last executing test programs: 10.437950256s ago: executing program 0 (id=6755): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/39, 0x27}, {0x0}], 0x2}, 0x285db1d5}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0300"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.37522369s ago: executing program 0 (id=6760): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f00000003c0)=""/177, 0xb1, 0x10000, 0x0, 0x0) 9.247580988s ago: executing program 0 (id=6762): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x2, 0x0, 0x1ff, 0x0, 0xfd2, 0x3, 0x3}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') close(0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x1, 0x2}) syz_clone(0x0, 0x0, 0xf5ff, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f", 0x25}, {&(0x7f0000001680)="094fb143daa9baa3eaaa10ca06886c463118e05e", 0x14}], 0x3}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) 7.224680912s ago: executing program 4 (id=6767): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 6.892237026s ago: executing program 4 (id=6770): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 6.640166738s ago: executing program 3 (id=6773): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) 6.524132584s ago: executing program 4 (id=6774): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 6.45886562s ago: executing program 4 (id=6775): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x35, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f"}) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r2) r4 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.342669916s ago: executing program 3 (id=6776): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 6.093412481s ago: executing program 3 (id=6777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 6.04574638s ago: executing program 4 (id=6779): syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000003cb", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r3, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(r4, &(0x7f0000000400), 0x0, 0x24065c21) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@empty, 0x72, r7}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5.824666717s ago: executing program 1 (id=6780): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xfc00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000010000000400018010000280"], 0x28}, 0x1, 0x0, 0x0, 0x8002}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf6, 0xc7, 0x7c, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200}}]}}]}}]}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) 5.521974029s ago: executing program 0 (id=6781): socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fstatfs(0xffffffffffffffff, 0x0) 4.368749997s ago: executing program 2 (id=6783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xff) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fffffff, 0x3}]}}}}}}}}, 0x0) 4.15798532s ago: executing program 2 (id=6784): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000002c0)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 4.078968002s ago: executing program 1 (id=6785): syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.283538141s ago: executing program 2 (id=6786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x21) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x5, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.921203176s ago: executing program 3 (id=6787): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl(r1, 0x0, &(0x7f00000003c0)="c03e125e86c2dba9ea6d433e90c75974dd6407bcd5ced50c4b91c7dc60f9debf153be76958b4f92993014903c06e0720600425922351412db591a391e8c8999a94d64f9f8446e320d544e29088bb330dd39972f81a62cbe3774085ad2e7ba223ad388491115a3258e056089183e74d4d4f8ab5fe062a4d295a5cbe58b6a762a780c9d80991cb8d9813ffea00d0b65be1480bc6aa163d7063705705677e7f14bee5f799a791eb2f9aff895864fec65fba4ecdd3ca3e882ea7f99335c168865a8fcb0a676f5d797b0f4673e277e98d6ebc41") r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40015b19, &(0x7f0000000040)) 2.388292822s ago: executing program 4 (id=6788): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000100)) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}}, 0x24}}, 0x0) r9 = fcntl$getown(r5, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) kcmp(r9, r10, 0x2, r1, r6) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x2f, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES64=r7, @ANYRES64=r1, @ANYBLOB="0000000000000000140012800b000100", @ANYBLOB="9da5762469f7f84290b4b27be6b90104e9a6ab8690f531b872ea2ddab88cabcb17b625b5c8e6919869094f67fd024b41156241dc8f874c9704bb392810ee12cb06", @ANYRESHEX=r1, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x40010) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016000000000062ad0ca650af8e0cf5dd875e16e7d330cf59fed3455d495c2214d7313cf2c5c7b78efbb5cf0bd1762736cd0a76f2ea7ca230fd5831c59b9397d3c94b9d47c4a387ce5cbfdc74da4b2b21d9dbb786e44b642e96"], 0x68}, 0x1, 0x7}, 0x0) 2.381231147s ago: executing program 0 (id=6789): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.277144586s ago: executing program 2 (id=6790): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x1, 0x48800) syz_open_dev$audion(0x0, 0x15, 0x401041) shutdown(r0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.087920747s ago: executing program 2 (id=6791): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c34", 0x35}], 0x2}}], 0x1, 0xc0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x20, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xfe}}}}}]}}]}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.600505547s ago: executing program 1 (id=6792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000300)="f36dc744240015000000c34424020e000000c7442406000000000f0114240f01dfb9b8020000b8494d0000ba000000000f30c4c37d044a08040fff090f8e43d399ad66baf80cb802028e8cef66bafc0c66b8010066efc4c1e956c80fc77cc187", 0x60}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x53, 0x1, 0xffff, 0x5}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.412917222s ago: executing program 0 (id=6793): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x10, 0x1, 0x5, &(0x7f0000000580)="ff00000000"}], 0x1}) 1.218245004s ago: executing program 1 (id=6794): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) keyctl$set_reqkey_keyring(0xe, 0x3) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) 1.072442677s ago: executing program 3 (id=6795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) io_uring_setup(0x1379, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x121}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'batadv_slave_0\x00', {0x2, 0x4e24, @empty}}) bind$tipc(r9, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) 751.51913ms ago: executing program 1 (id=6796): socket(0x10, 0x800, 0x800) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 374.761581ms ago: executing program 1 (id=6797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'macvlan0\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x18, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "00df0010"}, @global=@item_012={0x1, 0x1, 0x6, 'O'}]}}, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 107.441218ms ago: executing program 3 (id=6798): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 2 (id=6799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): verrun [ 3004.387365][T25694] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3004.497009][T31811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3004.521851][ T5920] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 3004.539581][ T30] audit: type=1326 audit(1751808697.868:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3004.595411][T25694] usb 2-1: no configurations [ 3004.600043][T25694] usb 2-1: can't read configurations, error -22 [ 3004.620657][T25694] usb usb2-port1: attempt power cycle [ 3004.633183][T31811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3004.665944][T31811] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 3004.681873][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 3004.688395][ T30] audit: type=1326 audit(1751808697.908:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3004.724652][ T5920] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 3004.735779][T31811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3004.746961][ T5920] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 3004.758384][ T5920] usb 4-1: config 166 has no interface number 0 [ 3004.786816][T31811] usb 5-1: config 0 descriptor?? [ 3004.795051][ T5920] usb 4-1: config 166 has no interface number 1 [ 3004.801581][ T5920] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 3004.803123][ T30] audit: type=1326 audit(1751808697.908:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.072197][ T30] audit: type=1326 audit(1751808697.908:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.121917][T25694] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3005.130626][ T5920] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 3005.171994][ T5920] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 3005.184800][ T30] audit: type=1326 audit(1751808697.908:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.201790][ T5920] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3005.243187][T25694] usb 2-1: no configurations [ 3005.247910][T25694] usb 2-1: can't read configurations, error -22 [ 3005.371839][ T30] audit: type=1326 audit(1751808697.908:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.410173][ T5920] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 3005.432457][T31811] pyra 0003:1E7D:2CF6.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 3005.465416][ T5920] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 3005.492007][ T5920] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3005.542102][T25694] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3005.563184][ T5920] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3005.585431][ T5920] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 3005.599371][ T5920] usb 4-1: config 166 interface 177 has no altsetting 0 [ 3005.616855][T25694] usb 2-1: no configurations [ 3005.625392][T25694] usb 2-1: can't read configurations, error -22 [ 3005.657235][T25694] usb usb2-port1: unable to enumerate USB device [ 3005.663826][ T30] audit: type=1326 audit(1751808697.908:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.664757][ T5920] usb 4-1: config 166 interface 34 has no altsetting 0 [ 3005.741238][ T5920] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 3005.753082][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3005.761764][ T5920] usb 4-1: Product: syz [ 3005.766796][ T5920] usb 4-1: Manufacturer: syz [ 3005.774901][ T5920] usb 4-1: SerialNumber: syz [ 3005.800073][ T30] audit: type=1326 audit(1751808697.908:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.878309][ T30] audit: type=1326 audit(1751808697.908:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.922402][ T30] audit: type=1326 audit(1751808697.908:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3005.964473][T31811] pyra 0003:1E7D:2CF6.0041: couldn't init struct pyra_device [ 3005.992424][T31811] pyra 0003:1E7D:2CF6.0041: couldn't install mouse [ 3005.999410][ T30] audit: type=1326 audit(1751808697.908:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3006.022860][ T5920] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 3006.037423][T31811] pyra 0003:1E7D:2CF6.0041: probe with driver pyra failed with error -71 [ 3006.062232][T31811] usb 5-1: USB disconnect, device number 120 [ 3006.084601][ T30] audit: type=1326 audit(1751808697.908:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3006.114635][ T30] audit: type=1326 audit(1751808697.908:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3793 comm="syz.2.6066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x7ffc0000 [ 3006.145145][ T3804] fido_id[3804]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 3006.237858][ T5920] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 3006.464779][ T5920] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 3006.631263][ T3820] input: syz0 as /devices/virtual/input/input143 [ 3006.642395][ T5920] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 3006.654297][ T5920] usb 4-1: No valid video chain found. [ 3006.698691][ T5920] usb 4-1: USB disconnect, device number 101 [ 3007.118427][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6074'. [ 3007.180103][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6074'. [ 3007.832020][ T5920] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 3007.983497][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 3007.994160][ T5920] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3008.015188][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3008.033475][ T5920] usb 4-1: config 0 descriptor?? [ 3008.132259][T32694] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 3008.652708][T32694] usb 2-1: Using ep0 maxpacket: 32 [ 3008.659820][T32694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3008.679133][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3008.697518][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3008.705023][T32694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3008.712893][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3008.726005][ T5920] usb 4-1: media controller created [ 3008.729258][T32694] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3008.745382][T32694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3008.776404][T32694] usb 2-1: config 0 descriptor?? [ 3008.822392][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3008.909911][ T5920] az6027: usb out operation failed. (-71) [ 3008.922099][ T5920] az6027: usb out operation failed. (-71) [ 3008.928635][ T5920] stb0899_attach: Driver disabled by Kconfig [ 3008.936189][ T5920] az6027: no front-end attached [ 3008.936189][ T5920] [ 3008.944142][ T5920] az6027: usb out operation failed. (-71) [ 3008.952431][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3008.982079][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input144 [ 3009.012723][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 3009.029469][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3009.120545][ T5920] usb 4-1: USB disconnect, device number 102 [ 3009.287478][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3009.319402][T32694] savu 0003:1E7D:2D5A.0042: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 3009.391830][T31815] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 3009.406677][ T3857] macsec2: entered promiscuous mode [ 3009.440400][ T3857] macsec2: entered allmulticast mode [ 3009.458980][ T3857] batadv0: entered allmulticast mode [ 3009.543212][ T3857] batadv0: left allmulticast mode [ 3009.555541][T32694] usb 2-1: USB disconnect, device number 119 [ 3009.640900][T31815] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3009.675515][T31815] usb 5-1: can't read configurations, error -61 [ 3009.726598][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6087'. [ 3009.814897][T31815] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 3009.980502][T31815] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3009.997951][T31815] usb 5-1: can't read configurations, error -61 [ 3010.023412][T31815] usb usb5-port1: attempt power cycle [ 3010.083773][ T3873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6093'. [ 3010.092996][ T3873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6093'. [ 