last executing test programs: 14.815399673s ago: executing program 4 (id=1458): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.737015274s ago: executing program 2 (id=1459): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x36c8cf32cdb6d9f1, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r2, &(0x7f0000000000)=@other={'unlock', ' ', 'mem'}, 0xb) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7b983e6c727d6b63, 0x0, 0x0}, &(0x7f0000000000)=0x40) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) fcntl$setpipe(r3, 0x407, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 12.163732726s ago: executing program 0 (id=1464): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001400)="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", 0x36c}, {&(0x7f0000000680)}, {&(0x7f00000006c0)}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 12.090183636s ago: executing program 4 (id=1465): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.979603787s ago: executing program 0 (id=1466): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffa72}) 11.132104598s ago: executing program 1 (id=1467): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) 10.831524954s ago: executing program 4 (id=1468): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r0, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600003060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="070002807235ab000c0007000001"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10.799230713s ago: executing program 2 (id=1469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x8, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x4, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.719693445s ago: executing program 0 (id=1470): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000af00)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20044080}}], 0x2, 0x40015) socket(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x6f8641, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x401, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) 10.445012758s ago: executing program 3 (id=1471): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7c, &(0x7f0000000040)="0a0000000980ffff", 0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x9000}, {r3, 0x88a0}], 0x2, 0x0, 0x0, 0x0) 10.378018324s ago: executing program 2 (id=1472): syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x482458b699e5b9, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x210, 0x6, 0xa, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0xa, 0x7}}}}}}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 9.972084495s ago: executing program 3 (id=1473): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114", 0xe6}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648d", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.821836325s ago: executing program 3 (id=1474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003740), 0x2000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7ea}) 9.159839589s ago: executing program 4 (id=1475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.108497601s ago: executing program 3 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001400)="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", 0x36c}, {&(0x7f0000000680)}, {&(0x7f00000006c0)}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 8.376239523s ago: executing program 3 (id=1477): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x24, &(0x7f0000000200)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.008390834s ago: executing program 1 (id=1478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd6b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.933390065s ago: executing program 2 (id=1479): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x36c8cf32cdb6d9f1, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r2, &(0x7f0000000000)=@other={'unlock', ' ', 'mem'}, 0xb) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7b983e6c727d6b63, 0x0, 0x0}, &(0x7f0000000000)=0x40) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) fcntl$setpipe(r3, 0x407, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 7.767249923s ago: executing program 0 (id=1480): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 7.683638313s ago: executing program 3 (id=1481): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x24e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) 6.33710317s ago: executing program 0 (id=1482): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2cc20a74ed64a3ef980524ae0edac936856a37d39d09562d689be8197673fae1e036c675c8df3513c4cac374cbb5ef19b1fdd320a2b5def48a02c2ccbe29fd2b91e627570969222acc9c2eb42f1c6be4fbef6d60cbcb9a49e8b26a54a070820dd8be0bbd2475173b69bb89c8"], 0x90}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000010000104000000000000000000000000fd5c81a41d33e880114069c640353e320ef19bac88f087b612e5ad3dec96154357ad9e7d38f31a4fefb7e983c6922a094d5cc55fb0efaff38d65543eaec5aae82b5c24b09b2f3864769348019815d82aab01781247762a7022488d5ffe5664e399597a513082ee193851bb3b006283e93d2873b4e3ce7ee87dba952b4c85a533507e3bd505e85b5968c07bada89f37e596d8f17392c0314e68a87c8fa24cb7ee296094d65fc7b4e6d2826b088202f990a483521360", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x20004805) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) listen(r2, 0x5) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000002080)=""/102400, 0x19000) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 5.742964814s ago: executing program 1 (id=1483): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESHEX], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e90000000000000000", @ANYRES32], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.641356949s ago: executing program 0 (id=1484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) shmctl$IPC_SET(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 4.362293202s ago: executing program 1 (id=1485): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = dup(r0) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 4.27751172s ago: executing program 2 (id=1486): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r0, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600003060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="070002807235ab000c0007000001"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.658895114s ago: executing program 4 (id=1487): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x9, 0x0, 0x7, 0x400009, 0x28, 0xa, 0x80000002}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.495690664s ago: executing program 1 (id=1488): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x200000, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x3, 0x0, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x1, 0x0, 0x1, 0x0, 0xabf, 0x1000004}, {{@in6=@loopback, 0x4d0, 0x2b}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x9, 0x0, 0x4}]}]}, 0x17c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000240002801400018008000100e000000208000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200000000000c0002800500010000000000300001802c000180140001"], 0x8c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x10000a0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2.205127117s ago: executing program 1 (id=1489): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) 898.334744ms ago: executing program 2 (id=1490): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000af00)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20044080}}], 0x2, 0x40015) socket(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x6f8641, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x401, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) 0s ago: executing program 4 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001400)="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", 0x373}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e4", 0xb}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): , Product=2, SerialNumber=3 [ 185.904544][ T5871] usb 3-1: Product: syz [ 185.904557][ T5871] usb 3-1: Manufacturer: syz [ 185.904570][ T5871] usb 3-1: SerialNumber: syz [ 185.913564][ T5871] usb 3-1: config 0 descriptor?? [ 186.179604][ T5871] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.226006][ T7234] mmap: syz.0.435 (7234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.286146][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 186.286252][ T7234] netlink: 7 bytes leftover after parsing attributes in process `syz.0.435'. [ 186.931256][ T5811] usb 4-1: USB disconnect, device number 13 [ 187.603748][ T5871] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 187.609184][ T5871] usb 3-1: USB disconnect, device number 14 [ 187.681933][ T7250] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 187.744888][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 187.924882][ T7259] fuse: Unknown parameter 'group_id00000000000000000000' [ 188.783604][ T7281] input: syz1 as /devices/virtual/input/input5 [ 189.364344][ T7293] fuse: Unknown parameter 'group_id00000000000000000000' [ 189.444688][ T7297] tipc: Can't bind to reserved service type 2 [ 192.907021][ T7351] tipc: Started in network mode [ 192.907038][ T7351] tipc: Node identity 8e274b5d0548, cluster identity 4711 [ 192.907142][ T7351] tipc: Enabled bearer , priority 0 [ 192.907715][ T7351] syzkaller0: entered promiscuous mode [ 192.907728][ T7351] syzkaller0: entered allmulticast mode [ 192.919282][ T7351] tipc: Resetting bearer [ 193.093574][ T7350] tipc: Resetting bearer [ 193.212852][ T7350] tipc: Disabling bearer [ 193.579240][ T5902] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 193.730933][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 193.736593][ T5902] usb 4-1: config 0 has no interfaces? [ 193.736628][ T5902] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.736648][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.746494][ T5902] usb 4-1: config 0 descriptor?? [ 194.038175][ T7358] team_slave_0: entered promiscuous mode [ 194.038216][ T7358] team_slave_1: entered promiscuous mode [ 194.038487][ T7358] vlan2: entered promiscuous mode [ 194.038494][ T7358] team0: entered promiscuous mode [ 194.304043][ T5131] usb 4-1: USB disconnect, device number 14 [ 194.567994][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.568060][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.919125][ T5919] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 195.075809][ T5919] usb 1-1: config 1 interface 0 has no altsetting 0 [ 195.075842][ T7378] fuse: Bad value for 'user_id' [ 195.075854][ T7378] fuse: Bad value for 'user_id' [ 195.078419][ T5919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 195.078447][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.078464][ T5919] usb 1-1: Product: syz [ 195.078476][ T5919] usb 1-1: Manufacturer: syz [ 195.078489][ T5919] usb 1-1: SerialNumber: syz [ 195.681975][ T5919] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 195.690360][ T7382] fuse: Unknown parameter 'fd0x0000000000000004' [ 197.350207][ T7407] fuse: Bad value for 'user_id' [ 197.350223][ T7407] fuse: Bad value for 'user_id' [ 198.558273][ T5919] usb 1-1: USB disconnect, device number 13 [ 198.567378][ T5919] usblp0: removed [ 198.669243][ T7416] fuse: Unknown parameter 'fd0x0000000000000004' [ 199.345506][ T7429] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.786993][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 201.290485][ T7448] fuse: Bad value for 'fd' [ 201.859743][ T7455] netlink: 48 bytes leftover after parsing attributes in process `syz.4.507'. [ 201.859771][ T7455] netlink: 56 bytes leftover after parsing attributes in process `syz.4.507'. [ 201.860570][ T7455] netlink: 68 bytes leftover after parsing attributes in process `syz.4.507'. [ 201.860588][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 201.860601][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.507'. [ 203.318313][ T5919] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 203.382168][ T7462] fuse: Unknown parameter 'fd0x0000000000000004' [ 203.503946][ T5919] usb 3-1: config 1 interface 0 has no altsetting 0 [ 203.507123][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.507146][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.507156][ T5919] usb 3-1: Product: syz [ 203.507163][ T5919] usb 3-1: Manufacturer: syz [ 203.507170][ T5919] usb 3-1: SerialNumber: syz [ 204.015943][ T5919] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 204.382101][ T50] usb 3-1: USB disconnect, device number 15 [ 204.394447][ T50] usblp0: removed [ 204.485375][ T7475] netlink: 276 bytes leftover after parsing attributes in process `syz.2.516'. [ 205.600070][ T7485] fuse: Bad value for 'fd' [ 205.673774][ T7473] can: request_module (can-proto-3) failed. [ 206.591998][ T36] audit: type=1326 audit(1772184486.125:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.3.520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81f79cc799 code=0x0 [ 207.209877][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 208.169069][ T5919] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.267367][ T7518] netlink: 276 bytes leftover after parsing attributes in process `syz.1.528'. [ 208.343745][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 208.361152][ T5919] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 208.363635][ T5919] usb 4-1: config 0 has no interface number 0 [ 208.384109][ T5919] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 208.384142][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.384162][ T5919] usb 4-1: Product: syz [ 208.384175][ T5919] usb 4-1: Manufacturer: syz [ 208.384188][ T5919] usb 4-1: SerialNumber: syz [ 208.439096][ T5919] usb 4-1: config 0 descriptor?? [ 208.490680][ T5131] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 208.661004][ T5811] usb 4-1: USB disconnect, device number 15 [ 208.677884][ T5131] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.687112][ T5131] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.687141][ T5131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.687152][ T5131] usb 1-1: Product: syz [ 208.687160][ T5131] usb 1-1: Manufacturer: syz [ 208.687167][ T5131] usb 1-1: SerialNumber: syz [ 209.026668][ T7531] fuse: Bad value for 'fd' [ 209.060457][ T7527] can: request_module (can-proto-3) failed. [ 209.229034][ T5131] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 209.677321][ T5919] usb 1-1: USB disconnect, device number 14 [ 209.726749][ T5919] usblp0: removed [ 209.873124][ T7542] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 210.389379][ T7550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.778081][ T7542] team0: Port device netdevsim0 removed [ 210.812229][ T7542] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 211.429353][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 212.160450][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 212.160485][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 212.160505][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 212.160525][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 212.160588][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 212.311067][ T7590] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 212.543870][ T36] audit: type=1326 audit(1772184492.085:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7591 comm="syz.1.