last executing test programs: 7.511964375s ago: executing program 0 (id=3910): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x181840, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 6.600126753s ago: executing program 0 (id=3915): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x40}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xc9) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r9, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r9, @ANYBLOB="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"], 0x1370}}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 6.307403614s ago: executing program 0 (id=3919): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x2, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000003140), 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x10020, 0x0) 6.161823034s ago: executing program 0 (id=3922): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x3, "39c85c"}, 0x0, 0x0, 0x0, 0x0}) 4.328529131s ago: executing program 3 (id=3932): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000088f0e1200000000000001090224000100000000090400000103000000092100000001220701090581030000000000"], 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r1, &(0x7f00000000c0)={r4, r2, 0x1}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000000f0000001c0001800800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030001000000"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04360704000000000000"], 0xa) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001002009d77235e7ef00001000000000000000000000000000904000000000000000002000000180004e9830001800a0001006c696d6974080000040002800900010073797a30000000000900020073797a3200000000050007409c000000140000001100010000000000000000000000000ae3a19fc3cc86ec6cbeaec1ab2517779271a12b6217e2847342704d570246855968bb26d7672f"], 0x74}}, 0x40014) syz_emit_vhci(0x0, 0x17) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.669584232s ago: executing program 0 (id=3943): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c0000000700014e"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.590939511s ago: executing program 2 (id=3944): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x40}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@int, @func_proto, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r9, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r9, @ANYBLOB="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"], 0x1370}}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 3.343986628s ago: executing program 2 (id=3945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000040)={0x1}) 2.965199513s ago: executing program 2 (id=3946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x834, 0x0, 0x0, 0x0, 0x9}) 2.757408287s ago: executing program 2 (id=3947): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4, 0xd6, 0x5, 0xa}, {0x3, 0x2, 0x0, 0x8}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x4001) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {}, {0x0, 0x0, 0xd, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0xfe}, {0x1000}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x9, 0xf801, 0x0, [0x0, 0x2, 0x1]}) 2.663902449s ago: executing program 1 (id=3948): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000ff}]}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x0) 2.643420917s ago: executing program 3 (id=3949): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0xfea7) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 2.5537622s ago: executing program 2 (id=3950): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, &(0x7f0000000280)={0x2, 0xffffffff, 0x1947}) 2.403902372s ago: executing program 3 (id=3951): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) 2.377033855s ago: executing program 1 (id=3952): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000f, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000000c0)="35ba658a487c56c733e03c24ecd8dc66ff00800000000059040000f50014cc08001e0600fcffffff00012000", 0x0, 0xfffffffffffffd09) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0) 1.737549108s ago: executing program 1 (id=3953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x168, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0xd6, 0xf, [@random={0x1, 0xd0, "b9e5539072016263b860b62760ce8121f099c99af28a9374232a08c9aa9d51cb2ddb6a6c9e9752086616674fcea9f5f1891363b7857547d31a5d04c02af72ebb0bff99a076c069e936881bed27fb15bfd00d84048560dfe82e285700cda9d527165d5abab2faabbd068fab2376e98e88833b538cc788f96e951678a04f7404667c360b85aacd7847044a78e53110ff891a35967afda3ebdc55a1ed7d95578e90e01bbd13b1e77b31b050fdede943134d5caa4bce67a1fee34082060824766ce2d9adbee78f69b6178580d37248771a7f"}]}]]}, 0x168}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.643563326s ago: executing program 1 (id=3954): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x40}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r9, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r9, @ANYBLOB="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"], 0x1370}}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 1.415360546s ago: executing program 1 (id=3956): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = io_uring_setup(0x1693, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 1.166256225s ago: executing program 4 (id=3957): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000000020000000000000000030005000000000002000000ac142900"], 0x50}}, 0x0) 1.1232621s ago: executing program 0 (id=3958): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000088f0e1200000000000001090224000100000000090400000103000000092100000001220701090581030000000000"], 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r1, &(0x7f00000000c0)={r4, r2, 0x1}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000000f0000001c0001800800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030001000000"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04360704000000000000"], 0xa) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001002009d77235e7ef00001000000000000000000000000000904000000000000000002000000180004e9830001800a0001006c696d6974080000040002800900010073797a30000000000900020073797a3200000000050007409c000000140000001100010000000000000000000000000ae3a19fc3cc86ec6cbeaec1ab2517779271a12b6217e2847342704d570246855968bb26d7672ff721fd2d5288a18c0d1686c2f0492f07186ead7f45a3c8fd27819dec54e0126bb62eb1c7f9adc886f24d284cb8a1efdb"], 0x74}}, 0x40014) syz_emit_vhci(0x0, 0x17) syz_usb_control_io$hid(r0, 0x0, 0x0) 953.73769ms ago: executing program 4 (id=3959): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2034) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 953.388156ms ago: executing program 1 (id=3960): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000088f0e1200000000000001090224000100000000090400000103000000092100000001220701090581030000000000"], 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) r5 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r1, &(0x7f00000000c0)={r4, r2, 0x1}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000000f0000001c0001800800", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030001000000"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04360704000000000000"], 0xa) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001002009d77235e7ef00001000000000000000000000000000904000000000000000002000000180004e9830001800a0001006c696d6974080000040002800900010073797a30000000000900020073797a3200000000050007409c000000140000001100010000000000000000000000000ae3a19fc3cc86ec6cbeaec1ab2517779271a12b6217e2847342704d570246855968bb26d7672ff721fd2d5288a18c0d1686c2f0492f07186ead7f45a3c8fd2781"], 0x74}}, 0x40014) syz_emit_vhci(0x0, 0x17) syz_usb_control_io$hid(r0, 0x0, 0x0) 881.550226ms ago: executing program 4 (id=3961): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}}, 0x18) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {0x0, 0x0, 0x1}}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}], 0x2, 0x0) 795.03676ms ago: executing program 4 (id=3962): close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 705.753605ms ago: executing program 3 (id=3963): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x4, 0x3f) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r0, 0x0, 0x0, 0x12122, 0x0, 0x0) 683.781308ms ago: executing program 2 (id=3964): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xc018480d, &(0x7f0000000000)={0x1, 0x1000000, 0x0, 0x0, 0xfffffffd}) 657.107454ms ago: executing program 4 (id=3965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa0000000000007910a8000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000071000040"]) 277.836634ms ago: executing program 4 (id=3966): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00008dc000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000015000/0x400000)=nil) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/64, 0x40}], 0x5) 215.881157ms ago: executing program 3 (id=3967): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x40}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r8, @ANYBLOB="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"], 0x1370}}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 0s ago: executing program 3 (id=3968): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x40}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@int, @func_proto, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r9, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r9, @ANYBLOB="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"], 0x1370}}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x45c}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) kernel console output (not intermixed with test programs): d wMaxPacketSize 0 [ 668.954138][ T5282] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 668.972304][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.013524][ T5282] usb 2-1: config 0 descriptor?? [ 669.161631][ T80] usb 1-1: USB disconnect, device number 104 [ 669.376349][T19023] bridge0: entered promiscuous mode [ 669.382228][T19023] macsec2: entered promiscuous mode [ 669.414610][T19023] macsec2: entered allmulticast mode [ 669.433815][T19023] bridge0: entered allmulticast mode [ 669.452793][T19023] bridge0: left allmulticast mode [ 669.463472][T19023] bridge0: left promiscuous mode [ 669.534618][ T5282] usbhid 2-1:0.0: can't add hid device: -71 [ 669.540714][ T5282] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 669.574056][ T5282] usb 2-1: USB disconnect, device number 4 [ 670.235241][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 670.628739][ T29] audit: type=1326 audit(1727048814.505:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.3315" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x0 [ 671.244648][ T5282] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 671.433872][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 671.441880][ T5282] usb 3-1: config 1 interface 1 has no altsetting 0 [ 671.457005][ T5282] usb 3-1: string descriptor 0 read error: -22 [ 671.463503][ T5282] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 671.472718][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.496873][ T5282] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 671.614638][ T5242] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 671.705153][T19069] QAT: Device 13 not found [ 671.764615][ T5282] usb 3-1: USB disconnect, device number 124 [ 671.794079][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 671.807365][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.822329][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'. [ 671.865118][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.892119][ T5242] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 671.909288][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.931302][ T5242] usb 2-1: config 0 descriptor?? [ 672.093665][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 672.359526][T19116] veth0_to_hsr: entered promiscuous mode [ 672.393293][ T5242] usbhid 2-1:0.0: can't add hid device: -71 [ 672.399896][ T5242] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 672.409748][T19116] veth0_to_hsr: left promiscuous mode [ 672.427224][ T5242] usb 2-1: USB disconnect, device number 5 [ 672.693843][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 672.854168][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 672.871485][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.900490][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.921241][ T9] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 672.947303][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.974817][ T9] usb 5-1: config 0 descriptor?? [ 673.404784][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3343'. [ 673.457662][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 673.464290][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 673.490588][ T9] usb 5-1: USB disconnect, device number 96 [ 673.540128][T19176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3347'. [ 673.564144][ T5242] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 673.593347][ T80] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 673.764079][ T80] usb 1-1: Using ep0 maxpacket: 8 [ 673.771214][ T5242] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.782781][ T5242] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 673.802544][ T80] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.812764][ T80] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.826855][ T5242] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 673.836623][ T80] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 673.851240][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.860049][ T80] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.880539][ T5242] usb 2-1: config 0 descriptor?? [ 673.896666][ T80] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 673.911768][ T5242] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 673.922578][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.943941][ T1660] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 674.104153][ T1660] usb 4-1: Using ep0 maxpacket: 8 [ 674.138611][ T1660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.143616][ T8] usb 2-1: USB disconnect, device number 6 [ 674.164726][ T80] usb 1-1: GET_CAPABILITIES returned 0 [ 674.172386][ T1660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.183033][ T80] usbtmc 1-1:16.0: can't read capabilities [ 674.201371][ T1660] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 674.212656][ T1660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.238804][ T1660] usb 4-1: config 0 descriptor?? [ 674.397258][ T80] usb 1-1: USB disconnect, device number 105 [ 674.686287][ T1660] usbhid 4-1:0.0: can't add hid device: -71 [ 674.692684][ T1660] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 674.735325][ T1660] usb 4-1: USB disconnect, device number 104 [ 674.857098][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 675.240460][T19245] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3366'. [ 675.282077][T19245] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3366'. [ 675.306257][T19245] unsupported nlmsg_type 40 [ 675.314024][ T80] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 675.511978][ T80] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 675.560140][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 675.569493][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 675.605100][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.619758][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 675.640274][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 675.667799][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.677604][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 675.686914][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 675.697959][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.706208][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 675.715518][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 675.803858][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.856887][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 675.889266][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 675.913808][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.925517][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 675.943905][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 675.974045][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.989876][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.003933][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.032707][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 676.050306][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3374'. [ 676.067429][ T80] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 676.081882][ T80] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 676.122183][ T80] usb 3-1: config 0 interface 0 has no altsetting 0 [ 676.144309][ T80] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 676.159836][ T29] audit: type=1326 audit(1727048820.035:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.1.3373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7fc00000 [ 676.186436][ T80] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 676.207025][ T80] usb 3-1: Product: syz [ 676.211423][ T80] usb 3-1: Manufacturer: syz [ 676.219775][ T80] usb 3-1: SerialNumber: syz [ 676.234792][ T80] usb 3-1: config 0 descriptor?? [ 676.270344][ T80] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 676.334112][ T8] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 676.503886][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 676.513487][ T8] usb 1-1: config 1 interface 1 has no altsetting 0 [ 676.542991][ T8] usb 1-1: string descriptor 0 read error: -22 [ 676.556196][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 676.574849][ T80] usb 3-1: USB disconnect, device number 125 [ 676.582311][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.582694][ T80] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 676.594439][ T5283] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 676.631167][ T8] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 676.762277][ T29] audit: type=1326 audit(1727048820.635:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.1.3373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fd579 code=0x7fc00000 [ 676.763963][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 676.807226][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.842387][T19279] QAT: Device 13 not found [ 676.858660][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.884510][ T5283] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 676.893814][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.918199][ T5283] usb 4-1: config 0 descriptor?? [ 676.923919][ T8] usb 1-1: USB disconnect, device number 106 [ 677.351084][ T5283] usbhid 4-1:0.0: can't add hid device: -71 [ 677.364054][ T5283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 677.389891][ T5283] usb 4-1: USB disconnect, device number 105 [ 677.712874][T19322] loop9: detected capacity change from 0 to 7 [ 677.719957][ T29] audit: type=1326 audit(1727048821.595:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19296 comm="syz.1.3381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7fc00000 [ 677.759598][T19322] Dev loop9: unable to read RDB block 7 [ 677.777789][T19322] loop9: AHDI p2 p3 p4 [ 677.782005][T19322] loop9: partition table partially beyond EOD, truncated [ 677.811908][T19322] loop9: p2 start 2961973428 is beyond EOD, truncated [ 677.831581][T19322] loop9: p3 start 1756542996 is beyond EOD, truncated [ 678.224916][ T29] audit: type=1326 audit(1727048822.085:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19336 comm="syz.4.3393" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36579 code=0x0 [ 679.433717][T19351] bridge0: port 3(hsr0) entered disabled state [ 679.440122][T19351] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.447681][T19351] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.799926][T19357] syzkaller1: entered promiscuous mode [ 679.833017][T19357] syzkaller1: entered allmulticast mode [ 680.303832][ T1660] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 680.523840][ T1660] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 680.546117][ T1660] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 680.594459][ T1660] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.614288][ T1660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.635531][ T1660] usb 3-1: config 0 descriptor?? [ 680.659164][ T1660] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 680.749365][T19380] syzkaller1: entered promiscuous mode [ 680.755331][T19380] syzkaller1: entered allmulticast mode [ 682.153952][ T1660] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 682.319365][ T1660] usb 2-1: Using ep0 maxpacket: 32 [ 682.365124][ T1660] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 682.383416][ T1660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.433687][ T1660] usb 2-1: config 0 descriptor?? [ 682.458788][ T1660] gspca_main: sunplus-2.14.0 probing 041e:400b [ 682.685841][ T25] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 682.855126][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 682.866129][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.884683][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.908564][ T25] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 682.918550][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.941743][ T25] usb 5-1: config 0 descriptor?? [ 683.040864][ T9] usb 3-1: USB disconnect, device number 126 [ 683.384521][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 683.398672][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 683.414343][ T25] usb 5-1: USB disconnect, device number 97 [ 683.424084][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 683.591558][ T9] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 683.613890][ T9] usb 3-1: config 0 has no interface number 0 [ 683.620113][ T9] usb 3-1: config 0 interface 16 has no altsetting 0 [ 683.640402][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 683.649626][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.659135][ T9] usb 3-1: Product: syz [ 683.663362][ T9] usb 3-1: Manufacturer: syz [ 683.684552][ T1660] gspca_sunplus: reg_w_riv err -71 [ 683.688123][ T9] usb 3-1: SerialNumber: syz [ 683.698706][ T1660] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 683.721869][ T9] usb 3-1: config 0 descriptor?? [ 683.727747][ T1660] usb 2-1: USB disconnect, device number 7 [ 683.968074][ T9] usbtest 3-1:0.16: couldn't get endpoints, -71 [ 683.983906][ T9] usbtest 3-1:0.16: probe with driver usbtest failed with error -71 [ 684.000986][ T9] usb 3-1: USB disconnect, device number 127 [ 684.007570][ T8] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 684.174082][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 684.189743][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.212279][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 684.237593][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.245861][ T8] usb 1-1: Product: syz [ 684.250058][ T8] usb 1-1: Manufacturer: syz [ 684.254859][ T8] usb 1-1: SerialNumber: syz [ 684.483939][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 684.661620][ T9] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 684.671986][ T9] usb 3-1: config 0 has no interface number 0 [ 684.687715][ T9] usb 3-1: config 0 interface 16 has no altsetting 0 [ 684.699649][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 684.715660][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.727793][ T9] usb 3-1: Product: syz [ 684.732013][ T9] usb 3-1: Manufacturer: syz [ 684.743233][ T9] usb 3-1: SerialNumber: syz [ 684.775466][ T9] usb 3-1: config 0 descriptor?? [ 685.286865][ T8] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 685.293547][ T8] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 685.397408][ T9] usbtest 3-1:0.16: Linux gadget zero [ 685.410003][ T9] usbtest 3-1:0.16: high-speed {control in/out int-out} tests (+alt) [ 685.501923][ T8] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 685.527480][ T8] usb 1-1: USB disconnect, device number 107 [ 685.550579][ T8] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 685.607604][ T9] usb 3-1: USB disconnect, device number 2 [ 685.809339][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.815780][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.776389][T19501] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 687.543855][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 687.704946][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 687.711642][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.733287][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.744038][ T8] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 687.765888][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.814871][ T8] usb 2-1: config 0 descriptor?? [ 688.292537][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 688.311792][ T29] audit: type=1326 audit(1727048832.145:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.344947][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 688.384972][ T8] usb 2-1: USB disconnect, device number 8 [ 688.437372][ T29] audit: type=1326 audit(1727048832.145:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.542330][ T29] audit: type=1326 audit(1727048832.215:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.603904][ T5294] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 688.663866][ T29] audit: type=1326 audit(1727048832.215:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.692521][ T29] audit: type=1326 audit(1727048832.215:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.714671][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.721131][ T29] audit: type=1326 audit(1727048832.215:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.743896][ T29] audit: type=1326 audit(1727048832.215:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.765786][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.772438][ T29] audit: type=1326 audit(1727048832.215:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.794688][ T29] audit: type=1326 audit(1727048832.245:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.816568][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.822732][ T29] audit: type=1326 audit(1727048832.245:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.2.3445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 688.936920][ T5294] usb 5-1: Using ep0 maxpacket: 8 [ 688.956960][ T5294] usb 5-1: config 1 interface 1 has no altsetting 0 [ 688.968301][ T5294] usb 5-1: string descriptor 0 read error: -22 [ 688.975206][ T5294] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.978999][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 689.046825][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.121577][ T5294] usb 5-1: can't set config #1, error -71 [ 689.175695][ T5294] usb 5-1: USB disconnect, device number 98 [ 689.410140][ T9] usb 3-1: config 0 has no interfaces? [ 689.438732][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 689.458532][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.476530][ T9] usb 3-1: Product: syz [ 689.480739][ T9] usb 3-1: Manufacturer: syz [ 689.487838][ T9] usb 3-1: SerialNumber: syz [ 689.510265][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 689.520864][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 689.571710][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 689.582585][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 689.594831][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 689.604147][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 689.612271][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 689.618255][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'. [ 689.633299][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 689.643028][ T80] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 689.708292][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.733945][ T5294] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 689.770918][T19513] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 689.792337][ T9] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 689.827584][ T80] usb 2-1: Using ep0 maxpacket: 8 [ 689.835545][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.849468][ T80] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.861037][ T80] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 689.877788][ T80] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 689.892959][ T80] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 689.914809][ T5294] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 689.933885][ T80] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 689.943129][ T5294] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 689.964008][ T80] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.973136][ T5294] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 689.984296][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.997926][T19519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 