869][ T810] usb 5-1: Manufacturer: syz [ 230.467885][ T810] usb 5-1: SerialNumber: syz [ 230.533479][ T810] usb 5-1: config 0 descriptor?? [ 231.406604][ T809] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 231.559602][ T810] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 231.559636][ T810] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 231.562156][ T809] gp8psk: usb in 128 operation failed. [ 231.766520][ T809] gp8psk: usb in 146 operation failed. [ 231.766544][ T809] gp8psk: failed to get FW version [ 231.767739][ T809] gp8psk: usb in 149 operation failed. [ 231.767783][ T809] gp8psk: failed to get FPGA version [ 232.368672][ T810] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 232.369903][ T810] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 233.414780][ T1840] usb 5-1: USB disconnect, device number 27 [ 233.979476][ T810] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 234.028593][ T7178] netlink: 'syz.4.406': attribute type 37 has an invalid length. [ 234.305227][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.305256][ T810] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.305293][ T810] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.305310][ T810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.316079][ T810] usb 4-1: config 0 descriptor?? [ 234.350292][ T7181] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[7181] [ 234.865178][ T7184] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 234.865201][ T7184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.884484][ T7184] vhci_hcd vhci_hcd.0: Device attached [ 235.030156][ T7185] usbip_core: unknown command [ 235.030171][ T7185] vhci_hcd: unknown pdu 33554432 [ 235.030183][ T7185] usbip_core: unknown command [ 235.041743][ T146] vhci_hcd vhci_hcd.0: stop threads [ 235.041763][ T146] vhci_hcd vhci_hcd.0: release socket [ 235.041855][ T146] vhci_hcd vhci_hcd.0: disconnect device [ 235.079538][ T810] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 235.479628][ T1840] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 235.631930][ T1840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.632533][ T1840] usb 5-1: not running at top speed; connect to a high speed hub [ 235.634065][ T1840] usb 5-1: config 61 has an invalid interface number: 37 but max is 0 [ 235.634093][ T1840] usb 5-1: config 61 has no interface number 0 [ 235.634128][ T1840] usb 5-1: config 61 interface 37 has no altsetting 0 [ 235.637299][ T1840] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 235.637321][ T1840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.637336][ T1840] usb 5-1: Product: syz [ 235.637346][ T1840] usb 5-1: Manufacturer: syz [ 235.637357][ T1840] usb 5-1: SerialNumber: syz [ 235.914787][ T1840] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 236.112646][ T1840] gp8psk: usb in 128 operation failed. [ 236.317092][ T1840] gp8psk: usb in 146 operation failed. [ 236.317109][ T1840] gp8psk: failed to get FW version [ 236.318538][ T1840] gp8psk: usb in 149 operation failed. [ 236.318556][ T1840] gp8psk: failed to get FPGA version [ 236.764946][ T10] usb 4-1: USB disconnect, device number 20 [ 242.279343][ T7225] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[7225] [ 242.608402][ T7234] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 242.608428][ T7234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.625283][ T7234] vhci_hcd vhci_hcd.0: Device attached [ 243.405390][ T7235] usbip_core: unknown command [ 243.405406][ T7235] vhci_hcd: unknown pdu 33554432 [ 243.405418][ T7235] usbip_core: unknown command [ 243.411492][ T1379] vhci_hcd vhci_hcd.2: stop threads [ 243.411513][ T1379] vhci_hcd vhci_hcd.2: release socket [ 243.411590][ T1379] vhci_hcd vhci_hcd.2: disconnect device [ 243.429949][ T5915] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 243.430166][ T5915] usb 37-1: enqueue for inactive port 0 [ 243.507071][ T5915] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 246.059688][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 246.250841][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 246.314946][ T7260] libceph: resolve '0' (ret=-3): failed [ 247.153327][ T5897] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 247.153368][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.153389][ T5897] usb 4-1: Product: syz [ 247.153405][ T5897] usb 4-1: Manufacturer: syz [ 247.153520][ T5897] usb 4-1: SerialNumber: syz [ 247.209653][ T5897] usb 4-1: config 0 descriptor?? [ 247.421332][ T5897] usb read operation failed. (-71) [ 247.421756][ T5897] usb write operation failed. (-71) [ 247.422158][ T5897] usb write operation failed. (-71) [ 247.422546][ T5897] usb write operation failed. (-71) [ 247.422567][ T5897] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 249.061558][ T7279] macvtap0: entered promiscuous mode [ 249.063942][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 249.134577][ T7280] ptrace attach of "./syz-executor exec"[5800] was attempted by "./syz-executor exec"[7280] [ 249.180960][ T7279] veth0_macvtap: left promiscuous mode [ 249.395144][ T7279] macvtap0 (unregistering): left promiscuous mode [ 249.626014][ T7291] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 249.626045][ T7291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.631915][ T7291] vhci_hcd vhci_hcd.0: Device attached [ 250.230454][ T7292] usbip_core: unknown command [ 250.230503][ T7292] vhci_hcd: unknown pdu 33554432 [ 250.230549][ T7292] usbip_core: unknown command [ 250.373565][ T5915] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 250.601820][ T1283] vhci_hcd vhci_hcd.3: stop threads [ 250.601843][ T1283] vhci_hcd vhci_hcd.3: release socket [ 250.601915][ T1283] vhci_hcd vhci_hcd.3: disconnect device [ 250.974075][ T7306] overlayfs: missing 'lowerdir' [ 252.934489][ T7325] libceph: resolve '0' (ret=-3): failed [ 254.130661][ T7334] overlayfs: missing 'workdir' [ 255.539599][ T5915] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 255.856400][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.856472][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.906421][ T7353] libceph: resolve '0' (ret=-3): failed [ 256.983395][ T7367] overlayfs: missing 'workdir' [ 257.150886][ T7369] bridge0: entered promiscuous mode [ 259.632142][ T7387] binder: 7386:7387 ioctl c0306201 0 returned -14 [ 270.003801][ T5948] kernel read not supported for file /newroot/104 (pid: 5948 comm: kworker/1:7) [ 274.912940][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'. [ 278.481541][ T7532] input: syz1 as /devices/virtual/input/input11 [ 279.515486][ T7538] tipc: Started in network mode [ 279.515510][ T7538] tipc: Node identity ac14140f, cluster identity 4711 [ 279.515763][ T7538] tipc: New replicast peer: 255.255.255.255 [ 279.516690][ T7538] tipc: Enabled bearer , priority 10 [ 280.509584][ T5872] tipc: Node number set to 2886997007 [ 286.579561][ T5897] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.579663][ T5897] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 286.580770][ T809] gp8psk: did not find the bcm4500 firmware file 'dvb-usb-gp8psk-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.580799][ T809] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 286.580839][ T809] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 286.580967][ T1840] gp8psk: did not find the bcm4500 firmware file 'dvb-usb-gp8psk-02.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.580988][ T1840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 286.581027][ T1840] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 286.876941][ T5886] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 286.877129][ T5886] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 286.904906][ T1840] usb 5-1: USB disconnect, device number 28 [ 286.913332][ T5897] usb 4-1: USB disconnect, device number 21 [ 286.940368][ T809] usb 2-1: USB disconnect, device number 21 [ 286.946461][ T5873] gp8psk: did not find the bcm4500 firmware file 'dvb-usb-gp8psk-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 286.946493][ T5873] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 286.946534][ T5873] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 287.560539][ T5886] usb 3-1: USB disconnect, device number 15 [ 287.584756][ T5873] usb 1-1: USB disconnect, device number 20 [ 289.991761][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 290.012372][ T7625] fuse: Bad value for 'group_id' [ 290.012393][ T7625] fuse: Bad value for 'group_id' [ 290.159514][ T1840] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 290.169531][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 290.184318][ T5897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 290.184347][ T5897] usb 4-1: can't read configurations, error -61 [ 290.225506][ T5886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 290.314316][ T1840] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.314348][ T1840] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.314369][ T1840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.314420][ T1840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.314448][ T1840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.316381][ T1840] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.316411][ T1840] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.316427][ T1840] usb 5-1: Product: syz [ 290.316437][ T1840] usb 5-1: Manufacturer: syz [ 290.319463][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 290.369535][ T809] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 290.399472][ T5873] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 290.431597][ T1840] cdc_wdm 5-1:1.0: skipping garbage [ 290.431621][ T1840] cdc_wdm 5-1:1.0: skipping garbage [ 290.457518][ T1840] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 290.457548][ T1840] cdc_wdm 5-1:1.0: Unknown control protocol [ 290.489653][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 290.493417][ T5897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 290.493446][ T5897] usb 4-1: can't read configurations, error -61 [ 290.493746][ T5897] usb usb4-port1: attempt power cycle [ 290.520523][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 290.532967][ T809] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 290.532988][ T809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.533020][ T809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.535471][ T809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.535502][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.535517][ T809] usb 1-1: Product: syz [ 290.535528][ T809] usb 1-1: Manufacturer: syz [ 290.535539][ T809] usb 1-1: SerialNumber: syz [ 290.578010][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.578461][ T5873] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.578660][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.635300][ T5873] usb 2-1: config 0 descriptor?? [ 290.644546][ T5886] usb 3-1: device descriptor read/64, error -71 [ 290.648446][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 290.858135][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 7 bytes [ 290.869461][ T5897] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 290.887153][ T5886] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.897669][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 290.907545][ T5897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 290.907586][ T5897] usb 4-1: can't read configurations, error -61 [ 291.011561][ T809] usb 1-1: 0:2 : does not exist [ 291.029463][ T5897] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 291.043611][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 291.054512][ T5886] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 291.054544][ T5886] usb 3-1: config 0 has no interface number 0 [ 291.054596][ T5886] usb 3-1: config 0 interface 12 has no altsetting 0 [ 291.058960][ T5886] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 291.058993][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.059015][ T5886] usb 3-1: Product: syz [ 291.059030][ T5886] usb 3-1: Manufacturer: syz [ 291.059046][ T5886] usb 3-1: SerialNumber: syz [ 291.115849][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 291.124990][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 291.137602][ T5886] usb 3-1: config 0 descriptor?? [ 291.141575][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 291.155555][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 291.159236][ T5897] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 291.169496][ T5897] usb 4-1: can't read configurations, error -61 [ 291.179571][ T5897] usb usb4-port1: unable to enumerate USB device [ 291.188635][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 291.200974][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 291.204119][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 291.206374][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 291.224464][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 291.234855][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 291.247072][ T5873] pwc: recv_control_msg error -32 req 02 val 2500 [ 291.256706][ T5873] pwc: recv_control_msg error -32 req 02 val 2400 [ 291.265925][ T5873] pwc: recv_control_msg error -32 req 02 val 2600 [ 291.273951][ T5873] pwc: recv_control_msg error -32 req 02 val 2900 [ 291.276116][ T5873] pwc: recv_control_msg error -32 req 02 val 2800 [ 291.278568][ T5873] pwc: recv_control_msg error -32 req 04 val 1100 [ 291.300663][ T5873] pwc: recv_control_msg error -32 req 04 val 1200 [ 291.380414][ T5873] pwc: Registered as video103. [ 291.411292][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 291.485041][ T5873] usb 2-1: USB disconnect, device number 22 [ 292.046715][ T809] usb 1-1: USB disconnect, device number 21 [ 292.084885][ T10] usb 5-1: USB disconnect, device number 29 [ 292.368199][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.063468][ T5886] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 294.063531][ T5886] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 294.063549][ T5886] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 294.063643][ T5886] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 294.119453][ T5948] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 294.124302][ T5886] usb 3-1: USB disconnect, device number 17 [ 294.399397][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 294.403893][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.403928][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.403969][ T5948] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 294.403993][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.457303][ T5948] usb 2-1: config 0 descriptor?? [ 295.020559][ T7656] fuse: Bad value for 'group_id' [ 295.020580][ T7656] fuse: Bad value for 'group_id' [ 295.917472][ T5948] usbhid 2-1:0.0: can't add hid device: -71 [ 295.917603][ T5948] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 295.971229][ T5948] usb 2-1: USB disconnect, device number 23 [ 297.209923][ T5873] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 297.250390][ T809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 297.380327][ T5873] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.380361][ T5873] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.380384][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.380437][ T5873] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 297.380466][ T5873] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 297.395508][ T5873] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.395545][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.395567][ T5873] usb 5-1: Product: syz [ 297.395582][ T5873] usb 5-1: Manufacturer: syz [ 297.399450][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 297.479148][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 297.479188][ T809] usb 1-1: can't read configurations, error -61 [ 297.525602][ T5873] cdc_wdm 5-1:1.0: skipping garbage [ 297.525627][ T5873] cdc_wdm 5-1:1.0: skipping garbage [ 297.529255][ T5873] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 297.546058][ T5873] cdc_wdm 5-1:1.0: Unknown control protocol [ 297.619469][ T809] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 297.707745][ T7679] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.769415][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 297.958571][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 297.958613][ T809] usb 1-1: can't read configurations, error -61 [ 297.966372][ T809] usb usb1-port1: attempt power cycle [ 298.410858][ T809] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 298.620002][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 298.941752][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 298.941795][ T809] usb 1-1: can't read configurations, error -61 [ 298.947345][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 7 bytes [ 299.069518][ T809] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 299.122995][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 299.127693][ T809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 299.127734][ T809] usb 1-1: can't read configurations, error -61 [ 299.154097][ T809] usb usb1-port1: unable to enumerate USB device [ 301.166900][ T10] usb 5-1: USB disconnect, device number 30 [ 304.743208][ T7735] netlink: 277 bytes leftover after parsing attributes in process `syz.4.593'. [ 306.369481][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 306.539554][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 306.556571][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 306.556612][ T10] usb 2-1: can't read configurations, error -61 [ 306.729510][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 307.095760][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 307.186819][ T7761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.603'. [ 307.305927][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 307.305972][ T10] usb 2-1: can't read configurations, error -61 [ 307.436991][ T10] usb usb2-port1: attempt power cycle [ 307.960914][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 307.983198][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 307.991466][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 307.991650][ T10] usb 2-1: can't read configurations, error -61 [ 308.012118][ T5948] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 308.091534][ T5886] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 308.119638][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.140972][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 308.157725][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.157761][ T10] usb 2-1: can't read configurations, error -61 [ 308.158088][ T10] usb usb2-port1: unable to enumerate USB device [ 308.178388][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 308.187269][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.193130][ T5948] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 308.193218][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.193281][ T5948] usb 1-1: Product: syz [ 308.193324][ T5948] usb 1-1: Manufacturer: syz [ 308.193369][ T5948] usb 1-1: SerialNumber: syz [ 308.239408][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 308.244681][ T5948] usb 1-1: config 0 descriptor?? [ 308.245901][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.245928][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.254565][ T5886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.254642][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.254707][ T5886] usb 3-1: Product: syz [ 308.254744][ T5886] usb 3-1: Manufacturer: syz [ 308.254787][ T5886] usb 3-1: SerialNumber: syz [ 308.285687][ T5948] hub 1-1:0.0: bad descriptor, ignoring hub [ 308.285733][ T5948] hub 1-1:0.0: probe with driver hub failed with error -5 [ 308.483093][ T7772] Bluetooth: MGMT ver 1.23 [ 308.545314][ T5886] usb 3-1: 0:2 : does not exist [ 308.561638][ T5886] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 308.669899][ T10] usb 1-1: USB disconnect, device number 26 [ 308.731377][ T5886] usb 3-1: USB disconnect, device number 18 [ 309.513250][ T7789] fuse: Bad value for 'fd' [ 310.101319][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.617853][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.618185][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 310.761476][ T7810] fuse: Bad value for 'fd' [ 313.604678][ T5873] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 313.867930][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.867994][ T5873] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 313.868022][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.920025][ T5873] usb 3-1: config 0 descriptor?? [ 313.951588][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 315.560540][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 315.563310][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 