last executing test programs: 22m29.118443823s ago: executing program 1 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x478, 0x0, r2, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r3, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r3, r4, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r4, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x478) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x6, 0x44, 0x401, 0x800}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) r9 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r9, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r7, 0xab03) 22m27.96255487s ago: executing program 1 (id=1782): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x0) 22m27.4131382s ago: executing program 1 (id=1783): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000091}], 0x1, 0x40890) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 22m25.118709177s ago: executing program 1 (id=1792): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)) 22m23.69888285s ago: executing program 1 (id=1793): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 22m23.289038305s ago: executing program 1 (id=1798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x10001, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6], 0x8080000, 0xe340}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22m23.001256763s ago: executing program 32 (id=1798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x10001, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6], 0x8080000, 0xe340}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15.376599535s ago: executing program 4 (id=6074): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec50000"], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000048510010006324422d16a5f4c1f3808985434a80f032497112a8dd98ce962f4aab4e5c6ba9b858914e8558b673fa198d355f313f1d5e014d27f533d5df7f90bd96079d83fcb79237a1bba3b60e8e74d8a5198539ea1f3b64ffc79c459d78f22b40fd7bda3a2c96a0bd641b421b585f218d8a31c4956ce9430f1a9c7fd49", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14.716709071s ago: executing program 4 (id=6077): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x80000000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) r3 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x604, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) fcntl$addseals(r3, 0x409, 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0xf0}, 0x1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) 13.323194573s ago: executing program 4 (id=6081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) 13.139398186s ago: executing program 4 (id=6083): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$packet(r2, &(0x7f00000006c0)="ad8ad1c0af45", 0x6, 0x40c0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12.861400119s ago: executing program 4 (id=6085): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000370000000800", @ANYRES32=r1, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x0) 12.608153351s ago: executing program 4 (id=6086): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec50000"], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.334466441s ago: executing program 5 (id=6103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 6.466039971s ago: executing program 3 (id=6105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x3, 0x5004) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xee01, r4) 5.428301541s ago: executing program 3 (id=6107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec5000043"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000048510010006324422d16a5f4c1f3808985434a80f032497112a8dd98ce962f4aab4e5c6ba9b858914e8558b673fa198d355f313f1d5e014d27f533d5df7f90bd96079d83fcb79237a1bba3b60e8e74d8a5198539ea1f3b64ffc79c459d78f22b40fd7bda3a2c96a0bd641b421b585f218d8a31c4956ce9430f1a9c7fd49", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$packet(r3, &(0x7f00000006c0)="ad8ad1c0af45", 0x6, 0x40c0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.298108835s ago: executing program 5 (id=6108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x6, 0x44, 0x401, 0x800}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020}, 0x2033) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xb8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/68, 0x44}], 0x1, 0xde, 0x20004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 4.745815909s ago: executing program 3 (id=6110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @loopback}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) shutdown(r0, 0x1) 4.487655187s ago: executing program 2 (id=6112): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) 4.419490432s ago: executing program 2 (id=6113): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec5000043"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000048510010006324422d16a5f4c1f3808985434a80f032497112a8dd98ce962f4aab4e5c6ba9b858914e8558b673fa198d355f313f1d5e014d27f533d5df7f90bd96079d83fcb79237a1bba3b60e8e74d8a5198539ea1f3b64ffc79c459d78f22b40fd7bda3a2c96a0bd641b421b585f218d8a31c4956ce9430f1a9c7fd49", @ANYRES32=r2, @ANYBLOB="000000000000000418000042000000001000000000000200009500002200000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008817741b72d5bab9af1b25625211d3c0fabb682b1bc5a7ee2cc52732134bb3532e726a409b48e5907f4a93a2d2e3a37f71209799df9ad79a89571875f82debd8d4bf2ae558d18527e60c5edd22f4f574d781edcc1c8cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.793201818s ago: executing program 0 (id=6114): open(0x0, 0x2a4c0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x3404c8d4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3.701718054s ago: executing program 5 (id=6115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 3.699652489s ago: executing program 0 (id=6116): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec5000043"], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000048510010006324422d16a5f4c1f3808985434a80f032497112a8dd98ce962f4aab4e5c6ba9b858914e8558b673fa198d355f313f1d5e014d27f533d5df7f90bd96079d83fcb79237a1bba3b60e8e74d8a5198539ea1f3b64ffc79c459d78f22b40fd7bda3a2c96a0bd641b421b585f218d8a31c4956ce9430f1a9c7fd49", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$packet(r2, &(0x7f00000006c0)="ad8ad1c0af45", 0x6, 0x40c0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.260511288s ago: executing program 2 (id=6117): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$packet(r2, &(0x7f00000006c0)="ad8ad1c0af45", 0x6, 0x40c0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.173196932s ago: executing program 0 (id=6118): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec5000043"], 0x18}}], 0x1, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendto$packet(r2, &(0x7f00000006c0)="ad8ad1c0af45", 0x6, 0x40c0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.156520064s ago: executing program 3 (id=6119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x3, 0x5004) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xee01, r4) 3.064093566s ago: executing program 2 (id=6120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[0xee01]) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 3.04739704s ago: executing program 5 (id=6121): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000006a000000000000000f20e035200000000f22e00f20d835080000000f22dc", @ANYRESHEX=r1, @ANYRES32=r0], 0x82}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.055325978s ago: executing program 3 (id=6122): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) 2.03980771s ago: executing program 0 (id=6123): socket(0x10, 0x3, 0x0) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbef6, 0x8031, r0, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r9, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x5, 0x2, 0xd2}) 1.786520989s ago: executing program 3 (id=6124): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 1.584854699s ago: executing program 2 (id=6125): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000881, 0x0, 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x21, 0xffffffffffffffff, 0x0}]) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, r3}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1.147600779s ago: executing program 5 (id=6126): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec5000043"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000048510010006324422d16a5f4c1f3808985434a80f032497112a8dd98ce962f4aab4e5c6ba9b858914e8558b673fa198d355f313f1d5e014d27f533d5df7f90bd96079d83fcb79237a1bba3b60e8e74d8a5198539ea1f3b64ffc79c459d78f22b40fd7bda3a2c96a0bd641b421b585f218d8a31c4956ce9430f1a9c7fd49", @ANYRES32=r2, @ANYBLOB="000000000000000418000042000000001000000000000200009500002200000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008817741b72d5bab9af1b25625211d3c0fabb682b1bc5a7ee2cc52732134bb3532e726a409b48e5907f4a93a2d2e3a37f71209799df9ad79a89571875f82debd8d4bf2ae558d18527e60c5edd22f4f574d781edcc1c8cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.059634895s ago: executing program 0 (id=6127): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) 745.171028ms ago: executing program 5 (id=6128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 265.863878ms ago: executing program 2 (id=6129): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b", 0x1d}], 0x1}, 0x24040050) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 0 (id=6130): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$packet(r2, &(0x7f00000006c0)="ad8ad1c0af45", 0x6, 0x40c0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 4.615275][T24980] tipc: Enabling of bearer rejected, failed to enable media [ 1494.990896][T22610] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1495.004038][ T5167] Bluetooth: hci2: command 0xfc11 tx timeout [ 1495.276805][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1495.306596][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1495.340030][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1495.359832][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1495.385661][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1495.405634][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1495.419037][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1495.445056][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1495.635088][T24997] No control pipe specified [ 1495.670559][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1495.691765][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1495.710169][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1495.727071][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1495.740204][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1495.755124][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1495.767602][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1495.777111][ T9] pwc: Registered as video103. [ 1495.806230][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37 [ 1495.844993][ T9] usb 6-1: USB disconnect, device number 33 [ 1495.990779][ T5962] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1496.015196][ T30] audit: type=1400 audit(1754388965.157:538): avc: denied { write } for pid=25014 comm="syz.3.5201" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1496.036730][ T30] audit: type=1400 audit(1754388965.157:539): avc: denied { open } for pid=25014 comm="syz.3.5201" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1496.059114][ T30] audit: type=1400 audit(1754388965.157:540): avc: denied { read append } for pid=25014 comm="syz.3.5201" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1496.172552][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.185257][T25020] tipc: Enabled bearer , priority 0 [ 1496.193866][T25020] syzkaller0: entered promiscuous mode [ 1496.199484][T25020] syzkaller0: entered allmulticast mode [ 1496.207394][ T5962] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1496.222566][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.340245][ T5962] usb 1-1: config 0 descriptor?? [ 1496.452650][T25020] tipc: Resetting bearer [ 1496.555042][T25019] tipc: Resetting bearer [ 1496.586087][T25019] tipc: Disabling bearer [ 1496.756909][T25031] No control pipe specified [ 1496.855212][ T5962] lenovo 0003:17EF:6047.0027: unknown main item tag 0x1 [ 1496.906414][ T5962] lenovo 0003:17EF:6047.0027: item fetching failed at offset 2/5 [ 1496.914726][ T5962] lenovo 0003:17EF:6047.0027: hid_parse failed [ 1496.924116][ T5962] lenovo 0003:17EF:6047.0027: probe with driver lenovo failed with error -22 [ 1497.033950][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1497.220918][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1497.296536][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1497.438578][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.461507][ T9] usb 6-1: config 0 has no interface number 0 [ 1497.468428][ T9] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1497.482242][ T9] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1497.497955][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1497.507201][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.515660][ T9] usb 6-1: Product: syz [ 1497.519864][ T9] usb 6-1: Manufacturer: syz [ 1497.524825][ T9] usb 6-1: SerialNumber: syz [ 1497.534059][ T9] usb 6-1: config 0 descriptor?? [ 1498.169844][ T9] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1498.184786][ T9] cx231xx 6-1:0.1: Not found matching IAD interface [ 1498.204814][ T9] usb 6-1: USB disconnect, device number 34 [ 1499.198603][ T9] usb 1-1: USB disconnect, device number 82 [ 1499.466166][ T5962] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1499.711166][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 1499.769163][ T5962] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1499.816808][ T5962] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.829570][ T5962] usb 6-1: config 0 has no interface number 0 [ 1499.842683][ T5962] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1499.856840][ T5962] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1499.866319][ T5962] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1499.875918][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.884115][ T5962] usb 6-1: Product: syz [ 1499.888301][ T5962] usb 6-1: Manufacturer: syz [ 1499.892977][ T5962] usb 6-1: SerialNumber: syz [ 1499.902699][ T5962] usb 6-1: config 0 descriptor?? [ 1499.976133][T25067] No control pipe specified [ 1500.169402][ T5962] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1500.181252][ T5962] cx231xx 6-1:0.1: Not found matching IAD interface [ 1500.332060][T19954] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1500.391898][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1500.543709][T19954] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.554425][T19954] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1500.565624][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.567574][T19954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.587789][T19954] usb 4-1: config 0 descriptor?? [ 1500.596752][T19954] pwc: Askey VC010 type 2 USB webcam detected. [ 1500.618315][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.633679][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1500.657286][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.672054][ T9] usb 3-1: config 0 descriptor?? [ 1501.001257][T19954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1501.009791][T19954] pwc: recv_control_msg error -32 req 02 val 2700 [ 1501.020913][T19954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1501.031344][T19954] pwc: recv_control_msg error -32 req 04 val 1000 [ 1501.049918][T19954] pwc: recv_control_msg error -32 req 04 val 1300 [ 1501.057027][T19954] pwc: recv_control_msg error -32 req 04 val 1400 [ 1501.064185][T19954] pwc: recv_control_msg