690.008961][ T5294] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 690.018683][ T80] hub 2-1:1.0: bad descriptor, ignoring hub [ 690.026399][ T80] hub 2-1:1.0: probe with driver hub failed with error -5 [ 690.044332][ T80] cdc_wdm 2-1:1.0: skipping garbage [ 690.050557][ T80] cdc_wdm 2-1:1.0: skipping garbage [ 690.060444][ T80] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 690.070845][ T80] cdc_wdm 2-1:1.0: Unknown control protocol [ 690.087749][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.172817][T19524] chnl_net:caif_netlink_parms(): no params data found [ 690.201898][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.296408][T19524] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.309801][T19524] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.317384][T19524] bridge_slave_0: entered allmulticast mode [ 690.328932][T19524] bridge_slave_0: entered promiscuous mode [ 690.343008][T19524] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.351052][T19524] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.358966][T19524] bridge_slave_1: entered allmulticast mode [ 690.365292][ T5294] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 690.366552][T19524] bridge_slave_1: entered promiscuous mode [ 690.461942][T19524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.501840][T19524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.554787][ T5294] usb 1-1: Using ep0 maxpacket: 32 [ 690.572686][ T35] team0: left allmulticast mode [ 690.582185][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.604944][ T35] team_slave_0: left allmulticast mode [ 690.610458][ T35] team_slave_1: left allmulticast mode [ 690.616259][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.616300][ T5294] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 690.644017][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.653253][ T1660] usb 5-1: USB disconnect, device number 99 [ 690.656969][ T35] team0: left promiscuous mode [ 690.660078][T19516] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 690.682079][T19516] usb 2-1: device reset changed ep0 maxpacket size! [ 690.687337][ T35] team_slave_0: left promiscuous mode [ 690.711001][ T5294] usb 1-1: config 0 descriptor?? [ 690.714704][ T35] team_slave_1: left promiscuous mode [ 690.720155][T19516] cdc_wdm 2-1:1.0: Error autopm - -16 [ 690.721599][ T9] usb 2-1: USB disconnect, device number 9 [ 690.745843][ T5294] hub 1-1:0.0: USB hub found [ 690.761127][ T35] bridge0: port 2(team0) entered disabled state [ 690.800048][ T35] bridge_slave_0: left allmulticast mode [ 690.812984][ T35] bridge_slave_0: left promiscuous mode [ 690.826626][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.914124][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 690.980904][ T5294] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 691.036031][ T35] ip6gretap0 (unregistering): left promiscuous mode [ 691.092373][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 691.114411][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.122576][ T9] usb 2-1: Product: syz [ 691.140864][ T9] usb 2-1: Manufacturer: syz [ 691.146040][ T9] usb 2-1: SerialNumber: syz [ 691.166904][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 691.188835][ T5282] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 691.223282][ T5294] hid-generic 0003:046D:C31C.0034: item fetching failed at offset 0/1 [ 691.264325][ T5294] hid-generic 0003:046D:C31C.0034: probe with driver hid-generic failed with error -22 [ 691.418202][T19560] input: syz0 as /devices/virtual/input/input50 [ 691.526385][ T9] usb 2-1: USB disconnect, device number 10 [ 691.634226][ T5294] usb 1-1: USB disconnect, device number 108 [ 691.720500][ T5233] Bluetooth: hci4: command tx timeout [ 691.822948][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3454'. [ 692.143055][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.166418][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.182933][ T35] bond0 (unregistering): Released all slaves [ 692.244243][T19524] team0: Port device team_slave_0 added [ 692.276204][ T5282] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 692.283375][T19524] team0: Port device team_slave_1 added [ 692.309937][ T5282] ath9k_htc: Failed to initialize the device [ 692.341054][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 692.437211][T19524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.444779][T19524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.478645][T19524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.491566][T19524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.501771][T19524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.528135][T19524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.663975][ T1660] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 692.693068][T19524] hsr_slave_0: entered promiscuous mode [ 692.699122][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 692.718432][T19524] hsr_slave_1: entered promiscuous mode [ 692.747773][T19524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.768139][T19524] Cannot create hsr debugfs directory [ 692.819118][ T35] batadv_slave_1: left promiscuous mode [ 692.825418][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3459'. [ 692.843643][ T35] hsr_slave_0: left promiscuous mode [ 692.850110][ T35] hsr_slave_1: left promiscuous mode [ 692.856612][ T1660] usb 5-1: Using ep0 maxpacket: 8 [ 692.862557][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.870247][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.874521][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 692.881035][ T1660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.895705][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.898577][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 692.903190][ T1660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.920340][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.942696][ T1660] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 692.947304][ T9] usb 2-1: string descriptor 0 read error: -22 [ 692.976567][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.987681][ T35] veth1_macvtap: left promiscuous mode [ 692.993868][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.009545][ T1660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.024078][ T35] veth0_macvtap: left promiscuous mode [ 693.036339][ T1660] usb 5-1: config 0 descriptor?? [ 693.042153][ T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 693.043117][ T35] veth1_vlan: left promiscuous mode [ 693.085909][ T35] veth0_vlan: left promiscuous mode [ 693.222421][T19577] QAT: Device 13 not found [ 693.345985][ T9] usb 2-1: USB disconnect, device number 11 [ 693.484039][ T5294] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 693.504466][ T1660] usbhid 5-1:0.0: can't add hid device: -71 [ 693.510497][ T1660] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 693.525965][ T1660] usb 5-1: USB disconnect, device number 100 [ 693.651233][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 693.661437][ T5294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 693.681255][ T5294] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 693.690897][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.699237][ T5294] usb 1-1: Product: syz [ 693.703651][ T5294] usb 1-1: Manufacturer: syz [ 693.708883][ T5294] usb 1-1: SerialNumber: syz [ 693.715958][ T5294] usb 1-1: config 0 descriptor?? [ 693.725596][ T5294] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 693.738775][ T5294] em28xx 1-1:0.0: Video interface 0 found: bulk [ 693.793834][ T5233] Bluetooth: hci4: command tx timeout [ 693.933416][ T35] team0 (unregistering): Port device team_slave_1 removed [ 693.992314][ T35] team0 (unregistering): Port device team_slave_0 removed [ 694.251584][ T5294] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 694.382472][ T5294] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 694.391879][ T5294] em28xx 1-1:0.0: board has no eeprom [ 694.460956][ T5294] em28xx 1-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 694.481504][ T5294] em28xx 1-1:0.0: analog set to bulk mode. [ 694.487548][ T1660] em28xx 1-1:0.0: Registering V4L2 extension [ 694.511305][ T5294] usb 1-1: USB disconnect, device number 109 [ 694.537711][ T5294] em28xx 1-1:0.0: Disconnecting em28xx [ 694.632888][ T1660] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 694.679033][ T1660] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 694.704159][ T5282] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 694.757344][ T1660] DVB: Unable to find symbol xc2028_attach() [ 694.763437][ T1660] tuner: 1-0061: Tuner has no way to set tv freq [ 694.779446][ T1660] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 694.806106][ T1660] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 694.813121][ T1660] em28xx 1-1:0.0: No AC97 audio processor [ 694.833781][ T1660] tuner: 1-0061: Tuner has no way to set tv freq [ 694.867370][ T5282] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 694.887357][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.903140][ T1660] em28xx 1-1:0.0: Registered radio device as radio32 [ 694.917324][ T5282] usb 5-1: config 0 descriptor?? [ 694.936113][ T1660] usb 1-1: Decoder not found [ 694.980773][ T1660] em28xx 1-1:0.0: failed to create media graph [ 694.989528][ T1660] em28xx 1-1:0.0: V4L2 device radio32 deregistered [ 695.065290][ T1660] em28xx 1-1:0.0: V4L2 device video71 deregistered [ 695.102881][ T1660] em28xx 1-1:0.0: Registering input extension [ 695.112658][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 695.114067][ T5294] em28xx 1-1:0.0: Closing input extension [ 695.194087][ T5294] em28xx 1-1:0.0: Freeing device [ 695.366387][ T5282] [drm:udl_init] *ERROR* Selecting channel failed [ 695.405967][ T5282] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 695.412727][ T5282] [drm] Initialized udl on minor 2 [ 695.462427][ T5282] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 695.495624][ T5282] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 695.524588][ T5282] usb 5-1: USB disconnect, device number 101 [ 695.604007][ T5294] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 695.805030][ T5294] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.826385][ T5294] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 695.861083][ T5294] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.873041][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.875114][ T5233] Bluetooth: hci4: command tx timeout [ 695.889632][ T5294] usb 1-1: Product: syz [ 695.901106][ T5294] usb 1-1: Manufacturer: syz [ 695.930203][ T5294] usb 1-1: SerialNumber: syz [ 695.984162][ T5282] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 696.166946][ T5282] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 696.188189][T19635] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 696.196947][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.210414][T19524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.235115][ T5282] usb 2-1: Product: syz [ 696.239313][ T5282] usb 2-1: Manufacturer: syz [ 696.262012][ T5282] usb 2-1: SerialNumber: syz [ 696.276243][T19524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.289266][ T5282] usb 2-1: config 0 descriptor?? [ 696.303538][ T5282] ch341 2-1:0.0: ch341-uart converter detected [ 696.312078][T19524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 696.330970][T19524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 696.357292][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 696.511770][T19524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.522578][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 696.530758][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.552177][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.566892][T19524] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.579776][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.600795][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.608042][ T7947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.614136][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 696.625987][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.656627][ T9] usb 3-1: config 0 descriptor?? [ 696.669455][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.676709][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.836100][T19635] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 696.962404][T19524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.046692][ T5294] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 697.059939][T19524] veth0_vlan: entered promiscuous mode [ 697.066103][ T5294] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 697.103490][T19524] veth1_vlan: entered promiscuous mode [ 697.111154][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 697.135331][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0035/input/input52 [ 697.165362][ T9] microsoft 0003:045E:07DA.0035: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 697.257869][ T5294] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 697.337313][ T5282] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 697.460257][ T5294] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 697.515840][ T5282] usb 3-1: USB disconnect, device number 4 [ 697.537714][ T5294] usb 1-1: USB disconnect, device number 110 [ 697.553237][T19524] veth0_macvtap: entered promiscuous mode [ 697.563597][ T5294] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 697.591614][ T9] usb 2-1: USB disconnect, device number 12 [ 697.645364][ T9] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 697.674112][ T9] ch341 2-1:0.0: device disconnected [ 697.709881][T19524] veth1_macvtap: entered promiscuous mode [ 697.765615][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.789665][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.809954][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.831013][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.853274][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.866640][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.880660][T19524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.912791][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'. [ 697.926933][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.938843][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.954158][ T5233] Bluetooth: hci4: command tx timeout [ 