last executing test programs: 16m54.752934418s ago: executing program 0 (id=243): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) 16m54.625521587s ago: executing program 0 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x104, 0xe2) lseek(r0, 0x4, 0x2) 16m54.540807477s ago: executing program 0 (id=246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 16m54.347485994s ago: executing program 0 (id=248): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) 16m54.143740117s ago: executing program 0 (id=252): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, 0x0) clock_settime(0x2, &(0x7f00000000c0)={0x77359400}) 16m53.050394351s ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x5, 0xe, 0xffffff15, &(0x7f0000000100)="4655ac63b1ba52fd850ae2b70000", 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m52.714366599s ago: executing program 32 (id=263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x5, 0xe, 0xffffff15, &(0x7f0000000100)="4655ac63b1ba52fd850ae2b70000", 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.829120528s ago: executing program 3 (id=5670): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 11.600222499s ago: executing program 3 (id=5671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0xc}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11.321676738s ago: executing program 3 (id=5673): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x10004000) 11.136776522s ago: executing program 3 (id=5675): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = epoll_create(0x400000f) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 10.94623138s ago: executing program 3 (id=5678): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000600)=""/243, &(0x7f0000000380)=0xf3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001c0000000002000001"]) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 10.791608011s ago: executing program 3 (id=5679): r0 = socket$inet6(0xa, 0x3, 0x5) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x108}}], 0x1, 0xc040) 10.651265201s ago: executing program 2 (id=5682): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.987749478s ago: executing program 2 (id=5686): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) socket(0x200000000000011, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8.72060559s ago: executing program 1 (id=5689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) socket$igmp6(0xa, 0x3, 0x2) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) 8.11127466s ago: executing program 2 (id=5690): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000600)=""/243, &(0x7f0000000380)=0xf3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001c0000000002000001"]) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.721482636s ago: executing program 1 (id=5695): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = syz_open_dev$dri(&(0x7f0000001900), 0x175d, 0x101800) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000001cc0)={0x0, 0x0, 0x7, 0x6, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @sack_perm], 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000300000000080000110010e500000000", @ANYRESHEX=r5, @ANYRESDEC=r0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000003020000030000005e6f0000000000000017b04966ca387d45931415d00710cc8461fa7ae1575a6122ef5e36a0eccf04006828aed63ca2a876379493fd4eb8e348ad2cbe6947f14b846dd64b00ee5f5986c34b35a99e6067974b8f6bd9a0730bc729fe490b67efe4e856756041648a7cc64e93ec94edd2785a48e8da75207bbcb6112f48b3c782"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x59, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e11000/0x2000)=nil) fstatfs(r6, &(0x7f00000003c0)=""/146) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524"], 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 6.720027019s ago: executing program 4 (id=5696): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x0, 0xfffffffffffffd78}, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/user\x00') r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="00ad03"], 0x0, 0x0}) 5.409877808s ago: executing program 2 (id=5699): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) socket(0x200000000000011, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.334943467s ago: executing program 5 (id=5700): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000480)=""/135, 0x87) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x18, 0x0, 0xa, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.170196944s ago: executing program 5 (id=5701): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x20, 0x0, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000040000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000003fd31340e9"], 0x48}, 0x300}, 0x0) socket$inet(0x2b, 0x801, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="4003"], 0x0, 0x0}) 4.821037407s ago: executing program 1 (id=5702): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = epoll_create1(0x80000) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4008810) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000041c0)={0x10}) 4.793978127s ago: executing program 1 (id=5703): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="0001010000", 0x5}, {&(0x7f0000001240)="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", 0x6f4}], 0x2}, 0x2000c09d) 4.107234288s ago: executing program 5 (id=5704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_REG(r2, 0x0, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x0, [0x4, 0x9]}, {0x80000000, 0x0, 0x0, [0x8, 0xe7]}, 0x1, [0x3, 0xffffb4b5]}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.532618707s ago: executing program 2 (id=5705): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x6, 0x2000000, 0x12000, 0x100000001, 0xda, 0x80, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000003c0)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000200)={0x48}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000004c0)) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c400000000002907800000000e000030011009078000000"], 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 3.373473473s ago: executing program 4 (id=5706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) 3.08269703s ago: executing program 4 (id=5707): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) preadv2(r0, 0x0, 0x0, 0x290e, 0xf4a4, 0x4) 2.942630685s ago: executing program 4 (id=5708): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000600)=""/243, &(0x7f0000000380)=0xf3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001c0000000002000001"]) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e273a2f3909399dcfc7b53660e2", 0x62, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.706778775s ago: executing program 1 (id=5709): r0 = socket(0xa, 0x5, 0x0) socket(0x15, 0x4, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) open(&(0x7f0000000180)='./file0\x00', 0x1109200, 0xe) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008411000007000000ac1414aa00000000300000000000000084000000010000000100050003000000050000000900000001000080050000007b000000", @ANYRES32, @ANYBLOB="20000000000000008400000008000000000000000000ff"], 0x68, 0x4000094}, 0x24000052) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="0d80c2000000bbbbbbbbbbbb08004c00003c000000000873907800000000ffffff52bdd3e117ff441c0e060000000000eaff077f00000100000005ac1414aa0000000800000000000c9078010000009d1cebeebce6016a17d3a49c563df9a2b33446b17e0e1b938e9eac192509295a3af031d760278ae4b0306e5cc7d3f212305a0f370d15a508503194471d7e9821546db70b5b6153cf62412f000000000000000006114021578fe52f981410705378186b02d64afcfd059efdea"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x111, 0x2}}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 1.423791467s ago: executing program 1 (id=5710): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x40, 0x30, 0x6, "b61f90062c05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000c06000000f8"], 0x0, 0x0}) 1.196351413s ago: executing program 5 (id=5711): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x800404, 0x20000) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x8000, 0x80, 0x18000, 0x22}}) 984.746338ms ago: executing program 5 (id=5712): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = epoll_create1(0x80000) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4008810) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000041c0)={0x10}) 833.847286ms ago: executing program 4 (id=5713): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)="080000001400", 0x6}], 0x1) 769.437493ms ago: executing program 5 (id=5714): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) socket(0x200000000000011, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 712.495522ms ago: executing program 4 (id=5715): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x0, 0xfffffffffffffd78}, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/user\x00') r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="00ad03"], 0x0, 0x0}) 0s ago: executing program 2 (id=5716): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x59ef, 0x10100, 0x2, 0x2ce, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) kernel console output (not intermixed with test programs): 949.339647][ T4251] bridge_slave_0: left allmulticast mode [ 949.339679][ T4251] bridge_slave_0: left promiscuous mode [ 949.339937][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.518035][ T5975] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 949.677949][ T5975] usb 6-1: Using ep0 maxpacket: 32 [ 949.680530][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 949.680564][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 949.683141][ T5975] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 949.683169][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.683191][ T5975] usb 6-1: Product: syz [ 949.683207][ T5975] usb 6-1: Manufacturer: syz [ 949.683221][ T5975] usb 6-1: SerialNumber: syz [ 949.759528][ T5975] usb 6-1: config 0 descriptor?? [ 949.809526][ T5975] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 950.936339][ T7993] usb 6-1: Failed to submit usb control message: -110 [ 950.936380][ T7993] usb 6-1: unable to send the bmi data to the device: -110 [ 950.936401][ T7993] usb 6-1: unable to get target info from device [ 950.936435][ T7993] usb 6-1: could not get target info (-110) [ 950.936820][ T7993] usb 6-1: could not probe fw (-110) [ 951.308274][ T5811] Bluetooth: hci0: command tx timeout [ 952.088781][ T4251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.201504][ T4251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.282255][ T4251] bond0 (unregistering): (slave team0): Releasing backup interface [ 952.332792][ T4251] bond0 (unregistering): Released all slaves [ 952.389765][ T4251] bond1 (unregistering): (slave dummy0): Releasing active interface [ 952.436051][ T4251] bond1 (unregistering): Released all slaves [ 952.519915][ T5878] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 952.520760][T18459] chnl_net:caif_netlink_parms(): no params data found [ 952.668062][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 952.673919][ T5878] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 952.673945][ T5878] usb 3-1: config 0 has no interface number 0 [ 952.744827][ T5878] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 952.747727][T15213] usb 6-1: USB disconnect, device number 31 [ 952.770445][ T5878] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 952.770474][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.770494][ T5878] usb 3-1: Product: syz [ 952.770508][ T5878] usb 3-1: Manufacturer: syz [ 952.770522][ T5878] usb 3-1: SerialNumber: syz [ 952.963280][ T5878] usb 3-1: config 0 descriptor?? [ 952.968492][T18509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 953.190152][T18509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 953.390952][ T5811] Bluetooth: hci0: command tx timeout [ 953.418049][T15213] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 953.561214][T15213] usb 6-1: device descriptor read/64, error -71 [ 953.798198][T15213] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 953.928018][T15213] usb 6-1: device descriptor read/64, error -71 [ 954.002609][ T5878] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 954.002643][ T5878] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 954.002919][ T5878] asix 3-1:0.188: probe with driver asix failed with error -61 [ 954.047671][T15213] usb usb6-port1: attempt power cycle [ 954.331167][ T810] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 954.387975][T15213] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 954.408809][T15213] usb 6-1: device descriptor read/8, error -71 [ 954.488062][ T810] usb 2-1: Using ep0 maxpacket: 8 [ 954.503939][T18459] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.504126][T18459] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.504329][T18459] bridge_slave_0: entered allmulticast mode [ 954.506665][T18459] bridge_slave_0: entered promiscuous mode [ 954.541333][ T810] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 954.541423][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.541476][ T810] usb 2-1: Product: syz [ 954.541517][ T810] usb 2-1: Manufacturer: syz [ 954.541558][ T810] usb 2-1: SerialNumber: syz [ 954.589402][ T810] usb 2-1: config 0 descriptor?? [ 954.596637][ T810] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 954.629688][T18459] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.629817][T18459] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.630311][T18459] bridge_slave_1: entered allmulticast mode [ 954.633355][T18459] bridge_slave_1: entered promiscuous mode [ 954.717974][T15213] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 954.738691][T15213] usb 6-1: device descriptor read/8, error -71 [ 954.837999][ T4251] hsr_slave_0: left promiscuous mode [ 954.856313][T15213] usb usb6-port1: unable to enumerate USB device [ 954.865011][ T4251] hsr_slave_1: left promiscuous mode [ 954.866196][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.866225][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.924009][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.924040][ T4251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.995756][ T4251] veth1_macvtap: left promiscuous mode [ 954.995867][ T4251] veth0_macvtap: left promiscuous mode [ 955.016560][ T810] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 955.016939][ T810] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 955.041458][ T810] usb 2-1: USB disconnect, device number 30 [ 955.250465][ T4251] pim6reg (unregistering): left allmulticast mode [ 955.310019][ T36] usb 3-1: USB disconnect, device number 24 [ 955.468151][ T5811] Bluetooth: hci0: command tx timeout [ 955.670250][ T4251] team0 (unregistering): Port device team_slave_1 removed [ 955.728801][ T4251] team0 (unregistering): Port device team_slave_0 removed [ 956.088036][T13885] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 956.140380][T18459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.162868][T18459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.225499][T18459] team0: Port device team_slave_0 added [ 956.235052][T18459] team0: Port device team_slave_1 added [ 956.238668][T13885] usb 2-1: Using ep0 maxpacket: 16 [ 956.256628][T13885] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.256662][T13885] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.256701][T13885] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 956.256724][T13885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.383389][ T810] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 956.588643][ T810] usb 6-1: Using ep0 maxpacket: 32 [ 956.639412][ T810] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 956.639436][ T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.639450][ T810] usb 6-1: Product: syz [ 956.639461][ T810] usb 6-1: Manufacturer: syz [ 956.639472][ T810] usb 6-1: SerialNumber: syz [ 956.713327][ T810] usb 6-1: config 0 descriptor?? [ 956.733508][ T810] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 956.888429][T13885] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 957.136511][T13885] usb 2-1: USB disconnect, device number 31 [ 957.556921][T18560] pim6reg: entered allmulticast mode [ 957.568344][T18459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.568361][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.568461][T18459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.572243][T18459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.572310][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.572338][T18459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.738586][ T810] gspca_ov534_9: reg_w failed -110 [ 958.028035][ T810] gspca_ov534_9: Unknown sensor 0000 [ 958.028155][ T810] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 958.102549][T18459] hsr_slave_0: entered promiscuous mode [ 958.103592][T18459] hsr_slave_1: entered promiscuous mode [ 958.481914][ T4251] IPVS: stop unused estimator thread 0... [ 959.659675][T15213] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 959.798896][ T810] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 959.828141][T15213] usb 5-1: Using ep0 maxpacket: 32 [ 959.830187][T15213] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 959.830214][T15213] usb 5-1: config 0 has no interface number 0 [ 959.830262][T15213] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 959.874811][T15213] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 959.874840][T15213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.874862][T15213] usb 5-1: Product: syz [ 959.874876][T15213] usb 5-1: Manufacturer: syz [ 959.874891][T15213] usb 5-1: SerialNumber: syz [ 959.934096][T15213] usb 5-1: config 0 descriptor?? [ 959.935312][T18588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 959.948302][ T810] usb 3-1: Using ep0 maxpacket: 8 [ 959.966395][ T810] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 959.966425][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.966448][ T810] usb 3-1: Product: syz [ 959.966463][ T810] usb 3-1: Manufacturer: syz [ 959.966479][ T810] usb 3-1: SerialNumber: syz [ 959.989409][ T810] usb 3-1: config 0 descriptor?? [ 960.019820][ T810] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 960.154831][T18588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 960.458952][ T810] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 960.467629][ T810] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 960.491673][ T810] usb 3-1: USB disconnect, device number 25 [ 960.496571][T17782] udevd[17782]: setting mode of /dev/bus/usb/003/025 to 020664 failed: No such file or directory [ 960.496755][T17782] udevd[17782]: setting owner of /dev/bus/usb/003/025 to uid=0, gid=0 failed: No such file or directory [ 960.784659][T18459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 960.817226][T18459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 960.843835][T18459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 960.904372][T18459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 960.967135][T15213] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 960.967168][T15213] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 960.967433][T15213] asix 5-1:0.188: probe with driver asix failed with error -61 [ 961.260444][T18459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.305039][T18459] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.369847][T18459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 961.369874][T18459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.453029][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.469124][ T9053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.501249][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.501385][ T9053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.731200][T18631] fuse: Unknown parameter 'appraise_type' [ 961.960028][T13885] usb 6-1: USB disconnect, device number 36 [ 962.220876][T18459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.547138][T18459] veth0_vlan: entered promiscuous mode [ 962.561932][ T5979] usb 5-1: USB disconnect, device number 43 [ 962.653614][T18459] veth1_vlan: entered promiscuous mode [ 962.785568][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4357'. [ 963.028516][T18459] veth0_macvtap: entered promiscuous mode [ 963.072697][T18459] veth1_macvtap: entered promiscuous mode [ 963.144918][T18459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.188865][T18459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.215452][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.215684][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.215754][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.215806][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.749064][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.749087][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.884540][T17045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.884564][T17045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.978073][ T809] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 964.127917][ T809] usb 6-1: Using ep0 maxpacket: 8 [ 964.134231][ T809] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 964.134262][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.134283][ T809] usb 6-1: Product: syz [ 964.134299][ T809] usb 6-1: Manufacturer: syz [ 964.134313][ T809] usb 6-1: SerialNumber: syz [ 964.181441][ T809] usb 6-1: config 0 descriptor?? [ 964.198195][ T809] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 964.432104][T18679] syzkaller0: entered promiscuous mode [ 964.432133][T18679] syzkaller0: entered allmulticast mode [ 964.452402][T18679] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 964.593962][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 964.638889][ T809] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 964.639550][ T809] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 964.649216][ T809] usb 6-1: USB disconnect, device number 37 [ 964.807962][ T36] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 964.968093][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 964.972183][ T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 964.972213][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 964.972239][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 964.972264][ T36] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.972307][ T36] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 964.972330][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.241071][ T36] usb 5-1: GET_CAPABILITIES returned 0 [ 965.241106][ T36] usbtmc 5-1:16.0: can't read capabilities [ 965.469012][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 966.938062][T13276] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 967.090747][T13276] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 967.090778][T13276] usb 6-1: config 0 has no interface number 0 [ 967.093432][T13276] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 967.093461][T13276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.093475][T13276] usb 6-1: Product: syz [ 967.093485][T13276] usb 6-1: Manufacturer: syz [ 967.093495][T13276] usb 6-1: SerialNumber: syz [ 967.164978][T13276] usb 6-1: config 0 descriptor?? [ 967.746851][ T809] usb 5-1: USB disconnect, device number 44 [ 967.804333][T13276] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 967.804363][T13276] usb 6-1: Firmware version (0.0) predates our first public release. [ 967.804382][T13276] usb 6-1: Please update to version 0.2 or newer [ 968.071504][T13276] usb 6-1: USB disconnect, device number 38 [ 968.342120][ T809] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 968.508081][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 968.524480][ T809] usb 3-1: config 0 has no interfaces? [ 968.524519][ T809] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 968.524544][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.574727][ T809] usb 3-1: config 0 descriptor?? [ 968.791117][T18728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.799028][T18728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.805380][ T5975] usb 3-1: USB disconnect, device number 26 [ 969.338093][ T5975] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 969.497996][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 969.500565][ T5975] usb 3-1: config 0 has no interfaces? [ 969.500603][ T5975] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 969.500628][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.505924][ T5975] usb 3-1: config 0 descriptor?? [ 969.713229][T18728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 969.719543][ T5975] usb 3-1: USB disconnect, device number 27 [ 970.049763][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.050665][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.051607][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.056606][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.057383][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.078620][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.080921][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.144003][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.145179][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.145763][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4390'. [ 970.189723][T18749] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.218478][T18749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 971.252075][T18784] IPv6: NLM_F_CREATE should be specified when creating new route [ 971.252460][T18784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 971.252473][T18784] IPv6: NLM_F_CREATE should be set when creating new route [ 971.252557][T18784] IPv6: NLM_F_CREATE should be set when creating new route [ 971.865487][T13276] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 972.118009][T13276] usb 3-1: Using ep0 maxpacket: 8 [ 972.150685][T13276] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 972.150717][T13276] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 972.150744][T13276] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 972.150770][T13276] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.150812][T13276] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 972.150836][T13276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.608059][T13276] usb 3-1: GET_CAPABILITIES returned 0 [ 972.608148][T13276] usbtmc 3-1:16.0: can't read capabilities [ 972.842596][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 973.638104][ T809] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 973.838052][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 973.840235][ T809] usb 6-1: config 0 has no interfaces? [ 973.840261][ T809] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 973.840295][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.844375][ T809] usb 6-1: config 0 descriptor?? [ 974.143495][T18799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.146133][T18799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.151404][ T809] usb 6-1: USB disconnect, device number 39 [ 974.728065][ T809] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 974.877075][T13276] usb 3-1: USB disconnect, device number 28 [ 974.887985][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 974.890242][ T809] usb 6-1: config 0 has no interfaces? [ 974.890279][ T809] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 974.890313][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.948852][ T809] usb 6-1: config 0 descriptor?? [ 975.160877][T18799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.165670][T13885] usb 6-1: USB disconnect, device number 40 [ 975.565071][ T809] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 975.699838][T18820] __nla_validate_parse: 9 callbacks suppressed [ 975.699881][T18820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4412'. [ 975.699893][T18820] IPv6: NLM_F_CREATE should be specified when creating new route [ 975.699996][T18820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 975.700004][T18820] IPv6: NLM_F_CREATE should be set when creating new route [ 975.700026][T18820] IPv6: NLM_F_CREATE should be set when creating new route [ 975.762092][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.762112][ T809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.764325][ T809] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 975.764345][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.764359][ T809] usb 2-1: Product: syz [ 975.764369][ T809] usb 2-1: Manufacturer: syz [ 975.764380][ T809] usb 2-1: SerialNumber: syz [ 975.841928][ T809] usb 2-1: config 0 descriptor?? [ 976.184860][ T809] usb 2-1: USB disconnect, device number 32 [ 976.318569][T13276] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 976.480970][T13276] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 976.480991][T13276] usb 6-1: config 0 has no interface number 0 [ 976.483571][T13276] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 976.483597][T13276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.483611][T13276] usb 6-1: Product: syz [ 976.483622][T13276] usb 6-1: Manufacturer: syz [ 976.483632][T13276] usb 6-1: SerialNumber: syz [ 976.487271][T13276] usb 6-1: config 0 descriptor?? [ 976.724102][T13276] usb 6-1: Firmware version (0.0) predates our first public release. [ 976.724123][T13276] usb 6-1: Please update to version 0.2 or newer [ 976.831811][T13276] usb 6-1: USB disconnect, device number 41 [ 978.419974][T13885] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 978.583283][T13885] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 978.583304][T13885] usb 2-1: config 0 has no interface number 0 [ 978.583336][T13885] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 978.584794][T13885] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 978.584815][T13885] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 978.584829][T13885] usb 2-1: Manufacturer: syz [ 978.584840][T13885] usb 2-1: SerialNumber: syz [ 978.615732][T13885] usb 2-1: config 0 descriptor?? [ 979.247959][T15213] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 979.288643][T13276] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 979.320049][T13885] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input24 [ 979.398001][T15213] usb 6-1: Using ep0 maxpacket: 32 [ 979.400457][T15213] usb 6-1: config 0 has no interfaces? [ 979.400491][T15213] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 979.400517][T15213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.440537][T15213] usb 6-1: config 0 descriptor?? [ 979.520759][T13276] usb 4-1: Using ep0 maxpacket: 8 [ 979.534170][T13276] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 979.534606][T13276] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 979.534634][T13276] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 979.534660][T13276] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.534693][T13276] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 