error -32 req 02 val 2000 [ 1501.081634][T24708] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1501.112413][ T9] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1501.219193][ T5962] usb 6-1: USB disconnect, device number 35 [ 1501.270839][T24708] usb 5-1: Using ep0 maxpacket: 32 [ 1501.284585][T19954] pwc: recv_control_msg error -71 req 04 val 1500 [ 1501.298784][T19954] pwc: recv_control_msg error -71 req 02 val 2500 [ 1501.298886][T24708] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1501.317767][ T9] cp2112 0003:10C4:EA90.0028: Part Number: 0x6A Device Version: 0xAF [ 1501.319181][T19954] pwc: recv_control_msg error -71 req 02 val 2400 [ 1501.470386][T24708] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1501.514146][T19954] pwc: recv_control_msg error -71 req 02 val 2600 [ 1501.522193][T24708] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1501.526907][ T9] cp2112 0003:10C4:EA90.0028: error requesting SMBus config [ 1501.532010][T19954] pwc: recv_control_msg error -71 req 02 val 2900 [ 1501.555045][T19954] pwc: recv_control_msg error -71 req 02 val 2800 [ 1501.563508][T24708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1501.574933][T24708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1501.575312][T19954] pwc: recv_control_msg error -71 req 04 val 1100 [ 1501.593690][T24708] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1501.617362][T19954] pwc: recv_control_msg error -71 req 04 val 1200 [ 1501.941239][T24708] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1501.957037][T19954] pwc: Registered as video103. [ 1501.966124][T24708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.009088][T19954] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 1502.043478][T24708] usb 5-1: config 0 descriptor?? [ 1502.059481][ T9] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -32 [ 1502.107396][ T9] usb 3-1: USB disconnect, device number 78 [ 1502.145071][T19954] usb 4-1: USB disconnect, device number 74 [ 1502.295246][T24708] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1502.319965][T25097] autofs: Bad value for 'fd' [ 1502.356528][T24708] usb 5-1: USB disconnect, device number 78 [ 1502.370198][T24708] usblp0: removed [ 1503.070847][T19954] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1503.231726][T24708] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1503.240552][T19954] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1503.257143][T19954] usb 6-1: config 8 has no interface number 0 [ 1503.359128][T19954] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1503.384080][T19954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.411137][T24708] usb 5-1: Using ep0 maxpacket: 32 [ 1503.423980][T19954] usb 6-1: Product: syz [ 1503.428504][T19954] usb 6-1: Manufacturer: syz [ 1503.436942][T24708] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1503.450936][T19954] usb 6-1: SerialNumber: syz [ 1503.477253][T24708] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1503.510894][T24708] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1503.520931][T24708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1503.535495][T24708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1503.551284][T24708] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1503.564544][T24708] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1503.573722][T24708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.583874][T24708] usb 5-1: config 0 descriptor?? [ 1503.740823][ T5895] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1503.758965][T19954] usb 6-1: USB disconnect, device number 36 [ 1503.805098][T25084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.843174][T25084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.868233][T24708] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1503.894226][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.951021][ T5895] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1503.960213][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.974178][ T5895] usb 1-1: config 0 descriptor?? [ 1503.990181][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 1504.002403][ C1] usblp0: nonzero read bulk status received: -71 [ 1504.037398][T25084] usblp0: error -71 reading from printer [ 1504.053212][T20322] usb 5-1: USB disconnect, device number 79 [ 1504.087423][T20322] usblp0: removed [ 1504.391083][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1504.408558][ T5895] pwc: recv_control_msg error -32 req 02 val 2700 [ 1504.428193][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1504.518231][ T5895] pwc: recv_control_msg error -32 req 04 val 1000 [ 1504.530254][ T5895] pwc: recv_control_msg error -32 req 04 val 1300 [ 1504.545072][ T5895] pwc: recv_control_msg error -32 req 04 val 1400 [ 1504.555080][ T5895] pwc: recv_control_msg error -32 req 02 val 2000 [ 1504.766034][ T5895] pwc: recv_control_msg error -71 req 04 val 1500 [ 1504.784906][ T5895] pwc: recv_control_msg error -71 req 02 val 2500 [ 1504.797486][ T5895] pwc: recv_control_msg error -71 req 02 val 2400 [ 1504.836388][ T5895] pwc: recv_control_msg error -71 req 02 val 2600 [ 1504.836947][T25151] vlan2: entered promiscuous mode [ 1504.858871][T25151] vlan2: entered allmulticast mode [ 1504.873050][T25151] hsr_slave_1: entered allmulticast mode [ 1504.878928][ T5895] pwc: recv_control_msg error -71 req 02 val 2900 [ 1504.886442][ T5895] pwc: recv_control_msg error -71 req 02 val 2800 [ 1504.899682][ T5895] pwc: recv_control_msg error -71 req 04 val 1100 [ 1504.913717][ T5895] pwc: recv_control_msg error -71 req 04 val 1200 [ 1504.935381][ T5895] pwc: Registered as video103. [ 1504.944903][T25151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5248'. [ 1505.005923][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 1505.131017][ T5895] usb 1-1: USB disconnect, device number 83 [ 1505.400813][T20322] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1505.470825][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1505.562142][T20322] usb 4-1: Using ep0 maxpacket: 16 [ 1505.573529][T20322] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1505.589190][T20322] usb 4-1: config 0 has no interface number 0 [ 1505.596524][T20322] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1505.613010][T20322] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1505.624659][T20322] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1505.635692][T20322] usb 4-1: Product: syz [ 1505.637481][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.656115][ T5895] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1505.664509][T20322] usb 4-1: SerialNumber: syz [ 1505.677138][T20322] usb 4-1: config 0 descriptor?? [ 1505.687448][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1505.743310][T20322] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1505.759811][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.823586][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 1505.889717][ T5895] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1505.929352][ T9] usb 3-1: config 0 descriptor?? [ 1506.089091][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1506.099180][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1506.193771][ T5895] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1506.340364][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.529166][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1506.553041][ T5895] usb 1-1: config 0 descriptor?? [ 1506.596374][ T1206] usb 4-1: USB disconnect, device number 75 [ 1506.619574][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1506.657369][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1506.679926][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1506.703463][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1506.721070][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1506.736345][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1506.749928][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1506.763720][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1506.776241][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1506.784059][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1506.791373][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1507.009072][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1507.019623][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1507.032897][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1507.049057][ T9] pwc: Registered as video103. [ 1507.066613][ T5895] usbhid 1-1:0.0: can't add hid device: -71 [ 1507.074952][ T5895] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1507.092451][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 1507.120312][ T5895] usb 1-1: USB disconnect, device number 84 [ 1507.141958][ T9] usb 3-1: USB disconnect, device number 79 [ 1514.460998][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1514.470786][ T5895] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1514.674320][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1514.704435][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1514.712707][T25229] syz.3.5275 (25229): drop_caches: 1 [ 1514.718388][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.730761][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.748755][ T5895] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1514.766017][ T9] usb 5-1: config 0 has no interface number 0 [ 1514.780684][ T9] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1514.800629][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.813587][ T5895] usb 1-1: config 0 descriptor?? [ 1514.850887][T24708] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1514.850986][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1514.894785][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1514.903916][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.912129][ T9] usb 5-1: Product: syz [ 1514.916302][ T9] usb 5-1: Manufacturer: syz [ 1514.921506][ T9] usb 5-1: SerialNumber: syz [ 1514.944454][ T9] usb 5-1: config 0 descriptor?? [ 1515.012672][T24708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.040803][T24708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.057400][T24708] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1515.082773][T24708] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1515.100474][T24708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.131233][T24708] usb 3-1: config 0 descriptor?? [ 1515.181560][ T9] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1515.190844][ T9] cx231xx 5-1:0.1: Not found matching IAD interface [ 1515.205570][ T9] usb 5-1: USB disconnect, device number 80 [ 1515.284353][ T5895] lenovo 0003:17EF:6047.0029: item fetching failed at offset 3/5 [ 1515.292643][ T5895] lenovo 0003:17EF:6047.0029: hid_parse failed [ 1515.298873][ T5895] lenovo 0003:17EF:6047.0029: probe with driver lenovo failed with error -22 [ 1515.486997][T25271] 9pnet_fd: Insufficient options for proto=fd [ 1515.548217][T24708] usbhid 3-1:0.0: can't add hid device: -71 [ 1515.556703][T24708] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1515.567970][T24708] usb 3-1: USB disconnect, device number 80 [ 1515.661126][ T5895] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1515.821100][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 1515.827650][ T5895] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1515.835712][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.849157][ T5895] usb 5-1: config 0 has no interface number 0 [ 1515.857531][ T5895] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1515.874888][ T5895] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1515.887634][ T5895] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1515.900261][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.908338][ T5895] usb 5-1: Product: syz [ 1515.915969][ T5895] usb 5-1: Manufacturer: syz [ 1515.920568][ T5895] usb 5-1: SerialNumber: syz [ 1515.927529][ T5895] usb 5-1: config 0 descriptor?? [ 1516.158256][ T5895] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1516.167619][ T5895] cx231xx 5-1:0.1: Not found matching IAD interface [ 1516.220853][T24708] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1516.877119][T24708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.292385][T24708] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1517.305192][T24708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.320544][T24708] usb 4-1: config 0 descriptor?? [ 1517.324874][ T9] usb 5-1: USB disconnect, device number 81 [ 1517.331022][T24708] pwc: Askey VC010 type 2 USB webcam detected. [ 1517.397106][ T5895] usb 1-1: USB disconnect, device number 85 [ 1517.745257][T24708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1518.189739][T24708] pwc: recv_control_msg error -32 req 02 val 2700 [ 1518.216663][T24708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1518.225880][T24708] pwc: recv_control_msg error -32 req 04 val 1000 [ 1518.235643][T24708] pwc: recv_control_msg error -32 req 04 val 1300 [ 1518.246413][T24708] pwc: recv_control_msg error -32 req 04 val 1400 [ 1518.255227][T24708] pwc: recv_control_msg error -32 req 02 val 2000 [ 1518.262951][T24708] pwc: recv_control_msg error -32 req 02 val 2100 [ 1518.270411][T24708] pwc: recv_control_msg error -32 req 04 val 1500 [ 1518.278976][T24708] pwc: recv_control_msg error -32 req 02 val 2500 [ 1518.288239][T24708] pwc: recv_control_msg error -32 req 02 val 2400 [ 1518.290851][ T5895] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1518.296435][T24708] pwc: recv_control_msg error -32 req 02 val 2600 [ 1518.391438][T24708] pwc: recv_control_msg error -32 req 02 val 2900 [ 1518.516650][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 1518.542131][ T5895] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1518.563225][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1518.591012][ T5895] usb 3-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1518.602532][T24708] pwc: recv_control_msg error -71 req 04 val 1100 [ 1518.609503][T24708] pwc: recv_control_msg error -71 req 04 val 1200 [ 1518.620676][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.629751][T24708] pwc: Registered as video103. [ 1518.640907][ T1206] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1518.668810][T24708] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 1518.683107][ T5895] usb 3-1: config 0 descriptor?? [ 1518.771906][T24708] usb 4-1: USB disconnect, device number 76 [ 1518.844275][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.886573][ T1206] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.915911][ T1206] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1518.931561][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.944771][ T1206] usb 6-1: config 0 descriptor?? [ 1519.133595][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 1519.139578][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1519.170560][ T5895] usb 3-1: USB disconnect, device number 81 [ 1519.433493][ T1206] usbhid 6-1:0.0: can't add hid device: -71 [ 1519.439923][ T1206] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1519.455498][ T1206] usb 6-1: USB disconnect, device number 37 [ 1519.846658][T25322] syz.3.5308 (25322): drop_caches: 1 [ 1520.710030][T25322] syz.3.5308 (25322): drop_caches: 1 [ 1521.966968][T22610] Bluetooth: hci0: command 0x0406 tx timeout [ 1522.152598][ T9] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1522.454213][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1522.527321][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1522.826005][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1522.898574][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1523.448026][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.499542][ T9] usb 3-1: Product: syz [ 