last executing test programs: 16.128959667s ago: executing program 0 (id=1575): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x60240, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @default, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) bind$netrom(r6, 0x0, 0x0) 13.742488531s ago: executing program 0 (id=1584): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x133e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x81}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r4, &(0x7f0000004600)={0x2020}, 0x2020) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/99, 0x63}], 0x1, 0x80000000, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0x0, 0x9, 0xb, 0x3, 0x6, 0xb, 0x5, 0x2f, 0x3, 0xc0}, {0x8080000, 0xe000, 0xb, 0x2, 0x1, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x2000, 0x4, 0x4, 0x1, 0x6a, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0xff, 0x9, 0xe, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x30000, 0x30000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xf, 0x98, 0x3, 0xfc, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x25000, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x14, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xd, 0x4, 0xd7, 0x0, 0x9, 0x6, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x1, 0x0, 0x856c, 0x8002, 0xd4, 0x4, 0x9, 0x0, '\x00', 0xd, 0xffffffffffff8001}) 12.897190693s ago: executing program 1 (id=1587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8009, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="b8010000000f01d90f20e035000010000f22e06636f20f2b23c4e235a898320000008fe9089a2a15d36bc544c4e24d09b4cb64000000b87e017c720f23d00f21f835300000070f23f866b850008ec0c4c1fd72f0d6", 0x55}], 0x1, 0x4e, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000010005ea000000a167e7030000005c114fb19ff193e20aed05b4fafa4757280f4142b153806e390638edf0c134c9bf9fc181f9400000500f10f2c123a02849fe8a076dee658d2abf16a88878f5bab6bab5d60e9b8584b8c3d1ccdc03b08df034eb33dd1493cc9144a6adfe1fcafbc0992041c6c923"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ptrace(0x10, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x47a45d90d8f77123) userfaultfd(0x80001) 9.748025446s ago: executing program 1 (id=1596): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x2000000000000003}]}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 9.48456818s ago: executing program 2 (id=1598): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001, 0x4}, 0x20) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}, {0x36de, 0x5800, 0x0, 0x0}], 0x2}) 9.200458179s ago: executing program 3 (id=1600): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r2, 0xffffffffffffffff, &(0x7f0000000440)=""/207, 0xcf, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 7.716968126s ago: executing program 0 (id=1602): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7fffffff) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000180)=0x8, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r6 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.195207979s ago: executing program 1 (id=1603): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2009}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x8c0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000fc02000000000000", @ANYRES32=r1, @ANYRES8=r4, @ANYRES16=r4], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0xc004) creat(&(0x7f0000000040)='./file0\x00', 0x12c) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 6.136465912s ago: executing program 2 (id=1604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8009, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="b8010000000f01d90f20e035000010000f22e06636f20f2b23c4e235a898320000008fe9089a2a15d36bc544c4e24d09b4cb64000000b87e017c720f23d00f21f835300000070f23f866b850008ec0c4c1fd72f0d6", 0x55}], 0x1, 0x4e, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000010005ea000000a167e7030000005c114fb19ff193e20aed05b4fafa4757280f4142b153806e390638edf0c134c9bf9fc181f9400000500f10f2c123a02849fe8a076dee658d2abf16a88878f5bab6bab5d60e9b8584b8c3d1ccdc03b08df034eb33dd1493cc9144a6adfe1fcafbc0992041c6c923"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ptrace(0x10, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x47a45d90d8f77123) userfaultfd(0x80001) 5.911783228s ago: executing program 2 (id=1605): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/94) 5.863703032s ago: executing program 3 (id=1606): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg(r1, 0x0, 0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = dup(r3) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 5.247977097s ago: executing program 4 (id=1607): sched_setscheduler(0x0, 0x2, 0x0) io_setup(0x4fe, &(0x7f0000000100)=0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000200)='8', 0x1, 0x80}]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000000000000000", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@multicast2, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) socket$inet6(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) 4.71116142s ago: executing program 4 (id=1608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)="3a74966c898cdc52852ffa9889efcf7a8e1444544a82e9673d69d231d0ed18285689cc9a1f37c73be7d6d58c6c80e343e1c3b394cf3338d92d82ba5889c8f3fa39c8", 0x42}], 0x1, 0x0, 0x0, 0x8004}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000280)=""/96, 0x60}], 0x2}, 0x500) 4.552248742s ago: executing program 1 (id=1609): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) 4.20071879s ago: executing program 4 (id=1610): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}], 0x1, 0x48081) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000040)) 4.178832361s ago: executing program 1 (id=1611): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00') syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8054}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.943269869s ago: executing program 0 (id=1612): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x5, 0x2800, 0x0, 0x0}], 0x1}) 3.860489062s ago: executing program 4 (id=1613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$evdev(0x0, 0x2, 0x963b01) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 3.747007076s ago: executing program 3 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018005000100d100"], 0xa4}}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.70044415s ago: executing program 2 (id=1615): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001, 0x4}, 0x20) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}, {0x36de, 0x5800, 0x0, 0x0}], 0x2}) 3.433293927s ago: executing program 3 (id=1616): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x0, [@nested={0x10, 0x159, 0x0, 0x1, [@typed={0x7, 0x30, 0x0, 0x0, @str='-$\x00'}, @nested={0x4, 0x43}]}]}]}, 0x24}], 0x1}, 0x4000800) r2 = fanotify_init(0x1a, 0x800) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000002c0)={0x9, 0x2, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) fanotify_mark(r2, 0x541, 0x40001019, r0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) creat(0x0, 0xecf86c37d53049cc) mount$fuse(0x0, 0x0, 0x0, 0xa24842, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x1, 0x0, 0xd}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r6, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) 2.717243791s ago: executing program 3 (id=1617): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200490c4}, 0x4800) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10022, 0x0) r1 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000340)=0x40) write$smackfs_ipv6host(r1, &(0x7f0000000140)=@l2={{0x4, 0x3a, 0x7, 0x3a, 0x8000000000000001, 0x3a, 0xfff00000000, 0x3a, 0x4, 0x3a, 0x0, 0x3a, 0x4, 0x3a, 0x6}, 0x2f, 0x6, 0x20, '*]'}, 0xb0) socket$inet6(0xa, 0x800, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.339152566s ago: executing program 4 (id=1618): sched_setscheduler(0x0, 0x2, 0x0) io_setup(0x4fe, &(0x7f0000000100)=0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000200)='8', 0x1, 0x80}]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000000000000000", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@multicast2, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x2}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) socket$inet6(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) 2.248934083s ago: executing program 0 (id=1619): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r0, 0xffffffffffffffff, &(0x7f0000000440)=""/207, 0xcf, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.016820253s ago: executing program 4 (id=1620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000540), 0x2, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$FITHAW(r6, 0xc0045878) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r7, 0x2000) 1.947144598s ago: executing program 0 (id=1621): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r7, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0x3, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"a2e3ad2119c70e0d8a267fd5d89dcd939b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62437264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d637545c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4953a9737d214060005ea6f1783e287b3bee96e3a726eafe2fd12a78d1f48c13b64df07847754b8010000009bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f577dcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2010891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57ccb938e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee11987f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b4907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d847dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e7832b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859add50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195301000000aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d0d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb4d600000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de4f8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3442bab515b0000348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de0000d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bdc8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62f46fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x1000}}, 0x1006) 953.67925ms ago: executing program 3 (id=1622): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8009, 0x0, 0x9, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="b8010000000f01d90f20e035000010000f22e06636f20f2b23c4e235a898320000008fe9089a2a15d36bc544c4e24d09b4cb64000000b87e017c720f23d00f21f835300000070f23f866b850008ec0c4c1fd72f0d6", 0x55}], 0x1, 0x4e, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000010005ea000000a167e7030000005c114fb19ff193e20aed05b4fafa4757280f4142b153806e390638edf0c134c9bf9fc181f9400000500f10f2c123a02849fe8a076dee658d2abf16a88878f5bab6bab5d60e9b8584b8c3d1ccdc03b08df034eb33dd1493cc9144a6adfe1fcafbc0992041c6c923"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ptrace(0x10, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x47a45d90d8f77123) userfaultfd(0x80001) 414.92151ms ago: executing program 2 (id=1623): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7fffffff) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000180)=0x8, 0x1) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r6 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 193.39487ms ago: executing program 2 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000070900010073797a31000000002400048020000180070001006374000014000280080001400000001008000240000000140900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x8, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x7}}}}}}, 0x0) 0s ago: executing program 1 (id=1625): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) read$smackfs_ptrace(0xffffffffffffffff, &(0x7f0000000180), 0x14) connect$netrom(r4, 0x0, 0x0) bind$netrom(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): etlink: 80 bytes leftover after parsing attributes in process `syz.4.284'. [ 203.683339][ T5801] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 203.836625][ T5801] usb 3-1: Using ep0 maxpacket: 8 [ 203.840022][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.840050][ T5801] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.840088][ T5801] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 203.840111][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.846985][ T5801] usb 3-1: config 0 descriptor?? [ 203.944977][ T6870] can0: slcan on pty20. [ 204.229842][ T5870] usb 3-1: USB disconnect, device number 5 [ 204.592599][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 204.632291][ T6880] ptrace attach of "./syz-executor exec"[5793] was attempted by "./syz-executor exec"[6880] [ 204.834157][ T6889] netlink: 'syz.4.294': attribute type 4 has an invalid length. [ 204.900273][ T6867] can0 (unregistered): slcan off pty20. [ 204.933979][ T5801] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.189455][ T5801] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.192554][ T5801] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.192600][ T5801] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.192630][ T5801] usb 4-1: config 1 interface 0 has no altsetting 1 [ 205.200956][ T5801] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 205.200987][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.201008][ T5801] usb 4-1: Product: syz [ 205.201021][ T5801] usb 4-1: Manufacturer: syz [ 205.201045][ T5801] usb 4-1: SerialNumber: syz [ 205.405362][ T5801] smsusb:smsusb_probe: board id=8, interface number 0 [ 205.677481][ T5801] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 205.677534][ T5801] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 205.743290][ T5801] usb 4-1: USB disconnect, device number 4 [ 208.373415][ T1803] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 208.530953][ T1803] usb 2-1: Using ep0 maxpacket: 16 [ 208.538383][ T1803] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 208.538412][ T1803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.538431][ T1803] usb 2-1: Product: syz [ 208.538443][ T1803] usb 2-1: Manufacturer: syz [ 208.538456][ T1803] usb 2-1: SerialNumber: syz [ 208.577830][ T1803] usb 2-1: config 0 descriptor?? [ 209.008778][ T1803] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 209.090209][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 209.148844][ T1803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.176867][ T1803] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 209.176964][ T1803] usb 2-1: media controller created [ 209.404911][ T1803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.691399][ T1803] zl10353_read_register: readreg error (reg=127, ret==0) [ 209.691443][ T1803] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 209.691451][ T1803] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 209.783786][ T1803] usb 2-1: USB disconnect, device