last executing test programs: 9.521351297s ago: executing program 4 (id=5942): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) (async, rerun: 64) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r2, 0x0, 0x1, 0x3}, 0x50) (rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sched_setscheduler(r8, 0x6, &(0x7f0000000240)=0x4) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) (async) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 8.885970661s ago: executing program 4 (id=5946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0x4000, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 8.731714154s ago: executing program 4 (id=5948): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 8.036260226s ago: executing program 4 (id=5953): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x20, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x300000000000000) 7.818338582s ago: executing program 4 (id=5957): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r0, 0x7, 0x2, r0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) socket$inet6(0xa, 0x1, 0x8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r4) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@RTM_NEWNSID={0x14, 0x58, 0x4837deceb25b88bb, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f00008a7000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 7.715509808s ago: executing program 1 (id=5958): writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="f0", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x800, 0x6, {r0}, {0xee01}, 0x1146d060, 0xde23}) ptrace$setregs(0xd, r1, 0xf27, &(0x7f0000000400)="4b629b19ec2546ee84ff45b3bb98d071b154830e0000006dc984f95bebd8049c6e3eb53bfa6e247e4759020355ada045163eae7134f2f6a348170900921c63b46b87aec66572e47c8ee43753e0ab335f7773208d6964a26f597b25fd33d890cb23c695a05f6b997bd73cec5bfd905d257f25f94ed480287415c032a1b442a98d8628938ad5dec9b23d86915122ab4f00c9fab0b763c053e505dafc9ffda0e2fb6631f248630b69caf80f6a123b1d2908fabaa0fac9c8e33a07111dfbe7d2efdd8f2a642d2021ff6a6036233d1e668dde2fc08612b78041163e0000000000") ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[r4, r5], 0x2}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x6b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xbd, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xb, 0x29, 0x1, {0x22, 0xacb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x5d, 0x9}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x9, 0x4, 0x81, 0x20, 0x40}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x7, [{0xa4, &(0x7f0000000680)=@string={0xa4, 0x3, "852ecd728af5a390ae455d9e09738dea397454092719e01ef7e5409ebea99987cac993df28a5fd79209e706f9aa124f7c212d112facd5f8d89383d23e2e61acd3807016d98fd1e4fe0c399b9df415ad2a8b13a6589b6a5fe0fa81da2646c8dc56b45586853c9b57c74b14bc7d4c1efb1b336c5fd654fb60eabb4af9e4e89f87921a86f739d62dae7b5522778fb3e0326b3a9b0b047ac107fc47e1b1d7baf7168173f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1007}}, {0x9b, &(0x7f0000000a00)=@string={0x9b, 0x3, "58f3296c91566e78934f89655193284f4ff24a6262e5f3696170d0b6e48489f2fc819effb9c75f6929e6d5cf9b39c62149a300f265da887156a7e150fc0d4861b97d2ac60c72263ad89eae4d65358c721e90e63a8e33f8bd24eee969e1ed74a3a320a46c569294d59a0541c837db02377ea031a2eda6124badb85a3d12169c5ee2a7a1713ad5aa731813e37a6135217c8e3d9057c82b41e97b"}}, {0x39, &(0x7f00000007c0)=@string={0x39, 0x3, "5cc3f057caa5bbb32499b9b0e25fa78e820ef3c38516afd829328647ab3b6e83a76855145f08d7a958153f55b67c46dc6955bfc951f75e"}}, {0x33, &(0x7f0000000800)=@string={0x33, 0x3, "d3d9591015b360b3ebf13b59719af98c4fc4bbda4da62962c15f43f2357f1b6c22079b1dbe52c4e28552a41b8c4d5fbf81"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x43f}}, {0x77, &(0x7f0000000980)=@string={0x77, 0x3, "a3ccb3d2b0c53a367e08c805b7e3e7e9373f2884825643ca2ab0c17fa10a1518a7c85d3b208e8d71e6b33f7d3eecd39b3acf860373888cc70bd732b1b5bc995c5a5d834996f01111a704a34cbd9913b4213c407d7656fe85f86c434ebe2f6259fded9c8d55c4f0464d34777da05c63b08ea823fce5"}}]}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x1e4}, &(0x7f00000002c0), &(0x7f0000000940)) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000500)={&(0x7f0000c35000/0x2000)=nil, &(0x7f0000fa0000/0x4000)=nil, 0x2000, 0x1}) ptrace$cont(0x21, r0, 0x0, 0x0) syz_usb_connect(0x5, 0x1ab, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 7.411866683s ago: executing program 3 (id=5959): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/15, 0xf, 0xfff9, 0x0, 0x203}}, 0x11c) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = fanotify_init(0x8, 0x400) fanotify_mark(r7, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file6\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) 7.163841499s ago: executing program 4 (id=5961): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x24000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r7}) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)="d249f18c5a05459d46486af8e640", 0xe}], 0x1}}], 0x1, 0x20048014) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=r9, @ANYRES32=r10, @ANYRESHEX=0x0, @ANYRES8=r10, @ANYRES32=r9, @ANYRESDEC=r6], 0x30}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0028000002010a002400128009000100626f6e640f0000001400028008001400000000000500010002000000"], 0x44}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x0, 0x1, [0x6]}, 0xa) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @mcast2}}}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.745988089s ago: executing program 3 (id=5970): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000007b70300000a000000850000000c000000b70700000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000000000008500000005000000b7000000000000009502"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.744617505s ago: executing program 0 (id=5971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0xff) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000003240)=""/4102, 0xfffffccc}], 0x1, 0xf6f, 0x7) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000140)=0x2004, 0x4) 4.60445106s ago: executing program 1 (id=5973): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pivot_root(0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) fsopen(0x0, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r2, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) write$vga_arbiter(r2, &(0x7f00000000c0)=@target={'target ', {'PCI:', '1b', ':', '11', ':', '17', '.', '7'}}, 0x16) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.405916159s ago: executing program 3 (id=5974): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.161389853s ago: executing program 3 (id=5975): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850480002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 4.05173953s ago: executing program 2 (id=5976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') unshare(0x22020400) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r7, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000540)={{}, "2aeb9a9684c23f0069aceba3face085bc66d42f80af8ba2b267e282f11657e61ea80b869e772a5fdfbd16051b8a1291c16a9bdffd635099e64ed7f037c36a8e145a16ac600c9e1062f94ff36761bc30955220e764cc88fcda711840572c9246b2e566a77804b0e81d961d353b673ba6a94e07dfd8418e998c6899d5548a238a08139190972ce672b50ac526e3457407a8099a36c1c72d361a0f86f705f7cad658395565adeb96b75617638cdf094865997216d9147bd486435ac11ee32dff34d8d96b99fa2df0785c01f8856ffb103db8a7aa17c93786652dbedd7a1b381ea9e0f462215dc055f9678153a9f0b0e0d799f7811ad1e95c2e86f8c8402c8361a48a6a436f11de97bcc2dd54b4b07398c46ef66c49dcbedb790dbb61ff6f5922ef12f70d44d12db4f95a3e5da5f3a8dbe94fb73a2ebdeadc598c7c956ccfbfa6cfa0e7c9cd6243668b17c9b1fcfb488e846eb4f634a7f709585351258aa523088833c8bce7757d92cb062d2b6d621f48de0458cd59366317fe4eb0d877839a0c1057d9f13b69d3ee9765e4d85615da08444605c7770baef2a8f335ae7cb14874a812a9b3b709fa86a28f1d0fba1e17a94f678e221ec810b7e2cd8422af05ada4a6912cdfb7e76b638ee3a7cb60039dd51e28b37005f10cdad5f6772f286e18de88b15101e0244d795544c98a2ef639821a6bc7b89180d991b58c93598bdda017d9bca13d7ba6c992fb36428e2eff8390210a9f0b4ab6aeeaa4e1d59c2afc06b17360317286bac72609aaf8b3a85b347e7754725ac32bef1b1a0948219052c2535c95ea201a6490b594575e19dbebb44c78f12777515ae1f3cc809abe8ac24edc6133186e6e70dbf70ff3221b552785a8b4ff17e84d96f1104532f8a01c73b9f567760fdf6bd060c2e7bb64b5f3f1962bdd7af3a9ee9eba7dc4d63de5102980581c9e5ca2277399cf5592333915de6d791a0a4391187382e76113a76d66d6b06e6c24ce259a2378f8c588dac95e1641544de4a90cb7f965f4fff78d8d2fea2717dd31ca540732d77f8fd0bbae027dd21086825b87d3a741838354cbb08026c10fda43c13d668d2790f7ccf02038952605a15bd37a41e78b5fe655f761614ceec868fa76290568b72736b6ea5b0c261c447a1b1a594bbe413c43c87862cee069de6f6bb6a3a89371d8729b5ce212514399ed5416f50203c0cf3c9d1f9e366f5d58d6e34496892ff2aec699e55f7efe6b133b57af623b1d4c54f4cb55217abe5a74bbbc0c6cc97b5bfa6a73809ea3b55fa3451ea03e9d46acba4f6440d175a3a855dcb544b11c320545859e883ad068a814b6d194815a1e8ce222b6c7cdde38e6f5bcd2c72b0686065dfd9e3f04cf762f9e62b4f2276c0d3b77477661524cf81261ac17e5d4668bd7fd5ae4cfe3a2f9e27b6dd2f9315fb6258072c58f385f5ae28a3320460291ce3de402a06475dea7c000775875e00587350a5e8befaf25e649cca6de2b9b61bd5b0a438e2157750f120ce12c6a8c1a02438d1dbdd612b9150494f5cb2cfa7d893796710d42a768f872744a372448248225375515f4e8cfc2692d568e9192abdb96cbf58f1b3e8db9ff7e6365fe8f4d380aa7909c36104b75bfde737cda262cf23355ffed7f0d7cbf3cd1c93e06cf88a8866603b29520e16608bc392f4ecaa33dfc41019d7e2ccd39f02157042ca61bfe35c1d6204d12fd2f351947df3ff30236158cd544c22cf563d1abf4c4cb04c207a65b90e64e5b78897b870472945df7ccc02322bc3c5543e323ffdc9fb1c47320f9acd398c9e00d23520f09ba8510b4f9857b22a60e9516ccd40c8476c15e8624b5af07aa0dcb4c8f063c35458e10038e800a9339454db5773a87b15fdae394c7a25af1c10b4141ac26ff3eab7071bef181d35dd95be8809b258b175152f091bf0ccafb3ccdd2ce2a084cc81b649ad54c132cf455363d8de5d81a793a08e38a273b8d11fcf08c8b7c826878d99ef3f7f46f415e8af7323657ca29e98dd615d46e3e871e78504dfde69d9c3d7fd1bf530a71090150a4b782350fe600502440ce640d38de113ba48c1a82c7049b9ab5c61eacfc6bbb7fbc1168427060e7416b105e8b0a583a664ceb4fe89d57f12184801e0200cf2184e200d83cb0a5b4b13194a4871f87738db208ec48f0b52150cdf678667f3b6bc3aa48b54808d0ae4bef3f31dba831ea63eccdfdb280df4ba1c7e49c82a33d36bedd417c1d78e1276cea1d4ef5d771049b9245d7d8d6af9724416f7cc50d3fc1b4ae4b241784d237ecc037d471f4a8ed01bb43732568bb6d63e4cedfa31f6b6fa29c8a9e3a7fa53dfb7a120a5671a8e3f45c13c7a28ef8a4c56a90e5217f0b4344659b9d896384e365b9063b817d0f249da0474aeccff51678439f1c04af94511fb936606ae7c361c7f6318831d61ef6496489fb526674a1f2c02c653ff2c7f95fc95e7b98e63cf32ae7fdd0b63d88a1cbbb31d136b5fd3b0d6e6d53a47af7c747e2fc1811a1cb6ec0aa3d067405b364527658098465efe48f646f90e598bd05905aec091d9ff4d1d77ccc3c4a3c9f887ec0d97dce8fe800a15e1544ceb0ed04175940af99b755aa5063df8ae813997b823756bcf321fb858564b6dd622883bd69df7569c7b576615ba76269199895f9a1c1d19d23214f674891b9cd5f94aaa7821878177fb9df7ccbea19748eaac9792aff2b90ca6fb5334dfef89204f9baee31a9d34e4f53dec3885a323330234016848611b29cc81ef56514aa881eef566b1d1e4b7cc6041148171a029bd6ffdc5223dde34ebd22f3380c9d4254b5262b4533c75a5205cb907d857cf757e241ffb885db35d0d411cfdbf712ec5d2204b87fd40212fc0b2043c340e1dc9bdab2f3480535d999a45f219d1e23b4be0f7566682bd4ab57ff94c614354dd86cd9c3b9e8aa1c656ed0123b9f97ad8b6928a5f81f4490291bfe3f77297bb1ac904f16fb5340f2a9293ce1a8873ee071d19bb7451e6d930f937da8e6bcb71a093decf99c116f62cbbe6a7ce6d73f521fd8e8550459a3ea7719a603cf8b4687c39565818f0e8440063aa85f057144a0869c27bbe178467c6b4909ab97221d6b3dfe7985fe46807781bc24feeaf314f7c707406fe4f4c4dfba29477ef00bc5ace91c8cb7cc5816509160d58161753cd5f9a5ab425f8efeae6c2dbe6260eea21ea7a8c65e1a2fa1478efcd10e7055e8165228d6fd85342e1178cf4469052584fd5e6dda313946202b4d0fbbf046cc06e00dd14b6f1403014b96347177c0f9935fabe6942e7bbfccb5cffdce7436b8e461b3086f91bd09a208980e551d155687858e41a6a147c3da76716fc1eb7a7497e905411b46de33464d0acadaf85069316be6f5d75f2b9784b5ac83f95d9d661126bafed699ff3c6c4b7bd95e6f5ebe43fb8e5a1577ed832a7d6845a99e0470d95bcc92565285a667d4ff9fe1fdf965e5143b6ebfb13763afad296e7b05311c86d438a016fd335825f5d15971ab50469a8750e0afe66996b6a66ced5a86d6389d8f6a48b1276f4e609e78012ab4fe2d6f465a784064bb8a7e1a3f369d7395beddaab0bc92714c4bd97495de50afd1f8b01a59824c171419ca3fd41587636e6a4a2f857d5d209c46647ba81313cd385de6198bd4c117c147e0f48a535764bfcd96e5a4511ccf63af772707d5c95ee1bc25dbb9955a5f5a32e4e7e97c1024e90c7963e2a0465f212bc5ed627c8015aecb666474d0040e8ee3691fd6bf2a0c956e8ce629f67b4db7576c201dac28cf71c2b3e99384c28082a958d1ba4bfb89fef65bcf64a7000d9722134389568510c7802285fc1ba951b5d69910fe3c819a75384666e5c725f4cf9506bf30970751b1f836901225a9b30e92cae1b43bc658728fa8ba503945a4400d713db012e11a021cb06124cfda4035e39e76d91050203642ddf5e2823421ed0206e95348e224a5b31a1ba92a3290c7ccb35b30cacd4ba2e6e0771199e2311bd8e984691b84777f2417334c02252978b2a6f5ec8d9475426533dfbf272720a6bff65d1248b5c84361ec4e8e6abf26ef04f70613e8d439b4c9d287f49092df9388546da73dd5155a6e09d7d1bcd18fa5414712fd2e6cc6d1b5ab7435c04f1811903f0f444836eb0638ce38ccbe14f6fd840d3c2ddc105f88563466e203267f8a24a1e0d00f5900e0867bda010b5857c1619884a35b31ff955f6937c707528784fc13a3ebd934d1f3a6a42d5ccd16418c545aa34339f494c7d31ee19ee8bfa8ef6ade46cb12ab2516b68b370465b123276a8ad98359a0f59aeb788cf38b226fe6adc89e16cb0e59862b67095492336b959cbf2057ce5e13413c8742bbc02775f8edc294a4a2661d824d6e4167b1805bc7d27f5661b3925ab01cb3717c0d399467e9411ef7074292a2b1bb8e480f9bd2bb24ca3583bfcc4b77110c9cfb20ebfb72b8899cd47498a63264e42c1a40a7a6f95dc828732ea1438f949d8f452eed7dc609bcff2600fba524b7cf275906e8005ff284c962abbce6b8ad1e6299d97d88a664ab1511e73af21bbe21ee0c3c5270b27f1c9b6cf034421d69ea6e8a576a7973875f0b013370e0bafbc3ee17db15e17afe1bfa6305e5ca40809cce23d81acd98f874784f6c0966678bcca27651694242384c8882b6acaa1b6285ffee146348454aae1430086a6875bd616498acdcd8368fbeb6ca98558381cc824cc08a9703009c5befc75f20100b77dca96865732618b3cf86d07afad8ad3b07be7aad55c06939103f6952dd9477707de841565d6f8806601a2f572778d580a79e108c3188e4b20e2d7e65d4620e813ca5c73db1a3c82613ba57a1b04b9d22ec05c60c71c38fe2d22133f7a6107796c7e9917a4856207d0f997cba864e1a58978e5e70378eb0464fa7021863f05894ebacdd49006c9d9d7abefdf620efcbee36267eaf1bf60906dcb3c942058ea01731bc1b6bd70fcaca9a4c297e0a52a6566009ae56e32771aa0d503299f0ec030ec9597c38cf0841a63492545fcb81cc9bf2aea59cd0f376f4291c97ebc78d20974c970b366c24a9eddf517f71f7ffb7def5387bfb2461c44a239a9fff7a593a25e9ef19d6cc23576b3f9f29cbf3f7e32a696b82280e5290f70a9a997ba0019f38621c243bc08d2ae41293991a48688feffd716363b6340d40a476d53db0ad943c8a0c2053e7d71593e255fbdc79259e85d3f865eea3aa918acac86cbdcf4288fb6443b7465839960f4943d4c652562d2b1843f6cb0eb04f619c06a0bf5d38ffc5e6ef9dfa52f2a38a7bc356de63eb115531d6cdc9447325173a5f3396ac5354b01a406726561553c13f5fe26a8595234da686eaf8d9ad1977b9c04d25132f1a658db91086574319f663600bef80a98911715332f9c1757cfcbb46898f51e73ffe8a0eeb081d8362838f860cdc2dd4f70af5d6fe65bfefbc08e8d094e052b2fb8bbd0d0391dc9f6fe03496a085c9cad9c6e41db724a4651bdbd38f0b33326b73afccdfcceb7a409add8f8d413615bb7415284020877405c7d8f842ac0372be25e144961e404becb3cc077f1f3ac1326a26895a86c756f8736183a9b52bec84ad6b2f4c5de914cc6e61019b4357966c7d90b9eee11d06b172b63ea296b26ac9c6ab13599a443a86c6af8bbb5dc83822b99763f76bdf7337a4b1b7fa293b30626c4e0b09147f7d0ca938d181f0e3d2398630b5d04ce8f9d5f835e26347888afd3bfb2737f1335f0a1a1911367ad3633d87a1f3dc3948051799699d75887fefd94e74be4eac33565f12e"}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x20, 0x70bd23, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8009}, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r8, 0x0, 0x2, &(0x7f0000001100)=""/3, &(0x7f0000001140)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setpriority(0x2, 0x0, 0x9) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000327bd7000fcdbdf25530000000c0099000100010067000000"], 0x20}, 0x1, 0x0, 0x0, 0x60890}, 0x0) 3.685652279s ago: executing program 2 (id=5977): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0500000001000100ff7f00000204000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f00000004c0)=""/132, 0x84}], 0x2, &(0x7f0000000580)=""/203, 0xcb}, 0x6}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003640)=""/171, 0xab}], 0x1, &(0x7f0000000680)=""/160, 0xa0}, 0x7fff}, {{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/128, 0x80}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000880)=""/46, 0x2e}], 0x5}, 0x2}, {{&(0x7f0000000940)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/185, 0xb9}, {&(0x7f0000000b80)=""/68, 0x44}, {&(0x7f0000000c00)=""/199, 0xc7}], 0x4}, 0xb34a}, {{&(0x7f0000000d40)=@generic, 0x80, &(0x7f0000001080)=[{&(0x7f0000000dc0)=""/177, 0xb1}, {&(0x7f0000000e80)=""/57, 0x39}, {&(0x7f0000000ec0)=""/203, 0xcb}, {&(0x7f0000000fc0)=""/171, 0xab}], 0x4}, 0x3}, {{&(0x7f00000010c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002180)=""/192, 0xc0}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/201, 0xc9}, {&(0x7f0000003340)=""/38, 0x26}], 0x4, &(0x7f00000033c0)=""/252, 0xfc}, 0x4}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x2a, 0x2, 0x0) (async) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000200)={0xa, @raw_data="94a9dca1ca73855e3d9bae811b9340ee4a5acf656459ff7c7f0ed903b503fe4451052eb1f82cbb0a7d0ffe4ab11e9b8328bbfae608042d42e1a729ef5f41aa438309e7b3ad0753ced866c69a90a6783db0891a67a8fcff0276d412869fca1889bcaaeb890ca3d894505e2ea73a7dac196fa300701e3617781b9602ce546a83a8e968bbaf1110ac60bab61a6fdf4d50fb9ca374bed2962ffd628b979a9cd76371f0cfae9b660b270f970a39d35be23a6b77760606f10db5f2e9b24a4cbfceb8a806565fed7166b340"}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0xa9207000) 3.489732474s ago: executing program 2 (id=5978): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_vs\x00') r2 = socket$caif_stream(0x25, 0x1, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x408800) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff], 0x5) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000380)={0x0, 0x0, 0xf8, {0xf8, 0x24, "949fff63b7ac199decb132404ce4217d22930c91d447ce2296ffd91fe9f5d7f6936d714de1564b1dd5b6c816c98c124a59f618a4e0ea06158788659f82583cc1822b6c6ea06d8da377bacdbdf7040a815d50b1e6a0b74acb6fe2ca3bc77f7f67e5986daeb6efbc0b588a62c36b4ba6e3fd62a7242e62fe26c57888c5e5330cf214526bf0b00070b3acd713132ca2e53db63e252b4dd174c9b0d7cd8aa13f29af2190cb398471294a3220bed6b2cb951b89093d5814453cf155b736d98042071d478b852be30dd9d12a733c12a1bcbebc73b84d650a288e5a543f743112bbb16cdace52560eeaba100dc6392a7dfa3d8df8741383e9c7"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xc, 0x84, "201d58999481c01ebb4c2de6d836ce6c9793872962149fa790bbde74f1f96c4dabda3167d5f53c70b796215418f9dfb1eb7cdb93a2cdeda92b4dc0b0355274fbcfe2dd4b95e3db8a8e2272ffeb928f6f1b6542a2fdf8681ce2b64c6e77f4f97395d6b5df1e09e9386c10af49e383e860bc94b0cb73c0c870df37df1feeb659e7d46aa913"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x81, 0x3, '>Z.'}, &(0x7f0000000680)={0x20, 0x82, 0x2, 'B2'}, &(0x7f00000006c0)={0x20, 0x83, 0x2, "cb69"}, &(0x7f0000000700)={0x20, 0x84, 0x4, "20a1dd24"}, &(0x7f0000000740)={0x20, 0x85, 0x3, '6Uz'}}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000040)={&(0x7f0000000900)=[{0x1, 0x0, 0x0, 0x0}], 0x1}) 3.368019367s ago: executing program 1 (id=5979): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000363ef018886a7020000000203"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0) (async, rerun: 32) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7fff}], 0x18, 0x8800}, 0x4000000) (rerun: 32) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x38, r5, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4a, '\x00', r6, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10}, 0x94) 3.225876978s ago: executing program 0 (id=5980): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000000206010200000000000000000000000005000100070000000500050002000000120003006269746d61703a69702c6d61630000000900020073797a30000000000500040000000000240007800c00018008000100ffffffff0c00028008000140ffffffff08000640"], 0x70}}, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000000240)="2857e5671ef0d8e3c39651a014a3a298466c68130e5b77e37f04a5cec22a4cc681c424e649ef28c1bd78afcb20e74b1ad3ac2c75e5c03189383f8e1d3e61a1", 0x3f}, {&(0x7f0000000000)="65f259", 0x3}], 0x3) 3.10330162s ago: executing program 0 (id=5981): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) 2.336013143s ago: executing program 1 (id=5982): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab28bd70000000000032", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) fsopen(&(0x7f0000000300)='btrfs\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.101872465s ago: executing program 0 (id=5983): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 2.074037759s ago: executing program 3 (id=5984): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.918585278s ago: executing program 1 (id=5985): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "4225c444"}]}}, 0x0}, 0x0) 1.779937031s ago: executing program 3 (id=5986): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES16, @ANYBLOB="51000e008000000008021100000108020100000008021100000000000000000000080001000000030184"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) accept4(r3, 0x0, &(0x7f0000000100), 0x80800) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) syz_emit_ethernet(0xea, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xb4, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@hopopts={0x88, 0x14, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @empty}, @generic={0x0, 0x60, "72f93ac8923b005bc656b996663e78d9f95eb0e8112ecb28a975dfb4a7d5eb9000304ff8a78e37b9f3d8c173bb1b257a07ec63a4a081ed6be3fce3eacc97921ec69a51af2f5ca92a174cf7d35816958f8fa23d8fc5e7ad95ef169193e8960853"}, @ra={0x5, 0x2, 0x8ab}, @ra={0x5, 0x2, 0x8001}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) 1.597696515s ago: executing program 0 (id=5987): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000340)={0xe, 0x3, {0x7, @struct={0x1, 0xd}, 0x0, 0x7db, 0x7, 0x4, 0x2, 0x9, 0x50, @struct={0x8761, 0x5}, 0x9, 0x49, [0x4, 0x0, 0x4, 0x2, 0x602, 0x8]}, {0x401, @struct={0x7ff, 0x7f}, 0x0, 0x5e, 0x2, 0x5, 0x8, 0x100000000, 0x6c, @struct={0x2, 0x9}, 0x7, 0x4, [0x4165, 0xd, 0x0, 0x6, 0xffffffffffffff19, 0x8]}, {0x1, @struct={0x2, 0x1}, 0x0, 0x8, 0x101, 0x0, 0x9, 0x7, 0x0, @struct={0x6, 0x9}, 0x0, 0x200, [0xe, 0x5, 0x200000000000000, 0x7, 0xffffffffffffffff, 0x55]}, {0x2, 0x0, 0x57fe}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) syz_usb_connect$uac1(0x0, 