last executing test programs: 9m37.168868377s ago: executing program 1 (id=396): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x55b2, &(0x7f0000000040)={0x0, 0xd6f2, 0x1, 0x3, 0xab}, &(0x7f00000000c0), &(0x7f0000000100)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x10, 0xfd, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x3, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = eventfd(0x1d18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000140)=r7, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) 9m35.343497769s ago: executing program 1 (id=402): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004800f9ffff7f0000fbdbdf250a"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9m34.783748044s ago: executing program 1 (id=403): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "1d670d6f"}]}}, 0x0}, 0x0) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x20000000) getresgid(0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) 9m31.034759577s ago: executing program 1 (id=411): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f0000000100)=""/195, 0x20ccaceb168dca84, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 9m30.343863456s ago: executing program 1 (id=413): epoll_create1(0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x0, 0x3fffe, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x4, 0xb27, 0x6, 0x0, 0x8}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={r6, 0x4}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x82) r7 = openat$audio1(0xffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, @in6={0xa, 0x0, 0x0, @private0}, @in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0x0, @private1}], 0x70) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r8, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0xce, 0x0, 0x0) ioctl$sock_netdev_private(r10, 0x8943, &(0x7f00000001c0)="a6cc04e2d8f1c38afbf14b29b86e3a") ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) 9m30.002874556s ago: executing program 1 (id=417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) socket(0x2, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x38}}, 0x24040050) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @l2={0x1f, 0x9, @none, 0x3, 0x1}, @generic={0x9, "125c5b1807dd69fdac9c0b8c679f"}, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1}) 9m29.359467804s ago: executing program 32 (id=417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) socket(0x2, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x38}}, 0x24040050) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, @l2={0x1f, 0x9, @none, 0x3, 0x1}, @generic={0x9, "125c5b1807dd69fdac9c0b8c679f"}, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1}) 4m10.291836393s ago: executing program 2 (id=1713): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl(r0, 0x8b21, &(0x7f0000000040)) 4m10.257762753s ago: executing program 2 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x2}) 4m9.944414449s ago: executing program 2 (id=1719): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) 4m9.84973338s ago: executing program 2 (id=1721): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f0000000100)=""/195, 0x20ccaceb168dca84, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 4m8.74281059s ago: executing program 2 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb0}}, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000300)={r3, 0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000003, 0x0) close(r0) 4m8.269240254s ago: executing program 2 (id=1727): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20000000000001ef, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x1, 0x7ffc1ffa}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000800f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x18, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}]}, 0x18}}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaac7866264a4bd46da50a544aaaaaaaa0074d47f480086dd6000000000083a00f34d8a70e39ca97bb65301d43894f130fe8000000000000022d0600000000000000000fe800000"], 0x0) 4m7.982212374s ago: executing program 33 (id=1727): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20000000000001ef, &(0x7f00000000c0)=[{0x200000000006, 0x7, 0x1, 0x7ffc1ffa}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x18, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}]}, 0x18}}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaac7866264a4bd46da50a544aaaaaaaa0074d47f480086dd6000000000083a00f34d8a70e39ca97bb65301d43894f130fe8000000000000022d0600000000000000000fe800000"], 0x0) 4m7.551355099s ago: executing program 4 (id=1733): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc00) inotify_rm_watch(r0, 0x0) 4m7.376454098s ago: executing program 4 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) 4m6.618575271s ago: executing program 4 (id=1736): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @multicast2}, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000040)=0x10000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) fcntl$setlease(r4, 0x400, 0x0) truncate(0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 4m6.16236248s ago: executing program 4 (id=1738): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f0000000100)=""/195, 0x20ccaceb168dca84, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 4m5.405975435s ago: executing program 4 (id=1740): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a20000ffffffff948ef66b0ee0b3d41b1b", @ANYRES8]) 4m5.070045659s ago: executing program 4 (id=1741): syz_open_dev$video4linux(&(0x7f0000000040), 0xfc, 0x2100) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) read(r3, &(0x7f0000000140)=""/237, 0xed) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r3) syz_io_uring_setup(0x6c1f, &(0x7f00000003c0)={0x0, 0xb788, 0x8, 0x2}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000080), 0x200000, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x24, 0x7fff, 0xa000004}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x10006, 0x401f, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.680898507s ago: executing program 34 (id=1741): syz_open_dev$video4linux(&(0x7f0000000040), 0xfc, 0x2100) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) read(r3, &(0x7f0000000140)=""/237, 0xed) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r3) syz_io_uring_setup(0x6c1f, &(0x7f00000003c0)={0x0, 0xb788, 0x8, 0x2}, &(0x7f00000002c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000080), 0x200000, 0x4) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x24, 0x7fff, 0xa000004}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x10006, 0x401f, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m42.610632306s ago: executing program 7 (id=2486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x141200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001080)={0x1, 0x0, [{0x201, 0x0, 0x5}]}) 1m42.299493409s ago: executing program 7 (id=2489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) 1m42.1253686s ago: executing program 7 (id=2491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1m41.893629835s ago: executing program 7 (id=2494): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f0000004500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 1m41.760965135s ago: executing program 7 (id=2496): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002214060000"], 0x0}, 0x0) 1m41.362078299s ago: executing program 7 (id=2500): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x10, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1m40.867386183s ago: executing program 35 (id=2500): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x10, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 34.509653171s ago: executing program 8 (id=2951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000008b04"]) 34.209692827s ago: executing program 8 (id=2955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) 34.038955786s ago: executing program 8 (id=2959): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x28}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 33.949170562s ago: executing program 8 (id=2960): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x100018}}, 0x50) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f00000021c0), 0x24, 0x0) 32.958884014s ago: executing program 8 (id=2965): r0 = syz_io_uring_setup(0x7667, &(0x7f0000000100)={0x0, 0x0, 0x13580}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 32.773086551s ago: executing program 8 (id=2967): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x80000000, r0, 0xc, {0x7, 0x9}, 0x9a}, 0x1) 32.334450783s ago: executing program 36 (id=2967): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x80000000, r0, 0xc, {0x7, 0x9}, 0x9a}, 0x1) 6.147811561s ago: executing program 6 (id=3131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x5, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x48}}, 0x0) 5.942504232s ago: executing program 6 (id=3135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) eventfd2(0x0, 0x80800) 5.453886558s ago: executing program 0 (id=3152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x7ff, 0x0, 0x2000000000903, 0x9, 0x6}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x19) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20044}, 0x20008850) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1}) ioctl$KVM_CAP_X86_GUEST_MODE(r11, 0x4068aea3, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000001c0)=ANY=[]) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.734951439s ago: executing program 0 (id=3145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000070000000000000001"]) 4.596748059s ago: executing program 6 (id=3146): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000002, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) gettid() 3.897476093s ago: executing program 6 (id=3147): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.882532309s ago: executing program 0 (id=3159): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500040001000000140007"], 0x90}}, 0x0) 3.185341803s ago: executing program 5 (id=3155): unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, 0x0}) 3.096384551s ago: executing program 9 (id=3156): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'lo\x00'}}, 0x1e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 2.961628261s ago: executing program 5 (id=3158): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 2.758798287s ago: executing program 9 (id=3162): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_io_uring_setup(0x742b, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x2000, 0x0, 0x0, 0x0) 2.51035474s ago: executing program 9 (id=3163): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr\x00') fchdir(r0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0xffffffff, 0x80000}) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2.505706685s ago: executing program 5 (id=3173): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"], 0x48) 2.442976606s ago: executing program 3 (id=3164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000830000c0", @ANYRESDEC]) 2.290679228s ago: executing program 0 (id=3165): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) preadv(r1, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/66, 0x42}], 0x1, 0x329, 0x3) 2.290478299s ago: executing program 9 (id=3166): r0 = msgget(0x2, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) msgctl$IPC_INFO(r0, 0x3, 0x0) 2.275012518s ago: executing program 5 (id=3167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2"], 0xfdef) 2.110213021s ago: executing program 3 (id=3168): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x10}], 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 2.0801698s ago: executing program 9 (id=3169): landlock_create_ruleset(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c00031000"], 0xf) 1.905443395s ago: executing program 9 (id=3170): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) close(r1) 1.903842168s ago: executing program 5 (id=3171): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x58, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 1.75451548s ago: executing program 6 (id=3172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 1.705048945s ago: executing program 3 (id=3174): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'lo\x00'}}, 0x1e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 1.701165075s ago: executing program 5 (id=3184): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.47497733s ago: executing program 6 (id=3175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f00000083084070ac0b00"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)={0x6, 0x100, 0x81}) 296.317419ms ago: executing program 0 (id=3176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) 295.65208ms ago: executing program 3 (id=3187): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 83.190371ms ago: executing program 0 (id=3177): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "e6feffc9"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 82.995691ms ago: executing program 3 (id=3178): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x2}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x40000025}, 0x4000040) 0s ago: executing program 3 (id=3179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x5, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.5.2424'. [ 695.752025][ T25] usb 4-1: Product: syz [ 695.781316][ T25] usb 4-1: Manufacturer: syz [ 695.801799][ T25] usb 4-1: SerialNumber: syz [ 695.822469][ T25] usb 4-1: config 0 descriptor?? [ 696.217673][T11823] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 696.306329][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2429'. [ 696.448078][T11823] usb 6-1: Using ep0 maxpacket: 32 [ 696.459280][T14014] syz.7.2429 (14014): drop_caches: 2 [ 696.474352][T11823] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 696.518260][T11823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.563047][T11823] usb 6-1: Product: syz [ 696.589162][T11823] usb 6-1: Manufacturer: syz [ 696.610681][T11823] usb 6-1: SerialNumber: syz [ 696.638861][T11823] usb 6-1: config 0 descriptor?? [ 696.705650][T11823] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 696.777596][ T5898] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 696.983800][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.040062][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.070173][ T5898] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 697.090736][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.104401][T14038] syz.6.2441: attempt to access beyond end of device [ 697.104401][T14038] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 697.121763][ T5898] usb 8-1: config 0 descriptor?? [ 697.508792][T11823] gspca_ov534_9: reg_w failed -71 [ 697.541015][ T5898] usbhid 8-1:0.0: can't add hid device: -71 [ 697.589718][ T5898] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 697.613846][ T5843] usb 4-1: USB disconnect, device number 17 [ 697.630196][ T5898] usb 8-1: USB disconnect, device number 43 [ 697.803500][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2444'. [ 697.845255][T14047] syz.3.2444 (14047): drop_caches: 2 [ 697.867784][T11823] gspca_ov534_9: Unknown sensor 0000 [ 697.867859][T11823] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 697.905875][T11823] usb 6-1: USB disconnect, device number 112 [ 698.149473][ T7914] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 698.188783][T14050] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 698.378860][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.395115][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.414491][ T7914] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 698.438287][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.459321][ T7914] usb 4-1: config 0 descriptor?? [ 698.507655][ T5898] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 698.689777][ T5898] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.719173][ T5898] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.742459][ T5898] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.768431][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.842925][ T5898] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.870871][ T5898] usb 7-1: invalid MIDI out EP 0 [ 699.028007][ T5897] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 699.041446][T14080] syz.7.2457: attempt to access beyond end of device [ 699.041446][T14080] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 699.043257][ T5898] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 699.081796][ T7914] usbhid 4-1:0.0: can't add hid device: -71 [ 699.095971][ T7914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 699.117014][ T7914] usb 4-1: USB disconnect, device number 18 [ 699.253814][ T5898] usb 7-1: USB disconnect, device number 40 [ 699.305038][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.414985][ T5897] usb 6-1: config 0 has no interfaces? [ 699.553106][ T5897] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 699.582628][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.591702][T14084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2458'. [ 699.626848][ T5897] usb 6-1: Product: syz [ 699.643625][ T5897] usb 6-1: Manufacturer: syz [ 699.657821][ T5897] usb 6-1: SerialNumber: syz [ 699.731050][ T5897] usb 6-1: config 0 descriptor?? [ 700.066822][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2461'. [ 700.097923][ T7914] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 700.118526][T14090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 700.267811][ T7914] usb 4-1: Using ep0 maxpacket: 16 [ 700.291482][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.332869][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.385063][ T7914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 700.417195][ T7914] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 700.429178][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.443705][ T7914] usb 4-1: config 0 descriptor?? [ 700.931661][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 700.939254][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 700.946748][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 700.955006][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 700.962881][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 700.971490][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 700.986422][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 700.997035][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 701.019041][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 701.043936][ T7914] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0 [ 701.097595][T11823] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 701.111341][ T7914] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0088/input/input123 [ 701.221308][ T7914] microsoft 0003:045E:07DA.0088: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 701.264443][ T7914] usb 4-1: USB disconnect, device number 19 [ 701.287693][T11823] usb 7-1: Using ep0 maxpacket: 8 [ 701.299959][T11823] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 701.315786][T11823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.331882][T11823] usb 7-1: Product: syz [ 701.337196][T11823] usb 7-1: Manufacturer: syz [ 701.342434][T11823] usb 7-1: SerialNumber: syz [ 701.360755][T11823] usb 7-1: config 0 descriptor?? [ 701.379544][T11823] gspca_main: se401-2.14.0 probing 047d:5003 [ 701.498362][ T5843] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 701.596785][T14110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.618640][T14110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.657933][ T5843] usb 8-1: Using ep0 maxpacket: 16 [ 701.672160][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 701.711448][ T5843] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 701.727621][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.738463][ T5843] usb 8-1: Product: syz [ 701.742705][ T5843] usb 8-1: Manufacturer: syz [ 701.756413][ T5843] usb 8-1: SerialNumber: syz [ 701.769473][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 701.779711][ T5850] usb 6-1: USB disconnect, device number 113 [ 701.790242][ T5843] usb 8-1: config 0 descriptor?? [ 701.812022][ T5843] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 701.831986][ T5843] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 701.846506][T11823] gspca_se401: ExtraFeatures: 85 [ 701.852039][T11823] gspca_se401: Frame size: 0x0 1/16th janggu [ 701.859786][T11823] gspca_se401: Frame size: 256x521 bayer [ 701.865668][T11823] gspca_se401: Frame size: 36x1 bayer [ 701.871861][T11823] gspca_se401: Frame size: 0x2304 bayer [ 701.951434][ T25] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 701.960925][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.972261][ T25] usb 1-1: config 0 descriptor?? [ 702.052544][T11823] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input124 [ 702.073876][T11823] usb 7-1: USB disconnect, device number 41 [ 702.080152][ T7914] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 702.237610][ T5850] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 702.279307][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.290627][ T7914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.300852][ T7914] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 702.313686][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.327271][ T7914] usb 4-1: config 0 descriptor?? [ 702.385122][ T25] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 702.399401][ T5850] usb 6-1: config 0 has no interfaces? [ 702.407121][ T5850] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.416419][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.425840][ T5843] em28xx 8-1:0.0: chip ID is em2710 [ 702.433416][ T5850] usb 6-1: Product: syz [ 702.439260][ T5850] usb 6-1: Manufacturer: syz [ 702.443925][ T5850] usb 6-1: SerialNumber: syz [ 702.455323][ T5850] usb 6-1: config 0 descriptor?? [ 702.586864][ T25] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 702.612414][ T25] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 702.683034][ T5897] usb 6-1: USB disconnect, device number 114 [ 702.706804][ T5843] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 702.716792][ T5843] em28xx 8-1:0.0: board has no eeprom [ 702.755421][ T7914] hid-steam 0003:28DE:1142.0089: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 702.778699][ T5843] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 702.797167][ T5843] em28xx 8-1:0.0: dvb set to bulk mode. [ 702.809392][ T25] em28xx 8-1:0.0: Binding DVB extension [ 702.832620][ T5843] usb 8-1: USB disconnect, device number 44 [ 702.838854][ T7914] hid-steam 0003:28DE:1142.0089: Steam wireless receiver connected [ 702.860988][ T5843] em28xx 8-1:0.0: Disconnecting em28xx [ 702.873022][ T5897] usb 1-1: USB disconnect, device number 29 [ 702.913642][ T7914] hid-steam 0003:28DE:1142.008A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 702.963067][ T25] em28xx 8-1:0.0: Registering input extension [ 702.974359][ T5843] em28xx 8-1:0.0: Closing input extension [ 703.016934][ T7914] usb 4-1: USB disconnect, device number 20 [ 703.056385][ T5843] em28xx 8-1:0.0: Freeing device [ 703.083241][ T7914] hid-steam 0003:28DE:1142.0089: Steam wireless receiver disconnected [ 703.757633][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 703.870706][T14146] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2484'. [ 703.978938][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 704.010757][ T25] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 704.037786][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.056796][ T25] usb 1-1: Product: syz [ 704.075639][ T25] usb 1-1: Manufacturer: syz [ 704.089498][ T25] usb 1-1: SerialNumber: syz [ 704.116439][ T25] usb 1-1: config 0 descriptor?? [ 704.475979][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2491'. [ 704.761501][ T25] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 704.787648][ T25] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 704.816771][ T25] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 704.919510][ T25] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 704.998656][ T25] usb 1-1: USB disconnect, device number 30 [ 705.017026][T14177] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2497'. [ 705.087871][ T7914] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 705.263444][ T7914] usb 6-1: config 0 has no interfaces? [ 705.292704][ T7914] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 705.322650][ T7914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.355285][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.400951][ T7914] usb 6-1: Product: syz [ 705.405188][ T7914] usb 6-1: Manufacturer: syz [ 705.452938][ T7914] usb 6-1: SerialNumber: syz [ 705.492862][ T7914] usb 6-1: config 0 descriptor?? [ 705.605421][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.720801][ T29] audit: type=1326 audit(1732299127.578:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.0.2502" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f32579 code=0x0 [ 706.036608][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.205901][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 706.223561][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 706.250700][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 706.266566][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 706.275213][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 706.284181][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 706.355936][ T11] team0: Port device vlan2 removed [ 706.386624][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.721421][ T11] bridge_slave_1: left allmulticast mode [ 706.752627][ T11] bridge_slave_1: left promiscuous mode [ 706.777505][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.836266][ T11] bridge_slave_0: left allmulticast mode [ 706.877568][ T11] bridge_slave_0: left promiscuous mode [ 706.890057][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.646397][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.660803][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.671582][ T11] bond0 (unregistering): Released all slaves [ 707.692841][T14211] netlink: 'syz.6.2510': attribute type 1 has an invalid length. [ 707.835855][ T11] tipc: Left network mode [ 708.235450][T14196] chnl_net:caif_netlink_parms(): no params data found [ 708.297685][ T7914] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 708.339072][ T5849] Bluetooth: hci2: command tx timeout [ 708.437308][ T5843] usb 6-1: USB disconnect, device number 115 [ 708.494868][ T11] hsr_slave_0: left promiscuous mode [ 708.508101][ T7914] usb 4-1: Using ep0 maxpacket: 8 [ 708.518860][ T7914] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 708.527244][ T11] hsr_slave_1: left promiscuous mode [ 708.527307][ T7914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.543736][ T7914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 708.553975][ T7914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.563447][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.564211][ T7914] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.594867][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.597535][ T7914] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 708.621284][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.627519][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.649508][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.697261][ T11] veth1_macvtap: left promiscuous mode [ 708.717582][ T11] veth0_macvtap: left promiscuous mode [ 708.727704][ T11] veth1_vlan: left promiscuous mode [ 708.733221][ T11] @ÿ: left promiscuous mode [ 708.860785][ T7914] usb 4-1: GET_CAPABILITIES returned 0 [ 708.878842][ T7914] usbtmc 4-1:16.0: can't read capabilities [ 709.156471][ T7914] usb 4-1: USB disconnect, device number 21 [ 709.718178][ T11] team0 (unregistering): Port device team_slave_1 removed [ 709.801793][ T11] team0 (unregistering): Port device team_slave_0 removed [ 710.413708][T14259] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2522'. [ 710.423141][ T5849] Bluetooth: hci2: command tx timeout [ 710.569410][T14196] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.584654][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.606283][T14196] bridge_slave_0: entered allmulticast mode [ 710.641913][T14196] bridge_slave_0: entered promiscuous mode [ 710.653677][T14267] ALSA: mixer_oss: invalid OSS volume '' [ 710.675733][T14196] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.714957][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.767958][T14196] bridge_slave_1: entered allmulticast mode [ 710.775025][T14196] bridge_slave_1: entered promiscuous mode [ 710.879062][T14271] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2525'. [ 710.933390][T14196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.990236][T14196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.029405][T14278] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2525'. [ 711.038654][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 711.107724][ T7914] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 711.140363][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2525'. [ 711.234540][ T5897] usb 4-1: config 0 has no interfaces? [ 711.319777][T14196] team0: Port device team_slave_0 added [ 711.356335][T14196] team0: Port device team_slave_1 added [ 711.380480][ T7914] usb 6-1: config 0 has no interfaces? [ 711.398847][ T7914] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 711.512565][ T7914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 711.597583][ T7914] usb 6-1: Product: syz [ 711.623920][ T7914] usb 6-1: Manufacturer: syz [ 711.662413][ T7914] usb 6-1: SerialNumber: syz [ 711.690739][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 711.703746][T14196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.732443][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.763614][ T7914] usb 6-1: config 0 descriptor?? [ 711.766110][ T5897] usb 4-1: Product: syz [ 711.773327][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.799225][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.846520][ T5897] usb 4-1: Manufacturer: syz [ 711.896423][T14196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.898005][ T5897] usb 4-1: SerialNumber: syz [ 711.939528][T14196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.967499][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.004561][ T5897] usb 4-1: config 0 descriptor?? [ 712.088380][T14196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.094129][ T5897] usb 6-1: USB disconnect, device number 116 [ 712.191901][T14196] hsr_slave_0: entered promiscuous mode [ 712.198533][T14196] hsr_slave_1: entered promiscuous mode [ 712.235300][T14196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.256096][T14196] Cannot create hsr debugfs directory [ 712.497772][ T5849] Bluetooth: hci2: command tx timeout [ 712.617695][ T5897] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 712.775435][T14196] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 712.790429][ T5897] usb 7-1: config 0 interface 0 has no altsetting 0 [ 712.810415][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 712.834235][T14196] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 712.852761][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.874059][T14196] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 712.882828][ T5897] usb 7-1: config 0 descriptor?? [ 712.910128][T14196] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 713.057868][ T9257] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 713.100208][T14196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.133705][T14196] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.146473][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.153708][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.201990][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.209212][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.217674][ T9257] usb 1-1: Using ep0 maxpacket: 32 [ 713.233174][ T9257] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 713.257624][ T9257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.281034][T14318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2533'. [ 713.294659][ T9257] usb 1-1: config 0 