last executing test programs: 2m9.666177226s ago: executing program 1 (id=464): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m6.581470279s ago: executing program 1 (id=479): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a00040023f642000b000002be59"], 0x20, 0x404a055}, 0x0) 2m6.388459751s ago: executing program 1 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x60000100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m6.228613156s ago: executing program 1 (id=485): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m6.180589129s ago: executing program 1 (id=486): socket(0x10, 0x3, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) 2m5.825616315s ago: executing program 1 (id=492): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 2m5.516714837s ago: executing program 32 (id=492): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 11.039779311s ago: executing program 3 (id=1208): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000200)='/dev/fuse\x00']}, 0x400) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) flock(0xffffffffffffffff, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x90000, 0x100) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) socket$inet6_tcp(0xa, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 8.792375676s ago: executing program 5 (id=1215): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 7.83251222s ago: executing program 5 (id=1219): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdb0, 0x73}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x48}, {0x36, 0x1}, {0x1b, 0x1}, {0x2}, {0x5}, {0xb}, {0x1b, 0x1}, {0x48}, {0x24, 0x1}, {0x12, 0x1}, {0x6c}, {0x4}, {0x3, 0x1}, {0x12}, {0x48}, {0x1b, 0x1}, {0xb}, {0x59371bf58640d37c}, {0x30}, {0x5, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 7.75158958s ago: executing program 5 (id=1220): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000900), 0x0, 0x4000014) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f0000000800)=[{0x7f, 0x4001, 0x0, 0x0}, {0x1, 0x4210, 0x0, 0x0}], 0x2}) 6.798715488s ago: executing program 0 (id=1223): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r1, 0x0, 0xc) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x3, @b={0x2, 0x3, 0x6, 0x1, 0x5, 0x9, 0x5, {0x10, "b4693700e3ac576fe34061f89585a091"}, 0xa1, 0x6, 0x5, 0x6, 0x1d, "86ba71b44100b93c6014210505a53f43d4f896fe749f12248ed088d7f5"}}, 0x3d) 6.290988759s ago: executing program 5 (id=1224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1d, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000500)="b3185d7b19438bab8166204bb18d83ffb56f70b003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c0801000000cf5ad07693727980eea946e6c9a1723e81bfa5c3688803c8a124d4e236079682e0addcb27dff938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x10, r6) 5.55984185s ago: executing program 0 (id=1225): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) readv(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000440)=""/86, 0x56}], 0x2) 5.558401073s ago: executing program 2 (id=1226): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r4, 0x0, 0x9}, 0x8) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet6(r6, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4e24, 0x10, @mcast2}, 0x4a) 5.477744504s ago: executing program 4 (id=1227): r0 = fsopen(&(0x7f0000000180)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5.182862671s ago: executing program 4 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 4.717488471s ago: executing program 5 (id=1229): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 4.530049816s ago: executing program 4 (id=1230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdb0, 0x73}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x48}, {0x36, 0x1}, {0x1b, 0x1}, {0x2}, {0x5}, {0xb}, {0x1b, 0x1}, {0x48}, {0x24, 0x1}, {0x12, 0x1}, {0x6c}, {0x4}, {0x3, 0x1}, {0x12}, {0x48}, {0x1b, 0x1}, {0xb}, {0x59371bf58640d37c}, {0x30}, {0x5, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x80400d0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)=""/252, 0xfc}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 4.40830007s ago: executing program 0 (id=1231): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) 4.40695472s ago: executing program 4 (id=1232): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x100010, r0, 0x0) 3.845841829s ago: executing program 2 (id=1233): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) 3.052363705s ago: executing program 5 (id=1234): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000d40)={0x14, &(0x7f0000000c40)={0x0, 0x38, 0xb7, {0xb7, 0x23, "9eb4ae743f83964c8900e7b917a2f91d62511607b2f2149187f7b593790811c40f0e49f124ef5bb46bc98578133345badc7e698a4a670499067a43ab691043327f3babc1e48dd3a49bbb01c0d0d81f4afd1bd77507ee89de9cb4324237b67ecb75cc33410c708710070e6b66aa4c87c6fb13241072419fdfa327c8200b8ac04ce49a95252f6d0e6f3049f8307a91ddd4ddd44a210bfe1d9514113b82dbcbe93c38bfb6c51a8655f3674187f98ba642616209a6e097"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000f40)={0x34, &(0x7f0000000d80)={0x40, 0x2c, 0xf, "84767fddff121b222c459e6c87f4eb"}, 0x0, 0x0, &(0x7f0000000e80)={0xc0, 0xa1, 0x4, 0x1}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5c}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000240)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.981371534s ago: executing program 3 (id=1235): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r1, 0x0, 0xc) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x3, @b={0x2, 0x3, 0x6, 0x1, 0x5, 0x9, 0x5, {0x10, "b4693700e3ac576fe34061f89585a091"}, 0xa1, 0x6, 0x5, 0x6, 0x1d, "86ba71b44100b93c6014210505a53f43d4f896fe749f12248ed088d7f5"}}, 0x3d) 2.903797662s ago: executing program 2 (id=1236): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x5, @f_listen={0xe, 0x2, 0x4, 0x82, 0x9, 0x2, 0x8, {}, 0x3, 0xa, 0x7, 0x5, 0x35, "03a4ec9ed50555ccd451bc6d80769bff6ab24945951d98db6e049e7b9c828962354e4d888beaf65c34603d5e37f9a8896f1198066f"}}, 0x45) 2.714963206s ago: executing program 3 (id=1237): socket$packet(0x11, 0x2, 0x300) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)=r0}, 0x20) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x7ffe, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0x7, 0x5, 0x1, 0x2a9, 0x8, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x0, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0xff, 0x3, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x9, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0xc, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0x10000bfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x4, 0x4, 0x4, 0x7, 0x10000, 0x7, 0x9, 0x1, 0x16d, 0x6, 0xf1e, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x100000003, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x3b0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) io_uring_enter(r5, 0x2219, 0x2077, 0x16, 0x0, 0xfffffffffffffd12) 2.604899915s ago: executing program 4 (id=1238): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x9c7, 0x6, 0x1, 0x6}) 2.538321903s ago: executing program 3 (id=1239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1d, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x10, r6) 1.863523387s ago: executing program 2 (id=1240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 1.442168784s ago: executing program 2 (id=1241): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) readv(r0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/96, 0x60}, {&(0x7f0000000440)=""/86, 0x56}], 0x2) 1.29112081s ago: executing program 0 (id=1242): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x2, 0x1ba242, 0x3cbc2c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.11149693s ago: executing program 3 (id=1243): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600", 0xeb}, {&(0x7f00000002c0)="7542473782798be019c27ed30be707d1f331c52b06ff9a76056773b6d6c3784dc2d43d8c8b31caed845002b594efe4a4688f72873339014c1b28981eb57ead9ee32053aa1a4061c61f2d1ec1c09a2154a13bc572f395a17808b0ed24", 0x5c}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000062c0)="f33199e97a7aeef35558eee84e4831917699c77cf87d7c520e8395020c848ade06b3a40793b3df05434d5c9e94f305ef9474172d3a95537a6d6cad110c94976199031d3c3204a1c89b12bafa7dc06d86606aa40f74b1e85e56355829284ba17b73828ede2c522b9765c1d83f59f66b7cf0eeb849e3c89a6d7fec35d1d5fe4f5ae16803bb29505730cb9f80b93cb7e6c8b59906d1c68c374a30dcc653f7628b452853deafa605526752355a04996bd39c437ac2c7b6da72fcde0a0e1656bed39c01b4ab98b39d2cdc4bc3d5c82d387828861e4e8d93c9083a8da84bd2", 0xfffffffffffffdd3, 0x1000c095, 0x0, 0x0) 980.971901ms ago: executing program 3 (id=1244): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0xa2000) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000400)={&(0x7f0000000180)=[{0xc000, 0x10, 0x0, 0x0}], 0x1}) 931.335411ms ago: executing program 4 (id=1245): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000200)='/dev/fuse\x00']}, 0x400) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) flock(0xffffffffffffffff, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x90000, 0x100) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) socket$inet6_tcp(0xa, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 895.89313ms ago: executing program 0 (id=1246): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) 389.612021ms ago: executing program 2 (id=1247): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d8, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=1248): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x100010, r0, 0x0) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff47e95d04e code=0x7ffc0000 [ 146.716970][ T5839] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 146.767014][ T5839] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.805118][ T7084] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 146.829187][ T5839] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.843104][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.876591][ T5839] usb 1-1: config 0 descriptor?? [ 146.890906][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.909412][ T7072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.917775][ T7072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.977934][ T5839] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 147.052877][ T5901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 147.083761][ T5901] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 147.136855][ T5901] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 147.159663][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.186904][ T5901] usb 2-1: Product: syz [ 147.199714][ T5901] usb 2-1: Manufacturer: syz [ 147.213462][ T5901] usb 2-1: SerialNumber: syz [ 147.231939][ T808] usb 1-1: USB disconnect, device number 8 [ 147.249739][ T808] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 147.445014][ T5901] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 147.472261][ T5901] usb 2-1: unit 6 not found! [ 147.480776][ T5901] usb 2-1: unit 4 not found! [ 147.633845][ T5901] usb 2-1: USB disconnect, device number 8 [ 147.702382][ T5839] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.880826][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 147.894693][ T7094] fuse: Bad value for 'group_id' [ 147.908002][ T5839] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.919705][ T7094] fuse: Bad value for 'group_id' [ 147.927691][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.951428][ T5839] pvrusb2: Hardware description: Terratec Grabster AV400 [ 147.963892][ T5839] pvrusb2: ********** [ 147.968244][ T5839] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 147.981711][ T5839] pvrusb2: Important functionality might not be entirely working. [ 147.989848][ T5839] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 148.001850][ T5839] pvrusb2: ********** [ 148.002460][ T7096] tipc: Enabled bearer , priority 0 [ 148.057285][ T7096] tipc: Resetting bearer [ 148.153425][ T2363] pvrusb2: Invalid write control endpoint [ 148.156005][ T7095] tipc: Disabling bearer [ 148.230054][ T7098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.351291][ T2363] pvrusb2: Invalid write control endpoint [ 148.378318][ T5839] usb 4-1: USB disconnect, device number 12 [ 148.385067][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 148.409490][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 148.417849][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 148.439133][ T7107] netlink: 'syz.0.366': attribute type 33 has an invalid length. [ 148.448566][ T2363] pvrusb2: Device being rendered inoperable [ 148.466150][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 148.477671][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 148.488190][ T7107] netlink: 152 bytes leftover after parsing attributes in process `syz.0.366'. [ 148.530883][ T7107] `: renamed from team0 (while UP) [ 148.531038][ T2363] pvrusb2: Attached sub-driver cx25840 [ 148.554446][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 148.577176][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 148.968367][ T7126] fuse: Bad value for 'group_id' [ 148.980073][ T7126] fuse: Bad value for 'group_id' [ 149.255146][ T7137] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.830825][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 151.023201][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 151.041478][ T5901] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 151.059851][ T5901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.072265][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.083943][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.094700][ T5901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.109746][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.119849][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.131757][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.301656][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 151.319857][ T5839] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 151.350482][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.356911][ T5901] usb 2-1: usb_control_msg returned -32 [ 151.366849][ T5901] usbtmc 2-1:16.0: can't read capabilities [ 151.409467][ T5839] pvrusb2: Hardware description: Terratec Grabster AV400 [ 151.434669][ T5839] pvrusb2: ********** [ 151.445702][ T7161] fuse: Bad value for 'group_id' [ 151.448116][ T5839] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 151.451331][ T7161] fuse: Bad value for 'group_id' [ 151.488956][ T5839] pvrusb2: Important functionality might not be entirely working. [ 151.512925][ T5839] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 151.524394][ T5839] pvrusb2: ********** [ 151.618211][ T2363] pvrusb2: Invalid write control endpoint [ 151.744871][ T2363] pvrusb2: Invalid write control endpoint [ 151.768248][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 151.808051][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 151.812841][ T7173] binder: BINDER_SET_CONTEXT_MGR already set [ 151.817204][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 151.833268][ T2363] pvrusb2: Device being rendered inoperable [ 151.840629][ T7173] binder: 7170:7173 ioctl 4018620d 200000004a80 returned -16 [ 151.851853][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 151.862761][ T9] usb 3-1: USB disconnect, device number 9 [ 151.892689][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 151.905194][ T2363] pvrusb2: Attached sub-driver cx25840 [ 151.915644][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 151.926186][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 152.781115][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.937246][ T7182] syzkaller0: entered promiscuous mode [ 152.943246][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 152.949043][ T7182] syzkaller0: entered allmulticast mode [ 152.957504][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.984998][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.019990][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.044890][ T5839] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 153.055092][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.063265][ T5839] usb 3-1: Product: syz [ 153.067553][ T5839] usb 3-1: Manufacturer: syz [ 153.072238][ T5839] usb 3-1: SerialNumber: syz [ 153.328848][ T5839] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 153.385275][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 153.408739][ T5839] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 153.432342][ T5839] usb 3-1: USB disconnect, device number 10 [ 153.529240][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.420872][ T5839] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.592833][ T5839] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 154.616651][ T5839] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 154.649550][ T5839] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 154.659740][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.673489][ T5839] usb 5-1: Product: syz [ 154.678979][ T5839] usb 5-1: Manufacturer: syz [ 154.686521][ T5839] usb 5-1: SerialNumber: syz [ 154.880903][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.911778][ T5839] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.924896][ T5839] usb 5-1: unit 6 not found! [ 154.935767][ T5839] usb 5-1: unit 4 not found! [ 155.040891][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 155.058801][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.076900][ T5839] usb 5-1: USB disconnect, device number 9 [ 155.097699][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.134671][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 155.174593][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.217937][ T9] usb 4-1: config 0 descriptor?? [ 155.344187][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.410'. [ 155.657516][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 155.684197][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.729728][ T9] usb 4-1: USB disconnect, device number 13 [ 155.830341][ T7236] syzkaller0: entered promiscuous mode [ 155.837391][ T7236] syzkaller0: entered allmulticast mode [ 156.059078][ T7241] syzkaller0: entered promiscuous mode [ 156.065509][ T7241] syzkaller0: entered allmulticast mode [ 156.635102][ T7152] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 156.735927][ T9] usb 2-1: USB disconnect, device number 9 [ 157.198056][ T7254] syzkaller0: entered promiscuous mode [ 157.229718][ T7254] syzkaller0: entered allmulticast mode [ 157.280601][ T7258] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 157.305243][ T7258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.560831][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.754124][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 157.767098][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 157.840890][ T808] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.851624][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 157.861043][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.872019][ T9] usb 4-1: Product: syz [ 157.897900][ T9] usb 4-1: Manufacturer: syz [ 157.909392][ T9] usb 4-1: SerialNumber: syz [ 157.979009][ T7267] syzkaller0: entered promiscuous mode [ 158.000876][ T7267] syzkaller0: entered allmulticast mode [ 158.042504][ T808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.075486][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.112344][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.132010][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.151569][ T808] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.161029][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.169170][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 158.179887][ T808] usb 2-1: config 0 descriptor?? [ 158.210756][ T9] usb 4-1: unit 6 not found! [ 158.230793][ T9] usb 4-1: unit 4 not found! [ 158.418907][ T9] usb 4-1: USB disconnect, device number 14 [ 158.583461][ T7271] syz.4.428 uses obsolete (PF_INET,SOCK_PACKET) [ 158.668647][ T808] usbhid 2-1:0.0: can't add hid device: -71 [ 158.681033][ T808] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 158.743630][ T808] usb 2-1: USB disconnect, device number 10 [ 159.291267][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 159.356290][ T7292] syzkaller0: entered promiscuous mode [ 159.382902][ T7292] syzkaller0: entered allmulticast mode [ 159.479879][ T7296] tc_dump_action: action bad kind [ 159.889173][ T7307] syzkaller0: entered promiscuous mode [ 160.394533][ T7314] tipc: Enabling of bearer rejected, already enabled [ 160.823120][ T808] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.003296][ T808] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.040811][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.069418][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 161.070935][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.119002][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.160677][ T808] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.194321][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.234520][ T808] usb 2-1: config 0 descriptor?? [ 161.271148][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 161.292907][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.307320][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.330763][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.355797][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 161.370977][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.380673][ T9] usb 5-1: Product: syz [ 161.387898][ T9] usb 5-1: Manufacturer: syz [ 161.393358][ T9] usb 5-1: SerialNumber: syz [ 161.425047][ T9] usb 5-1: config 0 descriptor?? [ 161.571115][ T5839] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 161.667913][ T808] usbhid 2-1:0.0: can't add hid device: -71 [ 161.686539][ T808] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.712548][ T808] usb 2-1: USB disconnect, device number 11 [ 161.745404][ T5839] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.760857][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.775215][ T5839] usb 4-1: config 0 has no interface number 0 [ 161.797166][ T5839] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.819462][ T5839] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 161.843332][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 161.847803][ T5839] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 161.874686][ T5839] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 161.901106][ T5839] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 161.912886][ T5839] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.924062][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 161.945155][ T5839] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.970806][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.975995][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.983295][ T5839] usb 4-1: config 0 descriptor?? [ 161.998553][ T7325] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 162.023260][ T7325] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 162.024414][ T5844] usb 3-1: config 4 interface 0 has no altsetting 0 [ 162.044426][ T9] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 162.050895][ T5839] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 162.068745][ T5844] usb 3-1: string descriptor 0 read error: -22 [ 162.075402][ T5844] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 162.093240][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 162.101278][ T5844] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 162.142265][ T5844] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 162.174139][ T5844] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 162.194228][ T5844] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 162.201147][ T808] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.202170][ T5844] usb 3-1: media controller created [ 162.232660][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.257824][ T9] usb 5-1: USB disconnect, device number 10 [ 162.335583][ T5901] usb 4-1: USB disconnect, device number 15 [ 162.361825][ T5901] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 162.363158][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.406025][ T808] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 162.426534][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.448606][ T808] usb 1-1: Product: syz [ 162.458424][ T808] usb 1-1: Manufacturer: syz [ 162.470269][ T808] usb 1-1: SerialNumber: syz [ 162.977131][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.986843][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.005422][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.457'. [ 163.343157][ T5844] zl10353_read_register: readreg error (reg=127, ret==0) [ 163.385053][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.433879][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.508147][ T5844] usb 3-1: USB disconnect, device number 11 [ 163.957737][ T1044] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.004822][ T1044] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.047075][ T808] usb 1-1: us122l: couldn't allocate write buffer [ 164.051458][ T1044] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.077276][ T808] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 164.103911][ T1044] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.158587][ T808] usb 1-1: USB disconnect, device number 9 [ 164.219143][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.675432][ T5844] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 164.851176][ T5844] usb 2-1: device descriptor read/64, error -71 [ 164.984386][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 164.984399][ T30] audit: type=1326 audit(1775158497.231:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6819c819 code=0x7ffc0000 [ 165.040953][ T30] audit: type=1326 audit(1775158497.231:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6819c819 code=0x7ffc0000 [ 165.083892][ T30] audit: type=1326 audit(1775158497.261:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6819c819 code=0x7ffc0000 [ 165.117715][ T30] audit: type=1326 audit(1775158497.261:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6819c819 code=0x7ffc0000 [ 165.154040][ T5844] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 165.163615][ T30] audit: type=1326 audit(1775158497.271:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efe6819c819 code=0x7ffc0000 [ 165.187125][ T30] audit: type=1326 audit(1775158497.311:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6815d04e code=0x7ffc0000 [ 165.248844][ T30] audit: type=1326 audit(1775158497.311:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6815d04e code=0x7ffc0000 [ 165.274188][ T30] audit: type=1326 audit(1775158497.311:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6815d04e code=0x7ffc0000 [ 165.300074][ T30] audit: type=1326 audit(1775158497.321:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6815d04e code=0x7ffc0000 [ 165.327212][ T30] audit: type=1326 audit(1775158497.321:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.0.