0xa3, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfff, 0x2, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000080)={0xc5, 0x0, r1}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x64, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socket$rds(0x15, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0xffe0}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xffd}, {&(0x7f0000001700)=""/4082, 0xff2}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x3, 0x40000000, 0x0) 1.197781602s ago: executing program 0 (id=5988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) io_setup(0x9, &(0x7f0000000100)) write(r2, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fb", 0x32) connect$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40041) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r7) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 899.638289ms ago: executing program 2 (id=5989): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 317.656742ms ago: executing program 2 (id=5990): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x20, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x6000000000000000) 25.749567ms ago: executing program 2 (id=5991): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000600)=0x4, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045503, 0x0) r3 = io_uring_setup(0x3eae, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_usb_connect(0x1, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x7d, 0xf9, 0x2e, 0x8, 0x7c9, 0x12, 0xddb8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0x68, 0x23, 0xcb}}]}}]}}, 0x0) 0s ago: executing program 1 (id=5992): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): number 8 using dummy_hcd [ 1773.374668][T23371] usb 1-1: Using ep0 maxpacket: 8 [ 1773.387187][T23371] usb 1-1: config 0 has no interfaces? [ 1773.403190][T23371] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1773.412686][T23371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.420998][T23371] usb 1-1: Product: syz [ 1773.425228][T23371] usb 1-1: Manufacturer: syz [ 1773.430606][T23371] usb 1-1: SerialNumber: syz [ 1773.452058][T23371] usb 1-1: config 0 descriptor?? [ 1773.532121][T18005] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.543309][T18005] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1773.564124][T18005] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1773.574042][T18005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.582370][T18005] usb 4-1: Product: syz [ 1773.605116][T18005] usb 4-1: Manufacturer: syz [ 1773.618086][T18005] usb 4-1: SerialNumber: syz [ 1773.625951][T18005] usb 4-1: config 0 descriptor?? [ 1773.680894][T18005] usb 1-1: USB disconnect, device number 54 [ 1773.808960][T25162] net_ratelimit: 23 callbacks suppressed [ 1773.808982][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1773.971265][T27430] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1773.989947][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.138510][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.248652][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.378293][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.497185][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.627191][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.737219][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.852312][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1774.987209][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1776.343922][ T9] kworker/0:0 (9) used greatest stack depth: 16312 bytes left [ 1776.740437][T27458] __nla_validate_parse: 2 callbacks suppressed [ 1776.741244][T27458] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1776.874738][T18005] usb 4-1: USB disconnect, device number 8 [ 1777.043555][T27464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5448'. [ 1777.717152][T18005] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1777.868959][T18005] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1777.941444][T18005] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1777.961718][T18005] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1777.987041][T18005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.020216][T18005] usb 1-1: config 0 descriptor?? [ 1778.038048][T27469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1778.057049][T16365] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1778.208622][T16365] usb 4-1: Using ep0 maxpacket: 8 [ 1778.263408][T16365] usb 4-1: config 0 has no interfaces? [ 1778.285792][T16365] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1778.334103][T16365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.374592][T16365] usb 4-1: Product: syz [ 1778.387245][T16365] usb 4-1: Manufacturer: syz [ 1778.411159][T16365] usb 4-1: SerialNumber: syz [ 1778.430181][T16365] usb 4-1: config 0 descriptor?? [ 1778.844874][T22261] net_ratelimit: 29 callbacks suppressed [ 1778.844895][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1778.887933][T16365] usb 4-1: USB disconnect, device number 9 [ 1778.911702][T27469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.952515][T27469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.145611][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1779.263945][T27490] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1779.285848][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1779.407465][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1779.521963][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1779.652535][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1779.767142][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1779.877438][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1779.960067][T27502] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1780.007334][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1780.127994][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1780.423384][T18005] usbhid 1-1:0.0: can't add hid device: -71 [ 1780.445347][T27507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5460'. [ 1780.477918][T18005] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1780.763335][T18005] usb 1-1: USB disconnect, device number 55 [ 1781.352130][T27511] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1781.947425][T18005] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1782.178142][T18005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.320922][T18005] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1782.451729][T18005] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1782.547104][ T5898] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1782.554790][T18005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.582976][T18005] usb 5-1: Product: syz [ 1782.597311][T18005] usb 5-1: Manufacturer: syz [ 1782.620152][T18005] usb 5-1: SerialNumber: syz [ 1782.668413][T18005] usb 5-1: config 0 descriptor?? [ 1782.791970][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1782.977988][ T5898] usb 2-1: config 0 has no interfaces? [ 1782.979368][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.996098][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1783.019247][ T5898] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1783.028713][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.036718][ T5898] usb 2-1: Product: syz [ 1783.056483][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1783.082692][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1783.092233][ T5898] usb 2-1: Manufacturer: syz [ 1783.122568][ T5898] usb 2-1: SerialNumber: syz [ 1783.139697][ T10] usb 1-1: SerialNumber: syz [ 1783.242561][ T5898] usb 2-1: config 0 descriptor?? [ 1783.506970][T27522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.529867][T27522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.626274][ T10] usb 1-1: 0:2 : does not exist [ 1783.649955][ T10] usb 1-1: unit 5: unexpected type 0x0d [ 1783.676694][T27539] loop2: detected capacity change from 0 to 7 [ 1783.867539][ T13] net_ratelimit: 25 callbacks suppressed [ 1783.867561][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1783.882725][T27539] loop2: [ 1783.885815][T27539] loop2: partition table partially beyond EOD, truncated [ 1783.965425][ T10] usb 1-1: USB disconnect, device number 56 [ 1784.087955][T15827] udevd[15827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1784.140367][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1784.287704][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1784.318532][T27546] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1784.399558][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1784.528144][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1784.660268][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1784.844739][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1785.011213][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1785.190838][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1785.247588][ T5898] usb 5-1: USB disconnect, device number 44 [ 1785.351085][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1785.504875][T18005] usb 2-1: USB disconnect, device number 78 [ 1785.564280][T27565] loop6: detected capacity change from 0 to 7 [ 1785.611276][T27565] Dev loop6: unable to read RDB block 7 [ 1785.634791][T27565] loop6: unable to read partition table [ 1785.642327][T27565] loop6: partition table beyond EOD, truncated [ 1785.671756][T27565] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1785.794915][T27569] netlink: 'syz.1.5477': attribute type 10 has an invalid length. [ 1786.130736][T27569] bond0: left promiscuous mode [ 1786.135797][T27569] @: left promiscuous mode [ 1786.144258][T27569] bond_slave_1: left promiscuous mode [ 1786.156443][T27569] bond0: left allmulticast mode [ 1786.217031][T27569] @: left allmulticast mode [ 1786.267414][T27569] bond_slave_1: left allmulticast mode [ 1786.330593][T27569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.450515][T27569] team0: Port device bond0 added [ 1786.837019][ T5898] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1787.004304][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.045762][ T5898] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1787.105132][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.135588][T27587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5482'. [ 1787.146334][ T5898] usb 5-1: config 0 descriptor?? [ 1787.584244][ T5898] lenovo 0003:17EF:60A3.004F: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 1787.683602][T27606] FAULT_INJECTION: forcing a failure. [ 1787.683602][T27606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.706069][T27606] CPU: 1 UID: 0 PID: 27606 Comm: syz.3.5486 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1787.706095][T27606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1787.706108][T27606] Call Trace: [ 1787.706116][T27606] [ 1787.706125][T27606] dump_stack_lvl+0x189/0x250 [ 1787.706159][T27606] ? __pfx____ratelimit+0x10/0x10 [ 1787.706187][T27606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.706216][T27606] ? __pfx__printk+0x10/0x10 [ 1787.706248][T27606] should_fail_ex+0x414/0x560 [ 1787.706276][T27606] _copy_to_user+0x31/0xb0 [ 1787.706296][T27606] simple_read_from_buffer+0xe1/0x170 [ 1787.706322][T27606] proc_fail_nth_read+0x1df/0x250 [ 1787.706347][T27606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1787.706372][T27606] ? rw_verify_area+0x258/0x650 [ 1787.706399][T27606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1787.706423][T27606] vfs_read+0x200/0x980 [ 1787.706457][T27606] ? __pfx___mutex_lock+0x10/0x10 [ 1787.706486][T27606] ? __pfx_vfs_read+0x10/0x10 [ 1787.706516][T27606] ? __fget_files+0x2a/0x420 [ 1787.706540][T27606] ? __fget_files+0x3a0/0x420 [ 1787.706560][T27606] ? __fget_files+0x2a/0x420 [ 1787.706589][T27606] ksys_read+0x145/0x250 [ 1787.706620][T27606] ? __pfx_ksys_read+0x10/0x10 [ 1787.706646][T27606] ? rcu_is_watching+0x15/0xb0 [ 1787.706680][T27606] ? do_syscall_64+0xbe/0x3b0 [ 1787.706711][T27606] do_syscall_64+0xfa/0x3b0 [ 1787.706737][T27606] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.706764][T27606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.706782][T27606] ? clear_bhb_loop+0x60/0xb0 [ 1787.706806][T27606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.706824][T27606] RIP: 0033:0x7f460a98d33c [ 1787.706841][T27606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1787.706858][T27606] RSP: 002b:00007f46087d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1787.706878][T27606] RAX: ffffffffffffffda RBX: 00007f460abb6080 RCX: 00007f460a98d33c [ 1787.706898][T27606] RDX: 000000000000000f RSI: 00007f46087d50a0 RDI: 0000000000000006 [ 1787.706913][T27606] RBP: 00007f46087d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.706924][T27606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.706935][T27606] R13: 0000000000000001 R14: 00007f460abb6080 R15: 00007f460acdfa28 [ 1787.706964][T27606] [ 1787.939560][T18005] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1788.302202][T23371] usb 5-1: USB disconnect, device number 45 [ 1788.360383][T27616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5489'. [ 1788.381198][T18005] usb 3-1: config 0 has no interfaces? [ 1788.414297][T27616] vlan0: entered promiscuous mode [ 1788.427542][T18005] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1788.474427][T18005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.494428][T18005] usb 3-1: Product: syz [ 1788.502773][T18005] usb 3-1: Manufacturer: syz [ 1788.517455][T18005] usb 3-1: SerialNumber: syz [ 1788.564086][T18005] usb 3-1: config 0 descriptor?? [ 1788.617161][ T5853] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1788.901576][ T5853] usb 1-1: config 0 has no interfaces? [ 1788.918880][ T5853] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1788.928073][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.936053][ T5853] usb 1-1: Product: syz [ 1788.945326][ T5853] usb 1-1: Manufacturer: syz [ 1788.950232][T25725] net_ratelimit: 20 callbacks suppressed [ 1788.950253][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1789.023767][ T5853] usb 1-1: SerialNumber: syz [ 1789.046344][ T5853] usb 1-1: config 0 descriptor?? [ 1789.158414][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1789.276482][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1789.386778][T27610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.409839][T27610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.436364][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1789.467619][T27633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5492'. [ 1789.614799][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1789.737677][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1789.857184][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1789.967566][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1790.078011][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1790.206991][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1790.736059][ T5898] usb 3-1: USB disconnect, device number 58 [ 1790.922586][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5493'. [ 1791.157381][ T30] audit: type=1326 audit(1751049734.706:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460a98e929 code=0x7ffc0000 [ 1791.307191][ T30] audit: type=1326 audit(1751049734.716:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f460a98e929 code=0x7ffc0000 [ 1791.424155][ T5898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1791.458998][ T30] audit: type=1326 audit(1751049734.716:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460a98e929 code=0x7ffc0000 [ 1791.481420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1791.499035][ T30] audit: type=1326 audit(1751049734.716:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460a98e929 code=0x7ffc0000 [ 1791.528263][ T30] audit: type=1326 audit(1751049734.716:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460a98e929 code=0x7ffc0000 [ 1791.550671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1791.568172][ T30] audit: type=1326 audit(1751049734.716:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f460a98d290 code=0x7ffc0000 [ 1791.629304][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1791.646967][ T5898] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 1791.657549][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.683702][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.691668][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.700938][ T30] audit: type=1326 audit(1751049734.716:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f460a98e52b code=0x7ffc0000 [ 1791.724428][ T5898] usb 4-1: Product: syz [ 1791.817423][ T5898] usb 4-1: Manufacturer: syz [ 1791.837046][ T5898] usb 4-1: SerialNumber: syz [ 1791.843010][ T30] audit: type=1326 audit(1751049734.716:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f460a98e52b code=0x7ffc0000 [ 1791.865319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1791.882372][ T5898] usb 4-1: config 0 descriptor?? [ 1791.955247][ T30] audit: type=1326 audit(1751049734.716:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f460a98e52b code=0x7ffc0000 [ 1792.017044][ T5898] viperboard 4-1:0.0: version 0.00 found at bus 004 address 010 [ 1792.045356][ T30] audit: type=1326 audit(1751049734.716:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27640 comm="syz.3.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f460a98e52b code=0x7ffc0000 [ 1792.073338][ T5898] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1792.083447][ T5898] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1792.160844][ T5853] usb 1-1: USB disconnect, device number 57 [ 1792.416086][T27658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5498'. [ 1793.082963][T27672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5501'. [ 1794.047410][ T13] net_ratelimit: 30 callbacks suppressed [ 1794.047429][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1794.315568][ T5898] usb 4-1: USB disconnect, device number 10 [ 1794.328168][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1794.427421][ T5853] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1794.607830][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1794.684282][ T5853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.975035][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1795.000490][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1795.022737][ T5853] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1795.032178][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.035691][T27699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1795.129800][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1795.139720][ T5853] usb 1-1: Product: syz [ 1795.144246][ T5853] usb 1-1: Manufacturer: syz [ 1795.156809][ T5853] usb 1-1: SerialNumber: syz [ 1795.234115][ T5853] usb 1-1: config 0 descriptor?? [ 1795.257055][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1795.373190][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1795.601452][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1796.040488][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1796.412070][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1796.918055][T27715] vivid-000: disconnect [ 1797.282325][T27708] vivid-000: reconnect [ 1797.356541][T16365] usb 1-1: USB disconnect, device number 58 [ 1797.595418][T27723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1797.661707][T27726] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5515'. [ 1797.705094][T27726] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1797.711737][T27726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1797.726664][T27723] 8021q: VLANs not supported on caif0 [ 1797.760014][T27726] vhci_hcd vhci_hcd.0: Device attached [ 1797.777385][T27730] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 1797.784110][T27730] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1797.840558][T27730] vhci_hcd vhci_hcd.0: Device attached [ 1797.851176][T27731] vhci_hcd: connection closed [ 1797.851524][T27727] vhci_hcd: connection closed [ 1797.863182][T25162] vhci_hcd: stop threads [ 1797.892370][T25162] vhci_hcd: release socket [ 1797.907277][T25162] vhci_hcd: disconnect device [ 1797.931259][T25162] vhci_hcd: stop threads [ 1797.937272][T25162] vhci_hcd: release socket [ 1797.945857][T25162] vhci_hcd: disconnect device [ 1798.453769][T27746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5519'. [ 1798.712742][T27751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5521'. [ 1799.147406][ T3419] net_ratelimit: 19 callbacks suppressed [ 1799.147422][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1799.205112][T27751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5521'. [ 1799.467131][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1799.577398][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1799.785108][T27770] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1799.927443][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1800.043651][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1800.169965][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1800.305043][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1800.443163][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1800.639762][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1801.044671][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1801.927149][T16365] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1802.327753][T16365] usb 3-1: Using ep0 maxpacket: 8 [ 1802.354247][T16365] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1802.363653][T16365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.383149][T16365] usb 3-1: Product: syz [ 1802.391972][T16365] usb 3-1: Manufacturer: syz [ 1802.396681][T16365] usb 3-1: SerialNumber: syz [ 1802.420560][T16365] usb 3-1: config 0 descriptor?? [ 1802.645674][T16365] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1802.654231][T16365] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1802.725155][T16365] usb 3-1: USB disconnect, device