315.564533][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 315.565249][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 315.566302][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 315.567042][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 315.593616][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 316.111322][ T5886] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 317.041064][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 317.044642][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 317.099428][ T5897] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 317.130036][ T5873] pwc: recv_control_msg error -71 req 02 val 2500 [ 317.130545][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 317.131900][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 317.132286][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 317.132742][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 317.139859][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 317.163627][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 317.196334][ T5873] pwc: Registered as video103. [ 317.198754][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 317.269449][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 317.272290][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.276575][ T5897] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 317.276664][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.276687][ T5897] usb 1-1: Product: syz [ 317.276703][ T5897] usb 1-1: Manufacturer: syz [ 317.276719][ T5897] usb 1-1: SerialNumber: syz [ 317.298363][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.300343][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.369371][ T5897] usb 1-1: config 0 descriptor?? [ 317.374232][ T5897] hub 1-1:0.0: bad descriptor, ignoring hub [ 317.374328][ T5897] hub 1-1:0.0: probe with driver hub failed with error -5 [ 317.417950][ T5873] usb 3-1: USB disconnect, device number 19 [ 317.428014][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 317.428060][ T5886] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 317.428088][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.479039][ T5886] usb 2-1: config 0 descriptor?? [ 317.803796][ T7846] fuse: Bad value for 'fd' [ 317.929859][ T5946] usb 1-1: USB disconnect, device number 27 [ 317.939779][ T809] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 317.992825][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.992866][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.992896][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.992924][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.992961][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.992990][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.993018][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.993052][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.993085][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 317.993113][ T5886] hid_mf 0003:0079:1846.0004: unknown main item tag 0x0 [ 318.081942][ T5886] hid_mf 0003:0079:1846.0004: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 318.082014][ T5886] hid_mf 0003:0079:1846.0004: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 318.130655][ T809] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 318.130687][ T809] usb 4-1: config 0 has no interface number 0 [ 318.130745][ T809] usb 4-1: config 0 interface 41 has no altsetting 0 [ 318.137544][ T809] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 318.137583][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.137606][ T809] usb 4-1: Product: syz [ 318.137620][ T809] usb 4-1: Manufacturer: syz [ 318.137635][ T809] usb 4-1: SerialNumber: syz [ 318.222744][ T5873] usb 2-1: USB disconnect, device number 28 [ 318.241302][ T809] usb 4-1: config 0 descriptor?? [ 320.196602][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 320.196910][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.237810][ T1840] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 320.460252][ T1840] usb 3-1: Using ep0 maxpacket: 16 [ 320.463752][ T1840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.463781][ T1840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.501805][ T1840] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.502612][ T1840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.502639][ T1840] usb 3-1: Product: syz [ 320.502656][ T1840] usb 3-1: Manufacturer: syz [ 320.502679][ T1840] usb 3-1: SerialNumber: syz [ 320.648154][ T7866] ipip0: entered promiscuous mode [ 320.648183][ T7866] ipip0: entered allmulticast mode [ 320.703982][ T809] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 320.902982][ T1840] usb 3-1: 0:2 : does not exist [ 320.931004][ T1840] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 321.109217][ T809] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 321.109250][ T809] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 321.111110][ T809] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 321.161805][ T809] usb 4-1: USB disconnect, device number 26 [ 321.190179][ T5859] udevd[5859]: setting owner of /dev/bus/usb/004/026 to uid=0, gid=0 failed: No such file or directory [ 321.242250][ T1840] usb 