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8db37c799 code=0x0 [ 212.969072][ T808] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 213.139020][ T7600] can: request_module (can-proto-3) failed. [ 213.159025][ T808] usb 1-1: config 1 interface 0 has no altsetting 0 [ 213.180132][ T808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 213.180162][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.180180][ T808] usb 1-1: Product: syz [ 213.180192][ T808] usb 1-1: Manufacturer: syz [ 213.180205][ T808] usb 1-1: SerialNumber: syz [ 214.207885][ T808] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 214.733362][ T3016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.794778][ T7618] netlink: 'syz.2.562': attribute type 10 has an invalid length. [ 214.876580][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.894989][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.896703][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.917781][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.932941][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.326829][ T3016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.539051][ T5131] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.647334][ T3016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.689055][ T5131] usb 4-1: Using ep0 maxpacket: 8 [ 215.694664][ T5131] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.694691][ T5131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.694701][ T5131] usb 4-1: Product: syz [ 215.694709][ T5131] usb 4-1: Manufacturer: syz [ 215.694716][ T5131] usb 4-1: SerialNumber: syz [ 215.754643][ T5131] usb 4-1: config 0 descriptor?? [ 215.984111][ T5131] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.037559][ C0] usblp0: nonzero write bulk status received: -71 [ 216.039104][ T5919] usb 1-1: USB disconnect, device number 15 [ 216.118464][ T7593] usblp0: removed [ 216.352942][ T3016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.760697][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 217.042599][ T5810] Bluetooth: hci4: command tx timeout [ 217.413867][ T5131] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 217.463914][ T5131] usb 4-1: USB disconnect, device number 16 [ 217.547842][ T7655] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 218.160896][ T7660] can: request_module (can-proto-3) failed. [ 218.441837][ T3016] bridge_slave_1: left allmulticast mode [ 218.448731][ T3016] bridge_slave_1: left promiscuous mode [ 218.501490][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.570431][ T3016] bridge_slave_0: left allmulticast mode [ 218.570457][ T3016] bridge_slave_0: left promiscuous mode [ 218.617321][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.079450][ T808] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 219.119052][ T5810] Bluetooth: hci4: command tx timeout [ 219.230876][ T808] usb 1-1: config 0 has no interfaces? [ 219.235897][ T808] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.235925][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.235943][ T808] usb 1-1: Product: syz [ 219.235956][ T808] usb 1-1: Manufacturer: syz [ 219.235970][ T808] usb 1-1: SerialNumber: syz [ 219.309538][ T808] usb 1-1: config 0 descriptor?? [ 219.568333][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.580908][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.602326][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.602805][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.621121][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.621695][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.624112][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 220.199639][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.265044][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.281185][ T3016] bond0 (unregistering): Released all slaves [ 220.348464][ T7670] vlan2: entered promiscuous mode [ 220.348486][ T7670] veth0: entered promiscuous mode [ 220.521680][ T7616] chnl_net:caif_netlink_parms(): no params data found [ 220.665469][ T808] usb 1-1: USB disconnect, device number 16 [ 221.213805][ T5810] Bluetooth: hci4: command tx timeout [ 222.324839][ T7714] can: request_module (can-proto-3) failed. [ 223.280940][ T5810] Bluetooth: hci4: command tx timeout [ 223.532238][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.532523][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.532746][ T7616] bridge_slave_0: entered allmulticast mode [ 223.534981][ T7616] bridge_slave_0: entered promiscuous mode [ 223.559066][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.559199][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.559407][ T7616] bridge_slave_1: entered allmulticast mode [ 223.586228][ T7616] bridge_slave_1: entered promiscuous mode [ 223.589549][ T7734] tipc: Started in network mode [ 223.589577][ T7734] tipc: Node identity 9e81ed943296, cluster identity 4711 [ 223.589737][ T7734] tipc: Enabled bearer , priority 0 [ 223.590488][ T7734] syzkaller0: entered promiscuous mode [ 223.590501][ T7734] syzkaller0: entered allmulticast mode [ 223.594298][ T7734] tipc: Resetting bearer [ 223.874315][ T7731] tipc: Resetting bearer [ 224.019148][ T7731] tipc: Disabling bearer [ 224.522957][ T3016] hsr_slave_0: left promiscuous mode [ 224.567087][ T3016] hsr_slave_1: left promiscuous mode [ 224.579469][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.579574][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.629816][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.629843][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.791998][ T3016] veth1_macvtap: left promiscuous mode [ 224.792236][ T3016] veth0_macvtap: left promiscuous mode [ 224.792490][ T3016] veth1_vlan: left promiscuous mode [ 224.793358][ T3016] veth0_vlan: left promiscuous mode [ 226.030316][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 226.260517][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 226.333171][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 226.783217][ T7616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.928232][ T7767] vlan2: entered promiscuous mode [ 226.928247][ T7767] gretap0: entered promiscuous mode [ 227.003677][ T7616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.065870][ T7616] team0: Port device team_slave_0 added [ 227.077201][ T7616] team0: Port device team_slave_1 added [ 227.170012][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.170029][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.170049][ T7616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.237216][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.237233][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.237258][ T7616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.601933][ T7616] hsr_slave_0: entered promiscuous mode [ 227.603092][ T7616] hsr_slave_1: entered promiscuous mode [ 227.605164][ T7616] debugfs: 'hsr0' already exists in 'hsr' [ 227.605190][ T7616] Cannot create hsr debugfs directory [ 228.930463][ T7800] can: request_module (can-proto-3) failed. [ 229.900472][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 230.004842][ T7826] vlan2: entered promiscuous mode [ 230.004865][ T7826] gretap0: entered promiscuous mode [ 233.104368][ T7616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.175653][ T7616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.388776][ T7616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.433104][ T7616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.884762][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.220634][ T7909] can: request_module (can-proto-3) failed. [ 234.253494][ T7616] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.274697][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.274909][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.334200][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.334395][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.971090][ T7929] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 234.974980][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 236.762466][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.647'. [ 237.183233][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.336577][ T7973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.340217][ T7973] tipc: Enabled bearer , priority 0 [ 237.576302][ T7972] tipc: Disabling bearer [ 237.826721][ T7987] can: request_module (can-proto-3) failed. [ 238.646029][ T7616] veth0_vlan: entered promiscuous mode [ 238.799721][ T7616] veth1_vlan: entered promiscuous mode [ 240.688728][ T7616] veth0_macvtap: entered promiscuous mode [ 240.689007][ T5807] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 240.713896][ T7616] veth1_macvtap: entered promiscuous mode [ 240.762614][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.792024][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.830193][ T2990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.830421][ T2990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.830455][ T2990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.830494][ T2990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.847069][ T5807] usb 3-1: config 0 has no interfaces? [ 240.865554][ T5807] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.865585][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.865603][ T5807] usb 3-1: Product: syz [ 240.865616][ T5807] usb 3-1: Manufacturer: syz [ 240.865629][ T5807] usb 3-1: SerialNumber: syz [ 240.876123][ T5807] usb 3-1: config 0 descriptor?? [ 241.084007][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.084523][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.093372][ T8021] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 241.156599][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.157135][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.201850][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 241.220206][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.220753][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.335486][ T809] usb 3-1: USB disconnect, device number 16 [ 242.371640][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.371661][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.400258][ T8026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.822694][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.822714][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.013824][ T8046] netlink: 276 bytes leftover after parsing attributes in process `syz.4.557'. [ 243.353760][ T8059] can: request_module (can-proto-3) failed. [ 243.669812][ T5871] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 243.843870][ T5871] usb 2-1: config 0 has no interfaces? [ 243.855542][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.855571][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.855588][ T5871] usb 2-1: Product: syz [ 243.855600][ T5871] usb 2-1: Manufacturer: syz [ 243.855613][ T5871] usb 2-1: SerialNumber: syz [ 243.921602][ T5871] usb 2-1: config 0 descriptor?? [ 244.144893][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.145369][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.157822][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.158291][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.176130][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.176634][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.434159][ T5807] usb 2-1: USB disconnect, device number 7 [ 244.607712][ T8070] tipc: Started in network mode [ 244.607741][ T8070] tipc: Node identity a66e4a574d6b, cluster identity 4711 [ 244.607914][ T8070] tipc: Enabled bearer , priority 0 [ 244.611860][ T8070] tipc: Resetting bearer [ 245.124137][ T8069] tipc: Disabling bearer [ 245.173074][ T8090] netlink: 276 bytes leftover after parsing attributes in process `syz.1.680'. [ 245.173520][ T8090] netlink: 276 bytes leftover after parsing attributes in process `syz.1.680'. [ 247.912833][ T8108] can: request_module (can-proto-3) failed. [ 248.439777][ T5871] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 248.593133][ T5871] usb 4-1: config 0 has no interfaces? [ 248.596909][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.596931][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.596941][ T5871] usb 4-1: Product: syz [ 248.596948][ T5871] usb 4-1: Manufacturer: syz [ 248.596955][ T5871] usb 4-1: SerialNumber: syz [ 248.641053][ T5871] usb 4-1: config 0 descriptor?? [ 249.006190][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.006657][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.042031][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.045143][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.049307][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.049781][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.051026][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 249.057024][ T8139] loop8: detected capacity change from 0 to 8 [ 249.063372][ T8139] Dev loop8: unable to read RDB block 8 [ 249.063430][ T8139] loop8: unable to read partition table [ 249.063614][ T8139] loop8: partition table beyond EOD, truncated [ 249.063631][ T8139] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 249.969869][ T5971] usb 4-1: USB disconnect, device number 17 [ 250.388977][ T5971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 250.539928][ T5971] usb 2-1: no configurations [ 250.539947][ T5971] usb 2-1: can't read configurations, error -22 [ 250.688980][ T5971] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 250.921298][ T5971] usb 2-1: no configurations [ 250.921318][ T5971] usb 2-1: can't read configurations, error -22 [ 250.921852][ T5971] usb usb2-port1: attempt power cycle [ 251.335606][ T5971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 251.351102][ T5971] usb 2-1: no configurations [ 251.351115][ T5971] usb 2-1: can't read configurations, error -22 [ 251.536055][ T5971] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.561857][ T5971] usb 2-1: no configurations [ 251.561878][ T5971] usb 2-1: can't read configurations, error -22 [ 251.562267][ T5971] usb