number 59 [ 1803.136562][T27804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1803.523993][T16365] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1803.624567][ T5898] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1803.897429][ T5898] usb 5-1: device descriptor read/64, error -71 [ 1803.917077][T16365] usb 2-1: Using ep0 maxpacket: 16 [ 1803.924590][T16365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.944113][T16365] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1803.955092][T16365] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1803.972312][T16365] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1803.986122][T16365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.008697][T16365] usb 2-1: config 0 descriptor?? [ 1804.147286][ T5898] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1804.227019][T22261] net_ratelimit: 21 callbacks suppressed [ 1804.227039][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1804.247118][T16365] usbhid 2-1:0.0: can't add hid device: -71 [ 1804.263419][T16365] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1804.283788][T16365] usb 2-1: USB disconnect, device number 79 [ 1804.289929][ T5898] usb 5-1: device descriptor read/64, error -71 [ 1804.388478][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1804.411252][ T5898] usb usb5-port1: attempt power cycle [ 1804.497837][T27823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1804.538427][T27823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1804.549071][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1804.757422][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1804.790402][ T5898] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1804.843756][ T5898] usb 5-1: device descriptor read/8, error -71 [ 1804.850352][T16365] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1804.868125][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1804.987938][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1805.064088][T16365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.076809][T16365] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1805.107693][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1805.126110][ T5898] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1805.155858][T16365] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1805.169785][T16365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.194683][T16365] usb 1-1: Product: syz [ 1805.201476][ T5898] usb 5-1: device descriptor read/8, error -71 [ 1805.224030][T16365] usb 1-1: Manufacturer: syz [ 1805.229964][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1805.252194][T16365] usb 1-1: SerialNumber: syz [ 1805.287007][T16365] usb 1-1: config 0 descriptor?? [ 1805.327374][ T5898] usb usb5-port1: unable to enumerate USB device [ 1805.381359][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1805.599282][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1806.368769][T27836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1806.401404][T27836] vlan3: entered promiscuous mode [ 1806.409593][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5538'. [ 1806.453253][T27834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5538'. [ 1806.631162][T27834] geneve2: entered promiscuous mode [ 1806.645036][T27834] geneve2: entered allmulticast mode [ 1806.992111][T27841] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1807.517942][T23371] usb 1-1: USB disconnect, device number 59 [ 1808.247752][ T5898] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1808.464273][ T5898] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1808.489346][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.509019][ T5898] usb 4-1: Product: syz [ 1808.535390][ T5898] usb 4-1: Manufacturer: syz [ 1808.665613][ T5898] usb 4-1: SerialNumber: syz [ 1808.670764][T16365] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1808.752779][ T5898] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1808.778862][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1808.817182][T16365] usb 1-1: device descriptor read/64, error -71 [ 1809.006160][ T5898] usb 4-1: USB disconnect, device number 11 [ 1809.089557][T16365] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1809.227010][T16365] usb 1-1: device descriptor read/64, error -71 [ 1809.257261][ T13] net_ratelimit: 24 callbacks suppressed [ 1809.257281][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1809.338419][T16365] usb usb1-port1: attempt power cycle [ 1809.387025][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1809.518770][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1809.627654][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1809.797099][T16365] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1809.828029][T16365] usb 1-1: device descriptor read/8, error -71 [ 1809.869103][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1809.986340][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5549'. [ 1810.005887][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5549'. [ 1810.015449][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1810.016382][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1810.022756][ T24] ath9k_htc: Failed to initialize the device [ 1810.039833][ T5898] usb 4-1: ath9k_htc: USB layer deinitialized [ 1810.111563][T16365] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1810.149180][T16365] usb 1-1: device descriptor read/8, error -71 [ 1810.216325][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1810.267447][T16365] usb usb1-port1: unable to enumerate USB device [ 1810.337911][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1810.448965][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1810.559541][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1810.744546][T27881] FAULT_INJECTION: forcing a failure. [ 1810.744546][T27881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.763198][T27881] CPU: 0 UID: 0 PID: 27881 Comm: syz.4.5552 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1810.763233][T27881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1810.763247][T27881] Call Trace: [ 1810.763256][T27881] [ 1810.763265][T27881] dump_stack_lvl+0x189/0x250 [ 1810.763303][T27881] ? __pfx____ratelimit+0x10/0x10 [ 1810.763334][T27881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1810.763368][T27881] ? __pfx__printk+0x10/0x10 [ 1810.763404][T27881] should_fail_ex+0x414/0x560 [ 1810.763444][T27881] _copy_to_user+0x31/0xb0 [ 1810.763467][T27881] simple_read_from_buffer+0xe1/0x170 [ 1810.763494][T27881] proc_fail_nth_read+0x1df/0x250 [ 1810.763523][T27881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1810.763552][T27881] ? rw_verify_area+0x258/0x650 [ 1810.763583][T27881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1810.763611][T27881] vfs_read+0x200/0x980 [ 1810.763650][T27881] ? __pfx___mutex_lock+0x10/0x10 [ 1810.763683][T27881] ? __pfx_vfs_read+0x10/0x10 [ 1810.763717][T27881] ? __fget_files+0x2a/0x420 [ 1810.763747][T27881] ? __fget_files+0x3a0/0x420 [ 1810.763769][T27881] ? __fget_files+0x2a/0x420 [ 1810.763802][T27881] ksys_read+0x145/0x250 [ 1810.763838][T27881] ? __pfx_ksys_read+0x10/0x10 [ 1810.763867][T27881] ? rcu_is_watching+0x15/0xb0 [ 1810.763906][T27881] ? do_syscall_64+0xbe/0x3b0 [ 1810.763942][T27881] do_syscall_64+0xfa/0x3b0 [ 1810.763973][T27881] ? lockdep_hardirqs_on+0x9c/0x150 [ 1810.764003][T27881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.764025][T27881] ? clear_bhb_loop+0x60/0xb0 [ 1810.764051][T27881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.764072][T27881] RIP: 0033:0x7f2f5b78d33c [ 1810.764092][T27881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1810.764111][T27881] RSP: 002b:00007f2f5c5ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1810.764133][T27881] RAX: ffffffffffffffda RBX: 00007f2f5b9b6080 RCX: 00007f2f5b78d33c [ 1810.764150][T27881] RDX: 000000000000000f RSI: 00007f2f5c5ee0a0 RDI: 0000000000000004 [ 1810.764164][T27881] RBP: 00007f2f5c5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.764177][T27881] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 1810.764191][T27881] R13: 0000000000000001 R14: 00007f2f5b9b6080 R15: 00007f2f5badfa28 [ 1810.764223][T27881] [ 1811.708274][T23371] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1812.168940][ T5898] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1812.179107][T23371] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 1812.197834][T23371] usb 5-1: config 4 has no interface number 0 [ 1812.272142][T23371] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1812.320822][T23371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.345613][ T5898] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 1812.354148][ T5898] usb 4-1: config 0 has no interface number 0 [ 1812.362993][ T5898] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1812.372621][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.382022][ T5898] usb 4-1: Product: syz [ 1812.386374][ T5898] usb 4-1: Manufacturer: syz [ 1812.391426][ T5898] usb 4-1: SerialNumber: syz [ 1812.397528][T23371] usb 5-1: Product: syz [ 1812.405454][ T5898] usb 4-1: config 0 descriptor?? [ 1812.407364][T23371] usb 5-1: Manufacturer: syz [ 1812.510724][T23371] usb 5-1: SerialNumber: syz [ 1812.515203][ T5898] hub 4-1:0.217: bad descriptor, ignoring hub [ 1812.544420][ T5898] hub 4-1:0.217: probe with driver hub failed with error -5 [ 1812.549818][T23371] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1812.715331][T27895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.741138][T27895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.758340][ T5898] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1812.789363][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1812.815784][ T5898] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1812.834058][ T5898] usb 4-1: media controller created [ 1812.866265][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1812.943775][T23371] vp7045: USB control message 'in' went wrong. [ 1812.950807][T23371] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1812.981264][T23371] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1813.030259][ T5898] DVB: Unable to find symbol dib7000p_attach() [ 1813.040525][ T5898] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1813.071546][T23371] usb 5-1: USB disconnect, device number 50 [ 1813.177635][ T5898] rc_core: IR keymap rc-dib0700-rc5 not found [ 1813.183744][ T5898] Registered IR keymap rc-empty [ 1813.188935][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1813.221880][ T5898] dvb-usb: could not initialize remote control. [ 1813.270815][ T5898] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1813.297641][ T5898] usb 4-1: USB disconnect, device number 12 [ 1813.327012][ T24] usb 3-1: device descriptor read/64, error -71 [ 1813.515258][ T5898] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1813.567848][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1813.682195][T27914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.704406][T27914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.738041][ T24] usb 3-1: device descriptor read/64, error -71 [ 1813.853697][T27917] loop2: detected capacity change from 0 to 7 [ 1813.860835][ T24] usb usb3-port1: attempt power cycle [ 1813.869438][ T6902] Dev loop2: unable to read RDB block 7 [ 1813.877366][ T6902] loop2: unable to read partition table [ 1813.889963][ T6902] loop2: partition table beyond EOD, truncated [ 1813.910354][T27917] Dev loop2: unable to read RDB block 7 [ 1813.923591][T27917] loop2: unable to read partition table [ 1813.947205][T27917] loop2: partition table beyond EOD, truncated [ 1813.954810][T27917] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1813.987307][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1814.155425][ T5898] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config [ 1814.170482][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 124, changing to 10 [ 1814.186668][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9263, setting to 1024 [ 1814.203361][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1814.216587][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1814.233502][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1814.247401][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.255988][ T24] usb 3-1: device descriptor read/8, error -71 [ 1814.265309][ T5898] usb 4-1: config 0 descriptor?? [ 1814.288011][ T13] net_ratelimit: 28 callbacks suppressed [ 1814.288040][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1814.301869][T27913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1814.373226][ T30] kauditd_printk_skb: 754 callbacks suppressed [ 1814.373244][ T30] audit: type=1800 audit(1751049757.926:7204): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5565" name="nullb0" dev="devtmpfs" ino=4322 res=0 errno=0 [ 1814.427201][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1814.497048][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1814.520493][ T24] usb 3-1: device descriptor read/8, error -71 [ 1814.557109][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1814.591909][ T5898] usb 4-1: USB disconnect, device number 13 [ 1814.639182][ T24] usb usb3-port1: unable to enumerate USB device [ 1814.667161][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1814.777355][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1814.857226][T27939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5567'. [ 1814.887282][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1814.976681][T27930] delete_channel: no stack [ 1815.026471][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1815.146674][T27939] syz.1.5567 (27939): drop_caches: 2 [ 1815.152531][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1815.287119][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1815.537199][ T5898] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1815.675010][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1815.758099][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 1815.767598][ T5898] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 1815.777945][ T5898] usb 4-1: config 0 has no interface number 0 [ 1815.863354][ T5898] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 1815.873206][T27955] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1815.888798][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.914544][ T5898] usb 4-1: Product: syz [ 1815.977727][ T5898] usb 4-1: Manufacturer: syz [ 1816.032012][ T5898] usb 4-1: SerialNumber: syz [ 1816.066013][ T5898] usb 4-1: config 0 descriptor?? [ 1816.308520][T27948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.468648][T27948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.495071][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1816.549433][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1816.613285][ T5898] usbhid 4-1:0.78: couldn't find an input interrupt endpoint [ 1816.684790][ T5898] usb 4-1: USB disconnect, device number 14 [ 1817.857016][ T5898] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1818.177662][ T5898] usb 1-1: device descriptor read/64, error -71 [ 1818.525427][ T5898] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1818.564639][T27995] vivid-000: disconnect [ 1818.817058][ T5898] usb 1-1: device descriptor read/64, error -71 [ 1818.941462][ T5898] usb usb1-port1: attempt power cycle [ 1819.190212][T27989] vivid-000: reconnect [ 1819.371524][ T5898] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1819.415558][ T5898] usb 1-1: device descriptor read/8, error -71 [ 1819.423021][T22261] net_ratelimit: 23 callbacks suppressed [ 1819.423037][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1819.561383][T28005] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1819.617919][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1819.682411][ T5898] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1819.708286][ T5898] usb 1-1: device descriptor read/8, error -71 [ 1819.791948][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1819.827498][ T5898] usb usb1-port1: unable to enumerate USB device [ 1819.948460][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1820.087311][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1820.217337][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1820.437402][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1820.563610][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1820.697075][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1820.827302][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1820.870093][T28011] could not allocate digest TFM handle tgr128-generic [ 1821.163478][T27997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5584'. [ 1821.173473][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5584'. [ 1821.192290][T27997] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.201349][T27997] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.210565][T27997] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.235289][T28021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1821.244858][T28021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1821.254396][T28021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1821.297296][T18005] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1821.306239][T27999] fuse: Bad value for 'fd' [ 1821.457548][T18005] usb 2-1: Using ep0 maxpacket: 8 [ 1821.466472][T18005] usb 2-1: config 254 has an invalid interface number: 158 but max is 1 [ 1821.475868][T18005] usb 2-1: config 254 contains an unexpected descriptor of type 0x2, skipping [ 1821.485202][T18005] usb 2-1: config 254 has an invalid interface number: 5 but max is 1 [ 1821.494057][T18005] usb 2-1: config 254 has an invalid interface association descriptor of length 4, skipping [ 1821.505383][T18005] usb 2-1: config 254 has no interface number 0 [ 1821.513799][T18005] usb 2-1: config 254 has no interface number 1 [ 1821.534797][T18005] usb 2-1: config 254 interface 158 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1821.546860][T18005] usb 2-1: config 254 interface 158 altsetting 6 endpoint 0xE has an invalid bInterval 64, changing to 7 [ 1821.560389][T18005] usb 2-1: config 254 interface 158 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1821.577042][T18005] usb 2-1: config 254 interface 158 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1821.588232][T18005] usb 2-1: config 254 interface 158 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1821.601800][T18005] usb 2-1: config 254 interface 158 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1821.616166][T18005] usb 2-1: config 254 interface 158 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1821.628429][T18005] usb 2-1: config 254 interface 158 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1821.656820][T18005] usb 2-1: config 254 interface 158 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1821.690783][T18005] usb 2-1: config 254 interface 158 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1821.702326][T18005] usb 2-1: config 254 interface 5 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1821.713445][T18005] usb 2-1: config 254 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1821.726073][T18005] usb 2-1: config 254 interface 5 altsetting 3 endpoint 0xB has an invalid bInterval 20, changing to 8 [ 1821.741491][T18005] usb 2-1: config 254 interface 158 has no altsetting 0 [ 1821.748538][T18005] usb 2-1: config 254 interface 5 has no altsetting 0 [ 1821.759599][T18005] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a2e, bcdDevice=68.d4 [ 1821.769372][T18005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.777630][T18005] usb 2-1: Product: syz [ 1821.782934][T18005] usb 2-1: Manufacturer: syz [ 1821.787717][T18005] usb 2-1: SerialNumber: syz [ 1823.277575][T26660] Bluetooth: hci0: command 0x0405 tx timeout [ 1823.283762][T26660] Bluetooth: hci2: command 0x0405 tx timeout [ 1823.283796][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 1823.292331][T26660] Bluetooth: hci3: command 0x0c1a tx timeout [ 1823.307521][T28021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1823.348003][T28047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1823.375651][T28047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.481953][T18005] usb 2-1: USB disconnect, device number 80 [ 1824.071270][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1824.252570][T28063] netlink: 'syz.1.5602': attribute type 1 has an invalid length. [ 1824.265465][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5601'. [ 1824.290603][T28066] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1824.470721][T28063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1824.628553][T28070] gretap1: entered promiscuous mode [ 1824.657973][ T3419] net_ratelimit: 29 callbacks suppressed [ 1824.657988][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1824.788663][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1824.917451][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1824.957225][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1825.027766][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1825.109345][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.134493][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1825.148492][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1825.165404][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.191784][ T24] usb 2-1: config 0 descriptor?? [ 1825.209173][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1825.278329][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1825.357222][T20092] Bluetooth: hci0: command 0x0405 tx timeout [ 1825.387086][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1825.497052][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1825.607397][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1825.616352][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1825.631306][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1825.717542][T23371] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1825.737740][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1825.854261][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1825.872114][T23371] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1825.881151][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 