979.534765][T13276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.660146][T18864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.676397][T18864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.714903][T13885] usb 6-1: USB disconnect, device number 42 [ 979.837071][T13276] usb 4-1: GET_CAPABILITIES returned 0 [ 979.837120][T13276] usbtmc 4-1:16.0: can't read capabilities [ 980.046947][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 980.100451][T13276] usb 4-1: USB disconnect, device number 45 [ 980.122759][ T5979] usb 2-1: USB disconnect, device number 33 [ 980.218099][T13885] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 980.398114][T13885] usb 6-1: Using ep0 maxpacket: 32 [ 980.401118][T13885] usb 6-1: config 0 has no interfaces? [ 980.401152][T13885] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 980.401176][T13885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.405695][T13885] usb 6-1: config 0 descriptor?? [ 980.632056][T18864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.634030][T13885] usb 6-1: USB disconnect, device number 43 [ 980.668448][ T5979] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 980.821087][ T5979] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 980.821117][ T5979] usb 2-1: config 0 has no interface number 0 [ 980.824721][ T5979] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 980.824751][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.824848][ T5979] usb 2-1: Product: syz [ 980.824865][ T5979] usb 2-1: Manufacturer: syz [ 980.824880][ T5979] usb 2-1: SerialNumber: syz [ 980.855820][ T5979] usb 2-1: config 0 descriptor?? [ 981.166850][ T5979] usb 2-1: Firmware version (0.0) predates our first public release. [ 981.166878][ T5979] usb 2-1: Please update to version 0.2 or newer [ 981.232937][ T5979] usb 2-1: USB disconnect, device number 34 [ 981.807989][T13885] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 981.968103][T13885] usb 6-1: Using ep0 maxpacket: 16 [ 981.986627][T13885] usb 6-1: unable to get BOS descriptor or descriptor too short [ 982.018033][T13885] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 982.018064][T13885] usb 6-1: config 13 has no interface number 0 [ 982.018115][T13885] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 982.018142][T13885] usb 6-1: config 13 interface 50 has no altsetting 0 [ 982.061006][T13885] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 982.061035][T13885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.061060][T13885] usb 6-1: Product: syz [ 982.061071][T13885] usb 6-1: Manufacturer: syz [ 982.061081][T13885] usb 6-1: SerialNumber: syz [ 982.092750][T18887] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 982.328628][T13885] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 982.328672][T13885] usb 6-1: MIDIStreaming interface descriptor not found [ 982.518125][ T5979] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 982.700287][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 982.700325][ T5979] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 982.705499][ T5979] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 982.705530][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.705552][ T5979] usb 2-1: Product: syz [ 982.705567][ T5979] usb 2-1: Manufacturer: syz [ 982.705582][ T5979] usb 2-1: SerialNumber: syz [ 982.898532][ T5979] usb 2-1: config 0 descriptor?? [ 982.923874][T13885] usb 6-1: USB disconnect, device number 44 [ 982.937652][ T5979] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 983.011124][ T5979] usb 2-1: Detected SIO [ 983.011141][ T5979] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 983.062160][ T5979] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 983.135680][T17546] udevd[17546]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.672282][T18932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4449'. [ 984.795473][T13885] usb 2-1: USB disconnect, device number 35 [ 984.893339][T13885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 984.894130][T13885] ftdi_sio 2-1:0.0: device disconnected [ 985.263185][T18948] tipc: Failed to remove unknown binding: 66,0,0/0:13627913/13627915 [ 985.263224][T18948] tipc: Failed to remove unknown binding: 66,0,0/0:13627913/13627914 [ 985.850848][T18961] netlink: 'syz.3.4455': attribute type 4 has an invalid length. [ 986.938867][T18977] syzkaller0: entered promiscuous mode [ 986.938888][T18977] syzkaller0: entered allmulticast mode [ 986.948655][T18977] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 987.178097][T13276] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 987.355861][T13276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 987.355910][T13276] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 987.361893][T13276] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 987.361974][T13276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.362035][T13276] usb 2-1: Product: syz [ 987.362076][T13276] usb 2-1: Manufacturer: syz [ 987.362117][T13276] usb 2-1: SerialNumber: syz [ 987.439679][T13276] usb 2-1: config 0 descriptor?? [ 987.467514][T13276] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 987.482255][T13276] usb 2-1: Detected SIO [ 987.482280][T13276] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 987.514178][T13276] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 988.108828][T13885] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 988.208023][T15213] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 988.258079][T13885] usb 5-1: Using ep0 maxpacket: 16 [ 988.259018][T13885] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 988.261903][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.261928][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.263518][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.263543][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.265411][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.265437][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.266524][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.266546][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.273269][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.273294][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.307976][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.308004][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.341680][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.341700][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.368016][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.368045][T13885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.418697][T15213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.418851][T15213] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 988.418952][T15213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 988.419035][T15213] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 988.490323][T15213] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 988.490353][T15213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.490457][T15213] usb 3-1: Product: syz [ 988.490473][T15213] usb 3-1: Manufacturer: syz [ 988.490488][T15213] usb 3-1: SerialNumber: syz [ 988.491959][T13885] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 988.491986][T13885] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 988.492007][T13885] usb 5-1: Product: syz [ 988.492022][T13885] usb 5-1: Manufacturer: syz [ 988.578547][T13885] r8152-cfgselector 5-1: Unknown version 0x0000 [ 988.578575][T13885] r8152-cfgselector 5-1: config 0 descriptor?? [ 988.583704][T15213] usb 3-1: config 0 descriptor?? [ 988.800800][T13885] r8152-cfgselector 5-1: USB disconnect, device number 45 [ 988.808385][T13276] usb 3-1: USB disconnect, device number 29 [ 989.187968][T13276] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 989.339324][T13276] usb 4-1: Using ep0 maxpacket: 16 [ 989.342934][T13276] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.342981][T13276] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.343035][T13276] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 989.343078][T13276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.838449][T13276] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 989.941845][T13885] usb 2-1: USB disconnect, device number 36 [ 989.971999][T13885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 989.972740][T13885] ftdi_sio 2-1:0.0: device disconnected [ 990.203347][T13276] usb 4-1: USB disconnect, device number 46 [ 990.298138][T15213] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 990.450500][T15213] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 990.450632][T15213] usb 6-1: config 0 has no interface number 0 [ 990.453647][T15213] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 990.453676][T15213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.453697][T15213] usb 6-1: Product: syz [ 990.453712][T15213] usb 6-1: Manufacturer: syz [ 990.453726][T15213] usb 6-1: SerialNumber: syz [ 990.527299][T15213] usb 6-1: config 0 descriptor?? [ 990.936704][T15213] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 990.936726][T15213] usb 6-1: Firmware version (0.0) predates our first public release. [ 990.936739][T15213] usb 6-1: Please update to version 0.2 or newer [ 991.234589][T15213] usb 6-1: USB disconnect, device number 45 [ 992.598004][T15220] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 992.766240][T15220] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.766280][T15220] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 992.766300][T15220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 992.766320][T15220] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.769736][T15220] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 992.769757][T15220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.769772][T15220] usb 6-1: Product: syz [ 992.769782][T15220] usb 6-1: Manufacturer: syz [ 992.769793][T15220] usb 6-1: SerialNumber: syz [ 992.860271][T15220] usb 6-1: config 0 descriptor?? [ 993.074943][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.075050][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.120882][T15213] usb 6-1: USB disconnect, device number 46 [ 997.828032][T13885] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 997.978072][T13885] usb 6-1: Using ep0 maxpacket: 32 [ 997.981362][T13885] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 997.981387][T13885] usb 6-1: config 0 has no interface number 0 [ 997.981432][T13885] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 997.985664][T13885] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 997.985692][T13885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.985713][T13885] usb 6-1: Product: syz [ 997.985728][T13885] usb 6-1: Manufacturer: syz [ 997.985743][T13885] usb 6-1: SerialNumber: syz [ 998.073021][T13885] usb 6-1: config 0 descriptor?? [ 998.074070][T19119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 998.324578][T19119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 999.149455][T13885] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 999.149478][T13885] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 999.149665][T13885] asix 6-1:0.188: probe with driver asix failed with error -61 [ 999.547051][T13885] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 999.698066][T13885] usb 5-1: device descriptor read/64, error -71 [ 999.768008][T13276] usb 6-1: USB disconnect, device number 47 [ 999.886015][T19140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4516'. [ 999.969034][T13885] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1000.108458][T13885] usb 5-1: device descriptor read/64, error -71 [ 1000.223662][T13885] usb usb5-port1: attempt power cycle [ 1000.577947][T13885] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1000.599012][T13885] usb 5-1: device descriptor read/8, error -71 [ 1000.838567][T13885] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1000.864234][T13885] usb 5-1: device descriptor read/8, error -71 [ 1000.968485][T13885] usb usb5-port1: unable to enumerate USB device [ 1001.367980][T13276] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1001.518335][T13276] usb 6-1: Using ep0 maxpacket: 32 [ 1001.521288][T13276] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1001.521308][T13276] usb 6-1: config 0 has no interface number 0 [ 1001.521342][T13276] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1001.523844][T13276] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1001.523865][T13276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.523879][T13276] usb 6-1: Product: syz [ 1001.523890][T13276] usb 6-1: Manufacturer: syz [ 1001.523900][T13276] usb 6-1: SerialNumber: syz [ 1001.550198][T13276] usb 6-1: config 0 descriptor?? [ 1001.557740][T19169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1001.816670][T19169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1002.626276][T13276] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1002.626305][T13276] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1002.626542][T13276] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1002.881225][ T5979] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1003.297190][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 1003.311757][ T5979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1003.311786][ T5979] usb 4-1: config 0 has no interface number 0 [ 1003.311839][ T5979] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1003.311862][ T5979] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1003.315524][ T5979] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1003.315554][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.315575][ T5979] usb 4-1: Product: syz [ 1003.315590][ T5979] usb 4-1: Manufacturer: syz [ 1003.315604][ T5979] usb 4-1: SerialNumber: syz [ 1003.419421][ T5979] usb 4-1: config 0 descriptor?? [ 1003.551830][T13276] usb 6-1: USB disconnect, device number 48 [ 1003.631605][ T5979] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1003.648359][ T5979] cx231xx 4-1:0.1: Failed to read PCB config [ 1003.648416][ T5979] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1003.685142][ T5979] usb 4-1: USB disconnect, device number 47 [ 1004.180780][ T5979] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1004.330493][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 1004.347549][ T5979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1004.347637][ T5979] usb 4-1: config 0 has no interface number 0 [ 1004.347779][ T5979] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1004.363389][ T5979] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1004.416746][ T5979] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1004.416778][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.416799][ T5979] usb 4-1: Product: syz [ 1004.416814][ T5979] usb 4-1: Manufacturer: syz [ 1004.416829][ T5979] usb 4-1: SerialNumber: syz [ 1004.476828][ T5979] usb 4-1: config 0 descriptor?? [ 1004.718497][ T5979] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1004.721317][ T5979] cx231xx 4-1:0.1: Failed to read PCB config [ 1004.721389][ T5979] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1004.774997][ T5979] usb 4-1: USB disconnect, device number 48 [ 1006.848023][ T809] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1007.021136][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 1007.023257][ T809] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1007.023275][ T809] usb 2-1: config 0 has no