last executing test programs: 7.715665448s ago: executing program 2 (id=179): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = syz_open_dev$ndb(&(0x7f0000001f40), 0x0, 0x41) ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f00000007c0)={0x0, 0x0, 0x3a, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYBLOB="9071ef57dfae13e66c35cb022a7ee5b7cfef98b3619e8139e76529732156cdeeddb4d492215bf9ecf7dc78f376ae8d408cd7f3794185b380579a1404dade181b97bb085070236f11c3784350300561918a5fc979cdb3c85aa10d7aa316c95d8326e1dd28a82f715c3a1731284e2c82224fa868480690f7e2279f47fb8433d108396cd95385fc2e9ecd7b8c376a9795d67ad6b703cf7ed0fe06dfef766705d106509b9288b6d80161bd3ab1a247a0", @ANYRESDEC=r0, @ANYRESOCT=r1]}) syz_open_dev$char_usb(0xc, 0xb4, 0x822b) 4.636145994s ago: executing program 2 (id=189): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\xdb\xc9:t\vt,)\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd6\f\xfe\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95\t\x00\x00\x00\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\x02\xe8rP>R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\xed\xceH\x891\x9e\v4Q\xee]\x96W\xb9(<\xd1\xbb\x94\xc8\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xe8\'\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00d\xeex\xb3\xc3J\xc7\x1f\xe33\x14\x16T\x1bb\xc0\x9c\x12\x00'/378) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x1c}], 0x1}, 0x8000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) write$cgroup_devices(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="63202a3a2a207700de2e9878959ed797cb01209b7c12fe5ccba34c5f4dfdfd4d2a46db3eb05043428c65cc5f349289e5cb91a6f0a3269a4274ebeff1c889688b61b9a7214bfb28b60ac63622cb7c33c87c0c8c7832"], 0x8) r5 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[], 0xa) write$cgroup_devices(r5, &(0x7f0000001080)={'b', ' *:* ', 'r\x00'}, 0x8) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe, 0x0, 0x54}}}}}]}}]}}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) write$UHID_CREATE2(r7, 0x0, 0x119) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 4.166018792s ago: executing program 0 (id=192): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad6723f09e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, 0x0, 0x0, 0x12000000, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x100, 0xff, {{0x15, 0x4, 0x0, 0x2f, 0x54, 0x67, 0x0, 0x95, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x89, 0x7, "ac97f58aa6"}, @ssrr={0x89, 0xf, 0x96, [@dev={0xac, 0x14, 0x14, 0x40}, @local, @empty]}, @end, @timestamp_addr={0x44, 0x14, 0x52, 0x1, 0xc, [{@local, 0xa4b40000}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x13, 0xdc, [@multicast2, @multicast2, @rand_addr=0x64010101, @multicast2]}]}}}}}) sendmsg$xdp(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, r4, 0x10}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000280)="f037fe26a2695afeb65ebf2e76b551e1ea9f19872b3bc69dcec1248e6153e7aaed2e68a984240c16d337c2fd4c47a6b1e04c1e53bcb17f3e0810f5bb3973499b172296f02840288058f684f511978d597037c334c1858a64b726138c24763b834e6debb119d6eac6ccfc63bbef1fcf91cc708c0064372d8deab3b52126b1758ee25d444ad7ee505cd68550d717b86b36b9a45cb3e304b4d676237ee057a4670a03c4b082a94faadc511739e795cf0ca1780394a18921b139779befa2", 0xbc}, {&(0x7f0000000340)="3f67be7c336c978e1413c08549f12649b91deae52683ebd4b25573bd4d8d03a38be1867dcc6d566accbde7a8640afc398f4653323cea9a1ea744329441dac3b588a26a26715ab4b98ddbc8c98b41d1da795be125ce462cd77800925877235484d84ddfa630434589d0bbb903525b91ea7786c8a0e85db40c2ec25ff53703c9926b47fb6f1fb56d094c634316cd324fda8d9375382a02650a20d2c28bb349efb09886c77bff6fc1c20a54bde9b2f24de2cfa45193182225a800b970ea7dfa83f9ecbc325e742f2d29d06bc02baca9e8f021269f9ce636972b1f66c58c84ae74", 0xdf}, {&(0x7f0000000500)="f477b035b52a04250277def8c9517e58426d0437cf2d2fb2eb13f1b2496c5274965984b9073bee6c13ce039f070f000890cff2c29ed00470985bece8be340c66425b0176816bf5240f6d5cccbc943beb26f390b53be70f8d0047d8b2041d1e3bde48bde25797a8517c31dfb582ef873a4a1d299a2152ff04117797b6e9eec347f6e7387862c404b6a8cd87269fc5b0c6afd126a1ae76815500c6fc51d600d56ad205a6e05c3262edc5ffcf2edd554ce8126dfe7afab317becfcb46320b0bcbc4919cdb945d63c17f92f101689ad09b379f4ea73a365e91cc794c4a06d9f7d0", 0xdf}, {&(0x7f0000000600)="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", 0xfa}, {&(0x7f00000001c0)="7bddd091edc406194bcfcba8dcf0517e999ef657cc495dffdc2db3710056", 0x1e}, {&(0x7f0000000700)="a8fb3b882ffbce75f72eaeb4fb80177d7ce89229317fea47a19e048dcdd454d54ea297f9f9c96fa014eb81e93802f2f17f5c16ac84214e6a1693a1850b6e976b2174c6eae4b700e6cdcedddda537bc92fb33113f0b32616c16451fe842efd4e129732af4302f7ce49081e78e52b21eda6da0e06c0d90ca243ab99a261512192c7c5339d91a82fd221345be924c95c9e715a83f28912ea5ff1b764326f20d094e092e93ec8f423929e5cfc2171f0516cd29d4317b641b0833b0d517d516a9a125715af147d8a755f4c661bb5c826ba042d4381fe90534", 0xd6}, {&(0x7f0000000800)="1f12f606d0cc5d9322d844cc708c0b215f30b51b9d39ce4c03723f63455b1a11cb1c7fdcc6bb509e45d6b4ffac4bc4dcfde14f56a3f48f43a776353b47b99d413e61bac0c745a81a577cf08df2ff7c38a3079f5e690cf4", 0x57}, {&(0x7f0000000880)="ce588b96e8ec5ef25be10900ffeb979945e9005ac9d84d5742bae5a773f03c9a75561798616332eed061ad7b7a21bf5a705790484d28b4615bb651c2780a61aaea0f1359b5732cd71bdcf29e62cef47c010107bce0cb3ccb1c014dd51ac33a0f1f6e40241f5608fad4283ef416c1bd89522337b8666f8f1a971bdfbecc434834bd43715cdc18aad0f6ddb705b277c6b492939d42d01b8d7dd67aadcc71a5433886d8e7eb9613519e501ed9b056c05ff9481f6cf416fbbfdd1299127ef97afe462559e6e800017be9fae0c3d47d4a8b807eba96af597ee2c4a7e423ef58", 0xdd}, {&(0x7f0000000fc0)="d5b87641cecab690c5b54e5a03130b5aaabdc92741f94e556e3f26742f08fc5fe8c6f046d7864df9f4127ce4eac4b5e2a1d472d665b4953be3ac5fa29ff64363e2a3e8dd877c4a4dae4e37bc4f6e2bc4ca71248c908f12e7ea50782bf862b4e98cef41d7eaeb2c412e300b27111ba25ba4b47eb36da1f416101dcee41dbfe4a000234f71d3736cc2d68b98b9f78e8a25f4d76e27f2ee34e69f0be5d0ef4ad3fc948585a3cfab8e775d86f0c1e7406d3d65ecc055ec5e003922a9fc9273525733c1225dc17c89b6b392e994d949c5de1c5309d609ffdbd1e3eae6e8c0c6ff00888a77c46b0f8c3ee6cf1fa36088270dead568930fced0c49309fff791fe517b06e59ac3ca5f2e96b7db51864960b251d55e7c0e6a08308613123055912e3c32f560df4a697e600b445b3f0b840751e0412b5853fc6836b60215924c4a30ed36f545e7308ce831d11417a967b040e4ccf7628eefacb9855e99a35143c7fff6e461ff112bc2cdcef1cca7b196214550dea4767fefbe0f8ef2cc9f973cff4b06f870b42f4a67a0cc934ff7191ecdd0b4582a89017d194a20cbaf7dbc320ca93329007b0b70d08b25dd04484c875ff2afa4435424cdd2cb840cea2daf4968cc49ea574c784676c919351b1515475e6067ce5834c8de3e8cb954d3b5e0bfae9d83d4fe8b942df65f07d5a60c29dafe82848852abc22f2bda9ea6d501aede70a3d15bca2e46c46f2878a0ba70c105a908c5050e9a82dd93e6edac6c32881ef7eea3ebd7ae4667a47e5acfd631ebe1ab518e357b14ccd360653d3d1dde6dbe05fe0697069b114153fde420b1e3d867ca94bc6eb5afdc96890bcaf679f93b98bf0fce6aa1b0d9d0bd776f15244ef2ab47db0b518f1ec9386dbb1c245f0cce25c52941b0c76b66c6c6455d87e7df1c7b26c300e99a452705af1b360776fc57bbbec313173bcd71de0596946d7afdb578827ad5f7f3719f9800609d0cc755c17880c2a798313395fcb8bdf8c53b1b38d65a836ea58e0bca2bb417bd2f4539e3fa651e4407cf7c833ab2b1f97c2b5e4e9ab63d28a8c8d5fabc20e594ee75b2f1faca4955811dd83066ffd66915045cf270c6b0100ec1b7ef9cb0cd29b2c3636c5378fc5ff8c730f7435a1d9da13f56c66268bcccc03ee0855067804f3eb9bc19aca8ab5216c0f2d938e2eca3240c3c82cd472c0bf16d6e2e210f24c27729b0da6a651c10c3545073a7f5b8a182d1cb7f84f87261a4c91ebe44d9eefd822754a383da830d00b16e6833b6cdc6607f9e18522d160a83db1fbf622efcfc5f9d7a2b66ac14f9f52f8175b4eee1ed4a1f1f6307fba2900b7ac9bc1e988af42e11cc417d78795f36f7049d6165cf516ab479ebe2bdd0a14c0eb022540b46b0c565d3583721607cdf5abe5631cc81aa0d275f58b1ca19766e90d1f99c84d27da8fae7915a43e9662823d345ca4746c29836c23951ec79ed98d542a5033283e35343b3a55a3c0f9b685b39fe6566ca0344c8d9abcbb3dfcbb82c8f0f36d01471705620157500eb91ca4bd30e7bb06e56f64ae397182e2c34a5c18222041381937925bb1af2711888d620b4339d4a88c47ce7eab684722b211e5dd62d068ee3640eb45ae976729c5d3853108662c233bdd3b413354fd568b889157e42c998f40be43fed5d1d5034ae101eed611360121cad4376e1f6fb6883afa50c17ffc0b9d766435bb82317ca0d32bb539a7a9507a0187c0477885883cbee55c13d0a1d81f3b176829eb00cff8068b77476e89a68cd98a4824f7efb214a162481c4064d028821097e1a1675dd31b13c02b0ff321940f7a6b06014d419e1599ac36b462be4528aeef73ab91494111ecb6a3e5ec02a491e6e7c89ffdeabb52a742565b27c23f9487dacd310e9f7e69b34b0c9c1e7ca909dcfa4bacbb22894599f468f2f60445dcba83cdd626184ad527df2e821da7c9797d6182ce0a38227498e0f51e46a733b88e0543d2e80d123e94f551a88232b84a4657bbd51333f5d9b19d860ede312717690cec0ddfb277f787ceeb625b53c181821c1bba4495c251c7f4c0f70372289465e1de047120b2cd8ff18b30db7613ba931c3e0b195786fd75079987368928ac86d2087520c66847c5dbef5f3d7e4e273508ed4ccc716825c8877d7a5e596c86b13d0e8fb93f51779979a35b2e73a4da8416d8516b905e8ac7bf9204889274752c3e72dd88e3450d95e3725d1157c4e0703dadaf78ab5e01fcfeebf4aa471efaff2c6b4ab605a8a0fe8ca573133273120a7d65d9d296066776c2e4d4e9365728b8560fffeb51850b72de510d67523dd938de28ecadb4f1d829422f61aa4bdd0db4a7b7268f03eea82828c75b7ae6db703618b1ff00d4c8a50785e8beb9c959bdbc47af0bd3dc409a96e2853105c3908bb5a28e7ee0a2fcc41fb9ef2caa648b63ed43bb42cbdd23346d0b2ea59f8fc9f713014a25272342a89af2d1f41f01c70f0041b3a534df3b1c2e7d6dc5aa625663fdba26f5dbbc5ef99fa9f878ee8e3c82260adac25007627a149e98a38b702440be1f4c6e36417a4bc85af99f56bbea09103f9919ce1c738a3ff1573b6502a40c3563b70855c5922a59b9b414253092ec589a28be6f60b1d979445d659b2720a94314145b0ccab70ae91acd1a534bc483b9fc2ecd37a5b12a37a1c2d8067d45c193be575d4179672ea7b992b3cbbc8adcb8bc79ca25eed6ee9edd381b645eddc3f58d47b5013a6685fa8e83ff2dba8b635af349b09e8f4e7be00422072b52d336a7f7e46a2e5d11ea9effd57b454b905b0f8388a4973b7814a34e3bfcd473ee08c56001c57aee41bc255219755cc34847fc56e432224961d79dec9b5426c75c0d66cc16d6d92aa8eca9a48c4bf6c179cf60d9c806b853a3e6b87b1c43dca00fce9e41b51f6822592a7ee5859c15b4048a229c13cd9ef91efa3d539bd5057a768d254e3aa2714509e881c9889dc48daf2ade4de8e7cebe0d68063908f1927367c7e545e6e52fd7967a50e6ceabcf07add1d64193dd9a5e4240848c75fb8e081648aa924d8a6d963078d9c9b64b7a8af26200068be03086870d022a06b41b80acfb1a566bf26573e0d3dd7ac1d2528349dce060c7fdcaa9eb6512a0019731a0cc85e0c0dd1c5694e6c53ed4e91b4d828b8b8cb7e7dfbbb36894c8f00d4cdd7314d9293860266989039166d2afe648b17192b08c9690d9699679e4fcbd945c38437e60be55e516eaee696d869b551d8085084505c7eaa329b54fdf3ee5820f874d3f61ff48a8a9a527b39097a7c6b85803fd12598480ec8b66b625ad8b252bdfab179b7cb13af0d191a9ed0f47aae6dc8976ced8e37f81ac612865ff8f22f01af1ace50543b4941da79d120eb1e77fdef58dc2b00836ec8251ab18f98a5a2be3486be122bfda2f149a0aab8e1bcca77811268833ac1b96d110607a31051b4e1e8737c5c71ed1a5d2b0d0b6c63e3be4ae6cf5954304db53175d6a282ae06cf9733c9ce104bbd4c871b4c47fefba64e2f63486720f8e04c217bf2e6701bcff9883541f39e415395922d2104e5bb3c8f9585fcd85a2f286153067926e9eee04352685671ff83197db3fff910868ebdb4ed7abae71aa7ee4745566de7d9f8dc6a7e0b73d00396ff637c514543fb4ba2acd9fe25cc2ea93dfe421c9caf1dc947c3a9660d96d142f0f7f3e378c184f12d7e86427a77e7faee38452b93f8688637e7232d9e032d5bfcc9a3a991adce23b85e479ea6276ad1bfc1847f460182e528e978f9d93df87cf606945bcd0809e85a00e206d6af804e04ed33e1ec75e375321472df53674c2d61d60a0c9a239f2cec9a8fd396575aeaedd9fb33ab719bfb7d0af5c66523b7c2834b2f991be50e6d6af64a75502de84d256230ac23950e5db386d094edf18cf99fbaaf29098e81d4d277a8ae55425b5d455bfd02fe43a450fcf5996537a23f195680a0614350d306130978ef365d7e7f5fc41b69502310a001d7c1b6d8c6f4ec6d5796b1a95a366aacb49337c43f4f8191bb9a069dd443d0187ade2690b952310fd68e7b3209d91b2ed3dac291155f3b4f87915a81c78c5e37f103be28865c464b5ce62bc16c621ed70ff074b2ef60ac062e65f7a6849b2643b0d31b95c51cf55b591300b84f7bfe51ae6ab7caffd5418bbebc00bd28e1bc3b18fb947f8e7a94fe12074d80bd695e239fdd094c41f583267b9c1d92f91c915bee49aaa1e6ab96342fb37404cc5cba727afa4ea390243b314c70494aaa7eb40f282ad0346259e6ef17abd156db76cb282a07e2fd702b4db30ccbb530ac9ed389b4601b2ab2b34977a2860a0d6ba7880f47dc68be8bd38ccf88f57603c6fed9d6ab3c41bd47a93bcce7df67b14f1fb7ee303a091ef9bfd5388ed388981976056335e9d42a6280a21623e8bb0a838f7f5faeffdbffebe87b9363dd07a21cf7ba5e803b3134919879b803868a6a08554912246bbda5432d4a8d91b254139a643e89561b6344b6856010827faa3aa2cf3ed31caff9e7c46e5af39d76b0b0d619c3c2fa14774d9c41c6387ea235c242190f3ac25a760b668868cc433d9b46e943a14647cd7c0d799df14dc9252dca611dd4f0a38defd10cb86a57b9aef97687b285a3eb73d38b9b0d1b41c6a73e525493d8b4f22f0080b4b15ed322f898473a51a9e09a0a5b4a4a9e8d23bd1865d9d0d88b6d1988f673859ca02272d5327ca9662492050d418c754e57d7fe21105c123469cf21218d6fa694ce9dfc9303fcc0acd23dbec527fbaaf25e8fe8b7dc161aee487c0ce33f1686bfc5fd1326e7feafd48c74f913377d3e053ffc33c4205875230bc4d670728eb211f83dd46dd7ad7ba85721d4db43849a2f9aa223435caf490511f31c8ee0a29337171baa891c7f7d72e8b8b14340b33af67e318119a9b989f147969dbda68cacd7914dc9d924fc4ea051003e8182fc67add4c5b36fff07a8071bb036bb7f6b6e26a320b2c0cbb266886085c4bf22b5ee0114c46bb96749f18603330da23ed261dc99dafec765663310cef1b087ae8ffb48b070db707855b1987449bda3569d40cdc409c0daab5ef562347ab7c32add1f1bd1d0d6e7dafed963d99e8c53b1d1b1b080a348486cbbdac64391faf255f0c88c84e549cee9df738bd4fd45a1c29726f8a66a5a9de888b5ee78fddd280ef1c9cf3767831d3352a537e3d35062d1c251cbd5c7f1aac8e7574efab701182eb938eedddf1d3c1f26cc3297885bddf93d436f682975acdc76254e6947ddf0b84322354d3b036593a00ffdd296b78d422b9bb589e20e89bbc5b1444fc8d2cef13825259094d453442c5298b3766bfc26c629b23a66780782996ce79072cc99ff35f1ce36269f5dfa6e81a45b7d34bea6e62348f4b23b1b693d63b548fd4885f0da142715177c3389a880424b914b269215176414f3ad76b6619852debb1639b1d03a321b8d2eeda50c7bc953d807a79536958a738a7fd05d61b05e06c41260df4cdfccf2464a869ac04eb37b36c0fa7309a22760a7dee11524301d6c6e08a1eb0c36b41c6483c077b861415b9185d39c948e6af1aa3db59adcb9cacae9e191ee4711a8a3d4e90206da1bc01e1bd88e87d44e068cda732039dfd39f70554d83d9a430a1ff50e052c3f6646ecb752a1c073e03e8336062eb6343749b71cba9ef0a8131dbb1bca62fe131e9bd092638445da4491e636402ab01bfd5a9ba8751af80c0f5c4545ea9d5b7cb9f7ddaac00ac3c936c09e9e0afbcdc78e06a5c0dc17471e1dda27975cbe4d4f32faa4ce5bbef119cb2a575def1a12fd848d1", 0x1000}], 0x9, 0x0, 0x0, 0x40000}, 0x20000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.016173617s ago: executing program 2 (id=193): syz_usb_connect(0x2, 0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="120100008020f010402038b1ff0104000001090238"], 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000120a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3.252032054s ago: executing program 1 (id=194): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x548], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x2f00}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x85, 0x0, 0x5d30, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 3.165495274s ago: executing program 1 (id=195): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x5, 0x9, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7830, 0x40, 0x32e6114c, 0xb7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x8, 0x20, 0x2, 0x5, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @end]}}}}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xa348, 0x1}, 0xe) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000200)={0x1, 0xffff8001}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x0, 0x0, 0x1, 0x6, 0xfffffffffffffffc, 0x5, 0x2, 0x25ca26a8, 0x7, 0x7fff, 0x5, 0x4, 0x4, 0x4, 0x7], 0xdddd1000}) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000300)=0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='\xaa\xaa\xaa\xaa\xaa', 0x5) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e22, 0x5, @empty, 0x101}, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb11}, 0x0, {[0x5, 0x1, 0x0, 0xd, 0x0, 0xeb8b0, 0x5, 0xe3]}}, 0x5c) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000440), &(0x7f0000000480)=0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000004c0)=0x9, 