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efe6815d04e code=0x7ffc0000 [ 165.353321][ T5844] usb 2-1: device descriptor read/64, error -71 [ 165.361346][ T5901] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 165.435298][ T7382] syzkaller0: entered promiscuous mode [ 165.481053][ T5844] usb usb2-port1: attempt power cycle [ 165.542213][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 165.565652][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.575736][ T5901] usb 5-1: config 4 interface 0 has no altsetting 0 [ 165.592957][ T5901] usb 5-1: string descriptor 0 read error: -22 [ 165.604989][ T5901] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 165.644985][ T5901] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 165.707579][ T5901] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 165.755995][ T5901] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.781894][ T5901] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 165.811083][ T5901] usb 5-1: media controller created [ 165.830821][ T5844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.872357][ T5844] usb 2-1: device descriptor read/8, error -71 [ 165.890233][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.130848][ T5844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 166.174901][ T5844] usb 2-1: device descriptor read/8, error -71 [ 166.301376][ T5844] usb usb2-port1: unable to enumerate USB device [ 166.955563][ T5901] zl10353_read_register: readreg error (reg=127, ret==0) [ 167.072864][ T5901] usb 5-1: USB disconnect, device number 11 [ 167.802833][ T7412] kvm: MONITOR instruction emulated as NOP! [ 167.862591][ T24] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 167.970277][ T7419] netlink: 48 bytes leftover after parsing attributes in process `syz.4.487'. [ 168.023701][ T24] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 168.038538][ T24] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 168.077714][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 168.109157][ T24] usb 4-1: config 1 has no interface number 0 [ 168.137126][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 168.189719][ T24] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 168.239919][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 168.271713][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.309362][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.325244][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 168.420880][ T5844] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 168.450924][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.551130][ T5901] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.572597][ T5844] usb 5-1: device descriptor read/64, error -71 [ 168.643685][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.740789][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 168.756571][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.782725][ T5901] usb 1-1: config 4 interface 0 has no altsetting 0 [ 168.798958][ T5901] usb 1-1: string descriptor 0 read error: -22 [ 168.812105][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.823381][ T5901] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 168.841834][ T5901] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 168.851349][ T5844] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 168.896356][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.908399][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.919379][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.929464][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.942568][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.986369][ T5901] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 169.004965][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.013625][ T5159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.014407][ T5901] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 169.040820][ T5844] usb 5-1: device descriptor read/64, error -71 [ 169.067395][ T5159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.082479][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.084086][ T5901] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 169.103731][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.171174][ T5844] usb usb5-port1: attempt power cycle [ 169.194352][ T5901] usb 1-1: media controller created [ 169.270783][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.423270][ T5901] zl10353_read_register: readreg error (reg=127, ret==0) [ 169.574560][ T5844] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.584486][ T5901] usb 1-1: USB disconnect, device number 10 [ 169.632875][ T5844] usb 5-1: device descriptor read/8, error -71 [ 169.684422][ T49] bridge_slave_1: left allmulticast mode [ 169.704394][ T49] bridge_slave_1: left promiscuous mode [ 169.724038][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.761917][ T49] bridge_slave_0: left allmulticast mode [ 169.778159][ T49] bridge_slave_0: left promiscuous mode [ 169.790825][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.853104][ T24] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 169.861806][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'. [ 169.872953][ T24] snd_usb_pod 4-1:1.1: invalid control EP [ 169.882833][ T5844] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.897141][ T24] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 169.911244][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 169.911796][ T24] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 169.915577][ T5844] usb 5-1: device descriptor read/8, error -71 [ 170.021246][ T5844] usb usb5-port1: unable to enumerate USB device [ 170.098978][ T5844] usb 4-1: USB disconnect, device number 16 [ 170.242685][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.262248][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.281322][ T49] bond0 (unregistering): Released all slaves [ 170.298819][ T49] bond1 (unregistering): Released all slaves [ 170.465044][ T49] tipc: Disabling bearer [ 170.483235][ T49] tipc: Left network mode [ 170.941831][ T7438] chnl_net:caif_netlink_parms(): no params data found [ 171.182486][ T51] Bluetooth: hci3: command tx timeout [ 171.231075][ T7471] fuse: Unknown parameter 'grou00000000000000000000' [ 171.310171][ T49] hsr_slave_0: left promiscuous mode [ 171.359977][ T49] hsr_slave_1: left promiscuous mode [ 171.393598][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.444557][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.492443][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.524882][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.689072][ T49] veth1_macvtap: left promiscuous mode [ 171.719132][ T49] veth0_macvtap: left promiscuous mode [ 171.733179][ T49] veth1_vlan: left promiscuous mode [ 171.739816][ T49] veth0_vlan: left promiscuous mode [ 172.375271][ T49] team0 (unregistering): Port device team_slave_1 removed [ 172.402228][ T49] team0 (unregistering): Port device team_slave_0 removed [ 172.783650][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.800171][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.857214][ T7438] bridge_slave_0: entered allmulticast mode [ 172.896711][ T7438] bridge_slave_0: entered promiscuous mode [ 172.923546][ T5929] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 172.925997][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.961802][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.969446][ T7438] bridge_slave_1: entered allmulticast mode [ 172.979302][ T7438] bridge_slave_1: entered promiscuous mode [ 173.014043][ T7499] syzkaller0: entered promiscuous mode [ 173.023057][ T7499] syzkaller0: entered allmulticast mode [ 173.123497][ T5929] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 173.123964][ T7438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.140773][ T5929] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 173.186971][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 173.187900][ T7438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.205546][ T808] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 173.237407][ T5929] usb 3-1: config 1 has no interface number 0 [ 173.261193][ T51] Bluetooth: hci3: command tx timeout [ 173.272927][ T5929] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 173.317869][ T5929] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 173.341488][ T5929] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 173.352889][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.373037][ T808] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 173.374490][ T5929] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 173.423775][ T808] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 173.463500][ T808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 173.499411][ T808] usb 4-1: config 1 has no interface number 0 [ 173.517094][ T7438] team0: Port device team_slave_0 added [ 173.526757][ T808] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 173.526776][ T808] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 173.526801][ T808] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 173.526813][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.558312][ T7438] team0: Port device team_slave_1 added [ 173.567971][ T808] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 173.722475][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.722511][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.722535][ T7438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.737731][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.738868][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.738897][ T7438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.006537][ T7438] hsr_slave_0: entered promiscuous mode [ 174.009435][ T7438] hsr_slave_1: entered promiscuous mode [ 174.010112][ T7438] debugfs: 'hsr0' already exists in 'hsr' [ 174.010151][ T7438] Cannot create hsr debugfs directory [ 174.706062][ T7530] fuse: Unknown parameter 'grou00000000000000000000' [ 175.337585][ T5929] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 175.351604][ T51] Bluetooth: hci3: command tx timeout [ 175.369334][ T5929] snd_usb_pod 3-1:1.1: invalid control EP [ 175.375961][ T5929] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 175.383320][ T5929] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 175.392903][ T5929] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 175.573855][ T7438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.586576][ T5921] usb 3-1: USB disconnect, device number 12 [ 175.600103][ T808] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 175.616779][ T7438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.627763][ T808] snd_usb_pod 4-1:1.1: invalid control EP [ 175.639088][ T808] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 175.651287][ T808] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 175.658534][ T7438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.672510][ T808] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 175.682551][ T7438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.803345][ T5921] usb 4-1: USB disconnect, device number 17 [ 