3010.095354][ T3874] input input145: cannot allocate more than FF_MAX_EFFECTS effects [ 3010.401831][T31815] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 3010.481853][T25694] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 3010.515885][T31815] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3010.602416][T31815] usb 5-1: can't read configurations, error -61 [ 3010.690645][T25694] usb 2-1: Using ep0 maxpacket: 16 [ 3010.841852][T31815] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 3011.101968][T31815] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3011.109689][T31815] usb 5-1: can't read configurations, error -61 [ 3011.172585][ T3891] bond6: entered allmulticast mode [ 3011.186073][ T3891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3011.395640][T31815] usb usb5-port1: unable to enumerate USB device [ 3012.502167][T31815] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3012.664453][T31815] usb 4-1: Using ep0 maxpacket: 32 [ 3012.683326][T31815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3012.738498][T31815] usb 4-1: config 0 has no interfaces? [ 3012.767363][T31815] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3012.816515][T31815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.867181][T31815] usb 4-1: config 0 descriptor?? [ 3013.940512][T25694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3013.953925][T25694] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3013.981166][T25694] usb 2-1: can't read configurations, error -71 [ 3014.272839][ T3926] netlink: 'syz.2.6111': attribute type 6 has an invalid length. [ 3014.331955][T25694] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 3014.349571][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6112'. [ 3014.678469][T25694] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3014.687236][T25694] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3014.705282][T25694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3014.714410][T25694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3014.728025][T25694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3014.766311][T25694] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3014.782419][T25694] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3014.790454][T25694] usb 2-1: Product: syz [ 3014.806937][T25694] usb 2-1: Manufacturer: syz [ 3014.821763][ T3934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3014.838410][T25694] cdc_wdm 2-1:1.0: skipping garbage [ 3014.949671][T25694] cdc_wdm 2-1:1.0: skipping garbage [ 3014.959297][T25694] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 3015.030700][T25694] cdc_wdm 2-1:1.0: Unknown control protocol [ 3015.136958][ T3903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3015.149221][T25694] usb 4-1: USB disconnect, device number 103 [ 3015.404689][ T3942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3015.561975][T31815] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 3015.648356][T25694] usb 2-1: USB disconnect, device number 121 [ 3015.717844][T31815] usb 4-1: Using ep0 maxpacket: 32 [ 3015.725716][T31815] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 3015.734278][T31815] usb 4-1: config 0 has no interface number 0 [ 3015.741972][T31815] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3015.757792][T31815] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3015.782343][ T5920] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 3015.816221][T31815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3015.836049][T31815] usb 4-1: Product: syz [ 3015.846313][T31815] usb 4-1: Manufacturer: syz [ 3015.856670][T31815] usb 4-1: SerialNumber: syz [ 3015.876501][T31815] usb 4-1: config 0 descriptor?? [ 3015.910804][T31815] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3015.951645][T31815] em28xx 4-1:0.132: Video interface 132 found: [ 3015.969694][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3015.993128][ T5920] usb 5-1: can't read configurations, error -61 [ 3016.171012][ T3953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3016.184894][ T5920] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 3016.198512][ T3953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3016.326351][T31815] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 3016.525673][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3016.585010][ T5920] usb 5-1: can't read configurations, error -61 [ 3016.599223][ T5934] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 3016.659770][ T5920] usb usb5-port1: attempt power cycle [ 3016.775016][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 3016.793391][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3016.808232][ T5934] usb 2-1: config 0 has no interfaces? [ 3016.817957][ T5934] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 3016.832118][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3016.856865][ T5934] usb 2-1: Product: syz [ 3016.870582][ T5934] usb 2-1: Manufacturer: syz [ 3016.893505][ T5934] usb 2-1: SerialNumber: syz [ 3016.918312][ T5934] usb 2-1: config 0 descriptor?? [ 3017.220095][ T5920] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 3017.221662][ T5934] usb 2-1: USB disconnect, device number 122 [ 3017.277977][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3017.286980][ T5920] usb 5-1: can't read configurations, error -61 [ 3017.423787][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3017.471131][T31815] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 3017.481536][T31815] em28xx 4-1:0.132: board has no eeprom [ 3017.485439][ T3939] em28xx 4-1:0.132: failed to trigger write to i2c address 0xba (error=-5) [ 3017.533040][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3017.542585][ T5920] usb 5-1: can't read configurations, error -61 [ 3017.550067][ T5920] usb usb5-port1: unable to enumerate USB device [ 3017.582419][T31815] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3017.660327][T31815] em28xx 4-1:0.132: analog set to bulk mode. [ 3017.680327][ T5920] em28xx 4-1:0.132: Registering V4L2 extension [ 3017.702797][T31815] usb 4-1: USB disconnect, device number 104 [ 3017.737427][T31815] em28xx 4-1:0.132: Disconnecting em28xx [ 3017.956871][ T5920] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 3018.022053][ T5920] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 3018.092739][ T5920] em28xx 4-1:0.132: No AC97 audio processor [ 3018.205285][ T5920] usb 4-1: Decoder not found [ 3018.233215][ T5920] em28xx 4-1:0.132: failed to create media graph [ 3018.288272][ T5920] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 3018.297833][ T3998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3018.347225][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6138'. [ 3018.370740][ T5920] em28xx 4-1:0.132: Remote control support is not available for this card. [ 3018.461982][T31815] em28xx 4-1:0.132: Closing input extension [ 3018.557183][T31815] em28xx 4-1:0.132: Freeing device [ 3018.572101][ T5934] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3018.617722][ T4007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3018.742052][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 3018.753932][ T5934] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3018.762695][T32694] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3018.791409][ T5934] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3018.822405][ T5934] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3018.844098][ T5934] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3018.892150][ T5934] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3018.992525][ T5934] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3019.162708][T32694] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3019.180655][T32694] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3019.192403][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.315653][T32694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3019.334289][T32694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3019.351874][T32694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3019.372404][T32694] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3019.381560][T32694] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3019.390919][T32694] usb 2-1: Product: syz [ 3019.401836][T32694] usb 2-1: Manufacturer: syz [ 3019.428517][T32694] cdc_wdm 2-1:1.0: skipping garbage [ 3019.471773][T32694] cdc_wdm 2-1:1.0: skipping garbage [ 3019.490275][T32694] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 3019.513857][T32694] cdc_wdm 2-1:1.0: Unknown control protocol [ 3019.575883][ T5934] usb 3-1: GET_CAPABILITIES returned 0 [ 3019.585962][ T5934] usbtmc 3-1:16.0: can't read capabilities [ 3019.780975][T31815] usb 3-1: USB disconnect, device number 87 [ 3019.879899][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 3019.887283][ C0] wdm_int_callback: 15 callbacks suppressed [ 3019.887306][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3019.900014][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3019.906228][ C0] vkms_vblank_simulate: vblank timer overrun [ 3019.915529][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3019.922158][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3019.928526][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3019.935155][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3019.941499][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3019.948125][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3019.954803][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3019.961456][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3019.967846][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3019.974463][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3019.980758][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3019.987368][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3019.993581][ T5934] usb 2-1: USB disconnect, device number 123 [ 3019.993852][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3020.006431][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3020.012617][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3020.021467][ C0] vkms_vblank_simulate: vblank timer overrun [ 3020.163373][T32694] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3020.377178][T32694] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3020.385910][T32694] usb 5-1: can't read configurations, error -61 [ 3020.426615][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.434946][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.532354][T32694] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 3020.726096][T32694] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3020.738703][T32694] usb 5-1: can't read configurations, error -61 [ 3020.757035][T32694] usb usb5-port1: attempt power cycle [ 3021.113687][T32694] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 3021.287900][T32694] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3021.296066][T32694] usb 5-1: can't read configurations, error -61 [ 3021.472143][T32694] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3021.624169][T32694] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 3021.632312][T32694] usb 5-1: can't read configurations, error -61 [ 3021.686378][T32694] usb usb5-port1: unable to enumerate USB device [ 3022.829018][ T4079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3022.872143][T32694] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3023.072295][T32694] usb 3-1: Using ep0 maxpacket: 8 [ 3023.109866][T32694] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3023.129810][T32694] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3023.140487][T32694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3023.258333][T32694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3023.285415][T32694] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3023.298845][T32694] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3023.432639][T32694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3023.673940][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'. [ 3023.699210][ T4089] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 3023.717642][ T4089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3023.783175][T32694] usb 3-1: usb_control_msg returned -32 [ 3023.788847][T32694] usbtmc 3-1:16.0: can't read capabilities [ 3023.922673][ T4097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3024.418841][ T4102] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3024.492583][ T4106] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3024.559854][ T4109] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 3024.762653][ T329] usb 3-1: USB disconnect, device number 88 [ 3024.827111][ T4114] sctp: [Deprecated]: syz.0.6175 (pid 4114) Use of int in maxseg socket option. [ 3024.827111][ T4114] Use struct sctp_assoc_value instead [ 3024.984391][ T4114] netlink: 'syz.0.6175': attribute type 10 has an invalid length. [ 3025.043836][ T4117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3025.322168][T31815] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3025.491890][T31815] usb 5-1: Using ep0 maxpacket: 32 [ 3025.507051][T31815] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 3025.516407][T31815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3025.674469][T31815] usb 5-1: Product: syz [ 3025.710558][T31815] usb 5-1: Manufacturer: syz [ 3025.745259][T31815] usb 5-1: SerialNumber: syz [ 3025.776726][T31815] usb 5-1: config 0 descriptor?? [ 3025.777796][ T4127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3025.832796][T31815] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 3026.041252][ T4132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3026.098632][ T4134] fuse: Bad value for 'fd' [ 3027.050378][T31815] gspca_stk1135: reg_w 0xd err -71 [ 3027.060831][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.068020][T31815] gspca_stk1135: Sensor write failed [ 3027.073822][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.080255][T31815] gspca_stk1135: Sensor write failed [ 3027.086046][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.093087][T31815] gspca_stk1135: Sensor read failed [ 3027.098661][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.106330][T31815] gspca_stk1135: Sensor read failed [ 3027.112085][T31815] gspca_stk1135: Detected sensor type unknown (0x0) [ 3027.118869][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.125992][T31815] gspca_stk1135: Sensor read failed [ 3027.131340][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.142607][T31815] gspca_stk1135: Sensor read failed [ 3027.148003][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.157362][T31815] gspca_stk1135: Sensor write failed [ 3027.163060][T31815] gspca_stk1135: serial bus timeout: status=0x00 [ 3027.169651][T31815] gspca_stk1135: Sensor write failed [ 3027.177633][T31815] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 3027.188695][T31815] usb 5-1: USB disconnect, device number 7 [ 3027.335924][ T4150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3028.138104][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6188'. [ 3028.381968][T31811] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 3028.545729][ T4174] binder: 4165:4174 ioctl c0306201 2000000003c0 returned -14 [ 3028.563623][T31811] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 3028.573674][T31811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3028.594923][T31811] usb 