0x4) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000500)={0x3, 0x41d265bdc6140684, 0x7, 0x0, 0x5, 0xff, 0x8, 0x2, 0xfffffffc, 0x2a87, 0x1, 0x0, 0x0, 0x7fffffff}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000540), &(0x7f0000000580)={'U-', 0x3}, 0x16, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xd5d, 0x1, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000700)="9368d391a4055bd0c504103b7d23e20902d47298afd1748f56795cf651ccdfb53fd9aff33e49007a6357154699d2e0f071fd94b388ab9d85c914ab4dba1d3decc7a097e2d71f78fb90cdb15b91bf8fc51132b497f21de40231d02d3dacc01a853d36a3f66e59517a118c") ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000780)={0x9, "155c9df4e0eb6f06f1a30e398778abcb0c6b6bb34bfb756673288b1feec35554ffc14140416fb494a17cc838b521d6af62f9fad2d0c825643f7f5270da2ef5ff2cfa65391dc8231dc2a2b4d9d1045cfb07cb92eb1bb9e24163f1651a4c985a77d2f55d012abea4f64d7588df5cfef69352539b44120de32a8e383e30d9665866"}) r5 = dup(r0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000840)={r5}) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000880), &(0x7f00000008c0)=0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e23}, 0x6e) timer_create(0x3, &(0x7f0000000980)={0x0, 0x36, 0x6}, &(0x7f00000009c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000a00)={{0x77359400}, {0x77359400}}, &(0x7f0000000a40)) timer_gettime(r7, &(0x7f0000000a80)) openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffe, 0x80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) 3.068164878s ago: executing program 1 (id=196): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0xb5, @mcast2, 0x2}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x7, 0x6, 0x200, 0xbcd9, 0x2, 0x1, 0x753, 0x2, r3}, &(0x7f0000000140)=0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080006400000000108000340000000040900010073797a30000000000900020073797a320000000014000000110a00"/124], 0x7c}}, 0x0) preadv(r4, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/111, 0x6f}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/64, 0x40}], 0x7, 0x8, 0x40000000) 2.930332278s ago: executing program 3 (id=197): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) r2 = fanotify_init(0x1, 0x2) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x9, {0x6, 0xcbff, 0x0, {0x5, 0x5, 0x200000003, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x1000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fanotify_mark(r2, 0x41, 0x38, r3, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f00080003"], 0x78) (async) close(r4) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dcd69f205a04105201010102030109022400010000100009042e00027e3a110009050202000001000009058202"], 0x0) 2.83348419s ago: executing program 2 (id=198): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x806c4120, 0x40944f9c780000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000054}, 0x40000) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x1, 0x70bd2b, 0xa, {{}, {@val={0x8}, @val={0xc, 0x99, {0xab23, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) 2.736040413s ago: executing program 2 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000a000000000001"], 0xffe) 2.171342538s ago: executing program 0 (id=200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c4000000190001000000000000000000fe800000000000000000000000000037000000000000000000000000000000014e22000000000000"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000190001000000000000000000fe800000000000000000000000000037000000000000000000690000000000014e2280ff000000000a"], 0xd0}}, 0x0) 2.085305694s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000fa0a247d0600000021889a9bdc925172eafd784ed445a76df23e3d2f0c06c003d5aec4683fb6882fb638fc19511cf5f643c5283a0e274a11c509fdf5d70bc381968fc77a9a970142c72c6e56cbd2d224", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1400) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in=@empty}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', &(0x7f0000000580), 0x6000) getuid() r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x9, 0x4, 0x6, 0x7ff, {0x1, 0x8010001, 0xfffffffffffffff7, 0x40d, 0x6, 0x104, 0xed1, 0x2, 0x5, 0xc000, 0xfffffffc, r4, r5, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x4}, [], {0x4, 0x2}, [{0x8, 0x1, r5}, {0x8, 0x86a178b8432d9cc7, r6}, {0x8, 0x54a565410b4411cf, r7}], {0x10, 0x7}, {0x20, 0x1}}, 0x3c, 0x4) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x810000, 0x0) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000005080)) 1.920202447s ago: executing program 0 (id=202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000003000/0xf000)=nil, 0xf000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.482854138s ago: executing program 3 (id=203): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x548], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x2f00}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x85, 0x0, 0x5d30, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 1.472293745s ago: executing program 0 (id=204): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002) read$sequencer(r0, &(0x7f0000000000)=""/158, 0x9e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 1.30386768s ago: executing program 2 (id=205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001030000005d8863011287f702522ae5ee9d31fb792a4413459914331d6e0051f87c049d99d88326a8ecaf9ca456ca0a2b70235f2292fa5a0eb9f8ef6277f84768f370da5f6d229393159cf312b2"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x20, 0x1, 0xd, "b68ef1c291785b8e54bef54eed"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0xd, "1b5f16d1fd98e4568487f083be"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000100)={0x20, 0x30, 0xdd, {0xdd, 0x6, "34a9136fc37ac614f95b5316019badc2659e179827dead775e55f7fa57d1338cea85c902aa9321bd273127a18956b483ae21bbf3b2e08badccaa92cd752b17aee4dbe83e71b71ceddab5b4b32ba5305b2ef5b8dbcbd9c1e09e1d773487d79d9b28299cd4a2f3508de67e17fe3300be4a41293fa2b3879404251b8228a149d27403120561820c240a37970a5abdb5d4c2cb03007a63b4b42cbd93cfb93fce45a01218394d4b71b4224e9d9314eb4f4edb4744ff17a51a03c4138185fb8a5ddfc4bf8cb9f94a7f002fb60aecd63847e13991a43b587c6c03b321d0af"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, "e0eda5e2"}, @local=@item_012={0x1, 0x2, 0xa, "fa"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7f, 0x1, {0x22, 0x81f}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x0, 0x1, 0x9c, "d907044177fdb45a6813275b5e2ab3e474592531e03d04f94334471d28a20f16e29d3cb396c04724fe070e1927146786da3fe57e5851e08f063ff4017d18bd37ae018251c92bd12c736381c80089f12f26008e7774be81fcb0330543e957ad38bf17221fc5b9314ef07ca720de59dd5ad3952112bb07f63854a4f187946edac212518cf1ef9890972f23de35ea3fc8cfd41f18f968b8e19dcce9779a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x1, 0xac, "075e9ca734a8e424627abc7978e2f6b5760e62c8959edc57a923a87fb9f477fa2decb35a39ff1897c035ff1714c45bdf81c67010ae834f4b32d7eff80df50dab65abfb8b871d4045c7c8c5226f85658a667eda83b50e2d4ca10e611847f29e74897c59a50b61ff9300f3a3eef5fbc25b8302bbcb4c47788af5194492152de139be729f0eea4893d5ed13f272799c2ba838243b9afa7df4ab571b278cfbf3ffc9baba167673114db09d2f142e"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x40, 0x7, 0xd, "e3bc504968cb03b9591f823aea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.303688907s ago: executing program 3 (id=206): syz_usb_connect(0x2, 0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="120100008020f010402038b1ff0104000001090238"], 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000160a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1.070930795s ago: executing program 0 (id=207): unshare(0x66000080) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$RNDADDENTROPY(r3, 0x5207, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r7, @ANYBLOB="42f21ff63f81dce5b9df68ddbefe5c09000641f2ceae2abc43ec17947f7877af0e7cf4ea000074507ff3909d84d277a6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r11 = getpgrp(0x0) fcntl$lock(r3, 0x5, &(0x7f0000000240)={0x1, 0x4, 0x9, 0x100, r11}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4004850}, 0x400c040) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r12, 0x3b88, &(0x7f0000000100)={0x8}) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d0000000109023600010000000009040000040341000009050a0000000000000905ffff"], 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) unshare(0x7c000200) ppoll(&(0x7f0000000000)=[{r0, 0x40}, {r0, 0x2}, {r13, 0xd159}, {r4, 0x400}, {r0, 0x4204}], 0x5, &(0x7f00000000c0)={r14, r15+10000000}, &(0x7f0000000100)={[0x9]}, 0x8) 1.070655343s ago: executing program 1 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) setpgid(0x0, r0) chdir(&(0x7f0000000180)='./file1\x00') mount$9p_tcp(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4c6a2bc6ddf7f27, &(0x7f0000000480)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@afid={'afid', 0x3d, 0xdad}}, {@debug={'debug', 0x3d, 0x6}}, {@cache_mmap}, {@version_u}, {@access_client}, {@loose}], [{@permit_directio}, {@obj_type}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@audit}, {@seclabel}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, ':.,]'}}, {@obj_role={'obj_role', 0x3d, 'autofs\x00'}}, {@fsname={'fsname', 0x3d, 'autofs\x00'}}]}}) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000140)=0x80) 352.710883ms ago: executing program 1 (id=209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c4000000190001000000000000000000fe800000000000000000000000000037000000000000000000000000000000014e22000000000000"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000190001000000000000000000fe800000000000000000000000000037000000000000000000690000000000014e22f0ff000000000a"], 0xd0}}, 0x0) 285.53173ms ago: executing program 1 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000080), 0x4) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000080), 0x4) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559"], 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 32.120729ms ago: executing program 3 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x101000) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) close(0x3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) 31.803662ms ago: executing program 3 (id=212): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x8, 0x2, 0x0, "2115beba7af972a16fd06e6b5694848119e1a8bc94b6871c7f46690000000011"}) (async) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) landlock_restrict_self(r3, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e5, 0x4}) (async) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) landlock_restrict_self(r3, 0x0) (async) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000002c0)={0x2}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) r8 = dup(r7) write$tun(r8, &(0x7f0000000000)={@val={0x0, 0x1b}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast1}}, 0x38) (async) shutdown(r8, 0x1) 0s ago: executing program 3 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000b000000000001"], 0xffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 65.045746][ T5809] cgroup: Unknown subsys name 'net' [ 65.198460][ T5809] cgroup: Unknown subsys name 'cpuset' [ 65.206954][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.646822][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.675311][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.683366][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.691355][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.691434][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.707445][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.715880][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.723140][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.723364][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.738731][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.740538][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.746790][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.752790][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.762425][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.769532][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.775191][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.782500][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.795156][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.803036][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.813132][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.843164][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.324096][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 69.429223][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 69.577371][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 69.603006][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.672165][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.680003][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.687600][ T5819] bridge_slave_0: entered allmulticast mode [ 69.695244][ T5819] bridge_slave_0: entered promiscuous mode [ 69.723609][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.730912][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.738138][ T5821] bridge_slave_0: entered allmulticast mode [ 69.745220][ T5821] bridge_slave_0: entered promiscuous mode [ 69.753187][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.760401][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.767617][ T5821] bridge_slave_1: entered allmulticast mode [ 69.775519][ T5821] bridge_slave_1: entered promiscuous mode [ 69.782934][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.790213][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.797565][ T5819] bridge_slave_1: entered allmulticast mode [ 69.804527][ T5819] bridge_slave_1: entered promiscuous mode [ 69.895325][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.908700][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.936307][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.947562][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.033240][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.040618][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.048228][ T5822] bridge_slave_0: entered allmulticast mode [ 70.055412][ T5822] bridge_slave_0: entered promiscuous mode [ 70.076047][ T5819] team0: Port device team_slave_0 added [ 70.081830][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.089092][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.096397][ T5820] bridge_slave_0: entered allmulticast mode [ 70.103514][ T5820] bridge_slave_0: entered promiscuous mode [ 70.111329][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.118707][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.126556][ T5822] bridge_slave_1: entered allmulticast mode [ 70.133505][ T5822] bridge_slave_1: entered promiscuous mode [ 70.142666][ T5821] team0: Port device team_slave_0 added [ 70.150577][ T5819] team0: Port device team_slave_1 added [ 70.156557][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.163747][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.171027][ T5820] bridge_slave_1: entered allmulticast mode [ 70.178062][ T5820] bridge_slave_1: entered promiscuous mode [ 70.198523][ T5821] team0: Port device team_slave_1 added [ 