number 5 [ 209.936318][ T1803] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 210.323371][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.496310][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.513316][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 210.519011][ T5889] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 210.519208][ T5889] usb 5-1: config 1 interface 0 has no altsetting 1 [ 210.549406][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 210.549428][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.549439][ T5889] usb 5-1: Product: syz [ 210.549447][ T5889] usb 5-1: Manufacturer: syz [ 210.549455][ T5889] usb 5-1: SerialNumber: syz [ 210.616811][ T5889] smsusb:smsusb_probe: board id=8, interface number 0 [ 210.922572][ T5889] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 210.922608][ T5889] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 210.991365][ T5889] usb 5-1: USB disconnect, device number 5 [ 211.005649][ T6815] udevd[6815]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 212.573376][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 212.573422][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 212.800945][ T6988] netlink: 'syz.4.322': attribute type 4 has an invalid length. [ 213.971275][ T6994] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 214.723340][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 214.873425][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 214.880768][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 214.880790][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.880801][ T9] usb 3-1: Product: syz [ 214.880809][ T9] usb 3-1: Manufacturer: syz [ 214.880817][ T9] usb 3-1: SerialNumber: syz [ 214.901459][ T9] usb 3-1: config 0 descriptor?? [ 215.319854][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 215.325157][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.340906][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 215.340954][ T9] usb 3-1: media controller created [ 215.379670][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.512502][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 215.512544][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 215.512552][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 215.521588][ T9] usb 3-1: USB disconnect, device number 6 [ 215.722082][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 215.846338][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 217.849967][ T7026] netlink: 'syz.2.333': attribute type 4 has an invalid length. [ 217.934144][ T7029] capability: warning: `syz.1.334' uses 32-bit capabilities (legacy support in use) [ 218.130151][ T7031] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 218.983472][ T1803] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 219.294131][ T1803] usb 2-1: Using ep0 maxpacket: 16 [ 219.295940][ T1803] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.295956][ T1803] usb 2-1: config 0 has no interface number 0 [ 219.299205][ T1803] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 219.299223][ T1803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.299234][ T1803] usb 2-1: Product: syz [ 219.299242][ T1803] usb 2-1: Manufacturer: syz [ 219.299250][ T1803] usb 2-1: SerialNumber: syz [ 219.368888][ T1803] usb 2-1: config 0 descriptor?? [ 219.450291][ T1803] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 221.135599][ T7060] netlink: 80 bytes leftover after parsing attributes in process `syz.3.344'. [ 221.263027][ T1803] gspca_spca1528: reg_r err -71 [ 221.263128][ T1803] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 221.264745][ T992] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.304006][ T1803] usb 2-1: USB disconnect, device number 6 [ 221.423383][ T992] usb 3-1: Using ep0 maxpacket: 8 [ 221.425257][ T992] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 221.425360][ T992] usb 3-1: config 0 has no interface number 0 [ 221.425401][ T992] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.425415][ T992] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 221.425430][ T992] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.425449][ T992] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.425491][ T992] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 221.425514][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.437081][ T992] usb 3-1: config 0 descriptor?? [ 221.822235][ T992] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 221.930151][ T992] usb 3-1: USB disconnect, device number 7 [ 221.954816][ T992] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 223.584379][ T7069] netlink: 'syz.2.348': attribute type 4 has an invalid length. [ 224.573420][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 224.723393][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 224.744526][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 224.744558][ T9] usb 2-1: config 0 has no interface number 0 [ 224.744630][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.744728][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 224.744767][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.744793][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.744839][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 224.744863][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.815510][ T9] usb 2-1: config 0 descriptor?? [ 224.876010][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 225.204763][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 225.206553][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.207178][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.256843][ T7080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.294128][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.373840][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 225.393362][ T31] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 225.393395][ T31] usb 1-1: config 0 has no interface number 0 [ 225.393579][ T31] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.393605][ T31] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 225.393773][ T31] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.393801][ T31] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.393844][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 225.394001][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.531081][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 225.552593][ T5885] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.552624][ T5885] usb 3-1: config 0 has no interface number 0 [ 225.581604][ T5885] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 225.581625][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.581637][ T5885] usb 3-1: Product: syz [ 225.581645][ T5885] usb 3-1: Manufacturer: syz [ 225.581653][ T5885] usb 3-1: SerialNumber: syz [ 225.622261][ T31] usb 1-1: config 0 descriptor?? [ 225.977769][ T5885] usb 3-1: config 0 descriptor?? [ 226.054943][ T5885] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 226.080089][ T31] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 226.356227][ T7100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.356827][ T7100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.413543][ T7099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.642530][ T31] usb 1-1: USB disconnect, device number 3 [ 226.883398][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 227.238993][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.239058][ T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 227.239571][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.243084][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 227.297771][ T9] usb 4-1: config 0 descriptor?? [ 227.302050][ T31] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 227.351334][ T9] option 4-1:0.0: GSM modem (1-port) converter detected [ 227.450725][ T5889] usb 2-1: USB disconnect, device number 7 [ 227.580812][ T5889] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 227.816779][ T5885] gspca_spca1528: reg_r err -71 [ 227.816940][ T5885] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 227.827553][ T5885] usb 3-1: USB disconnect, device number 8 [ 227.914327][ T7102] netlink: 'syz.1.359': attribute type 4 has an invalid length. [ 228.570839][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 228.583717][ T7112] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[7112] [ 230.922539][ T5885] usb 4-1: USB disconnect, device number 5 [ 230.943327][ T5885] option 4-1:0.0: device disconnected [ 232.270066][ T7138] netlink: 'syz.2.371': attribute type 4 has an invalid length. [ 233.333486][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 233.495792][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 233.498438][ T5885] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 233.498466][ T5885] usb 1-1: config 0 has no interface number 0 [ 233.498509][ T5885] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.498533][ T5885] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 233.498559][ T5885] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.498583][ T5885] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.498625][ T5885] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 233.498647][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.506993][ T5885] usb 1-1: config 0 descriptor?? [ 233.573877][ T5885] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 233.643393][ T1803] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 233.813665][ T1803] usb 4-1: Using ep0 maxpacket: 8 [ 233.852034][ T1803] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 233.852067][ T1803] usb 4-1: config 0 has no interface number 0 [ 233.852692][ T1803] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 233.852718][ T1803] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 233.852915][ T1803] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.852944][ T1803] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.910251][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.910883][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.947429][ T1803] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 233.947460][ T1803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.012803][ T7153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.028493][ T1803] usb 4-1: config 0 descriptor?? [ 234.149715][ T1803] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 234.337713][ T5885] usb 1-1: USB disconnect, device number 4 [ 234.380082][ T1803] usb 4-1: USB disconnect, device number 6 [ 234.398870][ T1803] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 234.421404][ T5885] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 235.250501][ T7177] netlink: 'syz.4.384': attribute type 4 has an invalid length. [ 235.593443][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 235.709213][ T7185] ptrace attach of "./syz-executor exec"[5793] was attempted by "./syz-executor exec"[7185] [ 237.969877][ T7218] netlink: 'syz.4.399': attribute type 4 has an invalid length. [ 239.143384][ T5870] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 239.303431][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 239.306140][ T5870] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 239.306169][ T5870] usb 3-1: config 0 has no interface number 0 [ 239.306214][ T5870] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.306237][ T5870] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 239.306263][ T5870] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.306290][ T5870] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.306334][ T5870] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 239.306358][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.310789][ T5870] usb 3-1: config 0 descriptor?? [ 239.438369][ T5870] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 239.732255][ T5870] usb 3-1: USB disconnect, device number 9 [ 239.754782][ T5870] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 240.713369][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.883484][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 240.885822][ T31] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 240.885840][ T31] usb 4-1: config 0 has no interface number 0 [ 240.885866][ T31] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.885879][ T31] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 240.885893][ T31] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.885915][ T31] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.887762][ T31] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 240.887780][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.980556][ T31] usb 4-1: config 0 descriptor?? [ 241.260327][ T31] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 241.469836][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.470183][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.566347][ T7267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.793932][ T808] usb 4-1: USB disconnect, device number 7 [ 241.817129][ T808] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 242.173600][ T7295] tipc: Started in network mode [ 242.173632][ T7295] tipc: Node identity e21bd73a79b4, cluster identity 4711 [ 242.174479][ T7295] tipc: Enabled bearer , priority 0 [ 242.175586][ T7295] syzkaller0: entered promiscuous mode [ 242.175612][ T7295] syzkaller0: entered allmulticast mode [ 242.438618][ T7298] tipc: Resetting bearer [ 242.615517][ T7298] tipc: Disabling bearer [ 244.949949][ T808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.133348][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 245.135436][ T808] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 245.135697][ T808] usb 3-1: config 0 has no interface number 0 [ 245.135740][ T808] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.135755][ T808] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 245.135770][ T808] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.135784][ T808] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.135811][ T808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 245.135824][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.139384][ T808] usb 3-1: config 0 descriptor?? [ 245.278916][ T808] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 245.534657][ T7361] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 245.759179][ T808] usb 3-1: USB disconnect, device number 10 [ 245.827326][ T808] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 249.333404][ T808] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 249.483454][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 249.486047][ T808] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 249.486074][ T808] usb 5-1: config 0 has no interface number 0 [ 249.486143][ T808] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.486166][ T808] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 249.486190][ T808] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.486215][ T808] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.486255][ T808] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 249.486278][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.588134][ T808] usb 5-1: config 0 descriptor?? [ 249.621862][ T808] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 249.889037][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.889713][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.076211][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 250.322439][ T7399] ptrace attach of "./syz-executor exec"[5796] was attempted by "./syz-executor exec"[7399] [ 251.933675][ T5870] usb 5-1: USB disconnect, device number 6 [ 251.960530][ T5870] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 252.444976][ T5870] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 252.687270][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 252.691660][ T5870] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 252.691690][ T5870] usb 5-1: config 0 has no interface number 0 [ 252.691737][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.691761][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 252.691784][ T5870] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.691808][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.691849][ T5870] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 252.691871][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.756133][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 252.848818][ T5870] usb 5-1: config 0 descriptor?? [ 252.893837][ T5870] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 253.144011][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.144582][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.281290][ T808] usb 5-1: USB disconnect, device number 7 [ 253.300562][ T808] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 253.941574][ T7469] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 254.253339][ T5870] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.408446][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 254.410782][ T5870] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.410808][ T5870] usb 5-1: config 0 has no interface number 0 [ 254.410854][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.410878][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.410902][ T5870] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.410929][ T5870] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.410973][ T5870] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.410994][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.438953][ T5870] usb 5-1: config 0 descriptor?? [ 254.465004][ T5870] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 254.705021][ T5885] usb 5-1: USB disconnect, device number 8 [ 254.713585][ T5885] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 255.397931][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 255.408500][ T7482] ptrace attach of "./syz-executor exec"[5796] was attempted by "./syz-executor exec"[7482] [ 255.909301][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.909381][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.119690][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 256.150438][ T7495] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[7495] [ 258.123398][ T5870] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 258.273375][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 258.277935][ T5870] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 258.277964][ T5870] usb 3-1: config 0 has no interface number 0 [ 258.278034][ T5870] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.278057][ T5870] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 258.278083][ T5870] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.278109][ T5870] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.278153][ T5870] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 258.278199][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.323060][ T5870] usb 3-1: config 0 descriptor?? [ 258.375269][ T5870] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 259.017870][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-1) [ 259.044078][ T5885] usb 3-1: USB disconnect, device number 11 [ 259.049724][ T5885] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 260.048094][ T7549] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 260.061658][ T7549] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 260.062392][ T7549] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 262.587308][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 263.028597][ T7577] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 263.043959][ T7577] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 263.044815][ T7577] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 264.236472][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 264.252597][ T7582] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[7582] [ 264.975351][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 265.353919][ T7605] binder: 7604:7605 ioctl c0306201 0 returned -14 [ 265.796220][ T7616] netlink: 'syz.4.555': attribute type 4 has an invalid length. [ 267.566371][ T7659] netlink: 'syz.2.569': attribute type 4 has an invalid length. [ 270.402974][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 270.639871][ T7712] ptrace attach of "./syz-executor exec"[5793] was attempted by "./syz-executor exec"[7712] [ 270.748446][ T7724] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 271.256516][ T7731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.599'. [ 271.257053][ T7731] tipc: Enabled bearer , priority 10 [ 271.568493][ T7739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.123580][ T7751] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 272.375726][ T5870] tipc: Node number set to 2611992378 [ 272.574656][ T7763] netlink: 384 bytes leftover after parsing attributes in process `syz.4.613'. [ 272.574698][ T7763] tipc: Started in network mode [ 272.574705][ T7763] tipc: Node identity , cluster identity 4711 [ 272.574712][ T7763] tipc: Failed to obtain node identity [ 272.574727][ T7763] tipc: Enabling of bearer rejected, failed to enable media [ 274.444560][ T7781] netlink: 'syz.2.621': attribute type 4 has an invalid length. [ 275.062972][ T7795] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.623' sets config #1 [ 275.383487][ T808] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 275.593360][ T808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.593423][ T808] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 275.593447][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.635426][ T808] usb 2-1: config 0 descriptor?? [ 275.689494][ T808] option 2-1:0.0: GSM modem (1-port) converter detected [ 275.798421][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.630'. [ 275.831627][ T7807] vlan2: entered promiscuous mode [ 275.831646][ T7807] batadv0: entered promiscuous mode [ 276.509833][ T7816] netlink: 'syz.2.634': attribute type 4 has an invalid length. [ 276.837331][ T7814] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 278.013892][ T50] usb 2-1: USB disconnect, device number 8 [ 278.085152][ T50] option 2-1:0.0: device disconnected [ 278.242834][ T7847] tipc: Enabling of bearer rejected, failed to enable media [ 278.343387][ T5885] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.493409][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 278.495857][ T5885] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.495886][ T5885] usb 3-1: config 0 has no interface number 0 [ 278.495932][ T5885] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.495957][ T5885] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.495982][ T5885] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.496005][ T5885] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.496046][ T5885] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.496069][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.501952][ T5885] usb 3-1: config 0 descriptor?? [ 278.655488][ T7851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.693806][ T5885] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 278.803434][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.822212][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.993408][ T5885] usb 3-1: USB disconnect, device number 12 [ 279.011060][ T5885] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 281.276237][ T7891] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 282.603460][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 282.772187][ T7900] syz_tun: entered promiscuous mode [ 282.786529][ T7900] syz_tun: left promiscuous mode [ 282.863339][ T5885] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 283.023317][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 283.064756][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.064787][ T5885] usb 4-1: config 0 has no interface number 0 [ 283.080632][ T5885] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 283.080666][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.080685][ T5885] usb 4-1: Product: syz [ 283.080698][ T5885] usb 4-1: Manufacturer: syz [ 283.080713][ T5885] usb 4-1: SerialNumber: syz [ 283.127017][ T5885] usb 4-1: config 0 descriptor?? [ 283.194027][ T5885] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 284.673771][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.066726][ T5885] gspca_spca1528: reg_r err -71 [ 285.066790][ T5885] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 285.072695][ T5885] usb 4-1: USB disconnect, device number 8 [ 285.103605][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.144563][ T3574] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.243482][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 285.398112][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 285.399943][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 285.399962][ T9] usb 3-1: config 0 has no interface number 0 [ 285.399987][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.400001][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 285.400015][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.400029][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 285.400053][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 285.400069][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.405637][ T9] usb 3-1: config 0 descriptor?? [ 285.629044][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 285.693573][ T9] usb 3-1: USB disconnect, device number 13 [ 285.711888][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 286.090352][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.689'. [ 286.214093][ T1402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.214418][ T1402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.111227][ T5885] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.258442][ T7987] binder: BINDER_SET_CONTEXT_MGR already set [ 289.258455][ T7987] binder: 7986:7987 ioctl 4018620d 200000004a80 returned -16 [ 289.463667][ T5870] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.925106][ T7997] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 289.935665][ T7997] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.060531][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.281683][ T5870] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.958986][ T7999] netlink: 80 bytes leftover after parsing attributes in process `syz.4.704'. [ 291.261768][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 291.289293][ T1227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.296924][ T8008] erspan0: entered promiscuous mode [ 291.298785][ T8008] erspan0: left promiscuous mode [ 292.304400][ T1227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.304729][ T1227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.930583][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.754786][ T8043] netlink: 80 bytes leftover after parsing attributes in process `syz.3.721'. [ 294.949982][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 294.982508][ T8050] ip6gretap0: entered promiscuous mode [ 294.996257][ T8050] ip6gretap0: left promiscuous mode [ 296.788115][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.854526][ T5889] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 297.034875][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 297.036349][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.036392][ T5889] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 297.036419][ T5889] usb 3-1: config 1 interface 0 has no altsetting 1 [ 297.085467][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 297.085605][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.085627][ T5889] usb 3-1: Product: syz [ 297.085641][ T5889] usb 3-1: Manufacturer: syz [ 297.085655][ T5889] usb 3-1: SerialNumber: syz [ 297.120116][ T5889] smsusb:smsusb_probe: board id=8, interface number 0 [ 297.413601][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.548944][ T5889] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 297.549006][ T5889] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 297.595732][ T5889] usb 3-1: USB disconnect, device number 14 [ 300.532717][ T8122] netlink: 80 bytes leftover after parsing attributes in process `syz.3.751'. [ 300.602079][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.089165][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 301.244582][ T8139] netlink: 80 bytes leftover after parsing attributes in process `syz.3.759'. [ 301.248467][ T8135] vlan2: entered promiscuous mode [ 301.248489][ T8135] batadv0: entered promiscuous mode [ 304.453424][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.473297][ T5870] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 304.700470][ T5870] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 304.700503][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.700522][ T5870] usb 4-1: config 0 has no interfaces? [ 304.700554][ T5870] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 304.700585][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.768436][ T5870] usb 4-1: config 0 descriptor?? [ 304.773782][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.934143][ T992] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 305.104149][ T992] usb 3-1: Using ep0 maxpacket: 32 [ 305.107332][ T992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.107360][ T992] usb 3-1: config 0 has no interface number 0 [ 305.203747][ T992] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 305.203781][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.203802][ T992] usb 3-1: Product: syz [ 305.203817][ T992] usb 3-1: Manufacturer: syz [ 305.203832][ T992] usb 3-1: SerialNumber: syz [ 305.271987][ T992] usb 3-1: config 0 descriptor?? [ 305.320477][ T992] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 305.320507][ T992] usb 3-1: selecting invalid altsetting 1 [ 305.320524][ T992] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 305.368349][ T992] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.368654][ T992] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 305.368691][ T992] usb 3-1: media controller created [ 305.409352][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.525760][ T992] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 305.525823][ T992] zl10353_read_register: readreg error (reg=127, ret==-71) [ 305.527675][ T992] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 305.857095][ T992] usb 3-1: USB disconnect, device number 15 [ 308.029873][ T50] usb 4-1: USB disconnect, device number 9 [ 308.523375][ T50] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 308.686605][ T50] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.688136][ T50] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 308.688199][ T50] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 308.688224][ T50] usb 4-1: config 1 interface 0 has no altsetting 1 [ 308.692700][ T50] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 308.692727][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.692738][ T50] usb 4-1: Product: syz [ 308.692746][ T50] usb 4-1: Manufacturer: syz [ 308.692754][ T50] usb 4-1: SerialNumber: syz [ 308.775806][ T50] smsusb:smsusb_probe: board id=8, interface number 0 [ 308.841531][ T8222] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.792' sets config #1 [ 309.163422][ T5885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 309.378535][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.378665][ T5885] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 309.378689][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.461000][ T5885] usb 2-1: config 0 descriptor?? [ 309.540596][ T50] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 309.540632][ T50] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 309.584747][ T5885] option 2-1:0.0: GSM modem (1-port) converter detected [ 309.610467][ T50] usb 4-1: USB disconnect, device number 10 [ 311.073379][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 311.332219][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 312.585090][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.585121][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.585160][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 312.585185][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.816382][ T9] usb 4-1: config 0 descriptor?? [ 313.006355][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.124421][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.128403][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.156473][ T8257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.179036][ T5889] usb 4-1: USB disconnect, device number 11 [ 313.413486][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.084577][ T1803] usb 2-1: USB disconnect, device number 9 [ 314.089596][ T1803] option 2-1:0.0: device disconnected [ 316.754294][ T5885] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 316.923283][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 316.929254][ T5885] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 316.929282][ T5885] usb 2-1: config 0 has no interface number 0 [ 316.929330][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.929353][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 316.929379][ T5885] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.929404][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.929448][ T5885] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 316.929472][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.936720][ T5885] usb 2-1: config 0 descriptor?? [ 316.975929][ T5885] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 317.229306][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.230193][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.262959][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.263037][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.415281][ T5870] usb 2-1: USB disconnect, device number 10 [ 317.438796][ T5870] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 317.923347][ T5870] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 318.108277][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.108310][ T5870] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.108333][ T5870] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.117013][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 318.117041][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.117059][ T5870] usb 5-1: Product: syz [ 318.117080][ T5870] usb 5-1: Manufacturer: syz [ 318.117093][ T5870] usb 5-1: SerialNumber: syz [ 318.137298][ T5870] hub 5-1:1.0: bad descriptor, ignoring hub [ 318.137337][ T5870] hub 5-1:1.0: probe with driver hub failed with error -5 [ 318.323302][ T5889] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 318.594369][ T5870] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 318.661538][ T5870] usb 5-1: USB disconnect, device number 9 [ 318.672660][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.672692][ T5889] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.672716][ T5889] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.707111][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 318.707145][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.707166][ T5889] usb 4-1: Product: syz [ 318.707180][ T5889] usb 4-1: Manufacturer: syz [ 318.707194][ T5889] usb 4-1: SerialNumber: syz [ 318.734333][ T5870] usblp0: removed [ 318.773497][ T5889] hub 4-1:1.0: bad descriptor, ignoring hub [ 318.773543][ T5889] hub 4-1:1.0: probe with driver hub failed with error -5 [ 319.033888][ T5889] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 319.083335][ T5870] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 319.250522][ T5870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.250555][ T5870] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.250578][ T5870] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.257846][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.257880][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.257906][ T5870] usb 5-1: Product: syz [ 319.257920][ T5870] usb 5-1: Manufacturer: syz [ 319.257935][ T5870] usb 5-1: SerialNumber: syz [ 319.289871][ T5870] hub 5-1:1.0: bad descriptor, ignoring hub [ 319.289926][ T5870] hub 5-1:1.0: probe with driver hub failed with error -5 [ 319.813445][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.804269][ T8344] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 322.953479][ T50] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 323.116812][ T50] usb 3-1: Using ep0 maxpacket: 32 [ 323.136785][ T50] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.136818][ T50] usb 3-1: config 0 has no interface number 0 [ 323.159810][ T50] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 323.159841][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.159861][ T50] usb 3-1: Product: syz [ 323.159874][ T50] usb 3-1: Manufacturer: syz [ 323.159888][ T50] usb 3-1: SerialNumber: syz [ 323.209791][ T50] usb 3-1: config 0 descriptor?? [ 323.241341][ T50] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 323.241370][ T50] usb 3-1: selecting invalid altsetting 1 [ 323.241386][ T50] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 323.279011][ T50] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 323.279714][ T50] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 323.279821][ T50] usb 3-1: media controller created [ 323.339188][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.765824][ T50] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 323.765883][ T50] zl10353_read_register: readreg error (reg=127, ret==-71) [ 323.766353][ T50] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 324.819493][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.823567][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.871120][ T50] usb 3-1: USB disconnect, device number 16 [ 324.893112][ T6815] udevd[6815]: setting owner of /dev/bus/usb/003/016 to uid=0, gid=0 failed: No such file or directory [ 325.523337][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 325.674453][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 325.688702][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 325.688730][ T9] usb 3-1: config 0 has no interface number 0 [ 325.688823][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.688845][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 325.688867][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.688889][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.689308][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 325.689333][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.717033][ T9] usb 3-1: config 0 descriptor?? [ 326.138279][ T8344] usb 4-1: device descriptor read/all, error -110 [ 326.292597][ T8344] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 326.434020][ T8344] usb 4-1: device descriptor read/64, error -32 [ 326.683335][ T8344] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 326.703734][ T8344] usb 4-1: device descriptor read/8, error -32 [ 326.943338][ T8344] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 326.963674][ T8344] usb 4-1: device descriptor read/8, error -32 [ 327.079645][ T5889] usb 4-1: USB disconnect, device number 12 [ 327.087983][ T5870] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 327.153923][ T5889] usblp0: removed [ 327.173575][ T9] ldusb 3-1:0.55: LD USB Device #2 now attached to major 180 minor 2 [ 327.225764][ T5870] usb 5-1: USB disconnect, device number 10 [ 327.292350][ T5870] usblp1: removed [ 327.324149][ T9] usb 3-1: USB disconnect, device number 17 [ 327.386432][ T9] ldusb 3-1:0.55: LD USB Device #2 now disconnected [ 328.907830][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 329.713358][ T5889] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 329.874020][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 329.901555][ T5889] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 329.901586][ T5889] usb 3-1: config 0 has no interface number 0 [ 329.901632][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.901655][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 329.901677][ T5889] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.901701][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.901741][ T5889] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 329.901763][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.105399][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.235892][ T5889] usb 3-1: config 0 descriptor?? [ 331.286542][ T5889] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 331.750759][ T50] usb 3-1: USB disconnect, device number 18 [ 331.835658][ T50] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 332.387214][ T8572] cgroup: fork rejected by pids controller in /syz2 [ 333.326244][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 333.399320][ T5870] IPVS: starting estimator thread 0... [ 333.633602][ T8958] IPVS: using max 13 ests per chain, 31200 per kthread [ 334.313042][ T8957] 8021q: adding VLAN 0 to HW filter on device team1 [ 334.337044][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 334.737116][ T8957] 8021q: adding VLAN 0 to HW filter on device team2 [ 335.037158][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 336.593774][ T36] audit: type=1326 audit(1771417126.355:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8994 comm="syz.3.959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f351e77c629 code=0x0 [ 337.293323][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 337.486432][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 337.488712][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 337.488732][ T9] usb 4-1: config 0 has no interface number 0 [ 337.488757][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 337.488771][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 337.488786][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.488800][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 337.488824][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 337.488837][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.516135][ T9] usb 4-1: config 0 descriptor?? [ 337.668396][ T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 338.045390][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.046085][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.055103][ T9010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.205392][ T5885] usb 4-1: USB disconnect, device number 14 [ 338.229316][ T5885] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 338.251814][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 338.306423][ T9031] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[9031] [ 342.862308][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 344.007154][ T50] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 344.173298][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 344.178963][ T50] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 344.178995][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.179015][ T50] usb 3-1: Product: syz [ 344.179029][ T50] usb 3-1: Manufacturer: syz [ 344.179043][ T50] usb 3-1: SerialNumber: syz [ 344.231757][ T50] usb 3-1: config 0 descriptor?? [ 344.897744][ T9115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 344.947319][ T50] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 344.950758][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.951857][ T50] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 344.951903][ T50] usb 3-1: media controller created [ 345.040605][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.624282][ T50] zl10353_read_register: readreg error (reg=127, ret==0) [ 345.624351][ T50] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 345.624365][ T50] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 345.729333][ T9097] syz.1.998 (9097) used greatest stack depth: 17232 bytes left [ 345.784848][ T992] usb 3-1: USB disconnect, device number 19 [ 346.277489][ T992] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 347.443359][ T992] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 347.666583][ T992] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 347.666604][ T992] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.666615][ T992] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.666627][ T992] usb 2-1: config 1 has no interface number 0 [ 347.666658][ T992] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.753413][ T992] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.755416][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.755439][ T992] usb 2-1: Product: syz [ 347.755447][ T992] usb 2-1: Manufacturer: syz [ 347.755455][ T992] usb 2-1: SerialNumber: syz [ 347.930824][ T992] cdc_wdm 2-1:1.128: skipping garbage [ 347.930873][ T992] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22 [ 348.932602][ T9164] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 349.016835][ T9165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 350.543385][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.223301][ T50] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 351.381835][ T50] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 351.381867][ T50] usb 3-1: config 0 has no interface number 0 [ 351.381917][ T50] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 351.381943][ T50] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.381969][ T50] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.403381][ T50] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 351.403411][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.403429][ T50] usb 3-1: Product: syz [ 351.403442][ T50] usb 3-1: Manufacturer: syz [ 351.403455][ T50] usb 3-1: SerialNumber: syz [ 351.435805][ T50] usb 3-1: config 0 descriptor?? [ 351.436578][ T9182] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 351.501381][ T50] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 351.525114][ T50] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 351.532135][ T50] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 351.620369][ T50] usb 2-1: USB disconnect, device number 11 [ 352.859839][ T992] usb 3-1: USB disconnect, device number 20 [ 352.892055][ T992] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 352.892964][ T992] cyberjack 3-1:0.69: device disconnected [ 353.113426][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 355.704783][ T9229] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1045' sets config #1 [ 356.058299][ T9235] syzkaller1: entered promiscuous mode [ 356.058320][ T9235] syzkaller1: entered allmulticast mode [ 356.063368][ T5885] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 356.258782][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.258861][ T5885] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 356.258886][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.278710][ T5885] usb 4-1: config 0 descriptor?? [ 356.302558][ T5885] option 4-1:0.0: GSM modem (1-port) converter detected [ 357.009092][ T9252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'. [ 357.120630][ T9254] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 358.723569][ T36] audit: type=1326 audit(1771417148.425:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9264 comm="syz.1.1061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64dbd0c629 code=0x0 [ 359.023476][ T992] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 359.197831][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 359.200255][ T992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.200282][ T992] usb 3-1: config 0 has no interface number 0 [ 359.227237][ T992] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 359.227270][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.227291][ T992] usb 3-1: Product: syz [ 359.227305][ T992] usb 3-1: Manufacturer: syz [ 359.227319][ T992] usb 3-1: SerialNumber: syz [ 359.242835][ T992] usb 3-1: config 0 descriptor?? [ 359.278123][ T992] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 359.843111][ T50] usb 4-1: USB disconnect, device number 15 [ 359.846105][ T50] option 4-1:0.0: device disconnected [ 360.456438][ T9295] input: syz0 as /devices/virtual/input/input19 [ 360.828856][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 361.405057][ T992] gspca_spca1528: reg_r err -71 [ 361.405166][ T992] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 361.445703][ T992] usb 3-1: USB disconnect, device number 21 [ 361.865871][ T5807] Bluetooth: hci3: unexpected event for opcode 0xbd42 [ 361.910949][ T9317] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1081' sets config #1 [ 362.053432][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.248572][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'. [ 362.273331][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 362.791959][ T36] audit: type=1326 audit(1771417152.545:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9328 comm="syz.3.1087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f351e77c629 code=0x0 [ 363.207137][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.207267][ T9] usb 5-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 363.207292][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.259143][ T9] usb 5-1: config 0 descriptor?? [ 363.444815][ T9] option 5-1:0.0: GSM modem (1-port) converter detected [ 363.701753][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1092'. [ 364.011596][ T5807] Bluetooth: hci3: unexpected event for opcode 0xbd42 [ 365.256544][ T9368] input: syz0 as /devices/virtual/input/input20 [ 365.274222][ T50] usb 5-1: USB disconnect, device number 11 [ 365.275688][ T50] option 5-1:0.0: device disconnected [ 365.773372][ T50] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 365.895263][ T5807] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 365.895799][ T5807] Bluetooth: hci3: Injecting HCI hardware error event [ 365.897815][ T5807] Bluetooth: hci3: hardware error 0x00 [ 366.033048][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.045804][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.045829][ T50] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 366.069652][ T50] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 366.069682][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.069700][ T50] usb 5-1: Product: syz [ 366.069713][ T50] usb 5-1: Manufacturer: syz [ 366.069726][ T50] usb 5-1: SerialNumber: syz [ 366.923364][ T5889] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 366.994805][ T50] usb 5-1: USB disconnect, device number 12 [ 367.083325][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 367.085728][ T5889] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 367.085755][ T5889] usb 3-1: config 0 has no interface number 0 [ 367.085803][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 367.085827][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 367.085852][ T5889] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.085878][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 367.085920][ T5889] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 367.085942][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.092148][ T5889] usb 3-1: config 0 descriptor?? [ 367.200245][ T5889] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 367.449614][ T5889] usb 3-1: USB disconnect, device number 22 [ 367.455482][ T5889] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 368.213401][ T5807] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 369.293314][ T992] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 369.463370][ T992] usb 3-1: Using ep0 maxpacket: 8 [ 369.465763][ T992] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 369.465790][ T992] usb 3-1: config 0 has no interface number 0 [ 369.465838][ T992] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.465863][ T992] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 369.465888][ T992] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.465914][ T992] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.465956][ T992] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 369.465980][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.527193][ T992] usb 3-1: config 0 descriptor?? [ 369.587204][ T992] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 370.076900][ T992] usb 3-1: USB disconnect, device number 23 [ 370.105920][ T992] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 372.004623][ T9480] netlink: 'syz.1.1143': attribute type 4 has an invalid length. [ 372.093332][ T1803] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 372.243245][ T1803] usb 5-1: Using ep0 maxpacket: 8 [ 372.245781][ T1803] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 372.245809][ T1803] usb 5-1: config 0 has no interface number 0 [ 372.245858][ T1803] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.245882][ T1803] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 372.245908][ T1803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 372.245933][ T1803] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 372.245977][ T1803] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 372.246001][ T1803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.366247][ T1803] usb 5-1: config 0 descriptor?? [ 372.389010][ T1803] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 373.048098][ T9489] netlink: 'syz.2.1147': attribute type 4 has an invalid length. [ 373.048775][ T9489] netlink: 'syz.2.1147': attribute type 4 has an invalid length. [ 374.577875][ T9508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'. [ 374.692918][ T9508] team_slave_0: entered promiscuous mode [ 374.693005][ T9508] team_slave_1: entered promiscuous mode [ 374.738185][ T9508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.773607][ T50] usb 5-1: USB disconnect, device number 13 [ 374.790043][ T9508] team_slave_0: left promiscuous mode [ 374.790124][ T9508] team_slave_1: left promiscuous mode [ 374.799317][ T50] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 375.501545][ T9520] netlink: 'syz.1.1160': attribute type 4 has an invalid length. [ 375.585360][ T9522] netlink: 'syz.1.1160': attribute type 4 has an invalid length. [ 377.476160][ T9518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 377.659076][ T9561] netlink: 'syz.0.1174': attribute type 4 has an invalid length. [ 377.715276][ T9561] netlink: 'syz.0.1174': attribute type 4 has an invalid length. [ 378.704027][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.704105][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.293462][ T992] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 379.424163][ T992] usb 5-1: device descriptor read/64, error -71 [ 379.679101][ T992] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 379.813418][ T992] usb 5-1: device descriptor read/64, error -71 [ 379.926589][ T992] usb usb5-port1: attempt power cycle [ 380.263414][ T992] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 380.284145][ T992] usb 5-1: device descriptor read/8, error -71 [ 380.613575][ T992] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 380.696577][ T992] usb 5-1: device descriptor read/8, error -71 [ 380.803676][ T992] usb usb5-port1: unable to enumerate USB device [ 381.013310][ T50] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 381.163327][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 381.169749][ T50] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 381.169781][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.169799][ T50] usb 3-1: Product: syz [ 381.169807][ T50] usb 3-1: Manufacturer: syz [ 381.169816][ T50] usb 3-1: SerialNumber: syz [ 381.304864][ T50] usb 3-1: config 0 descriptor?? [ 381.729505][ T50] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 381.745466][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.751058][ T50] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 381.751123][ T50] usb 3-1: media controller created [ 381.765913][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.385441][ T50] zl10353_read_register: readreg error (reg=127, ret==0) [ 382.385506][ T50] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 382.385517][ T50] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 382.482592][ T50] usb 3-1: USB disconnect, device number 24 [ 382.642037][ T9642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 382.679359][ T50] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 383.904977][ T992] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 384.057660][ T992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 384.057702][ T992] usb 3-1: can't read configurations, error -61 [ 384.253296][ T992] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 384.417683][ T992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 384.417724][ T992] usb 3-1: can't read configurations, error -61 [ 384.418078][ T992] usb usb3-port1: attempt power cycle [ 384.819716][ T992] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 384.839763][ T992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 384.839803][ T992] usb 3-1: can't read configurations, error -61 [ 384.983709][ T992] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 385.011389][ T992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 385.011426][ T992] usb 3-1: can't read configurations, error -61 [ 385.019795][ T992] usb usb3-port1: unable to enumerate USB device [ 385.111426][ T9694] kvm: kvm [9693]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x224e0000 [ 385.290126][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1230'. [ 386.383264][ T50] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 386.557896][ T50] usb 4-1: unable to get BOS descriptor or descriptor too short [ 386.559847][ T50] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.559873][ T50] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.559912][ T50] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 386.559941][ T50] usb 4-1: config 1 interface 0 has no altsetting 0 [ 386.562450][ T50] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 386.562479][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.562500][ T50] usb 4-1: Product: syz [ 386.562515][ T50] usb 4-1: Manufacturer: syz [ 386.562528][ T50] usb 4-1: SerialNumber: syz [ 387.952202][ T50] smsusb:smsusb_probe: board id=8, interface number 0 [ 387.952263][ T50] smsusb:smsusb_probe: Device initialized with return code -19 [ 388.237503][ T50] usb 4-1: USB disconnect, device number 16 [ 388.751324][ T9771] netlink: 'syz.4.1255': attribute type 4 has an invalid length. [ 388.754524][ T9771] netlink: 'syz.4.1255': attribute type 4 has an invalid length. [ 390.623296][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 390.783250][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 390.791411][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 390.791432][ T10] usb 4-1: config 0 has no interface number 0 [ 390.793444][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 390.793472][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.793490][ T10] usb 4-1: Product: syz [ 390.793504][ T10] usb 4-1: Manufacturer: syz [ 390.793516][ T10] usb 4-1: SerialNumber: syz [ 390.874726][ T10] usb 4-1: config 0 descriptor?? [ 390.887569][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 392.045564][ T50] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 392.244264][ T50] usb 3-1: unable to get BOS descriptor or descriptor too short [ 392.246698][ T50] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.246725][ T50] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.246761][ T50] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 392.246788][ T50] usb 3-1: config 1 interface 0 has no altsetting 0 [ 392.300946][ T50] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 392.300967][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.300980][ T50] usb 3-1: Product: syz [ 