4-1: config 0 descriptor?? [ 3028.617941][T31811] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 3028.692844][T32694] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 3028.895754][T32694] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3028.904270][T32694] usb 3-1: can't read configurations, error -71 [ 3029.018403][T31811] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 3029.419635][T31811] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 3029.555719][ T4176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3029.639482][ T5934] usb 4-1: USB disconnect, device number 105 [ 3030.151852][T31811] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3030.246716][ T4191] netlink: 'syz.3.6201': attribute type 10 has an invalid length. [ 3030.303912][T31811] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 3030.315523][T31811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3030.327123][T31811] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 3030.340059][T31811] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 3030.349767][T31811] usb 5-1: Manufacturer: syz [ 3030.361086][ T4194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3030.409714][T31811] usb 5-1: config 0 descriptor?? [ 3030.496672][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6203'. [ 3030.521848][T31811] rc_core: IR keymap rc-hauppauge not found [ 3030.527912][T31811] Registered IR keymap rc-empty [ 3030.556305][T31811] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3030.582017][T31811] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input147 [ 3030.717944][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 3030.733021][ T4203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3030.780092][T31811] usb 5-1: USB disconnect, device number 8 [ 3031.468107][ T4214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 3031.481020][ T4214] batman_adv: batadv0: Adding interface: ip6gretap3 [ 3031.491202][ T4214] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3031.516916][ C1] vkms_vblank_simulate: vblank timer overrun [ 3031.526777][ T4214] batman_adv: batadv0: Interface activated: ip6gretap3 [ 3032.108795][ T4234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3032.302427][ T4241] sctp: [Deprecated]: syz.1.6217 (pid 4241) Use of int in maxseg socket option. [ 3032.302427][ T4241] Use struct sctp_assoc_value instead [ 3032.328996][ T4241] netlink: 'syz.1.6217': attribute type 10 has an invalid length. [ 3033.270728][ T4258] syzkaller1: entered promiscuous mode [ 3033.284175][ T4258] syzkaller1: entered allmulticast mode [ 3034.619307][ T4286] netlink: 'syz.2.6231': attribute type 10 has an invalid length. [ 3034.631211][ T4286] veth0_vlan: left promiscuous mode [ 3034.643112][ T4286] veth0_vlan: entered promiscuous mode [ 3034.656191][ T4286] team0: Device veth0_vlan failed to register rx_handler [ 3034.741037][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6227'. [ 3037.384608][T31811] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 3037.553351][T31811] usb 4-1: Using ep0 maxpacket: 32 [ 3037.628350][T31811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3037.649635][T31811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3037.693868][T31811] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3037.721973][T31811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3037.753096][T31811] usb 4-1: config 0 descriptor?? [ 3037.857629][ T4323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3038.293648][T31811] savu 0003:1E7D:2D5A.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 3038.813014][T31811] usb 4-1: USB disconnect, device number 106 [ 3039.000697][ T4340] fido_id[4340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3039.276135][T32694] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3039.433866][T32694] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3039.443228][T32694] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3039.514820][T32694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3039.534342][T32694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3039.581819][T32694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3039.636827][T32694] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3039.711582][T32694] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3039.733401][T32694] usb 2-1: Product: syz [ 3039.761774][T32694] usb 2-1: Manufacturer: syz [ 3039.803027][T32694] cdc_wdm 2-1:1.0: skipping garbage [ 3039.825731][T32694] cdc_wdm 2-1:1.0: skipping garbage [ 3039.847778][T32694] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 3039.876116][T32694] cdc_wdm 2-1:1.0: Unknown control protocol [ 3039.901016][ T4356] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3039.941549][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6256'. [ 3040.084356][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.091142][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.097956][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.104605][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.110947][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.117666][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.124379][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.131016][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.137312][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.143950][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.150246][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.156870][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.163576][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.170211][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.176524][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.183124][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.189652][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.196260][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.202451][ T329] usb 2-1: USB disconnect, device number 124 [ 3040.208695][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 3040.208712][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 3040.208724][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3040.316742][T31811] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3040.586789][T31811] usb 3-1: Using ep0 maxpacket: 32 [ 3040.604243][T31811] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3040.617480][T31811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3040.624348][T31811] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 3040.636267][T31811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3040.813469][T31811] usb 3-1: config 0 descriptor?? [ 3040.981973][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3041.166921][T31811] usbhid 3-1:0.0: can't add hid device: -71 [ 3041.209050][T31811] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3041.241833][T31815] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3041.445344][T31811] usb 3-1: USB disconnect, device number 91 [ 3041.833011][T31815] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 3041.843818][T31815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3041.856780][T31815] usb 5-1: Product: syz [ 3041.882322][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6260'. [ 3042.138524][T31815] usb 5-1: Manufacturer: syz [ 3042.152647][T31815] usb 5-1: SerialNumber: syz [ 3042.252055][T31815] usb 5-1: config 0 descriptor?? [ 3042.517331][ T329] usb 5-1: USB disconnect, device number 9 [ 3043.867565][ T4406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3044.462873][ T4415] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6271'. [ 3045.395898][ T4432] netlink: 'syz.4.6278': attribute type 4 has an invalid length. [ 3045.428922][ T4432] netlink: 'syz.4.6278': attribute type 4 has an invalid length. [ 3045.641865][ T5920] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3045.855453][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3045.871905][ T5920] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3045.895355][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3045.922864][ T5920] usb 2-1: config 0 descriptor?? [ 3046.152385][T32694] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3046.339965][ T5920] keytouch 0003:0926:3333.0044: fixing up Keytouch IEC report descriptor [ 3046.370838][ T4450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3046.396761][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6285'. [ 3046.442141][T32694] usb 3-1: Using ep0 maxpacket: 32 [ 3046.450965][T32694] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 3046.459498][T32694] usb 3-1: config 0 has no interface number 0 [ 3046.469087][T32694] usb 3-1: config 0 interface 231 has no altsetting 0 [ 3046.482999][T32694] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 3046.492915][T32694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3046.514173][ T5920] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0044/input/input150 [ 3046.680997][ T5920] keytouch 0003:0926:3333.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 3046.830481][T32694] usb 3-1: Product: syz [ 3046.843716][T32694] usb 3-1: Manufacturer: syz [ 3046.849667][T32694] usb 3-1: SerialNumber: syz [ 3046.884182][T32694] usb 3-1: config 0 descriptor?? [ 3046.919014][ T4450] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3047.271788][ T4454] bridge0: port 1(veth9) entered blocking state [ 3047.360321][ T4454] bridge0: port 1(veth9) entered disabled state [ 3047.430398][ T4454] veth9: entered allmulticast mode [ 3047.459214][ T4454] veth9: entered promiscuous mode [ 3047.721866][T31811] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3047.991999][T31811] usb 5-1: Using ep0 maxpacket: 16 [ 3048.003660][T31811] usb 5-1: config 0 has no interfaces? [ 3048.012994][T31811] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 3048.022755][T31811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.032594][T31811] usb 5-1: Product: syz [ 3048.043712][T31811] usb 5-1: Manufacturer: syz [ 3048.052151][T31811] usb 5-1: SerialNumber: syz [ 3048.257775][T31811] usb 5-1: config 0 descriptor?? [ 3048.350578][ T30] audit: type=1326 audit(1751808741.968:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.0.6291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9f8e929 code=0x0 [ 3048.386845][ T329] usb 2-1: USB disconnect, device number 125 [ 3048.419369][T32694] asix 3-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3048.456070][T32694] asix 3-1:0.231: probe with driver asix failed with error -71 [ 3048.498029][T32694] usb 3-1: USB disconnect, device number 92 [ 3048.527309][ T4459] netlink: 'syz.4.6286': attribute type 1 has an invalid length. [ 3048.562144][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6286'. [ 3048.580646][ T5934] usb 5-1: USB disconnect, device number 10 [ 3048.915861][ T4476] kernel profiling enabled (shift: 63) [ 3048.926096][ T4476] profiling shift: 63 too large [ 3049.286951][ T4489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3049.318871][ T4489] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3050.360544][ T4508] syz_tun: entered promiscuous mode [ 3050.366658][ T4508] vlan2: entered promiscuous mode [ 3050.541978][T31811] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3050.841843][T31811] usb 2-1: Using ep0 maxpacket: 32 [ 3050.849158][T31811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3050.859829][T31811] usb 2-1: config 0 has no interfaces? [ 3050.880303][T31811] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3050.897769][T31811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3050.968230][T31811] usb 2-1: config 0 descriptor?? [ 3052.291932][ T5920] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3052.443797][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3052.471832][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3052.512327][ T5920] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 3052.532092][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.545926][ T5920] usb 3-1: Product: syz [ 3052.561796][ T5920] usb 3-1: Manufacturer: syz [ 3052.576525][ T5920] usb 3-1: SerialNumber: syz [ 3052.630450][ T5920] usb 3-1: config 0 descriptor?? [ 3052.665722][ T4540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3052.718216][ T4540] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3053.153502][ T4547] ptrace attach of "./syz-executor exec"[7480] was attempted by "./syz-executor exec"[4547] [ 3053.220236][ T4506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3053.272033][ T5920] usb 2-1: USB disconnect, device number 126 [ 3054.758547][ T4566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3055.182922][T32694] usb 3-1: USB disconnect, device number 93 [ 3055.500233][ T4581] netlink: 'syz.4.6321': attribute type 1 has an invalid length. [ 3055.568139][ T4583] bond5: entered promiscuous mode [ 3055.606170][ T4583] bond5: entered allmulticast mode [ 3055.643852][ T4583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3055.734196][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 3055.931158][ T4592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3056.225160][ T4597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3057.131124][ T4612] loop6: detected capacity change from 0 to 63 [ 3057.220618][ T2952] buffer_io_error: 27 callbacks suppressed [ 3057.220636][ T2952] Buffer I/O error on dev loop6, logical block 0, async page read [ 3057.240524][ T2952] Buffer I/O error on dev loop6, logical block 0, async page read [ 3057.331204][ T2952] Buffer I/O error on dev loop6, logical block 0, async page read [ 3057.343570][ T4612] Buffer I/O error on dev loop6, logical block 0, async page read [ 3057.355772][ T2952] Buffer I/O error on dev loop6, logical block 0, async page read [ 3057.387571][ T2952] Buffer I/O error on dev loop6, logical block 0, async page read [ 3057.713716][ T4627] binder_alloc: 4624: pid 4624 spamming oneway? 1 buffers allocated for a total size of 4096 [ 3058.101472][ T4627] binder_alloc: 4624: pid 4624 spamming oneway? 