70.256312][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.308761][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.318974][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.326424][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.352611][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.367406][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.377408][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.384351][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.410491][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.433095][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.440108][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.466723][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.479608][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.504765][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.511734][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.538142][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.594481][ T5820] team0: Port device team_slave_0 added [ 70.602852][ T5822] team0: Port device team_slave_0 added [ 70.611667][ T5822] team0: Port device team_slave_1 added [ 70.635796][ T5820] team0: Port device team_slave_1 added [ 70.707186][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.714158][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.740871][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.783595][ T5819] hsr_slave_0: entered promiscuous mode [ 70.790154][ T5819] hsr_slave_1: entered promiscuous mode [ 70.798087][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.805411][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.831762][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.836276][ T5835] Bluetooth: hci2: command tx timeout [ 70.854883][ T5821] hsr_slave_0: entered promiscuous mode [ 70.861242][ T5821] hsr_slave_1: entered promiscuous mode [ 70.867643][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 70.873416][ T5821] Cannot create hsr debugfs directory [ 70.879919][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.887220][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.913428][ T5835] Bluetooth: hci1: command tx timeout [ 70.913585][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.919527][ T52] Bluetooth: hci3: command tx timeout [ 70.935414][ T5829] Bluetooth: hci0: command tx timeout [ 70.937880][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.947860][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.974065][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.102566][ T5822] hsr_slave_0: entered promiscuous mode [ 71.109447][ T5822] hsr_slave_1: entered promiscuous mode [ 71.115743][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 71.121470][ T5822] Cannot create hsr debugfs directory [ 71.158460][ T5820] hsr_slave_0: entered promiscuous mode [ 71.165478][ T5820] hsr_slave_1: entered promiscuous mode [ 71.171901][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 71.177668][ T5820] Cannot create hsr debugfs directory [ 71.304738][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.311361][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.598866][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.612580][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.626879][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.648445][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.705601][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.718068][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.730317][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.743422][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.843119][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.853530][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.866518][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.876923][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.971910][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.982877][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.992937][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.003165][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.097579][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.116424][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.182043][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.192300][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.208288][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.215621][ T3967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.241247][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.248463][ T3967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.276662][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.283764][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.293768][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.300884][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.368812][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.400299][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.457994][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.469968][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.500224][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.507447][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.519250][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.526459][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.567328][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.574578][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.593278][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.600533][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.897192][ T52] Bluetooth: hci2: command tx timeout [ 72.900970][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.957444][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.976103][ T52] Bluetooth: hci3: command tx timeout [ 72.981543][ T52] Bluetooth: hci1: command tx timeout [ 72.987118][ T5835] Bluetooth: hci0: command tx timeout [ 73.070655][ T5821] veth0_vlan: entered promiscuous mode [ 73.107100][ T5821] veth1_vlan: entered promiscuous mode [ 73.118248][ T5819] veth0_vlan: entered promiscuous mode [ 73.140513][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.178765][ T5819] veth1_vlan: entered promiscuous mode [ 73.194832][ T5821] veth0_macvtap: entered promiscuous mode [ 73.221559][ T5821] veth1_macvtap: entered promiscuous mode [ 73.233605][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.267444][ T5819] veth0_macvtap: entered promiscuous mode [ 73.290128][ T5819] veth1_macvtap: entered promiscuous mode [ 73.304547][ T5820] veth0_vlan: entered promiscuous mode [ 73.335611][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.349546][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.364246][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.381519][ T5820] veth1_vlan: entered promiscuous mode [ 73.408447][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.426381][ T3967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.437903][ T3967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.461616][ T3967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.471759][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.498543][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.508797][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.518188][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.541793][ T5822] veth0_vlan: entered promiscuous mode [ 73.551385][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.591333][ T5820] veth0_macvtap: entered promiscuous mode [ 73.608809][ T5822] veth1_vlan: entered promiscuous mode [ 73.631627][ T5820] veth1_macvtap: entered promiscuous mode [ 73.711702][ T3967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.725853][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.733991][ T733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.744132][ T3967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.752367][ T733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.771249][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.814322][ T5822] veth0_macvtap: entered promiscuous mode [ 73.826642][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861063][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.870062][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.881373][ T733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.891600][ T733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.894504][ T5822] veth1_macvtap: entered promiscuous mode [ 73.912568][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.937870][ T733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.948353][ T733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.001515][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.031262][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.034677][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.079875][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.093812][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.107435][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.116312][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.147741][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.186524][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.251638][ T5913] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 74.279079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.288325][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.352323][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.363730][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.430958][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.446633][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.457981][ T5890] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 74.505133][ T5828] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.638244][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.648687][ T5890] usb 3-1: config 0 has no interfaces? [ 74.665139][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 74.674741][ T5890] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 74.675628][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 74.683694][ T5890] usb 3-1: Manufacturer: syz [ 74.690374][ T5828] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.697156][ T5890] usb 3-1: config 0 descriptor?? [ 74.703690][ T5828] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.726096][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.739611][ T5828] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 74.751073][ T5828] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 74.761664][ T5828] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.776424][ T5828] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.786264][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.802095][ T5828] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 74.866479][ T5914] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 74.899988][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.911712][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.923748][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 74.932967][ T5909] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 74.941730][ T5909] usb 2-1: Manufacturer: syz [ 74.949250][ T5909] usb 2-1: config 0 descriptor?? [ 74.963151][ T5891] usb 3-1: USB disconnect, device number 2 [ 74.975271][ T52] Bluetooth: hci2: command tx timeout [ 75.008639][ T43] usb 1-1: USB disconnect, device number 2 [ 75.037734][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.050118][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 75.055308][ T5829] Bluetooth: hci0: command tx timeout [ 75.063147][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 75.067145][ T5835] Bluetooth: hci3: command tx timeout [ 75.080781][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 69, setting to 64 [ 75.083471][ T52] Bluetooth: hci1: command tx timeout [ 75.095457][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.121157][ T5914] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 75.130885][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 75.139997][ T5914] usb 4-1: Product: syz [ 75.144168][ T5914] usb 4-1: Manufacturer: syz [ 75.149950][ T5914] usb 4-1: SerialNumber: syz [ 75.162590][ T5914] usb 4-1: config 0 descriptor?? [ 75.169511][ T5918] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 75.379422][ T5914] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 75.386431][ T5914] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 75.427954][ T5909] usbhid 2-1:0.0: can't add hid device: -32 [ 75.434105][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 75.488280][ T794] usb 2-1: USB disconnect, device number 2 [ 75.580929][ T5914] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 75.589168][ T5914] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 75.602009][ T5914] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 75.741703][ T5925] input: syz0 as /devices/virtual/input/input5 [ 75.781395][ T5914] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 75.802337][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.809167][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.816166][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.823157][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.829923][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.836703][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.845384][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.853068][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.859824][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.863201][ T5927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7'. [ 75.866435][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.866638][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.867009][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.896519][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.903156][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.909728][ T5914] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 75.909813][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.910587][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.911089][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.911373][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.919888][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.926520][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.933051][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.941154][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.951248][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.958091][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.971364][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.978271][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.985196][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.998495][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 75.999025][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 75.999435][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 76.006746][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.044411][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.051801][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.058427][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.065158][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.071786][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.078394][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.085020][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 