interface number 0 [ 1007.023306][ T809] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.023323][ T809] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1007.025826][ T809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1007.025846][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.025861][ T809] usb 2-1: Product: syz [ 1007.025871][ T809] usb 2-1: Manufacturer: syz [ 1007.025881][ T809] usb 2-1: SerialNumber: syz [ 1007.129391][ T809] usb 2-1: config 0 descriptor?? [ 1007.135174][ T809] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1007.135199][ T809] em28xx 2-1:0.89: Video interface 89 found: [ 1007.924554][ T809] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1008.558406][ T809] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 1008.558433][ T809] em28xx 2-1:0.89: board has no eeprom [ 1009.047945][ T809] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1009.047982][ T809] em28xx 2-1:0.89: analog set to bulk mode. [ 1009.050624][T15213] em28xx 2-1:0.89: Registering V4L2 extension [ 1009.194271][ T809] usb 2-1: USB disconnect, device number 37 [ 1009.196611][ T809] em28xx 2-1:0.89: Disconnecting em28xx [ 1009.370538][T15213] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1009.370565][T15213] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1009.370592][T15213] em28xx 2-1:0.89: No AC97 audio processor [ 1009.442391][T15213] usb 2-1: Decoder not found [ 1009.442412][T15213] em28xx 2-1:0.89: failed to create media graph [ 1009.442443][T15213] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1009.475290][T15213] em28xx 2-1:0.89: Registering snapshot button... [ 1009.477753][T15213] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input25 [ 1009.545944][T15213] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1009.546008][ T809] em28xx 2-1:0.89: Closing input extension [ 1009.546030][ T809] em28xx 2-1:0.89: Deregistering snapshot button [ 1009.729644][ T809] em28xx 2-1:0.89: Freeing device [ 1010.689714][T19262] syzkaller0: entered promiscuous mode [ 1010.689742][T19262] syzkaller0: entered allmulticast mode [ 1010.781430][T19262] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1010.930160][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1011.059935][T19270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1011.077356][T19270] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1012.131434][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4568'. [ 1012.181924][T19299] tipc: Started in network mode [ 1012.181950][T19299] tipc: Node identity de504096bcf8, cluster identity 4711 [ 1012.186657][T19299] tipc: Enabled bearer , priority 0 [ 1012.187640][T19299] syzkaller0: entered promiscuous mode [ 1012.187663][T19299] syzkaller0: entered allmulticast mode [ 1012.361544][T19299] tipc: Resetting bearer [ 1012.424254][T19298] tipc: Resetting bearer [ 1012.503915][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 1012.632365][T19311] trusted_key: encrypted_key: insufficient parameters specified [ 1012.690571][T19298] tipc: Disabling bearer [ 1013.245510][T19308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1013.256267][T19308] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1013.462203][T19320] syzkaller0: entered promiscuous mode [ 1013.462222][T19320] syzkaller0: entered allmulticast mode [ 1014.008628][T13885] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1014.153376][T13885] usb 3-1: device descriptor read/64, error -71 [ 1014.408094][T13885] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1014.548145][T13885] usb 3-1: device descriptor read/64, error -71 [ 1014.659476][T13885] usb usb3-port1: attempt power cycle [ 1014.997999][T13885] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1015.020625][T13885] usb 3-1: device descriptor read/8, error -71 [ 1015.271180][T13885] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1015.288923][T13885] usb 3-1: device descriptor read/8, error -71 [ 1015.341461][T19357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1015.398044][ T5979] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1015.398864][T13885] usb usb3-port1: unable to enumerate USB device [ 1015.548397][ T5979] usb 6-1: Using ep0 maxpacket: 32 [ 1015.594165][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1015.642169][ T5979] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1015.642206][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.642221][ T5979] usb 6-1: Product: syz [ 1015.642231][ T5979] usb 6-1: Manufacturer: syz [ 1015.642241][ T5979] usb 6-1: SerialNumber: syz [ 1015.685178][ T5979] usb 6-1: config 0 descriptor?? [ 1015.699532][ T5979] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1016.343310][T19355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.378286][T15213] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1016.541106][T15213] usb 2-1: Using ep0 maxpacket: 32 [ 1016.546838][T15213] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1016.546868][T15213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.546888][T15213] usb 2-1: Product: syz [ 1016.546903][T15213] usb 2-1: Manufacturer: syz [ 1016.546918][T15213] usb 2-1: SerialNumber: syz [ 1016.598725][T15213] usb 2-1: config 0 descriptor?? [ 1016.620218][T15213] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1016.718209][ T5979] gspca_ov534_9: reg_w failed -110 [ 1016.786174][T19375] tc_dump_action: action bad kind [ 1017.008020][ T5979] gspca_ov534_9: Unknown sensor 0000 [ 1017.008123][ T5979] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1017.016265][ T5979] usb 6-1: USB disconnect, device number 49 [ 1017.232203][T15213] gspca_ov534_9: reg_w failed -71 [ 1017.520156][ T5979] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1017.550700][T15213] gspca_ov534_9: Unknown sensor 0000 [ 1017.550799][T15213] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1017.581766][T15213] usb 2-1: USB disconnect, device number 38 [ 1017.714020][ T5979] usb 4-1: Using ep0 maxpacket: 8 [ 1017.727165][ T5979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.727186][ T5979] usb 4-1: config 0 has no interface number 0 [ 1017.727243][ T5979] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1017.727294][ T5979] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1017.727319][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.810059][ T5979] usb 4-1: config 0 descriptor?? [ 1017.842910][ T5979] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1017.938055][T13885] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1018.084040][T13885] usb 6-1: device descriptor read/64, error -71 [ 1018.118754][T19386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.119956][T19386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.318154][T13885] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1018.448465][T13885] usb 6-1: device descriptor read/64, error -71 [ 1018.563616][T13885] usb usb6-port1: attempt power cycle [ 1018.907981][T13885] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1018.930988][T13885] usb 6-1: device descriptor read/8, error -71 [ 1019.168194][T13885] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1019.197436][T13885] usb 6-1: device descriptor read/8, error -71 [ 1019.304033][T13885] usb usb6-port1: unable to enumerate USB device [ 1019.563562][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4599'. [ 1020.305648][T19413] netlink: 'syz.2.4600': attribute type 4 has an invalid length. [ 1020.850591][T19415] tc_dump_action: action bad kind [ 1021.407989][T13276] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1021.548192][T13276] usb 6-1: device descriptor read/64, error -71 [ 1021.788108][T13276] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1021.918040][T13276] usb 6-1: device descriptor read/64, error -71 [ 1022.029347][T13276] usb usb6-port1: attempt power cycle [ 1022.473134][T13276] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1022.509587][T13276] usb 6-1: device descriptor read/8, error -71 [ 1022.748612][T13276] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1022.777975][T13276] usb 6-1: device descriptor read/8, error -71 [ 1022.890109][T13276] usb usb6-port1: unable to enumerate USB device [ 1023.590346][T13276] usb 4-1: USB disconnect, device number 49 [ 1024.059224][T13276] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1024.258053][T13276] usb 4-1: Using ep0 maxpacket: 32 [ 1024.263515][T13276] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1024.263537][T13276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.263551][T13276] usb 4-1: Product: syz [ 1024.263561][T13276] usb 4-1: Manufacturer: syz [ 1024.263571][T13276] usb 4-1: SerialNumber: syz [ 1024.337754][T13276] usb 4-1: config 0 descriptor?? [ 1024.355661][T13276] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1024.702355][ T809] IPVS: starting estimator thread 0... [ 1024.800141][T19441] IPVS: using max 8 ests per chain, 19200 per kthread [ 1024.993343][T13276] gspca_ov534_9: reg_w failed -71 [ 1025.168103][T15220] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1025.212566][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4613'. [ 1025.298623][T15220] usb 2-1: device descriptor read/64, error -71 [ 1025.310728][T13276] gspca_ov534_9: Unknown sensor 0000 [ 1025.310805][T13276] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1025.318955][T13276] usb 4-1: USB disconnect, device number 50 [ 1025.361296][T19448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1025.364658][T19448] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1025.537978][T15220] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1025.677963][T15220] usb 2-1: device descriptor read/64, error -71 [ 1025.788580][T15220] usb usb2-port1: attempt power cycle [ 1025.857999][T13885] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1026.009853][T13885] usb 4-1: Using ep0 maxpacket: 32 [ 1026.014320][T13885] usb 4-1: config 0 has no interfaces? [ 1026.014356][T13885] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1026.014385][T13885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.019398][T13885] usb 4-1: config 0 descriptor?? [ 1026.128095][T15220] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1026.149027][T15220] usb 2-1: device descriptor read/8, error -71 [ 1026.254607][T19458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.254961][T19458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.269695][ T5979] usb 4-1: USB disconnect, device number 51 [ 1026.388053][T15220] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1026.408571][T15220] usb 2-1: device descriptor read/8, error -71 [ 1026.477946][T13276] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1026.518290][T15220] usb usb2-port1: unable to enumerate USB device [ 1026.631758][T13276] usb 6-1: Using ep0 maxpacket: 32 [ 1026.634373][T13276] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1026.634400][T13276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.634421][T13276] usb 6-1: config 0 has no interface number 0 [ 1026.634466][T13276] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1026.634497][T13276] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1026.689872][T13276] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1026.689904][T13276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.689925][T13276] usb 6-1: Product: syz [ 1026.689940][T13276] usb 6-1: Manufacturer: syz [ 1026.689954][T13276] usb 6-1: SerialNumber: syz [ 1026.696823][T13276] usb 6-1: config 0 descriptor?? [ 1026.768405][ T5979] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1026.919812][T13276] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1026.919837][T13276] cx231xx 6-1:0.1: Not found matching IAD interface [ 1026.922677][ T5979] usb 4-1: Using ep0 maxpacket: 16 [ 1026.927384][ T5979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.966093][T13276] usb 6-1: USB disconnect, device number 58 [ 1026.984387][T19344] udevd[19344]: setting mode of /dev/bus/usb/006/058 to 020664 failed: No such file or directory [ 1026.987755][ T5979] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1026.987776][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.989462][ T5979] usb 4-1: Manufacturer: à ’ [ 1026.989522][ T5979] usb 4-1: SerialNumber: syz [ 1026.995349][T19344] udevd[19344]: setting owner of /dev/bus/usb/006/058 to uid=0, gid=0 failed: No such file or directory [ 1027.051394][ T5979] usb 4-1: config 0 descriptor?? [ 1027.257281][T19458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.267624][ T5979] usb 4-1: USB disconnect, device number 52 [ 1027.333386][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1027.428391][T13276] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1027.598110][T13276] usb 6-1: Using ep0 maxpacket: 32 [ 1027.600351][T13276] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1027.600371][T13276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.600385][T13276] usb 6-1: config 0 has no interface number 0 [ 1027.600416][T13276] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1027.600435][T13276] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1027.603094][T13276] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1027.603121][T13276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.603140][T13276] usb 6-1: Product: syz [ 1027.603161][T13276] usb 6-1: Manufacturer: syz [ 1027.603171][T13276] usb 6-1: SerialNumber: syz [ 1027.698351][T13276] usb 6-1: config 0 descriptor?? [ 1028.107323][T13276] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1028.107355][T13276] cx231xx 6-1:0.1: Not found matching IAD interface [ 1028.198129][T13276] usb 6-1: USB disconnect, device number 59 [ 1030.028130][T13276] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1030.180114][T13276] usb 3-1: Using ep0 maxpacket: 32 [ 1030.182445][T13276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1030.182470][T13276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.182491][T13276] usb 3-1: config 0 has no interface number 0 [ 1030.182540][T13276] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.182569][T13276] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1030.185501][T13276] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1030.185537][T13276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.185559][T13276] usb 3-1: Product: syz [ 1030.185574][T13276] usb 3-1: Manufacturer: syz [ 1030.185589][T13276] usb 3-1: SerialNumber: syz [ 1030.252779][T13276] usb 3-1: config 0 descriptor?? [ 1030.493564][T13276] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1030.493597][T13276] cx231xx 3-1:0.1: Not found matching IAD interface [ 1030.519027][T13276] usb 3-1: USB disconnect, device number 34 [ 1030.987998][T13276] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1031.147952][T13276] usb 3-1: Using ep0 maxpacket: 32 [ 1031.151241][T13276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1031.151264][T13276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.151282][T13276] usb 3-1: config 0 has no interface number 0 [ 1031.151322][T13276] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.151348][T13276] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1031.153984][T13276] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1031.154015][T13276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.154036][T13276] usb 3-1: Product: syz [ 1031.154052][T13276] usb 3-1: Manufacturer: syz [ 1031.154068][T13276] usb 3-1: SerialNumber: syz [ 1031.192415][T13276] usb 3-1: config 0 descriptor?? [ 1031.622671][T13276] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1031.622713][T13276] cx231xx 