descriptor?? [ 713.299046][T14196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 713.326904][ T9257] gspca_main: sunplus-2.14.0 probing 041e:400b [ 713.334607][T14196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.441842][T14196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.493289][T14318] syz.5.2533 (14318): drop_caches: 2 [ 713.568733][T14196] veth0_vlan: entered promiscuous mode [ 713.588709][T14196] veth1_vlan: entered promiscuous mode [ 713.639497][ T5898] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 713.661032][ T5910] usb 4-1: USB disconnect, device number 22 [ 713.673218][T14196] veth0_macvtap: entered promiscuous mode [ 713.691563][T14196] veth1_macvtap: entered promiscuous mode [ 713.715025][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.728887][ T5897] video4linux radio48: keene_cmd_main failed (-71) [ 713.736075][ T5897] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 713.744250][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.757306][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.775467][ T5897] usb 7-1: USB disconnect, device number 42 [ 713.800567][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.824359][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.839294][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.858714][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.884102][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.887967][ T5898] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 713.901338][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.923779][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.948192][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.969041][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.989567][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.989646][ T5898] usb 6-1: config 0 descriptor?? [ 714.000871][T14196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.036886][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.068943][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.085217][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.095998][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.107173][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.122885][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.145160][T14196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.149537][ T9257] gspca_sunplus: reg_w_riv err -71 [ 714.160626][ T9257] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 714.163493][T14196] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.200429][ T9257] usb 1-1: USB disconnect, device number 31 [ 714.206487][T14196] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.246566][T14196] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.268315][T14196] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.435967][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.464782][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.521465][ T5898] usbhid 6-1:0.0: can't add hid device: -71 [ 714.536287][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.546699][ T5898] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 714.548692][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.565621][ T5898] usb 6-1: USB disconnect, device number 117 [ 714.577867][ T5849] Bluetooth: hci2: command tx timeout [ 715.147894][ T5899] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 715.496653][ T5899] usb 9-1: no configurations [ 715.517509][ T5899] usb 9-1: can't read configurations, error -22 [ 715.547851][ T5843] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 715.707781][ T5899] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 715.801870][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2542'. [ 715.938949][ T5843] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 715.983693][ T5843] usb 1-1: can't read configurations, error -61 [ 716.106614][ T5899] usb 9-1: no configurations [ 716.113901][ T5899] usb 9-1: can't read configurations, error -22 [ 716.151839][ T5899] usb usb9-port1: attempt power cycle [ 716.157926][ T5843] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 716.527651][ T5899] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 716.687581][ T5899] usb 9-1: no configurations [ 716.702549][ T5843] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 716.937714][ T5850] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 717.037662][ T5899] usb 9-1: can't read configurations, error -22 [ 717.111972][ T5850] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 717.121609][ T5898] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 717.163963][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.203767][ T5850] usb 6-1: Product: syz [ 717.216541][ T5850] usb 6-1: Manufacturer: syz [ 717.238790][ T5850] usb 6-1: SerialNumber: syz [ 717.255423][ T5850] usb 6-1: config 0 descriptor?? [ 717.297745][ T5898] usb 7-1: Using ep0 maxpacket: 8 [ 717.346309][ T5898] usb 7-1: unable to get BOS descriptor or descriptor too short [ 717.387039][ T5898] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 717.412769][ T5898] usb 7-1: can't read configurations, error -71 [ 717.447806][ T5897] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 717.693020][ T5850] usb 6-1: Firmware: major: 3, minor: 0, hardware type: ATUSB (0) [ 717.787659][ T5843] usb 1-1: can't read configurations, error -61 [ 717.812170][ T5843] usb usb1-port1: attempt power cycle [ 717.902393][ T5850] usb 6-1: failed to fetch extended address, random address set [ 718.233342][ T5850] usb 6-1: USB disconnect, device number 118 [ 718.277776][ T5899] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 718.562699][ T5897] usb 4-1: config 0 has no interfaces? [ 718.614759][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 718.637182][ T5899] usb 9-1: device descriptor read/8, error -71 [ 718.717678][T11823] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 718.725702][ T5843] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 718.760065][T14435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 718.776379][ T5899] usb usb9-port1: unable to enumerate USB device [ 718.806629][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.890810][ T5843] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 718.921755][T11823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.927661][ T5897] usb 4-1: Product: syz [ 718.943583][T11823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.955895][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 718.962723][T11823] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 718.972936][ T5843] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 718.988576][ T5843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 719.002644][T11823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.021795][ T5843] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.034094][T11823] usb 7-1: config 0 descriptor?? [ 719.059894][ T5843] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.098997][ T5843] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 719.119154][ T5897] usb 4-1: Manufacturer: syz [ 719.135953][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.188842][ T5897] usb 4-1: SerialNumber: syz [ 719.209051][ T5897] usb 4-1: config 0 descriptor?? [ 719.380864][ T5899] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 719.394709][ T5843] usb 1-1: GET_CAPABILITIES returned 0 [ 719.408312][ T5843] usbtmc 1-1:16.0: can't read capabilities [ 719.460693][T11823] hid-steam 0003:28DE:1142.008B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 719.556045][T11823] hid-steam 0003:28DE:1142.008B: Steam wireless receiver connected [ 719.577742][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 719.588771][T11823] hid-steam 0003:28DE:1142.008C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 719.601097][T14453] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 719.608497][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 719.626978][ T5843] usb 1-1: USB disconnect, device number 35 [ 719.652510][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 719.675387][T11823] usb 7-1: USB disconnect, device number 45 [ 719.703330][ T5899] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 719.726361][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.737520][T11823] hid-steam 0003:28DE:1142.008B: Steam wireless receiver disconnected [ 719.754786][ T5899] usb 6-1: Product: syz [ 719.797565][ T5899] usb 6-1: Manufacturer: syz [ 719.802528][ T5899] usb 6-1: SerialNumber: syz [ 719.814358][ T5899] usb 6-1: config 0 descriptor?? [ 719.821468][ T5899] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 719.831622][ T5899] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 719.985146][T14460] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2560'. [ 720.009534][T14460] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2560'. [ 720.458565][ T5899] em28xx 6-1:0.0: chip ID is em2765 [ 720.658858][ T5899] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 720.686629][ T5899] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 720.707783][ T5910] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 720.769524][ T5899] em28xx 6-1:0.0: No AC97 audio processor [ 720.815766][ T5899] usb 6-1: USB disconnect, device number 119 [ 720.842185][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 720.871752][ T5899] em28xx 6-1:0.0: Disconnecting em28xx [ 720.898865][ T5899] em28xx 6-1:0.0: Freeing device [ 720.997870][ T5910] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 721.005452][ T5910] usb 9-1: can't read configurations, error -61 [ 721.104152][ T5850] usb 4-1: USB disconnect, device number 23 [ 721.218424][ T5910] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 721.572389][ T5910] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 721.691903][ T5910] usb 9-1: can't read configurations, error -61 [ 721.788041][ T5910] usb usb9-port1: attempt power cycle [ 722.180068][ T5910] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 722.309460][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2572'. [ 722.377139][T14516] syz.0.2572 (14516): drop_caches: 2 [ 722.401230][ T5910] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 722.469854][ T5910] usb 9-1: can't read configurations, error -61 [ 722.491372][T14520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.677708][ T5910] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 722.687778][T11823] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 722.701677][ T5910] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 722.757938][ T5843] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 722.803652][ T5910] usb 9-1: can't read configurations, error -61 [ 722.835498][ T5910] usb usb9-port1: unable to enumerate USB device [ 722.893767][T11823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.918775][T11823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.939572][T11823] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 722.960209][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 722.976772][ T5843] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.000870][T11823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.016330][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 723.051967][T11823] usb 1-1: config 0 descriptor?? [ 723.073942][ T5843] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 723.130468][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.142599][ T5843] usb 4-1: config 0 descriptor?? [ 723.523846][T11823] cm6533_jd 0003:0D8C:0022.008D: unknown main item tag 0x0 [ 723.557692][T11823] cm6533_jd 0003:0D8C:0022.008D: item fetching failed at offset 4/5 [ 723.577685][ T5910] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 723.585763][T11823] cm6533_jd 0003:0D8C:0022.008D: parse failed [ 723.623325][ T5843] cougar 0003:060B:500A.008E: unexpected long global item [ 723.630843][T11823] cm6533_jd 0003:0D8C:0022.008D: probe with driver cm6533_jd failed with error -22 [ 723.688271][ T5843] cougar 0003:060B:500A.008E: parse failed [ 723.694199][ T5843] cougar 0003:060B:500A.008E: probe with driver cougar failed with error -22 [ 723.759025][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 723.764314][ T5843] usb 1-1: USB disconnect, device number 36 [ 723.820869][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 723.878004][ T5897] usb 4-1: USB disconnect, device number 24 [ 723.897012][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 723.911852][ T5910] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 723.921269][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.933102][ T5910] usb 7-1: Product: syz [ 723.938713][ T5910] usb 7-1: Manufacturer: syz [ 723.943405][ T5910] usb 7-1: SerialNumber: syz [ 723.965746][ T5910] usb 7-1: config 0 descriptor?? [ 723.978481][ T5910] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 723.989321][ T5910] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 724.420601][T14573] vlan2: entered allmulticast mode [ 724.599643][ T5910] em28xx 7-1:0.0: unknown em28xx chip ID (209) [ 724.687623][ T5897] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 724.800203][ T5910] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 724.827801][ T5910] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 724.856480][ T5910] em28xx 7-1:0.0: No AC97 audio processor [ 724.950500][ T5910] usb 7-1: USB disconnect, device number 46 [ 724.957384][ T5910] em28xx 7-1:0.0: Disconnecting em28xx [ 725.017830][ T5897] usb 6-1: config 0 has no interfaces? [ 725.126322][ T5910] em28xx 7-1:0.0: Freeing device [ 725.136697][ T5897] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.164689][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.232618][ T5897] usb 6-1: Product: syz [ 725.242951][ T5897] usb 6-1: Manufacturer: syz [ 725.262934][ T5897] usb 6-1: SerialNumber: syz [ 725.279488][ T5897] usb 6-1: config 0 descriptor?? [ 725.408100][T14605] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 725.735615][T14614] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2606'. [ 725.833742][T14621] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2606'. [ 725.865616][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2606'. [ 725.988449][ T5843] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 726.121909][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2612'. [ 726.147599][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 726.176661][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 726.207157][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 726.241961][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.280221][ T5843] usb 4-1: Product: syz [ 726.293417][ T5843] usb 4-1: Manufacturer: syz [ 726.332673][ T5843] usb 4-1: SerialNumber: syz [ 726.350480][ T5843] usb 4-1: config 0 descriptor?? [ 726.402646][ T5843] hub 4-1:0.0: bad descriptor, ignoring hub [ 726.411977][ T5843] hub 4-1:0.0: probe with driver hub failed with error -5 [ 726.469779][ T5843] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 726.694464][ T5843] gspca_zc3xx: reg_w_i err -71 [ 726.872071][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2616'. [ 727.302228][ T5843] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 727.349103][ T5843] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 727.430656][ T5897] usb 6-1: USB disconnect, device number 120 [ 727.768399][ T5843] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 728.587809][ T5897] usb 4-1: USB disconnect, device number 25 [ 728.866675][T14689] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2628'. [ 728.984474][T14691] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2629'. [ 729.286997][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2631'. [ 729.494525][ T5843] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 729.649578][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 729.668005][T14713] netlink: 'syz.6.2638': attribute type 9 has an invalid length. [ 729.681920][ T5843] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 729.702805][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.733233][ T5843] usb 9-1: Product: syz [ 729.743263][ T5843] usb 9-1: Manufacturer: syz [ 729.765113][ T5843] usb 9-1: SerialNumber: syz [ 729.777270][ T5843] usb 9-1: config 