1523.503918][ T9] usb 3-1: Manufacturer: syz [ 1523.508513][ T9] usb 3-1: SerialNumber: syz [ 1523.519590][ T9] usb 3-1: config 0 descriptor?? [ 1523.562065][ T9] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1523.977233][ T5962] usb 3-1: USB disconnect, device number 82 [ 1524.688978][T25376] cgroup: noprefix used incorrectly [ 1524.703986][T25376] netlink: 'syz.3.5325': attribute type 11 has an invalid length. [ 1524.916543][ T43] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1525.522423][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.589141][ T43] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1525.608333][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.633718][ T43] usb 6-1: config 0 descriptor?? [ 1525.644227][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 1526.061851][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1526.118920][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 1526.138260][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1526.164670][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 1526.173506][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 1526.182013][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 1526.189029][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 1526.197531][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 1526.217509][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 1526.237308][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 1526.265333][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 1526.291362][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 1526.324355][ T43] pwc: recv_control_msg error -32 req 02 val 2900 [ 1526.545585][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 1526.565268][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 1526.644949][ T43] pwc: Registered as video103. [ 1526.675411][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input42 [ 1526.838985][ T43] usb 6-1: USB disconnect, device number 38 [ 1528.020484][T25410] syz.4.5334 (25410): drop_caches: 1 [ 1528.338972][T25410] syz.4.5334 (25410): drop_caches: 1 [ 1530.064601][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5342'. [ 1531.858921][T25444] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1532.090813][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1532.320969][ T43] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1532.330761][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1532.372237][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1532.380687][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1532.399606][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1532.411149][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1532.432954][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1532.444212][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1532.480896][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1532.481204][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1532.540956][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.595201][ T9] usb 6-1: config 0 descriptor?? [ 1532.598728][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.632454][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1532.720347][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1532.729542][ T5962] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1532.740913][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.760760][ T43] usb 1-1: Product: syz [ 1532.767630][ T43] usb 1-1: Manufacturer: syz [ 1532.788386][ T43] usb 1-1: SerialNumber: syz [ 1532.812512][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1532.866796][ T9] usb 6-1: USB disconnect, device number 39 [ 1532.885207][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.906121][ T5962] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1532.921319][ T9] usblp0: removed [ 1532.966952][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.993904][ T5962] usb 3-1: config 0 descriptor?? [ 1533.022849][ T5962] pwc: Askey VC010 type 2 USB webcam detected. [ 1533.219271][ T43] usb 1-1: cannot find UAC_HEADER [ 1533.266384][ T43] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1533.281028][ T43] usb 1-1: USB disconnect, device number 86 [ 1533.341355][T23435] udevd[23435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.382273][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1533.389969][ T5895] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1533.416193][ T5962] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1533.424218][ T5962] pwc: recv_control_msg error -32 req 02 val 2700 [ 1533.434553][ T5962] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1533.442562][ T5962] pwc: recv_control_msg error -32 req 04 val 1000 [ 1533.449745][ T5962] pwc: recv_control_msg error -32 req 04 val 1300 [ 1533.462163][ T5962] pwc: recv_control_msg error -32 req 04 val 1400 [ 1533.469062][ T5962] pwc: recv_control_msg error -32 req 02 val 2000 [ 1533.477426][ T5962] pwc: recv_control_msg error -32 req 02 val 2100 [ 1533.484410][ T5962] pwc: recv_control_msg error -32 req 04 val 1500 [ 1533.494181][ T5962] pwc: recv_control_msg error -32 req 02 val 2500 [ 1533.501863][ T5962] pwc: recv_control_msg error -32 req 02 val 2400 [ 1533.509311][ T5962] pwc: recv_control_msg error -32 req 02 val 2600 [ 1533.522028][ T5962] pwc: recv_control_msg error -32 req 02 val 2900 [ 1533.571046][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1533.576286][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 1533.583504][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1533.592133][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1533.601615][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.613428][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1533.623026][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1533.624878][T25479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer. [ 1533.632124][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1533.663583][ T5895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1533.674153][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.684652][ T5895] usb 4-1: Product: syz [ 1533.688813][ T5895] usb 4-1: Manufacturer: syz [ 1533.693502][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1533.703495][ T5895] usb 4-1: SerialNumber: syz [ 1533.709145][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1533.724169][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1533.729934][ T5962] pwc: recv_control_msg error -71 req 04 val 1100 [ 1533.736584][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.746984][ T5962] pwc: recv_control_msg error -71 req 04 val 1200 [ 1533.750970][ T9] usb 6-1: config 0 descriptor?? [ 1533.776178][ T5962] pwc: Registered as video103. [ 1533.785991][ T5962] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 1533.819128][ T5962] usb 3-1: USB disconnect, device number 83 [ 1533.910849][ T43] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1533.990494][T25446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.015475][T25446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.041444][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1534.069652][ T9] usb 6-1: USB disconnect, device number 40 [ 1534.082125][ T43] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1534.085708][ T9] usblp0: removed [ 1534.100781][ T43] usb 5-1: config 8 has no interface number 0 [ 1534.122330][ T43] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1534.139951][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.239588][ T43] usb 5-1: Product: syz [ 1534.281544][ T43] usb 5-1: Manufacturer: syz [ 1534.339492][ T43] usb 5-1: SerialNumber: syz [ 1534.581939][ T5895] usb 4-1: cannot find UAC_HEADER [ 1534.605588][ T5895] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1534.617291][ T5895] usb 4-1: USB disconnect, device number 77 [ 1534.638924][T23435] udevd[23435]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1534.829480][ T43] usb 5-1: USB disconnect, device number 82 [ 1534.866711][T25490] syz_tun: entered allmulticast mode [ 1535.020807][ T1206] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1535.266210][ T1206] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1535.662689][ T1206] usb 3-1: config 8 has no interface number 0 [ 1535.679335][ T1206] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1535.706954][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.717179][ T1206] usb 3-1: Product: syz [ 1535.721621][ T1206] usb 3-1: Manufacturer: syz [ 1535.726256][ T1206] usb 3-1: SerialNumber: syz [ 1535.898215][ T43] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1535.969261][ T1206] usb 3-1: USB disconnect, device number 84 [ 1536.190897][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1537.283988][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1537.313352][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.350543][ T43] usb 6-1: config 0 has no interface number 0 [ 1537.496920][ T43] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1537.507805][ T43] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1537.522271][ T43] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1537.531817][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.539924][ T43] usb 6-1: Product: syz [ 1537.544232][ T43] usb 6-1: Manufacturer: syz [ 1537.551888][ T43] usb 6-1: SerialNumber: syz [ 1538.730290][ T43] usb 6-1: config 0 descriptor?? [ 1539.496831][ T43] usb 6-1: can't set config #0, error -71 [ 1539.518253][ T43] usb 6-1: USB disconnect, device number 41 [ 1539.828445][T25537] vlan2: entered promiscuous mode [ 1539.837518][T25537] vlan2: entered allmulticast mode [ 1539.853651][T25537] hsr_slave_1: entered allmulticast mode [ 1539.906820][T25540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1539.914362][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5377'. [ 1539.947235][ T9] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1539.980781][ T43] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1540.112193][ T9] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1540.120606][ T9] usb 3-1: config 8 has no interface number 0 [ 1540.169553][ T43] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1540.414606][ T9] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1540.433894][ T43] usb 6-1: config 8 has no interface number 0 [ 1540.433905][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.433925][ T9] usb 3-1: Product: syz [ 1540.474665][ T9] usb 3-1: Manufacturer: syz [ 1540.486625][ T9] usb 3-1: SerialNumber: syz [ 1540.498369][ T43] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1540.540867][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.558063][ T43] usb 6-1: Product: syz [ 1540.578245][ T43] usb 6-1: Manufacturer: syz [ 1540.588351][ T43] usb 6-1: SerialNumber: syz [ 1540.733898][ T9] usb 3-1: USB disconnect, device number 85 [ 1541.489117][ T43] usb 6-1: USB disconnect, device number 42 [ 1541.503199][T25554] syz_tun: entered allmulticast mode [ 1541.817080][T25553] syz_tun: left allmulticast mode [ 1543.113028][ T2923] Bluetooth: hci2: Frame reassembly failed (-84) [ 1543.423442][T25575] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5390'. [ 1543.942916][ T1206] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1544.508540][ T1206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.707776][ T1206] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1544.720067][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.784290][ T1206] usb 4-1: config 0 descriptor?? [ 1544.804055][ T1206] pwc: Askey VC010 type 2 USB webcam detected. [ 1544.980973][ T5895] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1545.150917][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 1545.156049][T22610] Bluetooth: hci2: command 0xfc11 tx timeout [ 1545.163701][ T5167] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1545.190318][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.200934][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.260132][ T1206] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1545.274764][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1545.311054][ T5902] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1545.318777][ T1206] pwc: recv_control_msg error -32 req 02 val 2700 [ 1545.328142][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.339596][ T5895] usb 6-1: Product: syz [ 1545.344191][ T1206] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1545.350607][ T5895] usb 6-1: Manufacturer: syz [ 1545.355677][ T5895] usb 6-1: SerialNumber: syz [ 1545.365894][ T1206] pwc: recv_control_msg error -32 req 04 val 1000 [ 1545.475779][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.488806][ T5902] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1545.518336][ T1206] pwc: recv_control_msg error -32 req 04 val 1300 [ 1545.540797][ T5902] usb 5-1: config 8 has no interface number 0 [ 1545.567853][ T5902] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1545.577642][ T1206] pwc: recv_control_msg error -32 req 04 val 1400 [ 1545.588304][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.598488][ T5902] usb 5-1: Product: syz [ 1545.602799][ T5902] usb 5-1: Manufacturer: syz [ 1545.607540][ T1206] pwc: recv_control_msg error -32 req 02 val 2000 [ 1545.615132][ T5902] usb 5-1: SerialNumber: syz [ 1545.846514][ T5895] usb 6-1: cannot find UAC_HEADER [ 1545.852245][ T1206] pwc: recv_control_msg error -71 req 04 val 1500 [ 1545.998528][ T1206] pwc: recv_control_msg error -71 req 02 val 2500 [ 1546.008330][ T5902] usb 5-1: USB disconnect, device number 83 [ 1546.025216][ T1206] pwc: recv_control_msg error -71 req 02 val 2400 [ 1546.061367][ T5895] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1546.077748][ T1206] pwc: recv_control_msg error -71 req 02 val 2600 [ 1546.143687][ T1206] pwc: recv_control_msg error -71 req 02 val 2900 [ 1546.273295][T24637] Bluetooth: hci2: Frame reassembly failed (-84) [ 1546.386167][ T1206] pwc: recv_control_msg error -71 req 02 val 2800 [ 1546.404117][ T1206] pwc: recv_control_msg error -71 req 04 val 1100 [ 1546.423897][ T1206] pwc: recv_control_msg error -71 req 04 val 1200 [ 1546.560300][T24708] usb 6-1: USB disconnect, device number 43 [ 1546.560548][ T1206] pwc: Registered as video103. [ 1546.589641][T23435] udevd[23435]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1546.601158][ T1206] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 1547.173459][ T1206] usb 4-1: USB disconnect, device number 78 [ 1547.550855][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1547.736437][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.050826][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.066377][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1548.076979][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.094642][ T9] usb 5-1: config 0 descriptor?? [ 1548.191873][T22610] Bluetooth: hci2: command 0xfc11 tx timeout [ 1548.211545][ T5167] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1548.625913][ T5988] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1548.636525][ T9] cp2112 0003:10C4:EA90.002A: item fetching failed at offset 5/7 [ 1548.703969][ T9] cp2112 0003:10C4:EA90.002A: parse failed [ 1548.762765][ T9] cp2112 0003:10C4:EA90.002A: probe with driver cp2112 failed with error -22 [ 1548.802145][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.821060][ T5988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.849255][ T5988] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1548.882278][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.921292][ T5988] usb 4-1: config 0 descriptor?? [ 1548.971067][T19954] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1549.006833][T25638] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5410'. [ 