175.873334][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.911960][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.945272][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.952541][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.018736][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.025994][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.099354][ T7555] syzkaller0: entered promiscuous mode [ 176.120923][ T7555] syzkaller0: entered allmulticast mode [ 177.045310][ T7571] syzkaller0: entered promiscuous mode [ 177.064157][ T7571] syzkaller0: entered allmulticast mode [ 177.108088][ T7567] tipc: Enabling of bearer rejected, already enabled [ 177.420877][ T51] Bluetooth: hci3: command tx timeout [ 177.960957][ T5955] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 178.132536][ T5955] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 178.158371][ T5955] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 178.190262][ T5955] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 178.200849][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.217136][ T5955] usb 4-1: Product: syz [ 178.233434][ T5955] usb 4-1: Manufacturer: syz [ 178.240796][ T5955] usb 4-1: SerialNumber: syz [ 178.483212][ T5955] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 178.503309][ T5955] usb 4-1: unit 6 not found! [ 178.507968][ T5955] usb 4-1: unit 2 not found! [ 178.629485][ T5955] usb 4-1: USB disconnect, device number 18 [ 178.730282][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.021818][ T5844] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 181.206039][ T5844] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 181.236922][ T5844] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 181.250538][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 181.259871][ T5844] usb 4-1: config 1 has no interface number 0 [ 181.266129][ T5844] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 181.276794][ T5844] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 181.291748][ T5844] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 181.300922][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.319569][ T5844] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 181.714090][ T5844] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 181.731304][ T5844] snd_usb_pod 4-1:1.1: invalid control EP [ 181.746252][ T5844] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 181.764015][ T5844] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 181.781163][ T5844] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 182.306385][ T5929] usb 4-1: USB disconnect, device number 19 [ 184.501466][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.528260][ T7638] tipc: Enabling of bearer rejected, already enabled [ 184.992864][ T5929] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 185.176258][ T5929] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 185.233477][ T5929] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 185.285499][ T5929] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 185.316337][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.336751][ T7438] veth0_vlan: entered promiscuous mode [ 185.340189][ T5929] usb 5-1: Product: syz [ 185.369136][ T5929] usb 5-1: Manufacturer: syz [ 185.388617][ T5929] usb 5-1: SerialNumber: syz [ 185.392803][ T7438] veth1_vlan: entered promiscuous mode [ 185.522279][ T7438] veth0_macvtap: entered promiscuous mode [ 185.566938][ T7438] veth1_macvtap: entered promiscuous mode [ 185.652021][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.652848][ T5929] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 185.707014][ T5929] usb 5-1: unit 6 not found! [ 185.730157][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.741427][ T5929] usb 5-1: unit 2 not found! [ 185.791678][ T138] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.823172][ T138] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.867121][ T138] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.902508][ T138] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.943050][ T7672] lo speed is unknown, defaulting to 1000 [ 185.952753][ T5929] usb 5-1: USB disconnect, device number 16 [ 186.072590][ T7672] lo speed is unknown, defaulting to 1000 [ 186.097849][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.244795][ T7672] lo speed is unknown, defaulting to 1000 [ 186.253041][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.288647][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.404299][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.425350][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.468460][ T7687] syzkaller0: entered promiscuous mode [ 186.500092][ T7687] syzkaller0: entered allmulticast mode [ 187.161072][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.207907][ T7672] infiniband lyz2: set active [ 187.214474][ T5844] lo speed is unknown, defaulting to 1000 [ 187.227617][ T7672] infiniband lyz2: added lo [ 187.248996][ T7719] netlink: 48 bytes leftover after parsing attributes in process `syz.5.556'. [ 187.259505][ T7672] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 187.263770][ T7672] infiniband lyz2: Couldn't open port 1 [ 187.279869][ T7672] smbdirect: ib_dev[lyz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 187.296616][ T7672] smbdirect: ib_dev[lyz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 187.315276][ T7672] smbdirect: ib_dev[lyz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 187.320845][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 187.341294][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 187.348995][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.382516][ T7672] RDS/IB: lyz2: added [ 187.387461][ T7672] smc: adding ib device lyz2 with port count 1 [ 187.392703][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.406211][ T7672] smc: ib device lyz2 port 1 has no pnetid [ 187.418012][ T5929] lo speed is unknown, defaulting to 1000 [ 187.436908][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.445769][ T7672] lo speed is unknown, defaulting to 1000 [ 187.489271][ T5921] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 187.515718][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.531065][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 187.547572][ T5921] usb 1-1: Product: syz [ 187.557801][ T5921] usb 1-1: Manufacturer: syz [ 187.565686][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 187.578393][ T5921] usb 1-1: SerialNumber: syz [ 187.609406][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 187.630004][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.640754][ T24] usb 3-1: Product: syz [ 187.645054][ T24] usb 3-1: Manufacturer: syz [ 187.649805][ T24] usb 3-1: SerialNumber: syz [ 187.837332][ T5921] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 187.976708][ T5921] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 187.987888][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 188.003295][ T24] usb 3-1: unit 6 not found! [ 188.011022][ T5921] usb 1-1: USB disconnect, device number 11 [ 188.107320][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.186628][ T24] usb 3-1: USB disconnect, device number 13 [ 188.259974][ T7672] lo speed is unknown, defaulting to 1000 [ 188.339057][ T6361] udevd[6361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.842706][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.563'. [ 189.263059][ T7672] lo speed is unknown, defaulting to 1000 [ 189.451455][ T5921] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 189.532870][ T7763] warning: `syz.4.572' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 189.592308][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 189.622902][ T5921] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 189.631461][ T5921] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 189.640135][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 189.646053][ T7672] lo speed is unknown, defaulting to 1000 [ 189.649261][ T5921] usb 1-1: config 1 has no interface number 0 [ 189.669039][ T5921] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 189.679112][ T5921] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.692338][ T5921] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.701523][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.726219][ T5921] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 189.968144][ T7672] lo speed is unknown, defaulting to 1000 [ 190.146231][ T5921] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 190.191760][ T5921] snd_usb_pod 1-1:1.1: invalid control EP [ 190.218874][ T5921] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 190.249037][ T5921] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 190.308927][ T5921] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 190.386584][ T7779] tipc: Enabled bearer , priority 0 [ 190.502714][ T7779] syzkaller0: entered promiscuous mode [ 190.521814][ T7779] syzkaller0: entered allmulticast mode [ 190.534385][ T7779] tipc: Resetting bearer [ 190.540328][ T7760] smbdirect: ib_dev[lyz2] renamed to [syz2] [ 190.589541][ T7778] tipc: Resetting bearer [ 190.930812][ T5921] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 191.117712][ T5921] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 191.134676][ T5921] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 191.168797][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 191.201092][ T5921] usb 4-1: config 1 has no interface number 0 [ 191.207984][ T5921] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 191.219271][ T5921] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 191.220539][ T5980] usb 1-1: USB disconnect, device number 12 [ 191.255317][ T5921] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 191.265715][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.295652][ T5921] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 192.348602][ T5921] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 192.357535][ T5921] snd_usb_pod 4-1:1.1: invalid control EP [ 192.363808][ T5921] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 192.372117][ T5921] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 192.379751][ T5921] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 192.582063][ T5844] usb 4-1: USB disconnect, device number 20 [ 192.995474][ T7817] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 193.004449][ T7817] netlink: 224 bytes leftover after parsing attributes in process `syz.0.590'. [ 194.308123][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316242][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.709736][ T7778] tipc: Disabling bearer [ 194.720011][ T7784] syzkaller0: entered promiscuous mode [ 194.725867][ T7784] syzkaller0: entered allmulticast mode [ 194.752280][ T808] tipc: Node number set to 403736208 [ 195.196367][ T7884] binder: 7883:7884 ioctl 4018620d 0 returned -22 [ 195.342983][ T5844] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.378558][ T7887] syzkaller0: entered promiscuous mode [ 195.393510][ T7887] syzkaller0: entered allmulticast mode [ 195.533553][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 195.563003][ T5844] usb 3-1: no configurations [ 195.579542][ T5844] usb 3-1: can't read configurations, error -22 [ 195.782687][ T5844] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 195.982387][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 195.999917][ T5844] usb 3-1: no configurations [ 196.006887][ T5844] usb 3-1: can't read configurations, error -22 [ 196.018184][ T5844] usb usb3-port1: attempt power cycle [ 196.171182][ T808] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 196.196909][ T7906] dummy0: entered allmulticast mode [ 196.302861][ T7911] binder: 7910:7911 ioctl 4018620d 0 returned -22 [ 196.342479][ T808] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.354250][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.365388][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 196.375630][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.388943][ T808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.398123][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.406242][ T5844] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 196.415457][ T808] usb 5-1: config 0 descriptor?? [ 196.441543][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 196.451009][ T5844] usb 3-1: no configurations [ 196.457055][ T5844] usb 3-1: can't read configurations, error -22 [ 196.612570][ T5844] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 196.642038][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 196.648589][ T5844] usb 3-1: no configurations [ 196.653763][ T5844] usb 3-1: can't read configurations, error -22 [ 196.660534][ T5844] usb usb3-port1: unable to enumerate USB device [ 196.847976][ T808] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 196.869815][ T808] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 196.883250][ T808] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 