0 descriptor?? [ 729.783038][T14715] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 729.810576][ T5843] gspca_main: sq930x-2.14.0 probing 2770:930c [ 730.158546][T14732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2646'. [ 730.236596][T14732] syz.3.2646 (14732): drop_caches: 2 [ 730.477909][T14745] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2649'. [ 730.518773][ T5899] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 730.633823][ T5843] gspca_sq930x: ucbus_write failed -71 [ 730.702436][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.728902][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.762097][ T5899] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 730.792678][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.826176][ T5899] usb 4-1: config 0 descriptor?? [ 730.867714][ T5843] gspca_sq930x: Sensor ov9630 not yet treated [ 730.874206][ T5843] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 730.904757][ T5843] usb 9-1: USB disconnect, device number 10 [ 731.260842][ T5899] cm6533_jd 0003:0D8C:0022.008F: unknown main item tag 0x0 [ 731.291405][ T5899] cm6533_jd 0003:0D8C:0022.008F: item fetching failed at offset 3/5 [ 731.307785][ T5899] cm6533_jd 0003:0D8C:0022.008F: parse failed [ 731.314149][ T5899] cm6533_jd 0003:0D8C:0022.008F: probe with driver cm6533_jd failed with error -22 [ 731.475104][ T5899] usb 4-1: USB disconnect, device number 26 [ 731.484995][T14759] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2649'. [ 731.500250][T14759] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2649'. [ 731.555619][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2653'. [ 732.027566][ T5910] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 732.219830][ T5910] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 732.261872][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.305575][ T5910] usb 9-1: config 0 descriptor?? [ 732.337303][ T5910] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 732.537681][ T5910] gp8psk: usb in 128 operation failed. [ 732.552128][ T5910] gp8psk: usb in 137 operation failed. [ 732.611794][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 732.719179][ T5910] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 732.827894][ T5910] usb 9-1: media controller created [ 732.871196][T14795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2664'. [ 733.008927][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 733.008938][T14799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2666'. [ 733.232098][ T5910] gp8psk_fe: Frontend attached [ 733.251644][ T5910] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 733.293346][ T5910] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 733.528068][ T5899] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 733.780039][ T5899] usb 7-1: config 0 has no interfaces? [ 733.793128][ T5910] gp8psk: usb in 137 operation failed. [ 733.809768][ T5910] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 733.830058][ T5910] gp8psk: found Genpix USB device pID = 203 (hex) [ 733.854405][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2669'. [ 733.879410][ T5910] usb 9-1: USB disconnect, device number 11 [ 734.079216][ T5899] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 734.128439][ T5910] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 734.239399][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.341420][T14819] syz.5.2671: attempt to access beyond end of device [ 734.341420][T14819] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 734.383760][ T5899] usb 7-1: Product: syz [ 734.461126][ T5899] usb 7-1: Manufacturer: syz [ 734.537230][ T5899] usb 7-1: SerialNumber: syz [ 734.580602][ T5899] usb 7-1: config 0 descriptor?? [ 735.029622][T14851] syz.3.2676: attempt to access beyond end of device [ 735.029622][T14851] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 735.776055][T14874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.447615][ T5899] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 736.627691][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 736.651231][ T5899] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.677399][ T5899] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.728437][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 736.758306][T14909] tipc: Resetting bearer [ 736.777517][ T5899] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 736.787163][ T5910] usb 7-1: USB disconnect, device number 47 [ 736.817543][ T5899] usb 1-1: Product: syz [ 736.842672][ T5899] usb 1-1: Manufacturer: syz [ 736.863168][T14914] vcan0: entered allmulticast mode [ 736.911590][ T5899] hub 1-1:4.0: USB hub found [ 737.129818][ T5899] hub 1-1:4.0: 2 ports detected [ 737.377674][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 737.393183][T14936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2702'. [ 737.732671][ T25] usb 9-1: config 0 has no interfaces? [ 737.762916][ T5899] usb 1-1: USB disconnect, device number 37 [ 737.853547][ T25] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 737.894274][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.952876][ T25] usb 9-1: Product: syz [ 737.973052][ T25] usb 9-1: Manufacturer: syz [ 737.986438][ T25] usb 9-1: SerialNumber: syz [ 738.007037][ T25] usb 9-1: config 0 descriptor?? [ 738.647897][ T5899] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 738.849660][ T5899] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 738.921757][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.022367][ T5899] usb 1-1: config 0 descriptor?? [ 739.069398][ T5899] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 739.466464][T14992] bridge0: port 3(syz_tun) entered blocking state [ 739.475739][T14992] bridge0: port 3(syz_tun) entered disabled state [ 739.490536][T14992] syz_tun: entered allmulticast mode [ 739.507143][T14992] syz_tun: entered promiscuous mode [ 739.523591][ T5899] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 739.877977][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 739.925464][ T5899] gspca_cpia1: usb_control_msg 02, error -71 [ 739.942380][ T5899] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 739.990154][ T5899] usb 1-1: USB disconnect, device number 38 [ 740.047641][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 740.065985][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 740.080151][ T25] usb 4-1: config 0 has no interface number 0 [ 740.106484][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 740.120181][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 740.130435][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.145159][ T25] usb 4-1: config 0 descriptor?? [ 740.189921][ T25] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 740.315370][ T25] usb 9-1: USB disconnect, device number 12 [ 740.442554][ T7914] usb 4-1: USB disconnect, device number 27 [ 740.473100][ T7914] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 740.597946][ T5898] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 740.767630][ T5898] usb 6-1: Using ep0 maxpacket: 16 [ 740.781398][ T5898] usb 6-1: config 0 has no interfaces? [ 740.810400][ T5898] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 740.832897][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.846083][ T5898] usb 6-1: Product: syz [ 740.854412][ T5898] usb 6-1: Manufacturer: syz [ 740.865294][ T5898] usb 6-1: SerialNumber: syz [ 740.876517][ T5898] usb 6-1: config 0 descriptor?? [ 740.896918][T15032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2722'. [ 740.938717][T15032] syz.0.2722 (15032): drop_caches: 2 [ 741.124321][ T5899] usb 6-1: USB disconnect, device number 121 [ 741.197670][ T7914] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 741.370335][ T7914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.449434][ T7914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.485546][ T7914] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 741.496039][ T7914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.542492][ T7914] usb 1-1: config 0 descriptor?? [ 741.578095][T15054] binder: 15053:15054 ioctl c0306201 200001c0 returned -22 [ 741.627689][ T5898] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 741.822014][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 741.847395][ T5898] usb 4-1: can't read configurations, error -61 [ 741.935993][T15064] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2731'. [ 741.984989][ T7914] cm6533_jd 0003:0D8C:0022.0090: unknown main item tag 0x0 [ 742.009076][ T7914] cm6533_jd 0003:0D8C:0022.0090: item fetching failed at offset 4/5 [ 742.028344][ T7914] cm6533_jd 0003:0D8C:0022.0090: parse failed [ 742.051395][ T7914] cm6533_jd 0003:0D8C:0022.0090: probe with driver cm6533_jd failed with error -22 [ 742.057610][ T5897] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 742.107333][ T5898] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 742.212742][ T7914] usb 1-1: USB disconnect, device number 39 [ 742.301333][ T5897] usb 9-1: Using ep0 maxpacket: 32 [ 742.344058][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 742.363990][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 742.386961][ T5898] usb 4-1: can't read configurations, error -61 [ 742.405133][ T5898] usb usb4-port1: attempt power cycle [ 742.412369][ T5897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 742.442619][ T5897] usb 9-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 742.455159][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.544324][ T5897] usb 9-1: config 0 descriptor?? [ 742.565746][T15057] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 742.777697][ T5898] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 742.851817][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 742.897984][ T5898] usb 4-1: can't read configurations, error -61 [ 742.923782][T15057] fuse: Unknown parameter 'Á' [ 742.954527][ T5897] cdc_subset 9-1:0.0: probe with driver cdc_subset failed with error -71 [ 742.976259][ T5897] usb 9-1: USB disconnect, device number 13 [ 743.058738][ T5898] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 743.058832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.085822][T15085] netlink: 'syz.0.2739': attribute type 6 has an invalid length. [ 743.114828][T15085] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2739'. [ 743.229587][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 743.239253][ T5898] usb 4-1: can't read configurations, error -61 [ 743.258077][ T5898] usb usb4-port1: unable to enumerate USB device [ 743.627891][ T5898] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 743.837984][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 743.959159][ T5898] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 744.050921][T15102] syz.8.2748: attempt to access beyond end of device [ 744.050921][T15102] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 744.152186][ T5898] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.40 [ 744.255377][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.294804][ T5898] usb 6-1: Product: syz [ 744.304472][ T5898] usb 6-1: Manufacturer: syz [ 744.322542][ T5898] usb 6-1: SerialNumber: syz [ 744.375710][ T5898] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 744.594621][ T5843] usb 6-1: USB disconnect, device number 122 [ 745.097936][ T5898] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 745.259444][ T5898] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.307823][ T5898] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 745.338030][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 745.446243][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.507821][T15118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 745.535482][ T5898] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 745.624730][T15148] syz.8.2764: attempt to access beyond end of device [ 745.624730][T15148] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 745.740191][ T5899] usb 4-1: USB disconnect, device number 32 [ 745.828765][ T7914] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 745.991871][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.112477][ T7914] usb 1-1: config 0 has no interfaces? [ 746.227532][ T7914] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 746.333568][ T7914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.405647][ T7914] usb 1-1: Product: syz [ 746.434954][ T7914] usb 1-1: Manufacturer: syz [ 746.470814][ T7914] usb 1-1: SerialNumber: syz [ 746.591413][ T7914] usb 1-1: config 0 descriptor?? [ 747.097691][ T5910] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 747.268839][ T5910] usb 9-1: Using ep0 maxpacket: 8 [ 747.287151][ T5910] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=23.a2 [ 747.287329][ T7914] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 747.308190][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.337218][ T5910] usb 9-1: Product: syz [ 747.344315][ T5910] usb 9-1: Manufacturer: syz [ 747.353234][ T5910] usb 9-1: SerialNumber: syz [ 747.362035][T15191] syz.6.2780: attempt to access beyond end of device [ 747.362035][T15191] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 747.367147][ T5910] usb 9-1: config 0 descriptor?? [ 747.393515][ T5910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 747.427874][ T5910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 747.463638][ T5910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 747.524956][ T7914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 747.542399][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.548792][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.577623][ T7914] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 747.588039][ T5910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 747.593545][ T7914] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 747.614384][ T5910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 747.664621][ T7914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.677640][ T5910] usb 9-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 747.699793][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 747.700015][ T5910] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 747.708080][ T7914] usb 4-1: SerialNumber: syz [ 747.729156][T15180] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 747.783532][ T5898] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 747.832146][ T5910] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 747.840105][ T5910] usb 9-1: media controller created [ 747.845433][ T5910] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 747.866854][ T5910] usb 9-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 747.877848][T15198] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2782'. [ 747.919635][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 747.957130][T15180] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 747.969266][ T5898] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 748.006765][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.054538][ T5898] usb 6-1: config 0 descriptor?? [ 748.112099][T15198] syz.6.2782 (15198): drop_caches: 2 [ 748.123746][ T5898] cp210x 6-1:0.0: cp210x converter detected [ 748.228080][ T5899] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 748.399381][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.420909][ T7914] cdc_ether 4-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.3-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 748.443450][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.471891][ T5899] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 748.498830][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.549824][ T5899] usb 7-1: config 0 descriptor?? [ 748.592025][ T5898] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 748.631979][ T7914] usb 4-1: USB disconnect, device number 33 [ 748.644957][ T7914] cdc_ether 4-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.3-1, Mobile Broadband Network Device [ 748.699666][ T5898] usb 6-1: cp210x converter now attached to ttyUSB0 [ 748.903458][ T25] usb 6-1: USB disconnect, device number 123 [ 748.933622][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 749.061616][ T5899] cm6533_jd 0003:0D8C:0022.0091: unknown main