76.092631][ T5914] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 76.110230][ T5914] usb 4-1: USB disconnect, device number 2 [ 76.119797][ T5832] udevd[5832]: setting mode of /dev/bus/usb/004/002 to 020664 failed: No such file or directory [ 76.145479][ T5832] udevd[5832]: setting owner of /dev/bus/usb/004/002 to uid=0, gid=0 failed: No such file or directory [ 76.188644][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.202547][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.225002][ T5891] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.243737][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.258711][ T5891] usb 3-1: config 0 descriptor?? [ 76.329515][ T5939] fuse: Unknown parameter 'gro' [ 76.671930][ T5891] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 76.685080][ T5891] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 76.686927][ T5909] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 76.758828][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.808526][ T5891] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 76.872670][ T5828] usb 3-1: USB disconnect, device number 3 [ 76.889092][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.904574][ T5950] fido_id[5950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/report_descriptor': No such device [ 76.905082][ T5909] usb 1-1: config 0 has no interfaces? [ 76.939674][ T5909] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 76.950916][ T5909] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 76.962682][ T5909] usb 1-1: Manufacturer: syz [ 76.968075][ T43] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 76.987972][ T5909] usb 1-1: config 0 descriptor?? [ 76.989835][ T43] usb 4-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.006589][ T5891] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.016409][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 77.027884][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.039595][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.047927][ T43] usb 4-1: Product: syz [ 77.052085][ T43] usb 4-1: Manufacturer: è¿•Ú£ä¬ç´–è¸›à·¬æ®ˆç‹¼á”½ê›ˆÊ…é•„ï• [ 77.060278][ T43] usb 4-1: SerialNumber: syz [ 77.068208][ T52] Bluetooth: hci2: command tx timeout [ 77.074067][ T5943] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 77.081452][ T5943] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 77.135884][ T52] Bluetooth: hci1: command tx timeout [ 77.136086][ T5835] Bluetooth: hci3: command tx timeout [ 77.142126][ T52] Bluetooth: hci0: command tx timeout [ 77.165059][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 77.171732][ T5891] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.181788][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.191605][ T5891] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 77.201451][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 77.211333][ T5891] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.224569][ T5891] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.233727][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.234581][ T5828] usb 1-1: USB disconnect, device number 3 [ 77.248654][ T5891] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 77.305727][ T43] usb 4-1: USB disconnect, device number 3 [ 77.465309][ T5914] usb 2-1: USB disconnect, device number 3 [ 77.797286][ T5955] input: syz0 as /devices/virtual/input/input7 [ 77.892498][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 77.911938][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 77.938095][ T5959] overlay: Unknown parameter 'fsname' [ 78.127607][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.219777][ T5968] program syz.1.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.223156][ T5969] program syz.1.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.337991][ T5828] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.435711][ T5977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.497379][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 78.522580][ T5966] usb usb9: usbfs: process 5966 (syz.0.21) did not claim interface 0 before use [ 78.536376][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 78.547597][ T5982] Zero length message leads to an empty skb [ 78.547643][ T5966] fuse: Unknown parameter 'h[&$ðV÷Ê3|.¿Ì@)ôô' [ 78.566416][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.596230][ T5828] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 78.615942][ T5828] usb 1-1: can't read configurations, error -71 [ 78.691440][ T5987] input: syz0 as /devices/virtual/input/input8 [ 78.722317][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.743287][ T9] usb 3-1: config 0 has no interfaces? [ 78.754423][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 78.770366][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 78.781779][ T9] usb 3-1: Manufacturer: syz [ 78.820982][ T9] usb 3-1: config 0 descriptor?? [ 78.848147][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 78.859771][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 78.933020][ T5993] netlink: 10 bytes leftover after parsing attributes in process `syz.1.28'. [ 79.035825][ T43] usb 3-1: USB disconnect, device number 4 [ 79.175125][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.325000][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 79.331739][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.342811][ T9] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 79.352025][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.362207][ T9] usb 4-1: config 0 descriptor?? [ 79.486870][ T5828] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.646270][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 79.653388][ T5828] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.665486][ T5828] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.675397][ T5828] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 79.685375][ T5828] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 79.698121][ T5828] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.711262][ T5828] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.720385][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.734704][ T5828] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 79.796737][ T9] greenasia 0003:0E8F:0012.0002: collection stack underflow [ 79.810686][ T9] greenasia 0003:0E8F:0012.0002: item 0 4 0 12 parsing failed [ 79.823304][ T9] greenasia 0003:0E8F:0012.0002: parse failed [ 79.832984][ T9] greenasia 0003:0E8F:0012.0002: probe with driver greenasia failed with error -22 [ 79.915178][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.939834][ T10] usb 1-1: USB disconnect, device number 5 [ 79.987131][ T5914] usb 4-1: USB disconnect, device number 4 [ 80.068402][ T5891] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 80.077546][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.085750][ T5891] usb 3-1: Product: syz [ 80.089912][ T5891] usb 3-1: Manufacturer: syz [ 80.094481][ T5891] usb 3-1: SerialNumber: syz [ 80.499598][ T6013] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20001 [ 80.526024][ T6014] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 80.566611][ T6018] input: syz0 as /devices/virtual/input/input9 [ 80.637785][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 80.656349][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 80.857046][ T6031] comedi comedi3: s526: I/O port conflict (0x2,64) [ 80.929357][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 80.942418][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 80.946481][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 80.957267][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 80.972186][ T5891] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 80.988836][ T5891] usb 3-1: USB disconnect, device number 5 [ 81.115050][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.116969][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.132842][ T9] usb 4-1: config 0 has no interfaces? [ 81.143009][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 81.152781][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.161166][ T9] usb 4-1: Manufacturer: syz [ 81.168227][ T9] usb 4-1: config 0 descriptor?? [ 81.267259][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.278231][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.288190][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.301452][ T43] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 81.310716][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.320890][ T43] usb 1-1: config 0 descriptor?? [ 81.383445][ T9] usb 4-1: USB disconnect, device number 5 [ 81.466039][ T5891] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 81.616965][ T5891] usb 3-1: not running at top speed; connect to a high speed hub [ 81.635664][ T5891] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 81.655275][ T5891] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 81.687328][ T5891] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 81.704985][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.713023][ T5891] usb 3-1: Product: syz [ 81.735034][ T5891] usb 3-1: Manufacturer: syz [ 81.739701][ T5891] usb 3-1: SerialNumber: syz [ 81.755082][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 81.762254][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.762764][ T6004] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 81.787732][ T6004] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 81.788253][ T43] usb 1-1: USB disconnect, device number 6 [ 82.165944][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 82.206705][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.215807][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.226938][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 82.241591][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 82.253537][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 82.266425][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 82.276315][ T5891] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 82.295067][ T9] usb 4-1: device descriptor read/64, error -71 [ 82.296853][ T5891] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 82.332423][ T5891] usb 3-1: USB disconnect, device number 6 [ 82.375985][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.535038][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 82.540241][ T9] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 82.550683][ T5828] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.560464][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.570388][ T5828] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 82.580368][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 82.590226][ T5828] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.603657][ T5828] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.612850][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.625796][ T5828] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 82.655239][ T5865] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 82.675338][ T9] usb 4-1: device descriptor read/64, error -71 [ 82.786077][ T9] usb usb4-port1: attempt power cycle [ 82.793515][ T6051] input: syz0 as /devices/virtual/input/input10 [ 82.800782][ T5865] usb 1-1: device descriptor read/64, error -71 [ 82.847112][ T5914] usb 2-1: USB disconnect, device number 4 [ 82.872873][ T6053] __nla_validate_parse: 2 callbacks suppressed [ 82.872889][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 82.893596][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.50'. [ 83.045095][ T5865] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 83.125065][ T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 83.145539][ T9] usb 4-1: device descriptor read/8, error -71 [ 83.185076][ T5865] usb 1-1: device descriptor read/64, error -71 [ 83.255037][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.295292][ T5865] usb usb1-port1: attempt power cycle [ 83.405065][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 83.405077][ T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 83.420880][ T5914] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 83.429142][ T5914] usb 3-1: config 0 has no interface number 0 [ 83.436630][ T9] usb 4-1: device descriptor read/8, error -71 [ 83.443952][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 83.459527][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.467939][ T5914] usb 3-1: Product: syz [ 83.472114][ T5914] usb 3-1: Manufacturer: syz [ 83.476772][ T5914] usb 3-1: SerialNumber: syz [ 83.485723][ T5914] usb 3-1: config 0 descriptor?? [ 83.546402][ T9] usb usb4-port1: unable to enumerate USB device [ 83.635096][ T5865] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 83.655686][ T5865] usb 1-1: device descriptor read/8, error -71 [ 83.693477][ T5914] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 83.701660][ T5914] uvcvideo 3-1:0.105: No valid video chain found. [ 83.711559][ T5914] usb 3-1: USB disconnect, device number 7 [ 83.905066][ T5865] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 83.926085][ T5865] usb 1-1: device descriptor read/8, error -71 [ 84.035796][ T5865] usb usb1-port1: unable to enumerate USB device [ 84.405032][ T5865] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 84.475124][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 84.557039][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.567223][ T5865] usb 2-1: config 0 has no interfaces? [ 84.573666][ T5865] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 84.584067][ T5865] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.592142][ T5865] usb 2-1: Manufacturer: syz [ 84.599570][ T5865] usb 2-1: config 0 descriptor?? [ 84.615018][ T9] usb 3-1: device descriptor read/64, error -71 [ 84.811793][ T5828] usb 2-1: USB disconnect, device number 5 [ 84.855170][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 84.988898][ T9] usb 3-1: device descriptor read/64, error -71 [ 85.089415][ T6067] syzkaller1: entered promiscuous mode [ 85.096034][ T6067] syzkaller1: entered allmulticast mode [ 85.118362][ T9] usb usb3-port1: attempt power cycle [ 85.186661][ T6072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.57'. [ 85.278807][ T6073] warning: `syz.3.