1825.884973][T23371] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1825.907005][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 1825.915884][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 1825.927395][T23371] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1825.942546][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 1825.949246][T23371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.976013][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 1825.985432][T28088] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1825.996001][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 1826.019501][T23371] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1826.022629][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1826.061544][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1826.073581][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1826.100992][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1826.113240][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1826.134732][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1826.171316][ T24] pwc: Registered as video103. [ 1826.307130][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input109 [ 1826.360687][ T24] usb 2-1: USB disconnect, device number 81 [ 1826.823655][T28115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5616'. [ 1827.584708][T28129] netlink: 'syz.0.5620': attribute type 10 has an invalid length. [ 1827.613930][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1827.871878][ T24] usb 3-1: USB disconnect, device number 64 [ 1827.943927][T28138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.984439][T28138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.177227][T23371] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1828.257073][ T5898] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1828.346096][T23371] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1828.356344][T23371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.373941][T23371] usb 1-1: Product: syz [ 1828.404891][T23371] usb 1-1: Manufacturer: syz [ 1828.408912][ T5898] usb 4-1: config 0 has no interfaces? [ 1828.424347][ T5898] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1828.433685][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.453740][ T5898] usb 4-1: Product: syz [ 1828.469814][ T5898] usb 4-1: Manufacturer: syz [ 1828.484606][ T5898] usb 4-1: SerialNumber: syz [ 1828.504572][ T5898] usb 4-1: config 0 descriptor?? [ 1828.560225][T23371] usb 1-1: SerialNumber: syz [ 1828.617596][T23371] usb 1-1: config 0 descriptor?? [ 1828.782587][T28133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.791704][T28133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.842859][T23371] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 1828.861809][T23371] airspy 1-1:0.0: Could not detect board [ 1828.872614][T23371] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 1828.890766][T23371] usb 1-1: USB disconnect, device number 68 [ 1828.998495][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1829.033118][T28156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1829.196228][T28156] vlan3: entered promiscuous mode [ 1829.361403][T28160] loop6: detected capacity change from 0 to 7 [ 1829.440883][T28160] Dev loop6: unable to read RDB block 7 [ 1829.447091][ T5853] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1829.473980][T28160] loop6: unable to read partition table [ 1829.499054][T28160] loop6: partition table beyond EOD, truncated [ 1829.537936][T28160] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1829.643738][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.655662][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1829.719176][T22270] net_ratelimit: 29 callbacks suppressed [ 1829.719191][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1829.805962][ T5853] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1829.815598][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.816232][T28162] loop2: detected capacity change from 0 to 7 [ 1829.837968][ T5853] usb 2-1: Product: syz [ 1829.851386][ T5853] usb 2-1: Manufacturer: syz [ 1829.868318][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1829.885482][T28162] loop2: [ 1829.890026][T28162] loop2: partition table partially beyond EOD, truncated [ 1829.925512][ T5853] usb 2-1: SerialNumber: syz [ 1829.997124][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1830.097241][ T5898] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1830.117460][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1830.137067][ T5853] usb 2-1: config 0 descriptor?? [ 1830.301170][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1830.350484][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.379687][T28169] tipc: Can't bind to reserved service type 0 [ 1830.435569][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1830.447051][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1830.503647][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 1830.553549][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.607026][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1830.632826][ T5898] usb 5-1: config 0 descriptor?? [ 1830.664494][T28171] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1830.749043][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1831.227398][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1831.268169][ T5898] logitech 0003:046D:C101.0050: hidraw0: USB HID v0.00 Device [HID 046d:c101] on usb-dummy_hcd.4-1/input0 [ 1831.358313][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1831.408748][ T5853] usb 4-1: USB disconnect, device number 15 [ 1831.470656][ T30] audit: type=1326 audit(1751049775.016:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.538671][T28164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.544023][ T30] audit: type=1326 audit(1751049775.016:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.586142][T28164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.631457][T28164] mmap: syz.4.5630 (28164): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1831.693438][ T30] audit: type=1326 audit(1751049775.016:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.694257][T28196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5638'. [ 1831.728092][ T30] audit: type=1326 audit(1751049775.016:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.756860][ T30] audit: type=1326 audit(1751049775.016:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.797507][T28164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.804581][ T30] audit: type=1326 audit(1751049775.016:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.814144][T28196] vlan0: entered promiscuous mode [ 1831.834843][ T30] audit: type=1326 audit(1751049775.016:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.854417][T28164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.876814][ T30] audit: type=1326 audit(1751049775.016:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.934573][ T30] audit: type=1326 audit(1751049775.026:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1831.962976][ T30] audit: type=1326 audit(1751049775.026:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28163 comm="syz.4.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5b78e929 code=0x7ffc0000 [ 1832.018358][ T24] usb 5-1: USB disconnect, device number 51 [ 1832.037055][ T5898] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1832.177244][ T5898] usb 1-1: device descriptor read/64, error -71 [ 1832.315266][T28199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1832.417031][ T5898] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1832.433649][ T24] usb 2-1: USB disconnect, device number 82 [ 1832.546979][ T5898] usb 1-1: device descriptor read/64, error -71 [ 1832.657443][ T5898] usb usb1-port1: attempt power cycle [ 1832.913409][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1833.057023][ T5898] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1833.078069][ T5898] usb 1-1: device descriptor read/8, error -71 [ 1833.414566][ T5898] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1833.447840][ T5898] usb 1-1: device descriptor read/8, error -71 [ 1833.567711][ T5898] usb usb1-port1: unable to enumerate USB device [ 1833.719210][ T5898] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1833.960604][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 1833.986355][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.057014][ T5898] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1834.088142][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.198368][ T5898] usb 2-1: config 0 descriptor?? [ 1834.632746][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 1834.648988][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1834.700442][ T5898] usb 2-1: USB disconnect, device number 83 [ 1834.787736][T25162] net_ratelimit: 25 callbacks suppressed [ 1834.787757][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1834.947525][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.047299][ T5853] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1835.060137][T28239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5651'. [ 1835.073364][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.104185][T28239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5651'. [ 1835.207159][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 1835.208747][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.238216][ T5853] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 1835.246443][ T5853] usb 3-1: config 0 has no interface number 0 [ 1835.277883][ T5853] usb 3-1: config 0 interface 108 has no altsetting 0 [ 1835.309963][ T5853] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 1835.331697][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.357652][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.388276][ T5853] usb 3-1: Product: syz [ 1835.392489][ T5853] usb 3-1: Manufacturer: syz [ 1835.418636][ T5853] usb 3-1: SerialNumber: syz [ 1835.439964][ T5853] usb 3-1: config 0 descriptor?? [ 1835.456523][ T5853] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1835.478557][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.702789][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.827233][ T5898] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1835.838555][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.909272][ T5853] usb 3-1: USB disconnect, device number 65 [ 1835.947075][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1835.976857][ T6902] udevd[6902]: setting owner of /dev/bus/usb/003/065 to uid=0, gid=0 failed: No such file or directory [ 1835.988544][ T24] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1836.027414][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 1836.052292][ T5898] usb 2-1: config 0 has no interfaces? [ 1836.079406][ T5898] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1836.090109][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1836.154347][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.182870][ T5898] usb 2-1: config 0 descriptor?? [ 1836.248085][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.267689][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1836.397627][ T24] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1836.419021][T28247] delete_channel: no stack [ 1836.424287][T28247] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1836.453068][T28247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.477291][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.487696][T28247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.499162][ T24] usb 1-1: Product: syz [ 1836.503391][ T24] usb 1-1: Manufacturer: syz [ 1836.527064][ T24] usb 1-1: SerialNumber: syz [ 1836.563277][ T24] usb 1-1: config 0 descriptor?? [ 1836.592280][ T5898] usb 2-1: USB disconnect, device number 84 [ 1837.010165][T28261] sctp: [Deprecated]: syz.4.5659 (pid 28261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1837.010165][T28261] Use struct sctp_sack_info instead [ 1837.475778][ T5898] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1837.649324][ T5898] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1837.691547][T28278] netlink: 'syz.2.5663': attribute type 2 has an invalid length. [ 1837.806586][ T5898] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1837.816914][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1837.826065][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.834166][T28278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5663'. [ 1837.861866][T28273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1837.881699][T28273] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1837.901952][T28273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1838.010117][T28263] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1838.041293][ T5898] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1839.019340][ T5853] usb 1-1: USB disconnect, device number 73 [ 1839.274632][T28287] netlink: 'syz.0.5665': attribute type 23 has an invalid length. [ 1839.316792][T28287] xt_hashlimit: max too large, truncated to 1048576 [ 1839.326334][T28287] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1839.887058][T25725] net_ratelimit: 32 callbacks suppressed [ 1839.887080][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1839.917367][T26660] Bluetooth: hci2: command 0x0405 tx timeout [ 1839.923490][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 1839.929987][T17072] Bluetooth: hci3: command 0x0c1a tx timeout [ 1839.997745][ T5843] Bluetooth: hci0: command 0x0405 tx timeout [ 1840.004083][T28273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1840.010292][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1840.110794][T18005] usb 4-1: USB disconnect, device number 16 [ 1840.129670][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1840.253175][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1840.277080][ T5853] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1840.407101][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1840.470399][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 1840.479924][ T5853] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1840.490284][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1840.615989][ T5853] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1840.618780][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1840.632400][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 1840.640971][ T5853] usb 3-1: Product: syz [ 1840.645161][ T5853] usb 3-1: Manufacturer: syz [ 1840.765936][ T5853] usb 3-1: config 0 descriptor?? [ 1840.785194][T28281] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1840.812885][ T5853] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1840.838686][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1840.958613][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1841.003805][T28281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.015350][T28281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.017068][ T5898] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1841.073371][T28308] fuse: Unknown parameter '' [ 1841.095342][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1841.217082][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1841.307935][ T5853] usb 3-1: USB disconnect, device number 66 [ 1841.347384][ T5898] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1841.359730][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.429451][ T6629] udevd[6629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1841.489143][ T5898] usb 5-1: config 0 descriptor?? [ 1841.496537][ T5898] cp210x 5-1:0.0: cp210x converter detected [ 1841.725302][ T5898] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1841.837925][T18005] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1842.037137][T18005] usb 4-1: Using ep0 maxpacket: 8 [ 1842.049493][T18005] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1842.059275][T18005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.079596][T20092] Bluetooth: hci0: command 0x0405 tx timeout [ 1842.079811][T18005] usb 4-1: Product: syz [ 1842.138702][T18005] usb 4-1: Manufacturer: syz [ 1842.143419][T18005] usb 4-1: SerialNumber: syz [ 1842.209905][T18005] usb 4-1: config 0 descriptor?? [ 1842.366801][T28325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.416077][T28325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.428392][T18005] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1842.519896][ T5898] usb 5-1: USB disconnect, device number 52 [ 1842.551506][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1842.560451][T28329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1842.585379][ T5898] cp210x 5-1:0.0: device disconnected [ 1842.664315][T28329] ip6tnl1: entered promiscuous mode [ 1842.891176][T28337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.924849][T28337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.336452][T28346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1844.051499][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1844.211514][ T24] usb 2-1: config 50 has 0 interfaces, different from the descriptor's value: 15 [ 1844.224391][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1844.233990][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.326272][ T24] usb 2-1: Product: syz [ 1844.341709][ T24] usb 2-1: Manufacturer: syz [ 1844.352162][ T24] usb 2-1: SerialNumber: syz [ 1844.392980][ T24] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1844.456668][ T24] usb 2-1: no configuration chosen from 1 choice [ 1844.633027][T18005] usb write operation failed. (-71) [ 1844.661348][T18005] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1844.676084][T18005] dvbdev: DVB: registering new adapter (Terratec H7) [ 1844.686131][T18005] usb 4-1: media controller created [ 1844.696105][T18005] usb read operation failed. (-71) [ 1844.726602][T18005] usb write operation failed. (-71) [ 1844.754759][T18005] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1844.870569][T18005] usb 4-1: USB disconnect, device number 17 [ 1844.998945][T25725] net_ratelimit: 29 callbacks suppressed [ 1844.998966][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1845.149104][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1845.287618][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1845.408573][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1845.477102][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1845.527715][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1845.641858][T28369] vivid-000: disconnect [ 1845.657616][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1845.660963][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.687338][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1845.696623][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.712516][ T24] usb 3-1: Product: syz [ 1845.748672][ T24] usb 3-1: Manufacturer: syz [ 1845.966207][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1845.977988][ T24] usb 3-1: SerialNumber: syz [ 1846.150720][T28360] vivid-000: reconnect [ 1846.161154][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1846.237936][T28376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1846.242035][T28377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5687'. [ 1846.408919][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1846.558377][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1846.646286][T23371] usb 2-1: USB disconnect, device number 85 [ 1846.874163][T28364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.917524][T28364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.967091][T18005] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1847.155488][T18005] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1847.280653][T18005] usb 1-1: not running at top speed; connect to a high speed hub [ 1847.298729][T18005] usb 1-1: config 129 has an invalid interface number: 135 but max is 1 [ 1847.307968][T18005] usb 1-1: config 129 has no interface number 1 [ 1847.314275][T18005] usb 1-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1847.367450][T18005] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1847.397284][T18005] usb 1-1: config 129 interface 0 has no altsetting 0 [ 1847.447451][T18005] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1847.456578][T18005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.472054][T18005] usb 1-1: Product: syz [ 1847.476474][T18005] usb 1-1: Manufacturer: syz [ 1847.490372][T18005] usb 1-1: SerialNumber: syz [ 1848.698569][ T24] cdc_ncm 3-1:1.0: failed to get mac address [ 1848.705261][ T24] cdc_ncm 3-1:1.0: bind() failure [ 1848.803875][ T24] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1849.003172][T28406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.025021][ T24] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1849.063166][T28406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.113283][ T24] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1849.124344][T28406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.207402][ T24] usb 3-1: USB disconnect, device number 67 [ 1849.217305][T28406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.327463][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1849.361887][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1849.374492][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1849.389522][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1849.408984][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1849.908491][T18005] au0828: au0828: Device initialization failed. [ 1849.957315][T18005] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 1849.994904][T28414] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1850.014214][T18005] usb 1-1: USB disconnect, device number 74 [ 1850.328973][T28432] usb