1549.016195][T25638] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5410'. [ 1549.131560][T25641] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5410'. [ 1549.138126][T19954] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1549.153776][T25641] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5410'. [ 1549.174956][T25641] netlink: 'syz.5.5410': attribute type 33 has an invalid length. [ 1549.186682][T19954] usb 1-1: config 8 has no interface number 0 [ 1549.193796][T25641] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5410'. [ 1549.195608][T19954] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1549.221209][T19954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.229344][T19954] usb 1-1: Product: syz [ 1549.237093][T19954] usb 1-1: Manufacturer: syz [ 1549.242529][T19954] usb 1-1: SerialNumber: syz [ 1549.400404][ T5988] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1549.506764][T19954] usb 1-1: USB disconnect, device number 87 [ 1549.596832][ T5988] cp2112 0003:10C4:EA90.002B: Part Number: 0x00 Device Version: 0x00 [ 1549.740904][ T5895] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1549.804465][ T5988] cp2112 0003:10C4:EA90.002B: error requesting SMBus config [ 1549.818937][ T5988] cp2112 0003:10C4:EA90.002B: probe with driver cp2112 failed with error -32 [ 1549.841597][ T5988] usb 4-1: USB disconnect, device number 79 [ 1549.921270][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 1549.929489][ T5895] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1549.940450][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.948892][ T5895] usb 3-1: Product: syz [ 1549.954004][ T5895] usb 3-1: Manufacturer: syz [ 1549.958599][ T5895] usb 3-1: SerialNumber: syz [ 1549.965671][ T5895] usb 3-1: config 0 descriptor?? [ 1549.972205][ T5895] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1550.140788][ T1206] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1550.176275][ T5895] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 1550.313162][ T1206] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1550.323383][ T1206] usb 6-1: config 8 has no interface number 0 [ 1550.331673][ T1206] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1550.341776][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.349755][ T1206] usb 6-1: Product: syz [ 1550.354093][ T1206] usb 6-1: Manufacturer: syz [ 1550.359238][ T1206] usb 6-1: SerialNumber: syz [ 1550.560770][ T5988] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1550.646025][ T1206] usb 6-1: USB disconnect, device number 44 [ 1551.102058][ T5902] usb 5-1: USB disconnect, device number 84 [ 1551.130163][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.154401][ T5988] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1551.176773][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.211982][ T5988] usb 1-1: config 0 descriptor?? [ 1552.229402][ T5988] pwc: Askey VC010 type 2 USB webcam detected. [ 1552.620238][ T1206] usb 3-1: USB disconnect, device number 86 [ 1552.721244][ T5988] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1552.740136][ T5988] pwc: recv_control_msg error -32 req 02 val 2700 [ 1552.772420][ T5988] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1552.821023][ T5988] pwc: recv_control_msg error -32 req 04 val 1000 [ 1552.873441][ T5988] pwc: recv_control_msg error -32 req 04 val 1300 [ 1552.891016][ T5988] pwc: recv_control_msg error -32 req 04 val 1400 [ 1552.923962][ T5988] pwc: recv_control_msg error -32 req 02 val 2000 [ 1553.259502][ T5988] pwc: recv_control_msg error -71 req 04 val 1500 [ 1553.283777][ T5988] pwc: recv_control_msg error -71 req 02 val 2500 [ 1553.326435][ T5988] pwc: recv_control_msg error -71 req 02 val 2400 [ 1553.368164][ T5988] pwc: recv_control_msg error -71 req 02 val 2600 [ 1553.534026][ T5988] pwc: recv_control_msg error -71 req 02 val 2900 [ 1553.556996][ T5988] pwc: recv_control_msg error -71 req 02 val 2800 [ 1553.584534][ T5988] pwc: recv_control_msg error -71 req 04 val 1100 [ 1553.594999][ T5988] pwc: recv_control_msg error -71 req 04 val 1200 [ 1553.613847][ T5988] pwc: Registered as video103. [ 1553.649987][ T5988] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 1553.718169][ T5988] usb 1-1: USB disconnect, device number 88 [ 1554.069335][T25700] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5427'. [ 1554.258184][T25712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5432'. [ 1554.390947][ T5988] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1554.650863][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 1554.661793][ T5988] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1554.678317][ T5988] usb 1-1: config 0 has no interface number 0 [ 1554.699649][ T5988] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1554.763440][ T5988] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1554.774738][ T5988] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1554.793224][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.814179][ T5988] usb 1-1: Product: syz [ 1554.826512][ T5988] usb 1-1: Manufacturer: syz [ 1554.848195][ T5988] usb 1-1: SerialNumber: syz [ 1554.872286][ T5988] usb 1-1: config 0 descriptor?? [ 1554.933505][T25732] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5440'. [ 1555.153807][ T5988] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1555.185206][ T5988] cx231xx 1-1:0.1: Failed to read PCB config [ 1555.211368][ T5988] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 1555.253293][ T5988] usb 1-1: USB disconnect, device number 89 [ 1556.160921][ T1206] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1556.437720][T25750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5445'. [ 1556.450973][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 1556.457528][ T1206] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1556.469023][ T1206] usb 1-1: config 0 has no interface number 0 [ 1556.498671][ T1206] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1556.537951][ T1206] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1556.547080][ T1206] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1556.558588][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.567314][ T1206] usb 1-1: Product: syz [ 1556.610738][ T1206] usb 1-1: Manufacturer: syz [ 1556.615397][ T1206] usb 1-1: SerialNumber: syz [ 1556.666331][ T1206] usb 1-1: config 0 descriptor?? [ 1556.899486][ T1206] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1556.959925][ T1206] cx231xx 1-1:0.1: Failed to read PCB config [ 1556.990229][ T1206] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 1557.034346][ T1206] usb 1-1: USB disconnect, device number 90 [ 1557.179324][T25765] overlayfs: missing 'workdir' [ 1557.828834][T25773] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5456'. [ 1560.078204][T25817] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1566.325843][T25903] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5497'. [ 1566.471425][ T43] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1567.212097][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.343983][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1567.363001][ T43] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1567.373997][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.382193][ T43] usb 5-1: Product: syz [ 1567.386366][ T43] usb 5-1: Manufacturer: syz [ 1567.393812][ T43] usb 5-1: SerialNumber: syz [ 1567.423883][ T43] usb 5-1: config 0 descriptor?? [ 1568.114632][ T43] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1568.138371][ T43] usb 5-1: USB disconnect, device number 85 [ 1568.168867][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1569.260894][ T43] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1569.446341][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.682161][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.698705][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1569.715631][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1569.725599][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.739709][ T43] usb 4-1: config 0 descriptor?? [ 1570.449171][ T43] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1570.457229][ T43] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1570.466871][ T43] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1570.479421][ T43] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1570.489803][ T43] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1570.741048][ T43] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1571.081765][T19954] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1571.501838][T19954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.516995][T19954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.549645][T19954] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1571.625410][T19954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.648489][T19954] usb 6-1: config 0 descriptor?? [ 1572.178371][ T5962] usb 4-1: USB disconnect, device number 80 [ 1572.479453][T25961] syz.2.5514 (25961): drop_caches: 1 [ 1572.509219][T25961] syz.2.5514 (25961): drop_caches: 1 [ 1572.559296][T19954] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1572.729833][T19954] cp2112 0003:10C4:EA90.002D: error requesting version [ 1572.738394][T19954] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -5 [ 1573.069642][T25986] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1573.079308][T25986] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1573.772717][T25984] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1573.781820][T25984] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1574.681060][ T5962] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1574.873322][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.357075][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.369581][ T1206] usb 6-1: USB disconnect, device number 45 [ 1575.379258][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1575.392542][ T5962] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1575.499020][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.542062][ T5962] usb 4-1: config 0 descriptor?? [ 1575.543556][T26023] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1575.557769][T26023] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1575.815881][T26023] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1575.825755][T26023] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5532'. [ 1576.252305][ T5962] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1576.422572][T26037] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1576.429100][T26037] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1576.436977][T26037] vhci_hcd vhci_hcd.0: Device attached [ 1577.402542][T26038] vhci_hcd: connection closed [ 1577.423270][T24637] vhci_hcd: stop threads [ 1577.542242][T24637] vhci_hcd: release socket [ 1577.544660][T26043] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5537'. [ 1577.556642][T26043] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5537'. [ 1577.566531][T24637] vhci_hcd: disconnect device [ 1578.624265][T26056] vlan2: entered promiscuous mode [ 1578.629506][T26056] vlan2: entered allmulticast mode [ 1578.636636][T26056] hsr_slave_1: entered allmulticast mode [ 1578.941984][T26061] overlayfs: missing 'workdir' [ 1579.130812][ T5988] usb 4-1: reset high-speed USB device number 81 using dummy_hcd [ 1579.652518][T26076] __nla_validate_parse: 2 callbacks suppressed [ 1579.652537][T26076] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1579.689747][T26076] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1580.014341][T24708] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1580.467290][T26080] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1580.610792][T24708] usb 1-1: Using ep0 maxpacket: 16 [ 1580.621556][T26090] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1580.630649][T26090] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1580.631183][T24708] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1580.754101][T26080] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1580.762235][T24708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.772782][T24708] usb 1-1: Product: syz [ 1580.777057][T24708] usb 1-1: Manufacturer: syz [ 1581.106559][ T5962] usb 4-1: USB disconnect, device number 81 [ 1581.165743][T24708] usb 1-1: SerialNumber: syz [ 1581.267311][T24708] usb 1-1: config 0 descriptor?? [ 1581.317288][T24708] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1581.401212][T26080] netlink: 'syz.5.5546': attribute type 33 has an invalid length. [ 1581.409089][T26080] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1581.449970][T26086] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1581.459070][T26086] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1581.490618][T26080] netlink: 'syz.5.5546': attribute type 10 has an invalid length. [ 1581.776303][T26104] overlayfs: missing 'workdir' [ 1582.039410][T26111] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1582.045943][T26111] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1582.053811][T26111] vhci_hcd vhci_hcd.0: Device attached [ 1582.382395][ T1206] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 1582.883892][T24708] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1583.151646][T26112] vhci_hcd: connection reset by peer [ 1583.206838][T24637] vhci_hcd: stop threads [ 1583.229071][T24637] vhci_hcd: release socket [ 1583.271244][T24637] vhci_hcd: disconnect device [ 1583.747863][T26123] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1583.754379][T26123] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1583.762216][T26123] vhci_hcd vhci_hcd.0: Device attached [ 1584.013306][T26124] vhci_hcd: connection closed [ 1584.014219][T24708] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 1584.525909][T21004] vhci_hcd: stop threads [ 1584.605540][T21004] vhci_hcd: release socket [ 1584.700301][T21004] vhci_hcd: disconnect device [ 1585.575433][T20322] usb 1-1: USB disconnect, device number 91 [ 1586.736908][T26148] overlayfs: missing 'workdir' [ 1587.084718][T26163] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1587.091255][T26163] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1587.529101][T26163] vhci_hcd vhci_hcd.0: Device attached [ 1587.601490][ T1206] vhci_hcd: vhci_device speed not set [ 1588.340924][T26122] usb 43-1: new high-speed USB device number 8 using vhci_hcd [ 1588.682246][T26164] vhci_hcd: connection reset by peer [ 1588.777117][ T13] vhci_hcd: stop threads [ 1589.037833][ T13] vhci_hcd: release socket [ 1589.083433][T26180] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5574'. [ 1589.092924][T26180] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5574'. [ 1589.202003][ T13] vhci_hcd: disconnect device [ 1589.871547][T24708] vhci_hcd: vhci_device speed not set [ 1591.580366][T20322] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1591.800484][T20322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.816827][T20322] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1591.846780][T20322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.955890][T20322] usb 4-1: config 0 descriptor?? [ 1591.992147][T20322] pwc: Askey VC010 type 2 USB webcam detected. [ 1592.877932][T20322] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1593.373574][T20322] pwc: recv_control_msg error -32 req 02 val 2700 [ 1593.473730][T20322] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1593.561959][T20322] pwc: recv_control_msg error -32 req 04 val 1000 [ 1593.569079][T20322] pwc: recv_control_msg error -32 req 04 val 1300 [ 1593.577063][T20322] pwc: recv_control_msg error -32 req 04 val 1400 [ 1593.583619][T26122] vhci_hcd: vhci_device speed not set [ 1593.786055][T20322] pwc: recv_control_msg error -32 req 02 val 2000 [ 