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.352979][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'. [ 85.426218][ T6077] input: syz0 as /devices/virtual/input/input11 [ 85.476195][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 85.508273][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 85.519901][ T9] usb 3-1: device descriptor read/8, error -71 [ 85.520990][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 85.765085][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 85.785460][ T9] usb 3-1: device descriptor read/8, error -71 [ 85.835465][ T5865] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 85.905425][ T9] usb usb3-port1: unable to enumerate USB device [ 85.985146][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 85.991545][ T5865] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 85.999672][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.009800][ T5865] usb 1-1: config 0 has no interface number 0 [ 86.019782][ T5865] usb 1-1: config 0 interface 23 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.032836][ T5865] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 86.042278][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.053548][ T5865] usb 1-1: config 0 descriptor?? [ 86.266301][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.278511][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.288110][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 86.335296][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 86.349113][ T5865] usb 1-1: string descriptor 0 read error: -71 [ 86.358958][ T5865] usbhid 1-1:0.23: couldn't find an input interrupt endpoint [ 86.372028][ T5865] usb 1-1: USB disconnect, device number 11 [ 86.485023][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 86.491469][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.501573][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.511405][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 86.521455][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 86.531463][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.544466][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.553625][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.565401][ T9] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 86.659155][ T24] cfg80211: failed to load regulatory.db [ 86.769215][ T24] usb 4-1: USB disconnect, device number 10 [ 86.894444][ T5914] IPVS: starting estimator thread 0... [ 86.985153][ T6096] IPVS: using max 29 ests per chain, 69600 per kthread [ 87.189675][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 87.372742][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.388962][ T10] usb 1-1: config 0 has no interfaces? [ 87.394912][ T6105] input: syz0 as /devices/virtual/input/input12 [ 87.408115][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 87.417795][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 87.434991][ T10] usb 1-1: Manufacturer: syz [ 87.447183][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.457271][ T10] usb 1-1: config 0 descriptor?? [ 87.513210][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 87.524268][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 87.616170][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 87.623269][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.635405][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.645220][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 87.654253][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.664309][ T24] usb 2-1: config 0 descriptor?? [ 87.684423][ T5891] usb 1-1: USB disconnect, device number 12 [ 88.010278][ T6115] openvswitch: netlink: Missing key (keys=40, expected=80) [ 88.021568][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 88.079058][ T24] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 88.149161][ T24] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 88.165558][ T24] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 88.187557][ T24] usb 2-1: USB disconnect, device number 6 [ 88.229761][ T6125] 9p: Bad value for 'port' [ 88.266051][ T5914] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 88.322629][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.338094][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.436518][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.447665][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.457460][ T5914] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 88.466549][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.477584][ T5914] usb 4-1: config 0 descriptor?? [ 88.535166][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.555078][ T5865] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 88.625025][ T5909] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 88.695056][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 88.701902][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.711268][ T24] usb 2-1: config 0 has no interface number 0 [ 88.717572][ T24] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 88.730096][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 88.743146][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 88.754440][ T5865] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.763727][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.772902][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.780979][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.790129][ T24] usb 2-1: Product: syz [ 88.795373][ T5865] usb 1-1: config 0 descriptor?? [ 88.797831][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 88.800595][ T24] usb 2-1: Manufacturer: syz [ 88.813676][ T24] usb 2-1: SerialNumber: syz [ 88.815510][ T5909] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.827297][ T24] usb 2-1: config 0 descriptor?? [ 88.833607][ T5909] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.845625][ T5909] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 88.848811][ T24] smsc95xx v2.0.0 [ 88.856005][ T5909] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 88.856030][ T5909] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.856073][ T5909] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.860270][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 88.872777][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.884295][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 88.893480][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.933973][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.955685][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.965711][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.974026][ T5909] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 89.019389][ T5865] usbhid 1-1:0.0: can't add hid device: -71 [ 89.026374][ T5865] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.040229][ T5865] usb 1-1: USB disconnect, device number 13 [ 89.117085][ T5914] isku 0003:1E7D:319C.0004: item fetching failed at offset 6/7 [ 89.130957][ T5914] isku 0003:1E7D:319C.0004: parse failed [ 89.137367][ T5914] isku 0003:1E7D:319C.0004: probe with driver isku failed with error -22 [ 89.175288][ T5914] usb 3-1: USB disconnect, device number 12 [ 89.605286][ T5914] usb 2-1: USB disconnect, device number 7 [ 89.715164][ T6138] input: syz0 as /devices/virtual/input/input13 [ 89.862272][ T10] usb 4-1: USB disconnect, device number 11 [ 89.874595][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 89.902909][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'. [ 90.185065][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.265176][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 90.273188][ T5909] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 90.335497][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 90.345087][ T24] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 90.353189][ T24] usb 2-1: config 0 has no interface number 0 [ 90.367878][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 90.379237][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.387691][ T24] usb 2-1: Product: syz [ 90.392435][ T24] usb 2-1: Manufacturer: syz [ 90.397769][ T24] usb 2-1: SerialNumber: syz [ 90.406126][ T24] usb 2-1: config 0 descriptor?? [ 90.406863][ T10] usb 3-1: device descriptor read/64, error -71 [ 90.437096][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.447470][ T5909] usb 1-1: config 0 has no interfaces? [ 90.454446][ T5909] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 90.466088][ T5909] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 90.474094][ T5909] usb 1-1: Manufacturer: syz [ 90.486604][ T5909] usb 1-1: config 0 descriptor?? [ 90.620089][ T6145] delete_channel: no stack [ 90.629491][ T24] uvcvideo 2-1:0.31: Found Unit with invalid ID 0 [ 90.636418][ T24] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 90.643693][ T24] uvcvideo 2-1:0.31: No valid video chain found. [ 90.653578][ T24] usb 2-1: USB disconnect, device number 8 [ 90.667321][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 90.708595][ T5909] usb 1-1: USB disconnect, device number 14 [ 90.735211][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 90.805269][ T10] usb 3-1: device descriptor read/64, error -71 [ 90.887868][ T5914] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.896584][ T5914] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 90.907017][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.916132][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.925469][ T10] usb usb3-port1: attempt power cycle [ 90.927706][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 90.944316][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.957473][ T5914] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.966634][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.974709][ T5914] usb 4-1: Product: syz [ 90.979073][ T5914] usb 4-1: Manufacturer: syz [ 90.986490][ T6157] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 90.996444][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 91.001675][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 91.009978][ T5914] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 91.016005][ T5914] cdc_wdm 4-1:1.0: Unknown control protocol [ 91.199382][ T5909] usb 4-1: USB disconnect, device number 12 [ 91.286188][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 91.305645][ T10] usb 3-1: device descriptor read/8, error -71 [ 91.415138][ T5914] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 91.495060][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 91.545165][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 91.568907][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.576564][ T10] usb 3-1: device descriptor read/8, error -71 [ 91.578962][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.592145][ T5914] usb 2-1: Product: syz [ 91.596343][ T5914] usb 2-1: Manufacturer: syz [ 91.600924][ T5914] usb 2-1: SerialNumber: syz [ 91.608998][ T5914] usb 2-1: config 0 descriptor?? [ 91.645024][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 91.651942][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.662944][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.672807][ T24] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 91.681908][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.695592][ T24] usb 1-1: config 0 descriptor?? [ 91.696985][ T10] usb usb3-port1: unable to enumerate USB device [ 91.819116][ T5914] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 91.995042][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 92.118716][ T24] hid-multitouch 0003:1FD2:6007.0005: collection stack underflow [ 92.126704][ T24] hid-multitouch 0003:1FD2:6007.0005: item 0 4 0 12 parsing failed [ 92.135420][ T24] hid-multitouch 0003:1FD2:6007.0005: probe with driver hid-multitouch failed with error -22 [ 92.145468][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 92.156233][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.166207][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.177188][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 92.188115][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 92.198075][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.211169][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.220805][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.234142][ T10] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 92.438276][ T24] usb 4-1: USB disconnect, device number 13 [ 93.087516][ T6169] input: syz0 as /devices/virtual/input/input14 [ 93.185136][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 93.195953][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'. [ 93.665837][ T5914] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 93.678040][ T5914] usb 2-1: USB disconnect, device number 9 [ 93.775330][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 93.815091][ T5909] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 93.926521][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.936816][ T10] usb 4-1: config 0 has no interfaces? [ 93.943239][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 93.952522][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.961303][ T10] usb 4-1: Manufacturer: syz [ 93.968054][ T10] usb 4-1: config 0 descriptor?? [ 93.975004][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 93.983303][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.991461][ T5909] usb 3-1: config 0 has no interface number 0 [ 93.997640][ T5909] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 94.008412][ T5909] usb 3-1: config 0 interface 1 has no altsetting 0 [ 94.017550][ T5909] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 94.026851][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.034840][ T5909] usb 3-1: Product: syz [ 94.039106][ T5909] usb 3-1: Manufacturer: syz [ 94.043699][ T5909] usb 3-1: SerialNumber: syz [ 94.050834][ T5909] usb 3-1: config 0 descriptor?? [ 94.185532][ T10] usb 4-1: USB disconnect, device number 14 [ 94.268802][ T5909] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 94.279668][ T5909] cx231xx 3-1:0.1: Failed to read PCB config [ 94.287795][ T5909] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 94.290771][ T5914] usb 1-1: USB disconnect, device number 15 [ 94.299521][ T5909] usb 3-1: USB disconnect, device number 17 [ 94.475246][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 94.635043][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 94.641759][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.651559][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.655044][ T5914] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 94.661443][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 94.680238][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 94.690137][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.705002][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.714052][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.735557][ T9] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 94.774085][ T6194] input: syz0 as /devices/virtual/input/input15 [ 94.796057][ T5914] usb 1-1: device descriptor read/64, error -71 [ 94.805789][ T5909] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 94.883345][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 94.893292][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 94.937251][ T6200] netlink: 'syz.3.103': attribute type 2 has an invalid length. [ 94.939275][ T5828] usb 2-1: USB disconnect, device number 10 [ 94.945693][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 94.975499][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 94.983529][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.008454][ T5909] usb 3-1: config 0 has no interface number 0 [ 95.014727][ T5909] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 95.026859][ T5909] usb 3-1: config 0 interface 1 has no altsetting 0 [ 95.035598][ T5914] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 95.039290][ T5909] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 95.052374][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.060457][ T5909] usb 3-1: Product: syz [ 95.064615][ T5909] usb 3-1: Manufacturer: syz [ 95.069294][ T5909] usb 3-1: SerialNumber: syz [ 95.075947][ T5909] usb 3-1: config 0 descriptor?? [ 95.165043][ T5914] usb 1-1: device descriptor read/64, error -71 [ 95.245074][ T5865] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 95.275364][ T5914] usb