697.955559][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.970872][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.983146][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.997195][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.010388][T19524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.047731][T19524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.071212][T19524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.134499][T19524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.167331][T19524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.185976][T19524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.200068][T19524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.213969][ T5294] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 698.375380][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.385290][ T5294] usb 1-1: Using ep0 maxpacket: 8 [ 698.410785][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.427497][ T5294] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 698.441897][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.452282][ T5294] usb 1-1: Product: syz [ 698.480103][ T5294] usb 1-1: Manufacturer: syz [ 698.496366][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3480'. [ 698.514616][ T5294] usb 1-1: SerialNumber: syz [ 698.519680][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.550223][ T5294] usb 1-1: config 0 descriptor?? [ 698.563778][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.788783][ T5294] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 698.832974][T19747] tun0: tun_chr_ioctl cmd 2147767507 [ 699.323949][ T937] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 699.508062][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 699.525873][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 699.541770][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 699.559944][ T937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 699.571213][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.604891][ T937] usb 4-1: config 0 descriptor?? [ 699.612828][T19766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 699.760576][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.814122][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 699.880640][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.975879][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.996237][ T5294] usb write operation failed. (-71) [ 700.004451][ T25] usb 3-1: config 0 has no interfaces? [ 700.015979][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.031197][ T5294] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 700.042534][ T937] plantronics 0003:047F:FFFF.0036: unknown main item tag 0xd [ 700.042761][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.059899][ T5294] dvbdev: DVB: registering new adapter (Terratec H7) [ 700.064664][ T937] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 700.078780][ T25] usb 3-1: Product: syz [ 700.082985][ T25] usb 3-1: Manufacturer: syz [ 700.087914][ T5294] usb 1-1: media controller created [ 700.097858][ T937] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 700.098232][ T5294] usb read operation failed. (-71) [ 700.119184][ T25] usb 3-1: SerialNumber: syz [ 700.145615][ T25] usb 3-1: config 0 descriptor?? [ 700.169679][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.180445][ T5294] usb write operation failed. (-71) [ 700.194451][ T5294] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 700.212279][ T5294] usb 1-1: USB disconnect, device number 111 [ 700.340454][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 700.353645][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 700.357212][ T8] usb 4-1: USB disconnect, device number 106 [ 700.383022][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 700.392655][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 700.405236][ T66] hsr0: left allmulticast mode [ 700.410695][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 700.420592][ T66] hsr_slave_0: left allmulticast mode [ 700.426245][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.435743][ T66] hsr_slave_1: left allmulticast mode [ 700.441237][ T66] hsr0: left promiscuous mode [ 700.447520][ T66] bridge0: port 3(hsr0) entered disabled state [ 700.474384][ T66] bridge_slave_1: left allmulticast mode [ 700.480143][ T66] bridge_slave_1: left promiscuous mode [ 700.485909][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.510195][ T66] bridge_slave_0: left allmulticast mode [ 700.516230][ T66] bridge_slave_0: left promiscuous mode [ 700.521982][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.773922][ T25] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 700.922574][ T5281] usb 3-1: USB disconnect, device number 5 [ 700.962612][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 700.992170][ T25] usb 1-1: config 1 interface 1 has no altsetting 0 [ 701.026976][ T25] usb 1-1: string descriptor 0 read error: -22 [ 701.033418][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.051143][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.090308][ T25] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 701.102270][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.128429][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.142805][ T66] bond0 (unregistering): Released all slaves [ 701.157943][ T66] bond1 (unregistering): Released all slaves [ 701.297392][T19792] QAT: Device 13 not found [ 701.304782][ T66] tipc: Left network mode [ 701.398295][ T25] usb 1-1: USB disconnect, device number 112 [ 701.586620][ T1660] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 701.738123][ T66] hsr_slave_0: left promiscuous mode [ 701.749662][ T66] hsr_slave_1: left promiscuous mode [ 701.757885][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.764399][ T1660] usb 4-1: Using ep0 maxpacket: 32 [ 701.771131][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.775207][ T1660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.789901][ T1660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.790130][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.800094][ T1660] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 701.800122][ T1660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.828412][ T1660] usb 4-1: config 0 descriptor?? [ 701.835522][ T1660] hub 4-1:0.0: USB hub found [ 701.868474][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.982889][ T66] veth1_macvtap: left promiscuous mode [ 702.014442][ T66] veth0_macvtap: left promiscuous mode [ 702.020148][ T66] veth1_vlan: left promiscuous mode [ 702.050399][ T66] veth0_vlan: left promiscuous mode [ 702.053412][ T1660] hub 4-1:0.0: 1 port detected [ 702.528555][ T5236] Bluetooth: hci1: command tx timeout [ 702.699451][ T1660] hub 4-1:0.0: activate --> -90 [ 702.804466][ T66] team0 (unregistering): Port device team_slave_1 removed [ 702.866937][ T66] team0 (unregistering): Port device team_slave_0 removed [ 703.111934][ T5294] usb 4-1: USB disconnect, device number 107 [ 703.711087][T19793] chnl_net:caif_netlink_parms(): no params data found [ 704.067766][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3510'. [ 704.176699][T19793] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.219846][T19793] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.228087][T19793] bridge_slave_0: entered allmulticast mode [ 704.246292][T19793] bridge_slave_0: entered promiscuous mode [ 704.270795][T19793] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.292808][T19793] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.314090][T19793] bridge_slave_1: entered allmulticast mode [ 704.322445][T19793] bridge_slave_1: entered promiscuous mode [ 704.344597][ T1660] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 704.487091][T19793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.524183][ T1660] usb 4-1: Using ep0 maxpacket: 8 [ 704.531527][T19793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.537708][ T1660] usb 4-1: config 1 interface 1 has no altsetting 0 [ 704.552304][ T1660] usb 4-1: string descriptor 0 read error: -22 [ 704.560716][ T1660] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 704.582328][T19883] input: syz1 as /devices/virtual/input/input54 [ 704.595454][T19521] Bluetooth: hci1: command tx timeout [ 704.604354][T19521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.614294][T19521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.615565][ T1660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.629710][T19521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.639198][T19521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.648822][T19521] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 704.659689][T19521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.716802][ T1660] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 704.880541][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.896905][T19868] QAT: Device 13 not found [ 704.977285][ T1660] usb 4-1: USB disconnect, device number 108 [ 704.990319][T19793] team0: Port device team_slave_0 added [ 705.026518][T19793] team0: Port device team_slave_1 added [ 705.160520][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.249709][T19793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.266954][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.331675][T19793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.398044][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.473647][T19793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.490942][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.516887][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.545364][T19793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.609268][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.832372][T19793] hsr_slave_0: entered promiscuous mode [ 705.856826][T19793] hsr_slave_1: entered promiscuous mode [ 705.997344][ T5281] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 706.095317][ T66] bridge_slave_1: left allmulticast mode [ 706.101018][ T66] bridge_slave_1: left promiscuous mode [ 706.118167][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.149915][ T66] bridge_slave_0: left allmulticast mode [ 706.160505][ T66] bridge_slave_0: left promiscuous mode [ 706.174722][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 706.178378][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.186137][ T5281] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.202217][ T5281] usb 2-1: config 0 has no interface number 0 [ 706.214064][ T5281] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.237511][ T5281] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 706.265719][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.304427][ T5281] usb 2-1: config 0 descriptor?? [ 706.326567][ T5281] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 706.591375][ T5281] usb 2-1: USB disconnect, device number 13 [ 706.619686][ T5281] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 706.674193][T19521] Bluetooth: hci1: command tx timeout [ 706.764850][T19521] Bluetooth: hci2: command tx timeout [ 707.051210][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.063454][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.074738][ T66] bond0 (unregistering): Released all slaves [ 707.257769][ T66] tipc: Disabling bearer [ 707.263405][ T66] tipc: Left network mode [ 707.311068][T19888] chnl_net:caif_netlink_parms(): no params data found [ 707.903852][ T5281] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 708.027764][T19888] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.035612][T19888] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.043100][T19888] bridge_slave_0: entered allmulticast mode [ 708.052756][T19888] bridge_slave_0: entered promiscuous mode [ 708.067799][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 708.076630][ T66] hsr_slave_0: left promiscuous mode [ 708.077266][ T5281] usb 4-1: config 1 interface 1 has no altsetting 0 [ 708.093481][ T5281] usb 4-1: string descriptor 0 read error: -22 [ 708.099919][ T66] hsr_slave_1: left promiscuous mode [ 708.100003][ T5281] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.114782][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.122941][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.143858][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.165152][ T5281] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 708.172667][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.183798][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.221979][ T66] veth1_macvtap: left promiscuous mode [ 708.227905][ T66] veth0_macvtap: left promiscuous mode [ 708.233996][ T66] veth1_vlan: left promiscuous mode [ 708.239372][ T66] veth0_vlan: left promiscuous mode [ 708.335172][T19983] QAT: Device 13 not found [ 708.388795][ T5281] usb 4-1: USB disconnect, device number 109 [ 708.754107][T19521] Bluetooth: hci1: command tx timeout [ 708.834327][T19521] Bluetooth: hci2: command tx timeout [ 708.865703][ T66] team0 (unregistering): Port device team_slave_1 removed [ 708.940784][ T66] team0 (unregistering): Port device team_slave_0 removed [ 709.496096][T19888] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.503327][T19888] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.513695][T19888] bridge_slave_1: entered allmulticast mode [ 709.523425][T19888] bridge_slave_1: entered promiscuous mode [ 709.533294][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 709.607647][T19521] Bluetooth: hci0: unexpected cc 0x0402 length: 65 > 1 [ 709.822227][T19888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.856055][T19888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.998360][T19888] team0: Port device team_slave_0 added [ 710.092918][T19888] team0: Port device team_slave_1 added [ 710.118685][T20023] syzkaller1: entered promiscuous mode [ 710.124349][T20023] syzkaller1: entered allmulticast mode [ 710.202193][T19888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.210017][T19888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.240616][T19888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.261790][T19793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 710.284797][T19793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 710.294294][T19793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 710.303937][T19888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.310992][T19888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.342045][T19888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.370154][T19793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 710.458905][T19888] hsr_slave_0: entered promiscuous mode [ 710.466641][T19888] hsr_slave_1: entered promiscuous mode [ 710.472918][T19888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 