1593.881629][T20322] pwc: recv_control_msg error -32 req 02 val 2100 [ 1593.898274][T20322] pwc: recv_control_msg error -32 req 04 val 1500 [ 1594.041554][T20322] pwc: recv_control_msg error -32 req 02 val 2500 [ 1594.110136][T20322] pwc: recv_control_msg error -71 req 02 val 2400 [ 1594.133122][T20322] pwc: recv_control_msg error -71 req 02 val 2600 [ 1594.140275][T20322] pwc: recv_control_msg error -71 req 02 val 2900 [ 1594.151418][T20322] pwc: recv_control_msg error -71 req 02 val 2800 [ 1594.168856][T20322] pwc: recv_control_msg error -71 req 04 val 1100 [ 1594.200206][T20322] pwc: recv_control_msg error -71 req 04 val 1200 [ 1594.241207][T20322] pwc: Registered as video103. [ 1594.257565][T20322] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 1594.312818][T20322] usb 4-1: USB disconnect, device number 82 [ 1594.390797][ T5988] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1594.561621][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 1594.576179][ T5988] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1594.591434][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.602600][ T5988] usb 3-1: Product: syz [ 1594.609346][ T5988] usb 3-1: Manufacturer: syz [ 1594.614665][ T5988] usb 3-1: SerialNumber: syz [ 1594.634137][ T5988] usb 3-1: config 0 descriptor?? [ 1594.649076][ T5988] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1594.741497][ T1206] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1594.880786][T24708] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1594.948306][ T1206] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1594.968308][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.985982][ T1206] usb 6-1: Product: syz [ 1594.990234][ T1206] usb 6-1: Manufacturer: syz [ 1594.998445][ T1206] usb 6-1: SerialNumber: syz [ 1595.007319][ T1206] usb 6-1: config 0 descriptor?? [ 1595.182900][T24708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.274693][T24708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.410122][T24708] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1595.452841][T24708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.562223][T24708] usb 1-1: config 0 descriptor?? [ 1595.583300][ T1206] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1595.699485][ T1206] usb 6-1: USB disconnect, device number 46 [ 1595.874596][ T5988] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1596.014924][T24708] cp2112 0003:10C4:EA90.002F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1596.188217][ T43] usb 3-1: USB disconnect, device number 87 [ 1596.204462][T24708] cp2112 0003:10C4:EA90.002F: Part Number: 0x00 Device Version: 0x00 [ 1596.260296][ T43] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1596.273789][ T43] ssu100 3-1:0.0: device disconnected [ 1596.387062][T26280] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5604'. [ 1596.396571][T26280] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5604'. [ 1596.404622][T24708] cp2112 0003:10C4:EA90.002F: error requesting SMBus config [ 1596.424169][ T5988] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1596.479021][T24708] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -5 [ 1596.669269][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.709819][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.719807][ T5988] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1596.729106][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.739032][ T5988] usb 5-1: config 0 descriptor?? [ 1597.188946][ T5988] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1597.384665][ T5988] cp2112 0003:10C4:EA90.0030: Part Number: 0x00 Device Version: 0x00 [ 1597.610574][ T5988] cp2112 0003:10C4:EA90.0030: error requesting SMBus config [ 1597.650371][T24708] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1597.666103][ T5988] cp2112 0003:10C4:EA90.0030: probe with driver cp2112 failed with error -32 [ 1597.803530][T24708] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1597.813438][T24708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.821511][T24708] usb 4-1: Product: syz [ 1597.825811][T24708] usb 4-1: Manufacturer: syz [ 1597.830430][T24708] usb 4-1: SerialNumber: syz [ 1598.058422][T24708] usb 4-1: config 0 descriptor?? [ 1598.085753][ T5988] usb 1-1: USB disconnect, device number 92 [ 1598.335232][T24708] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1598.764370][T24708] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1599.218866][ T5988] usb 5-1: USB disconnect, device number 86 [ 1599.334108][T26312] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1599.343727][T26312] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1599.588943][T26312] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1599.598199][T26312] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1599.670879][T20322] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1599.826039][T20322] usb 3-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1599.855111][T20322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.879207][T20322] usb 3-1: Product: syz [ 1599.884478][T20322] usb 3-1: Manufacturer: syz [ 1599.889525][T20322] usb 3-1: SerialNumber: syz [ 1599.916826][T20322] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1600.158575][T20322] pwc: Failed to set LED on/off time (-71) [ 1600.169505][T20322] pwc: send_video_command error -71 [ 1600.187881][T20322] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1600.205160][T20322] Philips webcam 3-1:128.0: probe with driver Philips webcam failed with error -71 [ 1600.234765][ T1206] usb 4-1: USB disconnect, device number 83 [ 1600.256288][T20322] usb 3-1: USB disconnect, device number 88 [ 1600.305136][T26327] vlan2: entered promiscuous mode [ 1600.310508][T26327] vlan2: entered allmulticast mode [ 1600.315753][T26327] hsr_slave_1: entered allmulticast mode [ 1600.382165][T26328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5616'. [ 1600.530801][ T5902] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1600.707819][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.751144][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.772558][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1600.795239][ T5902] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1601.236593][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.247520][ T5902] usb 5-1: config 0 descriptor?? [ 1602.057210][ T5902] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1602.208728][T26354] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1602.218179][T26354] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1602.893963][ T5902] usb 5-1: USB disconnect, device number 87 [ 1603.195772][T26379] overlayfs: missing 'workdir' [ 1604.873204][ T30] audit: type=1400 audit(1754389073.507:541): avc: denied { setopt } for pid=26392 comm="syz.0.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1606.250981][ T5988] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1606.499700][ T5988] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1606.509603][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.531713][ T5988] usb 3-1: Product: syz [ 1606.535940][ T5988] usb 3-1: Manufacturer: syz [ 1606.540573][ T5988] usb 3-1: SerialNumber: syz [ 1606.548052][ T5988] usb 3-1: config 0 descriptor?? [ 1607.218994][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.768450][ T5988] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1607.909029][ T5988] usb 3-1: USB disconnect, device number 89 [ 1608.070930][ T5902] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1608.230604][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.534222][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.544478][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1608.558477][ T5902] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1608.569774][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.586946][ T5902] usb 5-1: config 0 descriptor?? [ 1609.703169][ T5902] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1610.069027][T26468] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5660'. [ 1610.222246][T26471] overlayfs: missing 'workdir' [ 1611.220764][T24708] usb 5-1: reset high-speed USB device number 88 using dummy_hcd [ 1612.749473][T26500] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1612.910866][T26500] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1613.151677][ T43] usb 5-1: USB disconnect, device number 88 [ 1613.271700][T26502] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1613.271839][T26500] netlink: 'syz.5.5668': attribute type 33 has an invalid length. [ 1613.411967][T26500] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1613.432634][T26502] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1613.579685][T26500] netlink: 'syz.5.5668': attribute type 10 has an invalid length. [ 1616.032758][T26530] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1616.039289][T26530] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1616.047278][T26530] vhci_hcd vhci_hcd.0: Device attached [ 1616.143708][T26531] vhci_hcd: connection closed [ 1616.248967][T21004] vhci_hcd: stop threads [ 1616.349908][T21004] vhci_hcd: release socket [ 1616.361032][ T5962] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 1616.454476][T21004] vhci_hcd: disconnect device [ 1616.778785][ T5962] usb 33-1: enqueue for inactive port 0 [ 1618.430959][ T5962] vhci_hcd: vhci_device speed not set [ 1618.898076][T26552] overlayfs: missing 'workdir' [ 1625.182953][T26621] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1625.192296][T26621] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1625.332827][T26621] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1625.344420][T26621] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1629.550918][T26678] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5720'. [ 1629.690837][ T5902] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1629.721009][T26652] Bluetooth: hci0: command 0x0406 tx timeout [ 1629.842256][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.870921][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.901124][ T5902] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1629.935475][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.965538][ T5902] usb 1-1: config 0 descriptor?? [ 1630.207934][T26688] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1630.411650][ T5902] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1630.594925][ T5902] cp2112 0003:10C4:EA90.0033: Part Number: 0x00 Device Version: 0x00 [ 1630.620933][ T1206] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1630.788997][ T1206] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1630.807792][ T5902] cp2112 0003:10C4:EA90.0033: error requesting SMBus config [ 1630.821411][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.830503][ T5902] cp2112 0003:10C4:EA90.0033: probe with driver cp2112 failed with error -5 [ 1630.851489][ T1206] usb 4-1: Product: syz [ 1630.855665][ T1206] usb 4-1: Manufacturer: syz [ 1630.888331][ T1206] usb 4-1: SerialNumber: syz [ 1630.940925][ T1206] usb 4-1: config 0 descriptor?? [ 1631.812723][ T1206] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1633.176663][T24708] usb 1-1: USB disconnect, device number 93 [ 1633.268963][T26729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5736'. [ 1633.689441][T26741] kAFS: No cell specified [ 1633.697622][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1633.705665][ T1206] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1634.233093][ T1206] usb 4-1: USB disconnect, device number 84 [ 1634.923371][T26760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5748'. [ 1636.623186][ T5988] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1636.787075][T26763] syz.3.5749 (26763): drop_caches: 1 [ 1636.861937][ T5988] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1637.021449][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.111307][ T5988] usb 6-1: Product: syz [ 1637.123567][ T5988] usb 6-1: Manufacturer: syz [ 1637.132322][ T5988] usb 6-1: SerialNumber: syz [ 1637.157168][ T5988] usb 6-1: config 0 descriptor?? [ 1637.840368][ T5988] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1637.977589][ T5988] usb 6-1: USB disconnect, device number 47 [ 1640.313803][T26820] overlayfs: missing 'workdir' [ 1640.711302][ T1206] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1641.319076][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 1641.340444][ T1206] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1641.832163][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.841099][ T1206] usb 6-1: Product: syz [ 1641.845310][ T1206] usb 6-1: Manufacturer: syz [ 1641.849946][ T1206] usb 6-1: SerialNumber: syz [ 1641.927838][ T1206] usb 6-1: config 0 descriptor?? [ 1641.974141][ T1206] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1642.490983][ T1206] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 1643.512355][T26722] Set syz1 is full, maxelem 65536 reached [ 1644.815808][ T1206] usb 6-1: USB disconnect, device number 48 [ 1645.214556][T26879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5783'. [ 1649.643243][T26122] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1649.902864][T26122] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1649.912356][T26122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.933773][T26122] usb 5-1: Product: syz [ 1649.943455][T26122] usb 5-1: Manufacturer: syz [ 1649.955740][T26122] usb 5-1: SerialNumber: syz [ 1649.972152][T26122] usb 5-1: config 0 descriptor?? [ 1649.995273][T26923] syz.0.5795 (26923): drop_caches: 1 [ 1650.118082][T26923] syz.0.5795 (26923): drop_caches: 1 [ 1650.199790][T26934] vlan2: entered promiscuous mode [ 1650.201585][T26122] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1650.216176][T26934] vlan2: entered allmulticast mode [ 1650.223486][T26934] hsr_slave_1: entered allmulticast mode [ 1650.279308][T26122] usb 5-1: USB disconnect, device number 89 [ 1650.883189][T20322] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1651.043911][T20322] usb 3-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1651.073017][T20322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.082872][T20322] usb 3-1: Product: syz [ 1651.090387][T20322] usb 3-1: Manufacturer: syz [ 1651.095554][T20322] usb 3-1: SerialNumber: syz [ 1651.111015][T20322] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1651.816866][T20322] pwc: Failed to set LED on/off time (-71) [ 1651.831853][T20322] pwc: send_video_command error -71 [ 1651.837186][T20322] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1651.845301][T20322] Philips webcam 3-1:128.0: probe with driver Philips webcam failed with error -71 [ 1651.867924][T20322] usb 3-1: USB disconnect, device number 90 [ 1651.890792][ T1206] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1652.123487][ T1206] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1652.177418][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.186320][ T1206] usb 1-1: Product: syz [ 1652.190501][ T1206] usb 1-1: Manufacturer: syz [ 1652.196276][ T1206] usb 1-1: SerialNumber: syz [ 1652.205864][ T1206] usb 1-1: config 0 descriptor?? [ 1652.669512][ T1206] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1652.864148][ T1206] usb 1-1: USB disconnect, device number 94 [ 1656.161834][T27007] netlink: 'syz.4.5819': attribute type 10 has an invalid length. [ 1656.331999][T20322] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1656.396570][T27025] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5825'. [ 1656.520836][ T1206] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1656.540767][T20322] usb 3-1: Using ep0 maxpacket: 32 [ 