usb1-port1: attempt power cycle [ 95.283938][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.294332][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.304046][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.313047][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.327514][ T5909] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 95.337483][ T5909] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 95.395013][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 95.401994][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.412350][ T5865] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.423359][ T5865] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.433262][ T5865] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 95.446202][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.452833][ T5865] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 95.462470][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.465260][ T5909] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 95.473210][ T5865] usb 4-1: config 0 descriptor?? [ 95.480528][ T5909] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 95.492203][ T5909] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 95.501720][ T5909] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 95.510304][ T5909] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 95.518629][ T5909] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 95.542904][ T5909] i2c i2c-2: Added multiplexed i2c bus 4 [ 95.551674][ T5909] i2c i2c-2: Added multiplexed i2c bus 5 [ 95.615169][ T5914] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 95.637605][ T5914] usb 1-1: device descriptor read/8, error -71 [ 95.705565][ T5909] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 95.725421][ T5909] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 95.733861][ T5909] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 95.742866][ T5909] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 95.751441][ T5909] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 95.762939][ T5909] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 95.771525][ T5909] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 95.780219][ T5909] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71 [ 95.788738][ T5909] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 95.797323][ T5909] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 95.824209][ T5909] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 95.836879][ T5909] usb 3-1: USB disconnect, device number 18 [ 95.875159][ T5914] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 95.883141][ T5891] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 95.906632][ T5914] usb 1-1: device descriptor read/8, error -71 [ 95.922630][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.932564][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.947283][ T5865] usbhid 4-1:0.0: can't add hid device: -71 [ 95.953311][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 95.964784][ T5865] usb 4-1: USB disconnect, device number 15 [ 96.015673][ T5914] usb usb1-port1: unable to enumerate USB device [ 96.037720][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.046804][ T5891] usb 2-1: config 9 has an invalid interface number: 236 but max is 0 [ 96.055246][ T5891] usb 2-1: config 9 has no interface number 0 [ 96.061443][ T5891] usb 2-1: config 9 interface 236 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 96.072280][ T5891] usb 2-1: config 9 interface 236 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 96.083065][ T5891] usb 2-1: config 9 interface 236 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 96.094718][ T5891] usb 2-1: config 9 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 18441, setting to 8 [ 96.105895][ T5891] usb 2-1: config 9 interface 236 altsetting 0 endpoint 0x9 is Bulk; changing to Interrupt [ 96.117310][ T5891] usb 2-1: config 9 interface 236 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.133391][ T5891] usb 2-1: string descriptor 0 read error: -22 [ 96.139801][ T5891] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=55.e2 [ 96.149657][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.161667][ T6204] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 96.169095][ T6204] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 96.177607][ T5891] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 96.416810][ T10] usb 2-1: USB disconnect, device number 11 [ 96.512713][ T6218] input: syz0 as /devices/virtual/input/input16 [ 96.770461][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 96.785015][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 96.807476][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 96.946823][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.957169][ T10] usb 2-1: config 0 has no interfaces? [ 96.970952][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 96.983582][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.006550][ T10] usb 2-1: Manufacturer: syz [ 97.013984][ T10] usb 2-1: config 0 descriptor?? [ 97.217254][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 97.234060][ T5914] usb 2-1: USB disconnect, device number 12 [ 97.395041][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 97.411056][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.440793][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.462994][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 97.483756][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 97.505109][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.535305][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.551986][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.586242][ T10] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 97.755195][ T5891] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 97.801303][ T10] usb 4-1: USB disconnect, device number 16 [ 97.925023][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 97.944254][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.958237][ T5891] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 97.975046][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.998871][ T5891] usb 1-1: config 0 descriptor?? [ 98.053953][ T6244] input: syz0 as /devices/virtual/input/input17 [ 98.115027][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 98.276103][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 98.283793][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.299659][ T24] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 98.309322][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.317770][ T24] usb 2-1: Product: syz [ 98.322212][ T24] usb 2-1: Manufacturer: syz [ 98.327363][ T24] usb 2-1: SerialNumber: syz [ 98.338961][ T24] usb 2-1: config 0 descriptor?? [ 98.350008][ T24] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 98.356445][ T24] usb 2-1: selecting invalid altsetting 1 [ 98.407148][ T5914] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 98.436186][ T5891] topre 0003:0853:0148.0006: item fetching failed at offset 3/7 [ 98.457733][ T5891] topre 0003:0853:0148.0006: probe with driver topre failed with error -22 [ 98.575224][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 98.583716][ T5914] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.596279][ T5914] usb 3-1: config 0 has no interface number 0 [ 98.607900][ T5914] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 98.617327][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.635040][ T5914] usb 3-1: Product: syz [ 98.639420][ T5914] usb 3-1: Manufacturer: syz [ 98.644022][ T5914] usb 3-1: SerialNumber: syz [ 98.650628][ T6254] Malformed UNC in devname [ 98.650628][ T6254] [ 98.671780][ T5914] usb 3-1: config 0 descriptor?? [ 98.688188][ T5914] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 98.697379][ T6254] CIFS: VFS: Malformed UNC in devname [ 98.904357][ T5914] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 98.924566][ T5914] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 99.085037][ T5909] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 99.215095][ T5909] usb 4-1: device descriptor read/64, error -71 [ 99.317887][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 99.326510][ T5914] usb 3-1: USB disconnect, device number 19 [ 99.338538][ T5914] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 99.353486][ T5914] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 99.366343][ T5914] quatech2 3-1:0.51: device disconnected [ 99.466124][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 99.605123][ T5909] usb 4-1: device descriptor read/64, error -71 [ 99.716103][ T5909] usb usb4-port1: attempt power cycle [ 99.871559][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 99.882288][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.124'. [ 100.065088][ T5909] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 100.085693][ T5909] usb 4-1: device descriptor read/8, error -71 [ 100.165082][ T5891] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 100.325037][ T5909] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 100.327764][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.342928][ T5891] usb 3-1: config 0 has no interfaces? [ 100.349449][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 100.355742][ T5909] usb 4-1: device descriptor read/8, error -71 [ 100.358601][ T5891] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 100.372727][ T5891] usb 3-1: Manufacturer: syz [ 100.379372][ T5891] usb 3-1: config 0 descriptor?? [ 100.438637][ T5828] usb 1-1: USB disconnect, device number 20 [ 100.487719][ T5909] usb usb4-port1: unable to enumerate USB device [ 100.594683][ T5914] usb 3-1: USB disconnect, device number 20 [ 100.805044][ T5828] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 100.827821][ T5914] usb 2-1: USB disconnect, device number 13 [ 100.880603][ T6267] input: syz0 as /devices/virtual/input/input18 [ 100.967608][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.978632][ T5828] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 100.988225][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.998298][ T5828] usb 1-1: config 0 descriptor?? [ 101.236403][ T5828] usbhid 1-1:0.0: can't add hid device: -71 [ 101.243062][ T5828] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.254732][ T5828] usb 1-1: USB disconnect, device number 21 [ 101.265039][ T5914] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 101.435079][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 101.441697][ T5914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.451592][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.461478][ T5914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 101.471590][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 101.481501][ T5914] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.494537][ T5914] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.503679][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.517420][ T5914] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 101.665137][ T5828] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 101.721371][ T5909] usb 2-1: USB disconnect, device number 14 [ 101.805111][ T5828] usb 1-1: device descriptor read/64, error -71 [ 101.904384][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 101.914366][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 102.044196][ T6288] kvm: kvm [6287]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xff [ 102.055949][ T6288] kvm: kvm [6287]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 102.065057][ T5828] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 102.075301][ T6288] kvm: kvm [6287]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xff [ 102.087430][ T6288] kvm: kvm [6287]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xff [ 102.107566][ T6288] kvm: kvm [6287]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 102.118714][ T6288] kvm_intel: kvm [6287]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0xff [ 102.205018][ T5828] usb 1-1: device descriptor read/64, error -71 [ 102.315502][ T5828] usb usb1-port1: attempt power cycle [ 102.675140][ T5828] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 102.696968][ T5828] usb 1-1: device descriptor read/8, error -71 [ 102.935112][ T5828] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 102.955588][ T5828] usb 1-1: device descriptor read/8, error -71 [ 103.065264][ T5828] usb usb1-port1: unable to enumerate USB device [ 104.255162][ T6297] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 104.255190][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.953593][ T6297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.962687][ T6297] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.970593][ T6297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.976788][ T6297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.983643][ T6297] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.992419][ T6297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.999264][ T6297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.007383][ T6297] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.014414][ T6297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.022562][ T6297] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.029684][ T6297] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.285026][ T5909] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 105.285026][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 105.385190][ T5828] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 105.396073][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 105.445004][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 105.451846][ T5914] usb 1-1: config index 0 descriptor too short (expected 18, got 10) [ 105.459984][ T5914] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 105.467498][ T5914] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.478639][ T5914] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 105.487740][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.495794][ T5914] usb 1-1: Product: syz [ 105.499950][ T5914] usb 1-1: Manufacturer: syz [ 105.504522][ T5914] usb 1-1: SerialNumber: syz [ 105.511975][ T5914] usb 1-1: config 0 descriptor?? [ 105.535158][ T5891] usb 4-1: device descriptor read/64, error -71 [ 105.556895][ T5828] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 105.569117][ T5828] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 105.578003][ T5828] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 105.587318][ T5828] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 105.598171][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 105.609097][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 105.618894][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 105.635592][ T5828] usb 3-1: string descriptor 0 read error: -22 [ 105.641823][ T5828] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 105.650976][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.660856][ T5828] usb 3-1: config 0 descriptor?? [ 105.668276][ T5828] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.674227][ T5828] hub 3-1:0.0: probe with driver hub failed with error -5 [ 105.775427][ T5891] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 105.905238][ T5891] usb 4-1: device descriptor read/64, error -71 [ 105.975623][ T10] usb 3-1: USB disconnect, device number 21 [ 106.015283][ T5891] usb usb4-port1: attempt power cycle [ 106.335169][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.375113][ T5891] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 106.395773][ T5891] usb 4-1: device descriptor read/8, error -71 [ 106.421104][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 106.432872][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'. [ 106.484518][ T6318] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 106.635087][ T5891] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 106.657088][ T5891] usb 4-1: device descriptor read/8, error -71 [ 106.765613][ T5891] usb usb4-port1: unable to enumerate USB device [ 106.797753][ T5909] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 106.965029][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 106.971832][ T5909] usb 3-1: config 5 has an invalid interface number: 17 but max is 0 [ 106.980179][ T5909] usb 3-1: config 5 has no interface number 0 [ 106.980319][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.986354][ T5909] usb 3-1: config 5 interface 17 has no altsetting 0 [ 107.001459][ T5909] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=53.7a [ 107.010553][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.018566][ T5909] usb 3-1: Product: syz [ 107.022701][ T5909] usb 3-1: Manufacturer: syz [ 107.027368][ T5909] usb 3-1: SerialNumber: syz [ 107.055268][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.055401][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.085174][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 107.235020][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 107.244701][ T5891] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.256673][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.266574][ T5891] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 107.279635][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 107.289594][ T5891] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.304303][ T5909] dm9601 3-1:5.17: probe with driver dm9601 failed with error -22 [ 107.306424][ T5891] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.314234][ T5909] sr9700 3-1:5.17: probe with driver sr9700 failed with error -22 [ 107.325796][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.342222][ T5909] usb 3-1: USB disconnect, device number 22 [ 107.362936][ T5891] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 107.403020][ T10] usb 1-1: USB disconnect, device number 26 [ 107.445969][ T6333] input: syz0 as /devices/virtual/input/input19 [ 107.469858][ T5823] udevd[5823]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 107.562803][ T5891] usb 2-1: USB disconnect, device number 16 [ 107.855269][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 107.985217][ T10] usb 1-1: device descriptor read/64, error -71 [ 108.179080][ T5828] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 108.206499][ T5891] IPVS: starting estimator thread 0... [ 108.235078][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 108.295151][ T6343] IPVS: using max 49 ests per chain, 117600 per kthread [ 108.323717][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 108.333887][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 108.346154][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.356438][ T5828] usb 3-1: config 0 has no interfaces? [ 108.363117][ T5828] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 108.372662][ T10] usb 1-1: device descriptor read/64, error -71 [ 108.379054][ T5828] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.387457][ T5828] usb 3-1: Manufacturer: syz [ 108.405994][ T5828] usb 3-1: config 0 descriptor?? [ 108.415137][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.426953][ T6348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.495486][ T10] usb usb1-port1: attempt power cycle [ 108.562770][ T6350] tc_dump_action: action bad kind [ 108.602551][ T6352] netlink: 'syz.3.155': attribute type 39 has an invalid length. [ 108.624446][ T6338] netlink: 'syz.2.149': attribute type 3 has an invalid length. [ 108.634784][ T5828] usb 3-1: USB disconnect, device number 23 [ 108.749518][ T6354] input: syz0 as /devices/virtual/input/input20 [ 108.817421][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.157'. [ 108.845080][ T10] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 108.868230][ T10] usb 1-1: device descriptor read/8, error -71 [ 109.055132][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.105263][ T5909] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 109.113366][ T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 109.135152][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.136232][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.141960][ T10] usb 1-1: device descriptor read/8, error -71 [ 109.256189][ T10] usb usb1-port1: unable to enumerate USB device [ 109.265029][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 109.279923][ T5914] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 109.289117][ T5909] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.315626][ T5909] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.337415][ T5909] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 109.354028][ T5909] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 109.366790][ T5909] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.380232][ T5909] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.389624][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.423295][ T5909] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 109.425064][ T5914] usb 2-1: device descriptor read/64, error -71 [ 109.489473][ T6363] syz.2.160 (6363): drop_caches: 2 [ 109.619893][ T24] usb 4-1: USB disconnect, device number 25 [ 109.660167][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.671611][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.685071][ T5914] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 109.734049][ T6376] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 109.816021][ T5914] usb 2-1: device descriptor read/64, error -71 [ 109.925381][ T5914] usb usb2-port1: attempt power cycle [ 110.095071][ T5891] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 110.233638][ T6381] input: syz0 as /devices/virtual/input/input21 [ 110.240965][ T5891] usb 3-1: device descriptor read/64, error -71 [ 110.265381][ T5914] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 110.296179][ T5914] usb 2-1: device descriptor read/8, error -71 [ 110.485117][ T5891] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 110.535138][ T5914] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 110.556044][ T5914] usb 2-1: device descriptor read/8, error -71 [ 110.570694][ T5909] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 110.615549][ T5891] usb 3-1: device descriptor read/64, error -71 [ 110.665354][ T5914] usb usb2-port1: unable to enumerate USB device [ 110.725360][ T5891] usb usb3-port1: attempt power cycle [ 110.737818][ T5909] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.748755][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.760255][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.770046][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.784172][ T5909] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.793292][ T5909] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.801442][ T5909] usb 4-1: Manufacturer: syz [ 110.809045][ T5909] usb 4-1: config 0 descriptor?? [ 110.945034][ T10] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 111.075079][ T5891] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 111.095644][ T5891] usb 3-1: device descriptor read/8, error -71 [ 111.116654][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.126905][ T10] usb 1-1: config 0 has no interfaces? [ 111.133612][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 111.142825][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.149187][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.157258][ T10] usb 1-1: Manufacturer: syz [ 111.165418][ T10] usb 1-1: config 0 descriptor?? [ 111.215441][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.215472][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.229960][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.239198][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.260168][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 111.279376][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.305290][ T5909] usb 4-1: USB disconnect, device number 26 [ 111.336750][ T5891] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 111.369233][ T5891] usb 3-1: device descriptor read/8, error -71 [ 111.383414][ T6387] netlink: 'syz.0.168': attribute type 3 has an invalid length. [ 111.394296][ T5914] usb 1-1: USB disconnect, device number 31 [ 111.411130][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 111.421335][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 111.485431][ T5891] usb usb3-port1: unable to enumerate USB device [ 111.785065][ T5909] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 111.937327][ T5909] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.946353][ T5909] usb 4-1: config 0 has no interface number 0 [ 111.952465][ T5909] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.964689][ T5909] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.974596][ T5909] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 111.984277][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.001127][ T5909] usb 4-1: config 0 descriptor?? [ 112.111977][ T6406] input: syz0 as /devices/virtual/input/input22 [ 112.315041][ T5891] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 112.416137][ T5909] prodikeys 0003:041E:2801.0007: item fetching failed at offset 5/7 [ 112.424624][ T5909] prodikeys 0003:041E:2801.0007: hid parse failed [ 112.431238][ T5909] prodikeys 0003:041E:2801.0007: probe with driver prodikeys failed with error -22 [ 112.465095][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 112.472081][ T5891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.482265][ T5914] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 112.490119][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.502246][ T5891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 112.512747][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 112.522616][ T5891] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.535625][ T5891] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.544648][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.561541][ T5891] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 112.629141][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.637990][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.655213][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 112.662858][ T5914] usb 2-1: config 0 has an invalid interface number: 174 but max is 0 [ 112.671437][ T5914] usb 2-1: config 0 has no interface number 0 [ 112.681748][ T5914] usb 2-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=30.ae [ 112.691225][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.703131][ T5914] usb 2-1: Product: syz [ 112.707610][ T5914] usb 2-1: Manufacturer: syz [ 112.712323][ T5914] usb 2-1: SerialNumber: syz [ 112.727654][ T5914] usb 2-1: config 0 descriptor?? [ 112.738811][ T5914] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 112.762816][ T5909] usb 1-1: USB disconnect, device number 32 [ 113.000950][ T6416] fuse: Bad value for 'fd' [ 113.016852][ T6415] fuse: Bad value for 'fd' [ 113.265264][ T5914] gspca_sn9c20x: Write register 1000 failed -110 [ 113.274053][ T5914] gspca_sn9c20x: Device initialization failed [ 113.294869][ T5914] gspca_sn9c20x 2-1:0.174: probe with driver gspca_sn9c20x failed with error -110 [ 113.304533][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.479055][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 113.510657][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'. [ 113.525102][ T5914] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 113.685259][ T5914] usb 3-1: device descriptor read/64, error -71 [ 113.784405][ T24] usb 2-1: USB disconnect, device number 21 [ 113.896489][ T5828] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 113.925027][ T5914] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 114.075033][ T5914] usb 3-1: device descriptor read/64, error -71 [ 114.096732][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.106962][ T5828] usb 1-1: config 0 has no interfaces? [ 114.114072][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 114.123707][ T5828] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.133983][ T5828] usb 1-1: Manufacturer: syz [ 114.140481][ T5828] usb 1-1: config 0 descriptor?? [ 114.185573][ T5914] usb usb3-port1: attempt power cycle [ 114.235146][ T5891] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 114.353018][ T24] usb 1-1: USB disconnect, device number 33 [ 114.395097][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 114.402464][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.411989][ T5891] usb 2-1: config 14 interface 0 has no altsetting 0 [ 114.420916][ T5891] usb 2-1: New USB device found, idVendor=03eb, idProduct=0030, bcdDevice=c5.92 [ 114.430017][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.439509][ T5891] usb 2-1: Product: syz [ 114.443677][ T5891] usb 2-1: Manufacturer: syz [ 114.448366][ T5891] usb 2-1: SerialNumber: syz [ 114.477436][ T5909] usb 4-1: USB disconnect, device number 27 [ 114.525094][ T5914] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 114.565761][ T5914] usb 3-1: device descriptor read/8, error -71 [ 114.768594][ T5891] usb 2-1: USB disconnect, device number 22 [ 114.805259][ T5914] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 114.838997][ T5914] usb 3-1: device descriptor read/8, error -71 [ 114.924637][ T6439] input: syz0 as /devices/virtual/input/input23 [ 114.975746][ T5914] usb usb3-port1: unable to enumerate USB device [ 115.066184][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 115.145108][ T5828] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 115.275349][ T5828] usb 4-1: device descriptor read/64, error -71 [ 115.275354][ T5914] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 115.425037][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 115.431713][ T5914] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.440190][ T5914] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.448876][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.458226][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.469380][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.479324][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 115.487104][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.502087][ T5914] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.511198][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.521862][ T5914] usb 2-1: config 0 descriptor?? [ 115.545084][ T5828] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 115.664995][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 115.672789][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.676063][ T5828] usb 4-1: device descriptor read/64, error -71 [ 115.682755][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.698868][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 