2 buffers allocated for a total size of 5120 [ 3058.722223][T32694] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3058.871914][T32694] usb 2-1: device descriptor read/64, error -71 [ 3059.116811][T32694] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3059.252316][T32694] usb 2-1: device descriptor read/64, error -71 [ 3059.354890][ T5920] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3059.406525][T32694] usb usb2-port1: attempt power cycle [ 3059.606769][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3059.625618][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3059.640470][ T5920] usb 3-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 3059.722221][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6340'. [ 3059.848554][T32694] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3059.902982][T32694] usb 2-1: device descriptor read/8, error -71 [ 3059.947315][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3060.095720][ T5920] usb 3-1: config 0 descriptor?? [ 3060.152125][T32694] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3060.172572][T32694] usb 2-1: device descriptor read/8, error -71 [ 3060.282321][T32694] usb usb2-port1: unable to enumerate USB device [ 3060.340864][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 3060.347368][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3060.576016][ T5920] usb 3-1: USB disconnect, device number 94 [ 3060.711169][ T30] audit: type=1326 audit(1751808754.328:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.6344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3b638e929 code=0x0 [ 3061.712711][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6347'. [ 3062.620378][ T4679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3062.871795][T31811] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 3063.032557][T31811] usb 4-1: Using ep0 maxpacket: 32 [ 3063.044131][T31811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3063.093295][T31811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3063.128901][T31811] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3063.164570][T31811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3063.241531][T31811] usb 4-1: config 0 descriptor?? [ 3063.700544][T31811] ft260 0003:0403:6030.0045: unknown main item tag 0x7 [ 3063.782280][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3063.910915][T31811] ft260 0003:0403:6030.0045: chip code: 6424 8183 [ 3064.011927][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 3064.044059][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3064.180767][T31811] ft260 0003:0403:6030.0045: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 3064.193593][ T5920] usb 2-1: config 0 has no interfaces? [ 3064.202619][ T5920] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3064.213414][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3064.233170][ T5920] usb 2-1: config 0 descriptor?? [ 3064.372565][T31811] ft260 0003:0403:6030.0045: failed to retrieve status: -32, no wakeup [ 3064.660348][ T5920] usb 4-1: USB disconnect, device number 107 [ 3064.828338][ T30] audit: type=1326 audit(1751808758.448:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.2.6358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9cf8e929 code=0x0 [ 3065.043059][T31811] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3065.191817][T31811] usb 5-1: Using ep0 maxpacket: 32 [ 3065.205108][T31811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3065.218337][T31811] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3065.233845][T31811] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3065.242665][T31811] usb 5-1: Product: syz [ 3065.247151][T31811] usb 5-1: Manufacturer: syz [ 3065.252654][T31811] usb 5-1: SerialNumber: syz [ 3065.260574][T31811] usb 5-1: config 0 descriptor?? [ 3065.272675][ T4705] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3065.571894][T32694] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3065.722199][T32694] usb 4-1: Using ep0 maxpacket: 32 [ 3065.734271][T32694] usb 4-1: config 0 has no interfaces? [ 3065.754280][T32694] usb 4-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 3065.764703][T32694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3065.773142][T32694] usb 4-1: Product: syz [ 3065.778172][T32694] usb 4-1: Manufacturer: syz [ 3065.784447][T32694] usb 4-1: SerialNumber: syz [ 3065.855982][T32694] usb 4-1: config 0 descriptor?? [ 3065.949965][T31811] usb 5-1: USB disconnect, device number 11 [ 3066.378355][T32694] usb 4-1: USB disconnect, device number 108 [ 3066.612007][ T4696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3066.633902][T31811] usb 2-1: USB disconnect, device number 5 [ 3067.011864][T31811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3067.352068][T31811] usb 2-1: Using ep0 maxpacket: 32 [ 3067.397098][T31811] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 3067.492122][T31811] usb 2-1: config 0 has no interface number 0 [ 3067.502156][T32694] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 3067.513222][T31811] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3067.532029][T31811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3067.558948][T31811] usb 2-1: Product: syz [ 3067.574361][T31811] usb 2-1: Manufacturer: syz [ 3067.595874][T31811] usb 2-1: SerialNumber: syz [ 3067.614114][T31811] usb 2-1: config 0 descriptor?? [ 3067.628722][T31811] smsc95xx v2.0.0 [ 3067.682812][T32694] usb 4-1: Using ep0 maxpacket: 16 [ 3067.850381][T32694] usb 4-1: config 0 has an invalid interface number: 190 but max is 1 [ 3068.056983][T32694] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 3068.078014][T32694] usb 4-1: config 0 has no interface number 1 [ 3068.091874][T32694] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3068.121462][T32694] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3068.153122][T32694] usb 4-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f [ 3068.166540][T31811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3068.169382][T32694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3068.206989][T31811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3068.224861][T32694] usb 4-1: Product: syz [ 3068.237003][T32694] usb 4-1: Manufacturer: syz [ 3068.254435][T32694] usb 4-1: SerialNumber: syz [ 3068.392997][T32694] usb 4-1: config 0 descriptor?? [ 3068.878353][T32694] usb 4-1: USB disconnect, device number 109 [ 3069.080919][ T2953] udevd[2953]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3069.343096][ T5934] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3069.523978][ T5934] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 3069.571620][ T5934] usb 5-1: config 0 has no interface number 0 [ 3069.581662][ T5934] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 3069.601629][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.627636][ T5934] usb 5-1: Product: syz [ 3069.632089][ T5934] usb 5-1: Manufacturer: syz [ 3069.636808][ T5934] usb 5-1: SerialNumber: syz [ 3069.659843][ T5934] usb 5-1: config 0 descriptor?? [ 3069.682205][ T5934] hub 5-1:0.217: bad descriptor, ignoring hub [ 3069.702160][ T5934] hub 5-1:0.217: probe with driver hub failed with error -5 [ 3070.112237][ T4009] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 3070.191748][ T5934] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 3070.310609][ T5934] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3070.335023][ T4009] usb 4-1: Using ep0 maxpacket: 8 [ 3070.350544][ T5934] dib0700: firmware download failed at 7 with -22 [ 3070.382174][ T4009] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 3070.411012][ T4009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3070.475833][ T5934] usb 5-1: USB disconnect, device number 12 [ 3070.501898][ T4009] usb 4-1: config 0 has no interface number 0 [ 3070.513599][ T4009] usb 4-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3070.527328][ T4009] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 3070.536628][ T4009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3070.588888][ T4009] usb 4-1: config 0 descriptor?? [ 3070.616654][ T4009] hso 4-1:0.128: Not our interface [ 3070.956560][T31811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3070.973071][T31811] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 3071.160835][T31811] usb 2-1: USB disconnect, device number 6 [ 3071.604203][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6375'. [ 3071.643793][ T4767] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 3071.678046][ T4770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6376'. [ 3072.765437][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6378'. [ 3072.870510][ T4009] usb 4-1: USB disconnect, device number 110 [ 3073.291858][ T5934] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 3073.403891][ T4790] netlink: 'syz.3.6379': attribute type 10 has an invalid length. [ 3073.535386][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 3073.625046][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 3073.698617][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3073.711289][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 3073.772868][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3073.994138][ T5934] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3074.018423][ T5934] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 3074.045652][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.122209][ T4009] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 3074.239707][ T5934] usb 3-1: Product: syz [ 3074.246036][ T5934] usb 3-1: Manufacturer: syz [ 3074.254203][ T5934] usb 3-1: SerialNumber: syz [ 3074.270235][ T5934] usb 3-1: config 0 descriptor?? [ 3074.282687][ T5934] port100 3-1:0.0: NFC: Could not get supported command types [ 3074.374088][ T4009] usb 2-1: config 0 has no interfaces? [ 3074.379948][ T4009] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3074.390986][ T4009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.456364][ T4009] usb 2-1: config 0 descriptor?? [ 3074.564103][ T5920] usb 3-1: USB disconnect, device number 95 [ 3074.847975][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3074.929341][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3075.713627][ T4814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3077.116931][ T5934] usb 2-1: USB disconnect, device number 7 [ 3078.857815][ T4846] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3079.150698][ T4856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3079.538065][ T4859] netlink: 'syz.3.6399': attribute type 10 has an invalid length. [ 3079.623887][ T4856] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3081.773023][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6405'. [ 3081.784303][ T4884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6405'. [ 3081.887218][ T4890] netlink: 'syz.1.6407': attribute type 10 has an invalid length. [ 3081.957869][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.966371][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.152165][ T4893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3082.212576][ T5934] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 3082.432222][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 3082.440499][ T5934] usb 2-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 3082.472411][ T5934] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3082.482658][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3082.490748][ T5934] usb 2-1: Product: syz [ 3082.495189][ T5934] usb 2-1: Manufacturer: syz [ 3082.517017][ T5934] usb 2-1: SerialNumber: syz [ 3082.551792][ T5934] usb 2-1: config 0 descriptor?? [ 3082.831877][T31811] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 3082.861507][ T5934] usb 2-1: USB disconnect, device number 8 [ 3082.991107][T31811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3083.007762][T31811] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3083.018785][T31811] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3083.030159][T31811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3083.039777][T31811] usb 3-1: SerialNumber: syz [ 3083.331427][T31811] usb 3-1: 0:2 : does not exist [ 3083.419849][T31811] usb 3-1: USB disconnect, device number 96 [ 3083.475715][ T2952] udevd[2952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3083.811059][ T4906] kvm: kvm [4905]: vcpu0, guest rIP: 0x44e Unhandled WRMSR(0xc2) = 0x40008a1 [ 3083.830971][ T4906] kvm: kvm [4905]: vcpu0, guest rIP: 0x44e Unhandled WRMSR(0xc2) = 0x40008d9 [ 3084.041446][ T4911] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3084.384865][ T4922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3084.405873][ T4922] binder: 4913:4922 ioctl c0306201 2000000003c0 returned -14 [ 3086.105342][ T4945] netlink: 'syz.2.6418': attribute type 10 has an invalid length. [ 3086.105639][ T4945] veth0_vlan: left promiscuous mode [ 3086.107735][ T4945] veth0_vlan: entered promiscuous mode [ 3086.111166][ T4945] team0: Device veth0_vlan failed to register rx_handler [ 3087.321799][ T4009] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 3087.614174][ T4009] usb 4-1: config 0 has an invalid descriptor of length 21, skipping remainder of the config [ 3087.636507][ T4009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3087.686233][ T4009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18974, setting to 64 [ 3087.779464][ T4009] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 3087.878190][ T4009] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3087.888473][ T4009] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3087.897380][ T4009] usb 4-1: Manufacturer: syz [ 3087.921296][ T4009] usb 4-1: config 0 descriptor?? [ 3088.371793][T31811] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3088.472084][ T4009] rc_core: IR keymap rc-hauppauge not found [ 3088.478487][ T4009] Registered IR keymap rc-empty [ 3088.571910][T31811] usb 5-1: Using ep0 maxpacket: 32 [ 3088.588887][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3088.616378][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3088.642796][ T4009] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 3088.666854][T31811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3088.691928][ T4009] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input154 [ 3088.713555][T31811] usb 5-1: config 0 has no interfaces? [ 3088.764593][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3088.766840][T31811] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3088.825267][T31811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3088.840833][T31811] usb 5-1: config 0 descriptor?? [ 3088.882080][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3088.923493][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3088.983151][ T5934] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3089.143883][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3089.157495][ T5934] usb 2-1: config 0 has no interfaces? [ 3089.383892][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3089.442578][ T5934] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3089.451781][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3089.458442][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3089.469206][ T5934] usb 2-1: Product: syz [ 3089.473836][ T5934] usb 2-1: Manufacturer: syz [ 3089.478598][ T5934] usb 2-1: SerialNumber: syz [ 3089.485065][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6426'. [ 3089.512301][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3089.542515][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3089.572656][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3089.656253][ T5934] usb 2-1: config 0 descriptor?? [ 3089.664582][ T4009] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 3089.732810][ T4009] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3089.794374][ T4009] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3089.816518][ T4009] usb 4-1: USB disconnect, device number 111 [ 3091.250301][ T4963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3091.270888][T31811] usb 5-1: USB disconnect, device number 13 [ 3091.425242][T31815] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 3091.602821][T31815] usb 4-1: Using ep0 maxpacket: 32 [ 3091.610197][T31815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3091.630584][T31815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3091.657777][T31815] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3091.673405][T31815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3091.740634][T31815] usb 4-1: config 0 descriptor?? [ 3091.782337][T31811] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3091.934147][ T4996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3092.006487][T31811] usb 5-1: config 0 has no interfaces? [ 