3-1:0.1: Not found matching IAD interface [ 1031.688856][T13276] usb 3-1: USB disconnect, device number 35 [ 1032.108474][T13885] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1032.188098][ T5979] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1032.247923][T13885] usb 2-1: device descriptor read/64, error -71 [ 1032.338117][ T5979] usb 5-1: Using ep0 maxpacket: 32 [ 1032.345933][ T5979] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1032.345963][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.345984][ T5979] usb 5-1: Product: syz [ 1032.346010][ T5979] usb 5-1: Manufacturer: syz [ 1032.346023][ T5979] usb 5-1: SerialNumber: syz [ 1032.400857][ T5979] usb 5-1: config 0 descriptor?? [ 1032.422229][ T5979] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1032.508520][T13885] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1032.647987][T13885] usb 2-1: device descriptor read/64, error -71 [ 1032.768669][T13885] usb usb2-port1: attempt power cycle [ 1033.119772][T13885] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1033.141160][T19625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1033.160729][T13885] usb 2-1: device descriptor read/8, error -71 [ 1033.194688][T19586] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1033.219524][T19586] syz_tun: entered allmulticast mode [ 1033.220358][T19585] syz_tun: left allmulticast mode [ 1033.289046][ T5979] gspca_ov534_9: reg_w failed -71 [ 1033.398302][T13885] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1033.431499][T13885] usb 2-1: device descriptor read/8, error -71 [ 1033.549014][T13885] usb usb2-port1: unable to enumerate USB device [ 1033.606100][T19645] netlink: 'syz.2.4693': attribute type 4 has an invalid length. [ 1033.619541][ T5979] gspca_ov534_9: Unknown sensor 0000 [ 1033.619639][ T5979] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1033.653772][ T5979] usb 5-1: USB disconnect, device number 50 [ 1035.572377][T13276] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1035.729788][T13276] usb 5-1: config 0 has no interfaces? [ 1035.731919][T13276] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1035.731947][T13276] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1035.731968][T13276] usb 5-1: Manufacturer: syz [ 1035.731983][T13276] usb 5-1: SerialNumber: syz [ 1035.793014][T13276] usb 5-1: config 0 descriptor?? [ 1036.115604][T19717] syzkaller0: entered promiscuous mode [ 1036.115631][T19717] syzkaller0: entered allmulticast mode [ 1038.303923][T13885] usb 5-1: USB disconnect, device number 51 [ 1039.598225][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1039.898044][ T5979] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1040.037957][ T5979] usb 5-1: device descriptor read/64, error -71 [ 1040.277952][ T5979] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1040.697950][ T5979] usb 5-1: device descriptor read/64, error -71 [ 1040.810984][ T5979] usb usb5-port1: attempt power cycle [ 1041.148013][ T5979] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1041.168960][ T5979] usb 5-1: device descriptor read/8, error -71 [ 1041.408539][ T5979] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1041.428601][ T5979] usb 5-1: device descriptor read/8, error -71 [ 1041.538438][ T5979] usb usb5-port1: unable to enumerate USB device [ 1042.998583][T19931] 8021q: VLANs not supported on caif0 [ 1044.768020][ T5979] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1044.897974][ T5979] usb 2-1: device descriptor read/64, error -71 [ 1045.158215][ T5979] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1045.287982][ T5979] usb 2-1: device descriptor read/64, error -71 [ 1045.398382][ T5979] usb usb2-port1: attempt power cycle [ 1045.738007][ T5979] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1045.758800][ T5979] usb 2-1: device descriptor read/8, error -71 [ 1045.997971][ T5979] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1045.998172][ T5975] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1046.026557][ T5979] usb 2-1: device descriptor read/8, error -71 [ 1046.128326][ T5979] usb usb2-port1: unable to enumerate USB device [ 1046.130643][ T5975] usb 3-1: device descriptor read/64, error -71 [ 1046.379693][ T5975] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1046.508092][ T5975] usb 3-1: device descriptor read/64, error -71 [ 1046.620516][ T5975] usb usb3-port1: attempt power cycle [ 1046.957947][ T5975] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1046.981774][ T5975] usb 3-1: device descriptor read/8, error -71 [ 1047.217997][ T5975] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1047.238713][ T5975] usb 3-1: device descriptor read/8, error -71 [ 1047.348396][ T5975] usb usb3-port1: unable to enumerate USB device [ 1048.844870][T20113] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1049.001221][T20115] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1049.303174][ T5975] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1049.462233][ T5975] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1049.462288][ T5975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1049.462315][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1049.462344][ T5975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.465881][ T5975] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1049.465909][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.465928][ T5975] usb 3-1: Product: syz [ 1049.465947][ T5975] usb 3-1: Manufacturer: syz [ 1049.465957][ T5975] usb 3-1: SerialNumber: syz [ 1049.660366][ T5975] usb 3-1: config 0 descriptor?? [ 1049.874951][ T5884] usb 3-1: USB disconnect, device number 40 [ 1051.092133][T20173] tipc: Enabling of bearer rejected, failed to enable media [ 1051.093036][T20173] syzkaller0: entered promiscuous mode [ 1051.093058][T20173] syzkaller0: entered allmulticast mode [ 1051.132918][T20173] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1051.507944][T13276] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1051.658670][T13276] usb 2-1: Using ep0 maxpacket: 32 [ 1051.665270][T13276] usb 2-1: config 0 has no interfaces? [ 1051.665307][T13276] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1051.665331][T13276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.702106][T13276] usb 2-1: config 0 descriptor?? [ 1051.904817][T20217] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4962'. [ 1051.906400][T20181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.906965][T20181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.910570][T15213] usb 2-1: USB disconnect, device number 51 [ 1051.958223][T13276] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1052.115317][T13276] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1052.115397][T13276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1052.115426][T13276] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.115452][T13276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.115479][T13276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1052.121096][T13276] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1052.121176][T13276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.121227][T13276] usb 3-1: Product: syz [ 1052.121267][T13276] usb 3-1: Manufacturer: syz [ 1052.121306][T13276] usb 3-1: SerialNumber: syz [ 1052.208465][T13276] usb 3-1: config 0 descriptor?? [ 1052.237009][T13276] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 1052.242533][T20181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.428027][T13276] usb 3-1: USB disconnect, device number 41 [ 1053.468061][ T5975] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1053.617998][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 1053.620994][ T5975] usb 5-1: config 0 has no interfaces? [ 1053.623283][ T5975] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1053.623313][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.671370][ T5975] usb 5-1: config 0 descriptor?? [ 1053.883628][T20281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.884170][T20281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.913047][ T5975] usb 5-1: USB disconnect, device number 56 [ 1054.129633][T20281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.512397][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.512462][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.473448][T20350] netlink: 'syz.4.5019': attribute type 2 has an invalid length. [ 1055.559000][T15213] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1055.758048][T15213] usb 2-1: Using ep0 maxpacket: 32 [ 1055.763999][T15213] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1055.764027][T15213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.764048][T15213] usb 2-1: Product: syz [ 1055.764063][T15213] usb 2-1: Manufacturer: syz [ 1055.764074][T15213] usb 2-1: SerialNumber: syz [ 1055.771173][T15213] usb 2-1: config 0 descriptor?? [ 1055.784202][T15213] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1056.395431][T15213] gspca_ov534_9: reg_w failed -71 [ 1056.677886][T15213] gspca_ov534_9: Unknown sensor 0000 [ 1056.677982][T15213] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1056.683278][T15213] usb 2-1: USB disconnect, device number 52 [ 1058.518008][ T5975] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1058.671535][ T5975] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1058.671563][ T5975] usb 3-1: config 0 has no interface number 0 [ 1058.677267][ T5975] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1058.677294][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.677313][ T5975] usb 3-1: Product: syz [ 1058.677327][ T5975] usb 3-1: Manufacturer: syz [ 1058.677341][ T5975] usb 3-1: SerialNumber: syz [ 1058.729850][ T5975] usb 3-1: config 0 descriptor?? [ 1059.134636][ T5975] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 1059.134667][ T5975] usb 3-1: Firmware version (0.0) predates our first public release. [ 1059.134686][ T5975] usb 3-1: Please update to version 0.2 or newer [ 1061.046013][T15213] usb 3-1: USB disconnect, device number 42 [ 1061.134750][T20495] IPv6: NLM_F_CREATE should be specified when creating new route [ 1062.017964][T15213] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1062.188270][T15213] usb 3-1: Using ep0 maxpacket: 32 [ 1062.211562][T15213] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1062.211591][T15213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.211610][T15213] usb 3-1: Product: syz [ 1062.211630][T15213] usb 3-1: Manufacturer: syz [ 1062.211643][T15213] usb 3-1: SerialNumber: syz [ 1062.250938][T15213] usb 3-1: config 0 descriptor?? [ 1062.285436][T15213] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1062.788039][ T809] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1062.940448][T20547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1062.943333][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 1062.953718][ T809] usb 5-1: config 0 has no interfaces? [ 1062.953935][ T809] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1062.954155][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.999708][T20504] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1063.039175][ T809] usb 5-1: config 0 descriptor?? [ 1063.165957][T15213] gspca_ov534_9: reg_w failed -71 [ 1063.243795][T20529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.244312][T20529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.277519][ T5975] usb 5-1: USB disconnect, device number 57 [ 1063.459270][T15213] gspca_ov534_9: Unknown sensor 0000 [ 1063.459378][T15213] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1063.478200][T15213] usb 3-1: USB disconnect, device number 43 [ 1063.738050][T13276] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1063.809444][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5126'. [ 1063.890513][T13276] usb 5-1: Using ep0 maxpacket: 16 [ 1063.892694][T13276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1063.892725][T13276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1063.925881][T13276] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1063.925912][T13276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.925943][T13276] usb 5-1: Product: syz [ 1063.925958][T13276] usb 5-1: Manufacturer: syz [ 1063.925974][T13276] usb 5-1: SerialNumber: syz [ 1063.952607][T13276] usb 5-1: config 0 descriptor?? [ 1063.996037][T13276] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1063.996061][T13276] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1064.098176][T15213] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1064.164704][T20529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.232874][T13276] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1064.233259][T13276] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1064.233569][T13276] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1064.233581][T13276] em28xx 5-1:0.0: No AC97 audio processor [ 1064.248529][T15213] usb 2-1: Using ep0 maxpacket: 32 [ 1064.259545][T15213] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1064.259606][T15213] usb 2-1: config 0 has no interface number 0 [ 1064.259724][T15213] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1064.259785][T15213] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1064.303907][T15213] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1064.303942][T15213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.303955][T15213] usb 2-1: Product: syz [ 1064.303965][T15213] usb 2-1: Manufacturer: syz [ 1064.303974][T15213] usb 2-1: SerialNumber: syz [ 1064.366020][T13276] usb 5-1: USB disconnect, device number 58 [ 1064.415544][T15213] usb 2-1: config 0 descriptor?? [ 1064.415974][T13276] em28xx 5-1:0.0: Disconnecting em28xx [ 1064.453916][T13276] em28xx 5-1:0.0: Freeing device [ 1064.653485][T15213] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1064.653985][T15213] cx231xx 2-1:0.1: Failed to read PCB config [ 1064.654053][T15213] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1064.657030][T15213] usb 2-1: USB disconnect, device number 53 [ 1064.926581][T20617] tipc: Failed to remove unknown binding: 66,0,0/0:1734565878/1734565880 [ 1064.926622][T20617] tipc: Failed to remove unknown binding: 66,0,0/0:1734565878/1734565879 [ 1064.979669][T20622] tipc: Failed to remove unknown binding: 66,0,0/0:1734565878/1734565880 [ 1064.979707][T20622] tipc: Failed to remove unknown binding: 66,0,0/0:1734565878/1734565879 [ 1065.027961][ T5975] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1065.168009][T15213] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1065.189645][ T5975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.189674][ T5975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.189722][ T5975] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1065.193064][ T5975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.193092][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.193114][ T5975] usb 5-1: Product: syz [ 1065.193128][ T5975] usb 5-1: Manufacturer: syz [ 1065.193143][ T5975] usb 5-1: SerialNumber: syz [ 1065.277688][ T5975] cdc_ncm 5-1:1.0: skipping garbage [ 1065.277712][ T5975] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1065.277758][ T5975] cdc_ncm 5-1:1.0: bind() failure [ 1065.338657][T15213] usb 2-1: Using ep0 maxpacket: 32 [ 1065.344172][T15213] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1065.344196][T15213] usb 2-1: config 0 has no interface number 0 [ 