115.708764][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 115.718699][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.731940][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.742496][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.751744][ T5914] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 115.770352][ T5914] usb 2-1: USB disconnect, device number 23 [ 115.781998][ T24] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 115.796654][ T5914] usblp0: removed [ 115.797567][ T5828] usb usb4-port1: attempt power cycle [ 115.986620][ T24] usb 1-1: USB disconnect, device number 34 [ 116.155060][ T5828] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 116.176779][ T5828] usb 4-1: device descriptor read/8, error -71 [ 116.275176][ T5914] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 116.425054][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 116.426090][ T5828] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 116.439925][ T5914] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.448365][ T5914] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.457020][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.466548][ T5828] usb 4-1: device descriptor read/8, error -71 [ 116.467062][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.482479][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.493666][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.507073][ T5914] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.516172][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.526114][ T5914] usb 2-1: config 0 descriptor?? [ 116.576585][ T5828] usb usb4-port1: unable to enumerate USB device [ 116.578950][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 116.596191][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 116.648285][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 116.733890][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.745120][ T5914] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.747678][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.965015][ T5828] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 117.034381][ T6443] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.186'. [ 117.043766][ T6443] netlink: 280 bytes leftover after parsing attributes in process `syz.1.186'. [ 117.059043][ T5914] usb 2-1: USB disconnect, device number 24 [ 117.066390][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 117.077998][ T5914] usblp0: removed [ 117.136971][ T5828] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 117.147434][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 117.158941][ T5828] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 117.170842][ T5828] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 117.180011][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.188070][ T5828] usb 1-1: Product: syz [ 117.192226][ T5828] usb 1-1: Manufacturer: syz [ 117.196891][ T5828] usb 1-1: SerialNumber: syz [ 117.204668][ T5828] usb 1-1: config 0 descriptor?? [ 117.210577][ T6459] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.218248][ T6459] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.226863][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.237789][ T5828] usb 1-1: ucan: probing device on interface #0 [ 117.244153][ T10] usb 3-1: config 0 has no interfaces? [ 117.251101][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 117.260279][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.268555][ T10] usb 3-1: Manufacturer: syz [ 117.275585][ T10] usb 3-1: config 0 descriptor?? [ 117.486944][ T6461] netlink: 'syz.2.193': attribute type 3 has an invalid length. [ 117.498043][ T43] usb 3-1: USB disconnect, device number 32 [ 117.632809][ T6464] input: syz0 as /devices/virtual/input/input24 [ 117.892154][ T5828] ucan 1-1:0.0 can0: registered device [ 118.018847][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 118.093908][ T5828] ucan 1-1:0.0 can0: firmware string: unknown [ 118.107595][ T5828] usb 1-1: USB disconnect, device number 35 [ 118.185079][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 118.191763][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 118.205253][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 118.214348][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.222852][ T10] usb 2-1: Product: syz [ 118.227918][ T10] usb 2-1: Manufacturer: syz [ 118.232516][ T10] usb 2-1: SerialNumber: syz [ 118.241745][ T10] usb 2-1: config 0 descriptor?? [ 118.249422][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 118.325217][ T5909] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 118.365051][ T5914] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 118.476776][ T5909] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 118.484916][ T5909] usb 4-1: config 0 has no interface number 0 [ 118.491425][ T5909] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.501414][ T5909] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.513763][ T5909] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 118.515025][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 118.523070][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.531314][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.538179][ T5909] usb 4-1: Product: syz [ 118.549271][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.550872][ T5909] usb 4-1: Manufacturer: syz [ 118.560808][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 118.565218][ T5909] usb 4-1: SerialNumber: syz [ 118.575586][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 118.584809][ T5909] usb 4-1: config 0 descriptor?? [ 118.590168][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.603053][ T5909] ums-karma 4-1:0.46: USB Mass Storage device detected [ 118.615766][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.624884][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.652601][ T5914] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 118.706606][ T5909] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 118.724164][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 118.737556][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 118.804225][ T5909] usb 4-1: USB disconnect, device number 32 [ 118.862592][ T5828] usb 3-1: USB disconnect, device number 33 [ 118.872217][ T10] gspca_zc3xx: reg_w_i err -71 [ 119.407784][ T6490] input: syz0 as /devices/virtual/input/input25 [ 119.482197][ T6492] pim6reg1: entered promiscuous mode [ 119.488857][ T6492] pim6reg1: entered allmulticast mode [ 119.495131][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 119.516965][ T10] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 119.551079][ T10] usb 2-1: USB disconnect, device number 25 [ 119.785018][ T5914] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 119.805062][ T43] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 119.936957][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.947135][ T5914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.957776][ T5914] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 119.968234][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.978385][ T5914] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.985088][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 119.986444][ T43] usb 4-1: config 0 has no interfaces? [ 119.999409][ T5914] usb 3-1: Manufacturer: syz [ 120.006376][ T5914] usb 3-1: config 0 descriptor?? [ 120.013093][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 120.022880][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.030966][ T43] usb 4-1: Manufacturer: syz [ 120.037823][ T43] usb 4-1: config 0 descriptor?? [ 120.136686][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.146999][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 120.157215][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.169359][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.180871][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.190639][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.203536][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 120.212661][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.222524][ T10] usb 1-1: config 0 descriptor?? [ 120.231398][ T10] appledisplay 1-1:0.0: Submitting URB failed [ 120.237638][ T10] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 120.255691][ T43] usb 4-1: USB disconnect, device number 33 [ 120.432389][ T10] usb 1-1: USB disconnect, device number 36 [ 120.527965][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 120.538966][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 120.835062][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 120.952834][ T6501] ------------[ cut here ]------------ [ 120.958361][ T6501] WARNING: ./include/linux/ns_common.h:255 at free_nsproxy+0x415/0x560, CPU#0: syz.0.207/6501 [ 120.968672][ T6501] Modules linked in: [ 120.972610][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(full) [ 120.982070][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.992569][ T6501] RIP: 0010:free_nsproxy+0x415/0x560 [ 120.998231][ T6501] Code: 85 ed 0f 8e be 00 00 00 e8 b8 4b 33 00 48 8b 3d 71 41 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 91 6a 8e 00 e8 9c 4b 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 8e 4b 33 00 4c 89 ff be 03 00 00 00 e8 [ 121.017951][ T6501] RSP: 0018:ffffc9000b81fa90 EFLAGS: 00010293 [ 121.024026][ T6501] RAX: ffffffff818e8304 RBX: ffff8880319c98f0 RCX: ffff88801e751e80 [ 121.032046][ T6501] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 121.040069][ T6501] RBP: 00000000ffffffff R08: ffff88801eb90adb R09: 1ffff11003d7215b [ 121.048089][ T6501] R10: dffffc0000000000 R11: ffffed1003d7215c R12: dffffc0000000000 [ 121.056295][ T6501] R13: 0000000000000000 R14: ffff88801eb90888 R15: ffff88801eb90ad8 [ 121.064263][ T6501] FS: 0000000000000000(0000) GS:ffff888125a7c000(0000) knlGS:0000000000000000 [ 121.073261][ T6501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.079964][ T6501] CR2: 00007f1be6f729e0 CR3: 000000000e136000 CR4: 00000000003526f0 [ 121.087987][ T6501] Call Trace: [ 121.091289][ T6501] [ 121.094580][ T6501] do_exit+0x6b8/0x2300 [ 121.099128][ T6501] ? do_raw_spin_lock+0x121/0x290 [ 121.104169][ T6501] ? __pfx_do_exit+0x10/0x10 [ 121.108796][ T6501] ? futex_private_hash_put+0x4b/0x280 [ 121.114283][ T6501] do_group_exit+0x21c/0x2d0 [ 121.118945][ T6501] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.124172][ T6501] get_signal+0x1285/0x1340 [ 121.128757][ T6501] arch_do_signal_or_restart+0x9a/0x7a0 [ 121.134318][ T6501] ? __pfx_set_user_sigmask+0x10/0x10 [ 121.139774][ T6501] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 121.146000][ T6501] ? exit_to_user_mode_loop+0x55/0x4f0 [ 121.151470][ T6501] exit_to_user_mode_loop+0x87/0x4f0 [ 121.156800][ T6501] ? rcu_is_watching+0x15/0xb0 [ 121.161574][ T6501] do_syscall_64+0x2e9/0xfa0 [ 121.166213][ T6501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.172287][ T6501] ? clear_bhb_loop+0x60/0xb0 [ 121.177023][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.182922][ T6501] RIP: 0033:0x7f76a6f8f6c9 [ 121.187396][ T6501] Code: Unable to access opcode bytes at 0x7f76a6f8f69f. [ 121.194407][ T6501] RSP: 002b:00007f76a7ddc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.203157][ T6501] RAX: fffffffffffffe00 RBX: 00007f76a71e5fa8 RCX: 00007f76a6f8f6c9 [ 121.211531][ T6501] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f76a71e5fa8 [ 121.219573][ T6501] RBP: 00007f76a71e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 121.227574][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.235662][ T6501] R13: 00007f76a71e6038 R14: 00007ffc6dae5740 R15: 00007ffc6dae5828 [ 121.243648][ T6501] [ 121.246718][ T6501] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.253993][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(full) [ 121.263168][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.273216][ T6501] Call Trace: [ 121.276488][ T6501] [ 121.279410][ T6501] dump_stack_lvl+0x99/0x250 [ 121.283988][ T6501] ? __asan_memcpy+0x40/0x70 [ 121.288560][ T6501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.293742][ T6501] ? __pfx__printk+0x10/0x10 [ 121.298338][ T6501] vpanic+0x237/0x6d0 [ 121.302319][ T6501] ? __pfx_vpanic+0x10/0x10 [ 121.306809][ T6501] ? is_bpf_text_address+0x26/0x2b0 [ 121.312008][ T6501] panic+0xb9/0xc0 [ 121.315713][ T6501] ? __pfx_panic+0x10/0x10 [ 121.320121][ T6501] __warn+0x334/0x4c0 [ 121.324101][ T6501] ? free_nsproxy+0x415/0x560 [ 121.328768][ T6501] ? free_nsproxy+0x415/0x560 [ 121.333429][ T6501] report_bug+0x2be/0x4f0 [ 121.337751][ T6501] ? free_nsproxy+0x415/0x560 [ 121.342409][ T6501] ? free_nsproxy+0x415/0x560 [ 121.347069][ T6501] ? free_nsproxy+0x417/0x560 [ 121.351727][ T6501] handle_bug+0x84/0x160 [ 121.355956][ T6501] exc_invalid_op+0x1a/0x50 [ 121.360448][ T6501] asm_exc_invalid_op+0x1a/0x20 [ 121.365283][ T6501] RIP: 0010:free_nsproxy+0x415/0x560 [ 121.370550][ T6501] Code: 85 ed 0f 8e be 00 00 00 e8 b8 4b 33 00 48 8b 3d 71 41 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 91 6a 8e 00 e8 9c 4b 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 8e 4b 33 00 4c 89 ff be 03 00 00 00 e8 [ 121.390136][ T6501] RSP: 0018:ffffc9000b81fa90 EFLAGS: 00010293 [ 121.396187][ T6501] RAX: ffffffff818e8304 RBX: ffff8880319c98f0 RCX: ffff88801e751e80 [ 121.404150][ T6501] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 121.412107][ T6501] RBP: 00000000ffffffff R08: ffff88801eb90adb R09: 1ffff11003d7215b [ 121.420067][ T6501] R10: dffffc0000000000 R11: ffffed1003d7215c R12: dffffc0000000000 [ 121.428023][ T6501] R13: 0000000000000000 R14: ffff88801eb90888 R15: ffff88801eb90ad8 [ 121.435989][ T6501] ? free_nsproxy+0x414/0x560 [ 121.440659][ T6501] do_exit+0x6b8/0x2300 [ 121.444813][ T6501] ? do_raw_spin_lock+0x121/0x290 [ 121.449825][ T6501] ? __pfx_do_exit+0x10/0x10 [ 121.454401][ T6501] ? futex_private_hash_put+0x4b/0x280 [ 121.459861][ T6501] do_group_exit+0x21c/0x2d0 [ 121.464442][ T6501] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.469632][ T6501] get_signal+0x1285/0x1340 [ 121.474135][ T6501] arch_do_signal_or_restart+0x9a/0x7a0 [ 121.479684][ T6501] ? __pfx_set_user_sigmask+0x10/0x10 [ 121.485057][ T6501] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 121.491215][ T6501] ? exit_to_user_mode_loop+0x55/0x4f0 [ 121.496667][ T6501] exit_to_user_mode_loop+0x87/0x4f0 [ 121.501945][ T6501] ? rcu_is_watching+0x15/0xb0 [ 121.506710][ T6501] do_syscall_64+0x2e9/0xfa0 [ 121.511297][ T6501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.517348][ T6501] ? clear_bhb_loop+0x60/0xb0 [ 121.522012][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.527886][ T6501] RIP: 0033:0x7f76a6f8f6c9 [ 121.532286][ T6501] Code: Unable to access opcode bytes at 0x7f76a6f8f69f. [ 121.539281][ T6501] RSP: 002b:00007f76a7ddc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.547679][ T6501] RAX: fffffffffffffe00 RBX: 00007f76a71e5fa8 RCX: 00007f76a6f8f6c9 [ 121.555634][ T6501] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f76a71e5fa8 [ 121.563590][ T6501] RBP: 00007f76a71e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 121.571545][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.579500][ T6501] R13: 00007f76a71e6038 R14: 00007ffc6dae5740 R15: 00007ffc6dae5828 [ 121.587473][ T6501] [ 121.590620][ T6501] Kernel Offset: disabled [ 121.594926][ T6501] Rebooting in 86400 seconds..