usb2-port1: unable to enumerate USB device [ 251.562490][ T8171] fuse: Bad value for 'fd' [ 252.234619][ T8184] loop8: detected capacity change from 0 to 8 [ 252.268514][ T8184] Dev loop8: unable to read RDB block 8 [ 252.268560][ T8184] loop8: unable to read partition table [ 252.268749][ T8184] loop8: partition table beyond EOD, truncated [ 252.268784][ T8184] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 253.569566][ T5871] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 253.731161][ T5871] usb 4-1: config 0 has no interfaces? [ 253.734728][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.734758][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.734777][ T5871] usb 4-1: Product: syz [ 253.734790][ T5871] usb 4-1: Manufacturer: syz [ 253.734804][ T5871] usb 4-1: SerialNumber: syz [ 253.751040][ T5871] usb 4-1: config 0 descriptor?? [ 253.970746][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.971269][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.974839][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.975313][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.025485][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.025981][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.028026][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 254.078185][ T8209] loop2: detected capacity change from 0 to 7 [ 254.082814][ T5871] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 254.106182][ T8209] Dev loop2: unable to read RDB block 7 [ 254.106227][ T8209] loop2: unable to read partition table [ 254.106421][ T8209] loop2: partition table beyond EOD, truncated [ 254.106439][ T8209] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.213960][ T5919] usb 4-1: USB disconnect, device number 18 [ 254.251786][ T5871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 254.251825][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 254.251847][ T5871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 254.254659][ T5871] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 254.254686][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.254703][ T5871] usb 1-1: Product: syz [ 254.254715][ T5871] usb 1-1: Manufacturer: syz [ 254.254727][ T5871] usb 1-1: SerialNumber: syz [ 254.453468][ T5871] usb 1-1: config 0 descriptor?? [ 254.476444][ T8202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.476711][ T8202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.528146][ T5871] usb 1-1: ucan: probing device on interface #0 [ 255.523794][ T5871] usb 1-1: ucan: failed to retrieve device info [ 255.523816][ T5871] usb 1-1: ucan: probe failed; try to update the device firmware [ 255.781121][ T8236] loop2: detected capacity change from 0 to 7 [ 255.796233][ T6154] Dev loop2: unable to read RDB block 7 [ 255.796278][ T6154] loop2: unable to read partition table [ 255.796492][ T6154] loop2: partition table beyond EOD, truncated [ 255.832857][ T8236] Dev loop2: unable to read RDB block 7 [ 255.832904][ T8236] loop2: unable to read partition table [ 255.833097][ T8236] loop2: partition table beyond EOD, truncated [ 255.835866][ T8236] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.017079][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.017149][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.115347][ T5871] usb 1-1: USB disconnect, device number 17 [ 257.899098][ T5807] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 258.051683][ T5807] usb 2-1: config 0 has no interfaces? [ 258.053914][ T5807] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.053942][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.053961][ T5807] usb 2-1: Product: syz [ 258.053974][ T5807] usb 2-1: Manufacturer: syz [ 258.053988][ T5807] usb 2-1: SerialNumber: syz [ 258.109264][ T5807] usb 2-1: config 0 descriptor?? [ 258.336704][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.336971][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.364839][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.365295][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.386371][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.386857][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.388289][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 258.474868][ T5871] usb 2-1: USB disconnect, device number 12 [ 258.707676][ T8271] loop1: detected capacity change from 0 to 4194304 [ 260.069060][ T5871] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 260.223706][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 260.223738][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 260.223762][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 260.227792][ T5871] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 260.227820][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.227839][ T5871] usb 3-1: Product: syz [ 260.227853][ T5871] usb 3-1: Manufacturer: syz [ 260.227866][ T5871] usb 3-1: SerialNumber: syz [ 260.306132][ T5871] usb 3-1: config 0 descriptor?? [ 260.314484][ T8278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.314594][ T8278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.350814][ T5871] usb 3-1: ucan: probing device on interface #0 [ 261.281231][ T5871] usb 3-1: ucan: failed to retrieve device info [ 261.281255][ T5871] usb 3-1: ucan: probe failed; try to update the device firmware [ 261.355401][ T5871] usb 3-1: USB disconnect, device number 17 [ 261.389037][ T5971] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 261.539068][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 261.560159][ T5971] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 261.560193][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.560213][ T5971] usb 2-1: Product: syz [ 261.560227][ T5971] usb 2-1: Manufacturer: syz [ 261.560240][ T5971] usb 2-1: SerialNumber: syz [ 261.610952][ T5971] usb 2-1: config 0 descriptor?? [ 261.751482][ T5871] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 261.852131][ T5971] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 261.903093][ T5871] usb 3-1: no configurations [ 261.903113][ T5871] usb 3-1: can't read configurations, error -22 [ 262.029052][ T5871] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 262.200348][ T5871] usb 3-1: no configurations [ 262.200371][ T5871] usb 3-1: can't read configurations, error -22 [ 262.200738][ T5871] usb usb3-port1: attempt power cycle [ 262.569084][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 262.835508][ T5871] usb 3-1: no configurations [ 262.835521][ T5871] usb 3-1: can't read configurations, error -22 [ 263.629111][ T5871] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 263.650373][ T5871] usb 3-1: no configurations [ 263.650393][ T5871] usb 3-1: can't read configurations, error -22 [ 263.650744][ T5871] usb usb3-port1: unable to enumerate USB device [ 264.120224][ T5902] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 264.302031][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 264.302061][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 264.302125][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 264.304917][ T5902] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 264.304934][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.304946][ T5902] usb 1-1: Product: syz [ 264.304958][ T5902] usb 1-1: Manufacturer: syz [ 264.304971][ T5902] usb 1-1: SerialNumber: syz [ 264.318165][ T5902] usb 1-1: config 0 descriptor?? [ 264.324522][ T8332] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 264.324709][ T8332] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 264.326846][ T5902] usb 1-1: ucan: probing device on interface #0 [ 264.670838][ T5971] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 264.748477][ T8345] loop2: detected capacity change from 0 to 7 [ 264.756479][ T8345] Dev loop2: unable to read RDB block 7 [ 264.756520][ T8345] loop2: AHDI p1 p2 p3 [ 264.756546][ T8345] loop2: partition table partially beyond EOD, truncated [ 264.757287][ T8345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 264.757310][ T8345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 265.232746][ T5919] usb 2-1: USB disconnect, device number 13 [ 265.414764][ T5902] usb 1-1: ucan: failed to retrieve device info [ 265.414778][ T5902] usb 1-1: ucan: probe failed; try to update the device firmware [ 265.445151][ T5902] usb 1-1: USB disconnect, device number 18 [ 265.658004][ T8360] loop1: detected capacity change from 0 to 4194304 [ 267.379077][ T5971] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 267.519742][ T5902] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 267.544035][ T5971] usb 3-1: no configurations [ 267.544049][ T5971] usb 3-1: can't read configurations, error -22 [ 267.668979][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 267.669000][ T5971] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 267.698453][ T5902] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 267.698483][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.698502][ T5902] usb 4-1: Product: syz [ 267.698515][ T5902] usb 4-1: Manufacturer: syz [ 267.698529][ T5902] usb 4-1: SerialNumber: syz [ 267.740968][ T5902] usb 4-1: config 0 descriptor?? [ 267.819918][ T5971] usb 3-1: no configurations [ 267.819942][ T5971] usb 3-1: can't read configurations, error -22 [ 267.820365][ T5971] usb usb3-port1: attempt power cycle [ 267.956748][ T5902] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 268.159949][ T5971] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 268.192444][ T5971] usb 3-1: no configurations [ 268.192471][ T5971] usb 3-1: can't read configurations, error -22 [ 268.343831][ T5971] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 268.361359][ T5971] usb 3-1: no configurations [ 268.361379][ T5971] usb 3-1: can't read configurations, error -22 [ 268.362141][ T5971] usb usb3-port1: unable to enumerate USB device [ 268.938980][ T5971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 269.112483][ T5971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 269.112514][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 269.112550][ T5971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 269.115818][ T5971] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 269.115847][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.115867][ T5971] usb 5-1: Product: syz [ 269.115881][ T5971] usb 5-1: Manufacturer: syz [ 269.115894][ T5971] usb 5-1: SerialNumber: syz [ 269.193183][ T5971] usb 5-1: config 0 descriptor?? [ 269.196160][ T8385] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 269.196660][ T8385] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 269.224077][ T5971] usb 5-1: ucan: probing device on interface #0 [ 269.398649][ T5902] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 269.440823][ T5902] usb 4-1: USB disconnect, device number 19 [ 270.664731][ T5971] usb 5-1: ucan: failed to retrieve device info [ 270.664756][ T5971] usb 5-1: ucan: probe failed; try to update the device firmware [ 270.814538][ T809] usb 5-1: USB disconnect, device number 14 [ 271.155978][ T8421] loop1: detected capacity change from 0 to 4194304 [ 272.299550][ T8441] trusted_key: syz.0.804 sent an empty control message without MSG_MORE. [ 274.189179][ T8434] can: request_module (can-proto-3) failed. [ 275.301275][ T5902] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 275.481463][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 275.481482][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 275.481496][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 275.484882][ T5902] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 275.484911][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.484921][ T5902] usb 5-1: Product: syz [ 275.484929][ T5902] usb 5-1: Manufacturer: syz [ 275.484937][ T5902] usb 5-1: SerialNumber: syz [ 275.493126][ T5902] usb 5-1: config 0 descriptor?? [ 275.574668][ T8452] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.574815][ T8452] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.626422][ T5902] usb 5-1: ucan: probing device on interface #0 [ 276.810775][ T5902] usb 5-1: ucan: failed to retrieve device info [ 276.810842][ T5902] usb 5-1: ucan: probe failed; try to update the device firmware [ 277.103892][ T809] usb 5-1: USB disconnect, device number 15 [ 277.392457][ T8466] netlink: 'syz.2.812': attribute type 72 has an invalid length. [ 280.180346][ T8492] loop1: detected capacity change from 0 to 4194304 [ 282.919161][ T5879] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 283.075826][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 283.075862][ T5879] usb 4-1: can't read configurations, error -61 [ 283.209118][ T5879] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 284.279817][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 284.279852][ T5879] usb 4-1: can't read configurations, error -61 [ 284.281421][ T5879] usb usb4-port1: attempt power cycle [ 284.624203][ T8560] loop1: detected capacity change from 0 to 4194304 [ 284.655130][ T5879] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 284.678006][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 284.678043][ T5879] usb 4-1: can't read configurations, error -61 [ 284.799247][ T5879] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.832476][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 284.832522][ T5879] usb 4-1: can't read configurations, error -61 [ 284.837105][ T5879] usb usb4-port1: unable to enumerate USB device [ 288.103011][ T5971] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 288.189384][ T5871] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 288.262262][ T5971] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 288.262300][ T5971] usb 1-1: can't read configurations, error -61 [ 288.342359][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.342386][ T5871] usb 3-1: config 0 has no interface number 0 [ 288.342449][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 288.342665][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 288.342708][ T5871] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.342729][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.399057][ T5971] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.420307][ T5871] usb 3-1: config 0 descriptor?? [ 288.421801][ T8600] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 288.451268][ T5871] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 288.568816][ T5971] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 288.570563][ T5971] usb 1-1: can't read configurations, error -61 [ 288.576631][ T5971] usb usb1-port1: attempt power cycle [ 288.912572][ T5131] usb 3-1: USB disconnect, device number 26 [ 288.913767][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 288.929176][ T5971] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 288.953103][ T5971] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 288.953140][ T5971] usb 1-1: can't read configurations, error -61 [ 289.080629][ T5971] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 289.102274][ T5971] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 289.102312][ T5971] usb 1-1: can't read configurations, error -61 [ 289.107934][ T5971] usb usb1-port1: unable to enumerate USB device [ 291.965589][ T809] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 292.140029][ T809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 292.140066][ T809] usb 4-1: can't read configurations, error -61 [ 292.289012][ T809] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 292.440967][ T809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 292.440991][ T809] usb 4-1: can't read configurations, error -61 [ 292.445600][ T809] usb usb4-port1: attempt power cycle [ 292.779192][ T809] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 292.879817][ T809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 292.879854][ T809] usb 4-1: can't read configurations, error -61 [ 293.009012][ T809] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 293.036149][ T809] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 293.036174][ T809] usb 4-1: can't read configurations, error -61 [ 293.036562][ T809] usb usb4-port1: unable to enumerate USB device [ 296.389343][ T8685] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.884'. [ 298.598999][ T5879] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 298.758391][ T5879] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 298.758434][ T5879] usb 2-1: can't read configurations, error -61 [ 298.899030][ T5879] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 299.052450][ T5879] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 299.052488][ T5879] usb 2-1: can't read configurations, error -61 [ 299.053483][ T5879] usb usb2-port1: attempt power cycle [ 299.399056][ T5879] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 299.433970][ T5879] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 299.434009][ T5879] usb 2-1: can't read configurations, error -61 [ 299.578988][ T5879] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 299.602570][ T5879] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 299.602606][ T5879] usb 2-1: can't read configurations, error -61 [ 299.602996][ T5879] usb usb2-port1: unable to enumerate USB device [ 300.439017][ T809] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 300.628970][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 300.632804][ T809] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 300.632830][ T809] usb 4-1: config 0 has no interface number 0 [ 300.637804][ T809] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 300.637833][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.637851][ T809] usb 4-1: Product: syz [ 300.637864][ T809] usb 4-1: Manufacturer: syz [ 300.637877][ T809] usb 4-1: SerialNumber: syz [ 300.698825][ T809] usb 4-1: config 0 descriptor?? [ 301.013534][ T809] usb 4-1: USB disconnect, device number 28 [ 303.603605][ T8762] loop1: detected capacity change from 0 to 4194304 [ 305.500233][ T5919] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 305.651325][ T5919] usb 2-1: config 0 has no interfaces? [ 305.656274][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.656302][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.656321][ T5919] usb 2-1: Product: syz [ 305.656335][ T5919] usb 2-1: Manufacturer: syz [ 305.656349][ T5919] usb 2-1: SerialNumber: syz [ 305.705073][ T5919] usb 2-1: config 0 descriptor?? [ 305.939013][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.942842][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.946498][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 305.947162][ T8777] 8021q: VLANs not supported on caif0 [ 306.042424][ T5871] usb 2-1: USB disconnect, device number 18 [ 306.149101][ T5919] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 306.298994][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 306.300832][ T5919] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 306.300856][ T5919] usb 4-1: config 0 has no interface number 0 [ 306.303423][ T5919] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 306.303449][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.303468][ T5919] usb 4-1: Product: syz [ 306.303482][ T5919] usb 4-1: Manufacturer: syz [ 306.303494][ T5919] usb 4-1: SerialNumber: syz [ 306.311973][ T5919] usb 4-1: config 0 descriptor?? [ 306.542766][ T5919] usb 4-1: USB disconnect, device number 29 [ 308.301793][ T5919] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 308.461571][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 308.604942][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 308.604972][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.604991][ T5919] usb 2-1: Product: syz [ 308.605007][ T5919] usb 2-1: Manufacturer: syz [ 308.605019][ T5919] usb 2-1: SerialNumber: syz [ 308.991736][ T5919] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 309.007136][ T5919] usb 2-1: USB disconnect, device number 19 [ 309.054473][ T5919] usblp0: removed [ 309.239338][ T8824] loop1: detected capacity change from 0 to 4194304 [ 309.679281][ T5971] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 310.012317][ T5971] usb 4-1: config 0 has no interfaces? [ 310.024783][ T5971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.024814][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.024833][ T5971] usb 4-1: Product: syz [ 310.024846][ T5971] usb 4-1: Manufacturer: syz [ 310.024859][ T5971] usb 4-1: SerialNumber: syz [ 310.029246][ T5971] usb 4-1: config 0 descriptor?? [ 310.275965][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.276248][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.277070][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 310.277342][ T8828] 8021q: VLANs not supported on caif0 [ 310.366249][ T809] usb 4-1: USB disconnect, device number 30 [ 310.409052][ T5971] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 310.561141][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 310.568211][ T5971] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 310.568238][ T5971] usb 1-1: config 0 has no interface number 0 [ 310.619738][ T5971] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 310.619769][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.619788][ T5971] usb 1-1: Product: syz [ 310.619802][ T5971] usb 1-1: Manufacturer: syz [ 310.619815][ T5971] usb 1-1: SerialNumber: syz [ 310.632312][ T5971] usb 1-1: config 0 descriptor?? [ 311.062654][ T5919] usb 1-1: USB disconnect, device number 23 [ 311.432745][ T5879] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 311.591705][ T5879] usb 4-1: config 1 interface 0 has no altsetting 0 [ 311.594978][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 311.595009][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.595027][ T5879] usb 4-1: Product: syz [ 311.595046][ T5879] usb 4-1: Manufacturer: syz [ 311.595059][ T5879] usb 4-1: SerialNumber: syz [ 311.859256][ T5971] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 311.895851][ T5879] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 311.932733][ T5879] usb 4-1: USB disconnect, device number 31 [ 311.956481][ T5879] usblp0: removed [ 312.012935][ T5971] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.012964][ T5971] usb 2-1: config 0 has no interface number 0 [ 312.013007][ T5971] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 312.013033][ T5971] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 312.013079][ T5971] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.013101][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.027360][ T5971] usb 2-1: config 0 descriptor?? [ 312.032951][ T8859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 312.059015][ T5807] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 312.060999][ T5971] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 313.354553][ T5807] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 313.354585][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 313.354609][ T5807] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 313.369292][ T5807] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 313.369322][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.369341][ T5807] usb 1-1: Product: syz [ 313.369354][ T5807] usb 1-1: Manufacturer: syz [ 313.369366][ T5807] usb 1-1: SerialNumber: syz [ 314.309033][ T5807] usb 1-1: config 0 descriptor?? [ 314.310891][ T8865] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 314.311028][ T8865] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 314.313226][ T5807] usb 1-1: ucan: probing device on interface #0 [ 314.365613][ T5879] usb 2-1: USB disconnect, device number 20 [ 314.540219][ T8882] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.948'. [ 314.718608][ T5807] usb 1-1: ucan: failed to retrieve device info [ 314.718631][ T5807] usb 1-1: ucan: probe failed; try to update the device firmware [ 315.141730][ T8888] loop1: detected capacity change from 0 to 4194304 [ 316.106824][ T5879] usb 1-1: USB disconnect, device number 24 [ 316.509176][ T5879] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 316.620361][ T5807] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 316.659082][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 316.661130][ T5879] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 316.661154][ T5879] usb 1-1: config 0 has no interface number 0 [ 316.665293][ T5879] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 316.665320][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.665337][ T5879] usb 1-1: Product: syz [ 316.665351][ T5879] usb 1-1: Manufacturer: syz [ 316.665364][ T5879] usb 1-1: SerialNumber: syz [ 316.724880][ T5879] usb 1-1: config 0 descriptor?? [ 316.790960][ T5807] usb 2-1: config 1 interface 0 has no altsetting 0 [ 316.795824][ T5807] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 316.795854][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.795871][ T5807] usb 2-1: Product: syz [ 316.795883][ T5807] usb 2-1: Manufacturer: syz [ 316.795894][ T5807] usb 2-1: SerialNumber: syz [ 316.933048][ T5971] usb 1-1: USB disconnect, device number 25 [ 317.137755][ T5807] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 317.179274][ T5807] usb 2-1: USB disconnect, device number 21 [ 317.206312][ T5807] usblp0: removed [ 317.534867][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.534930][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.760912][ T8920] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.961'. [ 318.228407][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 318.467756][ T5871] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 319.462338][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 319.462370][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 319.462394][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 319.464871][ T5871] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 319.464899][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.464918][ T5871] usb 2-1: Product: syz [ 319.464932][ T5871] usb 2-1: Manufacturer: syz [ 319.464945][ T5871] usb 2-1: SerialNumber: syz [ 319.557200][ T5871] usb 2-1: config 0 descriptor?? [ 319.557963][ T8930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.558084][ T8930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 319.586244][ T5871] usb 2-1: ucan: probing device on interface #0 [ 319.909042][ T5971] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 320.060849][ T5971] usb 3-1: config 1 interface 0 has no altsetting 0 [ 320.063475][ T5971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 320.063503][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.063521][ T5971] usb 3-1: Product: syz [ 320.063534][ T5971] usb 3-1: Manufacturer: syz [ 320.063547][ T5971] usb 3-1: SerialNumber: syz [ 320.108068][ T5871] usb 2-1: ucan: failed to retrieve device info [ 320.108087][ T5871] usb 2-1: ucan: probe failed; try to update the device firmware [ 320.170305][ T8955] loop1: detected capacity change from 0 to 4194304 [ 320.253986][ T8313] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 320.399294][ T8313] usb 5-1: Using ep0 maxpacket: 16 [ 320.409167][ T8313] usb 5-1: config 0 has an invalid interface number: 213 but max is 0 [ 320.409195][ T8313] usb 5-1: config 0 has no interface number 0 [ 320.414827][ T8313] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 320.414854][ T8313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.414872][ T8313] usb 5-1: Product: syz [ 320.414885][ T8313] usb 5-1: Manufacturer: syz [ 320.414899][ T8313] usb 5-1: SerialNumber: syz [ 320.422532][ T8313] usb 5-1: config 0 descriptor?? [ 320.432358][ T5971] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 320.461542][ T5971] usb 3-1: USB disconnect, device number 27 [ 320.640043][ T31] usb 5-1: USB disconnect, device number 16 [ 320.703683][ T5971] usblp0: removed [ 321.437646][ T8968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.543668][ T5971] usb 2-1: USB disconnect, device number 22 [ 322.196820][ T8976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.949010][ T31] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 324.103472][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.103499][ T31] usb 5-1: config 0 has no interface number 0 [ 324.103560][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 324.103585][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 324.103624][ T31] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 324.103644][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.112427][ T31] usb 5-1: config 0 descriptor?? [ 324.113607][ T8999] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 324.249212][ T5971] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 324.278629][ T31] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 324.514015][ T5971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 324.514047][ T5971] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 324.514071][ T5971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 324.523848][ T31] usb 5-1: USB disconnect, device number 17 [ 324.523946][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 324.524608][ T5971] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 324.524640][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.524659][ T5971] usb 1-1: Product: syz [ 324.524672][ T5971] usb 1-1: Manufacturer: syz [ 324.524685][ T5971] usb 1-1: SerialNumber: syz [ 324.676237][ T5971] usb 1-1: config 0 descriptor?? [ 324.677221][ T9004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 324.677356][ T9004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 324.794494][ T5971] usb 1-1: ucan: probing device on interface #0 [ 325.461342][ T5971] usb 1-1: ucan: failed to retrieve device info [ 325.461366][ T5971] usb 1-1: ucan: probe failed; try to update the device firmware [ 325.492419][ T9024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.996505][ T9043] loop1: detected capacity change from 0 to 4194304 [ 327.175364][ T5871] usb 1-1: USB disconnect, device number 26 [ 327.390646][ T809] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 327.584727][ T809] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.584754][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.584771][ T809] usb 4-1: config 0 has no interface number 0 [ 327.584810][ T809] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.584848][ T809] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 327.584870][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.736233][ T809] usb 4-1: config 0 descriptor?? [ 327.750523][ T809] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 328.135103][ T809] usb 4-1: USB disconnect, device number 32 [ 328.894343][ T9059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.049066][ T5879] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 329.207909][ T5879] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.207936][ T5879] usb 2-1: config 0 has no interface number 0 [ 329.208008][ T5879] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 329.208030][ T5879] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 329.208066][ T5879] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.208086][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.280069][ T5879] usb 2-1: config 0 descriptor?? [ 329.280731][ T9057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 329.385088][ T5879] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 329.955261][ T5902] usb 2-1: USB disconnect, device number 23 [ 329.955359][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 330.263399][ T9066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.209098][ T8313] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 331.219013][ T5902] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 331.375287][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 331.375318][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 331.375341][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 331.376954][ T8313] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.376978][ T8313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.376995][ T8313] usb 1-1: config 0 has no interface number 0 [ 331.377036][ T8313] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.377075][ T8313] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.377151][ T8313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.377967][ T5902] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 331.377981][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.377991][ T5902] usb 3-1: Product: syz [ 331.377998][ T5902] usb 3-1: Manufacturer: syz [ 331.378005][ T5902] usb 3-1: SerialNumber: syz [ 331.522401][ T8313] usb 1-1: config 0 descriptor?? [ 331.555274][ T8313] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 331.568298][ T5902] usb 3-1: config 0 descriptor?? [ 331.588232][ T9080] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 331.603091][ T9080] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 331.610068][ T5902] usb 3-1: ucan: probing device on interface #0 [ 331.798582][ T5879] usb 1-1: USB disconnect, device number 27 [ 332.013125][ T5902] usb 3-1: ucan: failed to retrieve device info [ 332.013139][ T5902] usb 3-1: ucan: probe failed; try to update the device firmware [ 332.271653][ T9094] loop1: detected capacity change from 0 to 4194304 [ 333.044010][ T9106] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 333.053653][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 334.079001][ T809] usb 3-1: USB disconnect, device number 28 [ 334.323699][ T9116] tipc: Enabled bearer , priority 0 [ 334.520448][ T9115] tipc: Disabling bearer [ 334.559106][ T809] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 334.725771][ T809] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.725790][ T809] usb 2-1: config 0 has no interface number 0 [ 334.725815][ T809] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 334.725829][ T809] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 334.725851][ T809] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 334.725863][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.801977][ T809] usb 2-1: config 0 descriptor?? [ 334.803163][ T9117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 334.998420][ T809] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 335.228982][ T809] usb 2-1: USB disconnect, device number 24 [ 335.457941][ T9132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.989069][ T5919] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 338.053412][ T5919] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.053440][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.053459][ T5919] usb 5-1: config 0 has no interface number 0 [ 338.053501][ T5919] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.053541][ T5919] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.053563][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.090207][ T5919] usb 5-1: config 0 descriptor?? [ 339.312427][ T5919] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 339.425228][ T8313] usb 5-1: USB disconnect, device number 18 [ 339.621211][ T9156] syzkaller0: entered promiscuous mode [ 339.621236][ T9156] syzkaller0: entered allmulticast mode [ 339.806763][ T9166] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 339.816491][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 340.084286][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 340.258233][ T9162] tipc: Enabled bearer , priority 0 [ 340.607782][ T9158] tipc: Disabling bearer [ 340.629007][ T8313] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 341.331128][ T8313] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.331146][ T8313] usb 4-1: config 0 has no interface number 0 [ 341.331171][ T8313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 341.331184][ T8313] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 341.331206][ T8313] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 341.331218][ T8313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.335477][ T8313] usb 4-1: config 0 descriptor?? [ 341.336605][ T9175] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.447501][ T8313] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 341.715285][ T8313] usb 4-1: USB disconnect, device number 33 [ 341.716103][ T9175] iowarrior 4-1:0.1: Error -19 while submitting URB [ 342.483495][ T5971] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 342.639885][ T5971] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.639912][ T5971] usb 2-1: config 0 has no interface number 0 [ 342.639956][ T5971] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.639992][ T5971] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.640013][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.711333][ T5971] usb 2-1: config 0 descriptor?? [ 342.715646][ T5971] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 342.990889][ T9209] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1053'. [ 342.997490][ T9209] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1053'. [ 343.025475][ T809] usb 2-1: USB disconnect, device number 25 [ 343.029088][ T5971] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 343.242016][ T5971] usb 5-1: config 1 interface 0 has no altsetting 0 [ 343.255977][ T5971] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 343.256009][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.256028][ T5971] usb 5-1: Product: syz [ 343.256043][ T5971] usb 5-1: Manufacturer: syz [ 343.256056][ T5971] usb 5-1: SerialNumber: syz [ 343.809885][ T5971] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 343.852522][ T9213] tipc: Enabled bearer , priority 0 [ 344.152158][ T9212] tipc: Disabling bearer [ 344.177458][ T5971] usb 5-1: USB disconnect, device number 19 [ 344.283236][ T5971] usblp0: removed [ 344.814749][ T9234] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 344.825020][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 346.968193][ T9242] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1064'. [ 346.990844][ T9242] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1064'. [ 348.388030][ T9253] fuse: Bad value for 'group_id' [ 348.388051][ T9253] fuse: Bad value for 'group_id' [ 348.629019][ T5879] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 348.900998][ T5879] usb 5-1: config 1 interface 0 has no altsetting 0 [ 348.903857][ T5879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 348.903889][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.903908][ T5879] usb 5-1: Product: syz [ 348.903921][ T5879] usb 5-1: Manufacturer: syz [ 348.903934][ T5879] usb 5-1: SerialNumber: syz [ 349.549692][ T5879] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 349.882943][ T8313] usb 5-1: USB disconnect, device number 20 [ 349.909796][ T8313] usblp0: removed [ 350.006574][ T9275] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1076'. [ 350.007409][ T9275] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1076'. [ 350.109280][ T5879] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 350.261097][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.261125][ T5879] usb 3-1: config 0 has no interface number 0 [ 350.261169][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 350.261187][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 350.261211][ T5879] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.261223][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.292136][ T5879] usb 3-1: config 0 descriptor?? [ 350.308291][ T9273] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 350.361464][ T5879] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 351.847763][ T9288] fuse: Bad value for 'group_id' [ 351.847786][ T9288] fuse: Bad value for 'group_id' [ 352.002180][ T9292] loop2: detected capacity change from 0 to 7 [ 352.013345][ T9292] Dev loop2: unable to read RDB block 7 [ 352.013399][ T9292] loop2: unable to read partition table [ 352.013586][ T9292] loop2: partition table beyond EOD, truncated [ 352.013604][ T9292] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 353.407728][ T5879] usb 3-1: USB disconnect, device number 29 [ 353.687265][ T9304] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1087'. [ 353.689860][ T9304] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1087'. [ 353.781881][ T9307] loop8: detected capacity change from 0 to 8 [ 353.798529][ T9307] Dev loop8: unable to read RDB block 8 [ 353.798664][ T9307] loop8: unable to read partition table [ 353.798779][ T9307] loop8: partition table beyond EOD, truncated [ 353.798790][ T9307] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 354.371756][ T9315] loop1: detected capacity change from 0 to 4194304 [ 357.125420][ T9333] loop2: detected capacity change from 0 to 7 [ 357.127883][ T6154] Dev loop2: unable to read RDB block 7 [ 357.127935][ T6154] loop2: unable to read partition table [ 357.128166][ T6154] loop2: partition table beyond EOD, truncated [ 357.161195][ T9333] Dev loop2: unable to read RDB block 7 [ 357.161240][ T9333] loop2: unable to read partition table [ 357.161430][ T9333] loop2: partition table beyond EOD, truncated [ 357.162629][ T9333] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.737307][ T9340] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1100'. [ 357.749532][ T9340] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1100'. [ 361.570821][ T9383] loop1: detected capacity change from 0 to 4194304 [ 363.259109][ T5902] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 363.446976][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 363.447010][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 363.447034][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 363.450958][ T5902] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 363.450987][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.451018][ T5902] usb 2-1: Product: syz [ 363.451032][ T5902] usb 2-1: Manufacturer: syz [ 363.451046][ T5902] usb 2-1: SerialNumber: syz [ 363.577170][ T5902] usb 2-1: config 0 descriptor?? [ 363.577886][ T9392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.578012][ T9392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.612908][ T5902] usb 2-1: ucan: probing device on interface #0 [ 364.006045][ T5902] usb 2-1: ucan: failed to retrieve device info [ 364.006068][ T5902] usb 2-1: ucan: probe failed; try to update the device firmware [ 364.383992][ T9398] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1112'. [ 364.385758][ T9398] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1112'. [ 364.590061][ T5971] usb 2-1: USB disconnect, device number 26 [ 365.909495][ T9428] fuse: Bad value for 'group_id' [ 365.909515][ T9428] fuse: Bad value for 'group_id' [ 366.418979][ T5902] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 366.581771][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 366.581802][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 366.581824][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 366.625614][ T5902] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 366.625643][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.625668][ T5902] usb 1-1: Product: syz [ 366.625682][ T5902] usb 1-1: Manufacturer: syz [ 366.625697][ T5902] usb 1-1: SerialNumber: syz [ 366.673351][ T5902] usb 1-1: config 0 descriptor?? [ 366.674155][ T9432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 366.674274][ T9432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 366.690657][ T5902] usb 1-1: ucan: probing device on interface #0 [ 367.104870][ T9449] loop1: detected capacity change from 0 to 4194304 [ 367.107699][ T5919] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 367.188259][ T5902] usb 1-1: ucan: failed to retrieve device info [ 367.188293][ T5902] usb 1-1: ucan: probe failed; try to update the device firmware [ 367.328996][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 367.332783][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.332835][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.332861][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.332880][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 367.332901][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.334798][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.334817][ T5919] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.334828][ T5919] usb 3-1: Manufacturer: syz [ 367.338269][ T5919] usb 3-1: config 0 descriptor?? [ 367.739197][ T5919] rc_core: IR keymap rc-hauppauge not found [ 367.739218][ T5919] Registered IR keymap rc-empty [ 367.739976][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.746395][ T5902] usb 1-1: USB disconnect, device number 28 [ 367.769171][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.790886][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 367.792865][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 367.874532][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.902265][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.919240][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.939814][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.971350][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.005057][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.022673][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.039058][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.059165][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.079131][ T5919] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.122851][ T5919] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 368.122883][ T5919] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 368.944136][ T809] usb 3-1: USB disconnect, device number 30 [ 370.884914][ T9474] tipc: Enabling of bearer rejected, failed to enable media [ 370.885662][ T9474] syzkaller0: entered promiscuous mode [ 370.885676][ T9474] syzkaller0: entered allmulticast mode [ 373.353772][ T9491] loop2: detected capacity change from 0 to 7 [ 373.427293][ T9491] Dev loop2: unable to read RDB block 7 [ 373.427325][ T9491] loop2: unable to read partition table [ 373.427439][ T9491] loop2: partition table beyond EOD, truncated [ 373.427468][ T9491] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 373.446283][ T5170] Dev loop2: unable to read RDB block 7 [ 373.446325][ T5170] loop2: unable to read partition table [ 373.446512][ T5170] loop2: partition table beyond EOD, truncated [ 373.749841][ T5919] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 373.902066][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 373.902099][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 373.902123][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 373.904617][ T5919] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 373.904645][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.904664][ T5919] usb 5-1: Product: syz [ 373.904677][ T5919] usb 5-1: Manufacturer: syz [ 373.904691][ T5919] usb 5-1: SerialNumber: syz [ 374.340772][ T5919] usb 5-1: config 0 descriptor?? [ 374.342905][ T9493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.343236][ T9493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.348376][ T5919] usb 5-1: ucan: probing device on interface #0 [ 374.870700][ T5919] usb 5-1: ucan: failed to retrieve device info [ 374.870725][ T5919] usb 5-1: ucan: probe failed; try to update the device firmware [ 376.929516][ T809] usb 5-1: USB disconnect, device number 21 [ 377.385109][ T9521] tipc: Enabling of bearer rejected, failed to enable media [ 377.385687][ T9521] syzkaller0: entered promiscuous mode [ 377.385709][ T9521] syzkaller0: entered allmulticast mode [ 378.928507][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.928577][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.129048][ T809] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 379.289727][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 379.294984][ T809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 379.295002][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.295012][ T809] usb 4-1: Product: syz [ 379.295020][ T809] usb 4-1: Manufacturer: syz [ 379.295027][ T809] usb 4-1: SerialNumber: syz [ 379.337256][ T809] usb 4-1: config 0 descriptor?? [ 379.359015][ T5807] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 379.547708][ T5807] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.547736][ T5807] usb 2-1: config 0 has no interface number 0 [ 379.548081][ T809] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 379.548378][ T5807] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 379.548405][ T5807] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 379.548443][ T5807] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 379.548466][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.676517][ T5807] usb 2-1: config 0 descriptor?? [ 379.700153][ T9544] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 379.817963][ T5807] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 380.114785][ T8313] usb 2-1: USB disconnect, device number 27 [ 380.114859][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 380.282027][ T809] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 380.631545][ T809] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 380.782626][ T809] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 380.782657][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 380.782681][ T809] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 380.786177][ T809] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 380.786207][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.786225][ T809] usb 1-1: Product: syz [ 380.786239][ T809] usb 1-1: Manufacturer: syz [ 380.786252][ T809] usb 1-1: SerialNumber: syz [ 380.793282][ T809] usb 1-1: config 0 descriptor?? [ 380.796631][ T9556] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 380.796818][ T9556] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 380.814504][ T809] usb 1-1: ucan: probing device on interface #0 [ 381.202323][ T809] usb 1-1: ucan: failed to retrieve device info [ 381.202345][ T809] usb 1-1: ucan: probe failed; try to update the device firmware [ 381.863109][ T809] usb 4-1: USB disconnect, device number 34 [ 383.350574][ T5902] usb 1-1: USB disconnect, device number 29 [ 384.429804][ T8313] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 384.612025][ T8313] usb 4-1: Using ep0 maxpacket: 8 [ 384.654990][ T8313] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 384.655016][ T8313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.655027][ T8313] usb 4-1: Product: syz [ 384.655035][ T8313] usb 4-1: Manufacturer: syz [ 384.655045][ T8313] usb 4-1: SerialNumber: syz [ 384.698319][ T9625] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1192'. [ 384.698398][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'. [ 384.698438][ T9625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1192'. [ 385.061241][ T8313] usb 4-1: config 0 descriptor?? [ 385.270871][ T8313] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.882348][ T8313] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 386.009037][ T809] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 386.185046][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 386.185069][ T809] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 386.185082][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 386.341496][ T809] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 386.341527][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.341547][ T809] usb 5-1: Product: syz [ 386.341561][ T809] usb 5-1: Manufacturer: syz [ 386.341575][ T809] usb 5-1: SerialNumber: syz [ 386.476804][ T809] usb 5-1: config 0 descriptor?? [ 386.485277][ T9634] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 386.486355][ T9634] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 386.533954][ T809] usb 5-1: ucan: probing device on interface #0 [ 386.897157][ T809] usb 5-1: ucan: failed to retrieve device info [ 386.897179][ T809] usb 5-1: ucan: probe failed; try to update the device firmware [ 387.082607][ T5919] usb 4-1: USB disconnect, device number 35 [ 388.729448][ T8313] usb 5-1: USB disconnect, device number 22 [ 389.433395][ T9659] loop2: detected capacity change from 0 to 7 [ 389.439632][ T9659] Dev loop2: unable to read RDB block 7 [ 389.439675][ T9659] loop2: unable to read partition table [ 389.439856][ T9659] loop2: partition table beyond EOD, truncated [ 389.441093][ T9659] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 389.799129][ T9667] binder: 9661:9667 ioctl c0306201 0 returned -14 [ 391.489021][ T5919] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 393.215983][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 393.257068][ T5919] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 393.257099][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.257118][ T5919] usb 5-1: Product: syz [ 393.257131][ T5919] usb 5-1: Manufacturer: syz [ 393.257144][ T5919] usb 5-1: SerialNumber: syz [ 393.343550][ T5919] usb 5-1: config 0 descriptor?? [ 393.397912][ T9687] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1210'. [ 393.407518][ T9687] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1210'. [ 393.593744][ T5919] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 393.779063][ T5807] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 393.939044][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 393.941828][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.941882][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.941909][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 393.941930][ T5807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 393.941952][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.943912][ T5807] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 393.943941][ T5807] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 393.943960][ T5807] usb 3-1: Manufacturer: syz [ 394.060929][ T5807] usb 3-1: config 0 descriptor?? [ 394.233300][ T5919] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 394.449003][ T5807] rc_core: IR keymap rc-hauppauge not found [ 394.449019][ T5807] Registered IR keymap rc-empty [ 394.449113][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.469177][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.495099][ T5807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 394.507398][ T5807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 394.544446][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.559911][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.592091][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.615217][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.630266][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.651019][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.669070][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.701167][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.720612][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.743449][ T5807] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 394.765711][ T5807] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 394.765727][ T5807] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 394.795271][ T5807] usb 3-1: USB disconnect, device number 31 [ 395.260696][ T5807] usb 5-1: USB disconnect, device number 23 [ 396.355577][ T9705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.723145][ T9712] loop2: detected capacity change from 0 to 7 [ 396.736399][ T9712] Dev loop2: unable to read RDB block 7 [ 396.736537][ T9712] loop2: unable to read partition table [ 396.736857][ T9712] loop2: partition table beyond EOD, truncated [ 396.736906][ T9712] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 398.919038][ T808] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 399.008980][ T9730] binder: 9726:9730 ioctl c0306201 0 returned -14 [ 399.043091][ T9732] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1223'. [ 399.047084][ T9732] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1223'. [ 399.094371][ T808] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.094399][ T808] usb 3-1: config 0 has no interface number 0 [ 399.094455][ T808] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 399.094469][ T808] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 399.094490][ T808] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.094502][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.102570][ T808] usb 3-1: config 0 descriptor?? [ 399.130604][ T9720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.176137][ T808] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 399.379771][ T809] usb 3-1: USB disconnect, device number 32 [ 399.501442][ T9729] syz.0.1221 (9729): drop_caches: 2 [ 399.559143][ T808] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 399.709087][ T5919] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 399.709507][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 399.714063][ T808] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.714092][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.714103][ T808] usb 4-1: Product: syz [ 399.714110][ T808] usb 4-1: Manufacturer: syz [ 399.714118][ T808] usb 4-1: SerialNumber: syz [ 399.720975][ T808] usb 4-1: config 0 descriptor?? [ 399.869209][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 399.875369][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.875436][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.875513][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 399.875534][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 399.875556][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.877008][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 399.877034][ T5919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 399.877044][ T5919] usb 5-1: Manufacturer: syz [ 399.979830][ T808] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.077069][ T5919] usb 5-1: config 0 descriptor?? [ 400.475011][ T9743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 400.597243][ T808] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 400.679052][ T5919] rc_core: IR keymap rc-hauppauge not found [ 400.679072][ T5919] Registered IR keymap rc-empty [ 400.679175][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.701553][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.720022][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 400.721714][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 400.760098][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.779121][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.800324][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 400.819230][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 401.139922][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 401.170973][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 401.471601][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 401.505572][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 