1065.344239][T15213] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1065.344266][T15213] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1065.346919][T15213] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1065.346948][T15213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.346969][T15213] usb 2-1: Product: syz [ 1065.346984][T15213] usb 2-1: Manufacturer: syz [ 1065.346999][T15213] usb 2-1: SerialNumber: syz [ 1065.393260][T15213] usb 2-1: config 0 descriptor?? [ 1065.549404][ T809] usb 5-1: USB disconnect, device number 59 [ 1065.626349][T15213] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1065.650648][T15213] cx231xx 2-1:0.1: Failed to read PCB config [ 1065.650710][T15213] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1065.653355][T15213] usb 2-1: USB disconnect, device number 54 [ 1066.105097][T20656] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1066.330375][T20667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1066.471423][T20673] tipc: Failed to remove unknown binding: 66,0,0/0:4236920244/4236920246 [ 1066.471463][T20673] tipc: Failed to remove unknown binding: 66,0,0/0:4236920244/4236920245 [ 1066.524210][T20674] tipc: Failed to remove unknown binding: 66,0,0/0:4236920244/4236920246 [ 1066.524239][T20674] tipc: Failed to remove unknown binding: 66,0,0/0:4236920244/4236920245 [ 1068.555244][T20730] tipc: Failed to remove unknown binding: 66,0,0/0:204282043/204282045 [ 1068.555284][T20730] tipc: Failed to remove unknown binding: 66,0,0/0:204282043/204282044 [ 1068.609725][T20733] tipc: Failed to remove unknown binding: 66,0,0/0:204282043/204282045 [ 1068.609765][T20733] tipc: Failed to remove unknown binding: 66,0,0/0:204282043/204282044 [ 1069.827975][T15213] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1069.828190][T13276] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1069.978053][T15213] usb 2-1: Using ep0 maxpacket: 32 [ 1069.980400][T13276] usb 3-1: Using ep0 maxpacket: 8 [ 1069.985804][T15213] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1069.985830][T15213] usb 2-1: config 0 has no interface number 0 [ 1069.986097][T15213] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1069.986120][T15213] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1069.995771][T13276] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1069.995988][T13276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.996208][T13276] usb 3-1: Product: syz [ 1069.996254][T13276] usb 3-1: Manufacturer: syz [ 1069.996405][T13276] usb 3-1: SerialNumber: syz [ 1070.018186][ T5884] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1070.037394][T15213] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1070.037472][T15213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.037523][T15213] usb 2-1: Product: syz [ 1070.037556][T15213] usb 2-1: Manufacturer: syz [ 1070.037595][T15213] usb 2-1: SerialNumber: syz [ 1070.120229][T13276] usb 3-1: config 0 descriptor?? [ 1070.130736][T15213] usb 2-1: config 0 descriptor?? [ 1070.158013][ T5884] usb 5-1: device descriptor read/64, error -71 [ 1070.375586][T15213] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1070.388980][T15213] cx231xx 2-1:0.1: Failed to read PCB config [ 1070.389059][T15213] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1070.402157][ T5884] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1070.428091][T15213] usb 2-1: USB disconnect, device number 55 [ 1070.558006][ T5884] usb 5-1: device descriptor read/64, error -71 [ 1070.668593][ T5884] usb usb5-port1: attempt power cycle [ 1070.888012][T15213] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1071.008103][ T5884] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1071.028831][ T5884] usb 5-1: device descriptor read/8, error -71 [ 1071.047929][T15213] usb 2-1: Using ep0 maxpacket: 32 [ 1071.050354][T15213] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1071.050379][T15213] usb 2-1: config 0 has no interface number 0 [ 1071.050423][T15213] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1071.050445][T15213] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1071.053415][T15213] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1071.053444][T15213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.053465][T15213] usb 2-1: Product: syz [ 1071.053480][T15213] usb 2-1: Manufacturer: syz [ 1071.053494][T15213] usb 2-1: SerialNumber: syz [ 1071.069245][T15213] usb 2-1: config 0 descriptor?? [ 1071.269532][ T5884] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1071.288791][ T5884] usb 5-1: device descriptor read/8, error -71 [ 1071.294734][T15213] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1071.322221][T15213] cx231xx 2-1:0.1: Failed to read PCB config [ 1071.322301][T15213] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1071.398881][ T5884] usb usb5-port1: unable to enumerate USB device [ 1071.399595][T15213] usb 2-1: USB disconnect, device number 56 [ 1071.604704][T14629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1071.616498][T14629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1071.620781][T14629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1071.643267][T14629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1071.655108][T14629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.947964][T14629] Bluetooth: hci0: command 0x0406 tx timeout [ 1072.022745][T20845] tipc: Enabled bearer , priority 0 [ 1072.270264][T20849] syzkaller0: entered promiscuous mode [ 1072.270293][T20849] syzkaller0: entered allmulticast mode [ 1072.608533][ T5975] usb 3-1: USB disconnect, device number 44 [ 1072.780250][T20845] tipc: Resetting bearer [ 1072.984463][T20845] tipc: Disabling bearer [ 1073.568489][T15213] tipc: Node number set to 1655193750 [ 1073.711216][ T5811] Bluetooth: hci2: command tx timeout [ 1074.030282][ T138] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.194495][T20835] chnl_net:caif_netlink_parms(): no params data found [ 1074.558107][ T5975] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1074.603509][ T138] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.707915][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 1074.713005][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.713024][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.752424][ T5975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1074.752455][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.752476][ T5975] usb 2-1: Product: syz [ 1074.752490][ T5975] usb 2-1: Manufacturer: syz [ 1074.752506][ T5975] usb 2-1: SerialNumber: syz [ 1075.019798][ T5975] usb 2-1: 0:2 : does not exist [ 1075.054624][ T5975] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1075.162226][ T138] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.258667][ T5975] usb 2-1: USB disconnect, device number 57 [ 1075.399123][T20763] udevd[20763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.621016][ T138] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.788058][ T5811] Bluetooth: hci2: command tx timeout [ 1075.807935][T13276] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1075.844661][T20835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.844860][T20835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.845407][T20835] bridge_slave_0: entered allmulticast mode [ 1075.857066][T20835] bridge_slave_0: entered promiscuous mode [ 1075.989278][T20835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.989402][T20835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.989680][T20835] bridge_slave_1: entered allmulticast mode [ 1075.992356][T20835] bridge_slave_1: entered promiscuous mode [ 1076.028273][T13276] usb 5-1: device descriptor read/64, error -71 [ 1076.057954][T15220] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1076.227992][T15220] usb 3-1: Using ep0 maxpacket: 32 [ 1076.230990][T15220] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1076.231017][T15220] usb 3-1: config 0 has no interface number 0 [ 1076.231062][T15220] usb 3-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1076.232005][T20835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.236344][T15220] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1076.236372][T15220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.236392][T15220] usb 3-1: Product: syz [ 1076.236414][T15220] usb 3-1: Manufacturer: syz [ 1076.236429][T15220] usb 3-1: SerialNumber: syz [ 1076.275813][T20835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.278531][T13276] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1076.400483][T15220] usb 3-1: config 0 descriptor?? [ 1076.417924][T13276] usb 5-1: device descriptor read/64, error -71 [ 1076.422628][T15220] asix 3-1:0.188: probe with driver asix failed with error -22 [ 1076.534706][T13276] usb usb5-port1: attempt power cycle [ 1076.565155][T20835] team0: Port device team_slave_0 added [ 1076.581593][T20835] team0: Port device team_slave_1 added [ 1076.706037][T20835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.706051][T20835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.706072][T20835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.771353][T20835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.771369][T20835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.771392][T20835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.889304][T13276] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1076.913434][T13276] usb 5-1: device descriptor read/8, error -71 [ 1076.950528][ T138] bridge_slave_1: left allmulticast mode [ 1076.950558][ T138] bridge_slave_1: left promiscuous mode [ 1076.950816][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.039510][ T138] bridge_slave_0: left allmulticast mode [ 1077.039542][ T138] bridge_slave_0: left promiscuous mode [ 1077.039830][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.148087][T13276] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1077.168657][T13276] usb 5-1: device descriptor read/8, error -71 [ 1077.278345][T13276] usb usb5-port1: unable to enumerate USB device [ 1077.877846][ T5811] Bluetooth: hci2: command tx timeout [ 1078.088765][ T138] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1078.174901][ T138] dvmrp0 (unregistering): left allmulticast mode [ 1078.937552][ T5975] usb 3-1: USB disconnect, device number 45 [ 1079.188240][T21026] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1079.400943][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.609993][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.757691][ T138] bond0 (unregistering): (slave team0): Releasing backup interface [ 1079.839887][ T138] bond0 (unregistering): (slave bond3): Releasing backup interface [ 1079.917196][ T138] bond0 (unregistering): Released all slaves [ 1079.938602][ T138] bond1 (unregistering): Released all slaves [ 1079.947969][ T5811] Bluetooth: hci2: command tx timeout [ 1079.976710][ T138] bond2 (unregistering): Released all slaves [ 1080.064172][ T138] bond3 (unregistering): Released all slaves [ 1080.610990][T20835] hsr_slave_0: entered promiscuous mode [ 1080.624813][T20835] hsr_slave_1: entered promiscuous mode [ 1080.626263][T20835] debugfs: 'hsr0' already exists in 'hsr' [ 1080.626281][T20835] Cannot create hsr debugfs directory [ 1081.270654][ T37] audit: type=1800 audit(1772960309.912:172): pid=21068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.5330" name="bus" dev="ramfs" ino=88760 res=0 errno=0 [ 1082.247915][T13885] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1082.407978][T13885] usb 3-1: Using ep0 maxpacket: 32 [ 1082.417100][T13885] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1082.417131][T13885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.417151][T13885] usb 3-1: Product: syz [ 1082.417174][T13885] usb 3-1: Manufacturer: syz [ 1082.417190][T13885] usb 3-1: SerialNumber: syz [ 1082.464705][T13885] usb 3-1: config 0 descriptor?? [ 1082.479032][T13885] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1082.518497][T15220] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1082.677947][T15220] usb 2-1: Using ep0 maxpacket: 32 [ 1082.679972][T15220] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1082.679998][T15220] usb 2-1: config 0 has no interface number 0 [ 1082.680094][T15220] usb 2-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1082.680111][T15220] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1082.682824][T15220] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1082.682857][T15220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.682914][T15220] usb 2-1: Product: syz [ 1082.683703][T15220] usb 2-1: Manufacturer: syz [ 1082.683715][T15220] usb 2-1: SerialNumber: syz [ 1082.785364][T15220] usb 2-1: config 0 descriptor?? [ 1082.801284][T15220] asix 2-1:0.188: probe with driver asix failed with error -22 [ 1082.898030][ T138] hsr_slave_0: left promiscuous mode [ 1082.948857][ T138] hsr_slave_1: left promiscuous mode [ 1082.949968][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.949996][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.002566][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.002592][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.145313][ T138] veth1_macvtap: left promiscuous mode [ 1083.145410][ T138] veth0_macvtap: left promiscuous mode [ 1083.159306][ T138] veth1_vlan: left promiscuous mode [ 1083.159648][ T138] veth0_vlan: left promiscuous mode [ 1083.192847][T21107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.229578][T21089] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1083.488253][T13885] gspca_ov534_9: reg_w failed -110 [ 1083.758720][ T5878] usb 2-1: USB disconnect, device number 58 [ 1083.775490][ T138] pim6reg (unregistering): left allmulticast mode [ 1083.799970][T13885] gspca_ov534_9: Unknown sensor 0000 [ 1083.800066][T13885] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1084.603085][ T138] team0 (unregistering): Port device team_slave_1 removed [ 1084.691179][ T138] team0 (unregistering): Port device team_slave_0 removed [ 1085.288940][T21107] syz_tun: entered allmulticast mode [ 1085.695048][T21107] syz_tun: left allmulticast mode [ 1085.796941][T13885] usb 3-1: USB disconnect, device number 46 [ 1087.517159][ T138] IPVS: stop unused estimator thread 0... [ 1088.050233][ T5975] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1088.210127][ T5975] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1088.210173][ T5975] usb 3-1: config 0 has no interface number 0 [ 1088.210230][ T5975] usb 3-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.215983][ T5975] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1088.216014][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1088.216035][ T5975] usb 3-1: Manufacturer: syz [ 1088.216051][ T5975] usb 3-1: SerialNumber: syz [ 1088.248287][T20835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1088.297338][ T5975] usb 3-1: config 0 descriptor?? [ 1088.407667][T20835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1088.463208][T20835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1088.504698][T20835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1089.190444][T20835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.210267][T20835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.251516][T17045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.253611][T17045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.281176][T17045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.287477][T17045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.256525][T20835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.814867][T15220] usb 3-1: USB