196.893855][ T808] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 196.904991][ T808] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 196.910358][ T7920] syzkaller0: entered promiscuous mode [ 196.923086][ T7920] syzkaller0: entered allmulticast mode [ 196.936786][ T808] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 197.149905][ T808] usb 5-1: USB disconnect, device number 17 [ 197.499012][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 197.521032][ T7932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.592168][ T7951] binder: 7948:7951 ioctl 4018620d 0 returned -22 [ 197.602357][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.141732][ T5844] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 198.322543][ T5844] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 198.350595][ T5844] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 198.365178][ T5844] usb 5-1: config 1 interface 0 has no altsetting 0 [ 198.376085][ T5844] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 198.395541][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.406932][ T5844] usb 5-1: Product: syz [ 198.412037][ T5844] usb 5-1: Manufacturer: syz [ 198.416777][ T5844] usb 5-1: SerialNumber: syz [ 198.428182][ T7962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 198.449531][ T7962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.260929][ T8017] binder: BINDER_SET_CONTEXT_MGR already set [ 199.284198][ T8017] binder: 8010:8017 ioctl 4018620d 200000004a80 returned -16 [ 199.861661][ T808] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 199.975697][ T8015] lec0: mtu less than device minimum [ 199.993440][ T8015] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 200.001594][ T808] usb 3-1: device descriptor read/64, error -71 [ 200.032570][ T8013] lec:lec_atm_close: lec0: Shut down! [ 200.242065][ T808] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.400855][ T808] usb 3-1: device descriptor read/64, error -71 [ 200.532901][ T808] usb usb3-port1: attempt power cycle [ 200.881431][ T808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 200.940269][ T808] usb 3-1: device descriptor read/8, error -71 [ 201.007239][ T5844] rtl8150 5-1:1.0: couldn't reset the device [ 201.025373][ T5844] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 201.063776][ T5844] usb 5-1: USB disconnect, device number 18 [ 201.205081][ T808] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.234363][ T8075] syzkaller0: entered promiscuous mode [ 201.243542][ T808] usb 3-1: device descriptor read/8, error -71 [ 201.252702][ T8075] syzkaller0: entered allmulticast mode [ 201.364706][ T808] usb usb3-port1: unable to enumerate USB device [ 201.592267][ T8089] binder: BINDER_SET_CONTEXT_MGR already set [ 201.610172][ T8089] binder: 8084:8089 ioctl 4018620d 200000004a80 returned -16 [ 201.640847][ T5844] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 201.802757][ T5844] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 201.814531][ T5844] usb 1-1: config 0 has no interface number 0 [ 201.829488][ T5844] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.852406][ T5844] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 201.876053][ T5844] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 201.901582][ T5844] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 201.925949][ T5844] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 201.948510][ T5844] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 201.977530][ T5844] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 201.998229][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.032291][ T5844] usb 1-1: config 0 descriptor?? [ 202.050139][ T8081] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.059489][ T8081] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.107596][ T5844] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 202.201689][ T8102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.296645][ T808] usb 1-1: USB disconnect, device number 13 [ 202.329089][ T808] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 202.784362][ T5504] lec:lec_start_xmit: lec0:No lecd attached [ 203.011102][ T5921] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.078188][ T8127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.112887][ T8133] mpoa:mpoad_close: (lec0) going down [ 203.185943][ T5921] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 203.217725][ T5921] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 203.244374][ T5921] usb 5-1: config 1 interface 0 has no altsetting 0 [ 203.280121][ T5921] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 203.299605][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.307841][ T5921] usb 5-1: Product: syz [ 203.313014][ T5921] usb 5-1: Manufacturer: syz [ 203.318671][ T5921] usb 5-1: SerialNumber: syz [ 203.334134][ T8122] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.346172][ T8122] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.749169][ T8144] fuse: Bad value for 'fd' [ 203.786097][ T8148] syzkaller0: entered promiscuous mode [ 203.791891][ T8148] syzkaller0: entered allmulticast mode [ 203.823589][ T8149] binder: BINDER_SET_CONTEXT_MGR already set [ 203.831009][ T8149] binder: 8145:8149 ioctl 4018620d 200000004a80 returned -16 [ 204.470786][ T5844] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 204.500792][ T5955] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 204.600849][ T5844] usb 1-1: device descriptor read/64, error -71 [ 204.652817][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 204.662040][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.672590][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.686152][ T5955] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 204.695625][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.710163][ T5955] usb 3-1: config 0 descriptor?? [ 204.736456][ T5955] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 204.844992][ T5844] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 204.976348][ T8175] fuse: Bad value for 'fd' [ 205.010819][ T5844] usb 1-1: device descriptor read/64, error -71 [ 205.122629][ T5844] usb usb1-port1: attempt power cycle [ 205.490818][ T5844] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 205.531385][ T5844] usb 1-1: device descriptor read/8, error -71 [ 205.740617][ T5921] rtl8150 5-1:1.0: couldn't reset the device [ 205.754410][ T5921] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 205.774602][ T5921] usb 5-1: USB disconnect, device number 19 [ 205.792339][ T5844] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 205.832714][ T5844] usb 1-1: device descriptor read/8, error -71 [ 205.941576][ T5844] usb usb1-port1: unable to enumerate USB device [ 206.014994][ T8193] binder: 8192:8193 ioctl c0306201 0 returned -14 [ 206.446178][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 206.462542][ T8204] syzkaller0: entered promiscuous mode [ 206.481138][ T8204] syzkaller0: entered allmulticast mode [ 206.572442][ T8207] fuse: Bad value for 'fd' [ 206.801255][ T8214] syzkaller0: entered promiscuous mode [ 206.807072][ T8214] syzkaller0: entered allmulticast mode [ 207.294331][ T808] usb 3-1: USB disconnect, device number 22 [ 207.358768][ T8223] binder: 8222:8223 ioctl c0306201 0 returned -14 [ 207.900713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 207.910225][ C1] lec:lec_tx_timeout: lec0 [ 207.915367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.982899][ T808] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 207.999543][ T8239] fuse: Bad value for 'fd' [ 208.055024][ T5844] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 208.120822][ T808] usb 4-1: device descriptor read/64, error -71 [ 208.173239][ T8241] syzkaller0: entered promiscuous mode [ 208.189096][ T8241] syzkaller0: entered allmulticast mode [ 208.246049][ T5844] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 208.268668][ T5844] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 208.302121][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 208.322809][ T5844] usb 3-1: config 1 has no interface number 0 [ 208.328998][ T5844] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 208.349556][ T5844] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 208.373397][ T5844] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 208.385603][ T808] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 208.393810][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.419387][ T5844] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 208.530812][ T808] usb 4-1: device descriptor read/64, error -71 [ 208.661846][ T808] usb usb4-port1: attempt power cycle [ 208.853211][ T8255] binder: 8254:8255 ioctl c0306201 0 returned -14 [ 209.010797][ T808] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 209.052179][ T808] usb 4-1: device descriptor read/8, error -71 [ 209.120708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.153257][ T8262] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.207691][ T8262] Cannot find add_set index 0 as target [ 209.310867][ T808] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 209.351642][ T808] usb 4-1: device descriptor read/8, error -71 [ 209.488168][ T808] usb usb4-port1: unable to enumerate USB device [ 209.953183][ T5844] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 209.988066][ T5844] snd_usb_pod 3-1:1.1: invalid control EP [ 210.012883][ T5844] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 210.037899][ T5844] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 210.064702][ T5844] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 210.099944][ T71] tipc: Subscription rejected, illegal request [ 210.183944][ T5955] usb 3-1: USB disconnect, device number 23 [ 210.360305][ T8280] fuse: Bad value for 'fd' [ 210.592706][ T8287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'. [ 211.474388][ T8323] fuse: Bad value for 'fd' [ 211.632465][ T8328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.724'. [ 211.810796][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 212.004811][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 212.038103][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.061075][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.081750][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 212.122154][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.161320][ T24] usb 3-1: config 0 descriptor?? [ 212.930715][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 212.938794][ C1] lec:lec_tx_timeout: lec0 [ 212.943460][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 213.194623][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.5.735'. [ 214.615409][ T5839] usb 3-1: USB disconnect, device number 24 [ 215.408083][ T8350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.657782][ T8432] syzkaller0: entered promiscuous mode [ 215.664639][ T8432] syzkaller0: entered allmulticast mode [ 215.963645][ T8442] syzkaller0: entered promiscuous mode [ 215.969418][ T8442] syzkaller0: entered allmulticast mode [ 216.280788][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.452370][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 216.472856][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.504012][ T5921] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.516492][ T5921] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 216.533159][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.560491][ T5921] usb 6-1: config 0 descriptor?? [ 216.932109][ T8486] syzkaller0: entered promiscuous mode [ 216.942962][ T8486] syzkaller0: entered allmulticast mode [ 217.258976][ T8497] syzkaller0: entered promiscuous mode [ 217.286106][ T8497] syzkaller0: entered allmulticast mode [ 217.356408][ T8502] syz_tun: entered allmulticast mode [ 217.368435][ T8501] syz_tun: left allmulticast mode [ 217.499750][ T8490] mpoa:mpoad_close: (lec0) going down [ 217.670355][ T8504] syz.0.775 (8504) used greatest stack depth: 18040 bytes left [ 217.753279][ T8509] syz.0.775 (8509) used greatest stack depth: 15552 bytes left [ 217.950717][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 217.958845][ C1] lec:lec_tx_timeout: lec0 [ 217.963537][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 218.101139][ T5921] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 218.264931][ T5921] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 218.291380][ T5921] usb 4-1: config 0 has no interface number 0 [ 218.316362][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.349297][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 218.384096][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 218.425853][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 218.468157][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 218.498561][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.517281][ T8536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.526627][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 218.540866][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.569142][ T5921] usb 4-1: config 0 descriptor?? [ 218.584848][ T8522] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.595138][ T8522] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 218.610734][ T5921] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 218.873508][ T808] usb 4-1: USB disconnect, device number 25 [ 218.909286][ T808] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 219.068005][ T24] usb 6-1: USB disconnect, device number 2 [ 219.161048][ T5844] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 219.250857][ T5921] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 219.340914][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 219.359127][ T5844] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 219.380962][ T5844] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.400764][ T5844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.418117][ T5844] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.431059][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 219.451027][ T5844] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.471833][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.488126][ T5844] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.505181][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.531651][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.545073][ T5921] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 219.579196][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.623119][ T5921] usb 1-1: config 0 descriptor?? [ 219.643011][ T5921] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 219.765243][ T5844] usb 5-1: usb_control_msg returned -32 [ 219.776957][ T5844] usbtmc 5-1:16.0: can't read capabilities [ 219.851492][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 220.015058][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.028821][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.046800][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 220.056828][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.070158][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.079311][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.090255][ T24] usb 6-1: config 0 descriptor?? [ 220.270785][ T5844] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 220.432491][ T5844] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 220.444953][ T5844] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 220.454421][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.462506][ T5844] usb 4-1: Product: syz [ 220.467220][ T5844] usb 4-1: Manufacturer: syz [ 220.472866][ T5844] usb 4-1: SerialNumber: syz [ 220.489649][ T5844] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 220.506384][ T24] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 220.516043][ T24] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 220.524510][ T24] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 220.532397][ T24] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 220.539873][ T24] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 220.548492][ T24] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 220.570203][ T24] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 220.716633][ T5955] usb 6-1: USB disconnect, device number 3 [ 220.914705][ T5844] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 220.926309][ T5844] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 220.936465][ T5844] usb 4-1: media controller created [ 220.993645][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.318950][ T8598] block nbd0: not configured, cannot reconfigure [ 221.724811][ T5844] usb 4-1: USB disconnect, device number 26 [ 222.058437][ T24] usb 1-1: USB disconnect, device number 18 [ 222.970706][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 222.978814][ C1] lec:lec_tx_timeout: lec0 [ 222.983446][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 223.184429][ T8628] syzkaller0: entered promiscuous mode [ 223.190172][ T8628] syzkaller0: entered allmulticast mode [ 223.190942][ T5955] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 223.280793][ T5921] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 223.332845][ T5955] usb 6-1: device descriptor read/64, error -71 [ 223.432538][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.467217][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.487517][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.498260][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.511696][ T5921] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.520974][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.533879][ T5921] usb 4-1: config 0 descriptor?? [ 223.582171][ T5955] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 223.720846][ T5955] usb 6-1: device descriptor read/64, error -71 [ 223.720932][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 223.833674][ T5955] usb usb6-port1: attempt power cycle [ 223.882789][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 223.895645][ T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 223.905121][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.916546][ T24] usb 1-1: Product: syz [ 223.920942][ T24] usb 1-1: Manufacturer: syz [ 223.925861][ T24] usb 1-1: SerialNumber: syz [ 223.944232][ T24] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 223.963529][ T5921] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 223.988968][ T5921] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 224.169037][ T5929] usb 4-1: USB disconnect, device number 27 [ 224.181377][ T5955] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 224.211492][ T5955] usb 6-1: device descriptor read/8, error -71 [ 224.357423][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.381325][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 224.400812][ T24] usb 1-1: media controller created [ 224.435438][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.462283][ T5955] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 224.501569][ T5955] usb 6-1: device descriptor read/8, error -71 [ 224.621992][ T5955] usb usb6-port1: unable to enumerate USB device [ 224.828154][ T8638] binder: 8636:8638 ioctl c0306201 0 returned -14 [ 224.837269][ T8638] binder: BINDER_SET_CONTEXT_MGR already set [ 224.845052][ T8638] binder: 8636:8638 ioctl 4018620d 200000004a80 returned -16 [ 225.038181][ T8546] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 225.087829][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 225.095904][ T5929] usb 5-1: USB disconnect, device number 20 [ 225.242969][ T5955] usb 1-1: USB disconnect, device number 19 [ 225.435704][ T8659] syzkaller0: entered promiscuous mode [ 225.453237][ T8659] syzkaller0: entered allmulticast mode [ 225.669907][ T8670] binder: 8665:8670 ioctl c0306201 0 returned -14 [ 225.851805][ T8675] lo speed is unknown, defaulting to 1000 [ 225.863273][ T8675] lo speed is unknown, defaulting to 1000 [ 225.870127][ T8675] lo speed is unknown, defaulting to 1000 [ 226.028115][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 226.042786][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 226.272526][ T8686] netlink: 48 bytes leftover after parsing attributes in process `syz.5.839'. [ 226.331150][ T5839] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 226.376429][ T8693] fuse: Unknown parameter 'use00000000000000000000' [ 226.468245][ T8675] infiniband lyz2: set down [ 226.473425][ T5929] lo speed is unknown, defaulting to 1000 [ 226.496907][ T8675] infiniband lyz2: added lo [ 226.523256][ T5839] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 226.559402][ T5839] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 226.576278][ T8675] smbdirect: ib_dev[lyz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 226.609391][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.626529][ T8696] syzkaller0: entered promiscuous mode [ 226.636954][ T5839] usb 3-1: Product: syz [ 226.643339][ T8675] smbdirect: ib_dev[lyz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 226.669444][ T8696] syzkaller0: entered allmulticast mode [ 226.679556][ T5839] usb 3-1: Manufacturer: syz [ 226.694630][ T5839] usb 3-1: SerialNumber: syz [ 226.720920][ T8675] smbdirect: ib_dev[lyz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 226.736005][ T5839] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 226.819072][ T8675] RDS/IB: lyz2: added [ 226.823413][ T8675] smc: adding ib device lyz2 with port count 1 [ 226.829819][ T8675] smc: ib device lyz2 port 1 has no pnetid [ 226.836374][ T5929] lo speed is unknown, defaulting to 1000 [ 226.853596][ T8675] lo speed is unknown, defaulting to 1000 [ 226.904411][ T8699] binder: 8697:8699 ioctl c0306201 0 returned -14 [ 227.161711][ T5839] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.211719][ T8701] syzkaller0: entered promiscuous mode [ 227.215056][ T5839] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 227.222981][ T8701] syzkaller0: entered allmulticast mode [ 227.258306][ T5839] usb 3-1: media controller created [ 227.347265][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.990777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 227.998885][ C1] lec:lec_tx_timeout: lec0 [ 228.003605][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 228.166943][ T5921] usb 3-1: USB disconnect, device number 25 [ 229.995392][ T8675] lo speed is unknown, defaulting to 1000 [ 230.539003][ T8675] lo speed is unknown, defaulting to 1000 [ 230.914563][ T8675] lo speed is unknown, defaulting to 1000 [ 230.923727][ T8765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.858'. [ 231.142083][ T8675] lo speed is unknown, defaulting to 1000 [ 231.672405][ T8733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.997437][ T8777] syzkaller0: entered promiscuous mode [ 232.017788][ T8777] syzkaller0: entered allmulticast mode [ 233.020712][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 233.028859][ C1] lec:lec_tx_timeout: lec0 [ 233.033568][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 233.380896][ T5955] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 233.545536][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.572531][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.587104][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.598346][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.613071][ T5955] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.622653][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.639115][ T5955] usb 4-1: config 0 descriptor?? [ 233.765042][ T8832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.773886][ T8832] IPv6: NLM_F_CREATE should be set when creating new route [ 233.781275][ T8832] IPv6: NLM_F_CREATE should be set when creating new route [ 233.799676][ T8830] syz_tun: entered allmulticast mode [ 233.817118][ T8829] syz_tun: left allmulticast mode [ 234.070317][ T5955] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 234.155611][ T5955] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 235.160783][ T5921] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 235.340982][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 235.352648][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.371117][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.392385][ T5921] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 235.415753][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.435509][ T5921] usb 5-1: config 0 descriptor?? [ 235.459492][ T5921] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 236.199368][ T5955] usb 4-1: USB disconnect, device number 28 [ 236.847576][ T8909] mpoa:mpoad_close: (lec0) going down [ 237.866255][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 237.949810][ T5980] usb 5-1: USB disconnect, device number 21 [ 238.041929][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 238.050053][ C1] lec:lec_tx_timeout: lec0 [ 238.054858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 238.089198][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 238.190797][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 238.246121][ T8959] : entered promiscuous mode [ 238.330779][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 238.330795][ T30] audit: type=1326 audit(1775158570.561:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e9b9c819 code=0x7ffc0000 [ 238.413585][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.433273][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.446557][ T30] audit: type=1326 audit(1775158570.561:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e9b9c819 code=0x7ffc0000 [ 238.469792][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 