710.480955][T19888] Cannot create hsr debugfs directory [ 710.914110][T19521] Bluetooth: hci2: command tx timeout [ 711.138359][T19793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.158349][T19793] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.279710][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.286951][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.332434][ T2572] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.339649][ T2572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.560717][T19793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.707947][T19793] veth0_vlan: entered promiscuous mode [ 711.759772][T19793] veth1_vlan: entered promiscuous mode [ 711.908323][T19888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 711.965098][T19888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 711.978684][T19793] veth0_macvtap: entered promiscuous mode [ 712.007790][T19793] veth1_macvtap: entered promiscuous mode [ 712.061728][T19888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 712.122472][T19888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 712.148865][T19793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.194002][T19793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.214823][T19793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.230876][T19793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.243090][T19793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.296782][T19793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.310976][T19793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.334279][T19793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.367348][T19793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.393253][T19793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.410320][T19793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.422430][T19793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.459231][T19793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.483895][T19793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.492639][T19793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.525747][T19793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.759190][T19888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.782495][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.805146][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.008991][T19521] Bluetooth: hci2: command tx timeout [ 713.032803][T19888] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.041827][ T2572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.051515][ T2572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.117011][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.124272][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.148961][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.156183][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.436189][T19888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.644143][T19521] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 713.654368][T19521] Bluetooth: hci0: Injecting HCI hardware error event [ 713.663077][ T5236] Bluetooth: hci0: hardware error 0x00 [ 713.679563][T20134] tls_set_device_offload_rx: netdev not found [ 713.691138][T19888] veth0_vlan: entered promiscuous mode [ 713.723614][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3566'. [ 713.748421][T19888] veth1_vlan: entered promiscuous mode [ 713.836965][T19888] veth0_macvtap: entered promiscuous mode [ 713.878436][T19888] veth1_macvtap: entered promiscuous mode [ 713.959428][T19888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.003826][T19888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.043116][T19888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.076498][T19888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.108848][T19888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.136539][T19888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.159576][T19888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.171237][T19888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.201702][T19888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.219448][T19888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.239419][T19888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.250541][T19888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.261419][T19888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.271609][T19888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.282967][T19888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.308549][T19888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.387857][T19888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.402695][T19888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.412021][T19888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.428731][T19888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.985194][ T2572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.993161][ T2572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.003096][T20199] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3574'. [ 715.293270][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.326556][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.543889][ T5282] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 715.551821][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 715.717295][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 715.724606][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 715.750003][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.788063][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.798705][ T5282] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 715.808451][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.838507][ T5282] usb 2-1: config 0 descriptor?? [ 716.354410][ T5281] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 716.362840][ T5282] usbhid 2-1:0.0: can't add hid device: -71 [ 716.377599][ T5282] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 716.434323][ T5282] usb 2-1: USB disconnect, device number 14 [ 716.533987][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 716.543437][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 716.592263][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 716.646677][ T5281] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 716.710502][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.754008][ T5281] usb 1-1: Product: syz [ 716.758223][ T5281] usb 1-1: Manufacturer: syz [ 716.777253][ T5281] usb 1-1: SerialNumber: syz [ 716.789350][ T5281] usb 1-1: config 0 descriptor?? [ 716.825674][ T5281] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 716.865547][ T5281] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 716.944678][T20286] syzkaller1: entered promiscuous mode [ 716.950256][T20286] syzkaller1: entered allmulticast mode [ 717.477160][ T5281] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 717.487393][ T5281] em28xx 1-1:0.0: Config register raw data: 0x56 [ 717.536024][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3597'. [ 717.672974][T20327] pim6reg1: entered promiscuous mode [ 717.700809][T20327] pim6reg1: entered allmulticast mode [ 717.702377][ T5281] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 717.729319][ T5281] em28xx 1-1:0.0: No AC97 audio processor [ 717.763289][ T5281] usb 1-1: USB disconnect, device number 113 [ 717.787767][ T5281] em28xx 1-1:0.0: Disconnecting em28xx [ 717.806994][ T5281] em28xx 1-1:0.0: Freeing device [ 718.284035][ T8] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 718.434159][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 718.452136][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.474090][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.494707][ T8] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 718.515715][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.541223][ T8] usb 4-1: config 0 descriptor?? [ 718.579050][ T5294] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 718.754299][ T5294] usb 5-1: Using ep0 maxpacket: 8 [ 718.767643][ T5294] usb 5-1: config 1 interface 1 has no altsetting 0 [ 718.780557][ T5294] usb 5-1: string descriptor 0 read error: -22 [ 718.789944][ T5294] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 718.804204][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.823542][ T5294] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 719.001684][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 719.008491][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 719.026592][T20361] QAT: Device 13 not found [ 719.034227][ T8] usb 4-1: USB disconnect, device number 110 [ 719.086123][ T5294] usb 5-1: USB disconnect, device number 102 [ 720.113989][ T5294] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 720.274065][ T5294] usb 5-1: Using ep0 maxpacket: 8 [ 720.280839][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.284052][ T5281] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 720.299895][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.321754][ T5294] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 720.334308][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.350066][ T5294] usb 5-1: config 0 descriptor?? [ 720.453928][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 720.461048][ T5281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 720.475304][ T5281] usb 4-1: config 8 has an invalid interface number: 249 but max is 0 [ 720.484584][ T5281] usb 4-1: config 8 has no interface number 0 [ 720.490713][ T5281] usb 4-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 720.502656][ T5281] usb 4-1: config 8 interface 249 has no altsetting 0 [ 720.513438][ T5281] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 720.524626][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.532669][ T5281] usb 4-1: Product: syz [ 720.538030][ T5281] usb 4-1: Manufacturer: syz [ 720.542680][ T5281] usb 4-1: SerialNumber: syz [ 720.553872][ T5282] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 720.674010][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 720.703963][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 720.711876][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.723206][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.733457][ T5282] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 720.743658][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.767853][ T5282] usb 3-1: config 0 descriptor?? [ 720.780309][ T5281] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 720.798797][ T5281] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 720.801411][ T5294] usbhid 5-1:0.0: can't add hid device: -71 [ 720.813612][ T5281] dib0700: firmware download failed at 7 with -71 [ 720.823333][ T5294] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 720.832129][ T5281] usb 4-1: USB disconnect, device number 111 [ 720.838881][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 720.851709][ T8] usb 2-1: config 1 interface 1 has no altsetting 0 [ 720.864335][ T5294] usb 5-1: USB disconnect, device number 103 [ 720.873185][ T8] usb 2-1: string descriptor 0 read error: -22 [ 720.880960][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.891137][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.921914][ T8] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 720.978916][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3635'. [ 721.120668][T20454] QAT: Device 13 not found [ 721.169420][ T8] usb 2-1: USB disconnect, device number 15 [ 721.235049][ T5282] usbhid 3-1:0.0: can't add hid device: -71 [ 721.246066][ T5282] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 721.266638][ T5282] usb 3-1: USB disconnect, device number 6 [ 721.734347][T20487] syz_tun: entered promiscuous mode [ 721.740494][T20487] batadv_slave_0: entered promiscuous mode [ 721.747351][T20487] hsr1: entered allmulticast mode [ 721.752436][T20487] syz_tun: entered allmulticast mode [ 721.757872][T20487] batadv_slave_0: entered allmulticast mode [ 721.772280][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3646'. [ 721.792736][T20489] netlink: 'syz.1.3646': attribute type 10 has an invalid length. [ 721.804936][ T5282] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 721.870612][T20489] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 721.990287][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 721.996927][ T5282] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 722.027894][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.059601][ T5282] usb 1-1: config 0 descriptor?? [ 722.325898][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3653'. [ 722.366196][T20514] tipc: Started in network mode [ 722.382303][T20514] tipc: Node identity 5f00000000004c3a0000400000000001, cluster identity 4711 [ 722.412031][T20514] tipc: Enabling of bearer rejected, failed to enable media [ 723.026022][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 723.055108][T20536] team0: left allmulticast mode [ 723.060065][T20536] team_slave_0: left allmulticast mode [ 723.075308][T20536] team_slave_1: left allmulticast mode [ 723.091198][T20536] team0: left promiscuous mode [ 723.100441][T20536] team_slave_0: left promiscuous mode [ 723.106638][T20536] team_slave_1: left promiscuous mode [ 723.113354][T20536] bridge0: port 3(team0) entered disabled state [ 723.134822][T20536] bridge_slave_0: left allmulticast mode [ 723.141408][T20536] bridge_slave_0: left promiscuous mode [ 723.154718][ T937] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 723.163224][T20536] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.313438][ T5282] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 723.324574][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 723.329927][ T5282] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 723.346809][ T937] usb 4-1: config 1 interface 1 has no altsetting 0 [ 723.354952][ T5282] asix 1-1:0.0: probe with driver asix failed with error -71 [ 723.373075][ T937] usb 4-1: string descriptor 0 read error: -22 [ 723.380129][ T937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 723.401784][ T5282] usb 1-1: USB disconnect, device number 114 [ 723.421783][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.456508][ T937] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 723.655163][T20533] QAT: Device 13 not found [ 723.728499][ T937] usb 4-1: USB disconnect, device number 112 [ 723.742270][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 724.509453][T20590] syzkaller1: entered promiscuous mode [ 724.516144][T20590] syzkaller1: entered allmulticast mode [ 