disconnect, device number 47 [ 1091.698112][T20835] veth0_vlan: entered promiscuous mode [ 1091.775119][T20835] veth1_vlan: entered promiscuous mode [ 1091.868653][T21323] fuse: Unknown parameter 'appraise_type' [ 1091.928150][T20835] veth0_macvtap: entered promiscuous mode [ 1091.951459][T20835] veth1_macvtap: entered promiscuous mode [ 1092.084019][T20835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.158459][T20835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.221205][ T1295] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.221789][ T1295] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.222023][ T1295] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.222250][ T1295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.687703][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.687727][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.823420][T17045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.823443][T17045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.054065][T21347] loop5: detected capacity change from 0 to 7 [ 1093.068285][T21347] Dev loop5: unable to read RDB block 7 [ 1093.068344][T21347] loop5: unable to read partition table [ 1093.068572][T21347] loop5: partition table beyond EOD, truncated [ 1093.074264][T21347] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1095.328308][T21395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5427'. [ 1095.389031][T13885] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1095.557997][T13885] usb 3-1: Using ep0 maxpacket: 8 [ 1095.565878][T13885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.565900][T13885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1095.565918][T13885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1095.565934][T13885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.565965][T13885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1095.565981][T13885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.159018][T13885] usb 3-1: GET_CAPABILITIES returned 0 [ 1096.159056][T13885] usbtmc 3-1:16.0: can't read capabilities [ 1096.350274][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1098.367967][T13885] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1098.517904][T13885] usb 2-1: Using ep0 maxpacket: 8 [ 1098.523467][T13885] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1098.523494][T13885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.523514][T13885] usb 2-1: Product: syz [ 1098.523528][T13885] usb 2-1: Manufacturer: syz [ 1098.523541][T13885] usb 2-1: SerialNumber: syz [ 1098.565502][T13885] usb 2-1: config 0 descriptor?? [ 1098.798676][T13885] usb 3-1: USB disconnect, device number 48 [ 1099.567524][T13276] usb 2-1: USB disconnect, device number 59 [ 1100.626109][T21494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1101.308117][T13885] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1101.388449][ T5975] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1101.458485][T13885] usb 5-1: Using ep0 maxpacket: 32 [ 1101.461074][T13885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.461104][T13885] usb 5-1: config 0 has no interfaces? [ 1101.464179][T13885] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1101.464210][T13885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.464232][T13885] usb 5-1: Product: syz [ 1101.464247][T13885] usb 5-1: Manufacturer: syz [ 1101.464262][T13885] usb 5-1: SerialNumber: syz [ 1101.529746][T13885] usb 5-1: config 0 descriptor?? [ 1101.554521][ T5975] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1101.554551][ T5975] usb 3-1: config 0 has no interface number 0 [ 1101.572221][ T5975] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1101.572254][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.572277][ T5975] usb 3-1: Product: syz [ 1101.572292][ T5975] usb 3-1: Manufacturer: syz [ 1101.572307][ T5975] usb 3-1: SerialNumber: syz [ 1101.619538][ T5975] usb 3-1: config 0 descriptor?? [ 1101.649451][T13276] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1101.797942][T13276] usb 6-1: Using ep0 maxpacket: 8 [ 1101.804333][T13276] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1101.804363][T13276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.804386][T13276] usb 6-1: Product: syz [ 1101.804401][T13276] usb 6-1: Manufacturer: syz [ 1101.804416][T13276] usb 6-1: SerialNumber: syz [ 1101.844406][T13276] usb 6-1: config 0 descriptor?? [ 1101.900957][T13276] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1102.025969][ T5975] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 1102.025999][ T5975] usb 3-1: Firmware version (0.0) predates our first public release. [ 1102.026016][ T5975] usb 3-1: Please update to version 0.2 or newer [ 1102.290331][T13276] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1102.290874][T13276] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1102.340362][ T5975] usb 3-1: USB disconnect, device number 49 [ 1102.358072][T13276] usb 6-1: USB disconnect, device number 60 [ 1102.498214][T21535] netlink: 'syz.4.5471': attribute type 3 has an invalid length. [ 1104.027263][T13885] usb 5-1: USB disconnect, device number 68 [ 1104.371830][T21568] netlink: 'syz.4.5495': attribute type 2 has an invalid length. [ 1106.808445][T15220] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1107.017935][T15220] usb 5-1: Using ep0 maxpacket: 32 [ 1107.030106][T15220] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1107.030132][T15220] usb 5-1: config 0 has no interface number 0 [ 1107.030178][T15220] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1107.030207][T15220] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1107.131656][T15220] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1107.131687][T15220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.131707][T15220] usb 5-1: Product: syz [ 1107.131721][T15220] usb 5-1: Manufacturer: syz [ 1107.131735][T15220] usb 5-1: SerialNumber: syz [ 1107.157910][T13885] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1107.203918][T15220] usb 5-1: config 0 descriptor?? [ 1107.357944][T13885] usb 6-1: Using ep0 maxpacket: 16 [ 1107.362265][T13885] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.362313][T13885] usb 6-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1107.362384][T13885] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1107.362401][T13885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.427000][T13885] usbhid 6-1:128.0: couldn't find an input interrupt endpoint [ 1107.427931][ T5878] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1107.459762][T15220] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1107.460282][T15220] cx231xx 5-1:0.1: Failed to read PCB config [ 1107.460364][T15220] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 1107.463517][T15220] usb 5-1: USB disconnect, device number 69 [ 1107.588160][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 1107.592273][ T5878] usb 3-1: config 0 has no interfaces? [ 1107.594909][ T5878] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1107.594974][ T5878] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1107.595078][ T5878] usb 3-1: Manufacturer: syz [ 1107.641463][ T5878] usb 3-1: config 0 descriptor?? [ 1108.068058][T15220] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1108.217930][T15220] usb 5-1: Using ep0 maxpacket: 32 [ 1108.220332][T15220] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1108.220357][T15220] usb 5-1: config 0 has no interface number 0 [ 1108.220403][T15220] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1108.220425][T15220] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1108.225418][T15220] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1108.225448][T15220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.225469][T15220] usb 5-1: Product: syz [ 1108.225484][T15220] usb 5-1: Manufacturer: syz [ 1108.225499][T15220] usb 5-1: SerialNumber: syz [ 1108.312511][T15220] usb 5-1: config 0 descriptor?? [ 1108.516462][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1108.530128][T15220] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1108.535889][T15220] cx231xx 5-1:0.1: Failed to read PCB config [ 1108.535970][T15220] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 1108.567622][T15220] usb 5-1: USB disconnect, device number 70 [ 1110.074944][ T5975] usb 6-1: USB disconnect, device number 61 [ 1111.354925][T13276] usb 3-1: USB disconnect, device number 50 [ 1112.283214][T21707] syzkaller0: entered promiscuous mode [ 1112.283242][T21707] syzkaller0: entered allmulticast mode [ 1112.467632][T21711] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1114.707993][T15220] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1114.881415][T15220] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.881474][T15220] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1114.881499][T15220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.886909][T15220] usb 5-1: config 0 descriptor?? [ 1114.956757][T15220] pwc: Askey VC010 type 2 USB webcam detected. [ 1115.018179][ T5979] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1115.203472][ T5979] usb 6-1: Using ep0 maxpacket: 8 [ 1115.223606][ T5979] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1115.223645][ T5979] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1115.223672][ T5979] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1115.223696][ T5979] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.223819][ T5979] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1115.223844][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.578704][ T5979] usb 6-1: GET_CAPABILITIES returned 0 [ 1115.578815][ T5979] usbtmc 6-1:16.0: can't read capabilities [ 1115.603086][T15220] pwc: recv_control_msg error -32 req 02 val 2700 [ 1115.603587][T15220] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1115.604079][T15220] pwc: recv_control_msg error -71 req 04 val 1000 [ 1115.604626][T15220] pwc: recv_control_msg error -71 req 04 val 1300 [ 1115.606160][T15220] pwc: recv_control_msg error -71 req 04 val 1400 [ 1115.649962][T15220] pwc: recv_control_msg error -71 req 02 val 2000 [ 1115.650533][T15220] pwc: recv_control_msg error -71 req 02 val 2100 [ 1115.651013][T15220] pwc: recv_control_msg error -71 req 04 val 1500 [ 1115.651593][T15220] pwc: recv_control_msg error -71 req 02 val 2500 [ 1115.652066][T15220] pwc: recv_control_msg error -71 req 02 val 2400 [ 1115.652535][T15220] pwc: recv_control_msg error -71 req 02 val 2600 [ 1115.653133][T15220] pwc: recv_control_msg error -71 req 02 val 2900 [ 1115.653610][T15220] pwc: recv_control_msg error -71 req 02 val 2800 [ 1115.737961][T15220] pwc: recv_control_msg error -71 req 04 val 1100 [ 1115.738604][T15220] pwc: recv_control_msg error -71 req 04 val 1200 [ 1115.898232][T15220] pwc: Registered as video103. [ 1115.905909][T15220] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 1115.955598][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.955651][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.976499][T15220] usb 5-1: USB disconnect, device number 71 [ 1116.360718][T21780] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1117.945018][ T5979] usb 6-1: USB disconnect, device number 62 [ 1118.365679][T21824] syzkaller0: entered promiscuous mode [ 1118.365705][T21824] syzkaller0: entered allmulticast mode [ 1118.379514][T21824] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1118.757930][T15220] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1118.937921][T15220] usb 3-1: Using ep0 maxpacket: 32 [ 1118.941733][T15220] usb 3-1: config 0 has no interfaces? [ 1118.941841][T15220] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1118.941860][T15220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.945790][T15220] usb 3-1: config 0 descriptor?? [ 1119.162480][T21832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.163255][T21832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.169773][T13276] usb 3-1: USB disconnect, device number 51 [ 1119.667969][T13276] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1119.817972][T13276] usb 3-1: Using ep0 maxpacket: 16 [ 1119.822925][T13276] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1119.822950][T13276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1119.857968][T13885] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1119.859211][T13276] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1119.859240][T13276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.859261][T13276] usb 3-1: SerialNumber: syz [ 1119.863554][T13276] usb 3-1: config 0 descriptor?? [ 1119.925519][T13276] em28xx 3-1:0.0: New device @ 480 Mbps (2040:0264, interface 0, class 0) [ 1119.925548][T13276] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1120.017914][T13885] usb 5-1: Using ep0 maxpacket: 16 [ 1120.020699][T13885] usb 5-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.020749][T13885] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1120.020774][T13885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.075686][T13885] usbhid 5-1:128.0: couldn't find an input interrupt endpoint [ 1120.102355][T21832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.201554][T13276] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1120.201911][T13276] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1120.202271][T13276] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1120.202284][T13276] em28xx 3-1:0.0: No AC97 audio processor [ 1120.236529][T13276] usb 3-1: USB disconnect, device number 52 [ 1120.251326][T13276] em28xx 3-1:0.0: Disconnecting em28xx [ 1120.327648][T13276] em28xx 3-1:0.0: Freeing device [ 1120.728908][T21865] syzkaller0: entered promiscuous mode [ 1120.728935][T21865] syzkaller0: entered allmulticast mode [ 1120.734012][T21865] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1123.013566][T15220] usb 5-1: USB disconnect, device number 72 [ 1124.607922][ T5878] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1124.759699][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.759738][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1124.759755][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.813634][ T5878] usb 5-1: config 0 descriptor?? [ 1124.833852][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 1125.078934][ T5878] pwc: send_video_command error -71 [ 1125.078953][ T5878] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1125.079070][ T5878] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1125.140031][ T5878] usb 5-1: USB disconnect, device number 73 [ 1125.581234][ T5878] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1125.834439][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.834500][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1125.834527][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.843694][ T5878] usb 5-1: config 0 descriptor?? [ 1125.870258][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 1125.886993][T13276] IPVS: starting estimator thread 0... [ 1125.987959][T21976] IPVS: using max 8 ests per chain, 19200 per kthread [ 1126.267546][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1126.273076][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 1126.496441][ T5878] pwc: recv_control_msg error -71 req 04 val 1000 [ 1126.496910][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 1126.517926][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 1126.518972][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 1126.519444][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 