usb8: usbfs: process 28432 (syz.0.5700) did not claim interface 0 before use [ 1850.377187][ T3419] net_ratelimit: 25 callbacks suppressed [ 1850.377201][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1850.403764][T28432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5700'. [ 1850.417093][T28414] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.437112][T28414] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1850.495198][T28414] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1850.504338][T28414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.533575][T28414] usb 5-1: Product: syz [ 1850.556401][T28414] usb 5-1: Manufacturer: syz [ 1850.566420][T28414] usb 5-1: SerialNumber: syz [ 1850.591697][T28414] usb 5-1: config 0 descriptor?? [ 1850.717918][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1851.176280][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1851.317176][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1851.374463][T28415] chnl_net:caif_netlink_parms(): no params data found [ 1851.517288][T20092] Bluetooth: hci1: command tx timeout [ 1851.527596][T18005] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1851.689642][T18005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.705587][T18005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1851.743367][T18005] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1851.762102][T18005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.826729][T18005] usb 4-1: config 0 descriptor?? [ 1851.838191][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1851.853632][T28415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.888606][T28415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.906559][T28415] bridge_slave_0: entered allmulticast mode [ 1851.963956][T28415] bridge_slave_0: entered promiscuous mode [ 1852.037306][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1852.045175][T28415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.128740][T28415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.155300][T28415] bridge_slave_1: entered allmulticast mode [ 1852.173056][T28415] bridge_slave_1: entered promiscuous mode [ 1852.295422][T28415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1852.336371][T28415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1852.401607][T28457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.413330][T28457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.433978][T28415] team0: Port device team_slave_0 added [ 1852.482352][T28457] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1852.501426][T18005] usbhid 4-1:0.0: can't add hid device: -71 [ 1852.508032][T18005] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1852.520942][T28415] team0: Port device team_slave_1 added [ 1852.537274][T18005] usb 4-1: USB disconnect, device number 18 [ 1852.631839][T28415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1852.646637][T28415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.675338][T28415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1852.690189][T28415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1852.697951][T28415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.726344][T28415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.802038][T28415] hsr_slave_0: entered promiscuous mode [ 1852.810451][T28415] hsr_slave_1: entered promiscuous mode [ 1852.816602][T28415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1852.825963][T28415] Cannot create hsr debugfs directory [ 1852.837084][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1853.074331][T28415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.121270][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.127767][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.158625][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1853.187680][T18005] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1853.197949][T28415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.357777][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1853.388862][T18005] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 1853.415221][T18005] usb 3-1: config 150 has no interface number 0 [ 1853.462457][T28414] usb 5-1: USB disconnect, device number 53 [ 1853.519135][T28415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.543093][T18005] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1853.558650][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1853.571202][T18005] usb 3-1: config 150 interface 1 has no altsetting 0 [ 1853.578622][ T5853] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1853.591450][T18005] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1853.603598][T20092] Bluetooth: hci1: command tx timeout [ 1853.613606][T18005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.622640][T18005] usb 3-1: Product: syz [ 1853.626827][T18005] usb 3-1: Manufacturer: syz [ 1853.639895][T18005] usb 3-1: SerialNumber: syz [ 1853.746734][ T5853] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.761768][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1853.814510][ T5853] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1853.824103][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.847371][T28414] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1853.847997][ T5853] usb 4-1: Product: syz [ 1853.873993][ T5853] usb 4-1: Manufacturer: syz [ 1853.885784][ T5853] usb 4-1: SerialNumber: syz [ 1853.888468][T28469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.903333][ T5853] usb 4-1: config 0 descriptor?? [ 1853.943648][T28469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.982243][T28469] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5709'. [ 1854.077788][T28414] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 1854.104622][T28469] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5709'. [ 1854.124487][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.124525][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.127917][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.127946][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.133291][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.133321][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.134388][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.134419][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.135417][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.135448][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.136507][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.136537][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.138734][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.138765][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.145281][T28414] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.145314][T28414] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1854.145352][T28414] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1854.145384][T28414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.147990][T28414] usb 5-1: config 0 descriptor?? [ 1854.503934][T28483] bridge4: entered allmulticast mode [ 1854.584202][T28415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1854.648606][T28415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1854.675323][T28415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1854.728861][T28415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1855.032336][ T5853] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1855.060174][T28415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1855.167221][ T5853] usb 1-1: device descriptor read/64, error -71 [ 1855.239235][T28468] bridge4: left allmulticast mode [ 1855.417721][ T5853] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1855.505205][T28415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1855.529739][T25725] net_ratelimit: 8 callbacks suppressed [ 1855.529758][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1855.547249][ T5853] usb 1-1: device descriptor read/64, error -71 [ 1855.557379][T18005] xr_serial 3-1:150.204: xr_serial converter detected [ 1855.560402][T22261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.571304][T22261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1855.589317][T18005] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1855.607082][T18005] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1855.626640][T18005] usb 3-1: USB disconnect, device number 68 [ 1855.636783][T22261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.643949][T22261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.677153][T20092] Bluetooth: hci1: command tx timeout [ 1855.685009][T18005] xr_serial 3-1:150.204: device disconnected [ 1855.693819][ T5853] usb usb1-port1: attempt power cycle [ 1855.708646][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1855.850733][T28415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.900745][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1855.955766][T28415] veth0_vlan: entered promiscuous mode [ 1855.976774][T28415] veth1_vlan: entered promiscuous mode [ 1856.033009][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1856.042671][ T5853] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1856.065425][T28415] veth0_macvtap: entered promiscuous mode [ 1856.068072][ T5853] usb 1-1: device descriptor read/8, error -71 [ 1856.097741][T28415] veth1_macvtap: entered promiscuous mode [ 1856.155191][T28415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1856.213865][T28415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.252132][T28415] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.272442][T28415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.295936][T28415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.323563][T28415] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.327288][ T5853] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1856.370369][ T5853] usb 1-1: device descriptor read/8, error -71 [ 1856.387815][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1856.414105][T28518] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1856.507521][ T5853] usb usb1-port1: unable to enumerate USB device [ 1856.520106][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1856.720220][ T5853] usb 4-1: USB disconnect, device number 19 [ 1856.727497][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1856.885408][T25725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.925995][T25725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.054865][T28414] usbhid 5-1:0.0: can't add hid device: -71 [ 1857.064678][T28414] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1857.115111][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.132450][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1857.162521][T28414] usb 5-1: USB disconnect, device number 54 [ 1857.177077][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.269463][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1857.317203][T18005] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1857.477358][T18005] usb 4-1: Using ep0 maxpacket: 32 [ 1857.496196][T18005] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1857.554620][T18005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 1857.569131][T18005] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 1857.579240][T18005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.594688][T18005] usb 4-1: Product: syz [ 1857.600712][T18005] usb 4-1: Manufacturer: syz [ 1857.605358][T18005] usb 4-1: SerialNumber: syz [ 1857.617021][ T5853] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1857.632517][T18005] usb 4-1: config 0 descriptor?? [ 1857.757155][T20092] Bluetooth: hci1: command tx timeout [ 1857.878010][ T5853] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.905905][T18005] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input111 [ 1857.949789][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1857.986755][T28555] FAULT_INJECTION: forcing a failure. [ 1857.986755][T28555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1858.033617][ T5853] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1858.043119][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.051450][T28555] CPU: 0 UID: 0 PID: 28555 Comm: syz.0.5722 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1858.051477][T28555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1858.051489][T28555] Call Trace: [ 1858.051497][T28555] [ 1858.051506][T28555] dump_stack_lvl+0x189/0x250 [ 1858.051540][T28555] ? __pfx____ratelimit+0x10/0x10 [ 1858.051568][T28555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1858.051597][T28555] ? __pfx__printk+0x10/0x10 [ 1858.051618][T28555] ? __might_fault+0xb0/0x130 [ 1858.051657][T28555] should_fail_ex+0x414/0x560 [ 1858.051684][T28555] _copy_from_iter+0x1db/0x16f0 [ 1858.051737][T28555] ? policy_nodemask+0x27c/0x720 [ 1858.051756][T28555] ? __pfx__copy_from_iter+0x10/0x10 [ 1858.051791][T28555] ? set_page_refcounted+0xa0/0x1e0 [ 1858.051811][T28555] ? page_copy_sane+0x4e/0x280 [ 1858.051841][T28555] copy_page_from_iter+0xdd/0x170 [ 1858.051873][T28555] tun_get_user+0x1c4d/0x3ce0 [ 1858.051904][T28555] ? tun_get_user+0x693/0x3ce0 [ 1858.051945][T28555] ? aa_file_perm+0x11f/0xed0 [ 1858.051972][T28555] ? __pfx_tun_get_user+0x10/0x10 [ 1858.052010][T28555] ? aa_file_perm+0x11f/0xed0 [ 1858.052033][T28555] ? aa_file_perm+0x3e7/0xed0 [ 1858.052068][T28555] ? ref_tracker_alloc+0x318/0x460 [ 1858.052090][T28555] ? __lock_acquire+0xab9/0xd20 [ 1858.052118][T28555] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1858.052144][T28555] ? tun_get+0x1c/0x2f0 [ 1858.052181][T28555] ? tun_get+0x1c/0x2f0 [ 1858.052224][T28555] ? tun_get+0x1c/0x2f0 [ 1858.052255][T28555] tun_chr_write_iter+0x113/0x200 [ 1858.052284][T28555] vfs_write+0x54b/0xa90 [ 1858.052317][T28555] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1858.052345][T28555] ? __pfx_vfs_write+0x10/0x10 [ 1858.052383][T28555] ? __fget_files+0x2a/0x420 [ 1858.052413][T28555] ksys_write+0x145/0x250 [ 1858.052433][T28555] ? __pfx_ksys_write+0x10/0x10 [ 1858.052448][T28555] ? rcu_is_watching+0x15/0xb0 [ 1858.052483][T28555] ? do_syscall_64+0xbe/0x3b0 [ 1858.052516][T28555] do_syscall_64+0xfa/0x3b0 [ 1858.052544][T28555] ? lockdep_hardirqs_on+0x9c/0x150 [ 1858.052571][T28555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.052590][T28555] ? clear_bhb_loop+0x60/0xb0 [ 1858.052614][T28555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.052633][T28555] RIP: 0033:0x7f178738d3df [ 1858.052651][T28555] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1858.052668][T28555] RSP: 002b:00007f1788185000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1858.052689][T28555] RAX: ffffffffffffffda RBX: 00007f17875b5fa0 RCX: 00007f178738d3df [ 1858.052703][T28555] RDX: 0000000000000036 RSI: 0000200000000380 RDI: 00000000000000c8 [ 1858.052715][T28555] RBP: 00007f1788185090 R08: 0000000000000000 R09: 0000000000000000 [ 1858.052728][T28555] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1858.052740][T28555] R13: 0000000000000000 R14: 00007f17875b5fa0 R15: 00007f17876dfa28 [ 1858.052769][T28555] [ 1858.344117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1858.359087][ T5853] usb 3-1: Product: syz [ 1858.363258][ T5853] usb 3-1: Manufacturer: syz [ 1858.368317][ T5853] usb 3-1: SerialNumber: syz [ 1858.508145][ T5853] usb 3-1: config 0 descriptor?? [ 1858.514102][T18005] usb 4-1: USB disconnect, device number 20 [ 1858.987055][T28414] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1859.183198][T28414] usb 1-1: Using ep0 maxpacket: 8 [ 1859.392775][T28414] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1859.402220][T28414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.410646][T28414] usb 1-1: Product: syz [ 1859.435742][T28414] usb 1-1: Manufacturer: syz [ 1859.446178][T28414] usb 1-1: SerialNumber: syz [ 1859.522213][T28414] usb 1-1: config 0 descriptor?? [ 1859.570382][T28414] usb 1-1: bad CDC descriptors [ 1859.584824][T28414] usb 1-1: unsupported MDLM descriptors [ 1859.647787][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1859.647803][ T30] audit: type=1800 audit(1751049803.186:7250): pid=28582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5728" name="nullb0" dev="devtmpfs" ino=4322 res=0 errno=0 [ 1859.860680][ T5898] usb 1-1: USB disconnect, device number 79 [ 1860.598985][T22270] net_ratelimit: 25 callbacks suppressed [ 1860.599001][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1860.797178][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1860.981235][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1861.107504][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1861.264775][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1861.279677][T23371] usb 3-1: USB disconnect, device number 69 [ 1861.567134][T28414] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1861.757737][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1861.916675][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1861.982694][T28414] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1862.001188][T28414] usb 2-1: can't read configurations, error -22 [ 1862.057069][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1862.167083][T28414] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1862.209500][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1862.266983][T16365] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1862.333242][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1862.370242][T28414] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1862.397127][T28414] usb 2-1: can't read configurations, error -22 [ 1862.413943][T16365] usb 4-1: device descriptor read/64, error -71 [ 1862.420538][T28414] usb usb2-port1: attempt power cycle [ 1862.645672][T28649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1862.689612][T16365] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1862.817186][T28414] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1862.837136][T18005] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1862.847777][T16365] usb 4-1: device descriptor read/64, error -71 [ 1862.880912][T28414] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1862.896030][T28656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1862.899700][T28414] usb 2-1: can't read configurations, error -22 [ 1862.983836][T16365] usb usb4-port1: attempt power cycle [ 1863.003795][T18005] usb 5-1: config 2 has an invalid interface number: 10 but max is 0 [ 1863.020597][T18005] usb 5-1: config 2 has an invalid interface descriptor of length 2, skipping [ 1863.048010][T18005] usb 5-1: config 2 has no interface number 0 [ 1863.054171][T18005] usb 5-1: config 2 interface 10 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 1863.077053][T28414] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1863.084645][T18005] usb 5-1: config 2 interface 10 altsetting 12 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1863.100513][T28659] unknown channel width for channel at 909000KHz? [ 1863.115431][T18005] usb 5-1: config 2 interface 10 has no altsetting 0 [ 1863.125821][T18005] usb 5-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0c [ 1863.139036][T18005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.148242][T28414] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1863.150857][T18005] usb 5-1: Product: syz [ 1863.161376][T18005] usb 5-1: Manufacturer: syz [ 1863.166045][T18005] usb 5-1: SerialNumber: syz [ 1863.172500][T28414] usb 2-1: can't read configurations, error -22 [ 1863.190397][T28414] usb usb2-port1: unable to enumerate USB device [ 1863.261015][T28653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5743'. [ 1863.348755][T16365] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1863.369818][T16365] usb 4-1: device descriptor read/8, error -71 [ 1863.392040][T28662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.402659][T28662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.407042][T23371] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1863.421857][T18005] ums-isd200 5-1:2.10: USB Mass Storage device detected [ 1863.454478][T18005] usb 5-1: USB disconnect, device number 55 [ 1863.527277][T28414] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1863.567216][T23371] usb 3-1: Using ep0 maxpacket: 32 [ 1863.574600][T23371] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1863.584440][T23371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.595968][T23371] usb 3-1: config 0 descriptor?? [ 1863.607667][T16365] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1863.617837][T23371] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1863.648163][T16365] usb 4-1: device descriptor read/8, error -71 [ 1863.687096][T28414] usb 1-1: Using ep0 maxpacket: 8 [ 1863.694088][T28414] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1863.704105][T28414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1863.713846][T28414] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1863.723706][T28414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1863.738549][T28414] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1863.747814][T28414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.757935][T16365] usb usb4-port1: unable to enumerate USB device [ 1863.766200][T28414] usb 1-1: config 0 descriptor?? [ 1863.780569][T28653] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1864.002265][T28414] usb 1-1: USB disconnect, device number 80 [ 1864.075949][T28668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5747'. [ 1864.296767][T28673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1864.579819][T18005] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1864.760905][T18005] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1864.775603][T18005] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1864.784501][T18005] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.798674][T18005] usb 5-1: config 63 has no interface number 0 [ 1864.804924][T18005] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1864.817896][T18005] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 