392.300992][ T50] usb 3-1: Manufacturer: syz [ 392.301007][ T50] usb 3-1: SerialNumber: syz [ 393.003345][ T10] gspca_spca1528: reg_r err -71 [ 393.003440][ T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 393.013594][ T10] usb 4-1: USB disconnect, device number 17 [ 393.078134][ T50] smsusb:smsusb_probe: board id=8, interface number 0 [ 393.078226][ T50] smsusb:smsusb_probe: Device initialized with return code -19 [ 393.213022][ T50] usb 3-1: USB disconnect, device number 29 [ 395.847621][ T9844] netlink: 'syz.1.1283': attribute type 4 has an invalid length. [ 402.033409][ T50] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 402.207756][ T50] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 402.207789][ T50] usb 2-1: config 0 has no interface number 0 [ 402.207840][ T50] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 402.207866][ T50] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.207892][ T50] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.211183][ T50] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 402.211214][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.211234][ T50] usb 2-1: Product: syz [ 402.211248][ T50] usb 2-1: Manufacturer: syz [ 402.211262][ T50] usb 2-1: SerialNumber: syz [ 402.321474][ T50] usb 2-1: config 0 descriptor?? [ 402.322265][ T9921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.343971][ T50] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 402.346226][ T50] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 402.351750][ T50] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 403.668243][ T50] usb 2-1: USB disconnect, device number 12 [ 403.715116][ T50] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 403.765700][ T50] cyberjack 2-1:0.69: device disconnected [ 404.293447][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 405.115035][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 405.128670][ T9960] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[9960] [ 405.433303][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 405.593346][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 405.595310][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.595337][ T5889] usb 4-1: config 0 has no interface number 0 [ 405.597853][ T5889] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 405.597883][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.597904][ T5889] usb 4-1: Product: syz [ 405.597917][ T5889] usb 4-1: Manufacturer: syz [ 405.597931][ T5889] usb 4-1: SerialNumber: syz [ 405.635049][ T5889] usb 4-1: config 0 descriptor?? [ 405.678472][ T5889] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 407.646361][ T5889] gspca_spca1528: reg_r err -71 [ 407.646530][ T5889] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 407.685928][ T5889] usb 4-1: USB disconnect, device number 18 [ 409.366041][T10029] tipc: Started in network mode [ 409.366064][T10029] tipc: Node identity 5abb7753dc5c, cluster identity 4711 [ 409.366187][T10029] tipc: Enabled bearer , priority 0 [ 409.947202][T10027] tipc: Disabling bearer [ 411.257501][T10070] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1372' sets config #1 [ 411.569464][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.592143][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.601465][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.610644][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.612452][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.673376][ T50] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 411.912020][ T50] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.912084][ T50] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 411.912110][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.936806][ T50] usb 2-1: config 0 descriptor?? [ 412.026333][ T50] option 2-1:0.0: GSM modem (1-port) converter detected [ 412.311161][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 412.328087][T10083] ptrace attach of "./syz-executor exec"[5796] was attempted by "./syz-executor exec"[10083] [ 413.868569][ T61] Bluetooth: hci5: command tx timeout [ 414.535084][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 415.390113][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.434368][ T5889] usb 2-1: USB disconnect, device number 13 [ 415.437725][ T5889] option 2-1:0.0: device disconnected [ 415.876884][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.893210][ T61] Bluetooth: hci5: command tx timeout [ 416.457042][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.954744][T10132] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 417.039786][ T992] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 417.224066][ T992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.224094][ T992] usb 3-1: config 0 has no interface number 0 [ 417.236100][ T992] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 417.236123][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.236135][ T992] usb 3-1: Product: syz [ 417.236144][ T992] usb 3-1: Manufacturer: syz [ 417.236152][ T992] usb 3-1: SerialNumber: syz [ 417.250748][ T992] usb 3-1: config 0 descriptor?? [ 417.374336][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 417.414176][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.478103][ T992] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 417.497005][ T992] usb 3-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 417.497025][ T992] usb 3-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 417.973501][ T61] Bluetooth: hci5: command tx timeout [ 418.080972][T10073] chnl_net:caif_netlink_parms(): no params data found [ 418.784779][ T12] bridge_slave_1: left allmulticast mode [ 418.784927][ T12] bridge_slave_1: left promiscuous mode [ 418.788678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.887200][ T12] bridge_slave_0: left allmulticast mode [ 418.887233][ T12] bridge_slave_0: left promiscuous mode [ 418.887597][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.055588][ T61] Bluetooth: hci5: command tx timeout [ 421.218241][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 421.223538][T10165] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[10165] [ 423.393328][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 423.557711][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 423.560511][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 423.562904][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 423.562923][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.562935][ T9] usb 2-1: Product: syz [ 423.562943][ T9] usb 2-1: Manufacturer: syz [ 423.562952][ T9] usb 2-1: SerialNumber: syz [ 423.572712][ T9] usb 2-1: config 0 descriptor?? [ 423.678136][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 423.678183][ T9] usb 2-1: setting power ON [ 423.678530][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 423.692843][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 423.694593][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 423.694677][ T9] usb 2-1: media controller created [ 423.723450][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 423.776724][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.946489][ T9] usb 2-1: selecting invalid altsetting 6 [ 423.946516][ T9] usb 2-1: digital interface selection failed (-22) [ 423.946531][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 423.951491][ T9] usb 2-1: setting power OFF [ 423.951754][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 423.951776][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 423.951789][ T9] (NULL device *): no alternate interface [ 424.130767][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 424.353862][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.433649][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.471190][ T12] bond0 (unregistering): Released all slaves [ 424.529087][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.529241][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.529455][T10073] bridge_slave_0: entered allmulticast mode [ 424.563471][T10073] bridge_slave_0: entered promiscuous mode [ 424.578256][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.593963][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.594221][T10073] bridge_slave_1: entered allmulticast mode [ 424.636541][T10073] bridge_slave_1: entered promiscuous mode [ 424.734053][ T9] usb 2-1: USB disconnect, device number 14 [ 424.895297][T10073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.910813][T10073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.084904][T10073] team0: Port device team_slave_0 added [ 425.106891][T10073] team0: Port device team_slave_1 added [ 425.457765][T10221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 426.996705][T10073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.996725][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.996752][T10073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.079940][T10073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.079957][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.079975][T10073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.685630][T10243] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1420'. [ 429.003379][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 429.014786][T10261] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[10261] [ 429.903466][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.630463][T10073] hsr_slave_0: entered promiscuous mode [ 430.673943][T10073] hsr_slave_1: entered promiscuous mode [ 430.675115][T10073] debugfs: 'hsr0' already exists in 'hsr' [ 430.675141][T10073] Cannot create hsr debugfs directory [ 431.683673][ T12] hsr_slave_0: left promiscuous mode [ 431.773392][ T12] hsr_slave_1: left promiscuous mode [ 431.774835][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.774956][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.876493][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.876546][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.119860][ T12] veth1_macvtap: left promiscuous mode [ 432.120205][ T12] veth0_macvtap: left promiscuous mode [ 432.122512][ T12] veth1_vlan: left promiscuous mode [ 432.122745][ T12] veth0_vlan: left promiscuous mode [ 435.460127][T10368] netlink: 'syz.3.1442': attribute type 1 has an invalid length. [ 437.954291][ T12] team0 (unregistering): Port device team_slave_1 removed [ 438.153821][ T12] team0 (unregistering): Port device team_slave_0 removed [ 439.921900][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1455'. [ 440.140816][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.140896][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.193711][T10351] syzkaller0: entered promiscuous mode [ 440.193738][T10351] syzkaller0: entered allmulticast mode [ 440.227272][T10403] erspan0: entered promiscuous mode [ 440.779176][T10408] syzkaller0: entered promiscuous mode [ 440.779207][T10408] syzkaller0: entered allmulticast mode [ 440.818443][T10408] tipc: Started in network mode [ 440.818477][T10408] tipc: Node identity d6e6603d03b, cluster identity 4711 [ 440.819458][T10408] tipc: Enabled bearer , priority 0 [ 440.907292][T10414] netlink: 'syz.3.1456': attribute type 4 has an invalid length. [ 440.919453][T10407] tipc: Resetting bearer [ 440.969798][T10419] netlink: 'syz.3.1456': attribute type 4 has an invalid length. [ 441.097453][T10407] tipc: Disabling bearer [ 441.526282][T10420] tipc: Enabling of bearer rejected, failed to enable media [ 441.552355][T10422] syzkaller0: entered promiscuous mode [ 441.552384][T10422] syzkaller0: entered allmulticast mode [ 441.688244][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 441.998502][T10449] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 442.916137][T10449] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 442.916947][T10449] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 445.603277][ T808] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 445.766446][ T808] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 445.766479][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.766498][ T808] usb 4-1: config 0 has no interfaces? [ 445.766530][ T808] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 445.766553][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.825006][ T808] usb 4-1: config 0 descriptor?? [ 445.984604][ T808] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 446.147113][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 446.148697][ T808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.148741][ T808] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 446.148771][ T808] usb 5-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 446.148821][ T808] usb 5-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 446.148849][ T808] usb 5-1: config 1 interface 0 has no altsetting 0 [ 446.148868][ T808] usb 5-1: config 1 interface 0 has no altsetting 1 [ 446.223320][ T808] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 446.223354][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.223376][ T808] usb 5-1: Product: syz [ 446.223390][ T808] usb 5-1: Manufacturer: syz [ 446.223403][ T808] usb 5-1: SerialNumber: syz [ 446.583353][T10497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 447.112835][T10073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.293720][T10073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.295127][ T808] smsusb:smsusb_probe: board id=8, interface number 0 [ 447.295155][ T808] usb 5-1: selecting invalid altsetting 0 [ 447.295170][ T808] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 447.295204][ T808] smsusb 5-1:1.0: probe with driver smsusb failed with error -22 [ 447.363627][ T808] usb 5-1: USB disconnect, device number 18 [ 447.392552][T10073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.519097][T10073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 448.588084][T10073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.647238][ T5885] usb 4-1: USB disconnect, device number 19 [ 448.690874][T10073] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.735049][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 448.765464][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.765719][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.840105][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.840202][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.722447][T10529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 451.728860][T10073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.883291][ T808] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 452.123228][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 452.125966][ T808] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 452.129032][ T808] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 452.129061][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.129082][ T808] usb 2-1: Product: syz [ 452.129096][ T808] usb 2-1: Manufacturer: syz [ 452.129111][ T808] usb 2-1: SerialNumber: syz [ 