3-1: USB disconnect, device number 20 [ 321.299445][ T5886] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 321.333788][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.466932][ T5811] Bluetooth: hci0: adv larger than maximum supported [ 321.469146][ T5811] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 321.469172][ T5811] Bluetooth: hci0: Malformed LE Event: 0x0d [ 321.496582][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 321.496681][ T5886] usb 1-1: too many configurations: 21, using maximum allowed: 8 [ 321.522536][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 321.522577][ T5886] usb 1-1: can't read configurations, error -71 [ 322.052058][ T5948] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 322.214267][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 322.216789][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.216819][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.244723][ T5948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.244757][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.244778][ T5948] usb 2-1: Product: syz [ 322.244793][ T5948] usb 2-1: Manufacturer: syz [ 322.244809][ T5948] usb 2-1: SerialNumber: syz [ 324.330015][ T5873] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 324.479463][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 324.482657][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.486501][ T5873] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 324.486535][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.486558][ T5873] usb 3-1: Product: syz [ 324.486574][ T5873] usb 3-1: Manufacturer: syz [ 324.486590][ T5873] usb 3-1: SerialNumber: syz [ 325.250511][ T5948] usb 2-1: 0:2 : does not exist [ 325.256338][ T5948] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 325.318151][ T5948] usb 2-1: USB disconnect, device number 29 [ 325.460874][ T5873] usb 3-1: config 0 descriptor?? [ 325.479865][ T5873] usb 3-1: can't set config #0, error -71 [ 325.488333][ T5873] usb 3-1: USB disconnect, device number 21 [ 325.599532][ T5886] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 325.759444][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 325.761721][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.761778][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 325.761825][ T5886] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.761850][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.838349][ T5886] usb 4-1: config 0 descriptor?? [ 325.906215][ T5886] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 326.677477][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.397862][ T7931] tipc: Can't bind to reserved service type 1 [ 328.589466][ T7909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.589708][ T7909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.590081][ T7909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.590302][ T7909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.591248][ T7909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.706862][ T1840] usb 4-1: USB disconnect, device number 27 [ 328.859514][ T5946] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 328.969487][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 329.035544][ T5946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 329.035640][ T5946] usb 1-1: too many configurations: 21, using maximum allowed: 8 [ 329.035683][ T5811] Bluetooth: hci0: adv larger than maximum supported [ 329.035699][ T5811] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 329.035714][ T5811] Bluetooth: hci0: Malformed LE Event: 0x0d [ 329.066241][ T5946] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 329.066287][ T5946] usb 1-1: can't read configurations, error -71 [ 330.166329][ T1840] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 330.206053][ T7907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 330.319577][ T1840] usb 4-1: Using ep0 maxpacket: 16 [ 330.322038][ T1840] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.326592][ T1840] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 330.326625][ T1840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.326648][ T1840] usb 4-1: Product: syz [ 330.326664][ T1840] usb 4-1: Manufacturer: syz [ 330.326680][ T1840] usb 4-1: SerialNumber: syz [ 330.384496][ T1840] usb 4-1: config 0 descriptor?? [ 330.543943][ T1840] hub 4-1:0.0: bad descriptor, ignoring hub [ 330.543986][ T1840] hub 4-1:0.0: probe with driver hub failed with error -5 [ 330.570006][ T7947] fuse: Bad value for 'group_id' [ 330.570028][ T7947] fuse: Bad value for 'group_id' [ 330.649569][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.649615][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 330.649646][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 330.659449][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout [ 330.669434][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 330.861838][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 330.868056][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.868086][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.189105][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.189140][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.189163][ T10] usb 5-1: Product: syz [ 331.189179][ T10] usb 5-1: Manufacturer: syz [ 331.189195][ T10] usb 5-1: SerialNumber: syz [ 332.314937][ T10] usb 5-1: 0:2 : does not exist [ 332.337871][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 332.414027][ T10] usb 5-1: USB disconnect, device number 31 [ 332.523106][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.745056][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.754069][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 333.439599][ T7965] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.668'. [ 333.450997][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.668'. [ 333.451059][ T7965] ------------[ cut here ]------------ [ 333.451065][ T7965] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 333.451085][ T7965] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1d64/0x26d0, CPU#0: syz.0.668/7965 [ 333.451125][ T7965] Modules linked in: [ 333.451156][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz.0.668 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.451178][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 333.451189][ T7965] RIP: 0010:u32_change+0x1d73/0x26d0 [ 333.451210][ T7965] Code: 3d 8f 11 23 06 01 75 33 e8 4a 13 93 f8 eb 50 e8 43 13 93 f8 48 8d 3d 6c 01 47 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 ca 50 8c <67> 48 0f b9 3a e9 eb ee ff ff e8 1e 13 93 f8 eb 24 e8 17 13 93 f8 [ 333.451225][ T7965] RSP: 0018:ffffc9000ed3efe0 EFLAGS: 00010283 [ 333.451239][ T7965] RAX: ffffffff8931727d RBX: ffff88803301e000 RCX: 0000000000000010 [ 333.451251][ T7965] RDX: ffffffff8c50ca80 RSI: 0000000000000020 RDI: ffffffff8f7873f0 [ 333.451262][ T7965] RBP: ffffc9000ed3f198 R08: 0000000000000000 R09: 0000000000000000 [ 333.451273][ T7965] R10: dffffc0000000000 R11: fffffbfff1ed4fb7 R12: ffff88803301dce8 [ 333.451285][ T7965] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 333.451295][ T7965] FS: 00007f591721d6c0(0000) GS:ffff88812632f000(0000) knlGS:0000000000000000 [ 333.451310][ T7965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.451321][ T7965] CR2: 0000200000006040 CR3: 000000004f96a000 CR4: 00000000003526f0 [ 333.451336][ T7965] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 333.451346][ T7965] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 333.451361][ T7965] Call Trace: [ 333.451367][ T7965] [ 333.451386][ T7965] ? __pfx_u32_change+0x10/0x10 [ 333.451424][ T7965] tc_new_tfilter+0xff8/0x1780 [ 333.451445][ T7965] ? kmem_cache_free+0x185/0x6b0 [ 333.451479][ T7965] ? __pfx_tc_new_tfilter+0x10/0x10 [ 333.451521][ T7965] ? __pfx_tc_new_tfilter+0x10/0x10 [ 333.451540][ T7965] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 333.451560][ T7965] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 333.451576][ T7965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.451591][ T7965] ? ref_tracker_free+0x673/0x820 [ 333.451617][ T7965] ? __copy_skb_header+0xa3/0x4a0 [ 333.451640][ T7965] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.451672][ T7965] ? __skb_clone+0x63/0x7a0 [ 333.451699][ T7965] netlink_rcv_skb+0x232/0x4b0 [ 333.451716][ T7965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.451734][ T7965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.451758][ T7965] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.451780][ T7965] netlink_unicast+0x831/0x9f0 [ 333.451811][ T7965] ? __pfx_netlink_unicast+0x10/0x10 [ 333.451838][ T7965] ? netlink_sendmsg+0x650/0xb40 [ 333.451853][ T7965] ? skb_put+0x11b/0x210 [ 333.451874][ T7965] netlink_sendmsg+0x813/0xb40 [ 333.451898][ T7965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.451921][ T7965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.451949][ T7965] ____sys_sendmsg+0x94c/0x9c0 [ 333.451974][ T7965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.452002][ T7965] ? import_iovec+0x73/0xa0 [ 333.452022][ T7965] ___sys_sendmsg+0x2a5/0x360 [ 333.452048][ T7965] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.452074][ T7965] ? __pfx_futex_wake_mark+0x10/0x10 [ 333.452113][ T7965] ? __fget_files+0x2a/0x420 [ 333.452135][ T7965] ? __fget_files+0x3a6/0x420 [ 333.452164][ T7965] __sys_sendmmsg+0x282/0x4e0 [ 333.452189][ T7965] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.452209][ T7965] ? do_futex+0x333/0x420 [ 333.452246][ T7965] ? rcu_is_watching+0x15/0xb0 [ 333.452271][ T7965] __x64_sys_sendmmsg+0xa0/0xc0 [ 333.452293][ T7965] do_syscall_64+0x14d/0xf80 [ 333.452314][ T7965] ? trace_irq_disable+0x3b/0x150 [ 333.452334][ T7965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.452351][ T7965] ? clear_bhb_loop+0x40/0x90 [ 333.452371][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.452388][ T7965] RIP: 0033:0x7f5918fec819 [ 333.452406][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.452421][ T7965] RSP: 002b:00007f591721d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.452436][ T7965] RAX: ffffffffffffffda RBX: 00007f5919266090 RCX: 00007f5918fec819 [ 333.452448][ T7965] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 333.452459][ T7965] RBP: 00007f5919082c91 R08: 0000000000000000 R09: 0000000000000000 [ 333.452470][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.452479][ T7965] R13: 00007f5919266128 R14: 00007f5919266090 R15: 