1656.547422][T20322] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1656.558712][T20322] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1656.574185][T20322] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1656.620914][T20322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1656.652226][T20322] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1656.711079][T20322] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1656.768841][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.866683][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.876891][T20322] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1656.886319][T20322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.895062][ T1206] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1656.948433][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.959256][T20322] usb 3-1: config 0 descriptor?? [ 1657.002127][ T1206] usb 1-1: config 0 descriptor?? [ 1657.178910][T20322] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 91 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1657.234929][T20322] usb 3-1: USB disconnect, device number 91 [ 1657.370465][T20322] usblp0: removed [ 1657.427421][ T1206] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1657.626531][ T1206] cp2112 0003:10C4:EA90.0034: Part Number: 0x00 Device Version: 0x00 [ 1658.270410][T20322] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1658.747252][ T1206] cp2112 0003:10C4:EA90.0034: error reading lock byte: -71 [ 1658.764019][ T1206] usb 1-1: USB disconnect, device number 95 [ 1658.903913][T20322] usb 3-1: Using ep0 maxpacket: 32 [ 1658.918147][T20322] usb 3-1: device descriptor read/all, error -71 [ 1658.957304][T27032] fido_id[27032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1662.924294][T27093] netlink: 'syz.3.5847': attribute type 10 has an invalid length. [ 1663.205936][T27093] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1666.384589][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1666.851669][T27136] kAFS: No cell specified [ 1668.692700][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1671.010879][T20322] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1671.231036][T26122] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1671.270933][T20322] usb 5-1: Using ep0 maxpacket: 8 [ 1671.318690][T20322] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1671.365174][T20322] usb 5-1: config 0 has no interface number 0 [ 1671.407266][T20322] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1672.242854][T20322] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1672.274923][T26122] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1672.390012][T26122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.411297][T20322] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1672.444037][T26122] usb 6-1: Product: syz [ 1672.472034][T26122] usb 6-1: Manufacturer: syz [ 1672.480618][T20322] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1672.517639][T26122] usb 6-1: SerialNumber: syz [ 1672.580174][T20322] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1672.624196][T26122] usb 6-1: config 0 descriptor?? [ 1672.646626][T20322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.716227][T20322] usb 5-1: config 0 descriptor?? [ 1672.787306][T20322] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1672.841137][T26122] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1673.510346][T26122] usb 6-1: USB disconnect, device number 49 [ 1674.591947][ T5988] usb 5-1: USB disconnect, device number 90 [ 1674.621994][ T5988] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1675.729954][T27212] overlayfs: overlapping lowerdir path [ 1677.245761][T27239] netlink: 'syz.0.5890': attribute type 72 has an invalid length. [ 1677.512559][T26122] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1677.677250][T26122] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1677.688680][T26122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.706946][T26122] usb 5-1: Product: syz [ 1677.735222][T26122] usb 5-1: Manufacturer: syz [ 1677.751296][T26122] usb 5-1: SerialNumber: syz [ 1677.790847][T26122] usb 5-1: config 0 descriptor?? [ 1678.078581][T27256] overlayfs: missing 'workdir' [ 1678.423928][T26122] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1678.473606][T27262] overlayfs: failed to resolve './file1/file0': -2 [ 1678.568302][T26122] usb 5-1: USB disconnect, device number 91 [ 1678.930144][T27273] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1679.875960][T27289] netlink: 'syz.3.5901': attribute type 72 has an invalid length. [ 1680.180759][ T5962] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1680.330766][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 1680.838895][ T5962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.855633][ T5962] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1680.867289][ T5962] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1680.880711][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.899119][ T5962] usb 1-1: Product: syz [ 1680.909051][ T5962] usb 1-1: Manufacturer: syz [ 1680.921068][ T1206] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1680.922139][ T5962] usb 1-1: SerialNumber: syz [ 1681.109365][ T5962] usb 1-1: config 0 descriptor?? [ 1681.215433][T27321] overlayfs: missing 'workdir' [ 1681.594467][ T1206] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1681.618774][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.627272][ T1206] usb 3-1: Product: syz [ 1681.632727][ T1206] usb 3-1: Manufacturer: syz [ 1681.640211][ T1206] usb 3-1: SerialNumber: syz [ 1681.656186][ T1206] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1681.701021][T20322] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1681.738966][T25601] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1681.887564][T20322] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1681.934014][T20322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.960796][T20322] usb 6-1: Product: syz [ 1681.977605][T20322] usb 6-1: Manufacturer: syz [ 1681.987766][T20322] usb 6-1: SerialNumber: syz [ 1682.002928][ T5962] usb 3-1: USB disconnect, device number 94 [ 1682.011446][T20322] usb 6-1: config 0 descriptor?? [ 1682.270606][T20322] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1682.432745][T20322] usb 6-1: USB disconnect, device number 50 [ 1682.911981][T25601] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1682.925869][T25601] ath9k_htc: Failed to initialize the device [ 1683.074819][ T5988] usb 1-1: USB disconnect, device number 96 [ 1683.089929][T27350] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5914'. [ 1683.090703][ T5962] usb 3-1: ath9k_htc: USB layer deinitialized [ 1683.329253][T27356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1683.570737][ T5988] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1685.294409][ T5988] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1685.314679][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.322959][ T5988] usb 6-1: Product: syz [ 1685.327171][ T5988] usb 6-1: Manufacturer: syz [ 1685.332097][ T5988] usb 6-1: SerialNumber: syz [ 1685.338947][ T5988] usb 6-1: config 0 descriptor?? [ 1685.839406][ T5988] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1685.882264][T27373] syz.4.5921 (27373): drop_caches: 1 [ 1685.907197][T27373] syz.4.5921 (27373): drop_caches: 1 [ 1686.557699][ T5988] usb 6-1: USB disconnect, device number 51 [ 1687.332190][ T5167] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1687.364521][ T5167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1687.377231][ T5167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1687.402517][ T5167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1687.412372][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1687.520182][T27394] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5926'. [ 1689.550984][T26652] Bluetooth: hci2: command tx timeout [ 1690.706522][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.932108][T27417] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5933'. [ 1690.941325][T27417] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5933'. [ 1691.004199][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.194523][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.366169][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.618718][T27430] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1691.637077][T21004] Bluetooth: hci5: Frame reassembly failed (-84) [ 1691.647534][ T5167] Bluetooth: hci2: command tx timeout [ 1692.538574][T27395] chnl_net:caif_netlink_parms(): no params data found [ 1693.018639][ T49] bridge_slave_1: left allmulticast mode [ 1693.024484][ T49] bridge_slave_1: left promiscuous mode [ 1693.037397][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.074792][ T49] bridge_slave_0: left allmulticast mode [ 1693.080591][ T49] bridge_slave_0: left promiscuous mode [ 1693.102725][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.477201][T27444] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5941'. [ 1693.525947][T27445] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1693.535210][T27445] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1693.630867][T26652] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1693.720826][T26652] Bluetooth: hci2: command tx timeout [ 1693.846642][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.882364][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.927248][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1693.962722][ T49] bond0 (unregistering): Released all slaves [ 1694.024672][ T49] bond1 (unregistering): Released all slaves [ 1694.057149][ T49] bond2 (unregistering): Released all slaves [ 1694.934220][T27451] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1695.000165][ T49] tipc: Left network mode [ 1695.011595][T27395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.054475][T27395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.557852][T27395] bridge_slave_0: entered allmulticast mode [ 1695.585565][ T49] IPVS: stopping master sync thread 18551 ... [ 1695.589655][T27395] bridge_slave_0: entered promiscuous mode [ 1695.652961][T27395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.739845][T27395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.791757][T26652] Bluetooth: hci2: command tx timeout [ 1695.797362][T27395] bridge_slave_1: entered allmulticast mode [ 1695.844683][T27395] bridge_slave_1: entered promiscuous mode [ 1698.369540][T27395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.664544][T27395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.681059][T27496] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1700.010804][ T5988] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1702.916697][ T49] hsr_slave_0: left promiscuous mode [ 1702.983116][T27524] netlink: 'syz.4.5961': attribute type 29 has an invalid length. [ 1702.991156][T27524] netlink: 'syz.4.5961': attribute type 3 has an invalid length. [ 1702.999123][T27524] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1703.304957][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1703.350939][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.365384][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1703.378444][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.406516][ T49] veth1_macvtap: left promiscuous mode [ 1703.413357][ T49] veth0_macvtap: left promiscuous mode [ 1703.419067][ T49] veth1_vlan: left promiscuous mode [ 1703.424551][ T49] veth0_vlan: left promiscuous mode [ 1703.541100][ T5988] usb 3-1: device descriptor read/64, error -71 [ 1703.604051][ T43] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1703.780896][ T5988] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1703.806013][ T43] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1703.815883][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.828146][ T43] usb 1-1: Product: syz [ 1703.832758][ T43] usb 1-1: Manufacturer: syz [ 1703.837412][ T43] usb 1-1: SerialNumber: syz [ 1703.848393][ T43] usb 1-1: config 0 descriptor?? [ 1703.864812][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1703.945838][ T5988] usb 3-1: no configurations [ 1703.950606][ T5988] usb 3-1: can't read configurations, error -22 [ 1703.962982][ T5988] usb usb3-port1: attempt power cycle [ 1704.068936][ T43] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1704.149962][ T43] usb 1-1: USB disconnect, device number 97 [ 1704.273719][T27395] team0: Port device team_slave_0 added [ 1704.285033][T27395] team0: Port device team_slave_1 added [ 1704.315017][ T5988] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1704.372137][ T5988] usb 3-1: no configurations [ 1704.376962][ T5988] usb 3-1: can't read configurations, error -22 [ 1704.523782][ T5988] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1704.557600][T27395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.594331][T27395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.622612][T27395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.646659][ T5988] usb 3-1: no configurations [ 1704.655129][ T5988] usb 3-1: can't read configurations, error -22 [ 1704.768050][ T5988] usb usb3-port1: unable to enumerate USB device [ 1704.786413][T27395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.802620][T27395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.876710][T27395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1705.587488][T27395] hsr_slave_0: entered promiscuous mode [ 1705.597985][T27395] hsr_slave_1: entered promiscuous mode [ 1705.640457][T27395] debugfs: 'hsr0' already exists in 'hsr' [ 1705.684342][T27395] Cannot create hsr debugfs directory [ 1705.900873][ T43] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1706.121645][T27573] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1706.128183][T27573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1706.135959][T27573] vhci_hcd vhci_hcd.0: Device attached [ 1706.342544][ T43] usb 5-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1706.437136][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.630445][ T43] usb 5-1: Product: syz [ 1706.765337][ T5988] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 1706.798270][ T43] usb 5-1: Manufacturer: syz [ 1706.847154][ T43] usb 5-1: SerialNumber: syz [ 1706.982993][T27574] vhci_hcd: connection reset by peer [ 1707.061117][ T49] vhci_hcd: stop threads [ 1707.119695][ T43] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1707.126664][ T49] vhci_hcd: release socket [ 1707.187569][ T49] vhci_hcd: disconnect device [ 1707.455909][ T43] pwc: Failed to set LED on/off time (-71) [ 1707.552890][ T43] pwc: send_video_command error -71 [ 1707.608420][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1707.660865][ T43] Philips webcam 5-1:128.0: probe with driver Philips webcam failed with error -71 [ 1707.715527][ T43] usb 5-1: USB disconnect, device number 92 [ 1708.037473][T27596] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1708.044006][T27596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1708.052434][T27596] vhci_hcd vhci_hcd.0: Device attached [ 1708.130723][T20322] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1708.933687][T27597] vhci_hcd: connection closed [ 1708.982479][ T49] vhci_hcd: stop threads [ 1709.518246][ T49] vhci_hcd: release socket [ 1709.537500][ T49] vhci_hcd: disconnect device [ 1710.328211][T27602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1710.383564][T20322] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.435210][T20322] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1710.644436][T20322] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1710.783526][T27395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1710.791355][T20322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.827216][T20322] usb 6-1: config 0 descriptor?? [ 