3092.019650][T31811] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3092.029202][T31811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3092.038251][T31811] usb 5-1: Product: syz [ 3092.043000][T31811] usb 5-1: Manufacturer: syz [ 3092.047662][T31811] usb 5-1: SerialNumber: syz [ 3092.073306][ T4996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3092.104788][T31811] usb 5-1: config 0 descriptor?? [ 3092.168564][T31811] usb 2-1: USB disconnect, device number 9 [ 3092.217970][T31815] ft260 0003:0403:6030.0046: unbalanced collection at end of report description [ 3092.241431][T31815] ft260 0003:0403:6030.0046: failed to parse HID [ 3092.313597][T31815] ft260 0003:0403:6030.0046: probe with driver ft260 failed with error -22 [ 3092.610392][T31811] usb 4-1: USB disconnect, device number 112 [ 3093.574274][ T5017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3094.240852][ T5022] fuse: Bad value for 'fd' [ 3094.246340][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6435'. [ 3094.416577][ T5017] binder: 5009:5017 ioctl c0306201 2000000003c0 returned -14 [ 3095.412961][ T5028] sctp: [Deprecated]: syz.0.6436 (pid 5028) Use of int in maxseg socket option. [ 3095.412961][ T5028] Use struct sctp_assoc_value instead [ 3095.451581][ T5028] netlink: 'syz.0.6436': attribute type 10 has an invalid length. [ 3095.519279][T31811] usb 5-1: USB disconnect, device number 14 [ 3096.576592][ T5039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6438'. [ 3096.928552][ T5043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3096.935886][ T5043] IPv6: NLM_F_CREATE should be set when creating new route [ 3096.976118][ T5043] lo: left promiscuous mode [ 3097.003023][ T5043] lo: entered allmulticast mode [ 3097.047182][ T5043] tunl0: left promiscuous mode [ 3097.052623][ T5043] tunl0: entered allmulticast mode [ 3097.059907][ T5043] gre0: left promiscuous mode [ 3097.131249][ T5043] gre0: entered allmulticast mode [ 3097.175521][ T5043] erspan0: left promiscuous mode [ 3097.188364][ T5043] erspan0: entered allmulticast mode [ 3097.292456][ T5043] ip_vti0: left promiscuous mode [ 3097.297746][ T5043] ip_vti0: entered allmulticast mode [ 3097.335761][ T5043] ip6_vti0: left promiscuous mode [ 3097.342562][ T5043] ip6_vti0: entered allmulticast mode [ 3097.424908][ T5043] sit0: left promiscuous mode [ 3097.444240][ T5043] sit0: entered allmulticast mode [ 3097.468038][ T5043] ip6tnl0: left promiscuous mode [ 3097.522144][ T5043] ip6tnl0: entered allmulticast mode [ 3097.655610][ T5043] ip6gre0: left promiscuous mode [ 3097.673291][ T5043] ip6gre0: entered allmulticast mode [ 3097.716384][ T5043] ip6gretap0: left promiscuous mode [ 3097.721874][ T5043] ip6gretap0: entered allmulticast mode [ 3097.776160][ T5043] bridge0: left promiscuous mode [ 3097.781313][ T5043] bridge0: entered allmulticast mode [ 3097.848595][ T5043] nlmon0: left promiscuous mode [ 3097.889302][ T5043] nlmon0: entered allmulticast mode [ 3097.906843][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3097.924334][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3097.936108][ T5043] caif0: left promiscuous mode [ 3097.951965][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x2 [ 3097.962543][ T5043] caif0: entered allmulticast mode [ 3097.975524][ T5043] veth0: entered allmulticast mode [ 3097.980981][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3097.995159][ T5043] veth1: entered allmulticast mode [ 3098.003972][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3098.014577][ T5043] wg0: entered allmulticast mode [ 3098.025622][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3098.034756][ T5043] wg1: entered allmulticast mode [ 3098.044214][ T5043] veth0_to_bridge: entered allmulticast mode [ 3098.054083][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3098.066492][ T5043] bridge_slave_0: entered allmulticast mode [ 3098.117100][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3098.129173][ T5043] veth1_to_bridge: entered allmulticast mode [ 3098.143528][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3098.161661][ T5043] bridge_slave_1: entered allmulticast mode [ 3098.191899][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3098.199679][ T5043] veth0_to_bond: entered allmulticast mode [ 3098.214255][ T5920] hid-generic 00A0:0008:0003.0047: unknown main item tag 0x0 [ 3098.233442][ T5043] @ÿ: entered allmulticast mode [ 3098.255510][ T5043] veth1_to_bond: entered allmulticast mode [ 3098.272918][ T5920] hid-generic 00A0:0008:0003.0047: hidraw0: HID v0.05 Device [syz1] on syz0 [ 3098.286607][ T5043] bond_slave_1: entered allmulticast mode [ 3098.308048][ T5043] veth0_to_team: entered allmulticast mode [ 3098.327844][ T5043] team_slave_0: entered allmulticast mode [ 3098.377824][ T5043] veth1_to_team: entered allmulticast mode [ 3098.414230][ T5043] team_slave_1: entered allmulticast mode [ 3098.441118][ T5043] veth0_to_batadv: entered allmulticast mode [ 3098.485429][ T5043] batadv_slave_0: entered allmulticast mode [ 3098.532998][ T5043] xfrm0: entered allmulticast mode [ 3098.590540][ T5043] veth0_to_hsr: entered allmulticast mode [ 3098.608348][ T5043] hsr_slave_0: entered allmulticast mode [ 3098.651980][ T5043] veth1_to_hsr: entered allmulticast mode [ 3098.701418][ T5043] hsr_slave_1: entered allmulticast mode [ 3098.777399][ T5043] veth1_virt_wifi: entered allmulticast mode [ 3098.845702][ T5043] veth0_virt_wifi: entered allmulticast mode [ 3098.852493][ T5043] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 3098.932116][ T5043] veth1_vlan: entered allmulticast mode [ 3098.938511][ T5043] veth0_vlan: entered allmulticast mode [ 3099.013864][ T5043] @: left promiscuous mode [ 3099.019805][ T5043] @: entered allmulticast mode [ 3099.031240][ T5043] vlan1: entered allmulticast mode [ 3099.039638][ T5043] macvlan0: entered allmulticast mode [ 3099.046698][ T5043] macvlan1: entered allmulticast mode [ 3099.092874][ T5920] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3099.101284][ T5043] ipvlan0: entered allmulticast mode [ 3099.112552][ T5043] ipvlan1: entered allmulticast mode [ 3099.119575][ T5043] veth1_macvtap: entered allmulticast mode [ 3099.142547][ T5043] veth0_macvtap: entered allmulticast mode [ 3099.156891][ T5043] macvtap0: entered allmulticast mode [ 3099.176189][ T5043] macsec0: entered allmulticast mode [ 3099.188664][ T5043] geneve0: entered allmulticast mode [ 3099.311860][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 3099.314656][ T5043] geneve1: entered allmulticast mode [ 3099.378961][ T5043] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 3099.388532][ T5043] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 3099.400639][ T5043] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 3099.409919][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 3099.418973][ T5043] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 3099.443219][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3099.443266][ T5043] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 3099.455898][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3099.485319][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3099.498870][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3099.517618][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3099.517647][ T5043] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 3099.527008][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3099.581083][ T5920] usbtmc 5-1:16.0: bulk endpoints not found [ 3099.650549][ T5043] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 3099.691369][ T5043] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 3099.700772][ T5043] bond1: entered allmulticast mode [ 3099.761331][ T5043] vlan2: entered allmulticast mode [ 3099.767262][ T5043] bridge1: entered allmulticast mode [ 3099.773022][ T5043] gre1: entered allmulticast mode [ 3099.778373][ T5043] veth2: entered allmulticast mode [ 3099.789536][ T5043] veth3: entered allmulticast mode [ 3099.801969][ T5043] syztnl1: entered allmulticast mode [ 3099.812360][ T5043] veth4: entered allmulticast mode [ 3099.821965][ T5043] veth5: entered allmulticast mode [ 3099.832586][ T5043] macvlan2: entered allmulticast mode [ 3099.841910][ T5043] vxlan0: entered allmulticast mode [ 3099.851976][ T5043] bond0: entered allmulticast mode [ 3099.857587][ T5043] gretap1: entered allmulticast mode [ 3099.863697][ T5043] vxcan2: entered allmulticast mode [ 3099.869244][ T5043] vxcan3: entered allmulticast mode [ 3099.881967][ T5043] macsec1: entered allmulticast mode [ 3099.893015][ T5043] mac80211_hwsim hwsim25 wlan2: entered allmulticast mode [ 3099.902027][ T5043] vxlan1: entered allmulticast mode [ 3099.925361][ T5043] vxlan2: entered allmulticast mode [ 3099.942569][ T5043] bridge2: entered allmulticast mode [ 3099.953974][ T5043] vlan3: entered allmulticast mode [ 3099.961965][ T5043] mac80211_hwsim hwsim28 wlan3: entered allmulticast mode [ 3099.972196][ T5043] bridge3: entered allmulticast mode [ 3099.982486][ T5043] bridge4: entered allmulticast mode [ 3100.002187][ T5043] bridge5: entered allmulticast mode [ 3100.047603][ T5043] mac80211_hwsim hwsim33 wlan4: entered allmulticast mode [ 3100.057452][ T5043] syztnl2: entered allmulticast mode [ 3100.065651][ T5043] gretap2: entered allmulticast mode [ 3100.072346][ T5043] mac80211_hwsim hwsim41 wlan5: entered allmulticast mode [ 3100.079744][ T5043] syztnl0: entered allmulticast mode [ 3100.086723][ T5043] bridge6: entered allmulticast mode [ 3100.095777][ T5043] ip6erspan0: left promiscuous mode [ 3100.101034][ T5043] ip6erspan0: entered allmulticast mode [ 3100.115033][ T5043] mac80211_hwsim hwsim45 wlan6: entered allmulticast mode [ 3100.122705][ T5043] bond4: entered allmulticast mode [ 3100.128050][ T5043] bridge7: entered allmulticast mode [ 3100.133646][ T5043] mac80211_hwsim hwsim47 wlan7: entered allmulticast mode [ 3100.152619][ T5043] bridge8: left promiscuous mode [ 3100.158740][ T5043] bridge8: entered allmulticast mode [ 3100.180028][ T5043] bond5: entered allmulticast mode [ 3100.190728][ T5043] veth6: entered allmulticast mode [ 3100.197364][ T5043] veth7: entered allmulticast mode [ 3100.213855][ T5043] team0: entered allmulticast mode [ 3100.225905][ T5043] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3100.244559][ T5043] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3100.254023][ T5043] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3100.265297][ T5043] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3100.274777][ T5043] geneve2: left promiscuous mode [ 3100.286735][ T5043] ipip0: entered allmulticast mode [ 3100.306648][ T5043] sit1: entered allmulticast mode [ 3100.334559][ T5043] bridge9: entered allmulticast mode [ 3100.356862][ T5043] veth8: entered allmulticast mode [ 3100.363863][ T5043] veth9: entered allmulticast mode [ 3100.369866][ T5043] bridge10: entered allmulticast mode [ 3100.390938][ T5043] macvtap1: left promiscuous mode [ 3100.406958][ T5043] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 3100.421551][ T5043] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 3100.436478][ T5043] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 3100.445682][ T5043] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 3100.457530][ T5043] geneve3: left promiscuous mode [ 3100.469973][ T5043] mac80211_hwsim hwsim55 wlan8: entered allmulticast mode [ 3101.068614][ T5080] netlink: 548 bytes leftover after parsing attributes in process `syz.2.6446'. [ 3101.109890][ T5080] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.6446'. [ 3101.215924][ T5920] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3101.732108][ T4009] usb 5-1: USB disconnect, device number 15 [ 3101.792048][ T5920] usb 2-1: config 0 has no interfaces? [ 3102.040771][ T5920] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3102.085271][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3102.122716][ T5920] usb 2-1: Product: syz [ 3102.133741][ T5920] usb 2-1: Manufacturer: syz [ 3102.160982][ T5920] usb 2-1: SerialNumber: syz [ 3102.189854][ T5920] usb 2-1: config 0 descriptor?? [ 3102.672016][ T5934] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 3102.845784][ T5934] usb 5-1: device descriptor read/64, error -71 [ 3103.091841][ T5934] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 3103.263708][ T5934] usb 5-1: device descriptor read/64, error -71 [ 3103.373003][ T5934] usb usb5-port1: attempt power cycle [ 3103.554097][ T5095] netlink: 'syz.0.6452': attribute type 10 has an invalid length. [ 3103.639846][ T5099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3103.748251][ T5934] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 3103.792643][ T5934] usb 5-1: device descriptor read/8, error -71 [ 3104.063760][ T5934] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 3104.093988][ T5934] usb 5-1: device descriptor read/8, error -71 [ 3104.231820][ T5934] usb usb5-port1: unable to enumerate USB device [ 3104.343367][ T5113] sctp: [Deprecated]: syz.1.6454 (pid 5113) Use of int in maxseg socket option. [ 3104.343367][ T5113] Use struct sctp_assoc_value instead [ 3104.394758][ T5113] netlink: 'syz.1.6454': attribute type 10 has an invalid length. [ 3104.701101][ T329] usb 2-1: USB disconnect, device number 10 [ 3104.821794][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3105.034431][ T5090] [U]  [ 3105.065074][ T5104] loop4: detected capacity change from 0 to 524255232 [ 3106.544263][ T5129] vivid-000: disconnect [ 3106.870946][ T5117] vivid-000: reconnect [ 3106.939560][ T5132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3107.092526][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6458'. [ 3107.205335][ T5136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6458'. [ 3108.920832][ T5157] usb usb8: usbfs: process 5157 (syz.1.6462) did not claim interface 0 before use [ 3109.656847][ T5169] loop7: detected capacity change from 0 to 16384 [ 3109.982271][ T329] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 3110.224604][ T329] usb 3-1: Using ep0 maxpacket: 8 [ 3110.232215][ T329] usb 3-1: config 0 has no interfaces? [ 3110.244107][ T329] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 3110.253676][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3110.403077][ T329] usb 3-1: Product: syz [ 3110.411885][ T329] usb 3-1: Manufacturer: syz [ 3110.421943][ T329] usb 3-1: SerialNumber: syz [ 3110.465336][ T329] usb 3-1: config 0 descriptor?? [ 3110.845881][ T5169] I/O error, dev loop7, sector 48 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3110.975236][ T5169] I/O error, dev loop7, sector 72 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 0 [ 3110.987158][ T5169] I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 15 prio class 0 [ 3110.987649][T31815] usb 3-1: USB disconnect, device number 97 [ 3110.997698][ T5169] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 3111.016444][ T5169] I/O error, dev loop7, sector 48 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3111.028457][ T5169] Buffer I/O error on dev loop7, logical block 6, async page read [ 3111.043870][ T5169] I/O error, dev loop7, sector 48 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3111.055212][ T5169] Buffer I/O error on dev loop7, logical block 6, async page read [ 3111.117301][ T5169] I/O error, dev loop7, sector 48 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3111.244928][ T5169] Buffer I/O error on dev loop7, logical block 6, async page read [ 3111.266177][ T5169] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 