724.576960][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 724.976517][T20610] loop0: detected capacity change from 0 to 7 [ 725.030452][T20610] Dev loop0: unable to read RDB block 7 [ 725.036347][T20610] loop0: AHDI p1 p2 p4 [ 725.040866][T20610] loop0: partition table partially beyond EOD, truncated [ 725.049363][T20610] loop0: p1 size 6910006 extends beyond EOD, truncated [ 725.118280][ T5229] udevd[5229]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 725.187989][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'. [ 725.314333][ T5282] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 725.462685][T20628] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 725.478357][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 725.486931][ T5282] usb 3-1: config 1 interface 1 has no altsetting 0 [ 725.496902][ T5282] usb 3-1: string descriptor 0 read error: -22 [ 725.503419][ T5282] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.548225][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.572375][ T5282] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 725.654140][T20635] netlink: 'syz.1.3695': attribute type 9 has an invalid length. [ 725.690259][T20635] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.3695'. [ 725.775676][T20615] QAT: Device 13 not found [ 725.834844][ T5282] usb 3-1: USB disconnect, device number 7 [ 725.884437][ T5229] udevd[5229]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.951785][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3700'. [ 726.523519][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3703'. [ 727.214857][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3715'. [ 727.374424][ T5294] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 727.420602][ T1660] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 727.562038][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 727.579238][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.590834][ T1660] usb 3-1: Using ep0 maxpacket: 8 [ 727.605691][ T1660] usb 3-1: config 1 interface 1 has no altsetting 0 [ 727.621897][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.635512][ T5229] Buffer I/O error on dev loop7, logical block 4095, async page read [ 727.644222][ T1660] usb 3-1: string descriptor 0 read error: -22 [ 727.650481][ T1660] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.670815][ T5294] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 727.680513][ T1660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.688698][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.703647][ T1660] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 727.724966][ T5294] usb 2-1: config 0 descriptor?? [ 727.905110][T20703] QAT: Device 13 not found [ 727.966579][ T1660] usb 3-1: USB disconnect, device number 8 [ 728.020729][ T5229] udevd[5229]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.039572][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3723'. [ 728.329308][ T5294] usbhid 2-1:0.0: can't add hid device: -71 [ 728.341112][ T5294] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 728.344745][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 728.344761][ T29] audit: type=1326 audit(1727048872.225:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.351425][ T5294] usb 2-1: USB disconnect, device number 16 [ 728.360919][ T29] audit: type=1326 audit(1727048872.235:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.405722][ T29] audit: type=1326 audit(1727048872.235:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.437507][ T29] audit: type=1326 audit(1727048872.235:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.446826][T20747] tipc: Enabled bearer , priority 10 [ 728.482862][ T29] audit: type=1326 audit(1727048872.235:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.505542][ T29] audit: type=1326 audit(1727048872.235:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.565988][ T29] audit: type=1326 audit(1727048872.235:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.612128][ T29] audit: type=1326 audit(1727048872.305:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.717816][ T29] audit: type=1326 audit(1727048872.305:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.742514][ T29] audit: type=1326 audit(1727048872.305:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20743 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 728.786167][T20754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3729'. [ 728.920158][ T1660] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 729.073991][ T5242] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 729.104289][ T1660] usb 3-1: Using ep0 maxpacket: 8 [ 729.111561][ T1660] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 729.133090][ T1660] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 729.165243][ T1660] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 729.183253][ T1660] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 729.193526][ T1660] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.209534][ T1660] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 729.234166][ T1660] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 729.262619][ T1660] usb 3-1: Product: syz [ 729.267140][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 729.298310][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.323456][ T5242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.336915][ T5242] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 729.353936][ T5242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.379747][ T5242] usb 1-1: config 0 descriptor?? [ 729.496678][ T1660] usb 3-1: usb_control_msg returned -32 [ 729.502382][ T1660] usbtmc 3-1:16.0: can't read capabilities [ 729.568349][ T8] tipc: Node number set to 1593838651 [ 729.693938][ T5294] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 729.839359][ T5242] usbhid 1-1:0.0: can't add hid device: -71 [ 729.845563][ T5242] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 729.856647][ T5242] usb 1-1: USB disconnect, device number 115 [ 729.863819][ T5294] usb 5-1: Using ep0 maxpacket: 32 [ 729.877083][ T5294] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 729.898280][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.913898][ T5294] usb 5-1: Product: syz [ 729.918316][ T5294] usb 5-1: Manufacturer: syz [ 729.922950][ T5294] usb 5-1: SerialNumber: syz [ 729.941431][ T5294] usb 5-1: config 0 descriptor?? [ 729.959941][ T5294] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 730.100036][ T8] usb 3-1: USB disconnect, device number 9 [ 730.297364][ T25] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 730.490609][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 730.506946][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.528490][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.542229][ T25] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 730.543563][T20808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3750'. [ 730.560639][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.592611][ T25] usb 4-1: config 0 descriptor?? [ 730.923967][ T8] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 731.049610][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 731.058386][T20824] random: crng reseeded on system resumption [ 731.064783][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 731.093971][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 731.095965][ T25] usb 4-1: USB disconnect, device number 113 [ 731.102888][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 731.113469][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 731.136860][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 731.153316][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 731.169478][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.183363][ T5294] gspca_ov534_9: reg_w failed -71 [ 731.189353][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 731.201727][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.423444][ T8] usb 1-1: usb_control_msg returned -32 [ 731.428265][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3758'. [ 731.429564][ T8] usbtmc 1-1:16.0: can't read capabilities [ 731.534771][ T5294] gspca_ov534_9: Unknown sensor 0000 [ 731.534847][ T5294] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 731.559017][T20824] Unrecognized hibernate image header format! [ 731.565705][T20824] PM: hibernation: Image mismatch: architecture specific data [ 731.574592][ T5294] usb 5-1: USB disconnect, device number 104 [ 731.806246][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 731.964024][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 731.971087][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.982383][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.994084][ T25] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 732.003345][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.014477][ T25] usb 2-1: config 0 descriptor?? [ 732.171651][T20855] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 732.267925][T20854] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 732.452772][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 732.468310][ T8] usb 1-1: USB disconnect, device number 116 [ 732.478272][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 732.531985][ T25] usb 2-1: USB disconnect, device number 17 [ 733.089273][ T25] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 733.153412][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3774'. [ 733.263844][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 733.283646][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.301579][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.312712][ T25] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 733.342834][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.399075][ T25] usb 5-1: config 0 descriptor?? [ 733.880990][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 733.887308][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 733.905670][ T25] usb 5-1: USB disconnect, device number 105 [ 734.645795][ T80] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 734.835671][ T80] usb 3-1: Using ep0 maxpacket: 8 [ 734.849419][ T80] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.862992][ T80] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.875129][ T80] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 734.884528][ T80] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.924747][ T80] usb 3-1: config 0 descriptor?? [ 735.175458][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 735.349721][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.366323][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.380539][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 735.393634][ T5294] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 735.403201][ T80] usbhid 3-1:0.0: can't add hid device: -71 [ 735.415386][ T80] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 735.423227][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 735.436218][ T80] usb 3-1: USB disconnect, device number 10 [ 735.442316][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.456329][ T25] usb 2-1: config 0 descriptor?? [ 735.555397][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.566529][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.578304][ T5294] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 735.587440][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.597043][ T5294] usb 4-1: config 0 descriptor?? [ 735.871358][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.879121][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.886722][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.894240][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.901786][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.909532][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.917080][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.924557][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.932033][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.940256][ T25] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 735.949090][ T25] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 735.984132][ T25] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 736.019275][ T5294] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 736.032908][ T5294] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 736.070523][ T5294] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0038/input/input55 [ 736.082244][T20956] netlink: 'syz.2.3796': attribute type 3 has an invalid length. [ 736.082285][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3796'. [ 736.133902][ T5294] cm6533_jd 0003:0D8C:0022.0038: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 736.284421][ T25] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 736.294863][ T8] usb 4-1: USB disconnect, device number 114 [ 736.348888][T20963] syzkaller1: entered promiscuous mode [ 736.374983][T20963] syzkaller1: entered allmulticast mode [ 736.464263][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 736.473452][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 736.500527][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 736.520143][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.537374][ T25] usb 5-1: Product: syz [ 736.541795][ T25] usb 5-1: Manufacturer: syz [ 736.549270][ T25] usb 5-1: SerialNumber: syz [ 736.693922][ T5242] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 736.764338][ T25] usb 5-1: USB disconnect, device number 106 [ 736.864006][ T5242] usb 3-1: Using ep0 maxpacket: 8 [ 736.877467][ T5242] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.895089][ T5242] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 736.905751][T20972] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3813'. [ 736.913816][ T5242] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 736.932757][ T5242] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.946724][T20972] veth1_macvtap: left promiscuous mode [ 736.953772][ T5242] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 736.971216][ T5242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.979751][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3813'. [ 737.005873][T20972] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3813'. [ 737.023933][T20972] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 737.202000][ T5242] usb 3-1: GET_CAPABILITIES returned 0 [ 737.215573][ T5242] usbtmc 3-1:16.0: can't read capabilities [ 737.253925][ T937] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 737.403856][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 