1710.849039][T27395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1711.010697][T20322] usb 6-1: can't set config #0, error -71 [ 1711.077239][T27395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1711.154607][T20322] usb 6-1: USB disconnect, device number 52 [ 1711.184062][T27395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1711.226793][T27624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5984'. [ 1711.473977][T27638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5986'. [ 1711.968664][T27640] netlink: 'syz.5.5987': attribute type 10 has an invalid length. [ 1711.985031][T27395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.998458][T27640] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1712.020877][ T5988] vhci_hcd: vhci_device speed not set [ 1712.023257][T27395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.057255][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.064393][ T6119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.158934][T27652] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1712.257239][T24637] Bluetooth: hci5: Frame reassembly failed (-84) [ 1712.338410][T27652] : entered promiscuous mode [ 1712.348573][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.355712][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1712.765165][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5991'. [ 1712.953590][ T2923] Bluetooth: hci6: Frame reassembly failed (-84) [ 1713.046649][T27654] : entered promiscuous mode [ 1713.506670][T27395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1713.556378][T27395] veth0_vlan: entered promiscuous mode [ 1713.583446][T27395] veth1_vlan: entered promiscuous mode [ 1713.646774][T27395] veth0_macvtap: entered promiscuous mode [ 1713.729466][T27395] veth1_macvtap: entered promiscuous mode [ 1713.765038][T27395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.797955][T27395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.200854][T26652] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1714.896078][ T5167] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1714.908769][ T6119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.995407][ T6119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.090086][T27689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1715.361985][ T6119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.390890][ T6119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.754802][T27698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1715.952201][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.960014][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.154576][T27704] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5998'. [ 1716.163889][T27704] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5998'. [ 1716.366759][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.398569][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.611024][T20322] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1716.801087][T20322] usb 6-1: Using ep0 maxpacket: 16 [ 1716.860198][T20322] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1716.899426][T20322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.930027][T20322] usb 6-1: Product: syz [ 1716.943164][T20322] usb 6-1: Manufacturer: syz [ 1716.960995][T20322] usb 6-1: SerialNumber: syz [ 1716.991802][T20322] usb 6-1: config 0 descriptor?? [ 1717.024104][T20322] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1718.295516][ T5167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1718.308510][ T5167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1718.318391][ T5167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1718.326553][ T5167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1718.330799][ T1206] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1718.412568][ T5167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1718.461070][T20322] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 1718.514960][ T1206] usb 5-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1718.606176][T27741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1718.967440][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.971989][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.975506][ T1206] usb 5-1: Product: syz [ 1718.991097][ T1206] usb 5-1: Manufacturer: syz [ 1718.995729][ T1206] usb 5-1: SerialNumber: syz [ 1719.010199][ T1206] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1719.119916][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.214753][ T1206] pwc: Failed to set LED on/off time (-71) [ 1719.237769][ T1206] pwc: send_video_command error -71 [ 1719.252466][ T1206] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1719.283219][ T1206] Philips webcam 5-1:128.0: probe with driver Philips webcam failed with error -71 [ 1719.325894][ T1206] usb 5-1: USB disconnect, device number 93 [ 1719.375192][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.115004][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.126744][ T1206] usb 6-1: USB disconnect, device number 53 [ 1720.142168][T27735] chnl_net:caif_netlink_parms(): no params data found [ 1720.462841][T27735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.476492][T27735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.484654][T27735] bridge_slave_0: entered allmulticast mode [ 1720.492578][T27735] bridge_slave_0: entered promiscuous mode [ 1720.506283][T27735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.513819][T27662] Bluetooth: hci1: command tx timeout [ 1720.523306][T27735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.533034][T27735] bridge_slave_1: entered allmulticast mode [ 1720.540295][T27735] bridge_slave_1: entered promiscuous mode [ 1720.660238][T27735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.708913][T27735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.767703][ T13] bridge_slave_1: left allmulticast mode [ 1720.819540][ T13] bridge_slave_1: left promiscuous mode [ 1720.847312][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.863649][ T13] bridge_slave_0: left allmulticast mode [ 1720.880502][ T13] bridge_slave_0: left promiscuous mode [ 1720.894597][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.590724][T27662] Bluetooth: hci1: command 0x041b tx timeout [ 1722.728446][T27812] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1722.961472][T27815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1723.405878][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.461722][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.479859][ T13] bond0 (unregistering): Released all slaves [ 1723.711361][ T13] bond1 (unregistering): Released all slaves [ 1723.861628][ T13] bond2 (unregistering): Released all slaves [ 1723.949245][T27735] team0: Port device team_slave_0 added [ 1724.001281][T27735] team0: Port device team_slave_1 added [ 1724.080423][ T13] tipc: Left network mode [ 1724.097596][ T13] IPVS: stopping master sync thread 17291 ... [ 1724.099085][T27735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.111772][T27735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.137927][T27735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.150230][T27735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.157391][T27735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.244545][T27735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.255323][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1724.481684][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1724.488331][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1724.497521][ T24] usb 6-1: config 0 has no interface number 0 [ 1724.507446][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1724.533659][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1724.538690][T27735] hsr_slave_0: entered promiscuous mode [ 1724.548742][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1724.563823][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1724.578179][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1724.589951][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.617454][ T24] usb 6-1: config 0 descriptor?? [ 1724.634086][ T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1724.678297][T27735] hsr_slave_1: entered promiscuous mode [ 1724.684110][ T5167] Bluetooth: hci1: command 0x041b tx timeout [ 1724.684596][T27735] debugfs: 'hsr0' already exists in 'hsr' [ 1724.695939][T27735] Cannot create hsr debugfs directory [ 1724.762189][ T5167] Bluetooth: hci5: command 0x1003 tx timeout [ 1724.768899][T27662] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1725.059238][ T24] usb 6-1: USB disconnect, device number 54 [ 1725.065276][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1725.075154][T27823] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 1725.249382][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1725.359042][T27850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6027'. [ 1726.760901][T27662] Bluetooth: hci1: command 0x041b tx timeout [ 1726.939233][T27861] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6030'. [ 1726.953239][T27861] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6030'. [ 1727.742531][T27870] netlink: 'syz.4.6031': attribute type 29 has an invalid length. [ 1727.751712][T27870] netlink: 'syz.4.6031': attribute type 3 has an invalid length. [ 1727.759710][T27870] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1728.094885][T27872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1728.525728][ T13] hsr_slave_0: left promiscuous mode [ 1728.538394][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.560707][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.694217][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1728.703018][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.737364][ T13] veth1_macvtap: left promiscuous mode [ 1728.744864][ T13] veth0_macvtap: left promiscuous mode [ 1728.754939][ T13] veth1_vlan: left promiscuous mode [ 1728.760410][ T13] veth0_vlan: left promiscuous mode [ 1728.831446][T27662] Bluetooth: hci1: command 0x041b tx timeout [ 1728.881530][T27883] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6035'. [ 1728.890724][T27883] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6035'. [ 1729.796722][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.153362][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1730.410802][T24708] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1730.580843][T24708] usb 1-1: Using ep0 maxpacket: 8 [ 1730.589402][T24708] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1730.602814][T24708] usb 1-1: config 0 has no interface number 0 [ 1730.610558][T24708] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1730.626338][T24708] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1730.649382][T24708] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1730.661962][T24708] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1730.676171][T24708] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1730.697321][T24708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.731164][T24708] usb 1-1: config 0 descriptor?? [ 1730.741105][T24708] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1731.186429][T24708] usb 1-1: USB disconnect, device number 98 [ 1731.544747][T27895] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -19 [ 1731.571646][T24708] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1732.650933][T19954] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1732.881850][T19954] usb 6-1: Using ep0 maxpacket: 8 [ 1732.961927][T19954] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1733.015289][T19954] usb 6-1: config 0 has no interface number 0 [ 1733.106350][T19954] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1733.117321][T19954] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1733.129818][T19954] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1733.140971][T19954] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1733.330235][T19954] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1733.339510][T19954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.357275][T19954] usb 6-1: config 0 descriptor?? [ 1733.378275][T19954] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1735.574131][T25601] usb 6-1: USB disconnect, device number 55 [ 1735.623299][T25601] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1735.840936][T27973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6059'. [ 1735.854850][T27735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1735.891681][T27735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1735.917624][T27735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1735.978158][T27735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1736.280457][T27735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.313749][T27735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.479168][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.486257][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.661759][T27998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1736.870082][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.877275][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.178929][T28044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1739.529568][T27735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1739.978290][T28057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1740.167373][T27735] veth0_vlan: entered promiscuous mode [ 1740.424491][T27735] veth1_vlan: entered promiscuous mode [ 1740.520047][T27735] veth0_macvtap: entered promiscuous mode [ 1740.537564][T27735] veth1_macvtap: entered promiscuous mode [ 1740.644778][T27735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1740.729932][T28072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1741.079104][T27735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.606642][T21004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.654216][T21004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.708150][T21004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.764654][T28081] netlink: 'syz.4.6081': attribute type 10 has an invalid length. [ 1741.785015][T21004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.889036][T28084] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1741.982851][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1741.989918][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1742.206813][T28097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6085'. [ 1742.226782][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.244381][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.300886][ T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1742.359567][T21004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.378370][T21004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.646200][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1742.674789][ T24] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1742.969836][ T24] usb 4-1: config 0 has no interface number 0 [ 1743.048646][ T24] usb 4-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 1743.112847][ T24] usb 4-1: config 0 interface 251 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1743.164840][ T24] usb 4-1: config 0 interface 251 has no altsetting 0 [ 1743.204143][ T24] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1743.232563][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.240575][ T24] usb 4-1: Product: syz [ 1743.271361][ T24] usb 4-1: Manufacturer: syz [ 1743.286191][ T24] usb 4-1: SerialNumber: syz [ 1743.317311][ T24] usb 4-1: config 0 descriptor?? [ 1743.341375][T28091] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1743.362193][ T24] asix 4-1:0.251: probe with driver asix failed with error -22 [ 