452.150101][ T808] usb 2-1: config 0 descriptor?? [ 452.176840][T10073] veth0_vlan: entered promiscuous mode [ 452.185069][ T808] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 452.185121][ T808] usb 2-1: setting power ON [ 452.185140][ T808] dvb-usb: bulk message failed: -22 (2/0) [ 452.271399][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 452.282950][T10073] veth1_vlan: entered promiscuous mode [ 452.319346][ T808] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 452.319413][ T808] usb 2-1: media controller created [ 452.466244][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.614248][ T808] usb 2-1: selecting invalid altsetting 6 [ 452.614274][ T808] usb 2-1: digital interface selection failed (-22) [ 452.614289][ T808] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 452.615179][ T808] usb 2-1: setting power OFF [ 452.615200][ T808] dvb-usb: bulk message failed: -22 (2/0) [ 452.615217][ T808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 452.615230][ T808] (NULL device *): no alternate interface [ 452.622761][T10073] veth0_macvtap: entered promiscuous mode [ 452.758808][T10073] veth1_macvtap: entered promiscuous mode [ 452.812112][ T808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 452.838391][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 452.869630][T10073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.904958][ T808] usb 2-1: USB disconnect, device number 15 [ 452.938798][T10073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.986904][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 452.989455][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 452.989501][ T10] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 452.989529][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 452.989579][ T10] usb 4-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 452.989606][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 452.989625][ T10] usb 4-1: config 1 interface 0 has no altsetting 1 [ 453.029566][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.029865][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.030047][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.030512][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.112921][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 453.112953][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.112973][ T10] usb 4-1: Product: syz [ 453.112987][ T10] usb 4-1: Manufacturer: syz [ 453.112998][ T10] usb 4-1: SerialNumber: syz [ 453.653637][ T5801] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 453.816191][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 453.836340][ T5801] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 453.836373][ T5801] usb 2-1: config 0 has no interface number 0 [ 453.836423][ T5801] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.836455][ T5801] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 453.836483][ T5801] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 453.836510][ T5801] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 453.836557][ T5801] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 453.836581][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.996917][ T5801] usb 2-1: config 0 descriptor?? [ 454.058879][ T5801] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 454.391784][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 454.391952][ T10] usb 4-1: selecting invalid altsetting 0 [ 454.391968][ T10] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 454.392002][ T10] smsusb 4-1:1.0: probe with driver smsusb failed with error -22 [ 454.459068][ T10] usb 4-1: USB disconnect, device number 20 [ 454.477730][ T50] usb 2-1: USB disconnect, device number 16 [ 454.477927][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 454.533878][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.533902][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.590876][ T50] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 454.593291][ T5801] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 454.666980][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.667004][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.775188][ T5801] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.775227][ T5801] usb 5-1: config 0 interface 0 has no altsetting 0 [ 454.796034][ T5801] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.796066][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.796085][ T5801] usb 5-1: Product: syz [ 454.796097][ T5801] usb 5-1: Manufacturer: syz [ 454.796110][ T5801] usb 5-1: SerialNumber: syz [ 454.808087][ T5801] usb 5-1: config 0 descriptor?? [ 455.041506][T10598] syzkaller0: entered promiscuous mode [ 455.041534][T10598] syzkaller0: entered allmulticast mode [ 455.087114][T10598] tipc: Started in network mode [ 455.087148][T10598] tipc: Node identity a6a277a55d56, cluster identity 4711 [ 455.087956][T10598] tipc: Enabled bearer , priority 0 [ 455.168727][T10597] tipc: Resetting bearer [ 455.190794][ T5801] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 455.363032][ T6815] udevd[6815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.668827][T10597] tipc: Disabling bearer [ 459.193261][ T5801] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 459.372606][ T5801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.382154][ T5801] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.382204][ T5801] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 459.382233][ T5801] usb 1-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 459.382290][ T5801] usb 1-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 459.382317][ T5801] usb 1-1: config 1 interface 0 has no altsetting 0 [ 459.382336][ T5801] usb 1-1: config 1 interface 0 has no altsetting 1 [ 459.415072][ T5801] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 459.415101][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.415120][ T5801] usb 1-1: Product: syz [ 459.415132][ T5801] usb 1-1: Manufacturer: syz [ 459.415144][ T5801] usb 1-1: SerialNumber: syz [ 460.864322][ T5801] smsusb:smsusb_probe: board id=8, interface number 0 [ 460.864358][ T5801] usb 1-1: selecting invalid altsetting 0 [ 460.864374][ T5801] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 460.864408][ T5801] smsusb 1-1:1.0: probe with driver smsusb failed with error -22 [ 460.885581][ T5801] usb 1-1: USB disconnect, device number 5 [ 460.975745][ T10] usb 5-1: USB disconnect, device number 19 [ 462.237683][T10690] syzkaller0: entered promiscuous mode [ 462.237723][T10690] syzkaller0: entered allmulticast mode [ 462.347728][T10694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.207615][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 463.348041][T10706] 8021q: adding VLAN 0 to HW filter on device team1 [ 463.348628][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 463.538423][T10706] 8021q: adding VLAN 0 to HW filter on device team2 [ 467.453360][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 467.643254][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 467.646126][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.646145][ T10] usb 2-1: config 0 has no interface number 0 [ 467.648567][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 467.648591][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.648603][ T10] usb 2-1: Product: syz [ 467.648611][ T10] usb 2-1: Manufacturer: syz [ 467.648619][ T10] usb 2-1: SerialNumber: syz [ 467.717501][ T10] usb 2-1: config 0 descriptor?? [ 467.730625][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 469.883301][ T50] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 470.038093][ T10] gspca_spca1528: reg_r err -71 [ 470.038196][ T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 470.040864][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 470.041772][ T10] usb 2-1: USB disconnect, device number 17 [ 470.090173][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.090226][ T50] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 470.090255][ T50] usb 5-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 470.090297][ T50] usb 5-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 470.090324][ T50] usb 5-1: config 1 interface 0 has no altsetting 0 [ 470.090342][ T50] usb 5-1: config 1 interface 0 has no altsetting 1 [ 470.103229][ T50] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 470.103261][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.103279][ T50] usb 5-1: Product: syz [ 470.103293][ T50] usb 5-1: Manufacturer: syz [ 470.103306][ T50] usb 5-1: SerialNumber: syz [ 471.172129][ T50] smsusb:smsusb_probe: board id=8, interface number 0 [ 471.172160][ T50] usb 5-1: selecting invalid altsetting 0 [ 471.172174][ T50] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 471.172205][ T50] smsusb 5-1:1.0: probe with driver smsusb failed with error -22 [ 471.213661][ T50] usb 5-1: USB disconnect, device number 20 [ 471.654241][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1539'. [ 472.863263][ T5801] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 473.025750][ T5801] usb 2-1: Using ep0 maxpacket: 16 [ 474.100053][ T5801] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.100084][ T5801] usb 2-1: config 0 has no interface number 0 [ 474.102511][ T5801] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 474.102541][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.102553][ T5801] usb 2-1: Product: syz [ 474.102569][ T5801] usb 2-1: Manufacturer: syz [ 474.102577][ T5801] usb 2-1: SerialNumber: syz [ 474.106132][ T5801] usb 2-1: config 0 descriptor?? [ 474.142790][T10832] netlink: 'syz.3.1552': attribute type 4 has an invalid length. [ 474.159358][T10832] netlink: 'syz.3.1552': attribute type 4 has an invalid length. [ 474.239305][ T5801] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 475.458290][ T5801] gspca_spca1528: reg_w err -110 [ 475.474614][ T5801] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 475.936952][ T5801] usb 2-1: USB disconnect, device number 18 [ 476.443259][ T5870] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 476.599948][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.621146][ T5870] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 476.621220][ T5870] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 476.621250][ T5870] usb 2-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 476.621312][ T5870] usb 2-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 476.621340][ T5870] usb 2-1: config 1 interface 0 has no altsetting 0 [ 476.621358][ T5870] usb 2-1: config 1 interface 0 has no altsetting 1 [ 476.645052][ T5870] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 476.645083][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.645102][ T5870] usb 2-1: Product: syz [ 476.645114][ T5870] usb 2-1: Manufacturer: syz [ 476.645127][ T5870] usb 2-1: SerialNumber: syz [ 477.309598][ T5870] smsusb:smsusb_probe: board id=8, interface number 0 [ 477.309631][ T5870] usb 2-1: selecting invalid altsetting 0 [ 477.309646][ T5870] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 477.309681][ T5870] smsusb 2-1:1.0: probe with driver smsusb failed with error -22 [ 477.341134][ T5870] usb 2-1: USB disconnect, device number 19 [ 477.666895][T10854] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1559' sets config #1 [ 479.095004][T10875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1563'. [ 479.413732][ T5889] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 479.602762][ T5889] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 479.602785][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.602797][ T5889] usb 4-1: config 0 has no interfaces? [ 479.602815][ T5889] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 479.602829][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.623744][ T5889] usb 4-1: config 0 descriptor?? [ 482.227693][ T992] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 482.227749][ T992] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 482.266852][ T5870] usb 4-1: USB disconnect, device number 21 [ 482.281690][ T992] usb 3-1: USB disconnect, device number 30 [ 482.594122][ T992] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 482.673289][ T5870] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 482.744208][ T992] usb 3-1: Using ep0 maxpacket: 8 [ 482.754276][ T992] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 482.754306][ T992] usb 3-1: config 0 has no interface number 0 [ 482.754350][ T992] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.754372][ T992] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 482.754395][ T992] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.754419][ T992] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.754525][ T992] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 482.754547][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.826205][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 482.827562][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 482.827600][ T5870] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.827625][ T5870] usb 4-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 482.827661][ T5870] usb 4-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 482.827685][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 482.827702][ T5870] usb 4-1: config 1 interface 0 has no altsetting 1 [ 482.832107][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 482.832133][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.832151][ T5870] usb 4-1: Product: syz [ 482.832164][ T5870] usb 4-1: Manufacturer: syz [ 482.832176][ T5870] usb 4-1: SerialNumber: syz [ 482.837772][ T992] usb 3-1: config 0 descriptor?? [ 482.879139][ T992] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 483.659016][ T5870] smsusb:smsusb_probe: board id=8, interface number 0 [ 483.659208][ T5870] usb 4-1: selecting invalid altsetting 0 [ 483.659225][ T5870] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 483.659259][ T5870] smsusb 4-1:1.0: probe with driver smsusb failed with error -22 [ 483.869649][ T5870] usb 4-1: USB disconnect, device number 22 [ 484.204826][ T992] usb 3-1: USB disconnect, device number 31 [ 484.244115][ T992] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 484.594529][T10915] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1576'. [ 484.595643][T10915] fuse: Bad value for 'user_id' [ 484.595655][T10915] fuse: Bad value for 'user_id' [ 486.183250][ T5870] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 486.313262][ T5870] usb 5-1: device descriptor read/64, error -71 [ 486.553398][ T5870] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 486.631483][T10938] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1582' sets config #1 [ 486.733468][ T5870] usb 5-1: device descriptor read/64, error -71 [ 486.844478][ T5870] usb usb5-port1: attempt power cycle [ 486.903308][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 487.283276][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.283344][ T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 487.283368][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.305538][ T9] usb 4-1: config 0 descriptor?? [ 487.324943][ T9] option 4-1:0.0: GSM modem (1-port) converter detected [ 487.373290][ T5870] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 487.393726][ T5870] usb 5-1: device descriptor read/8, error -71 [ 487.513257][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 487.628541][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 487.634416][T10948] ptrace attach of "./syz-executor exec"[5793] was attempted by "./syz-executor exec"[10948] [ 487.643471][ T5870] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 487.682498][ T5870] usb 5-1: device descriptor read/8, error -71 [ 487.692071][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.696493][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.696536][ T9] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.696562][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 487.696599][ T9] usb 3-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 487.696623][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 487.696640][ T9] usb 3-1: config 1 interface 0 has no altsetting 1 [ 487.786749][ T5870] usb usb5-port1: unable to enumerate USB device [ 487.820346][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 487.820368][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.820379][ T9] usb 3-1: Product: syz [ 487.820388][ T9] usb 3-1: Manufacturer: syz [ 487.820396][ T9] usb 3-1: SerialNumber: syz [ 488.589829][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 488.589862][ T9] usb 3-1: selecting invalid altsetting 0 [ 488.589879][ T9] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 488.589912][ T9] smsusb 3-1:1.0: probe with driver smsusb failed with error -22 [ 488.607729][ T9] usb 3-1: USB disconnect, device number 32 [ 490.577052][ T5889] usb 4-1: USB disconnect, device number 23 [ 490.578790][ T5889] option 4-1:0.0: device disconnected [ 490.946615][T10987] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 491.043263][ T5889] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 491.173556][ T5889] usb 3-1: device descriptor read/64, error -71 [ 491.593333][ T5889] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 491.913282][ T5889] usb 3-1: device descriptor read/64, error -71 [ 492.033549][ T5889] usb usb3-port1: attempt power cycle [ 492.393263][ T5889] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 492.425676][ T5889] usb 3-1: device descriptor read/8, error -71 [ 492.673320][ T5889] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 492.713231][ T5889] usb 3-1: device descriptor read/8, error -71 [ 492.833236][ T5889] usb usb3-port1: unable to enumerate USB device [ 492.843414][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 493.002790][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 493.004954][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 493.005062][ T9] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 493.005088][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 493.005132][ T9] usb 5-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 493.005158][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 493.005174][ T9] usb 5-1: config 1 interface 0 has no altsetting 1 [ 493.021979][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 493.022010][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.022028][ T9] usb 5-1: Product: syz [ 493.022041][ T9] usb 5-1: Manufacturer: syz [ 493.022054][ T9] usb 5-1: SerialNumber: syz [ 494.173763][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 494.173797][ T9] usb 5-1: selecting invalid altsetting 0 [ 494.173814][ T9] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 494.173848][ T9] smsusb 5-1:1.0: probe with driver smsusb failed with error -22 [ 494.188999][ T9] usb 5-1: USB disconnect, device number 25 [ 494.325440][T11009] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1603'. [ 494.328478][T11009] fuse: Bad value for 'fd' [ 494.783201][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 495.078270][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 495.149883][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.149924][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.149948][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.149994][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 495.150019][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.236783][ T9] usb 3-1: config 0 descriptor?? [ 495.736828][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 495.762767][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input41 [ 495.799002][ T9] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 495.944623][ T9] usb 3-1: USB disconnect, device number 37 [ 496.099245][T11023] fido_id[11023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 496.653127][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 496.717156][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 496.853514][ T5801] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 496.876603][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.876636][ T5889] usb 1-1: config 0 has no interface number 0 [ 496.879443][ T5889] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 496.879474][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.879492][ T5889] usb 1-1: Product: syz [ 496.879500][ T5889] usb 1-1: Manufacturer: syz [ 496.879509][ T5889] usb 1-1: SerialNumber: syz [ 496.884594][ T5889] usb 1-1: config 0 descriptor?? [ 497.023689][ T5801] usb 3-1: device descriptor read/64, error -71 [ 497.110647][ T5889] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 497.128405][ T5889] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 497.128644][ T5889] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 497.128704][ T5889] usb 1-1: media controller created [ 497.188577][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.290353][ T5801] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 497.424013][ T5889] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 497.473256][ T5801] usb 3-1: device descriptor read/64, error -71 [ 497.547205][ T5889] usb 1-1: USB disconnect, device number 6 [ 497.588029][ T5801] usb usb3-port1: attempt power cycle [ 497.883284][ T808] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 497.923238][ T5801] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 497.943852][ T5801] usb 3-1: device descriptor read/8, error -71 [ 498.047420][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 498.048972][ T808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.049038][ T808] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 498.049064][ T808] usb 4-1: too many endpoints for config 1 interface 0 altsetting 196: 144, using maximum allowed: 30 [ 498.049331][ T808] usb 4-1: config 1 interface 0 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 498.049361][ T808] usb 4-1: config 1 interface 0 has no altsetting 0 [ 498.049379][ T808] usb 4-1: config 1 interface 0 has no altsetting 1 [ 498.053049][ T808] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 498.058639][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.058662][ T808] usb 4-1: Product: syz [ 498.058675][ T808] usb 4-1: Manufacturer: syz [ 498.058688][ T808] usb 4-1: SerialNumber: syz [ 498.183287][ T5801] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 498.204161][ T5801] usb 3-1: device descriptor read/8, error -71 [ 498.313818][ T5801] usb usb3-port1: unable to enumerate USB device [ 498.522201][ T808] smsusb:smsusb_probe: board id=8, interface number 0 [ 498.522235][ T808] usb 4-1: selecting invalid altsetting 0 [ 498.522251][ T808] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 498.522284][ T808] smsusb 4-1:1.0: probe with driver smsusb failed with error -22 [ 498.543246][ T808] usb 4-1: USB disconnect, device number 24 [ 499.473229][ T36] audit: type=1326 audit(1771417289.205:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe678c629 code=0x7ffc0000 [ 499.473290][ T36] audit: type=1326 audit(1771417289.205:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe678c629 code=0x7ffc0000 [ 499.473332][ T36] audit: type=1326 audit(1771417289.205:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2fe678c629 code=0x7ffc0000 [ 499.473374][ T36] audit: type=1326 audit(1771417289.205:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe678c629 code=0x7ffc0000 [ 499.473416][ T36] audit: type=1326 audit(1771417289.205:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fe678c629 code=0x7ffc0000 [ 499.473457][ T36] audit: type=1326 audit(1771417289.215:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe678c629 code=0x7ffc0000 [ 499.473501][ T36] audit: type=1326 audit(1771417289.215:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11054 comm="syz.0.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fe678c629 code=0x7ffc0000 [ 500.108373][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 500.114770][T11070] ptrace attach of "./syz-executor exec"[5796] was attempted by "./syz-executor exec"[11070] [ 502.070219][ T808] ------------[ cut here ]------------ [ 502.070236][ T808] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 502.070253][ T808] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:2/808 [ 502.070291][ T808] Modules linked in: [ 502.070313][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.070351][ T808] Tainted: [L]=SOFTLOCKUP [ 502.070358][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.070372][ T808] Workqueue: events drm_fb_helper_damage_work [ 502.070394][ T808] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 502.070416][ T808] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 502.070434][ T808] RSP: 0018:ffffc900044378e0 EFLAGS: 00010246 [ 502.070452][ T808] RAX: 1ffff11004a33e00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 502.070468][ T808] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 502.070483][ T808] RBP: ffffc900044379c8 R08: 0000000000000000 R09: 0000000000000000 [ 502.070497][ T808] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 502.070513][ T808] R13: ffff88802519f000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 502.070528][ T808] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 502.070545][ T808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.070560][ T808] CR2: 00007f64dbcf5800 CR3: 000000000d9ba000 CR4: 00000000003526f0 [ 502.070580][ T808] Call Trace: [ 502.070589][ T808] [ 502.070605][ T808] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 502.070625][ T808] ? rt_spin_unlock+0x14f/0x200 [ 502.070648][ T808] ? __pfx_autoremove_wake_function+0x10/0x10 [ 502.070679][ T808] ? rt_spin_unlock+0x160/0x200 [ 502.070704][ T808] ? drm_vblank_get+0x147/0x260 [ 502.070739][ T808] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 502.070771][ T808] drm_fb_helper_damage_work+0x131/0x6f0 [ 502.070796][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 502.070828][ T808] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 502.070855][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 502.070877][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 502.070904][ T808] process_scheduled_works+0xaec/0x17a0 [ 502.070963][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.070996][ T808] ? assign_work+0x3d5/0x5e0 [ 502.071026][ T808] worker_thread+0xa50/0xfc0 [ 502.071084][ T808] kthread+0x388/0x470 [ 502.071115][ T808] ? __pfx_worker_thread+0x10/0x10 [ 502.071137][ T808] ? __pfx_kthread+0x10/0x10 [ 502.071169][ T808] ret_from_fork+0x51e/0xb90 [ 502.071199][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 502.071223][ T808] ? __switch_to+0xc7d/0x1400 [ 502.071251][ T808] ? __pfx_kthread+0x10/0x10 [ 502.071284][ T808] ret_from_fork_asm+0x1a/0x30 [ 502.071343][ T808] [ 502.071354][ T808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 502.071371][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 502.071398][ T808] Tainted: [L]=SOFTLOCKUP [ 502.071406][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.071419][ T808] Workqueue: events drm_fb_helper_damage_work [ 502.071439][ T808] Call Trace: [ 502.071447][ T808] [ 502.071456][ T808] vpanic+0x1e0/0x670 [ 502.071491][ T808] panic+0xc5/0xd0 [ 502.071519][ T808] ? __pfx_panic+0x10/0x10 [ 502.071559][ T808] ? ret_from_fork_asm+0x1a/0x30 [ 502.071596][ T808] __warn+0x315/0x4a0 [ 502.071623][ T808] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 502.071645][ T808] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 502.071668][ T808] __report_bug+0x29a/0x540 [ 502.071702][ T808] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 502.071723][ T808] ? __pfx___report_bug+0x10/0x10 [ 502.071773][ T808] report_bug_entry+0x19a/0x290 [ 502.071800][ T808] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 502.071818][ T808] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 502.071838][ T808] handle_bug+0xca/0x200 [ 502.071869][ T808] exc_invalid_op+0x1a/0x50 [ 502.071899][ T808] asm_exc_invalid_op+0x1a/0x20 [ 502.071919][ T808] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 502.071939][ T808] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 502.071957][ T808] RSP: 0018:ffffc900044378e0 EFLAGS: 00010246 [ 502.071984][ T808] RAX: 1ffff11004a33e00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 502.071999][ T808] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 502.072015][ T808] RBP: ffffc900044379c8 R08: 0000000000000000 R09: 0000000000000000 [ 502.072028][ T808] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 502.072043][ T808] R13: ffff88802519f000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 502.072082][ T808] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 502.072102][ T808] ? rt_spin_unlock+0x14f/0x200 [ 502.072123][ T808] ? __pfx_autoremove_wake_function+0x10/0x10 [ 502.072152][ T808] ? rt_spin_unlock+0x160/0x200 [ 502.072177][ T808] ? drm_vblank_get+0x147/0x260 [ 502.072212][ T808] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 502.072243][ T808] drm_fb_helper_damage_work+0x131/0x6f0 [ 502.072268][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 502.072297][ T808] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 502.072324][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 502.072354][ T808] ? process_scheduled_works+0xa0f/0x17a0 [ 502.072380][ T808] process_scheduled_works+0xaec/0x17a0 [ 502.072438][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.072470][ T808] ? assign_work+0x3d5/0x5e0 [ 502.072500][ T808] worker_thread+0xa50/0xfc0 [ 502.072557][ T808] kthread+0x388/0x470 [ 502.072587][ T808] ? __pfx_worker_thread+0x10/0x10 [ 502.072610][ T808] ? __pfx_kthread+0x10/0x10 [ 502.072641][ T808] ret_from_fork+0x51e/0xb90 [ 502.072670][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 502.072694][ T808] ? __switch_to+0xc7d/0x1400 [ 502.072722][ T808] ? __pfx_kthread+0x10/0x10 [ 502.072753][ T808] ret_from_fork_asm+0x1a/0x30 [ 502.072803][ T808] [ 502.072963][ T808] Kernel Offset: disabled