item tag 0x0 [ 749.078170][ T7914] usb 1-1: USB disconnect, device number 40 [ 749.085203][ T25] cp210x 6-1:0.0: device disconnected [ 749.111170][ T5899] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0091/input/input126 [ 749.143798][ T5899] cm6533_jd 0003:0D8C:0022.0091: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 749.253210][ T5898] usb 7-1: USB disconnect, device number 48 [ 749.477749][ T7914] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 749.647947][ T7914] usb 1-1: Using ep0 maxpacket: 16 [ 749.661039][ T7914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.685733][ T7914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.708121][ T7914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.744411][ T7914] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.776246][ T7914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.811328][ T7914] usb 1-1: config 0 descriptor?? [ 749.984871][ T5898] usb 9-1: USB disconnect, device number 14 [ 750.156565][T15249] syz.8.2790: attempt to access beyond end of device [ 750.156565][T15249] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 750.261382][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.287252][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.310748][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.353068][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.380255][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.412357][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.467620][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.507051][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.562046][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.595340][ T7914] microsoft 0003:045E:07DA.0092: unknown main item tag 0x0 [ 750.669803][ T7914] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0092/input/input127 [ 750.758006][ T7914] microsoft 0003:045E:07DA.0092: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 750.804271][T15269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.819912][ T5897] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 750.933444][ T7914] usb 1-1: USB disconnect, device number 41 [ 751.006419][T15272] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 751.067778][ T5897] usb 4-1: config 0 has no interfaces? [ 751.262991][ T5897] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 751.333473][T15273] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2796'. [ 751.342707][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.342738][ T5897] usb 4-1: Product: syz [ 751.342755][ T5897] usb 4-1: Manufacturer: syz [ 751.342771][ T5897] usb 4-1: SerialNumber: syz [ 751.372818][ T5897] usb 4-1: config 0 descriptor?? [ 751.498019][T15278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2800'. [ 751.517346][T15273] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2796'. [ 751.570910][T15278] syz.0.2800 (15278): drop_caches: 2 [ 751.818311][ T5897] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 751.989577][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.018660][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.054444][ T5897] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 752.069045][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.083767][ T5897] usb 1-1: config 0 descriptor?? [ 752.197994][ T5910] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 752.351071][ T5910] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 752.400727][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.428822][ T5910] usb 6-1: Product: syz [ 752.510404][ T5910] usb 6-1: Manufacturer: syz [ 752.557329][ T5910] usb 6-1: SerialNumber: syz [ 752.558463][T15296] syz.6.2807: attempt to access beyond end of device [ 752.558463][T15296] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 752.585976][ T5897] cm6533_jd 0003:0D8C:0022.0093: unknown main item tag 0x0 [ 752.603021][ T5897] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0093/input/input128 [ 752.615276][ T5910] usb 6-1: config 0 descriptor?? [ 752.691926][ T5897] cm6533_jd 0003:0D8C:0022.0093: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 752.817880][ T5897] usb 1-1: USB disconnect, device number 42 [ 752.983153][ T7914] usb 6-1: USB disconnect, device number 124 [ 753.004862][T15303] syz.8.2809: attempt to access beyond end of device [ 753.004862][T15303] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 753.631640][ T7914] usb 4-1: USB disconnect, device number 34 [ 754.867868][ T7914] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 755.051020][ T7914] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 755.061141][ T7914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.082115][ T7914] usb 6-1: Product: syz [ 755.094445][ T7914] usb 6-1: Manufacturer: syz [ 755.127894][ T7914] usb 6-1: SerialNumber: syz [ 755.199331][ T7914] usb 6-1: config 0 descriptor?? [ 755.296005][T15340] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2819'. [ 755.455938][T15344] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2819'. [ 755.498235][T15346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2819'. [ 755.624923][ T7914] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 755.662630][ T7914] usb 6-1: USB disconnect, device number 125 [ 756.717908][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'. [ 756.777631][ T5897] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 757.020592][ T5897] usb 6-1: config 0 has no interfaces? [ 757.078380][ T5897] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 757.127836][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.198638][ T5897] usb 6-1: Product: syz [ 757.202895][ T5897] usb 6-1: Manufacturer: syz [ 757.249319][ T5897] usb 6-1: SerialNumber: syz [ 757.276973][ T5897] usb 6-1: config 0 descriptor?? [ 757.776373][T15365] futex_wake_op: syz.6.2829 tries to shift op by -1; fix this program [ 758.307951][ T5843] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 758.479354][ T5843] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 758.510100][ T5843] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 64 [ 758.583387][ T5843] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 758.675398][ T5843] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.716852][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 758.768135][ T5843] usb 4-1: SerialNumber: syz [ 758.799265][T15399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 758.807012][T15399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 758.837946][ T5897] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 759.015856][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.058232][ T5898] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 759.085489][T15399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 759.102427][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.102553][T15399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 759.135419][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 759.195985][ T5897] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.239437][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.284428][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.307209][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.319568][ T5897] usb 7-1: config 0 descriptor?? [ 759.332933][ T5898] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 759.367100][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.403360][ T5898] usb 1-1: config 0 descriptor?? [ 759.640198][ T5843] cdc_ether 4-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.3-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 759.764495][ T5897] plantronics 0003:047F:FFFF.0094: No inputs registered, leaving [ 759.789757][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 759.802740][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 759.816886][ T5897] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 759.832000][ T5898] usb 1-1: USB disconnect, device number 43 [ 759.903912][ T25] usb 4-1: USB disconnect, device number 35 [ 759.925324][ T25] cdc_ether 4-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.3-1, Mobile Broadband Network Device [ 760.008505][ T5843] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 760.043245][ T7914] usb 7-1: USB disconnect, device number 49 [ 760.188415][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 760.195931][ T5843] usb 9-1: config 0 has an invalid interface number: 93 but max is 0 [ 760.205337][ T5843] usb 9-1: config 0 has no interface number 0 [ 760.216678][ T5843] usb 9-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=bb.fc [ 760.232705][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.242500][ T5843] usb 9-1: Product: syz [ 760.246906][ T5843] usb 9-1: Manufacturer: syz [ 760.252738][ T5843] usb 9-1: SerialNumber: syz [ 760.265461][ T5843] usb 9-1: config 0 descriptor?? [ 760.276905][ T5843] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 760.426744][ T5897] usb 6-1: USB disconnect, device number 126 [ 761.160958][ T5843] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 761.182217][ T5843] gspca_pac7302 9-1:0.93: probe with driver gspca_pac7302 failed with error -71 [ 761.246055][ T5843] usb 9-1: USB disconnect, device number 15 [ 762.077623][ T5843] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 762.227684][ T5843] usb 9-1: Using ep0 maxpacket: 32 [ 762.244107][ T5843] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 762.277713][ T5843] usb 9-1: config 0 has no interface number 0 [ 762.354974][ T5843] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 762.398697][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.446680][ T5843] usb 9-1: Product: syz [ 762.447660][ T5897] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 762.458747][ T5898] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 762.493453][ T5843] usb 9-1: Manufacturer: syz [ 762.517632][ T5843] usb 9-1: SerialNumber: syz [ 762.570916][ T5843] usb 9-1: config 0 descriptor?? [ 762.770763][ T5897] usb 1-1: config 0 has no interfaces? [ 762.880133][T15493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.915200][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 762.936165][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.956669][T15493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.964653][ T5897] usb 1-1: Product: syz [ 762.973728][ T5897] usb 1-1: Manufacturer: syz [ 762.999928][ T5897] usb 1-1: SerialNumber: syz [ 763.020604][ T5898] usb 7-1: config 0 has no interfaces? [ 763.100001][ T5843] usb 9-1: USB disconnect, device number 16 [ 763.112254][T15514] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 763.141940][ T5897] usb 1-1: config 0 descriptor?? [ 763.205034][ T5898] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 763.224973][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.243254][ T5898] usb 7-1: Product: syz [ 763.257700][ T5910] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 763.281407][ T5898] usb 7-1: Manufacturer: syz [ 763.348872][ T5898] usb 7-1: SerialNumber: syz [ 763.400089][ T5898] usb 7-1: config 0 descriptor?? [ 763.424893][ T5910] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 763.498272][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.642978][T15521] vcan0: left allmulticast mode [ 763.897782][ T5910] usb 4-1: Product: syz [ 763.927775][ T5910] usb 4-1: Manufacturer: syz [ 763.957920][ T5910] usb 4-1: SerialNumber: syz [ 764.042253][ T5910] usb 4-1: config 0 descriptor?? [ 764.975766][ T5910] mos7840 4-1:0.0: required endpoints missing [ 764.992427][ T5910] usb 4-1: USB disconnect, device number 36 [ 765.737882][ T5910] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 765.791396][ T5843] usb 1-1: USB disconnect, device number 44 [ 765.887895][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 765.902711][ T5910] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.920326][ T5910] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.951447][ T5910] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 765.974903][ T5910] usb 9-1: config 0 interface 0 has no altsetting 0 [ 765.985997][ T5910] usb 9-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 766.006851][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.028571][ T5910] usb 9-1: config 0 descriptor?? [ 766.337069][ T5897] usb 7-1: USB disconnect, device number 50 [ 766.468689][ T7914] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 766.499072][ T5910] hid-generic 0003:045E:05DA.0095: ignoring exceeding usage max [ 766.525103][ T5910] hid-generic 0003:045E:05DA.0095: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.8-1/input0 [ 766.550194][T15563] loop2: detected capacity change from 0 to 7 [ 766.581870][T15563] Dev loop2: unable to read RDB block 7 [ 766.593373][T15563] loop2: AHDI p1 p2 p3 [ 766.598142][T15563] loop2: partition table partially beyond EOD, truncated [ 766.605650][T15563] loop2: p1 start 2876862150 is beyond EOD, truncated [ 766.613306][T15563] loop2: p2 start 1827738543 is beyond EOD, truncated [ 766.651051][ T7914] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=51.d4 [ 766.662738][ T7914] usb 6-1: New USB device strings: Mfr=231, Product=37, SerialNumber=191 [ 766.697732][ T7914] usb 6-1: Product: syz [ 766.712530][ T7914] usb 6-1: Manufacturer: syz [ 766.717192][ T7914] usb 6-1: SerialNumber: syz [ 766.743610][ T7914] usb 6-1: config 0 descriptor?? [ 766.797805][ T5897] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 766.853866][ T25] usb 9-1: USB disconnect, device number 17 [ 767.008854][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.035392][ T5897] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 767.048103][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.060609][ T5897] usb 7-1: config 0 descriptor?? [ 767.069167][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 767.172883][ T7914] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 767.495527][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2902'. [ 767.513761][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 767.521724][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 767.588105][ T7914] usb 6-1: USB disconnect, device number 127 [ 767.736853][ T5897] pwc: recv_control_msg error -71 req 04 val 1000 [ 767.759220][ T5897] pwc: recv_control_msg error -71 req 04 val 1300 [ 767.768797][ T5897] pwc: recv_control_msg error -71 req 04 val 1400 [ 767.788010][ T5897] pwc: recv_control_msg error -71 req 02 val 2000 [ 767.822205][ T5897] pwc: recv_control_msg error -71 req 02 val 2100 [ 767.839163][ T5897] pwc: recv_control_msg error -71 req 04 val 1500 [ 767.880963][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 767.890176][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 767.913140][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 767.932402][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 767.945145][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 767.960274][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 767.967106][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 767.985386][ T5897] pwc: Registered as video103. [ 768.008127][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input129 [ 768.063877][ T5897] usb 7-1: USB disconnect, device number 51 [ 768.438752][T15615] xfrm0: entered promiscuous mode [ 768.447758][T15615] xfrm0: entered allmulticast mode [ 768.635827][T15622] syzkaller1: entered promiscuous mode [ 768.652065][T15622] syzkaller1: entered allmulticast mode [ 768.700198][T15628] syz.0.2917: attempt to access beyond end of device [ 768.700198][T15628] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 768.977578][ T5897] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 769.171931][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.259238][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.329319][ T5897] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 769.398427][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.491619][ T5897] usb 4-1: config 0 descriptor?? [ 769.950131][ T5897] arvo 0003:1E7D:30D4.0096: unknown main item tag 0x0 [ 769.986663][ T5897] arvo 0003:1E7D:30D4.0096: unknown main item tag 0x0 [ 770.005143][ T5897] arvo 0003:1E7D:30D4.0096: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 770.373572][ T5850] usb 4-1: USB disconnect, device number 37 [ 770.945268][T15669] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2930'. [ 771.007068][T15674] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2930'. [ 771.041348][T15674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2930'. [ 771.797611][T15710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.766724][T15756] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2961'. [ 772.832757][T15757] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2961'. [ 772.847548][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 772.855859][T15757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2961'. [ 772.967640][ T5910] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 773.027549][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 773.041106][ T25] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 773.057398][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.067134][ T25] usb 6-1: Product: syz [ 773.075445][ T25] usb 6-1: Manufacturer: syz [ 773.081852][ T25] usb 6-1: SerialNumber: syz [ 773.092944][ T25] usb 6-1: config 0 descriptor?? [ 773.104608][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 773.119333][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.138927][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.165831][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 773.200182][ T5910] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 773.227090][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.245104][ T5910] usb 7-1: config 0 descriptor?? [ 773.686318][ T5910] plantronics 0003:047F:FFFF.0097: unknown main item tag 0x0 [ 773.725623][ T5910] plantronics 0003:047F:FFFF.0097: No inputs registered, leaving [ 773.788334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 773.827852][ T5910] plantronics 0003:047F:FFFF.0097: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 773.924921][ T81] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.015542][ T5899] usb 7-1: USB disconnect, device number 52 [ 774.136383][ T81] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.167954][ T25] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 774.293429][ T81] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.393416][ T25] gspca_sq930x: Sensor ov9630 not yet treated [ 774.410504][ T25] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 774.412169][ T81] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.458016][ T25] usb 6-1: USB disconnect, device number 2 [ 774.556252][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.568736][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.578444][ T5899] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 774.589688][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.600640][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.619209][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 774.628297][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 774.714462][T15778] syz.6.2974: attempt to access beyond end of device [ 774.714462][T15778] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 774.749500][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 774.759998][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.771921][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 774.784033][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 774.795855][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 774.796324][ T81] bridge_slave_1: left allmulticast mode [ 774.806460][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 774.853756][ T81] bridge_slave_1: left promiscuous mode [ 774.862221][ T5899] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 774.868765][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.877025][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 774.887418][ T5899] usb 4-1: Product: syz [ 774.893341][ T5899] usb 4-1: Manufacturer: syz [ 774.900199][ T5899] usb 4-1: SerialNumber: syz [ 774.925244][ T81] bridge_slave_0: left allmulticast mode [ 774.931581][ T81] bridge_slave_0: left promiscuous mode [ 774.956994][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.967006][ T5899] usb 4-1: config 0 descriptor?? [ 775.218467][ T5899] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 775.225410][ T5899] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 775.419253][ T5899] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 775.426876][ T5899] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 775.491214][ T5899] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 775.621037][ T5899] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 775.877695][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.896507][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.916176][ T81] bond0 (unregistering): Released all slaves [ 775.926956][T15788] netlink: 'syz.5.2976': attribute type 34 has an invalid length. [ 776.042750][ T5899] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 776.060223][ T5899] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 776.099795][ T5899] usb 4-1: USB disconnect, device number 38 [ 776.131919][T15803] loop2: detected capacity change from 0 to 7 [ 776.159922][T15803] Dev loop2: unable to read RDB block 7 [ 776.165563][T15803] loop2: unable to read partition table [ 776.194034][T15803] loop2: partition table beyond EOD, truncated [ 776.228000][T15803] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 776.659743][ T5849] Bluetooth: hci2: command tx timeout [ 776.842565][T15830] syz.3.2987: attempt to access beyond end of device [ 776.842565][T15830] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 776.857640][ T5850] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 776.875437][ T81] hsr_slave_0: left promiscuous mode [ 776.887411][ T81] hsr_slave_1: left promiscuous mode [ 776.897114][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.914624][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.940930][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.954204][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.998367][ T81] veth1_macvtap: left promiscuous mode [ 777.005524][ T81] veth0_macvtap: left promiscuous mode [ 777.017400][ T81] veth1_vlan: left promiscuous mode [ 777.025390][ T5850] usb 7-1: Using ep0 maxpacket: 8 [ 777.035603][ T81] veth0_vlan: left promiscuous mode [ 777.044977][ T5850] usb 7-1: unable to get BOS descriptor or descriptor too short [ 777.066622][ T5850] usb 7-1: config 8 has an invalid interface number: 255 but max is 0 [ 777.086341][ T5850] usb 7-1: config 8 has no interface number 0 [ 777.097986][ T5850] usb 7-1: config 8 interface 255 has no altsetting 0 [ 777.121290][ T5850] usb 7-1: string descriptor 0 read error: -22 [ 777.131528][ T5850] usb 7-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 777.151589][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.017977][ T5850] catc 7-1:8.255: Couldn't detect memory size, assuming 32k [ 778.070265][ T81] team0 (unregistering): Port device team_slave_1 removed [ 778.199122][ T81] team0 (unregistering): Port device team_slave_0 removed [ 778.239200][ T5850] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.6-1, 00:00:00:00:00:00. [ 778.365192][ T29] audit: type=1326 audit(1732299200.218:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.5.2993" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 778.424555][ T5899] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 778.605841][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.619503][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.629777][ T5899] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 778.640683][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.653532][ T5899] usb 4-1: config 0 descriptor?? [ 778.747652][ T5849] Bluetooth: hci2: command tx timeout [ 778.888997][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 778.895554][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 778.917259][ T5899] usb 4-1: USB disconnect, device number 39 [ 779.055964][ T5850] usb 7-1: USB disconnect, device number 53 [ 779.064812][T15776] chnl_net:caif_netlink_parms(): no params data found [ 779.229328][T15776] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.258049][T15776] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.276094][T15776] bridge_slave_0: entered allmulticast mode [ 779.287199][T15776] bridge_slave_0: entered promiscuous mode [ 779.311045][T15776] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.327801][T15776] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.345464][T15776] bridge_slave_1: entered allmulticast mode [ 779.358834][T15776] bridge_slave_1: entered promiscuous mode [ 779.467916][ T5850] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 779.515895][T15776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.546403][T15776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.605867][T15865] syz.3.2998: attempt to access beyond end of device [ 779.605867][T15865] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 779.644188][ T5850] usb 7-1: Using ep0 maxpacket: 8 [ 779.677082][ T5850] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 779.694123][T15776] team0: Port device team_slave_0 added [ 779.702890][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 779.737973][ T5850] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.750972][T15776] team0: Port device team_slave_1 added [ 779.765085][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 779.791314][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 779.826675][ T5850] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 779.836811][T15776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.844368][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 779.855944][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.888412][ T5899] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 779.890211][ T5850] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.896371][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 779.908119][T15776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.926131][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 779.946780][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 779.960866][T15776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.975399][T15776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.004350][T15776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.015350][ T5850] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 780.032387][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 780.056071][ T5850] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.080750][T15882] syz.3.3001: attempt to access beyond end of device [ 780.080750][T15882] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 780.086911][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 780.108320][ T5850] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 780.115091][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 780.123724][ T5850] usb 7-1: string descriptor 0 read error: -22 [ 780.135827][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.160119][ T5843] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.162778][ T5850] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 780.177867][ T5899] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 780.190495][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.200367][ T5843] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.214072][ T5843] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 780.222744][T15776] hsr_slave_0: entered promiscuous mode [ 780.235737][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.245753][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.245781][T15776] hsr_slave_1: entered promiscuous mode [ 780.262674][ T5843] usb 6-1: config 0 interface 0 has no altsetting 0 [ 780.263067][ T5850] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 780.270742][ T5899] usb 1-1: Product: syz [ 780.290953][ T5843] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 780.301061][T15776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.308839][ T5899] usb 1-1: Manufacturer: syz [ 780.308864][ T5899] usb 1-1: SerialNumber: syz [ 780.317582][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.328050][T15776] Cannot create hsr debugfs directory [ 780.365470][ T5843] usb 6-1: config 0 descriptor?? [ 780.664659][ T5897] usb 7-1: USB disconnect, device number 54 [ 780.674039][T15889] adutux: No device or device unplugged -19 [ 780.758779][T15776] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 780.793689][T15776] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 780.818328][ T5849] Bluetooth: hci2: command tx timeout [ 780.834031][T15776] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 780.855985][T15776] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 780.892240][ T5843] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5010.0098/input/input130 [ 781.000322][ T5843] kye 0003:0458:5010.0098: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 781.125139][T15776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.204415][T15776] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.269979][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.277184][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.328540][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.335765][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.361200][ T5899] cdc_ncm 1-1:1.0: bind() failure [ 781.383019][ T5899] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 781.453477][ T5899] usb 1-1: USB disconnect, device number 45 [ 781.536168][T15776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.692022][T15776] veth0_vlan: entered promiscuous mode [ 781.730881][T15776] veth1_vlan: entered promiscuous mode [ 781.806885][T15776] veth0_macvtap: entered promiscuous mode [ 781.839048][T15776] veth1_macvtap: entered promiscuous mode [ 781.935321][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.955894][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.967252][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.980096][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.996469][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.008699][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.027618][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.039178][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.042520][ C1] kye 0003:0458:5010.0098: usb_submit_urb(ctrl) failed: -1 [ 782.050038][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.087264][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.116889][T15776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.163188][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.179639][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.194778][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.206022][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.218998][T15776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.231228][T15776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.242557][T15776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.266672][T15776] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.283046][T15776] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.295239][T15776] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.317986][T15776] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.393874][T15924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3008'. [ 782.424645][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 782.440752][T15924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3008'. [ 782.499422][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.507332][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.546929][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.555728][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.659265][ T5843] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 782.772702][T15937] netlink: 'syz.9.2968': attribute type 34 has an invalid length. [ 782.850484][ T5899] usb 6-1: USB disconnect, device number 3 [ 782.876383][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.898033][ T5849] Bluetooth: hci2: command tx timeout [ 782.906609][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.927943][ T5843] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 782.937869][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.949204][ T5843] usb 4-1: config 0 descriptor?? [ 783.317574][ T5899] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 783.503737][ T5899] usb 6-1: config 0 has no interfaces? [ 783.516405][ T5899] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 783.526736][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.536957][ T5899] usb 6-1: Product: syz [ 783.541745][ T5899] usb 6-1: Manufacturer: syz [ 783.547135][ T5899] usb 6-1: SerialNumber: syz [ 783.555199][ T5899] usb 6-1: config 0 descriptor?? [ 783.607795][ T7914] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 783.804545][ T7914] usb 10-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 783.829897][ T5843] hid-led 0003:27B8:01ED.0099: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 783.845517][ T7914] usb 10-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 783.891863][ T7914] usb 10-1: Manufacturer: syz [ 783.951516][ T7914] usb 10-1: config 0 descriptor?? [ 783.974036][ T5843] hid-led 0003:27B8:01ED.0099: ThingM blink(1) initialized [ 784.098260][ T5843] usb 4-1: USB disconnect, device number 40 [ 784.420867][ T7914] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 784.628945][ T7914] gs_usb 10-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 784.650119][ T7914] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -22 [ 784.896731][ T7914] usb 10-1: USB disconnect, device number 2 [ 785.877591][ T7914] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 785.927185][T16027] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3028'. [ 786.052963][ T7914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.069588][ T7914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 786.089913][ T7914] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 786.099457][T16034] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3028'. [ 786.108806][ T7914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.117031][ T7914] usb 7-1: Product: syz [ 786.122201][ T7914] usb 7-1: Manufacturer: syz [ 786.129293][ T7914] usb 7-1: SerialNumber: syz [ 786.158114][T16035] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3028'. [ 786.299673][ T5910] usb 6-1: USB disconnect, device number 4 [ 787.278470][ T7914] cdc_ncm 7-1:1.0: bind() failure [ 787.302818][ T7914] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 787.333781][ T7914] usb 7-1: USB disconnect, device number 55 [ 787.822329][T16075] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.829550][T16075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.837153][T16075] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.844351][T16075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.929444][T16075] bridge0: left allmulticast mode [ 787.997579][T16075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.408416][T16090] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3042'. [ 788.565250][T16090] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3042'. [ 788.595191][T16090] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3042'. [ 788.895742][T16113] syz.3.3051: attempt to access beyond end of device [ 788.895742][T16113] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 788.942176][T16116] syz.0.3050: attempt to access beyond end of device [ 788.942176][T16116] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 789.839258][T16136] syz.5.3054: attempt to access beyond end of device [ 789.839258][T16136] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 790.097839][T16146] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3062'. [ 790.255330][T16151] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3062'. [ 790.323680][T16154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3062'. [ 790.993163][T16172] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3065'. [ 791.080714][T16176] syz.5.3067: attempt to access beyond end of device [ 791.080714][T16176] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 791.191159][T16179] netlink: 'syz.6.3068': attribute type 34 has an invalid length. [ 791.219105][ T7914] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 791.397922][ T7914] usb 4-1: Using ep0 maxpacket: 16 [ 791.406991][ T7914] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.435098][T16188] bridge0: port 3(syz_tun) entered blocking state [ 791.446738][ T7914] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.467367][T16188] bridge0: port 3(syz_tun) entered disabled state [ 791.477886][T16188] syz_tun: entered allmulticast mode [ 791.484153][ T7914] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 791.530363][T16188] syz_tun: entered promiscuous mode [ 791.565278][ T7914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 791.569611][T16188] bridge0: port 3(syz_tun) entered blocking state [ 791.579130][T16188] bridge0: port 3(syz_tun) entered forwarding state [ 791.583846][ T7914] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 791.605970][ T7914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.624426][ T7914] usb 4-1: config 0 descriptor?? [ 791.788716][T16202] bridge0: port 3(syz_tun) entered blocking state [ 791.812506][T16202] bridge0: port 3(syz_tun) entered disabled state [ 791.827967][T11823] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 791.828083][T16202] syz_tun: entered allmulticast mode [ 791.882169][T16202] syz_tun: entered promiscuous mode [ 791.890090][T16202] bridge0: port 3(syz_tun) entered blocking state [ 791.896716][T16202] bridge0: port 3(syz_tun) entered forwarding state [ 791.939876][T16207] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 791.988092][T11823] usb 10-1: Using ep0 maxpacket: 32 [ 792.009146][T11823] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 792.037697][T11823] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 792.057249][T11823] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 792.087167][T11823] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 792.107355][ T7914] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.009A/input/input131 [ 792.119559][T11823] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 792.137021][T11823] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 792.178280][T11823] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 792.194323][T11823] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.222312][T11823] usb 10-1: config 0 descriptor?? [ 792.274389][ T7914] kye 0003:0458:5010.009A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 792.361540][T16218] syz.6.3083: attempt to access beyond end of device [ 792.361540][T16218] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 792.452879][T11823] usblp 10-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 792.742001][T11823] usb 10-1: USB disconnect, device number 3 [ 793.027641][T16223] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3084'. [ 793.091821][T16224] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3084'. [ 793.227818][ C1] kye 0003:0458:5010.009A: usb_submit_urb(ctrl) failed: -1 [ 793.301088][T11823] usblp1: removed [ 793.455055][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 793.637590][ T7914] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 793.823701][ T7914] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 793.884228][ T7914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.913196][ T7914] usb 7-1: config 0 descriptor?? [ 793.928744][ T7914] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 794.010873][ T5898] usb 4-1: USB disconnect, device number 41 [ 794.048043][T11823] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 794.064855][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 794.172814][ T7914] gp8psk: usb in 128 operation failed. [ 794.187265][ T7914] gp8psk: usb in 137 operation failed. [ 794.193766][ T7914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 794.215347][ T7914] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 794.258639][ T7914] usb 7-1: media controller created [ 794.268667][T11823] usb 1-1: Using ep0 maxpacket: 16 [ 794.288408][ T25] usb 6-1: config 0 has no interfaces? [ 794.309125][T11823] usb 1-1: config 0 has no interfaces? [ 794.368202][T11823] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 794.389360][ T7914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.403631][T11823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.418724][T11823] usb 1-1: Product: syz [ 794.423051][T11823] usb 1-1: Manufacturer: syz [ 794.451295][ T7914] gp8psk_fe: Frontend attached [ 794.458546][T11823] usb 1-1: SerialNumber: syz [ 794.469179][ T7914] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 794.478756][T11823] usb 1-1: config 0 descriptor?? [ 794.512220][ T7914] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 794.528736][ T25] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 794.577847][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.606792][ T25] usb 6-1: Product: syz [ 794.615704][ T25] usb 6-1: Manufacturer: syz [ 794.623678][ T25] usb 6-1: SerialNumber: syz [ 794.633660][ T25] usb 6-1: config 0 descriptor?? [ 794.647728][T11823] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 794.704825][ T25] usb 1-1: USB disconnect, device number 46 [ 794.817858][T11823] usb 10-1: Using ep0 maxpacket: 16 [ 794.826104][ T7914] gp8psk: usb in 137 operation failed. [ 794.833749][T11823] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.844253][ T7914] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 794.864087][T11823] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.873832][ T7914] gp8psk: found Genpix USB device pID = 203 (hex) [ 794.926806][ T7914] usb 7-1: USB disconnect, device number 56 [ 794.988495][T11823] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 795.077844][T11823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.163378][T11823] usb 10-1: Product: syz [ 795.212584][T11823] usb 10-1: Manufacturer: syz [ 795.217338][T11823] usb 10-1: SerialNumber: syz [ 795.291290][ T7914] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 795.700255][T11823] usb 10-1: 0:2 : does not exist [ 795.931332][T11823] usb 10-1: USB disconnect, device number 4 [ 796.135604][T16288] syz.0.3104: attempt to access beyond end of device [ 796.135604][T16288] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 796.327909][ T5898] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 796.497732][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 796.550541][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 796.610592][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 796.712524][ T5898] usb 7-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 796.751283][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.858305][ T5898] usb 7-1: config 0 descriptor?? [ 796.907990][T16284] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 796.942310][ T5850] usb 6-1: USB disconnect, device number 5 [ 797.212518][T16284] fuse: Unknown parameter 'Á' [ 797.219132][ T5898] cdc_subset 7-1:0.0: probe with driver cdc_subset failed with error -71 [ 797.277674][ T5898] usb 7-1: USB disconnect, device number 57 [ 797.616447][T16312] bridge0: port 3(syz_tun) entered blocking state [ 797.646897][T16312] bridge0: port 3(syz_tun) entered disabled state [ 797.654531][T16312] syz_tun: entered allmulticast mode [ 797.664907][T16312] syz_tun: entered promiscuous mode [ 797.673038][T16312] bridge0: port 3(syz_tun) entered blocking state [ 797.679679][T16312] bridge0: port 3(syz_tun) entered forwarding state [ 797.714968][ T25] hid-generic 0000:0000:0000.009B: unknown main item tag 0x7 [ 797.737128][ T25] hid-generic 0000:0000:0000.009B: ignoring exceeding usage max [ 797.788605][ T25] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 797.806369][ T25] hid-generic 0000:0000:0000.009B: unknown main item tag 0x6 [ 797.823325][ T25] hid-generic 0000:0000:0000.009B: unknown main item tag 0xd [ 797.852820][ T25] hid-generic 0000:0000:0000.009B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 798.024826][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3119'. [ 798.077631][ T7914] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 798.111054][T16326] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3115'. [ 798.195619][T16326] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3115'. [ 798.216088][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3115'. [ 798.252048][ T7914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.263514][ T7914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.274327][ T7914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 798.296342][ T7914] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.306131][ T7914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.326442][ T7914] usb 1-1: config 0 descriptor?? [ 798.378762][ T5898] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 798.547863][ T5898] usb 10-1: Using ep0 maxpacket: 32 [ 798.569216][ T5898] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.628226][ T5898] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.656327][ T5898] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 798.683456][ T5898] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 798.684411][T16342] binder: 16341:16342 ioctl 4018620d 0 returned -22 [ 798.692521][ T5898] usb 10-1: Product: syz [ 798.706865][ T5898] usb 10-1: Manufacturer: syz [ 798.739555][ T5898] hub 10-1:4.0: USB hub found [ 798.780897][ T7914] plantronics 0003:047F:FFFF.009C: unknown main item tag 0x0 [ 798.800090][ T7914] plantronics 0003:047F:FFFF.009C: No inputs registered, leaving [ 798.834210][ T7914] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 798.951167][ T5898] hub 10-1:4.0: 2 ports detected [ 799.063455][ T7914] usb 1-1: USB disconnect, device number 47 [ 799.563010][ T5898] usb 10-1: USB disconnect, device number 5 [ 800.268338][T16376] bridge0: port 3(syz_tun) entered blocking state [ 800.300152][T16376] bridge0: port 3(syz_tun) entered disabled state [ 800.334637][T16376] syz_tun: entered allmulticast mode [ 800.357140][T16376] syz_tun: entered promiscuous mode [ 800.375460][T16376] bridge0: port 3(syz_tun) entered blocking state [ 800.382110][T16376] bridge0: port 3(syz_tun) entered forwarding state [ 800.830834][T16404] input: syz1 as /devices/virtual/input/input132 [ 800.887904][ T5910] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 801.058356][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 801.067987][T11823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 801.076699][ T5910] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 801.102361][ T5910] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 801.102397][T16412] syz.0.3152: attempt to access beyond end of device [ 801.102397][T16412] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 801.123291][ T5910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 801.170370][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 801.206935][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 801.225568][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 801.249322][ T5910] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 801.267787][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.271687][T11823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.315577][ T5910] usb 4-1: config 0 descriptor?? [ 801.328080][T11823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.387735][T11823] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.442347][T11823] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 801.469648][T11823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.498253][T11823] usb 6-1: config 0 descriptor?? [ 801.602263][ T5910] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 801.880751][ C0] usblp0: nonzero read bulk status received: -71 [ 801.881272][ T25] usb 4-1: USB disconnect, device number 42 [ 801.951535][T11823] plantronics 0003:047F:FFFF.009D: unknown main item tag 0x0 [ 801.970435][T11823] plantronics 0003:047F:FFFF.009D: No inputs registered, leaving [ 802.010724][T11823] plantronics 0003:047F:FFFF.009D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 802.164379][T16396] usblp0: removed [ 802.261963][ T25] usb 6-1: USB disconnect, device number 6 [ 802.857616][ T5897] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 802.906100][T16466] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 803.057923][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 803.071449][ T5897] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.115159][ T5897] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.159517][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 803.179336][ T5897] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 803.180839][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'. [ 803.197741][ T5897] usb 7-1: Product: syz [ 803.208159][ T5897] usb 7-1: Manufacturer: syz [ 803.235795][ T5897] hub 7-1:4.0: USB hub found [ 803.240816][T16487] hsr_slave_0: left promiscuous mode [ 803.266517][T16487] hsr_slave_1: left promiscuous mode [ 803.468106][ T5897] hub 7-1:4.0: 2 ports detected [ 803.596615][ T7914] hid-generic 0000:0000:0000.009E: unknown main item tag 0x7 [ 803.632873][ T7914] hid-generic 0000:0000:0000.009E: ignoring exceeding usage max [ 803.653504][T16460] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3159'. [ 803.659183][ T7914] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 803.722242][ T7914] hid-generic 0000:0000:0000.009E: unknown main item tag 0x6 [ 803.743548][ T7914] hid-generic 0000:0000:0000.009E: unknown main item tag 0xd [ 803.769316][ T7914] hid-generic 0000:0000:0000.009E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 804.091276][ T5897] usb 7-1: USB disconnect, device number 58 [ 804.484632][T16530] ip6gre1: entered promiscuous mode [ 804.514142][T16530] ip6gre1: entered allmulticast mode [ 804.557997][ T9257] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 804.755937][ T9257] usb 1-1: Using ep0 maxpacket: 32 [ 804.770234][ T9257] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 804.802364][ T9257] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 804.818899][ T9257] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 804.829830][ T9257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 804.840316][ T5898] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 804.849828][ T9257] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 804.882218][ T9257] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 804.895569][ T9257] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 804.905058][ T9257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.916158][ T9257] usb 1-1: config 0 descriptor?? [ 805.009792][ T5898] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 805.027893][ T5898] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 805.047694][ T5897] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 805.087962][ T5898] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 805.118101][ T5898] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 805.129713][ T5898] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 805.143926][ T9257] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 805.157813][ T5898] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 805.174343][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 805.183288][ T5898] usb 10-1: Product: syz [ 805.197556][ T5898] usb 10-1: Manufacturer: syz [ 805.211928][ T5898] cdc_wdm 10-1:1.0: skipping garbage [ 805.226554][ T5898] cdc_wdm 10-1:1.0: skipping garbage [ 805.233539][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 805.240583][ T5897] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.257955][ T7914] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 805.258709][ T5897] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.277173][ T5898] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 805.286097][ T5898] cdc_wdm 10-1:1.0: Unknown control protocol [ 805.296466][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 805.316078][ T5897] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 805.325693][ T5897] usb 6-1: Product: syz [ 805.334941][ T5897] usb 6-1: Manufacturer: syz [ 805.345703][ T5897] hub 6-1:4.0: USB hub found [ 805.386884][ C1] usblp0: nonzero read bulk status received: -71 [ 805.397670][T11823] usb 1-1: USB disconnect, device number 48 [ 805.419649][ T7914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.450179][ T7914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.469101][ T7914] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 805.484186][ T7914] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.493840][ T7914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.511371][ T7914] usb 7-1: config 0 descriptor?? [ 805.558670][ T5897] hub 6-1:4.0: 2 ports detected [ 805.614947][T16520] usblp0: removed [ 805.927258][ T7914] plantronics 0003:047F:FFFF.009F: unknown main item tag 0x0 [ 805.935138][ T7914] plantronics 0003:047F:FFFF.009F: unknown main item tag 0x0 [ 805.943449][ T7914] plantronics 0003:047F:FFFF.009F: unknown main item tag 0x0 [ 805.951605][ T7914] plantronics 0003:047F:FFFF.009F: unknown main item tag 0x0 [ 805.959136][ T7914] plantronics 0003:047F:FFFF.009F: unknown main item tag 0x0 [ 805.967698][ T7914] plantronics 0003:047F:FFFF.009F: No inputs registered, leaving [ 805.982148][ T7914] plantronics 0003:047F:FFFF.009F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 806.184554][ T5897] usb 6-1: USB disconnect, device number 7 [ 806.226759][ T5898] usb 7-1: USB disconnect, device number 59 [ 806.475604][T16584] ------------[ cut here ]------------ [ 806.481699][T16584] WARNING: CPU: 1 PID: 16584 at include/net/mac80211.h:7053 minstrel_ht_update_caps+0x44a/0x17e0 [ 806.492305][T16584] Modules linked in: [ 806.496262][T16584] CPU: 1 UID: 0 PID: 16584 Comm: syz.3.3179 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 806.506748][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 806.516902][T16584] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 806.523336][T16584] Code: da e8 9a 03 97 f9 e9 24 ff ff ff e8 b0 69 3e f6 eb 17 e8 a9 69 3e f6 eb 14 e8 a2 69 3e f6 49 c1 fd 38 eb 0c e8 97 69 3e f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 806.543018][T16584] RSP: 0018:ffffc9000517eed8 EFLAGS: 00010287 [ 806.549157][T16584] RAX: ffffffff8b56e2e9 RBX: 000000000000000c RCX: 0000000000080000 [ 806.557161][T16584] RDX: ffffc9000dc43000 RSI: 0000000000000395 RDI: 0000000000000396 [ 806.565239][T16584] RBP: 0000000000000000 R08: ffffffff8b56e205 R09: 0000000000000000 [ 806.573300][T16584] R10: ffff888023310008 R11: ffffed1004662549 R12: 1ffff1100622661c [ 806.581361][T16584] R13: 0b00000000000000 R14: ffff8880311330e0 R15: 0100000000000000 [ 806.589406][T16584] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f50a6b40 [ 806.598426][T16584] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 806.605139][T16584] CR2: 00000000f71ec200 CR3: 0000000079edc000 CR4: 00000000003526f0 [ 806.613214][T16584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 806.621252][T16584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 806.629308][T16584] Call Trace: [ 806.632631][T16584] [ 806.635596][T16584] ? __warn+0x168/0x4e0 [ 806.639810][T16584] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 806.645582][T16584] ? report_bug+0x2b3/0x500 [ 806.650150][T16584] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 806.655911][T16584] ? handle_bug+0x60/0x90 [ 806.660331][T16584] ? exc_invalid_op+0x1a/0x50 [ 806.665048][T16584] ? asm_exc_invalid_op+0x1a/0x20 [ 806.670145][T16584] ? minstrel_ht_update_caps+0x365/0x17e0 [ 806.675900][T16584] ? minstrel_ht_update_caps+0x449/0x17e0 [ 806.681706][T16584] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 806.687519][T16584] ? minstrel_ht_update_caps+0x449/0x17e0 [ 806.693283][T16584] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 806.698772][T16584] ? rate_control_rate_init+0x347/0x680 [ 806.704383][T16584] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 806.710279][T16584] rate_control_rate_init+0x3d8/0x680 [ 806.715712][T16584] ? rate_control_rate_init+0x135/0x680 [ 806.721353][T16584] rate_control_rate_init_all_links+0xfc/0x190 [ 806.727579][T16584] sta_apply_auth_flags+0x1b6/0x410 [ 806.732828][T16584] sta_apply_parameters+0xe23/0x1550 [ 806.738199][T16584] ieee80211_add_station+0x3da/0x630 [ 806.743530][T16584] rdev_add_station+0x11b/0x2b0 [ 806.748472][T16584] nl80211_new_station+0x1d53/0x2550 [ 806.753834][T16584] ? __pfx_nl80211_new_station+0x10/0x10 [ 806.759556][T16584] ? netdev_run_todo+0xf88/0x1000 [ 806.764645][T16584] genl_rcv_msg+0xb14/0xec0 [ 806.769243][T16584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.774348][T16584] ? __pfx_lock_acquire+0x10/0x10 [ 806.779462][T16584] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 806.784874][T16584] ? __pfx_nl80211_new_station+0x10/0x10 [ 806.790589][T16584] ? __pfx_nl80211_post_doit+0x10/0x10 [ 806.796090][T16584] ? __pfx___might_resched+0x10/0x10 [ 806.801509][T16584] netlink_rcv_skb+0x1e3/0x430 [ 806.806323][T16584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 806.811446][T16584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.816791][T16584] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 806.822365][T16584] genl_rcv+0x28/0x40 [ 806.826387][T16584] netlink_unicast+0x7f6/0x990 [ 806.831256][T16584] ? __pfx_netlink_unicast+0x10/0x10 [ 806.836592][T16584] ? __virt_addr_valid+0x183/0x530 [ 806.839804][T16586] input: syz1 as /devices/virtual/input/input133 [ 806.841774][T16584] ? __check_object_size+0x48e/0x900 [ 806.853418][T16584] netlink_sendmsg+0x8e4/0xcb0 [ 806.858253][T16584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.863568][T16584] ? __pfx_lock_release+0x10/0x10 [ 806.868740][T16584] ? aa_sock_msg_perm+0x91/0x160 [ 806.873710][T16584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.879065][T16584] __sock_sendmsg+0x221/0x270 [ 806.883784][T16584] ____sys_sendmsg+0x52a/0x7e0 [ 806.888633][T16584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.893969][T16584] __sys_sendmsg+0x269/0x350 [ 806.898650][T16584] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.903819][T16584] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 806.910502][T16584] ? lockdep_hardirqs_on+0x99/0x150 [ 806.915767][T16584] __do_fast_syscall_32+0xb4/0x110 [ 806.920964][T16584] ? exc_page_fault+0x590/0x8c0 [ 806.925861][T16584] do_fast_syscall_32+0x34/0x80 [ 806.930796][T16584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.937154][T16584] RIP: 0023:0xf7f26579 [ 806.941261][T16584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 806.961007][T16584] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 806.969497][T16584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001080 [ 806.977734][T16584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.985747][T16584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.993817][T16584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 807.001873][T16584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.009918][T16584] [ 807.012964][T16584] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 807.020249][T16584] CPU: 1 UID: 0 PID: 16584 Comm: syz.3.3179 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 807.030833][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 807.040895][T16584] Call Trace: [ 807.044172][T16584] [ 807.047099][T16584] dump_stack_lvl+0x241/0x360 [ 807.051786][T16584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.056990][T16584] ? __pfx__printk+0x10/0x10 [ 807.061586][T16584] ? _printk+0xd5/0x120 [ 807.065744][T16584] ? __init_begin+0x41000/0x41000 [ 807.070773][T16584] ? vscnprintf+0x5d/0x90 [ 807.075109][T16584] panic+0x349/0x880 [ 807.079018][T16584] ? __warn+0x177/0x4e0 [ 807.083194][T16584] ? __pfx_panic+0x10/0x10 [ 807.087607][T16584] ? show_trace_log_lvl+0x3b2/0x410 [ 807.092845][T16584] __warn+0x34b/0x4e0 [ 807.096837][T16584] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 807.102666][T16584] report_bug+0x2b3/0x500 [ 807.107094][T16584] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 807.112829][T16584] handle_bug+0x60/0x90 [ 807.117004][T16584] exc_invalid_op+0x1a/0x50 [ 807.121518][T16584] asm_exc_invalid_op+0x1a/0x20 [ 807.126372][T16584] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 807.132713][T16584] Code: da e8 9a 03 97 f9 e9 24 ff ff ff e8 b0 69 3e f6 eb 17 e8 a9 69 3e f6 eb 14 e8 a2 69 3e f6 49 c1 fd 38 eb 0c e8 97 69 3e f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 807.152326][T16584] RSP: 0018:ffffc9000517eed8 EFLAGS: 00010287 [ 807.158423][T16584] RAX: ffffffff8b56e2e9 RBX: 000000000000000c RCX: 0000000000080000 [ 807.166419][T16584] RDX: ffffc9000dc43000 RSI: 0000000000000395 RDI: 0000000000000396 [ 807.174657][T16584] RBP: 0000000000000000 R08: ffffffff8b56e205 R09: 0000000000000000 [ 807.182635][T16584] R10: ffff888023310008 R11: ffffed1004662549 R12: 1ffff1100622661c [ 807.190610][T16584] R13: 0b00000000000000 R14: ffff8880311330e0 R15: 0100000000000000 [ 807.198590][T16584] ? minstrel_ht_update_caps+0x365/0x17e0 [ 807.204314][T16584] ? minstrel_ht_update_caps+0x449/0x17e0 [ 807.210041][T16584] ? minstrel_ht_update_caps+0x449/0x17e0 [ 807.215770][T16584] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 807.221165][T16584] ? rate_control_rate_init+0x347/0x680 [ 807.226746][T16584] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 807.232577][T16584] rate_control_rate_init+0x3d8/0x680 [ 807.237958][T16584] ? rate_control_rate_init+0x135/0x680 [ 807.243508][T16584] rate_control_rate_init_all_links+0xfc/0x190 [ 807.249668][T16584] sta_apply_auth_flags+0x1b6/0x410 [ 807.254878][T16584] sta_apply_parameters+0xe23/0x1550 [ 807.260184][T16584] ieee80211_add_station+0x3da/0x630 [ 807.265477][T16584] rdev_add_station+0x11b/0x2b0 [ 807.270330][T16584] nl80211_new_station+0x1d53/0x2550 [ 807.275632][T16584] ? __pfx_nl80211_new_station+0x10/0x10 [ 807.281260][T16584] ? netdev_run_todo+0xf88/0x1000 [ 807.286323][T16584] genl_rcv_msg+0xb14/0xec0 [ 807.290833][T16584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.295876][T16584] ? __pfx_lock_acquire+0x10/0x10 [ 807.300900][T16584] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 807.306274][T16584] ? __pfx_nl80211_new_station+0x10/0x10 [ 807.311907][T16584] ? __pfx_nl80211_post_doit+0x10/0x10 [ 807.317385][T16584] ? __pfx___might_resched+0x10/0x10 [ 807.322698][T16584] netlink_rcv_skb+0x1e3/0x430 [ 807.327484][T16584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.332525][T16584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.337825][T16584] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 807.343295][T16584] genl_rcv+0x28/0x40 [ 807.347273][T16584] netlink_unicast+0x7f6/0x990 [ 807.352046][T16584] ? __pfx_netlink_unicast+0x10/0x10 [ 807.357333][T16584] ? __virt_addr_valid+0x183/0x530 [ 807.362448][T16584] ? __check_object_size+0x48e/0x900 [ 807.367743][T16584] netlink_sendmsg+0x8e4/0xcb0 [ 807.372530][T16584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.377820][T16584] ? __pfx_lock_release+0x10/0x10 [ 807.382845][T16584] ? aa_sock_msg_perm+0x91/0x160 [ 807.387798][T16584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.393085][T16584] __sock_sendmsg+0x221/0x270 [ 807.397772][T16584] ____sys_sendmsg+0x52a/0x7e0 [ 807.402550][T16584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.407853][T16584] __sys_sendmsg+0x269/0x350 [ 807.412461][T16584] ? __pfx___sys_sendmsg+0x10/0x10 [ 807.417633][T16584] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 807.424229][T16584] ? lockdep_hardirqs_on+0x99/0x150 [ 807.429442][T16584] __do_fast_syscall_32+0xb4/0x110 [ 807.434585][T16584] ? exc_page_fault+0x590/0x8c0 [ 807.439447][T16584] do_fast_syscall_32+0x34/0x80 [ 807.444300][T16584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 807.450632][T16584] RIP: 0023:0xf7f26579 [ 807.454701][T16584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 807.474338][T16584] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 807.482772][T16584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001080 [ 807.490749][T16584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 807.498725][T16584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 807.506691][T16584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 807.514666][T16584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.522658][T16584] [ 807.525948][T16584] Kernel Offset: disabled [ 807.530368][T16584] Rebooting in 86400 seconds..