0 [ 3111.276183][ T5169] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 3111.393809][ T5169] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 3111.423557][ T5169] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 3111.446421][ T5169] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 3111.470171][ T5169] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 3111.488134][ T5169] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 3112.249306][ T5188] xt_hashlimit: max too large, truncated to 1048576 [ 3112.258130][ T5188] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3112.691838][ T5934] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3112.855646][ T5199] CIFS: VFS: Malformed UNC in devname [ 3113.091901][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 3113.103792][ T5934] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 3113.117167][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3113.143774][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3113.268474][ T5934] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3113.337950][ T5934] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3113.368266][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3114.073378][ T5934] usb 5-1: GET_CAPABILITIES returned 0 [ 3114.088377][ T5934] usbtmc 5-1:16.0: can't read capabilities [ 3115.359299][ T5223] sctp: [Deprecated]: syz.2.6472 (pid 5223) Use of int in maxseg socket option. [ 3115.359299][ T5223] Use struct sctp_assoc_value instead [ 3115.430656][ T5223] netlink: 'syz.2.6472': attribute type 10 has an invalid length. [ 3115.442810][ T5223] veth0_vlan: left promiscuous mode [ 3115.457286][ T5223] veth0_vlan: entered promiscuous mode [ 3115.471506][ T5223] team0: Device veth0_vlan failed to register rx_handler [ 3117.271963][T31815] usb 5-1: USB disconnect, device number 20 [ 3117.923994][T31815] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 3118.012336][ T329] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3118.371447][ T329] usb 5-1: config 0 has no interfaces? [ 3118.395095][ T329] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3118.518519][T31815] usb 4-1: config 0 has no interfaces? [ 3118.534954][T31815] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3118.545762][T31815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.573290][T31815] usb 4-1: Product: syz [ 3118.583600][T31815] usb 4-1: Manufacturer: syz [ 3118.596910][T31815] usb 4-1: SerialNumber: syz [ 3118.606649][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.608145][T31815] usb 4-1: config 0 descriptor?? [ 3119.032122][ T329] usb 5-1: Product: syz [ 3119.058920][ T329] usb 5-1: Manufacturer: syz [ 3119.083689][ T329] usb 5-1: SerialNumber: syz [ 3119.110272][ T329] usb 5-1: config 0 descriptor?? [ 3119.523800][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3119.538505][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3120.825116][ T5261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6481'. [ 3121.642515][ T329] usb 4-1: USB disconnect, device number 113 [ 3122.042857][ T5274] hub 1-0:1.0: USB hub found [ 3122.051853][ T5274] hub 1-0:1.0: 1 port detected [ 3122.709403][ T5934] usb 5-1: USB disconnect, device number 21 [ 3123.753578][ T5291] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.6486' sets config #0 [ 3123.798268][ T5291] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.6486' sets config #1 [ 3124.885377][ T5300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3125.032528][ T329] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 3125.332292][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 3125.579807][ T329] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3125.602196][ T329] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3125.652640][ T329] usb 1-1: New USB device found, idVendor=05ac, idProduct=abdf, bcdDevice=3d.49 [ 3125.662408][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.670425][ T329] usb 1-1: Product: syz [ 3125.706283][ T329] usb 1-1: Manufacturer: syz [ 3125.710957][ T329] usb 1-1: SerialNumber: syz [ 3125.755739][ T329] usb 1-1: config 0 descriptor?? [ 3127.014725][ T4009] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3127.429624][ T4009] usb 3-1: config 0 has no interfaces? [ 3127.489025][ T4009] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3127.518260][ T4009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3127.550499][ T5325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3127.577744][ T4009] usb 3-1: Product: syz [ 3127.582057][ T4009] usb 3-1: Manufacturer: syz [ 3127.589387][ T4009] usb 3-1: SerialNumber: syz [ 3127.599237][ T4009] usb 3-1: config 0 descriptor?? [ 3127.692925][T31815] usb 1-1: USB disconnect, device number 51 [ 3129.967980][ T5340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3130.045525][ T5335] IPVS: set_ctl: invalid protocol: 43 172.20.20.6:20000 [ 3130.482467][ T5920] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 3130.611057][T31815] usb 3-1: USB disconnect, device number 98 [ 3130.809332][ T5920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3130.831292][ T5920] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3130.851304][ T5920] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3130.896997][ T5920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3130.916583][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3130.946940][ T5920] usb 1-1: Product: syz [ 3130.961873][ T5920] usb 1-1: Manufacturer: syz [ 3130.976267][ T5920] usb 1-1: SerialNumber: syz [ 3131.138528][ T5920] hub 1-1:1.0: bad descriptor, ignoring hub [ 3131.204846][ T5920] hub 1-1:1.0: probe with driver hub failed with error -5 [ 3131.334703][ T5920] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3131.564295][ T5355] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3132.366520][ T5363] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3132.502128][ T5340] usb 1-1: reset high-speed USB device number 52 using dummy_hcd [ 3133.112325][T31815] usb 1-1: USB disconnect, device number 52 [ 3133.120265][T31815] usblp0: removed [ 3133.132236][ T329] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3133.343187][ T5376] netlink: 'syz.0.6502': attribute type 6 has an invalid length. [ 3133.363220][ T5376] netlink: 'syz.0.6502': attribute type 1 has an invalid length. [ 3133.381591][ T5376] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6502'. [ 3133.428393][ T329] usb 2-1: config 0 has no interfaces? [ 3133.446698][ T329] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3133.473557][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.509803][ T329] usb 2-1: Product: syz [ 3133.531263][ T329] usb 2-1: Manufacturer: syz [ 3133.710338][ T329] usb 2-1: SerialNumber: syz [ 3133.739365][ T329] usb 2-1: config 0 descriptor?? [ 3133.988199][ T5372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6501'. [ 3134.431935][ T5368] Bluetooth: hci0: command 0x0406 tx timeout [ 3134.573923][ T5384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3135.808586][ T4009] usb 2-1: USB disconnect, device number 11 [ 3135.914254][ T5398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3136.351937][ T4009] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3136.484974][ T5409] program syz.0.6508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3136.542022][ T5368] Bluetooth: hci0: command 0x0406 tx timeout [ 3136.559293][ T4009] usb 2-1: config 0 has no interfaces? [ 3136.577018][ T4009] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3136.603359][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6508'. [ 3136.699761][ T4009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.968137][ T4009] usb 2-1: Product: syz [ 3137.161918][ T4009] usb 2-1: Manufacturer: syz [ 3137.243548][ T5920] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 3137.272953][ T4009] usb 2-1: SerialNumber: syz [ 3137.274664][ T5391] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6505'. [ 3137.291227][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6505'. [ 3137.406653][ T4009] usb 2-1: config 0 descriptor?? [ 3137.458886][ T5920] usb 4-1: config 0 has no interfaces? [ 3137.502651][ T5920] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3137.511919][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.519937][ T5920] usb 4-1: Product: syz [ 3137.641812][ T5920] usb 4-1: Manufacturer: syz [ 3137.646488][ T5920] usb 4-1: SerialNumber: syz [ 3137.715461][ T5920] usb 4-1: config 0 descriptor?? [ 3138.598411][ T5368] Bluetooth: hci0: command 0x0406 tx timeout [ 3139.806705][T31811] usb 2-1: USB disconnect, device number 12 [ 3140.511857][ T30] audit: type=1326 audit(1751808834.048:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3140.978263][ T30] audit: type=1326 audit(1751808834.048:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3141.271091][ T30] audit: type=1326 audit(1751808834.048:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3141.293477][ C1] vkms_vblank_simulate: vblank timer overrun [ 3141.361842][ T30] audit: type=1326 audit(1751808834.048:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3141.474126][ T30] audit: type=1326 audit(1751808834.058:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3141.593824][T31811] usb 4-1: USB disconnect, device number 114 [ 3141.627453][ T30] audit: type=1326 audit(1751808834.088:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3141.748683][ T30] audit: type=1326 audit(1751808834.088:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3141.840375][ T30] audit: type=1326 audit(1751808834.088:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3141.867168][ T30] audit: type=1326 audit(1751808834.088:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3142.012802][ T30] audit: type=1326 audit(1751808834.098:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz.0.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd9f8e929 code=0x7ffc0000 [ 3143.034066][ T4009] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3143.261946][ T5934] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 3143.385899][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.392311][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.560876][ T4009] usb 2-1: Using ep0 maxpacket: 32 [ 3143.566799][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 3143.935332][ T4009] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 3143.945167][ T4009] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 3144.007288][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3144.017816][ T4009] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 3144.029591][ T5934] usb 1-1: config 0 has no interfaces? [ 3144.051833][ T5934] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3144.066513][ T4009] usb 2-1: config 1 has no interface number 0 [ 3144.084122][ T4009] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3144.103511][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3144.181935][ T4009] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3144.389492][ T5934] usb 1-1: config 0 descriptor?? [ 3144.402001][ T4009] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3144.415115][ T4009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3144.490577][ T4009] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 3144.779922][ T4009] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 3144.827997][ T5472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3144.848238][ T5472] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3145.800728][ T5934] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 3145.866298][T31811] usb 2-1: USB disconnect, device number 13 [ 3145.878680][T31811] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 3146.482821][ T5368] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 3146.625027][ T5490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3146.643133][ T5490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6522'. [ 3147.453173][ T5459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3147.475043][T32694] usb 1-1: USB disconnect, device number 53 [ 3148.140282][T32694] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 3148.345838][T32694] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 3148.405232][T32694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.429890][T32694] usb 4-1: Product: syz [ 3148.474089][T32694] usb 4-1: Manufacturer: syz [ 3148.478916][T32694] usb 4-1: SerialNumber: syz [ 3148.552863][T32694] usb 4-1: config 0 descriptor?? [ 3149.045245][T31811] usb 4-1: USB disconnect, device number 115 [ 3150.802096][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6529'. [ 3151.962125][T32694] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3152.184038][T32694] usb 5-1: Using ep0 maxpacket: 32 [ 3152.220181][T32694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3152.240890][T32694] usb 5-1: config 0 has no interfaces? [ 3152.272071][T32694] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3152.302375][T32694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3152.375132][T32694] usb 5-1: config 0 descriptor?? [ 3152.451917][ T5920] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3152.956532][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 3152.968484][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3152.987403][ T5920] usb 2-1: config 0 has no interfaces? [ 3152.993400][ T5920] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3153.056552][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3153.143955][ T5920] usb 2-1: config 0 descriptor?? [ 3155.077264][ T5538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3155.089101][T31811] usb 5-1: USB disconnect, device number 22 [ 3156.160342][ T5552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3156.224012][ T4009] usb 2-1: USB disconnect, device number 14 [ 3156.395220][ T5596] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6540'. [ 3156.507426][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6539'. [ 3156.521886][ T5597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6539'. [ 3157.908103][ T5607] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6543'. [ 3158.151449][ T5613] netlink: 'syz.0.6545': attribute type 1 has an invalid length. [ 3158.547782][ T5622] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 3158.554449][ T5622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3158.638840][ T5610] veth0_to_team: left allmulticast mode [ 3158.672692][ T5622] vhci_hcd vhci_hcd.0: Device attached [ 3158.880279][T32694] vhci_hcd: vhci_device speed not set [ 3158.955315][T32694] usb 39-1: new low-speed USB device number 30 using vhci_hcd [ 3159.355661][ T5632] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6547'. [ 3159.815944][ T5623] vhci_hcd: connection reset by peer [ 3159.822147][ T8160] vhci_hcd: stop threads [ 3159.833786][ T8160] vhci_hcd: release socket [ 3159.838878][ T8160] vhci_hcd: disconnect device [ 3160.761797][T31811] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 3160.958698][T31811] usb 2-1: Using ep0 maxpacket: 32 [ 3160.973006][T31811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3160.987116][T31811] usb 2-1: config 0 has no interfaces? [ 3161.100042][T31811] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3161.110198][T31811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3161.159524][T31811] usb 2-1: config 0 descriptor?? [ 3162.536462][ T5667] usb usb8: usbfs: process 5667 (syz.3.6553) did not claim interface 0 before