401.544292][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 401.603098][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 401.622528][ T5919] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 401.622554][ T5919] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 401.759854][ T5919] usb 5-1: USB disconnect, device number 24 [ 402.869924][ T808] usb 4-1: USB disconnect, device number 36 [ 403.047189][ T9773] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1235'. [ 403.073681][ T9773] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1235'. [ 403.294013][ T9780] binder: 9775:9780 ioctl c0306201 0 returned -14 [ 403.747906][ T9791] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1238'. [ 403.747934][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 403.747948][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1238'. [ 405.358832][ T9800] syz.0.1243 (9800): drop_caches: 2 [ 405.360021][ T9801] fuse: Unknown parameter 'group_id00000000000000000000' [ 406.171654][ T9814] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1247'. [ 406.172664][ T9814] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1247'. [ 408.641037][ T9839] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 408.835646][ T9844] syz.1.1257 (9844): drop_caches: 2 [ 408.887752][ T9845] fuse: Bad value for 'user_id' [ 408.887765][ T9845] fuse: Bad value for 'user_id' [ 408.915529][ T9847] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1258'. [ 408.915930][ T9847] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1258'. [ 409.755370][ T9858] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1261'. [ 412.054676][ T9878] fuse: Bad value for 'user_id' [ 412.054767][ T9878] fuse: Bad value for 'user_id' [ 412.183041][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1268'. [ 412.307661][ T9882] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1270'. [ 412.308103][ T9882] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1270'. [ 414.075803][ T9916] syzkaller0: entered promiscuous mode [ 414.075825][ T9916] syzkaller0: entered allmulticast mode [ 414.459890][ T9918] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1281'. [ 414.466911][ T9918] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1281'. [ 414.789725][ T9924] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 414.869060][ T5971] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 414.899089][ T9924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.953178][ T9929] bond1: (slave dummy0): making interface the new active one [ 414.956148][ T9929] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 415.020944][ T5971] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 415.020964][ T5971] usb 5-1: config 0 has no interface number 0 [ 415.020991][ T5971] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 415.021005][ T5971] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 415.021027][ T5971] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 415.021039][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.024921][ T5971] usb 5-1: config 0 descriptor?? [ 415.027290][ T9921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.167753][ T5971] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 415.414717][ T5902] usb 5-1: USB disconnect, device number 25 [ 417.350010][ T9957] syz.2.1292 (9957): drop_caches: 2 [ 417.411189][ T9960] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1294'. [ 417.411669][ T9960] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1294'. [ 421.217475][ T9986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 422.053372][T10001] syz.3.1310 (10001): drop_caches: 2 [ 422.059077][ T5902] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 422.223023][ T5902] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.223041][ T5902] usb 1-1: config 0 has no interface number 0 [ 422.223081][ T5902] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 422.223094][ T5902] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 422.223117][ T5902] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 422.223129][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.227050][ T5902] usb 1-1: config 0 descriptor?? [ 422.228180][ T9998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 423.521845][ T5902] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 424.387806][ T809] usb 1-1: USB disconnect, device number 30 [ 424.994528][T10018] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 424.994528][T10018] program syz.3.1314 not setting count and/or reply_len properly [ 425.722828][T10023] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 425.722828][T10023] program syz.2.1316 not setting count and/or reply_len properly [ 426.096872][T10029] can: request_module (can-proto-3) failed. [ 428.209010][ T5902] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 428.363431][ T5902] usb 5-1: config 1 interface 0 has no altsetting 0 [ 428.377405][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 428.377435][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.377454][ T5902] usb 5-1: Product: syz [ 428.377467][ T5902] usb 5-1: Manufacturer: syz [ 428.377480][ T5902] usb 5-1: SerialNumber: syz [ 428.774653][ T5902] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 428.799069][ T5902] usb 5-1: USB disconnect, device number 26 [ 428.822133][ T5902] usblp0: removed [ 428.875749][T10053] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 428.875749][T10053] program syz.3.1325 not setting count and/or reply_len properly [ 430.495942][T10061] syz.2.1321 (10061): drop_caches: 2 [ 430.749476][T10063] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 430.759208][ T8313] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 430.842096][T10063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.877417][T10063] bond1: (slave dummy0): making interface the new active one [ 430.878205][T10063] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 430.951614][ T8313] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.951633][ T8313] usb 5-1: config 0 has no interface number 0 [ 430.952694][ T8313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 430.952711][ T8313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 430.952734][ T8313] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 430.952746][ T8313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.022371][ T8313] usb 5-1: config 0 descriptor?? [ 431.023041][T10060] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 431.084108][ T8313] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 431.504176][ T5807] usb 5-1: USB disconnect, device number 27 [ 431.633342][T10069] syzkaller0: entered promiscuous mode [ 431.633369][T10069] syzkaller0: entered allmulticast mode [ 434.420001][T10091] can: request_module (can-proto-3) failed. [ 434.479004][ T5807] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 434.761705][ T5807] usb 4-1: config 1 interface 0 has no altsetting 0 [ 434.764970][ T5807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 434.765008][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.765023][ T5807] usb 4-1: Product: syz [ 434.765036][ T5807] usb 4-1: Manufacturer: syz [ 434.765047][ T5807] usb 4-1: SerialNumber: syz [ 434.854006][T10100] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 434.854006][T10100] program syz.1.1340 not setting count and/or reply_len properly [ 435.262698][T10102] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 435.473813][ T5807] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 435.502706][T10102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.528777][ T5807] usb 4-1: USB disconnect, device number 37 [ 435.572342][T10104] bond1: (slave dummy0): Releasing active interface [ 435.573687][ T5807] usblp0: removed [ 435.669090][T10104] bond2: (slave dummy0): making interface the new active one [ 435.670595][T10104] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 435.974084][T10112] loop2: detected capacity change from 0 to 7 [ 435.975486][T10112] Dev loop2: unable to read RDB block 7 [ 435.975529][T10112] loop2: unable to read partition table [ 435.975702][T10112] loop2: partition table beyond EOD, truncated [ 435.975718][T10112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.288383][T10126] fuse: Invalid rootmode [ 438.876882][T10143] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 438.876882][T10143] program syz.2.1352 not setting count and/or reply_len properly [ 440.325417][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.325481][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.375334][T10159] loop2: detected capacity change from 0 to 7 [ 440.384577][T10159] Dev loop2: unable to read RDB block 7 [ 440.384620][T10159] loop2: unable to read partition table [ 440.384803][T10159] loop2: partition table beyond EOD, truncated [ 440.499044][T10159] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.839006][T10166] can: request_module (can-proto-3) failed. [ 440.858975][ T5919] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 441.247038][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 441.304041][T10175] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 441.304041][T10175] program syz.0.1362 not setting count and/or reply_len properly [ 441.304372][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 441.304399][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.304418][ T5919] usb 4-1: Product: syz [ 441.304431][ T5919] usb 4-1: Manufacturer: syz [ 441.304445][ T5919] usb 4-1: SerialNumber: syz [ 441.590400][ T5919] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 441.612578][ T5919] usb 4-1: USB disconnect, device number 38 [ 441.627937][ T5919] usblp0: removed [ 445.095911][T10202] loop2: detected capacity change from 0 to 7 [ 445.108160][T10202] Dev loop2: unable to read RDB block 7 [ 445.108203][T10202] loop2: unable to read partition table [ 445.108380][T10202] loop2: partition table beyond EOD, truncated [ 445.121656][T10202] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 445.288376][T10206] can: request_module (can-proto-3) failed. [ 445.320225][T10210] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 445.462144][T10210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.490144][T10213] bond1: (slave dummy0): making interface the new active one [ 445.493281][T10213] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 446.188190][T10222] fuse: Bad value for 'rootmode' [ 448.922998][T10243] fuse: Unknown parameter 'grou00000000000000000000' [ 449.443648][T10249] loop2: detected capacity change from 0 to 7 [ 449.459267][T10249] Dev loop2: unable to read RDB block 7 [ 449.459302][T10249] loop2: AHDI p1 p2 p3 [ 449.459334][T10249] loop2: partition table partially beyond EOD, truncated [ 449.604520][T10249] loop2: p1 start 1601398130 is beyond EOD, truncated [ 449.604582][T10249] loop2: p2 start 1702059890 is beyond EOD, truncated [ 453.538759][T10272] fuse: Bad value for 'rootmode' [ 453.841345][T10278] fuse: Bad value for 'user_id' [ 453.841359][T10278] fuse: Bad value for 'user_id' [ 454.146344][T10283] fuse: Unknown parameter 'grou00000000000000000000' [ 454.343784][T10287] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1395'. [ 454.623217][T10289] can: request_module (can-proto-3) failed. [ 454.822741][T10293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.479177][ T8313] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 455.694658][ T8313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.694749][ T8313] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.694800][ T8313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.841474][ T8313] usb 2-1: config 0 descriptor?? [ 456.066561][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 456.117602][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 456.151913][ T8313] usbhid 2-1:0.0: can't add hid device: -71 [ 456.152127][ T8313] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 456.752254][ T8313] usb 2-1: USB disconnect, device number 28 [ 457.706248][ T808] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 457.881276][ T808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 457.881308][ T808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 457.881333][ T808] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 457.884903][ T808] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 457.884931][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.884949][ T808] usb 2-1: Product: syz [ 457.884963][ T808] usb 2-1: Manufacturer: syz [ 457.884977][ T808] usb 2-1: SerialNumber: syz [ 458.519462][T10324] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1408'. [ 458.571624][ T808] usb 2-1: config 0 descriptor?? [ 458.575429][T10311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 458.575629][T10311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 458.577861][ T808] usb 2-1: ucan: probing device on interface #0 [ 458.999121][ T808] usb 2-1: ucan: failed to retrieve device info [ 458.999145][ T808] usb 2-1: ucan: probe failed; try to update the device firmware [ 459.108327][T10332] fuse: Bad value for 'fd' [ 459.236490][T10335] fuse: Unknown parameter 'group_i00000000000000000000' [ 460.294820][T10344] fuse: Unknown parameter 'use00000000000000000000' [ 460.455409][ T5902] usb 2-1: USB disconnect, device number 29 [ 461.161560][T10362] syzkaller0: entered promiscuous mode [ 461.161593][T10362] syzkaller0: entered allmulticast mode [ 461.631395][T10369] can: request_module (can-proto-3) failed. [ 463.219028][ T808] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 463.380830][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 463.380851][ T808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 463.380864][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 463.383498][ T808] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 463.383523][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.383533][ T808] usb 3-1: Product: syz [ 463.383541][ T808] usb 3-1: Manufacturer: syz [ 463.383555][ T808] usb 3-1: SerialNumber: syz [ 463.386636][ T808] usb 3-1: config 0 descriptor?? [ 463.387370][T10388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.387514][T10388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.393991][ T808] usb 3-1: ucan: probing device on interface #0 [ 463.793150][ T808] usb 3-1: ucan: failed to retrieve device info [ 463.793174][ T808] usb 3-1: ucan: probe failed; try to update the device firmware [ 465.692405][T10397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.769768][T10400] fuse: Unknown parameter 'use00000000000000000000' [ 465.953743][ T5902] usb 3-1: USB disconnect, device number 33 [ 467.767802][ T808] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 468.039260][ T808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 