1864.832558][T18005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.869084][T18005] usb 5-1: Product: syz [ 1864.874544][T18005] usb 5-1: Manufacturer: syz [ 1864.879659][T18005] usb 5-1: SerialNumber: syz [ 1865.079717][T23371] gspca_sunplus: reg_w_riv err -71 [ 1865.088279][T23371] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1865.130954][T23371] usb 3-1: USB disconnect, device number 70 [ 1865.366581][T28691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1865.626993][T22270] net_ratelimit: 28 callbacks suppressed [ 1865.627018][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1865.790544][ T30] audit: type=1326 audit(1751049809.336:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.0.5757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f178738e929 code=0x0 [ 1865.815585][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1865.995061][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1866.127162][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1866.237301][T28707] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1866.248026][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1866.368048][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1866.487552][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1866.599283][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1866.707035][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1866.764955][T28721] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1866.887923][T27618] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1867.067451][T27618] usb 3-1: Using ep0 maxpacket: 8 [ 1867.083921][T27618] usb 3-1: no configurations [ 1867.101849][T27618] usb 3-1: can't read configurations, error -22 [ 1867.238377][T27618] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1867.253323][T18005] usb 5-1: USB disconnect, device number 56 [ 1867.317105][T23371] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1867.434547][T27618] usb 3-1: Using ep0 maxpacket: 8 [ 1867.442749][T27618] usb 3-1: no configurations [ 1867.449232][T27618] usb 3-1: can't read configurations, error -22 [ 1867.459502][T27618] usb usb3-port1: attempt power cycle [ 1867.483132][T23371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1867.493499][T23371] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1867.501932][T23371] usb 4-1: can't read configurations, error -61 [ 1867.647198][T23371] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1867.809003][T23371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1867.816977][T27618] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1867.825939][T23371] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1867.833978][T23371] usb 4-1: can't read configurations, error -61 [ 1867.844179][T23371] usb usb4-port1: attempt power cycle [ 1867.850404][T27618] usb 3-1: Using ep0 maxpacket: 8 [ 1867.865482][T27618] usb 3-1: no configurations [ 1867.879943][T27618] usb 3-1: can't read configurations, error -22 [ 1868.019640][T27618] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1868.068111][T27618] usb 3-1: Using ep0 maxpacket: 8 [ 1868.078231][T27618] usb 3-1: no configurations [ 1868.082951][T27618] usb 3-1: can't read configurations, error -22 [ 1868.097070][T18005] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1868.107700][T27618] usb usb3-port1: unable to enumerate USB device [ 1868.167902][T28729] netlink: 520 bytes leftover after parsing attributes in process `syz.1.5767'. [ 1868.195924][T28730] netlink: 520 bytes leftover after parsing attributes in process `syz.1.5767'. [ 1868.227615][T23371] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1868.249787][T23371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1868.260969][T18005] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 1868.269949][T18005] usb 5-1: config 0 has no interface number 0 [ 1868.276148][T18005] usb 5-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1868.286708][T18005] usb 5-1: config 0 interface 216 has no altsetting 0 [ 1868.294058][T18005] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1868.304277][T23371] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1868.312448][T23371] usb 4-1: can't read configurations, error -61 [ 1868.319331][T18005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.333797][T18005] usb 5-1: config 0 descriptor?? [ 1868.343127][T28727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1868.355292][T18005] usb 5-1: NFC: intf ffff888027733000 id ffffffff8eb52a00 [ 1868.457131][T16365] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1868.457404][T23371] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1868.520802][T23371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1868.531687][T23371] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1868.539628][T23371] usb 4-1: can't read configurations, error -61 [ 1868.546220][T23371] usb usb4-port1: unable to enumerate USB device [ 1868.578579][T18005] usb 5-1: USB disconnect, device number 57 [ 1868.630788][T16365] usb 2-1: Using ep0 maxpacket: 8 [ 1868.639817][T16365] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.648097][T27618] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1868.662477][T16365] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1868.681846][T16365] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1868.695362][T16365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.713854][T16365] usb 2-1: Product: syz [ 1868.720985][T16365] usb 2-1: Manufacturer: syz [ 1868.725739][T16365] usb 2-1: SerialNumber: syz [ 1868.920467][T27618] usb 1-1: config 0 has no interfaces? [ 1868.962005][T27618] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1868.971882][T16365] usb 2-1: USB disconnect, device number 90 [ 1868.988071][T27618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.008342][T27618] usb 1-1: Product: syz [ 1869.029403][T27618] usb 1-1: Manufacturer: syz [ 1869.034077][T27618] usb 1-1: SerialNumber: syz [ 1869.044352][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1869.078211][T27618] usb 1-1: config 0 descriptor?? [ 1869.812940][T28741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5770'. [ 1869.927275][T18005] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1870.030510][T28748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1870.179347][T18005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.211592][T18005] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1870.256044][T18005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.296637][T18005] usb 5-1: config 0 descriptor?? [ 1870.323493][T18005] pwc: Askey VC010 type 2 USB webcam detected. [ 1870.354016][T28753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1870.722479][T18005] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1870.738068][T24477] net_ratelimit: 29 callbacks suppressed [ 1870.738089][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1870.769836][T18005] pwc: recv_control_msg error -32 req 02 val 2700 [ 1870.783010][T18005] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1870.877138][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.008844][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.016836][T18005] pwc: recv_control_msg error -32 req 04 val 1300 [ 1871.108727][T18005] pwc: recv_control_msg error -32 req 04 val 1400 [ 1871.129039][T18005] pwc: recv_control_msg error -32 req 02 val 2000 [ 1871.149368][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.183633][T18005] pwc: recv_control_msg error -32 req 02 val 2100 [ 1871.198324][T18005] pwc: recv_control_msg error -32 req 04 val 1500 [ 1871.217626][T18005] pwc: recv_control_msg error -32 req 02 val 2500 [ 1871.230176][T18005] pwc: recv_control_msg error -32 req 02 val 2400 [ 1871.249323][T18005] pwc: recv_control_msg error -32 req 02 val 2600 [ 1871.268866][T18005] pwc: recv_control_msg error -32 req 02 val 2900 [ 1871.277938][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.279496][T18005] pwc: recv_control_msg error -32 req 02 val 2800 [ 1871.300115][T18005] pwc: recv_control_msg error -32 req 04 val 1100 [ 1871.347911][T27618] usb 1-1: USB disconnect, device number 81 [ 1871.373815][T18005] pwc: recv_control_msg error -32 req 04 val 1200 [ 1871.386972][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.387410][T18005] pwc: Registered as video103. [ 1871.420957][T18005] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input113 [ 1871.454014][T18005] usb 5-1: USB disconnect, device number 58 [ 1871.531826][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.687139][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.713522][T28769] syzkaller1: entered promiscuous mode [ 1871.726740][T28769] syzkaller1: entered allmulticast mode [ 1871.765516][T28769] loop2: detected capacity change from 0 to 7 [ 1871.787455][T28769] Dev loop2: unable to read RDB block 7 [ 1871.793083][T28769] loop2: unable to read partition table [ 1871.807299][T28769] loop2: partition table beyond EOD, truncated [ 1871.807527][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1871.813608][T28769] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1872.120150][T24477] bond1: (slave bridge1): failed to get link speed/duplex [ 1872.339952][T28778] hfs: unable to load iocharset "io#harset" [ 1872.417520][T18005] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1872.601616][T18005] usb 1-1: config 0 has no interfaces? [ 1872.622882][T18005] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1872.644768][T18005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.663273][T18005] usb 1-1: Product: syz [ 1872.678730][T18005] usb 1-1: Manufacturer: syz [ 1872.697187][T18005] usb 1-1: SerialNumber: syz [ 1872.724835][T18005] usb 1-1: config 0 descriptor?? [ 1873.046916][T28776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.067219][T28776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.347317][T18005] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1873.506611][T18005] usb 2-1: device descriptor read/64, error -71 [ 1873.661283][T28804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1873.747129][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1873.767617][T18005] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1873.890734][T28790] syz_tun: entered allmulticast mode [ 1873.917769][T18005] usb 2-1: device descriptor read/64, error -71 [ 1874.016572][ T24] usb 4-1: config 0 has no interfaces? [ 1874.028038][T18005] usb usb2-port1: attempt power cycle [ 1874.046614][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1874.057648][T23371] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1874.124480][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.163329][T28788] syz_tun: left allmulticast mode [ 1874.234269][T23371] usb 3-1: Using ep0 maxpacket: 16 [ 1874.242806][T23371] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 1874.261814][ T24] usb 4-1: Product: syz [ 1874.277277][ T24] usb 4-1: Manufacturer: syz [ 1874.281916][ T24] usb 4-1: SerialNumber: syz [ 1874.295593][T23371] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.322974][ T24] usb 4-1: config 0 descriptor?? [ 1874.367282][T18005] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1874.522128][T18005] usb 2-1: device descriptor read/8, error -71 [ 1874.538663][T23371] usb 3-1: config 0 has no interface number 0 [ 1874.572509][T23371] usb 3-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1874.602354][T23371] usb 3-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1874.632841][T23371] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6 [ 1874.654076][T23371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.681286][T23371] usb 3-1: config 0 descriptor?? [ 1874.797628][T18005] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1874.818359][T18005] usb 2-1: device descriptor read/8, error -71 [ 1874.899602][T23371] usb 3-1: USB disconnect, device number 75 [ 1874.953572][T18005] usb usb2-port1: unable to enumerate USB device [ 1875.018235][ T24] usb 1-1: USB disconnect, device number 82 [ 1875.190237][T28808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1875.214830][T28808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1875.230295][T28808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1875.309066][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1875.366372][T28809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1875.659989][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.718004][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.747038][T25725] net_ratelimit: 24 callbacks suppressed [ 1875.747058][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1875.778891][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.810758][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.868926][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1875.889414][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.904303][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.917106][T18005] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1875.923408][T28818] netlink: 'syz.0.5792': attribute type 29 has an invalid length. [ 1875.938797][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.963466][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1875.967057][ T24] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1875.987406][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.025251][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1876.052937][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1876.078189][T18005] usb 5-1: Using ep0 maxpacket: 16 [ 1876.096997][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.103470][T18005] usb 5-1: config 0 has no interfaces? [ 1876.117480][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1876.123654][T28820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5793'. [ 1876.150639][ T24] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 1876.160370][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.187349][T18005] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1876.192576][ T24] usb 3-1: Product: syz [ 1876.213193][ T24] usb 3-1: Manufacturer: syz [ 1876.213219][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1876.223575][ T24] usb 3-1: SerialNumber: syz [ 1876.225593][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.259908][ T24] usb 3-1: config 0 descriptor?? [ 1876.271639][T18005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.292519][ T24] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 1876.304020][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1876.313602][T18005] usb 5-1: Product: syz [ 1876.331144][ T24] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1876.345492][T18005] usb 5-1: Manufacturer: syz [ 1876.360800][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1876.385207][T18005] usb 5-1: SerialNumber: syz [ 1876.413779][T23371] hid-generic 00A0:0006:0003.0051: unknown main item tag 0x0 [ 1876.427009][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1876.437451][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.445590][T18005] usb 5-1: config 0 descriptor?? [ 1876.457508][T23371] hid-generic 00A0:0006:0003.0051: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1876.521074][ T24] usb 3-1: USB disconnect, device number 76 [ 1876.547458][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.617654][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1876.619271][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1876.619296][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1876.621118][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1876.621140][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.621156][ T10] usb 2-1: Product: syz [ 1876.621168][ T10] usb 2-1: Manufacturer: syz [ 1876.621180][ T10] usb 2-1: SerialNumber: syz [ 1876.623342][ T10] usb 2-1: config 0 descriptor?? [ 1876.647977][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1876.648016][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1876.690994][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.744559][T28814] netlink: 'syz.4.5791': attribute type 7 has an invalid length. [ 1876.744577][T28814] netlink: 'syz.4.5791': attribute type 8 has an invalid length. [ 1876.800900][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.907849][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1876.937839][T23371] usb 5-1: USB disconnect, device number 59 [ 1877.041001][ T24] usb 4-1: USB disconnect, device number 29 [ 1877.232870][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1877.283249][T28837] netlink: 'syz.3.5798': attribute type 1 has an invalid length. [ 1877.310093][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1877.361217][T28837] bond1: entered promiscuous mode [ 1877.384538][T28837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1877.400662][T28840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5799'. [ 1877.423038][T28840] vlan1: entered promiscuous mode [ 1877.535718][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1877.559231][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 1878.177925][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1878.370449][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1878.399497][ T10] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1878.410974][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.445553][ T10] usb 5-1: Product: syz [ 1878.463748][ T10] usb 5-1: Manufacturer: syz [ 1878.481720][ T10] usb 5-1: SerialNumber: syz [ 1878.522679][ T10] usb 5-1: config 0 descriptor?? [ 1878.553805][ T10] as10x_usb: device has been detected [ 1878.593281][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1878.707277][ T10] usb 5-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1878.788900][ T10] as10x_usb: error during firmware upload part1 [ 1878.857786][ T10] Registered device Sky IT Digital Key (green led) [ 1878.885426][ T10] usb 5-1: USB disconnect, device number 60 [ 1879.022718][ T10] Unregistered device Sky IT Digital Key (green led) [ 1879.046507][ T10] as10x_usb: device has been disconnected [ 1879.244077][T16365] usb 2-1: USB disconnect, device number 95 [ 1879.256744][T16365] em28xx 2-1:0.0: Disconnecting em28xx [ 1879.306733][T28866] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1879.317086][T16365] em28xx 2-1:0.0: Freeing device [ 1880.272168][T28900] lo: entered promiscuous mode [ 1880.280804][T28900] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5815'. [ 1880.484023][T28905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'. [ 1880.759531][ T13] net_ratelimit: 28 callbacks suppressed [ 1880.759554][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1880.908182][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1881.080266][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1881.209952][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1881.337427][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1881.531619][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1881.662883][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1881.727142][T16365] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1881.829167][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1881.909255][T16365] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.947165][T16365] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1881.967009][T16365] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1881.982339][T16365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.983074][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1882.102538][T16365] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1882.177487][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1882.232828][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1882.250286][T16365] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1882.647008][T16365] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1882.877708][T16365] usb 3-1: Using ep0 maxpacket: 16 [ 1882.917509][T16365] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1882.961993][T16365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.022424][T16365] usb 3-1: config 0 descriptor?? [ 1883.207169][T23371] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1883.357066][T23371] usb 2-1: Using ep0 maxpacket: 16 [ 1883.365047][T23371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.391553][T23371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.416147][T23371] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1883.427381][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1883.447405][T23371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.481988][T28414] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1883.502684][T28937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.512236][T28937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.521418][T23371] usb 2-1: config 0 descriptor?? [ 1883.587335][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1883.602763][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1883.619813][ T24] usb 5-1: config 0 has no interface number 0 [ 1883.635185][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1883.646670][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.752314][T28941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1883.762451][ T24] usb 5-1: Product: syz [ 1883.770182][T28414] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 1883.786215][ T24] usb 5-1: Manufacturer: syz [ 1883.825884][ T24] usb 5-1: SerialNumber: syz [ 1883.859068][T28414] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1883.877169][ T24] usb 5-1: config 0 descriptor?? [ 1883.889893][T28414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.905947][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1883.932767][T28414] usb 4-1: Product: syz [ 1883.937387][T28414] usb 4-1: Manufacturer: syz [ 1883.942142][T28414] usb 4-1: SerialNumber: syz [ 1883.955694][T28414] usb 4-1: config 0 descriptor?? [ 1883.966667][T28414] go7007-loader 4-1:0.0: can't handle multiple config [ 1883.983470][T28414] go7007-loader 4-1:0.0: probe failed [ 1884.099254][T23371] hid-multitouch 0003:1FD2:6007.0052: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1884.204303][T28414] usb 4-1: USB disconnect, device number 30 [ 