1126.524736][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 1126.525249][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 1126.529969][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 1126.547797][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 1126.548277][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 1126.549130][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 1126.558091][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 1126.560516][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 1126.677999][ T5878] pwc: Registered as video103. [ 1126.681034][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 1126.710923][ T5878] usb 5-1: USB disconnect, device number 74 [ 1128.677967][T15220] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1128.860084][T15220] usb 5-1: Using ep0 maxpacket: 32 [ 1128.863338][T15220] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1128.863366][T15220] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.863385][T15220] usb 5-1: config 0 has no interface number 0 [ 1128.863429][T15220] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1128.863458][T15220] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1128.866415][T15220] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1128.866443][T15220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.866465][T15220] usb 5-1: Product: syz [ 1128.866480][T15220] usb 5-1: Manufacturer: syz [ 1128.866495][T15220] usb 5-1: SerialNumber: syz [ 1128.893400][T15220] usb 5-1: config 0 descriptor?? [ 1129.101138][T14629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1129.105141][T14629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1129.106607][T14629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1129.107664][T14629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1129.119839][T14629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1129.798535][T15220] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1129.980395][T15220] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.980424][T15220] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1129.988788][T15220] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1129.988879][T15220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.988933][T15220] usb 3-1: Product: syz [ 1129.988974][T15220] usb 3-1: Manufacturer: syz [ 1129.989015][T15220] usb 3-1: SerialNumber: syz [ 1130.039130][T15220] usb 3-1: config 0 descriptor?? [ 1130.466896][T15220] usb 3-1: USB disconnect, device number 53 [ 1130.697411][ T38] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.985711][ T38] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.060569][T22026] chnl_net:caif_netlink_parms(): no params data found [ 1131.148482][ T5811] Bluetooth: hci1: command tx timeout [ 1131.281083][ T38] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.573749][T13885] usb 5-1: USB disconnect, device number 75 [ 1131.853062][ T38] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.085492][T22026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.085776][T22026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.085968][T22026] bridge_slave_0: entered allmulticast mode [ 1132.111013][T22026] bridge_slave_0: entered promiscuous mode [ 1132.117569][T22026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.135584][T22026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.135805][T22026] bridge_slave_1: entered allmulticast mode [ 1132.153474][T22026] bridge_slave_1: entered promiscuous mode [ 1132.270457][T22026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.300689][T22026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.374523][T22026] team0: Port device team_slave_0 added [ 1132.377527][T22026] team0: Port device team_slave_1 added [ 1132.728930][T22071] Invalid argument reading file caps for ./file0 [ 1133.057923][ T5979] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1133.092593][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f66c000: rx timeout, send abort [ 1133.123743][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5697'. [ 1133.163307][T22026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.163325][T22026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.163356][T22026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.251745][ T5979] usb 5-1: device descriptor read/64, error -71 [ 1133.255178][ T5811] Bluetooth: hci1: command tx timeout [ 1133.356604][T22026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.356619][T22026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.356640][T22026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.488000][ T5979] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1133.592691][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f66c000: abort rx timeout. Force session deactivation [ 1133.618024][ T5979] usb 5-1: device descriptor read/64, error -71 [ 1133.680267][ T38] bridge_slave_1: left allmulticast mode [ 1133.680292][ T38] bridge_slave_1: left promiscuous mode [ 1133.680520][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.732895][ T5979] usb usb5-port1: attempt power cycle [ 1133.829483][ T38] bridge_slave_0: left allmulticast mode [ 1133.829516][ T38] bridge_slave_0: left promiscuous mode [ 1133.829764][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.129952][ T5979] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1134.148779][ T5979] usb 5-1: device descriptor read/8, error -71 [ 1134.328010][T15213] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1134.405038][ T5979] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1134.418749][ T5979] usb 5-1: device descriptor read/8, error -71 [ 1134.489834][T15213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.489855][T15213] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1134.492108][T15213] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1134.492129][T15213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.492143][T15213] usb 3-1: Product: syz [ 1134.492155][T15213] usb 3-1: Manufacturer: syz [ 1134.492165][T15213] usb 3-1: SerialNumber: syz [ 1134.528971][ T5979] usb usb5-port1: unable to enumerate USB device [ 1134.557741][T15213] usb 3-1: config 0 descriptor?? [ 1134.928805][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.009440][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.030328][ T38] bond0 (unregistering): Released all slaves [ 1135.082964][T22026] hsr_slave_0: entered promiscuous mode [ 1135.084336][T22026] hsr_slave_1: entered promiscuous mode [ 1135.085357][T22026] debugfs: 'hsr0' already exists in 'hsr' [ 1135.085381][T22026] Cannot create hsr debugfs directory [ 1135.111480][T15213] usb 3-1: USB disconnect, device number 54 [ 1135.317361][ T5811] Bluetooth: hci1: command tx timeout [ 1136.260121][T13885] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1136.409991][T13885] usb 3-1: Using ep0 maxpacket: 32 [ 1136.415618][T13885] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1136.415649][T13885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.415671][T13885] usb 3-1: Product: syz [ 1136.415697][T13885] usb 3-1: Manufacturer: syz [ 1136.415712][T13885] usb 3-1: SerialNumber: syz [ 1136.485283][T13885] usb 3-1: config 0 descriptor?? [ 1136.528105][T13885] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1137.329685][T22128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.388470][ T5811] Bluetooth: hci1: command tx timeout [ 1137.389387][T22129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.505075][T22128] syz_tun: entered allmulticast mode [ 1137.552863][T13885] gspca_ov534_9: reg_w failed -110 [ 1137.698062][ T38] hsr_slave_0: left promiscuous mode [ 1137.724202][ T38] hsr_slave_1: left promiscuous mode [ 1137.749130][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.749153][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.808973][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.809008][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.838323][T13885] gspca_ov534_9: Unknown sensor 0000 [ 1137.838586][T13885] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1137.936779][ T38] veth1_macvtap: left promiscuous mode [ 1137.936859][ T38] veth0_macvtap: left promiscuous mode [ 1137.937027][ T38] veth1_vlan: left promiscuous mode [ 1137.937141][ T38] veth0_vlan: left promiscuous mode [ 1138.377976][T13276] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1138.434751][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805f356800: rx timeout, send abort [ 1138.508693][T13276] usb 2-1: device descriptor read/64, error -71 [ 1138.758600][T13276] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1138.887926][T13276] usb 2-1: device descriptor read/64, error -71 [ 1138.921472][T13885] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1138.934848][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805f356800: abort rx timeout. Force session deactivation [ 1138.998225][T13276] usb usb2-port1: attempt power cycle [ 1139.017882][ T5979] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1139.031267][ T38] team0 (unregistering): Port device team_slave_1 removed [ 1139.071023][T13885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.071050][T13885] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1139.073479][T13885] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1139.073505][T13885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.073525][T13885] usb 6-1: Product: syz [ 1139.073538][T13885] usb 6-1: Manufacturer: syz [ 1139.073553][T13885] usb 6-1: SerialNumber: syz [ 1139.098268][T13885] usb 6-1: config 0 descriptor?? [ 1139.139856][ T38] team0 (unregistering): Port device team_slave_0 removed [ 1139.157921][ T5979] usb 5-1: device descriptor read/64, error -71 [ 1139.348014][T13276] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1139.378901][T13276] usb 2-1: device descriptor read/8, error -71 [ 1139.379506][T22113] syz_tun: left allmulticast mode [ 1139.382493][ T5878] usb 3-1: USB disconnect, device number 55 [ 1139.401677][ T5979] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1139.532980][T15220] ================================================================== [ 1139.533064][T15220] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.533220][T15220] Read of size 8 at addr ffffc90012ff2008 by task kworker/0:1/15220 [ 1139.533251][T15220] [ 1139.533284][T15220] CPU: 0 UID: 0 PID: 15220 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1139.533315][T15220] Tainted: [L]=SOFTLOCKUP [ 1139.533323][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.533338][T15220] Workqueue: usb_hub_wq hub_event [ 1139.533438][T15220] Call Trace: [ 1139.533451][T15220] [ 1139.533461][T15220] dump_stack_lvl+0xe8/0x150 [ 1139.533557][T15220] print_report+0xba/0x230 [ 1139.533591][T15220] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.533656][T15220] kasan_report+0x117/0x150 [ 1139.533736][T15220] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.533759][T15220] __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.533781][T15220] kcov_remote_start+0x2af/0x710 [ 1139.533832][T15220] hub_event+0x150/0x4f60 [ 1139.533867][T15220] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.533903][T15220] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.533926][T15220] ? look_up_lock_class+0x57/0x110 [ 1139.534044][T15220] ? register_lock_class+0x31/0x2e0 [ 1139.534080][T15220] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.534108][T15220] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1139.534140][T15220] ? __pfx_hub_event+0x10/0x10 [ 1139.534175][T15220] ? process_scheduled_works+0xa25/0x1830 [ 1139.534211][T15220] ? process_scheduled_works+0xa25/0x1830 [ 1139.534249][T15220] process_scheduled_works+0xb02/0x1830 [ 1139.534295][T15220] ? __pfx_process_scheduled_works+0x10/0x10 [ 1139.534328][T15220] ? assign_work+0x3d5/0x5e0 [ 1139.534358][T15220] worker_thread+0xa50/0xfc0 [ 1139.534404][T15220] kthread+0x388/0x470 [ 1139.534426][T15220] ? __pfx_worker_thread+0x10/0x10 [ 1139.534455][T15220] ? __pfx_kthread+0x10/0x10 [ 1139.534478][T15220] ret_from_fork+0x51e/0xb90 [ 1139.534527][T15220] ? __pfx_ret_from_fork+0x10/0x10 [ 1139.534557][T15220] ? __switch_to+0xc7d/0x1450 [ 1139.534596][T15220] ? __pfx_kthread+0x10/0x10 [ 1139.534618][T15220] ret_from_fork_asm+0x1a/0x30 [ 1139.534647][T15220] [ 1139.534685][T15220] [ 1139.534690][T15220] The buggy address belongs to a vmalloc virtual mapping [ 1139.534733][T15220] Memory state around the buggy address: [ 1139.534746][T15220] ffffc90012ff1f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1139.534761][T15220] ffffc90012ff1f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1139.534775][T15220] >ffffc90012ff2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1139.534787][T15220] ^ [ 1139.534798][T15220] ffffc90012ff2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1139.534812][T15220] ffffc90012ff2100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1139.534823][T15220] ================================================================== [ 1139.534847][T15220] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1139.534866][T15220] CPU: 0 UID: 0 PID: 15220 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1139.534896][T15220] Tainted: [L]=SOFTLOCKUP [ 1139.534904][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.534919][T15220] Workqueue: usb_hub_wq hub_event [ 1139.534949][T15220] Call Trace: [ 1139.534956][T15220] [ 1139.534963][T15220] vpanic+0x56c/0xa60 [ 1139.534994][T15220] ? __pfx_vpanic+0x10/0x10 [ 1139.535047][T15220] panic+0xc5/0xd0 [ 1139.535078][T15220] ? __pfx_panic+0x10/0x10 [ 1139.535111][T15220] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.535133][T15220] ? rcu_is_watching+0x15/0xb0 [ 1139.535168][T15220] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.535190][T15220] check_panic_on_warn+0x89/0xb0 [ 1139.535230][T15220] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.535257][T15220] end_report+0x73/0x180 [ 1139.535288][T15220] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.535308][T15220] kasan_report+0x128/0x150 [ 1139.535341][T15220] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.535368][T15220] __list_del_entry_valid_or_report+0xb5/0x190 [ 1139.535392][T15220] kcov_remote_start+0x2af/0x710 [ 1139.535418][T15220] hub_event+0x150/0x4f60 [ 1139.535449][T15220] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.535470][T15220] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.535492][T15220] ? look_up_lock_class+0x57/0x110 [ 1139.535519][T15220] ? register_lock_class+0x31/0x2e0 [ 1139.535555][T15220] ? __lock_acquire+0x6b5/0x2cf0 [ 1139.535584][T15220] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1139.535615][T15220] ? __pfx_hub_event+0x10/0x10 [ 1139.535653][T15220] ? process_scheduled_works+0xa25/0x1830 [ 1139.535681][T15220] ? process_scheduled_works+0xa25/0x1830 [ 1139.535711][T15220] process_scheduled_works+0xb02/0x1830 [ 1139.535755][T15220] ? __pfx_process_scheduled_works+0x10/0x10 [ 1139.535789][T15220] ? assign_work+0x3d5/0x5e0 [ 1139.535821][T15220] worker_thread+0xa50/0xfc0 [ 1139.535865][T15220] kthread+0x388/0x470 [ 1139.535887][T15220] ? __pfx_worker_thread+0x10/0x10 [ 1139.535917][T15220] ? __pfx_kthread+0x10/0x10 [ 1139.535940][T15220] ret_from_fork+0x51e/0xb90 [ 1139.535971][T15220] ? __pfx_ret_from_fork+0x10/0x10 [ 1139.536001][T15220] ? __switch_to+0xc7d/0x1450 [ 1139.536028][T15220] ? __pfx_kthread+0x10/0x10 [ 1139.536050][T15220] ret_from_fork_asm+0x1a/0x30 [ 1139.536080][T15220] [ 1139.536686][T15220] Kernel Offset: disabled