use [ 3162.802436][T31815] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 3162.964668][T31815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3162.976998][T31815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3162.995761][T31815] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3163.010919][T31815] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3163.022833][T31815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3163.070814][T31815] usb 3-1: config 0 descriptor?? [ 3163.417490][ T5673] tipc: Can't bind to reserved service type 0 [ 3163.479834][ T5644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3163.494118][ T5920] usb 2-1: USB disconnect, device number 15 [ 3163.957179][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6554'. [ 3164.153472][T32694] vhci_hcd: vhci_device speed not set [ 3164.529490][ T5689] blktrace: Concurrent blktraces are not allowed on sg0 [ 3166.325299][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6559'. [ 3167.331890][T31811] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 3167.411841][ T5920] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3167.572568][T31811] usb 2-1: config 0 has no interfaces? [ 3167.586388][T31811] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3167.597288][T31811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.608213][ T5920] usb 5-1: config 0 has no interfaces? [ 3167.615607][T31811] usb 2-1: Product: syz [ 3167.626296][ T5920] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3167.635923][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.644145][T31811] usb 2-1: Manufacturer: syz [ 3167.649146][T31811] usb 2-1: SerialNumber: syz [ 3167.653845][ T5920] usb 5-1: Product: syz [ 3167.658050][ T5920] usb 5-1: Manufacturer: syz [ 3167.665670][T31811] usb 2-1: config 0 descriptor?? [ 3167.682047][ T5920] usb 5-1: SerialNumber: syz [ 3167.714437][ T5920] usb 5-1: config 0 descriptor?? [ 3167.845447][T31815] usbhid 3-1:0.0: can't add hid device: -71 [ 3167.855847][T31815] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3167.952953][T31815] usb 3-1: USB disconnect, device number 99 [ 3168.372416][ T4009] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 3170.322270][ T5920] usb 5-1: USB disconnect, device number 23 [ 3170.723502][ T5920] usb 2-1: USB disconnect, device number 16 [ 3170.832058][ T5934] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3170.916634][ T5733] netlink: 712 bytes leftover after parsing attributes in process `syz.3.6567'. [ 3170.974792][ T5735] No such timeout policy "syz1" [ 3170.992023][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 3171.021993][ T5934] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3171.056566][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3171.066285][ T5934] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 3171.105699][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.156900][ T5934] usb 1-1: config 0 descriptor?? [ 3171.271466][ T5741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3171.567146][ T4009] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 3171.979836][ T4009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3171.989885][ T4009] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3172.122211][ T4009] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3172.280204][ T4009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3172.452998][ T4009] usb 4-1: config 0 descriptor?? [ 3172.465066][ T4009] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3173.462944][ T5763] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6569'. [ 3175.497375][T31815] usb 4-1: USB disconnect, device number 117 [ 3175.651155][ T5934] usbhid 1-1:0.0: can't add hid device: -71 [ 3175.661523][ T5934] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3175.674575][ T5934] usb 1-1: USB disconnect, device number 54 [ 3175.716045][ T5769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6572'. [ 3175.869557][ T5771] AppArmor: change_hat: Invalid input '' [ 3176.588142][ T5934] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3176.781770][ T4009] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 3176.819504][ T5934] usb 1-1: config 0 has no interfaces? [ 3176.896117][ T5934] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3176.905908][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3176.917772][ T5934] usb 1-1: Product: syz [ 3176.923576][ T5934] usb 1-1: Manufacturer: syz [ 3176.928354][ T5934] usb 1-1: SerialNumber: syz [ 3176.969557][ T4009] usb 4-1: Using ep0 maxpacket: 32 [ 3176.994740][ T5934] usb 1-1: config 0 descriptor?? [ 3177.058773][ T4009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3177.086889][ T4009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3177.129986][ T4009] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3177.156355][ T4009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3177.183490][ T4009] usb 4-1: config 0 descriptor?? [ 3177.271177][ T4009] hub 4-1:0.0: USB hub found [ 3179.710910][ T5934] usb 1-1: USB disconnect, device number 55 [ 3179.815963][ T4009] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 3179.878086][ T4009] usbhid 4-1:0.0: can't add hid device: -71 [ 3179.888218][ T4009] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3179.945016][ T4009] usb 4-1: USB disconnect, device number 118 [ 3180.165503][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3180.220267][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3180.241934][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3180.294010][ T5822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3180.331894][ T5818] geneve2: entered promiscuous mode [ 3180.375719][ T5822] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3181.955241][ T5862] binder: 5861:5862 ioctl 541b 0 returned -22 [ 3182.375429][ T5878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3182.498911][ T5878] binder: 5868:5878 ioctl c0306201 2000000003c0 returned -14 [ 3183.524611][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6610'. [ 3183.539996][ T5900] batadv_slave_0: entered promiscuous mode [ 3183.573865][ T5905] ucma_write: process 5743 (syz.4.6613) changed security contexts after opening file descriptor, this is not allowed. [ 3184.438290][ T5924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3185.138325][ T5949] veth0_to_bond: entered allmulticast mode [ 3185.651397][ T5964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3185.662687][ T5964] binder: 5950:5964 ioctl c0306201 2000000003c0 returned -14 [ 3185.718037][ T5966] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3185.838424][ T5971] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3185.849339][ T5971] binder: 5951:5971 ioctl c0306201 2000000003c0 returned -14 [ 3186.744047][T31811] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3186.911858][T31811] usb 5-1: Using ep0 maxpacket: 32 [ 3186.942138][T31811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3186.952870][T31811] usb 5-1: config 0 has no interfaces? [ 3186.958487][T31811] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3186.996074][T31811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3187.091410][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6654'. [ 3187.101279][T31811] usb 5-1: config 0 descriptor?? [ 3187.140694][ T6005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3187.222819][ T6008] sctp: [Deprecated]: syz.1.6652 (pid 6008) Use of int in maxseg socket option. [ 3187.222819][ T6008] Use struct sctp_assoc_value instead [ 3187.252045][ T5934] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 3187.361809][ T6008] netlink: 'syz.1.6652': attribute type 10 has an invalid length. [ 3187.402070][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 3187.413604][ T5934] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3187.425283][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3187.434329][ T5934] usb 1-1: Product: syz [ 3187.438546][ T5934] usb 1-1: Manufacturer: syz [ 3187.443587][ T5934] usb 1-1: SerialNumber: syz [ 3187.458771][ T5934] usb 1-1: config 0 descriptor?? [ 3187.514132][ T5934] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3187.522606][ T5934] usb 1-1: setting power ON [ 3187.527196][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 3187.546521][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3187.651270][ T5934] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3187.660059][ T5934] usb 1-1: media controller created [ 3187.738138][ T5998] dvb-usb: bulk message failed: -22 (3/0) [ 3187.745027][ T5998] dvb-usb: bulk message failed: -22 (4/0) [ 3187.776685][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3187.895338][ T5934] usb 1-1: selecting invalid altsetting 6 [ 3187.901337][ T5934] usb 1-1: digital interface selection failed (-22) [ 3187.920765][ T5934] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3187.942234][ T5934] usb 1-1: setting power OFF [ 3187.959629][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 3187.987547][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3188.011728][ T5934] (NULL device *): no alternate interface [ 3188.068098][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6656'. [ 3188.156665][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3188.197922][ T5934] usb 1-1: USB disconnect, device number 56 [ 3188.277578][ T6021] xt_hashlimit: max too large, truncated to 1048576 [ 3188.523462][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6661'. [ 3188.584433][ T6030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3189.083484][ T6036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3189.348963][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.364120][ T5934] usb 5-1: USB disconnect, device number 24 [ 3189.851769][ T4009] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 3190.218747][ T4009] usb 4-1: Using ep0 maxpacket: 32 [ 3190.506971][ T4009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3190.534399][ T4009] usb 4-1: config 0 has no interfaces? [ 3190.550225][ T4009] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3190.606989][ T4009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3190.666376][ T6061] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6675'. [ 3190.680364][ T4009] usb 4-1: config 0 descriptor?? [ 3190.760293][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6677'. [ 3190.809793][ T6061] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 3190.961966][T31815] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 3191.128179][T31815] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3191.152030][T31815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3191.172513][T31815] usb 2-1: Product: syz [ 3191.176827][T31815] usb 2-1: Manufacturer: syz [ 3191.181451][T31815] usb 2-1: SerialNumber: syz [ 3191.217193][T31815] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3191.246460][T31811] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3191.471763][ T4009] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3191.558951][ T6086] raw_sendmsg: syz.4.6685 forgot to set AF_INET. Fix it! [ 3191.635356][ T4009] usb 1-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 3191.654857][ T4009] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3191.670018][ T4009] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 3191.679478][ T4009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3191.699090][ T4009] usb 1-1: config 0 descriptor?? [ 3191.786811][T31815] usb 2-1: USB disconnect, device number 17 [ 3192.277729][ T6099] openvswitch: netlink: Key 12 has unexpected len 644 expected 2 [ 3192.335768][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3192.354639][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3192.413783][T31811] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3192.428435][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3192.446664][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3192.454122][T31811] ath9k_htc: Failed to initialize the device [ 3192.477396][ T6099] batman_adv: batadv0: Interface deactivated: macsec1 [ 3192.491839][ T6099] batman_adv: batadv0: Removing interface: macsec1 [ 3192.551847][T31815] usb 2-1: ath9k_htc: USB layer deinitialized [ 3192.675273][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.688175][ T6104] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3192.707611][ T5709] usb 4-1: USB disconnect, device number 119 [ 3195.129157][ T5920] usb 1-1: USB disconnect, device number 57 [ 3195.311750][ T329] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 3195.664187][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 3196.535800][ T329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3196.551804][ T329] usb 2-1: config 0 has no interfaces? [ 3196.557399][ T329] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3196.567085][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3196.595606][ T329] usb 2-1: config 0 descriptor?? [ 3198.641232][ T6142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3198.669960][ T329] usb 2-1: USB disconnect, device number 18 [ 3198.962237][ T5709] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 3199.131907][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 3199.168309][ T5709] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 3199.177016][ T5709] usb 4-1: config 0 has no interface number 0 [ 3199.192871][ T6219] sctp: [Deprecated]: syz.2.6729 (pid 6219) Use of int in maxseg socket option. [ 3199.192871][ T6219] Use struct sctp_assoc_value instead [ 3199.207439][ T5709] usb 4-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3199.668826][ T5709] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3199.693362][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3199.718851][ T5709] usb 4-1: Product: syz [ 3199.727269][ T5709] usb 4-1: Manufacturer: syz [ 3199.732508][ T5709] usb 4-1: SerialNumber: syz [ 3199.759139][ T5709] usb 4-1: config 0 descriptor?? [ 3200.431871][ T5934] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3200.592225][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 3200.606847][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3200.618486][ T5934] usb 5-1: config 0 has no interfaces? [ 3200.624264][ T5934] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3200.669812][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3200.774632][ T5934] usb 5-1: config 0 descriptor?? [ 3201.747367][ T6260] openvswitch: netlink: Key 12 has unexpected len 644 expected 2 [ 3202.296911][ T5920] usb 4-1: USB disconnect, device number 120 [ 3202.941849][ T4009] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 3203.111870][ T4009] usb 4-1: Using ep0 maxpacket: 8 [ 3203.134743][ T4009] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3203.150580][ T4009] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 3203.341785][ T4009] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 3203.379032][ T4009] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 3203.430566][ T4009] usb 4-1: config 8 has no interface number 0 [ 3203.603862][ T4009] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 3203.622480][ T4009] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3203.633958][ T4009] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3203.644864][ T4009] usb 4-1: config 8 interface 24 has no altsetting 0 [ 3204.304874][ T4009] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 3204.319502][ T4009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3204.343251][ T4009] usb 