00007ffdf0e5a9b8 [ 333.452504][ T7965] [ 333.452513][ T7965] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.452527][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz.0.668 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.452545][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 333.452555][ T7965] Call Trace: [ 333.452561][ T7965] [ 333.452567][ T7965] vpanic+0x56c/0xa60 [ 333.452593][ T7965] ? __pfx__printk+0x10/0x10 [ 333.452610][ T7965] ? __pfx_vpanic+0x10/0x10 [ 333.452633][ T7965] ? is_bpf_text_address+0x292/0x2b0 [ 333.452663][ T7965] ? is_bpf_text_address+0x26/0x2b0 [ 333.452692][ T7965] panic+0xc5/0xd0 [ 333.452716][ T7965] ? __pfx_panic+0x10/0x10 [ 333.452752][ T7965] __warn+0x315/0x4f0 [ 333.452776][ T7965] ? u32_change+0x1d64/0x26d0 [ 333.452797][ T7965] ? u32_change+0x1d64/0x26d0 [ 333.452818][ T7965] __report_bug+0x29a/0x540 [ 333.452837][ T7965] ? ___sys_sendmsg+0x2a5/0x360 [ 333.452856][ T7965] ? __sys_sendmmsg+0x282/0x4e0 [ 333.452876][ T7965] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 333.452899][ T7965] ? u32_change+0x1d64/0x26d0 [ 333.452919][ T7965] ? __pfx___report_bug+0x10/0x10 [ 333.452953][ T7965] report_bug_entry+0x19a/0x290 [ 333.452973][ T7965] ? u32_change+0x1d73/0x26d0 [ 333.452991][ T7965] ? u32_change+0x1d78/0x26d0 [ 333.453010][ T7965] handle_bug+0xce/0x200 [ 333.453033][ T7965] exc_invalid_op+0x1a/0x50 [ 333.453057][ T7965] asm_exc_invalid_op+0x1a/0x20 [ 333.453072][ T7965] RIP: 0010:u32_change+0x1d73/0x26d0 [ 333.453092][ T7965] Code: 3d 8f 11 23 06 01 75 33 e8 4a 13 93 f8 eb 50 e8 43 13 93 f8 48 8d 3d 6c 01 47 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 ca 50 8c <67> 48 0f b9 3a e9 eb ee ff ff e8 1e 13 93 f8 eb 24 e8 17 13 93 f8 [ 333.453105][ T7965] RSP: 0018:ffffc9000ed3efe0 EFLAGS: 00010283 [ 333.453118][ T7965] RAX: ffffffff8931727d RBX: ffff88803301e000 RCX: 0000000000000010 [ 333.453129][ T7965] RDX: ffffffff8c50ca80 RSI: 0000000000000020 RDI: ffffffff8f7873f0 [ 333.453141][ T7965] RBP: ffffc9000ed3f198 R08: 0000000000000000 R09: 0000000000000000 [ 333.453151][ T7965] R10: dffffc0000000000 R11: fffffbfff1ed4fb7 R12: ffff88803301dce8 [ 333.453164][ T7965] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 333.453179][ T7965] ? u32_change+0x1d5d/0x26d0 [ 333.453215][ T7965] ? __pfx_u32_change+0x10/0x10 [ 333.453252][ T7965] tc_new_tfilter+0xff8/0x1780 [ 333.453273][ T7965] ? kmem_cache_free+0x185/0x6b0 [ 333.453306][ T7965] ? __pfx_tc_new_tfilter+0x10/0x10 [ 333.453349][ T7965] ? __pfx_tc_new_tfilter+0x10/0x10 [ 333.453367][ T7965] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 333.453395][ T7965] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 333.453411][ T7965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.453426][ T7965] ? ref_tracker_free+0x673/0x820 [ 333.453450][ T7965] ? __copy_skb_header+0xa3/0x4a0 [ 333.453472][ T7965] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.453496][ T7965] ? __skb_clone+0x63/0x7a0 [ 333.453523][ T7965] netlink_rcv_skb+0x232/0x4b0 [ 333.453540][ T7965] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.453558][ T7965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.453582][ T7965] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.453604][ T7965] netlink_unicast+0x831/0x9f0 [ 333.453634][ T7965] ? __pfx_netlink_unicast+0x10/0x10 [ 333.453668][ T7965] ? netlink_sendmsg+0x650/0xb40 [ 333.453684][ T7965] ? skb_put+0x11b/0x210 [ 333.453705][ T7965] netlink_sendmsg+0x813/0xb40 [ 333.453728][ T7965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.453752][ T7965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.453780][ T7965] ____sys_sendmsg+0x94c/0x9c0 [ 333.453804][ T7965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.453835][ T7965] ? import_iovec+0x73/0xa0 [ 333.453855][ T7965] ___sys_sendmsg+0x2a5/0x360 [ 333.453880][ T7965] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.453906][ T7965] ? __pfx_futex_wake_mark+0x10/0x10 [ 333.453944][ T7965] ? __fget_files+0x2a/0x420 [ 333.453965][ T7965] ? __fget_files+0x3a6/0x420 [ 333.454001][ T7965] __sys_sendmmsg+0x282/0x4e0 [ 333.454026][ T7965] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.454046][ T7965] ? do_futex+0x333/0x420 [ 333.454083][ T7965] ? rcu_is_watching+0x15/0xb0 [ 333.454107][ T7965] __x64_sys_sendmmsg+0xa0/0xc0 [ 333.454130][ T7965] do_syscall_64+0x14d/0xf80 [ 333.454151][ T7965] ? trace_irq_disable+0x3b/0x150 [ 333.454171][ T7965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.454187][ T7965] ? clear_bhb_loop+0x40/0x90 [ 333.454207][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.454223][ T7965] RIP: 0033:0x7f5918fec819 [ 333.454237][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.454251][ T7965] RSP: 002b:00007f591721d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.454267][ T7965] RAX: ffffffffffffffda RBX: 00007f5919266090 RCX: 00007f5918fec819 [ 333.454279][ T7965] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 333.454290][ T7965] RBP: 00007f5919082c91 R08: 0000000000000000 R09: 0000000000000000 [ 333.454300][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.454309][ T7965] R13: 00007f5919266128 R14: 00007f5919266090 R15: 00007ffdf0e5a9b8 [ 333.454334][ T7965] [ 333.454983][ T7965] Kernel Offset: disabled