1884.312233][T28948] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5827'. [ 1884.395657][T23371] usb 2-1: USB disconnect, device number 96 [ 1884.466157][T28947] fido_id[28947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1884.666108][ T10] usb 1-1: USB disconnect, device number 83 [ 1884.677872][T28918] delete_channel: no stack [ 1884.822018][T28950] trusted_key: encrypted_key: insufficient parameters specified [ 1884.923093][ T24] gspca_spca1528: reg_r err -32 [ 1884.928672][ T24] spca1528 5-1:0.1: probe with driver spca1528 failed with error -32 [ 1885.137294][T28414] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1885.340869][T28414] usb 1-1: config 252 has an invalid interface number: 191 but max is 0 [ 1885.371280][T28414] usb 1-1: config 252 has no interface number 0 [ 1885.374222][T28414] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 1885.410717][T16365] usbhid 3-1:0.0: can't add hid device: -71 [ 1885.410824][T16365] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1885.417474][T16365] usb 3-1: USB disconnect, device number 77 [ 1885.447956][T28414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.447983][T28414] usb 1-1: Product: syz [ 1885.448000][T28414] usb 1-1: Manufacturer: syz [ 1885.448018][T28414] usb 1-1: SerialNumber: syz [ 1885.478281][T28414] usb-storage 1-1:252.191: USB Mass Storage device detected [ 1885.490972][T28414] usb-storage 1-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 1885.725260][T23371] usb 5-1: USB disconnect, device number 61 [ 1885.877133][T25725] net_ratelimit: 31 callbacks suppressed [ 1885.877147][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1885.930174][T28414] usb 1-1: USB disconnect, device number 84 [ 1886.052297][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1886.158700][T16365] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1886.197484][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1886.589169][T16365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.600023][T16365] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1886.672343][T16365] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1886.681784][T16365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.690090][T16365] usb 3-1: Product: syz [ 1886.700187][T16365] usb 3-1: Manufacturer: syz [ 1886.707023][T16365] usb 3-1: SerialNumber: syz [ 1886.711503][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1886.749459][T16365] usb 3-1: config 0 descriptor?? [ 1886.877123][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1886.993521][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1887.029451][T28982] kvm: Disabled LAPIC found during irq injection [ 1887.097506][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1887.247521][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1887.517439][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1887.527785][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5838'. [ 1887.624305][T28990] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 1887.631059][T28990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1887.844254][T28988] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1887.850790][T28988] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1888.002898][T28998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1888.022219][T28990] vhci_hcd vhci_hcd.0: Device attached [ 1888.117097][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1888.134632][T28988] vhci_hcd vhci_hcd.0: Device attached [ 1888.164272][T28998] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 1888.170900][T28998] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1888.266996][T28414] usb 33-2: new low-speed USB device number 2 using vhci_hcd [ 1888.304515][T28994] vhci_hcd: connection reset by peer [ 1888.367199][T28999] vhci_hcd: connection closed [ 1888.377011][T28998] vhci_hcd vhci_hcd.0: Device attached [ 1888.552409][T28992] vhci_hcd: connection closed [ 1888.579159][T22261] vhci_hcd: stop threads [ 1888.616258][T22261] vhci_hcd: release socket [ 1888.625907][T22261] vhci_hcd: disconnect device [ 1888.657940][T22261] vhci_hcd: stop threads [ 1888.676015][T22261] vhci_hcd: release socket [ 1888.698566][T22261] vhci_hcd: disconnect device [ 1888.708126][T22261] vhci_hcd: stop threads [ 1888.736914][T22261] vhci_hcd: release socket [ 1888.741448][T22261] vhci_hcd: disconnect device [ 1889.253650][T18005] usb 3-1: USB disconnect, device number 78 [ 1889.486436][T29009] loop6: detected capacity change from 0 to 7 [ 1889.500659][T29009] Dev loop6: unable to read RDB block 7 [ 1889.517583][T29009] loop6: unable to read partition table [ 1889.527927][ T5898] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1889.718655][T29009] loop6: partition table beyond EOD, truncated [ 1889.727943][T29009] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1889.896511][T29019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5844'. [ 1889.911731][ T5898] usb 4-1: config 0 has no interfaces? [ 1889.941291][T29019] vlan2: entered promiscuous mode [ 1889.950324][T29019] batadv0: entered promiscuous mode [ 1890.147055][ T5898] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1890.166101][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.221035][ T5898] usb 4-1: Product: syz [ 1890.256545][ T5898] usb 4-1: Manufacturer: syz [ 1890.275811][ T5898] usb 4-1: SerialNumber: syz [ 1890.292097][ T5898] usb 4-1: config 0 descriptor?? [ 1890.391098][T29023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5846'. [ 1890.466416][T29027] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1891.226647][T25724] net_ratelimit: 12 callbacks suppressed [ 1891.226670][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1891.403524][T29035] loop2: detected capacity change from 0 to 7 [ 1891.410973][T29035] loop2: [ 1891.415245][T29035] loop2: partition table partially beyond EOD, truncated [ 1891.707177][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1891.884045][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1892.054933][T18005] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1892.139310][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1892.287055][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1892.340355][T16365] usb 4-1: USB disconnect, device number 31 [ 1892.368321][T29055] loop6: detected capacity change from 0 to 7 [ 1892.385835][T29055] Dev loop6: unable to read RDB block 7 [ 1892.407322][ T5898] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1892.407411][T18005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.415306][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1892.446466][T29055] loop6: unable to read partition table [ 1892.467863][T18005] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1892.476237][T29055] loop6: partition table beyond EOD, truncated [ 1892.493761][T29055] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1892.544276][T18005] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1892.574968][T18005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.577159][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1892.593243][ T5898] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1892.614454][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1892.629388][T18005] usb 2-1: Product: syz [ 1892.653793][ T5898] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1892.690010][T18005] usb 2-1: Manufacturer: syz [ 1892.702900][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.712734][T18005] usb 2-1: SerialNumber: syz [ 1892.734020][T18005] usb 2-1: config 0 descriptor?? [ 1892.757359][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1892.768422][ T5898] usb 1-1: config 0 descriptor?? [ 1892.780224][ T5898] usbhid 1-1:0.0: can't add hid device: -22 [ 1892.794066][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1892.802553][T16365] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1892.891720][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1892.936985][T16365] usb 4-1: device descriptor read/64, error -71 [ 1893.019013][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1893.196985][T16365] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1893.347243][T28414] vhci_hcd: vhci_device speed not set [ 1893.357371][T16365] usb 4-1: device descriptor read/64, error -71 [ 1893.492521][T16365] usb usb4-port1: attempt power cycle [ 1893.887039][T16365] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1893.908428][T16365] usb 4-1: device descriptor read/8, error -71 [ 1893.947523][T29077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1893.989563][T29077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1894.037265][T29077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1894.147063][T16365] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1894.167837][T16365] usb 4-1: device descriptor read/8, error -71 [ 1894.327613][T16365] usb usb4-port1: unable to enumerate USB device [ 1894.943312][T18005] usb 2-1: USB disconnect, device number 97 [ 1895.147073][T23371] usb 1-1: USB disconnect, device number 85 [ 1895.457492][T29093] loop6: detected capacity change from 0 to 7 [ 1895.483852][T29093] Dev loop6: unable to read RDB block 7 [ 1895.517114][T29093] loop6: unable to read partition table [ 1895.541964][T29093] loop6: partition table beyond EOD, truncated [ 1895.575069][T29093] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1896.047435][T23371] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1896.197581][T23371] usb 3-1: Using ep0 maxpacket: 8 [ 1896.211062][T23371] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1896.230838][T23371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.233747][T25725] net_ratelimit: 23 callbacks suppressed [ 1896.233769][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1896.254256][T23371] usb 3-1: Product: syz [ 1896.285906][T23371] usb 3-1: Manufacturer: syz [ 1896.322588][T23371] usb 3-1: SerialNumber: syz [ 1896.356756][T23371] usb 3-1: config 0 descriptor?? [ 1896.408189][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1896.530656][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1896.583962][T23371] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1896.687033][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1896.718237][T29121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1897.016987][T28414] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1897.117424][ T5853] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1897.159157][T29126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5874'. [ 1897.237930][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1897.282917][T28414] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1897.290944][T28414] usb 5-1: can't read configurations, error -61 [ 1897.382883][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.437938][T29126] vlan1: entered promiscuous mode [ 1897.443186][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1897.477075][T28414] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1897.516421][ T5853] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1897.543663][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.583477][ T5853] usb 2-1: Product: syz [ 1897.594540][ T5853] usb 2-1: Manufacturer: syz [ 1897.641313][ T5853] usb 2-1: SerialNumber: syz [ 1897.663463][ T5853] usb 2-1: config 0 descriptor?? [ 1897.787434][T25724] bond1: (slave bridge1): failed to get link speed/duplex [ 1897.844845][T28414] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1897.844899][T28414] usb 5-1: can't read configurations, error -61 [ 1897.845193][T28414] usb usb5-port1: attempt power cycle [ 1897.898762][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1898.013213][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1898.120506][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1898.177726][T28414] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1898.210857][T28414] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1898.255889][T29103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.267793][T29103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.386363][T29137] loop2: detected capacity change from 0 to 7 [ 1898.395407][T29137] Dev loop2: unable to read RDB block 7 [ 1898.403174][T29137] loop2: unable to read partition table [ 1898.405264][T28414] usb 5-1: can't read configurations, error -61 [ 1898.423103][T29137] loop2: partition table beyond EOD, truncated [ 1898.493428][T23371] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1898.513769][T23371] dvbdev: DVB: registering new adapter (Terratec H7) [ 1898.530151][T29137] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1898.547174][T23371] usb 3-1: media controller created [ 1898.567423][T28414] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1898.618092][T28414] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1898.625892][T28414] usb 5-1: can't read configurations, error -61 [ 1898.639693][T28414] usb usb5-port1: unable to enumerate USB device [ 1898.665692][T23371] usb read operation failed. (-32) [ 1898.687783][T23371] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1900.116991][ T5905] usb 3-1: USB disconnect, device number 79 [ 1900.225256][ T5853] usb 2-1: USB disconnect, device number 98 [ 1900.579252][ T5905] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1901.078233][T29167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1901.097164][T29167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1901.125263][T29167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1901.144883][ T5905] usb 3-1: config 0 has no interfaces? [ 1901.177910][ T5905] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1901.214794][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.237121][ T5905] usb 3-1: Product: syz [ 1901.243229][ T5905] usb 3-1: Manufacturer: syz [ 1901.263513][ T5905] usb 3-1: SerialNumber: syz [ 1901.284400][ T5905] usb 3-1: config 0 descriptor?? [ 1901.309872][ T3419] net_ratelimit: 25 callbacks suppressed [ 1901.309919][ T3419] bond1: (slave bridge1): failed to get link speed/duplex [ 1901.449244][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1901.555680][T29176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5886'. [ 1901.573417][T29176] vlan2: entered promiscuous mode [ 1901.777177][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1901.897466][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1902.028991][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1902.444393][T25162] bond1: (slave bridge1): failed to get link speed/duplex [ 1902.463215][ T30] audit: type=1800 audit(1751049845.926:7252): pid=29192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5890" name="nullb0" dev="devtmpfs" ino=4322 res=0 errno=0 [ 1902.575233][T29196] loop2: detected capacity change from 0 to 7 [ 1902.583027][T29196] Dev loop2: unable to read RDB block 7 [ 1902.589927][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1902.655103][T29196] loop2: unable to read partition table [ 1902.674162][T29196] loop2: partition table beyond EOD, truncated [ 1902.696401][T29196] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1902.721414][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1902.965536][T25725] bond1: (slave bridge1): failed to get link speed/duplex [ 1903.087205][ T5853] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1903.087521][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1903.257186][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 1903.302165][ T5853] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1903.353636][ T5853] usb 1-1: config 0 has no interface number 0 [ 1903.379637][ T5853] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.441640][ T5853] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.453084][T29202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.482471][ T5853] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1903.512349][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.587442][T29202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.677360][ T5905] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1903.737847][ T5853] usb 1-1: config 0 descriptor?? [ 1903.883354][ T5905] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.924276][ T5905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1903.937005][T16365] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1904.005562][ T10] usb 3-1: USB disconnect, device number 80 [ 1904.037097][ T5905] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1904.104995][ T5905] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 1904.168457][T16365] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.190919][T16365] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1904.209755][ T5905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1904.234985][T16365] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1904.244593][T16365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.252829][ T5905] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1904.266912][T16365] usb 5-1: Product: syz [ 1904.271120][T16365] usb 5-1: Manufacturer: syz [ 1904.321939][ T5905] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1904.337079][T16365] usb 5-1: SerialNumber: syz [ 1904.347019][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.375180][T16365] usb 5-1: config 0 descriptor?? [ 1904.392017][ T5905] usb 4-1: Product: syz [ 1904.396257][ T5905] usb 4-1: Manufacturer: syz [ 1904.415443][ T5905] usb 4-1: SerialNumber: syz [ 1904.436506][ T5853] uclogic 0003:28BD:0071.0053: failed retrieving string descriptor #100: -71 [ 1904.455806][ T5905] usb 4-1: ucan: probing device on interface #0 [ 1904.473297][ T5905] usb 4-1: ucan: invalid endpoint configuration [ 1904.474377][ T5853] uclogic 0003:28BD:0071.0053: failed retrieving pen parameters: -71 [ 1904.489900][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5896'. [ 1904.502841][ T5905] usb 4-1: ucan: probe failed; try to update the device firmware [ 1904.538356][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5896'. [ 1904.628320][ T5853] uclogic 0003:28BD:0071.0053: pen probing failed: -71 [ 1904.635264][ T5853] uclogic 0003:28BD:0071.0053: failed probing parameters: -71 [ 1904.652821][ T5853] uclogic 0003:28BD:0071.0053: probe with driver uclogic failed with error -71 [ 1904.673639][ T5905] usb 4-1: USB disconnect, device number 36 [ 1904.772946][ T5853] usb 1-1: USB disconnect, device number 86 [ 1905.123560][T29212] vivid-000: disconnect [ 1905.526387][T29205] vivid-000: reconnect [ 1906.321744][T22270] net_ratelimit: 23 callbacks suppressed [ 1906.321766][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1906.447431][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1906.568971][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1906.688815][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1906.707119][ T5905] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1906.772762][T29233] fuse: Unknown parameter 'Td' [ 1906.839165][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1906.868662][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 1906.893773][ T5905] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1906.966966][ T5905] usb 4-1: config 0 has no interface number 0 [ 1906.968880][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1907.016602][ T5905] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528 [ 1907.097079][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1907.121093][ T5905] usb 4-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 1907.151045][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.175713][ T5905] usb 4-1: Product: syz [ 1907.188205][ T5905] usb 4-1: Manufacturer: syz [ 1907.203953][ T5905] usb 4-1: SerialNumber: syz [ 1907.224797][ T5905] usb 4-1: config 0 descriptor?? [ 1907.294063][T29229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1907.347156][T22261] bond1: (slave bridge1): failed to get link speed/duplex [ 1907.366224][ T5905] ftdi_sio 4-1:0.151: FTDI USB Serial Device converter detected [ 1907.436300][ T5853] usb 5-1: USB disconnect, device number 66 [ 1907.491657][ T5905] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 1907.548776][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 1907.616617][ T5905] usb 4-1: USB disconnect, device number 37 [ 1907.649528][ T5905] ftdi_sio 4-1:0.151: device disconnected [ 1907.657693][T29240] loop6: detected capacity change from 0 to 7 [ 1907.658763][T22270] bond1: (slave bridge1): failed to get link speed/duplex [ 1907.679285][T29240] Dev loop6: unable to read RDB block 7 [ 1907.684999][T29240] loop6: unable to read partition table [ 1907.722420][T29240] loop6: partition table beyond EOD, truncated [ 1907.736986][T29240] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1908.589262][T29270] netlink: 'syz.3.5916': attribute type 29 has an invalid length. [ 1908.613965][T29273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5915'. [ 1908.649967][T29273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5915'. [ 1908.669450][T29273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5915'. [ 1908.695545][T29273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5915'. [ 1908.811777][T29275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.907478][T29275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.037035][T28414] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1909.157411][ T5905] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1909.219803][T28414] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 1909.269941][T28414] usb 2-1: config 0 has no interface number 0 [ 1909.326996][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1909.335070][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1909.352095][ T5905] usb 3-1: config 0 has no interface number 0 [ 1909.380850][T28414] usb 2-1: config 0 interface 104 has no altsetting 0 [ 1909.392613][ T5905] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1909.404354][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.414726][T28414] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1909.424162][T28414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.432698][ T5905] usb 3-1: Product: syz [ 1909.442685][ T5905] usb 3-1: Manufacturer: syz [ 1909.447792][T28414] usb 2-1: Product: syz [ 1909.453329][ T5905] usb 3-1: SerialNumber: syz [ 1909.458021][T29286] netlink: 'syz.3.5916': attribute type 29 has an invalid length. [ 1909.459589][T29286] netlink: 'syz.3.5916': attribute type 29 has an invalid length. [ 1909.471318][T28414] usb 2-1: Manufacturer: syz [ 1909.482206][ T5905] usb 3-1: config 0 descriptor?? [ 1909.487403][T28414] usb 2-1: SerialNumber: syz [ 1909.497739][ T5905] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1909.515294][T28414] usb 2-1: config 0 descriptor?? [ 1909.529442][T28414] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1909.756167][T28414] gspca_vc032x: reg_r err -71 [ 1909.795061][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.827025][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.832399][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.872628][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.889666][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.895287][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.922376][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.942294][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.957061][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.976759][T29289] loop6: detected capacity change from 0 to 7 [ 1909.993609][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1909.998435][T29289] Dev loop6: unable to read RDB block 7 [ 1910.007467][T29289] loop6: unable to read partition table [ 1910.017051][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.042658][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.042836][T29289] loop6: partition table beyond EOD, [ 1910.067014][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.078125][T29289] truncated [ 1910.078150][T29289] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1910.181724][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.198835][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.214498][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.224593][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.247021][T28414] gspca_vc032x: I2c Bus Busy Wait 00 [ 1910.252389][T28414] gspca_vc032x: Unknown sensor... [ 1910.277171][T28414] vc032x 2-1:0.104: probe with driver vc032x failed with error -22 [ 1910.317279][T28414] usb 2-1: USB disconnect, device number 99 [ 1910.489111][T29295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.566608][ T5905] gspca_spca1528: reg_w err -71 [ 1910.573565][ T5905] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1910.597328][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5923'. [ 1910.603273][T29295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.623155][ T5905] usb 3-1: USB disconnect, device number 81 [ 1910.675517][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5923'. [ 1910.777363][T28414] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1910.855045][T29307] bridge_slave_0: left allmulticast mode [ 1910.864374][T29307] bridge_slave_0: left promiscuous mode [ 1910.870322][T29307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.877281][T23371] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1910.914293][T29306] netlink: 'syz.0.5927': attribute type 10 has an invalid length. [ 1910.924771][T29307] bridge_slave_1: left allmulticast mode [ 1910.932964][T29307] bridge_slave_1: left promiscuous mode [ 1910.939123][T28414] usb 2-1: Using ep0 maxpacket: 16 [ 1910.950020][T29307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.959170][T28414] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1910.970302][T28414] usb 2-1: config 0 has no interface number 0 [ 1910.976459][T28414] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 1910.989606][T28414] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1911.001094][T28414] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1911.014420][T28414] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1911.014892][T29307] bond0: (slave bond_slave_0): Releasing backup interface [ 1911.035453][T28414] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1911.046770][T28414] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1911.047542][T23371] usb 5-1: Using ep0 maxpacket: 32 [ 1911.056721][T28414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.069673][T28414] usb 2-1: Product: syz [ 1911.073942][T28414] usb 2-1: Manufacturer: syz [ 1911.079276][T28414] usb 2-1: SerialNumber: syz [ 1911.086225][T29307] bond0: (slave bond_slave_1): Releasing backup interface [ 1911.095912][T28414] usb 2-1: config 0 descriptor?? [ 1911.102135][T29294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1911.105981][T29307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1911.116131][T29294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1911.168166][T23371] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1911.185396][T23371] usb 5-1: config 0 has no interface number 0 [ 1911.197793][T29307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1911.207974][T29307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1911.222270][T23371] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1911.241118][T29307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1911.259221][T23371] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1911.273925][T23371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.300076][T23371] usb 5-1: Product: syz [ 1911.304438][T23371] usb 5-1: Manufacturer: syz [ 1911.310838][T29307] bond1: (slave bridge1): Removing an active aggregator [ 1911.315696][T23371] usb 5-1: SerialNumber: syz [ 1911.321532][T29307] bond1: (slave bridge1): Releasing backup interface [ 1911.348138][T23371] usb 5-1: config 0 descriptor?? [ 1911.374152][T28414] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1911.382732][T16365] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1911.401210][T29307] bridge1: left promiscuous mode [ 1911.406383][T29307] bridge1: left allmulticast mode [ 1911.429841][T28414] usb 2-1: USB disconnect, device number 100 [ 1911.436632][T23371] smsc75xx v1.0.0 [ 1911.537542][T29307] bond2: (slave geneve2): Releasing active interface [ 1911.563076][T29316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5930'. [ 1911.576259][T16365] usb 4-1: config 0 has no interfaces? [ 1911.587543][T16365] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1911.596768][T16365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.605330][T16365] usb 4-1: Product: syz [ 1911.610558][T16365] usb 4-1: Manufacturer: syz [ 1911.615560][T16365] usb 4-1: SerialNumber: syz [ 1911.631852][T16365] usb 4-1: config 0 descriptor?? [ 1911.646775][T29307] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1911.695483][T29307] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1911.717362][T29307] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1911.742170][T29307] bond3: (slave geneve3): Releasing active interface [ 1912.136407][T23371] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1912.190698][T23371] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1912.216522][T23371] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1912.241142][T23371] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1912.261882][T23371] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1912.283907][T29325] loop6: detected capacity change from 0 to 7 [ 1912.285995][T23371] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1912.318552][T29325] Dev loop6: unable to read RDB block 7 [ 1912.332441][T29325] loop6: unable to read partition table [ 1912.332671][T23371] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1912.347063][T29325] loop6: partition table beyond EOD, truncated [ 1912.347118][T29325] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1912.417250][T23371] usb 5-1: USB disconnect, device number 67 [ 1912.667046][T29336] vivid-000: disconnect [ 1912.927251][T29341] x_tables: duplicate underflow at hook 1 [ 1913.032128][T29348] trusted_key: encrypted_key: key user:syz not found [ 1913.073867][T29326] vivid-000: reconnect [ 1914.019590][T29362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5942'. [ 1914.561856][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.577436][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.636832][T29380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5947'. [ 1914.681878][ T5905] usb 4-1: USB disconnect, device number 38 [ 1915.210877][ T30] audit: type=1326 audit(1751049858.766:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29390 comm="syz.2.5951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f713018e929 code=0x0 [ 1915.243989][T29395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1915.985482][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.013767][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.065693][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.074205][ T5905] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1916.106916][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.153215][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.189138][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.247057][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 1916.265588][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.291589][ T5905] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1916.300007][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.326967][ T5905] usb 2-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 1916.346981][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.366144][ T5905] usb 2-1: config 0 has no interface number 0 [ 1916.372454][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.519818][ T5905] usb 2-1: config 0 interface 122 has no altsetting 0 [ 1916.528566][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.536004][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.616959][ T5905] usb 2-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=c8.85 [ 1916.628270][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.663403][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.719936][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.743222][ T5905] usb 2-1: Product: syz [ 1916.754159][T16365] hid-generic FFF9:0000:0203.0054: unknown main item tag 0x0 [ 1916.779915][ T5905] usb 2-1: Manufacturer: syz [ 1916.784891][ T5905] usb 2-1: SerialNumber: syz [ 1916.794868][T16365] hid-generic FFF9:0000:0203.0054: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1916.858500][ T5905] usb 2-1: config 0 descriptor?? [ 1916.865364][T29436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5963'. [ 1916.951649][T29436] vlan1: entered promiscuous mode [ 1917.402251][T29446] netlink: 'syz.0.5965': attribute type 46 has an invalid length. [ 1917.433381][T29438] fido_id[29438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1917.538657][T29446] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5965'. [ 1918.708222][ T5905] hub 2-1:0.122: bad descriptor, ignoring hub [ 1918.714363][ T5905] hub 2-1:0.122: probe with driver hub failed with error -5 [ 1918.798946][ T5905] usb 2-1: USB disconnect, device number 101 [ 1918.941911][T29468] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1919.224417][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1919.235042][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1919.262966][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1919.289456][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1919.299776][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1920.217811][T23371] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1920.277389][ T5853] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1920.369006][T23371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.390237][T23371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1920.413522][T23371] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1920.425919][T23371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.479388][ T5853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.516795][T23371] usb 3-1: config 0 descriptor?? [ 1920.556612][ T5853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1920.589051][ T5853] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1920.598420][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.632671][ T5853] usb 2-1: Product: syz [ 1920.653376][ T5853] usb 2-1: Manufacturer: syz [ 1920.661247][ T5853] usb 2-1: SerialNumber: syz [ 1920.782928][T29480] chnl_net:caif_netlink_parms(): no params data found [ 1920.904922][ T5853] usb 2-1: 0:2 : does not exist [ 1920.991046][ T5853] usb 2-1: USB disconnect, device number 102 [ 1921.003265][T23371] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1921.029163][T23371] cp2112 0003:10C4:EA90.0055: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1921.120834][T29514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1921.220785][T23371] cp2112 0003:10C4:EA90.0055: Part Number: 0x82 Device Version: 0xFE [ 1921.277932][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1921.343388][T29521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5983'. [ 1921.357222][ T5843] Bluetooth: hci5: command tx timeout [ 1921.401210][T29480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.444470][T29480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.482660][T29480] bridge_slave_0: entered allmulticast mode [ 1921.519390][T29480] bridge_slave_0: entered promiscuous mode [ 1921.554343][T29480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.578155][T29480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.600740][T29480] bridge_slave_1: entered allmulticast mode [ 1921.618204][T29480] bridge_slave_1: entered promiscuous mode [ 1921.717078][ T5905] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1921.832866][T23371] cp2112 0003:10C4:EA90.0055: error reading lock byte: -71 [ 1921.877914][T23371] usb 3-1: USB disconnect, device number 82 [ 1921.896968][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 1921.929207][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.931137][T29480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.962232][ T5905] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1922.001751][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.038609][ T5905] usb 2-1: config 0 descriptor?? [ 1922.040753][T29480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1922.057259][ T24] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1922.246563][T29480] team0: Port device team_slave_0 added [ 1922.300262][T29480] team0: Port device team_slave_1 added [ 1922.327161][T29544] trusted_key: encrypted_key: key user:syz not found [ 1922.506145][ T5905] apple 0003:05AC:026C.0056: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.1-1/input0 [ 1922.544553][T29548] loop2: detected capacity change from 0 to 7 [ 1922.660282][T25725] bridge_slave_1: left allmulticast mode [ 1922.667176][T25725] bridge_slave_1: left promiscuous mode [ 1922.681863][T25725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.687488][ T5905] usb 2-1: USB disconnect, device number 103 [ 1922.730862][ T6902] loop2: [ 1922.736292][T25725] bridge_slave_0: left allmulticast mode [ 1922.745891][ T6902] loop2: partition table partially beyond EOD, truncated [ 1922.747252][T25725] bridge_slave_0: left promiscuous mode [ 1922.797214][T25725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.815396][T29548] loop2: [ 1922.866544][T29548] loop2: partition table partially beyond EOD, truncated [ 1922.973393][T29552] fido_id[29552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1923.442874][ T5843] Bluetooth: hci5: command tx timeout [ 1924.065231][T25725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1924.075679][T25725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1924.087257][T25725] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1924.098235][T25725] bond0 (unregistering): Released all slaves [ 1924.114246][T29480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1924.117122][T18005] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1924.137066][T29480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1924.197425][T29480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1924.302066][T18005] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 1924.317946][T18005] usb 3-1: config 0 has no interface number 0 [ 1924.319652][T29480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1924.327876][T18005] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 1924.366938][T29480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1924.392982][T18005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.432806][T18005] usb 3-1: config 0 descriptor?? [ 1924.454714][T18005] lan78xx 3-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 1924.475220][T18005] lan78xx 3-1:0.168: probe with driver lan78xx failed with error -5 [ 1924.487462][T29480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1924.562975][T25725] tipc: Disabling bearer [ 1924.587693][T25725] tipc: Left network mode [ 1924.791906][ T24] usb 3-1: USB disconnect, device number 83 [ 1924.855104][T29582] usb usb7: usbfs: process 29582 (syz.1.5993) did not claim interface 0 before use [ 1924.908473][T29480] hsr_slave_0: entered promiscuous mode [ 1924.915173][T29480] hsr_slave_1: entered promiscuous mode [ 1924.938479][T29480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1924.946084][T29480] Cannot create hsr debugfs directory [ 1925.397004][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1925.517834][ T5843] Bluetooth: hci5: command tx timeout [ 1925.620761][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1925.641472][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.650243][T29597] loop2: detected capacity change from 0 to 7 [ 1925.666891][ T24] usb 1-1: Product: syz [ 1925.681212][T29597] loop2: [ 1925.684561][ T24] usb 1-1: Manufacturer: syz [ 1925.694378][T29597] loop2: partition table partially beyond EOD, truncated [ 1925.706921][ T24] usb 1-1: SerialNumber: syz [ 1925.766152][ T24] usb 1-1: config 0 descriptor?? [ 1925.803312][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1926.198844][ T24] gspca_sunplus: reg_r err -71 [ 1926.219551][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1926.231720][T29609] trusted_key: encrypted_key: key user:syz not found [ 1926.308138][ T24] usb 1-1: USB disconnect, device number 88 [ 1926.986933][T28414] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1927.247280][T28414] usb 4-1: Using ep0 maxpacket: 32 [ 1927.258709][T28414] usb 4-1: config 1 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1927.292925][T28414] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1927.316153][T28414] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1927.328340][T28414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.372493][T28414] usb 4-1: Product: 얷쏖竝恙⊨䁐ꖑ셥쌌ꠇ⹘茔₴䟹䔉첆攳긺痰瑧൷↠缴걊픪䂛틒羰䊑鷾궔ಭ㽒疪茑懐ﲾନ羑磻뻔豀崥὏ힺㅛ簗⻝뢾뜄ည㕋꫟⎎씰碒炂㦶暃걒⚉廄霡㽗緾ᅭ记ᔜ낍偞䄅ꂒ룃䩮憙濲걠蹥 [ 1927.414150][T28414] usb 4-1: Manufacturer: Ё [ 1927.426722][T28414] usb 4-1: SerialNumber: 䠊 [ 1927.573627][T29480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1927.597163][ T5843] Bluetooth: hci5: command tx timeout [ 1927.619603][T29480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1927.705754][T29480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1927.761203][T29480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1928.122353][T29480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1928.219269][T29480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1928.233396][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.240530][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1928.305141][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.312443][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1928.341745][T25725] mac80211_hwsim hwsim63 wlan0 (unregistering): left allmulticast mode [ 1928.491904][T25725] hsr_slave_0: left promiscuous mode [ 1928.511506][T25725] hsr_slave_1: left promiscuous mode [ 1928.523571][T25725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1928.535380][T25725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1929.203889][T25725] team0 (unregistering): Port device team_slave_1 removed [ 1929.527587][T28414] usb 4-1: USB disconnect, device number 39 [ 1929.776707][T29480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1929.856619][T29480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1929.956243][T29480] veth0_vlan: entered promiscuous mode [ 1929.994068][T29480] veth1_vlan: entered promiscuous mode [ 1930.073268][T29480] veth0_macvtap: entered promiscuous mode [ 1930.103546][T29480] veth1_macvtap: entered promiscuous mode [ 1930.144228][T29480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.182604][T29480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1930.220462][T29480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.247670][T29480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.267037][T29480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.275792][T29480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.305214][T25725] IPVS: stop unused estimator thread 0... [ 1930.456826][T25725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.466134][T25725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.512684][T25725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.521172][T25725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.957346][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1976.000986][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.016904][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.441651][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.448580][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.637277][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 2098.881666][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.888467][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.320651][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.327383][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.760693][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.767443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22