4-1: Product: syz [ 3204.347510][ T4009] usb 4-1: Manufacturer: syz [ 3204.374341][ T4009] usb 4-1: SerialNumber: syz [ 3204.577477][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3204.588253][ T6285] netlink: 'syz.2.6752': attribute type 9 has an invalid length. [ 3204.595289][ T5920] usb 5-1: USB disconnect, device number 25 [ 3204.712346][ T6285] netlink: 146708 bytes leftover after parsing attributes in process `syz.2.6752'. [ 3204.755657][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.763524][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.855048][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3204.865532][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3204.880729][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6746'. [ 3205.445057][ T6293] could not allocate digest TFM handle poly1305-simd [ 3205.553158][ T6315] sctp: [Deprecated]: syz.1.6758 (pid 6315) Use of int in maxseg socket option. [ 3205.553158][ T6315] Use struct sctp_assoc_value instead [ 3206.620814][ T6333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3206.674245][ T5920] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3206.693169][ T6334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3206.961177][ T5920] usb 1-1: config 0 has no interfaces? [ 3206.974126][ T5920] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3206.998654][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3207.056521][ T5920] usb 1-1: Product: syz [ 3207.082904][ T5920] usb 1-1: Manufacturer: syz [ 3207.130539][ T5920] usb 1-1: SerialNumber: syz [ 3207.157089][ T5920] usb 1-1: config 0 descriptor?? [ 3208.200067][ T4009] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 3208.245880][ T4009] vmk80xx 4-1:8.24: probe with driver vmk80xx failed with error -22 [ 3208.348606][ T4009] usb 4-1: USB disconnect, device number 121 [ 3208.902437][ T4009] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 3209.076903][ T4009] usb 3-1: Using ep0 maxpacket: 32 [ 3209.094230][ T4009] usb 3-1: config 0 has no interfaces? [ 3209.100012][ T4009] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3209.118659][ T4009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3209.165345][ T4009] usb 3-1: config 0 descriptor?? [ 3209.406811][ T5934] usb 3-1: USB disconnect, device number 100 [ 3209.991901][ T5934] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3210.154001][ T6107] usb 1-1: USB disconnect, device number 58 [ 3210.155035][ T6388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3210.182391][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 3210.233684][ T5920] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 3210.233777][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3210.289573][ T5934] usb 5-1: config 0 has no interfaces? [ 3210.308751][ T5934] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3210.360654][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3210.392797][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 3210.407342][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3210.435765][ T5920] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 3210.448216][ T5934] usb 5-1: config 0 descriptor?? [ 3210.454814][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3210.493520][ T5920] usb 2-1: Product: syz [ 3210.519604][ T5920] usb 2-1: Manufacturer: syz [ 3210.534319][ T5920] usb 2-1: SerialNumber: syz [ 3210.558654][ T5920] usb 2-1: config 0 descriptor?? [ 3210.778055][ T5920] ath6kl: Failed to submit usb control message: -71 [ 3210.784938][ T5920] ath6kl: unable to send the bmi data to the device: -71 [ 3210.804300][ T5920] ath6kl: Unable to send get target info: -71 [ 3210.821443][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 3210.845967][ T5920] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3211.068991][ T5920] usb 2-1: USB disconnect, device number 19 [ 3211.851891][ T5920] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 3212.011966][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 3212.045412][ T5920] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3212.056720][ T5920] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3212.391730][ T5920] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3212.493170][ T5920] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3212.574851][ T5920] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3212.590533][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3212.605112][ T5920] usb 2-1: Product: syz [ 3212.620700][ T5920] usb 2-1: Manufacturer: syz [ 3212.633116][ T5920] usb 2-1: SerialNumber: syz [ 3212.691391][ T5920] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input162 [ 3212.811990][ T329] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 3212.909689][ T5920] imon:send_packet: packet tx failed (-71) [ 3212.937530][ T6380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3212.947796][ T5920] imon 2-1:155.0: panel buttons/knobs setup failed [ 3212.957909][ T5709] usb 5-1: USB disconnect, device number 26 [ 3212.966420][ T5920] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3212.972269][ T329] usb 4-1: Using ep0 maxpacket: 8 [ 3212.988481][ T5920] (id 0x00) [ 3213.004893][ T329] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3213.034195][ T329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3213.090072][ T329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3213.112966][ T329] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3213.145291][ T329] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3213.173685][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3213.222030][ T5920] rc_core: IR keymap rc-imon-pad not found [ 3213.228849][ T5920] Registered IR keymap rc-empty [ 3213.236276][ T5920] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3213.247024][ T5920] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3213.266483][ T5920] imon:send_packet: packet tx failed (-71) [ 3213.309435][ T5920] imon 2-1:155.0: remote input dev register failed [ 3213.318620][ T5920] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 3213.404609][ T6419] sctp: [Deprecated]: syz.4.6788 (pid 6419) Use of int in maxseg socket option. [ 3213.404609][ T6419] Use struct sctp_assoc_value instead [ 3213.492089][ T329] usb 4-1: GET_CAPABILITIES returned 0 [ 3213.498297][ T329] usbtmc 4-1:16.0: can't read capabilities [ 3213.709755][ T6404] loop4: detected capacity change from 0 to 524255232 [ 3213.749266][ T6422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3213.774331][ T329] usb 4-1: USB disconnect, device number 122 [ 3213.813111][ T5920] imon 2-1:155.0: unable to initialize intf0, err 0 [ 3213.819868][ T5920] imon:imon_probe: failed to initialize context! [ 3213.851143][ T5920] imon 2-1:155.0: unable to register, err -19 [ 3213.887835][ T5920] usb 2-1: USB disconnect, device number 20 [ 3214.032616][ T6107] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3214.216646][ T6107] usb 3-1: Using ep0 maxpacket: 32 [ 3214.248029][ T6107] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3214.262602][ T6107] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3214.279293][ T6107] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 3214.301950][ T6107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3214.321942][ T4009] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3214.337363][ T6107] usb 3-1: config 0 descriptor?? [ 3214.386953][ T6430] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 3214.415337][ T6430] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3214.471999][ T4009] usb 1-1: Using ep0 maxpacket: 32 [ 3214.488231][ T4009] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 3214.509062][ T6433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3214.529740][ T4009] usb 1-1: config 0 has no interface number 0 [ 3214.551779][ T4009] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3214.566408][ T4009] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3214.575987][ T4009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3214.666858][ T4009] usb 1-1: Product: syz [ 3214.683534][ T4009] usb 1-1: Manufacturer: syz [ 3214.689141][ T4009] usb 1-1: SerialNumber: syz [ 3214.707685][ T4009] usb 1-1: config 0 descriptor?? [ 3214.744568][ T4009] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3214.757427][ T4009] em28xx 1-1:0.132: Video interface 132 found: [ 3214.821844][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3214.866924][ T6107] usbhid 3-1:0.0: can't add hid device: -71 [ 3214.906761][ T6107] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3214.944232][ T6107] usb 3-1: USB disconnect, device number 101 [ 3215.144425][ T4009] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 3215.436633][ T6444] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 3215.448582][ T6444] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 3215.457120][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.3.6798 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 3215.469130][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3215.479233][ T6444] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 3215.484660][ T6444] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 1d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 3a 4f 3e f8 85 [ 3215.504305][ T6444] RSP: 0018:ffffc9000d21f0b0 EFLAGS: 00010206 [ 3215.510407][ T6444] RAX: ffffffff89821373 RBX: 00000000000001a8 RCX: 0000000000080000 [ 3215.518405][ T6444] RDX: ffffc9000c8cd000 RSI: 000000000000035a RDI: 000000000000035b [ 3215.526408][ T6444] RBP: dffffc0000000000 R08: ffff888033820000 R09: 0000000000000002 [ 3215.534851][ T6444] R10: 00000000ffffffff R11: ffffffff89821350 R12: dffffc0000000000 [ 3215.542873][ T6444] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880322ca000 [ 3215.550890][ T6444] FS: 00007fd3b71126c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 3215.559870][ T6444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3215.566521][ T6444] CR2: 000000110c28f442 CR3: 0000000062f20000 CR4: 00000000003526f0 [ 3215.574528][ T6444] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 3215.582531][ T6444] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3215.590526][ T6444] Call Trace: [ 3215.593820][ T6444] [ 3215.596790][ T6444] qdisc_tree_reduce_backlog+0x29c/0x480 [ 3215.602472][ T6444] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 3215.608240][ T6444] codel_change+0x859/0xae0 [ 3215.612761][ T6444] ? is_dynamic_key+0xd6/0x1c0 [ 3215.617546][ T6444] ? qdisc_alloc+0x789/0xaa0 [ 3215.622159][ T6444] ? qdisc_create+0x12c/0xea0 [ 3215.626868][ T6444] ? rtnetlink_rcv_msg+0x779/0xb70 [ 3215.632012][ T6444] ? netlink_rcv_skb+0x208/0x470 [ 3215.636965][ T6444] ? netlink_unicast+0x75b/0x8d0 [ 3215.641927][ T6444] ? netlink_sendmsg+0x805/0xb30 [ 3215.646895][ T6444] ? __sock_sendmsg+0x21c/0x270 [ 3215.651757][ T6444] ? ____sys_sendmsg+0x505/0x830 [ 3215.656728][ T6444] ? ___sys_sendmsg+0x21f/0x2a0 [ 3215.661616][ T6444] ? __x64_sys_sendmsg+0x19b/0x260 [ 3215.666752][ T6444] ? __pfx_codel_change+0x10/0x10 [ 3215.671808][ T6444] codel_init+0x1f7/0x3e0 [ 3215.676173][ T6444] ? __pfx_codel_init+0x10/0x10 [ 3215.681055][ T6444] qdisc_create+0x7ac/0xea0 [ 3215.685582][ T6444] tc_modify_qdisc+0x1426/0x2010 [ 3215.690566][ T6444] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 3215.695880][ T6444] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 3215.701181][ T6444] rtnetlink_rcv_msg+0x779/0xb70 [ 3215.706170][ T6444] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3215.711313][ T6444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3215.716820][ T6444] ? ref_tracker_free+0x63a/0x7d0 [ 3215.721944][ T6444] ? __copy_skb_header+0xa7/0x550 [ 3215.727000][ T6444] ? __pfx_ref_tracker_free+0x10/0x10 [ 3215.732391][ T6444] netlink_rcv_skb+0x208/0x470 [ 3215.737199][ T6444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3215.742683][ T6444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3215.747987][ T6444] ? netlink_deliver_tap+0x2e/0x1b0 [ 3215.753211][ T6444] ? netlink_deliver_tap+0x2e/0x1b0 [ 3215.758438][ T6444] netlink_unicast+0x75b/0x8d0 [ 3215.763313][ T6444] netlink_sendmsg+0x805/0xb30 [ 3215.768098][ T6444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3215.773413][ T6444] ? aa_sock_msg_perm+0x94/0x160 [ 3215.778380][ T6444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3215.783675][ T6444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3215.788987][ T6444] __sock_sendmsg+0x21c/0x270 [ 3215.793674][ T6444] ____sys_sendmsg+0x505/0x830 [ 3215.798467][ T6444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3215.803772][ T6444] ? import_iovec+0x74/0xa0 [ 3215.808307][ T6444] ___sys_sendmsg+0x21f/0x2a0 [ 3215.813003][ T6444] ? __pfx____sys_sendmsg+0x10/0x10 [ 3215.818240][ T6444] ? __fget_files+0x2a/0x420 [ 3215.822848][ T6444] ? __fget_files+0x3a0/0x420 [ 3215.827576][ T6444] __x64_sys_sendmsg+0x19b/0x260 [ 3215.832535][ T6444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3215.838019][ T6444] ? rcu_is_watching+0x15/0xb0 [ 3215.842813][ T6444] ? do_syscall_64+0xbe/0x3b0 [ 3215.847532][ T6444] do_syscall_64+0xfa/0x3b0 [ 3215.852045][ T6444] ? lockdep_hardirqs_on+0x9c/0x150 [ 3215.857258][ T6444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3215.863344][ T6444] ? clear_bhb_loop+0x60/0xb0 [ 3215.868046][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3215.873959][ T6444] RIP: 0033:0x7fd3b638e929 [ 3215.878392][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3215.898101][ T6444] RSP: 002b:00007fd3b7112038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3215.906531][ T6444] RAX: ffffffffffffffda RBX: 00007fd3b65b5fa0 RCX: 00007fd3b638e929 [ 3215.914526][ T6444] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004 [ 3215.922594][ T6444] RBP: 00007fd3b6410b39 R08: 0000000000000000 R09: 0000000000000000 [ 3215.930578][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3215.938546][ T6444] R13: 0000000000000000 R14: 00007fd3b65b5fa0 R15: 00007fd3b66dfa28 [ 3215.946573][ T6444] [ 3215.949621][ T6444] Modules linked in: [ 3215.953689][ C1] vkms_vblank_simulate: vblank timer overrun [ 3215.959704][ T6444] ---[ end trace 0000000000000000 ]--- [ 3215.965213][ T6444] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 3215.970625][ T6444] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 1d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 3a 4f 3e f8 85 [ 3215.990469][ T6444] RSP: 0018:ffffc9000d21f0b0 EFLAGS: 00010206 [ 3215.996565][ T6444] RAX: ffffffff89821373 RBX: 00000000000001a8 RCX: 0000000000080000 [ 3216.004574][ T6444] RDX: ffffc9000c8cd000 RSI: 000000000000035a RDI: 000000000000035b [ 3216.012581][ T6444] RBP: dffffc0000000000 R08: ffff888033820000 R09: 0000000000000002 [ 3216.020584][ T6444] R10: 00000000ffffffff R11: ffffffff89821350 R12: dffffc0000000000 [ 3216.028683][ T6444] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880322ca000 [ 3216.036689][ T6444] FS: 00007fd3b71126c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 3216.045657][ T6444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3216.052278][ T6444] CR2: 000000110c28f442 CR3: 0000000062f20000 CR4: 00000000003526f0 [ 3216.060272][ T6444] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 3216.068290][ T6444] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3216.076328][ T6444] Kernel panic - not syncing: Fatal exception in interrupt [ 3216.083878][ T6444] Kernel Offset: disabled [ 3216.088209][ T6444] Rebooting in 86400 seconds..