737.429487][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.453140][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.493833][ T937] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 737.510639][ T8] usb 3-1: USB disconnect, device number 11 [ 737.526515][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.559975][ T937] usb 4-1: config 0 descriptor?? [ 737.562809][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 737.562830][ T29] audit: type=1326 audit(1727048881.435:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20992 comm="syz.0.3806" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 737.838597][ T29] audit: type=1326 audit(1727048881.715:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.4.3807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7fc00000 [ 738.021951][ T937] usbhid 4-1:0.0: can't add hid device: -71 [ 738.044713][ T937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 738.054852][ T937] usb 4-1: USB disconnect, device number 115 [ 738.061495][ T5282] usb 2-1: USB disconnect, device number 18 [ 738.459683][ T29] audit: type=1326 audit(1727048882.325:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.4.3807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3579 code=0x7fc00000 [ 738.675261][T21023] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.682924][T21023] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.842671][T21063] loop9: detected capacity change from 0 to 7 [ 739.854116][T21063] Dev loop9: unable to read RDB block 7 [ 739.859723][T21063] loop9: AHDI p2 p3 p4 [ 739.865231][T21063] loop9: partition table partially beyond EOD, truncated [ 739.873647][T21063] loop9: p2 start 2961973428 is beyond EOD, truncated [ 739.882029][T21063] loop9: p3 start 1756542996 is beyond EOD, truncated [ 739.996824][ T25] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 740.004640][ T5242] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 740.174964][T21072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3835'. [ 740.185817][ T5242] usb 3-1: Using ep0 maxpacket: 8 [ 740.191509][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 740.202009][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.215041][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.225944][ T25] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 740.244248][ T5242] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 740.253322][ T5242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.263779][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.284155][ T5242] usb 3-1: Product: syz [ 740.288403][ T5242] usb 3-1: Manufacturer: syz [ 740.293040][ T5242] usb 3-1: SerialNumber: syz [ 740.301107][ T25] usb 1-1: config 0 descriptor?? [ 740.337705][ T5242] usb 3-1: config 0 descriptor?? [ 740.356097][ T5242] gspca_main: sq905-2.14.0 probing 2770:9120 [ 740.483309][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 740.759008][T21096] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 740.780250][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 740.790999][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 740.812674][ T25] usb 1-1: USB disconnect, device number 117 [ 741.054224][ T29] audit: type=1326 audit(1727048884.925:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21074 comm="syz.3.3836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7fc00000 [ 741.076251][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.274011][ T937] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 741.365040][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'. [ 741.381082][ T5242] gspca_sq905: bulk read fail (-22) len 0/4 [ 741.398897][ T5242] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 741.443777][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 741.450542][ T937] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.472716][ T937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.503283][ T937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.520325][ T937] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.539643][ T937] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.551978][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.591251][ T5282] usb 3-1: USB disconnect, device number 12 [ 741.774470][ T5242] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 741.792038][ T937] usb 5-1: usb_control_msg returned -71 [ 741.800746][ T937] usbtmc 5-1:16.0: can't read capabilities [ 741.814555][ T937] usb 5-1: USB disconnect, device number 107 [ 741.933956][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 741.945342][ T5242] usb 2-1: config 1 interface 1 has no altsetting 0 [ 741.954951][ T5242] usb 2-1: string descriptor 0 read error: -22 [ 741.961269][ T5242] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.973910][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.999742][ T5242] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 742.198398][T21122] QAT: Device 13 not found [ 742.256399][ T5242] usb 2-1: USB disconnect, device number 19 [ 742.313851][ T25] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 742.495340][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 742.507862][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.533853][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.553852][ T25] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 742.563050][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.591136][ T25] usb 1-1: config 0 descriptor?? [ 742.713911][ T5282] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 742.883441][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 742.904381][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.962343][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.984321][ T5282] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 743.008338][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.041939][ T5282] usb 3-1: config 0 descriptor?? [ 743.093506][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 743.110320][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 743.121457][ T25] usb 1-1: USB disconnect, device number 118 [ 743.140570][ T29] audit: type=1326 audit(1727048887.015:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.212561][ T29] audit: type=1326 audit(1727048887.045:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.268834][ T29] audit: type=1326 audit(1727048887.045:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.353784][ T29] audit: type=1326 audit(1727048887.045:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.425185][ T29] audit: type=1326 audit(1727048887.045:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.518237][ T5282] usbhid 3-1:0.0: can't add hid device: -71 [ 743.526148][ T5282] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 743.539618][ T29] audit: type=1326 audit(1727048887.045:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.587137][ T5282] usb 3-1: USB disconnect, device number 13 [ 743.643271][ T29] audit: type=1326 audit(1727048887.045:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.667919][ T29] audit: type=1326 audit(1727048887.045:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.712937][ T29] audit: type=1326 audit(1727048887.045:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.742531][ T29] audit: type=1326 audit(1727048887.045:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21156 comm="syz.3.3863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 743.845442][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 744.364747][ T5242] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 744.524437][ T5242] usb 4-1: Using ep0 maxpacket: 8 [ 744.537471][ T5242] usb 4-1: config 1 interface 1 has no altsetting 0 [ 744.547781][ T5242] usb 4-1: string descriptor 0 read error: -22 [ 744.554706][ T5242] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.563923][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.577992][ T5242] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 744.778647][T21189] QAT: Device 13 not found [ 744.829825][ T5242] usb 4-1: USB disconnect, device number 116 [ 745.155554][ T5294] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 745.213838][ T25] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 745.316703][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 745.326290][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.352137][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.362977][ T5294] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 745.372457][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.383939][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 745.394258][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.409508][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.420556][ T5294] usb 2-1: config 0 descriptor?? [ 745.427703][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 745.437058][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 745.449654][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.462267][ T25] usb 5-1: config 0 descriptor?? [ 745.471169][ T25] hub 5-1:0.0: USB hub found [ 745.513985][ T5281] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 745.623079][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3887'. [ 745.663859][ T5282] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 745.683940][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 745.689712][ T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 745.692229][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.713292][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.725183][ T5281] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 745.734896][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.747054][ T5281] usb 1-1: config 0 descriptor?? [ 745.834940][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 745.842897][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.854815][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.865570][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 745.891480][ T5294] usbhid 2-1:0.0: can't add hid device: -71 [ 745.900673][ T5294] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 745.905664][ T5282] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 745.916022][ T5294] usb 2-1: USB disconnect, device number 20 [ 745.930991][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.959844][ T25] hid-generic 0003:046D:C31C.0039: item fetching failed at offset 0/1 [ 745.969716][ T5282] usb 4-1: config 0 descriptor?? [ 745.981598][ T25] hid-generic 0003:046D:C31C.0039: probe with driver hid-generic failed with error -22 [ 746.227680][ T5281] usbhid 1-1:0.0: can't add hid device: -71 [ 746.240323][ T5281] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 746.253194][ T5281] usb 1-1: USB disconnect, device number 119 [ 746.345067][ T25] usb 5-1: USB disconnect, device number 108 [ 746.445906][ T5282] HID 045e:07da: Invalid code 65791 type 1 [ 746.480985][ T5282] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003A/input/input56 [ 746.509180][ T5282] microsoft 0003:045E:07DA.003A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 746.681824][ T25] usb 4-1: USB disconnect, device number 117 [ 747.124268][ T5282] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 747.235823][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.242239][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.293890][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 747.315252][ T5282] usb 5-1: config 1 interface 1 has no altsetting 0 [ 747.349988][ T5282] usb 5-1: string descriptor 0 read error: -22 [ 747.357075][ T5282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 747.376744][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.400435][ T5282] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 747.531257][T21278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'. [ 747.605978][T21266] QAT: Device 13 not found [ 747.650204][ T5282] usb 5-1: USB disconnect, device number 109 [ 747.675501][ T5244] udevd[5244]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 747.703956][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3901'. [ 748.303854][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 748.343916][ T25] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 748.463805][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 748.471358][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.483379][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.493547][ T8] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 748.502952][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.521554][ T8] usb 3-1: config 0 descriptor?? [ 748.524470][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 748.545112][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.573964][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.604585][ T25] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 748.613647][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.656915][ T25] usb 4-1: config 0 descriptor?? [ 748.961072][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 748.970792][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 748.995068][ T8] usb 3-1: USB disconnect, device number 14 [ 749.090430][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 749.103865][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 749.125641][ T25] usb 4-1: USB disconnect, device number 118 [ 749.273656][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3916'. [ 749.285571][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 749.371331][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'. [ 749.533836][ T5282] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 749.669834][T21353] veth1_vlan: left promiscuous mode [ 749.686065][T21353] veth1_vlan: entered promiscuous mode [ 749.708431][T21353] team0: Port device macvlan1 added [ 749.725373][ T5282] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 749.737593][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.754848][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.765517][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 749.780560][ T5282] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 749.791549][ T5282] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 749.800689][ T5282] usb 5-1: Manufacturer: syz [ 749.814269][ T5282] usb 5-1: config 0 descriptor?? [ 749.838440][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 749.845699][ T8] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 749.903972][ T5242] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 749.993831][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 750.001448][ T25] usb 3-1: config 1 interface 1 has no altsetting 0 [ 750.003887][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 750.018349][ T25] usb 3-1: string descriptor 0 read error: -22 [ 750.019314][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 750.030210][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.042761][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.043659][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.053485][ T8] usb 1-1: Product: syz [ 750.066866][ T8] usb 1-1: Manufacturer: syz [ 750.072370][ T8] usb 1-1: SerialNumber: syz [ 750.082254][ T25] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 750.090870][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.102127][ T8] usb 1-1: config 0 descriptor?? [ 750.108152][ T5242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.118275][ T5242] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 750.127423][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.129026][ T8] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 750.146254][ T5242] usb 4-1: config 0 descriptor?? [ 750.268611][ T5282] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 750.285993][T21350] QAT: Device 13 not found [ 750.312763][ T5282] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 750.354932][ T25] usb 3-1: USB disconnect, device number 15 [ 750.364130][ T5282] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 750.586239][ T5242] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 750.607861][ T5242] cm6533_jd 0003:0D8C:0022.003C: unknown main item tag 0x0 [ 750.626659][ T5242] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.003C/input/input57 [ 750.669057][ T5242] cm6533_jd 0003:0D8C:0022.003C: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 750.788100][ T5242] usb 4-1: USB disconnect, device number 119 [ 751.076870][ T5242] usb 5-1: USB disconnect, device number 110 [ 751.272013][T21383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3931'. [ 751.343920][ T8] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 751.363318][ T8] usb 1-1: USB disconnect, device number 120 [ 751.693907][ T5282] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 751.753908][ T5281] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 751.855933][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 751.866513][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.883234][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.893625][ T5282] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 751.903198][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.914215][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 751.920144][ T5282] usb 4-1: config 0 descriptor?? [ 751.930866][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.933920][ T5242] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 751.958132][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.994119][ T5281] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 752.004038][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.033187][ T5281] usb 2-1: config 0 descriptor?? [ 752.137523][ T5242] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 752.149680][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.160713][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.186941][ T5242] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 752.208612][ T5242] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 752.222708][ T5242] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 752.232458][T21416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'. [ 752.233354][ T5242] usb 5-1: Manufacturer: syz [ 752.255259][ T5242] usb 5-1: config 0 descriptor?? [ 752.293952][ T8] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 752.443912][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 752.460457][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.496743][ T5281] usbhid 2-1:0.0: can't add hid device: -71 [ 752.502852][ T5281] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 752.519475][ T5282] usbhid 4-1:0.0: can't add hid device: -71 [ 752.534202][ T5281] usb 2-1: USB disconnect, device number 21 [ 752.540340][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.550962][ T5282] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 752.590271][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 752.610613][ T5282] usb 4-1: USB disconnect, device number 120 [ 752.643187][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.708409][ T8] usb 1-1: config 0 descriptor?? [ 752.738190][ T8] hub 1-1:0.0: USB hub found [ 752.855077][ T5242] appleir 0003:05AC:8243.003D: unknown main item tag 0x0 [ 752.862985][ T5242] appleir 0003:05AC:8243.003D: No inputs registered, leaving [ 752.879588][ T5242] appleir 0003:05AC:8243.003D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 752.942495][ T8] hub 1-1:0.0: 1 port detected [ 753.455379][ T5282] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 753.578040][ T8] hub 1-1:0.0: activate --> -90 [ 753.625811][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 753.653960][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 753.675546][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 753.704406][ T5282] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 753.713527][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.719060][ T5242] usb 5-1: USB disconnect, device number 111 [ 753.725475][ T5282] usb 3-1: config 0 descriptor?? [ 753.743376][T21437] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 753.995112][ T8] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 754.003474][ T8] usb 1-1: USB disconnect, device number 121 [ 754.177436][ T5282] plantronics 0003:047F:FFFF.003E: unknown main item tag 0xd [ 754.205128][ T5282] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 754.231827][ T5282] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 754.424472][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3955'. [ 754.486472][ T25] usb 3-1: USB disconnect, device number 16 [ 754.877234][T21474] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 754.898844][T21443] coredump: 280(syz.3.3951): written to core: VMAs: 32, size 97292288; core: 59979191 bytes, pos 97300480 [ 754.903952][ T5294] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 755.066812][ T5242] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 755.169547][ T5294] usb 1-1: Using ep0 maxpacket: 8 [ 755.191005][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.203661][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.214274][ T5294] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 755.223356][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.241628][ T5294] usb 1-1: config 0 descriptor?? [ 755.246868][ T5242] usb 2-1: Using ep0 maxpacket: 8 [ 755.254347][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.268879][ T5242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.282608][ T5242] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 755.303669][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.336498][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 755.355076][ T5242] usb 2-1: config 0 descriptor?? [ 755.525901][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.537822][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 755.548952][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 755.570598][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 755.590369][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 755.594227][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3967'. [ 755.601118][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.640866][ T25] usb 3-1: config 0 descriptor?? [ 755.729215][ T5294] usbhid 1-1:0.0: can't add hid device: -71 [ 755.743889][ T5294] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 755.761265][ T5294] usb 1-1: USB disconnect, device number 122 [ 755.778385][ T52] ------------[ cut here ]------------ [ 755.784022][ T52] WARNING: CPU: 0 PID: 52 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x1e3/0x250 [ 755.794567][ T52] Modules linked in: [ 755.798501][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 755.809130][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 755.819291][ T52] Workqueue: events_unbound cfg80211_wiphy_work [ 755.825655][ T52] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 755.832041][ T52] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 41 87 dd ff e8 1c 95 66 f6 90 0f 0b 90 e9 b5 fe ff ff e8 0e 95 66 f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 fc b4 1c 90 80 e1 07 80 c1 03 38 [ 755.851865][ T52] RSP: 0018:ffffc90000bd7998 EFLAGS: 00010293 [ 755.858182][ T52] RAX: ffffffff8b2e24a2 RBX: 0000000000000001 RCX: ffff88801b790000 [ 755.866259][ T52] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 755.874408][ T52] RBP: ffffc90000bd7b60 R08: ffffffff8b2e23ec R09: 1ffffffff284b305 [ 755.882411][ T52] R10: dffffc0000000000 R11: fffffbfff284b306 R12: dffffc0000000000 [ 755.890474][ T52] R13: dffffc0000000000 R14: ffff888066c00e40 R15: ffff888024c5d6a0 [ 755.898519][ T52] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 755.907862][ T52] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.914569][ T52] CR2: 000000000c2ebf71 CR3: 000000007d580000 CR4: 00000000003506f0 [ 755.922561][ T52] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 755.930606][ T52] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 755.938795][ T52] Call Trace: [ 755.942099][ T52] [ 755.945116][ T52] ? __warn+0x168/0x4e0 [ 755.949316][ T52] ? ieee80211_start_next_roc+0x1e3/0x250 [ 755.955390][ T52] ? report_bug+0x2b3/0x500 [ 755.959941][ T52] ? ieee80211_start_next_roc+0x1e3/0x250 [ 755.962343][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3968'. [ 755.965813][ T52] ? handle_bug+0x60/0x90 [ 755.965849][ T52] ? exc_invalid_op+0x1a/0x50 [ 755.965879][ T52] ? asm_exc_invalid_op+0x1a/0x20 [ 755.965911][ T52] ? ieee80211_start_next_roc+0x12c/0x250 [ 755.965935][ T52] ? ieee80211_start_next_roc+0x1e2/0x250 [ 755.965964][ T52] ? ieee80211_start_next_roc+0x1e3/0x250 [ 755.965991][ T52] ? ieee80211_start_next_roc+0x1e2/0x250 [ 756.012062][ T52] ieee80211_scan_work+0x1cc/0x1d30 [ 756.017377][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 756.020448][ T5242] usbhid 2-1:0.0: can't add hid device: -71 [ 756.023377][ T52] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 756.023413][ T52] ? rcu_is_watching+0x15/0xb0 [ 756.039951][ T52] cfg80211_wiphy_work+0x2db/0x490 [ 756.039967][ T5242] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 756.039999][ T52] ? process_scheduled_works+0x976/0x1850 [ 756.058746][ T52] process_scheduled_works+0xa63/0x1850 [ 756.064472][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.069031][ T5242] usb 2-1: USB disconnect, device number 22 [ 756.070487][ T52] ? assign_work+0x364/0x3d0 [ 756.070532][ T52] worker_thread+0x870/0xd30 [ 756.070574][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 756.080979][ T25] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 756.081079][ T52] ? __kthread_parkme+0x169/0x1d0 [ 756.104601][ T52] ? __pfx_worker_thread+0x10/0x10 [ 756.109862][ T52] kthread+0x2f0/0x390 [ 756.114137][ T52] ? __pfx_worker_thread+0x10/0x10 [ 756.119312][ T52] ? __pfx_kthread+0x10/0x10 [ 756.124040][ T52] ret_from_fork+0x4b/0x80 [ 756.125758][ T25] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 756.128482][ T52] ? __pfx_kthread+0x10/0x10 [ 756.128515][ T52] ret_from_fork_asm+0x1a/0x30 [ 756.128567][ T52] [ 756.128595][ T52] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 756.128613][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 756.128648][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 756.128667][ T52] Workqueue: events_unbound cfg80211_wiphy_work [ 756.128711][ T52] Call Trace: [ 756.128722][ T52] [ 756.128733][ T52] dump_stack_lvl+0x241/0x360 [ 756.128770][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.128804][ T52] ? __pfx__printk+0x10/0x10 [ 756.128831][ T52] ? _printk+0xd5/0x120 [ 756.128863][ T52] ? __init_begin+0x41000/0x41000 [ 756.128903][ T52] ? vscnprintf+0x5d/0x90 [ 756.128942][ T52] panic+0x349/0x880 [ 756.128974][ T52] ? __warn+0x177/0x4e0 [ 756.129001][ T52] ? __pfx_panic+0x10/0x10 [ 756.129028][ T52] ? show_trace_log_lvl+0x3b2/0x410 [ 756.129079][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 756.129120][ T52] __warn+0x34b/0x4e0 [ 756.129145][ T52] ? ieee80211_start_next_roc+0x1e3/0x250 [ 756.129179][ T52] report_bug+0x2b3/0x500 [ 756.129207][ T52] ? ieee80211_start_next_roc+0x1e3/0x250 [ 756.129253][ T52] handle_bug+0x60/0x90 [ 756.129285][ T52] exc_invalid_op+0x1a/0x50 [ 756.129328][ T52] asm_exc_invalid_op+0x1a/0x20 [ 756.129355][ T52] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 756.129382][ T52] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 41 87 dd ff e8 1c 95 66 f6 90 0f 0b 90 e9 b5 fe ff ff e8 0e 95 66 f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 fc b4 1c 90 80 e1 07 80 c1 03 38 [ 756.129402][ T52] RSP: 0018:ffffc90000bd7998 EFLAGS: 00010293 [ 756.129423][ T52] RAX: ffffffff8b2e24a2 RBX: 0000000000000001 RCX: ffff88801b790000 [ 756.129441][ T52] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 756.129456][ T52] RBP: ffffc90000bd7b60 R08: ffffffff8b2e23ec R09: 1ffffffff284b305 [ 756.129474][ T52] R10: dffffc0000000000 R11: fffffbfff284b306 R12: dffffc0000000000 [ 756.129491][ T52] R13: dffffc0000000000 R14: ffff888066c00e40 R15: ffff888024c5d6a0 [ 756.129516][ T52] ? ieee80211_start_next_roc+0x12c/0x250 [ 756.129542][ T52] ? ieee80211_start_next_roc+0x1e2/0x250 [ 756.129575][ T52] ? ieee80211_start_next_roc+0x1e2/0x250 [ 756.129601][ T52] ieee80211_scan_work+0x1cc/0x1d30 [ 756.129652][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 756.129687][ T52] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 756.129717][ T52] ? rcu_is_watching+0x15/0xb0 [ 756.129746][ T52] cfg80211_wiphy_work+0x2db/0x490 [ 756.129782][ T52] ? process_scheduled_works+0x976/0x1850 [ 756.129813][ T52] process_scheduled_works+0xa63/0x1850 [ 756.129868][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.129907][ T52] ? assign_work+0x364/0x3d0 [ 756.129941][ T52] worker_thread+0x870/0xd30 [ 756.129979][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 756.130010][ T52] ? __kthread_parkme+0x169/0x1d0 [ 756.130045][ T52] ? __pfx_worker_thread+0x10/0x10 [ 756.130077][ T52] kthread+0x2f0/0x390 [ 756.130098][ T52] ? __pfx_worker_thread+0x10/0x10 [ 756.130128][ T52] ? __pfx_kthread+0x10/0x10 [ 756.130150][ T52] ret_from_fork+0x4b/0x80 [ 756.130180][ T52] ? __pfx_kthread+0x10/0x10 [ 756.130202][ T52] ret_from_fork_asm+0x1a/0x30 [ 756.130247][ T52] [ 756.141069][ T52] Kernel Offset: disabled