468.039281][ T808] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 468.039294][ T808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 468.043509][ T808] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 468.043528][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.043538][ T808] usb 5-1: Product: syz [ 468.043545][ T808] usb 5-1: Manufacturer: syz [ 468.043553][ T808] usb 5-1: SerialNumber: syz [ 468.046481][ T808] usb 5-1: config 0 descriptor?? [ 468.047132][T10441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 468.047208][T10441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 468.048613][ T808] usb 5-1: ucan: probing device on interface #0 [ 468.485746][ T808] usb 5-1: ucan: failed to retrieve device info [ 468.485769][ T808] usb 5-1: ucan: probe failed; try to update the device firmware [ 470.350909][T10467] fuse: Unknown parameter 'user_i00000000000000000000' [ 470.459426][ T8313] usb 5-1: USB disconnect, device number 28 [ 472.359210][ T5919] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 472.529126][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 472.531452][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.531506][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.531533][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 472.531555][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 472.531578][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.533276][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.533305][ T5919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.533325][ T5919] usb 5-1: Manufacturer: syz [ 472.547243][ T5919] usb 5-1: config 0 descriptor?? [ 473.204928][T10499] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 473.205004][T10499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'. [ 473.959016][ T5919] rc_core: IR keymap rc-hauppauge not found [ 473.959038][ T5919] Registered IR keymap rc-empty [ 473.959193][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 473.989122][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.130815][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 474.132502][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 474.188787][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.199355][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.219070][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.252300][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.269080][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.289122][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.320413][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.339372][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.377119][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.398794][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 474.433361][ T5919] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 474.433387][ T5919] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 474.469388][ T5919] usb 5-1: USB disconnect, device number 29 [ 474.942791][ T808] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 475.224197][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 475.224231][ T808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 475.224256][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 475.267404][ T808] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 475.267434][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.267455][ T808] usb 3-1: Product: syz [ 475.267469][ T808] usb 3-1: Manufacturer: syz [ 475.267483][ T808] usb 3-1: SerialNumber: syz [ 475.320466][ T808] usb 3-1: config 0 descriptor?? [ 475.322762][T10507] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.323596][T10507] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.326050][ T808] usb 3-1: ucan: probing device on interface #0 [ 475.786575][ T808] usb 3-1: ucan: failed to retrieve device info [ 475.786599][ T808] usb 3-1: ucan: probe failed; try to update the device firmware [ 476.169903][T10511] fuse: Bad value for 'rootmode' [ 476.936928][T10521] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1464'. [ 478.028756][ T5919] usb 3-1: USB disconnect, device number 34 [ 478.502198][ T5919] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 478.652813][T10539] fuse: Unknown parameter 'use00000000000000000000' [ 478.682354][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 478.691868][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.691923][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.691948][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 478.691969][ T5919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 478.691990][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.693978][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.694005][ T5919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.694024][ T5919] usb 5-1: Manufacturer: syz [ 478.744890][ T5919] usb 5-1: config 0 descriptor?? [ 479.392452][ T5919] rc_core: IR keymap rc-hauppauge not found [ 479.392467][ T5919] Registered IR keymap rc-empty [ 479.392561][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.409044][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.431267][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 479.432931][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 479.478591][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.489861][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.509235][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.539482][ T5871] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 479.539668][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.559179][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.579111][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.599064][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.619047][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.639067][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.659092][ T5919] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.690948][ T5871] usb 3-1: config 0 has no interfaces? [ 479.693798][ T5919] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 479.693821][ T5919] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 479.697200][ T5871] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.697219][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.697229][ T5871] usb 3-1: Product: syz [ 479.697237][ T5871] usb 3-1: Manufacturer: syz [ 479.697245][ T5871] usb 3-1: SerialNumber: syz [ 479.811724][ T5871] usb 3-1: config 0 descriptor?? [ 479.859870][ T5919] usb 5-1: USB disconnect, device number 30 [ 480.047495][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.047998][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.173851][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.174345][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.175749][T10545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1472'. [ 480.219594][T10545] vlan2: entered promiscuous mode [ 480.219616][T10545] batadv0: entered promiscuous mode [ 480.451821][T10558] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1476'. [ 480.460646][ T808] usb 3-1: USB disconnect, device number 35 [ 481.329160][ T808] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 481.410582][T10566] tipc: Enabled bearer , priority 0 [ 481.415631][T10566] tipc: Resetting bearer [ 482.199352][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 482.199379][ T808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 482.199393][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 482.243333][ T808] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 482.243360][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.243386][ T808] usb 3-1: Product: syz [ 482.243400][ T808] usb 3-1: Manufacturer: syz [ 482.243413][ T808] usb 3-1: SerialNumber: syz [ 482.246853][ T808] usb 3-1: config 0 descriptor?? [ 482.247716][T10564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 482.247820][T10564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 482.250486][ T808] usb 3-1: ucan: probing device on interface #0 [ 482.400142][T10565] tipc: Disabling bearer [ 482.692070][T10575] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1482'. [ 483.090571][ T808] usb 3-1: ucan: failed to retrieve device info [ 483.090594][ T808] usb 3-1: ucan: probe failed; try to update the device firmware [ 483.350974][T10578] loop2: detected capacity change from 0 to 7 [ 483.354142][ T6154] Dev loop2: unable to read RDB block 7 [ 483.354163][ T6154] loop2: AHDI p1 p2 p3 [ 483.354179][ T6154] loop2: partition table partially beyond EOD, truncated [ 483.354346][ T6154] loop2: p1 start 1601398130 is beyond EOD, truncated [ 483.354357][ T6154] loop2: p2 start 1702059890 is beyond EOD, truncated [ 483.438096][T10578] Dev loop2: unable to read RDB block 7 [ 483.438135][T10578] loop2: AHDI p1 p2 p3 [ 483.438167][T10578] loop2: partition table partially beyond EOD, truncated [ 483.474625][T10578] loop2: p1 start 1601398130 is beyond EOD, truncated [ 483.474654][T10578] loop2: p2 start 1702059890 is beyond EOD, truncated [ 484.622988][ T8313] usb 3-1: USB disconnect, device number 36 [ 485.349395][ T808] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 485.509004][ T808] usb 3-1: Using ep0 maxpacket: 16 [ 485.510922][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.510975][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.511001][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.511021][ T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 485.511043][ T808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.512141][ T808] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.512166][ T808] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.512192][ T808] usb 3-1: Manufacturer: syz [ 485.906010][T10600] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 485.906076][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1488'. [ 486.641392][ T808] usb 3-1: config 0 descriptor?? [ 488.354311][ T808] rc_core: IR keymap rc-hauppauge not found [ 488.354331][ T808] Registered IR keymap rc-empty [ 488.354482][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.394810][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.410810][ T808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 488.486934][ T808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 488.525365][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.554315][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.569052][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.589024][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.609124][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.629117][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.649113][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.669079][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.700309][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.720417][ T808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 488.750437][ T808] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 488.750453][ T808] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 488.804427][ T808] usb 3-1: USB disconnect, device number 37 [ 489.092717][ T57] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 489.092736][ T57] #PF: supervisor read access in kernel mode [ 489.092747][ T57] #PF: error_code(0x0000) - not-present page [ 489.092757][ T57] PGD 8000000060200067 P4D 8000000060200067 PUD 0 [ 489.092785][ T57] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 489.092817][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.092842][ T57] Tainted: [L]=SOFTLOCKUP [ 489.092849][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.092861][ T57] Workqueue: events_unbound cfg80211_wiphy_work [ 489.092901][ T57] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 489.092926][ T57] Code: 7f 8d 4c 8b b8 18 74 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 b1 e4 e2 02 84 c0 74 0e 49 8b 07 49 [ 489.092943][ T57] RSP: 0018:ffffc9000123f9f8 EFLAGS: 00010207 [ 489.092957][ T57] RAX: 0000000000000000 RBX: ffff88801a351e40 RCX: 0000000000000000 [ 489.092968][ T57] RDX: 0000000083791000 RSI: 0000000000000001 RDI: ffffffff8ba645a0 [ 489.092979][ T57] RBP: 0000000000100000 R08: ffffffff8b243250 R09: ffffffff8ddcd780 [ 489.092992][ T57] R10: dffffc0000000000 R11: fffffbfff1ed45b7 R12: 0000000000000002 [ 489.093004][ T57] R13: 0000000000000001 R14: ffff888035377f00 R15: 0000000000000000 [ 489.093016][ T57] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 489.093030][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.093042][ T57] CR2: 0000000000000010 CR3: 0000000033a40000 CR4: 00000000003526f0 [ 489.093056][ T57] Call Trace: [ 489.093069][ T57] [ 489.093078][ T57] ieee80211_iface_work+0x211/0x1340 [ 489.093112][ T57] cfg80211_wiphy_work+0x2ab/0x4a0 [ 489.093142][ T57] ? process_scheduled_works+0xa25/0x1830 [ 489.093167][ T57] process_scheduled_works+0xb02/0x1830 [ 489.093198][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 489.093221][ T57] ? assign_work+0x3d5/0x5e0 [ 489.093244][ T57] worker_thread+0xa50/0xfc0 [ 489.093280][ T57] kthread+0x388/0x470 [ 489.093299][ T57] ? __pfx_worker_thread+0x10/0x10 [ 489.093324][ T57] ? __pfx_kthread+0x10/0x10 [ 489.093342][ T57] ret_from_fork+0x51e/0xb90 [ 489.093370][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 489.093395][ T57] ? __switch_to+0xc7d/0x1450 [ 489.093419][ T57] ? __pfx_kthread+0x10/0x10 [ 489.093437][ T57] ret_from_fork_asm+0x1a/0x30 [ 489.093461][ T57] [ 489.093473][ T57] Modules linked in: [ 489.093484][ T57] CR2: 0000000000000010 [ 489.093501][ T57] ---[ end trace 0000000000000000 ]--- [ 489.093510][ T57] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 489.093533][ T57] Code: 7f 8d 4c 8b b8 18 74 4e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 9a e2 8d 4d 8b 3f 49 81 ff 00 9a e2 8d 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 b1 e4 e2 02 84 c0 74 0e 49 8b 07 49 [ 489.093549][ T57] RSP: 0018:ffffc9000123f9f8 EFLAGS: 00010207 [ 489.093565][ T57] RAX: 0000000000000000 RBX: ffff88801a351e40 RCX: 0000000000000000 [ 489.093578][ T57] RDX: 0000000083791000 RSI: 0000000000000001 RDI: ffffffff8ba645a0 [ 489.093591][ T57] RBP: 0000000000100000 R08: ffffffff8b243250 R09: ffffffff8ddcd780 [ 489.093605][ T57] R10: dffffc0000000000 R11: fffffbfff1ed45b7 R12: 0000000000000002 [ 489.093618][ T57] R13: 0000000000000001 R14: ffff888035377f00 R15: 0000000000000000 [ 489.093630][ T57] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 489.093646][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.093667][ T57] CR2: 0000000000000010 CR3: 0000000033a40000 CR4: 00000000003526f0 [ 489.093690][ T57] Kernel panic - not syncing: Fatal exception [ 489.094106][ T57] Kernel Offset: disabled