1743.681359][T26652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1743.691918][T26652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1743.715092][T26652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1743.727645][T26652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1743.748059][T26652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1743.970856][T26652] Bluetooth: hci5: command 0x1003 tx timeout [ 1743.978221][T27662] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1744.686532][ T6119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.010550][T28134] vlan2: entered promiscuous mode [ 1745.018547][T28134] vlan2: entered allmulticast mode [ 1745.047055][T20322] usb 4-1: USB disconnect, device number 85 [ 1745.315766][T28134] hsr_slave_1: entered allmulticast mode [ 1745.452247][ T6119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.481282][T28150] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1745.490408][T28150] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1745.792703][T27662] Bluetooth: hci4: command tx timeout [ 1745.918104][T28153] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1745.927550][T28153] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1745.996270][T28158] netlink: 'syz.0.6093': attribute type 33 has an invalid length. [ 1746.094568][T28161] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1746.103839][T28161] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1746.140845][ T5988] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1746.178945][T28158] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6093'. [ 1746.348415][ T5988] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1746.387531][ T5988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1746.400915][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1746.414434][ T5988] usb 3-1: Product: syz [ 1746.418609][ T5988] usb 3-1: Manufacturer: syz [ 1746.429635][ T5988] usb 3-1: SerialNumber: syz [ 1746.440600][T28171] netlink: 'syz.0.6093': attribute type 10 has an invalid length. [ 1746.470078][ T6119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.766278][T28176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1746.885673][ T5988] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 99 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1746.987488][ T6119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.265467][T28118] chnl_net:caif_netlink_parms(): no params data found [ 1747.389978][ T5988] usb 3-1: USB disconnect, device number 99 [ 1747.419044][ T5988] usblp0: removed [ 1747.491896][T28191] overlayfs: failed to resolve './file1/file0': -2 [ 1747.535594][T28184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6100'. [ 1747.646681][T28118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.666157][T28118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.698902][T28118] bridge_slave_0: entered allmulticast mode [ 1747.873438][T27662] Bluetooth: hci4: command tx timeout [ 1747.992066][T28207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1747.993346][T28118] bridge_slave_0: entered promiscuous mode [ 1748.217329][T28118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.283886][T28118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.471585][T28118] bridge_slave_1: entered allmulticast mode [ 1748.479020][T28118] bridge_slave_1: entered promiscuous mode [ 1749.992033][T27662] Bluetooth: hci4: command tx timeout [ 1750.030955][T24708] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1750.104302][T28118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.137527][T28118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1750.246281][T24708] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1750.288912][T24708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.310754][T24708] usb 1-1: Product: syz [ 1750.315015][T24708] usb 1-1: Manufacturer: syz [ 1750.315868][T28118] team0: Port device team_slave_0 added [ 1750.319603][T24708] usb 1-1: SerialNumber: syz [ 1750.343236][T24708] usb 1-1: config 0 descriptor?? [ 1750.357228][ T6119] bridge_slave_1: left allmulticast mode [ 1750.374000][ T6119] bridge_slave_1: left promiscuous mode [ 1750.389971][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.416820][ T6119] bridge_slave_0: left allmulticast mode [ 1750.423120][ T6119] bridge_slave_0: left promiscuous mode [ 1750.428826][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.474944][T28242] overlayfs: failed to resolve './file1/file0': -2 [ 1750.522355][T27191] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1750.553303][T24708] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1750.629766][T24708] usb 1-1: USB disconnect, device number 99 [ 1750.694550][T27191] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1750.707907][T27191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.716300][T27191] usb 4-1: Product: syz [ 1750.720501][T27191] usb 4-1: Manufacturer: syz [ 1750.725303][T27191] usb 4-1: SerialNumber: syz [ 1750.732374][T27191] usb 4-1: config 0 descriptor?? [ 1750.951116][T27191] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1750.968075][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1750.978581][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1750.989775][ T6119] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1750.999255][ T6119] bond0 (unregistering): Released all slaves [ 1751.016695][T27191] usb 4-1: USB disconnect, device number 86 [ 1751.027015][ T6119] bond1 (unregistering): Released all slaves [ 1751.050205][ T6119] bond2 (unregistering): Released all slaves [ 1751.064147][ T6119] bond3 (unregistering): Released all slaves [ 1751.087695][ T6119] bond4 (unregistering): Released all slaves [ 1751.105039][ T6119] bond5 (unregistering): Released all slaves [ 1751.180112][T28118] team0: Port device team_slave_1 added [ 1751.428306][T28257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1751.626593][ T6119] : left promiscuous mode [ 1751.688492][T28118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.718886][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.769284][T28118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.781151][ T6119] tipc: Left network mode [ 1751.786724][T28118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.794010][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.830521][T28118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.866726][ T6119] IPVS: stopping master sync thread 18826 ... [ 1752.037619][T27662] Bluetooth: hci4: command tx timeout [ 1752.909175][T28276] overlayfs: failed to resolve './file1/file0': -2 [ 1753.005402][T28118] hsr_slave_0: entered promiscuous mode [ 1753.149687][T28118] hsr_slave_1: entered promiscuous mode [ 1753.180952][T28118] debugfs: 'hsr0' already exists in 'hsr' [ 1753.214815][T28118] Cannot create hsr debugfs directory [ 1753.473999][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1753.869757][ T43] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1753.880707][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.888754][ T43] usb 4-1: Product: syz [ 1753.910676][ T43] usb 4-1: Manufacturer: syz [ 1753.916194][ T43] usb 4-1: SerialNumber: syz [ 1753.933906][ T43] usb 4-1: config 0 descriptor?? [ 1754.604770][ T43] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1754.702528][ T43] usb 4-1: USB disconnect, device number 87 [ 1754.967051][T28311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1755.153737][ T6119] ------------[ cut here ]------------ [ 1755.159488][ T6119] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 1755.173964][ T6119] WARNING: CPU: 0 PID: 6119 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x247/0x850 [ 1755.184834][ T6119] Modules linked in: [ 1755.188951][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1755.201245][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1755.211969][ T6119] Workqueue: netns cleanup_net [ 1755.216756][ T6119] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 1755.223425][ T6119] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 ff fb bb f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 60 5b 08 8d e8 4a 9a 7a f6 90 <0f> 0b 90 90 e8 e0 fb bb f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 1755.243290][ T6119] RSP: 0000:ffffc9000440f5f0 EFLAGS: 00010286 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1755.249341][ T6119] RAX: 0000000000000000 RBX: ffff8880758fcd80 RCX: ffffffff817a3308 [ 1755.257697][ T6119] RDX: ffff888026cb4880 RSI: ffffffff817a3315 RDI: 0000000000000001 [ 1755.265998][ T6119] RBP: ffff888076e70e40 R08: 0000000000000001 R09: 0000000000000000 [ 1755.274585][ T6119] R10: 0000000000000001 R11: fffffffffffec258 R12: ffff8880758fea28 [ 1755.282812][ T6119] R13: 0000000000000000 R14: ffff8880758fd728 R15: ffff8880758fe9d0 [ 1755.291115][ T6119] FS: 0000000000000000(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 1755.301593][ T6119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1755.309021][ T6119] CR2: 00007fc9ef0dafe8 CR3: 000000002b620000 CR4: 00000000003526f0 [ 1755.317673][ T6119] Call Trace: [ 1755.321222][ T6119] [ 1755.324163][ T6119] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 1755.330166][ T6119] __ieee80211_link_release_channel+0x273/0x4b0 [ 1755.336726][ T6119] ieee80211_link_release_channel+0x128/0x200 [ 1755.343096][ T6119] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1755.348482][ T6119] unregister_netdevice_many_notify+0x1419/0x24c0 [ 1755.355397][ T6119] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1755.362603][ T6119] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 1755.368966][ T6119] ? find_held_lock+0x2b/0x80 [ 1755.373802][ T6119] unregister_netdevice_queue+0x305/0x3f0 [ 1755.379544][ T6119] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1755.385864][ T6119] _cfg80211_unregister_wdev+0x64b/0x830 [ 1755.391730][ T6119] ieee80211_remove_interfaces+0x34e/0x740 [ 1755.398092][ T6119] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1755.404941][ T6119] ieee80211_unregister_hw+0x55/0x3a0 [ 1755.410340][ T6119] hwsim_exit_net+0x3ac/0x7d0 [ 1755.415074][ T6119] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1755.420296][ T6119] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 1755.425714][ T6119] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 1755.431485][ T6119] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1755.436685][ T6119] ops_undo_list+0x2eb/0xab0 [ 1755.441348][ T6119] ? __pfx_ops_undo_list+0x10/0x10 [ 1755.446461][ T6119] ? cleanup_net+0x334/0x890 [ 1755.451196][ T6119] ? idr_destroy+0x62/0x2e0 [ 1755.455687][ T6119] cleanup_net+0x408/0x890 [ 1755.460092][ T6119] ? __pfx_cleanup_net+0x10/0x10 [ 1755.465106][ T6119] ? rcu_is_watching+0x12/0xc0 [ 1755.469868][ T6119] process_one_work+0x9cf/0x1b70 [ 1755.474844][ T6119] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1755.481037][ T6119] ? __pfx_process_one_work+0x10/0x10 [ 1755.486397][ T6119] ? assign_work+0x1a0/0x250 [ 1755.491001][ T6119] worker_thread+0x6c8/0xf10 [ 1755.495586][ T6119] ? __pfx_worker_thread+0x10/0x10 [ 1755.501014][ T6119] kthread+0x3c2/0x780 [ 1755.505066][ T6119] ? __pfx_kthread+0x10/0x10 [ 1755.509637][ T6119] ? rcu_is_watching+0x12/0xc0 [ 1755.514647][ T6119] ? __pfx_kthread+0x10/0x10 [ 1755.519229][ T6119] ret_from_fork+0x5d7/0x6f0 [ 1755.523826][ T6119] ? __pfx_kthread+0x10/0x10 [ 1755.528408][ T6119] ret_from_fork_asm+0x1a/0x30 [ 1755.533209][ T6119] [ 1755.536220][ T6119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1755.543472][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1755.555252][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1755.565290][ T6119] Workqueue: netns cleanup_net [ 1755.570035][ T6119] Call Trace: [ 1755.573286][ T6119] [ 1755.576192][ T6119] dump_stack_lvl+0x3d/0x1f0 [ 1755.580759][ T6119] vpanic+0x6e8/0x7a0 [ 1755.584726][ T6119] ? __pfx_vpanic+0x10/0x10 [ 1755.589229][ T6119] ? drv_unassign_vif_chanctx+0x247/0x850 [ 1755.594925][ T6119] panic+0xca/0xd0 [ 1755.598627][ T6119] ? __pfx_panic+0x10/0x10 [ 1755.603044][ T6119] ? check_panic_on_warn+0x1f/0xb0 [ 1755.608151][ T6119] check_panic_on_warn+0xab/0xb0 [ 1755.613087][ T6119] __warn+0xf6/0x3c0 [ 1755.616975][ T6119] ? drv_unassign_vif_chanctx+0x247/0x850 [ 1755.622698][ T6119] report_bug+0x3c3/0x580 [ 1755.627034][ T6119] ? drv_unassign_vif_chanctx+0x247/0x850 [ 1755.632778][ T6119] handle_bug+0x184/0x210 [ 1755.637100][ T6119] exc_invalid_op+0x17/0x50 [ 1755.641587][ T6119] asm_exc_invalid_op+0x1a/0x20 [ 1755.646417][ T6119] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 1755.652726][ T6119] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 ff fb bb f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 60 5b 08 8d e8 4a 9a 7a f6 90 <0f> 0b 90 90 e8 e0 fb bb f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 1755.672310][ T6119] RSP: 0000:ffffc9000440f5f0 EFLAGS: 00010286 [ 1755.678354][ T6119] RAX: 0000000000000000 RBX: ffff8880758fcd80 RCX: ffffffff817a3308 [ 1755.686302][ T6119] RDX: ffff888026cb4880 RSI: ffffffff817a3315 RDI: 0000000000000001 [ 1755.694250][ T6119] RBP: ffff888076e70e40 R08: 0000000000000001 R09: 0000000000000000 [ 1755.702205][ T6119] R10: 0000000000000001 R11: fffffffffffec258 R12: ffff8880758fea28 [ 1755.710151][ T6119] R13: 0000000000000000 R14: ffff8880758fd728 R15: ffff8880758fe9d0 [ 1755.718105][ T6119] ? __warn_printk+0x198/0x350 [ 1755.722855][ T6119] ? __warn_printk+0x1a5/0x350 [ 1755.727606][ T6119] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 1755.733574][ T6119] __ieee80211_link_release_channel+0x273/0x4b0 [ 1755.739798][ T6119] ieee80211_link_release_channel+0x128/0x200 [ 1755.745846][ T6119] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1755.751197][ T6119] unregister_netdevice_many_notify+0x1419/0x24c0 [ 1755.757603][ T6119] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1755.764363][ T6119] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 1755.770519][ T6119] ? find_held_lock+0x2b/0x80 [ 1755.775458][ T6119] unregister_netdevice_queue+0x305/0x3f0 [ 1755.781171][ T6119] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1755.787401][ T6119] _cfg80211_unregister_wdev+0x64b/0x830 [ 1755.793024][ T6119] ieee80211_remove_interfaces+0x34e/0x740 [ 1755.798819][ T6119] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1755.805133][ T6119] ieee80211_unregister_hw+0x55/0x3a0 [ 1755.810517][ T6119] hwsim_exit_net+0x3ac/0x7d0 [ 1755.815173][ T6119] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1755.820349][ T6119] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 1755.825709][ T6119] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 1755.831410][ T6119] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1755.836671][ T6119] ops_undo_list+0x2eb/0xab0 [ 1755.841252][ T6119] ? __pfx_ops_undo_list+0x10/0x10 [ 1755.846349][ T6119] ? cleanup_net+0x334/0x890 [ 1755.850915][ T6119] ? idr_destroy+0x62/0x2e0 [ 1755.855402][ T6119] cleanup_net+0x408/0x890 [ 1755.859793][ T6119] ? __pfx_cleanup_net+0x10/0x10 [ 1755.864709][ T6119] ? rcu_is_watching+0x12/0xc0 [ 1755.869456][ T6119] process_one_work+0x9cf/0x1b70 [ 1755.874379][ T6119] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1755.880509][ T6119] ? __pfx_process_one_work+0x10/0x10 [ 1755.885871][ T6119] ? assign_work+0x1a0/0x250 [ 1755.890439][ T6119] worker_thread+0x6c8/0xf10 [ 1755.895019][ T6119] ? __pfx_worker_thread+0x10/0x10 [ 1755.900112][ T6119] kthread+0x3c2/0x780 [ 1755.904159][ T6119] ? __pfx_kthread+0x10/0x10 [ 1755.908727][ T6119] ? rcu_is_watching+0x12/0xc0 [ 1755.913493][ T6119] ? __pfx_kthread+0x10/0x10 [ 1755.918083][ T6119] ret_from_fork+0x5d7/0x6f0 [ 1755.922665][ T6119] ? __pfx_kthread+0x10/0x10 [ 1755.927256][ T6119] ret_from_fork_asm+0x1a/0x30 [ 1755.932024][ T6119] [ 1755.935226][ T6119] Kernel Offset: disabled [ 1755.939523][ T6119] Rebooting in 86400 seconds..