238.484172][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.495387][ T24] usb 4-1: config 0 descriptor?? [ 238.500446][ T30] audit: type=1326 audit(1775158570.571:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e9b9c819 code=0x7ffc0000 [ 238.527495][ T30] audit: type=1326 audit(1775158570.571:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e9b9c819 code=0x7ffc0000 [ 238.556315][ T30] audit: type=1326 audit(1775158570.571:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd9e9b9c819 code=0x7ffc0000 [ 238.580654][ T30] audit: type=1326 audit(1775158570.621:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9e9b5d04e code=0x7ffc0000 [ 238.605052][ T30] audit: type=1326 audit(1775158570.621:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9e9b5d04e code=0x7ffc0000 [ 238.632009][ T30] audit: type=1326 audit(1775158570.621:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9e9b5d04e code=0x7ffc0000 [ 238.714962][ T30] audit: type=1326 audit(1775158570.621:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9e9b5d04e code=0x7ffc0000 [ 238.732339][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.737889][ T5980] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 238.760052][ T30] audit: type=1326 audit(1775158570.631:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8969 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9e9b5d04e code=0x7ffc0000 [ 238.784734][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.902571][ T5980] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 238.916443][ T5980] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 238.931865][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.950210][ T5980] usb 5-1: Product: syz [ 238.960332][ T5980] usb 5-1: Manufacturer: syz [ 238.970462][ T5980] usb 5-1: SerialNumber: syz [ 239.017581][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 239.033386][ T5980] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 239.040860][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 239.087993][ T24] usb 4-1: USB disconnect, device number 29 [ 239.410055][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.927'. [ 239.439237][ T5980] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.472309][ T5980] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 239.487499][ T5980] usb 5-1: media controller created [ 239.530636][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.319169][ T5921] usb 5-1: USB disconnect, device number 22 [ 240.778831][ T9057] syzkaller0: entered promiscuous mode [ 240.792625][ T9057] syzkaller0: entered allmulticast mode [ 240.831210][ T9051] syzkaller0: entered promiscuous mode [ 240.840335][ T9051] syzkaller0: entered allmulticast mode [ 241.207474][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 241.497965][ T9076] syzkaller0: entered promiscuous mode [ 241.515907][ T9076] syzkaller0: entered allmulticast mode [ 241.867155][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 241.922613][ T9100] syzkaller0: entered promiscuous mode [ 241.928446][ T9100] syzkaller0: entered allmulticast mode [ 242.550206][ T9086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.716520][ T9128] syzkaller0: entered promiscuous mode [ 242.722502][ T9128] syzkaller0: entered allmulticast mode [ 242.975075][ T9126] infiniband syz0: set active [ 242.985736][ T9126] infiniband syz0: added veth0_vlan [ 243.011615][ T9126] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 243.046730][ T9126] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 243.070752][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 243.078864][ C1] lec:lec_tx_timeout: lec0 [ 243.084043][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 243.091279][ T9126] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 243.177751][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.974'. [ 243.243751][ T9126] RDS/IB: syz0: added [ 243.251101][ T9126] smc: adding ib device syz0 with port count 1 [ 243.270233][ T9126] smc: ib device syz0 port 1 has no pnetid [ 244.584452][ T9165] syzkaller0: entered promiscuous mode [ 244.590228][ T9165] syzkaller0: entered allmulticast mode [ 245.250806][ T9158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.939083][ T9209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.993'. [ 245.980882][ T9212] syz_tun: entered allmulticast mode [ 246.383334][ T5839] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 246.419475][ T9227] lo speed is unknown, defaulting to 1000 [ 246.583451][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.606523][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.640296][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.662149][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.689301][ T5839] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.708098][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.735679][ T5839] usb 1-1: config 0 descriptor?? [ 247.136731][ T9227] lo speed is unknown, defaulting to 1000 [ 247.155392][ T5839] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 247.201468][ T5839] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 247.217430][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1008'. [ 247.246410][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1009'. [ 247.603709][ T9249] syzkaller0: entered promiscuous mode [ 247.622461][ T9249] syzkaller0: entered allmulticast mode [ 247.966897][ T9258] syzkaller0: entered promiscuous mode [ 247.973487][ T9258] syzkaller0: entered allmulticast mode [ 248.483071][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 248.860693][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 248.868808][ C1] lec:lec_tx_timeout: lec0 [ 248.873787][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 249.238312][ T5929] usb 1-1: USB disconnect, device number 20 [ 249.287084][ T9303] syzkaller0: entered promiscuous mode [ 249.299269][ T9303] syzkaller0: entered allmulticast mode [ 249.745261][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1041'. [ 252.293249][ T9311] syzkaller0: entered promiscuous mode [ 252.298749][ T9311] syzkaller0: entered allmulticast mode [ 253.509932][ T9341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.900720][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 253.908811][ C1] lec:lec_tx_timeout: lec0 [ 253.913461][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.760782][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 254.920764][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 254.928477][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.937765][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.950272][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.962693][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 254.972134][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.980189][ T24] usb 1-1: Product: syz [ 254.984505][ T24] usb 1-1: Manufacturer: syz [ 254.989153][ T24] usb 1-1: SerialNumber: syz [ 255.247819][ T24] usb 1-1: USB disconnect, device number 21 [ 255.765267][ T9349] lo speed is unknown, defaulting to 1000 [ 255.774874][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.783975][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.952286][ T9387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1058'. [ 256.370118][ T9349] lo speed is unknown, defaulting to 1000 [ 256.378612][ T6603] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 257.344555][ T9415] syzkaller0: entered promiscuous mode [ 257.350319][ T9415] syzkaller0: entered allmulticast mode [ 257.773988][ T9417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 258.900820][ T5839] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 258.920754][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 258.928830][ C1] lec:lec_tx_timeout: lec0 [ 258.933463][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 259.050889][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 259.057723][ T5839] usb 6-1: unable to get BOS descriptor or descriptor too short [ 259.066490][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.076737][ T5839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.087518][ T5839] usb 6-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 259.097607][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.105742][ T5839] usb 6-1: Product: syz [ 259.109925][ T5839] usb 6-1: Manufacturer: syz [ 259.114823][ T5839] usb 6-1: SerialNumber: syz [ 259.272802][ T9398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.357085][ T5839] usb 6-1: USB disconnect, device number 8 [ 259.566982][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1073'. [ 259.596724][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'. [ 259.597779][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1073'. [ 260.900754][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 261.072648][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.114498][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 261.136732][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.187268][ T24] usb 4-1: config 0 descriptor?? [ 261.221051][ T5921] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 261.380925][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 261.388014][ T5921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 261.397062][ T5921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 261.410990][ T5921] usb 6-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 261.420388][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.428544][ T5921] usb 6-1: Product: syz [ 261.432880][ T5921] usb 6-1: Manufacturer: syz [ 261.437517][ T5921] usb 6-1: SerialNumber: syz [ 261.623259][ T24] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 261.639754][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input25 [ 261.677120][ T5921] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 261.705047][ T5921] usb 6-1: USB disconnect, device number 9 [ 261.822221][ T24] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 262.162631][ T5921] usb 4-1: USB disconnect, device number 30 [ 262.387691][ T9427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.833275][ T9504] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.1099'. [ 262.851097][ T5921] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 262.902309][ T9504] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 262.919263][ T9504] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 263.020770][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 263.030419][ T5921] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 263.041065][ T5921] usb 5-1: config 179 has no interface number 0 [ 263.047542][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 263.061738][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 263.073436][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.086018][ T5921] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 263.098007][ T5921] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 263.140259][ T5921] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 263.149611][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.164927][ T9497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.427998][ T5921] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input26 [ 263.595884][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 263.604234][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 263.624406][ T5921] usb 5-1: USB disconnect, device number 23 [ 263.940698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 263.948779][ C1] lec:lec_tx_timeout: lec0 [ 263.953893][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.343192][ T5929] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 264.503408][ T5929] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.521094][ T5929] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.542647][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.566618][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.590418][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.613205][ T5929] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.624343][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.633553][ T5929] usb 4-1: Product: syz [ 264.637766][ T5929] usb 4-1: Manufacturer: syz [ 264.658968][ T5929] cdc_wdm 4-1:1.0: skipping garbage [ 264.667059][ T5929] cdc_wdm 4-1:1.0: skipping garbage [ 264.678430][ T5929] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 264.692071][ T5929] cdc_wdm 4-1:1.0: Unknown control protocol [ 264.877025][ T5921] usb 4-1: USB disconnect, device number 31 [ 266.640826][ T5921] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 266.679204][ T9523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.843986][ T5921] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 266.862717][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.888908][ T5921] usb 4-1: Product: syz [ 266.896424][ T5921] usb 4-1: Manufacturer: syz [ 266.901468][ T5921] usb 4-1: SerialNumber: syz [ 267.170829][ T5954] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 267.321365][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 267.330207][ T5921] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 267.356325][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.371538][ T5921] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 267.384448][ T5954] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.399058][ T5954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.409355][ T5954] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 267.419102][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.429853][ T5954] usb 5-1: Product: syz [ 267.434643][ T5954] usb 5-1: Manufacturer: syz [ 267.439310][ T5954] usb 5-1: SerialNumber: syz [ 267.447891][ T5954] usb 5-1: config 0 descriptor?? [ 267.455876][ T5954] gs_usb 5-1:0.0: Required endpoints not found [ 267.532222][ T5929] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 267.609033][ T9596] syzkaller0: entered promiscuous mode [ 267.614755][ T9596] syzkaller0: entered allmulticast mode [ 267.710763][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 267.729461][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.743902][ T5929] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 267.760714][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.779079][ T5929] usb 3-1: Product: syz [ 267.789235][ T5929] usb 3-1: Manufacturer: syz [ 267.797434][ T5929] usb 3-1: SerialNumber: syz [ 268.726906][ T5929] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 268.946482][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.960747][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 268.974143][ C1] lec:lec_tx_timeout: lec0 [ 268.976624][ T5929] usb 3-1: device firmware changed [ 268.978723][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.002823][ T5929] usb 3-1: USB disconnect, device number 26 [ 269.176836][ T5929] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 269.350745][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 269.358480][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.399242][ T5929] usb 3-1: string descriptor 0 read error: -22 [ 269.406289][ T5929] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 269.415769][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.454900][ T5921] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 269.467124][ T5921] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 269.477965][ T5921] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 269.498640][ T5921] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 269.509347][ T5921] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 269.525602][ T5921] usb 4-1: USB disconnect, device number 32 [ 269.593915][ T5929] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 269.897311][ T5980] usb 5-1: USB disconnect, device number 24 [ 270.310832][ T5980] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 270.452365][ T5929] usb 3-1: USB disconnect, device number 27 [ 270.473434][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 270.497646][ T5980] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 270.506023][ T5980] usb 5-1: config 0 has no interface number 0 [ 270.513531][ T5980] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 270.527037][ T5980] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 270.537414][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.545807][ T5980] usb 5-1: Product: syz [ 270.550014][ T5980] usb 5-1: Manufacturer: syz [ 270.554708][ T5980] usb 5-1: SerialNumber: syz [ 270.562114][ T5980] usb 5-1: config 0 descriptor?? [ 270.567972][ T9613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.793149][ T9613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.870443][ T9632] tipc: Enabling of bearer rejected, failed to enable media [ 270.880231][ T9632] syzkaller0: entered promiscuous mode [ 270.888095][ T9632] syzkaller0: entered allmulticast mode [ 270.930943][ T5955] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 271.061783][ T9637] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 271.105167][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 271.128379][ T5955] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 271.140804][ T5955] usb 3-1: config 0 has no interface number 0 [ 271.147009][ T5955] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 271.173308][ T5955] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 271.190742][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.202213][ T5955] usb 3-1: Product: syz [ 271.211032][ T5955] usb 3-1: Manufacturer: syz [ 271.224168][ T5955] usb 3-1: SerialNumber: syz [ 271.250732][ T5955] usb 3-1: config 0 descriptor?? [ 271.266757][ T9628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.510010][ T9628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.521668][ T5929] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 271.700839][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 271.712672][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.729652][ T5929] usb 1-1: config 6 has an invalid interface number: 251 but max is 0 [ 271.742045][ T5929] usb 1-1: config 6 has no interface number 0 [ 271.748249][ T5929] usb 1-1: config 6 interface 251 has no altsetting 0 [ 271.760578][ T5929] usb 1-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice=30.67 [ 271.770534][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.781366][ T5929] usb 1-1: Product: syz [ 271.785637][ T5929] usb 1-1: Manufacturer: syz [ 271.790955][ T5929] usb 1-1: SerialNumber: syz [ 272.040158][ T5929] vmk80xx 1-1:6.251: driver 'vmk80xx' failed to auto-configure device. [ 272.063382][ T5929] usb 1-1: USB disconnect, device number 22 [ 272.075779][ T9662] syzkaller0: entered promiscuous mode [ 272.102676][ T9662] syzkaller0: entered allmulticast mode [ 272.229398][ T5980] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 272.247930][ T5980] asix 5-1:0.188: probe with driver asix failed with error -71 [ 272.272469][ T5980] usb 5-1: USB disconnect, device number 25 [ 272.377085][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 272.588553][ T9680] lo speed is unknown, defaulting to 1000 [ 272.894966][ T9680] lo speed is unknown, defaulting to 1000 [ 273.499810][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 273.517989][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.961529][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 273.971198][ T5955] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -32 [ 273.989617][ T5955] asix 3-1:0.188: probe with driver asix failed with error -32 [ 274.000688][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 274.008782][ C1] lec:lec_tx_timeout: lec0 [ 274.013688][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 274.034174][ T5955] usb 3-1: USB disconnect, device number 28 [ 274.730759][ T5955] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 274.891478][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 274.898943][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.910475][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.922836][ T5955] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 274.932410][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.944613][ T5955] usb 4-1: config 0 descriptor?? [ 274.953419][ T9728] syz_tun: entered allmulticast mode [ 274.961646][ T9727] syz_tun: left allmulticast mode [ 274.968726][ T9663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.372648][ T5921] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 275.373031][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 275.414089][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 275.426132][ T5955] usbhid 4-1:0.0: can't add hid device: -32 [ 275.432349][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 275.469350][ T5955] usb 4-1: USB disconnect, device number 33 [ 275.564092][ T5921] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.579993][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.628245][ T5921] usb 6-1: config 0 descriptor?? [ 275.657319][ T5921] cp210x 6-1:0.0: cp210x converter detected [ 275.930743][ T5980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 276.065445][ T5921] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 276.100775][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 276.112546][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.133313][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.154385][ T5980] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 276.171878][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.193525][ T5980] usb 1-1: config 0 descriptor?? [ 276.291845][ T5955] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 276.301595][ T5921] usb 6-1: cp210x converter now attached to ttyUSB0 [ 276.475042][ T5955] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 276.484679][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.492830][ T5955] usb 4-1: Product: syz [ 276.497296][ T5955] usb 4-1: Manufacturer: syz [ 276.501996][ T5955] usb 4-1: SerialNumber: syz [ 276.508533][ T5921] usb 6-1: USB disconnect, device number 10 [ 276.520964][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.555869][ T5921] cp210x 6-1:0.0: device disconnected [ 276.626887][ T5980] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 276.902579][ T5839] usb 1-1: USB disconnect, device number 23 [ 276.933716][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 276.947584][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 277.111041][ T5921] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 277.290769][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 277.297742][ T5921] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 277.309046][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.325133][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 277.334383][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.342628][ T5921] usb 5-1: Product: syz [ 277.347974][ T5921] usb 5-1: Manufacturer: syz [ 277.352728][ T5921] usb 5-1: SerialNumber: syz [ 277.359763][ T5921] usb 5-1: config 0 descriptor?? [ 277.368518][ T5921] appledisplay 5-1:0.0: Could not find int-in endpoint [ 277.376617][ T5921] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 277.572469][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 277.595971][ T9764] syzkaller1: entered promiscuous mode [ 277.602587][ T9764] syzkaller1: entered allmulticast mode [ 277.617079][ T5901] usb 5-1: USB disconnect, device number 26 [ 277.984632][ T9796] syzkaller0: entered promiscuous mode [ 277.990147][ T9796] syzkaller0: entered allmulticast mode [ 278.176001][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 278.208120][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 278.265338][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 278.306618][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 278.349559][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 278.388265][ T5955] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 278.427513][ T5955] usb 4-1: USB disconnect, device number 34 [ 279.020773][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 279.028869][ C1] lec:lec_tx_timeout: lec0 [ 279.033543][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.066106][ T9814] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 281.143007][ T5921] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 281.306898][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 281.315718][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.327251][ T5921] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 281.336488][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.350165][ T5921] usb 3-1: Product: syz [ 281.354423][ T5921] usb 3-1: Manufacturer: syz [ 281.359179][ T5921] usb 3-1: SerialNumber: syz [ 282.150956][ T5955] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 282.200846][ T5980] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 282.312265][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 282.319847][ T5955] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 282.333680][ T5955] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 282.345864][ T5955] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.354247][ T5921] usb 3-1: USB disconnect, device number 29 [ 282.357591][ T5955] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 282.390827][ T5980] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.400209][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.409363][ T5980] usb 6-1: Product: syz [ 282.414660][ T5980] usb 6-1: Manufacturer: syz [ 282.419825][ T5955] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 282.434714][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.443426][ T5955] usb 1-1: Product: syz [ 282.447767][ T5955] usb 1-1: Manufacturer: syz [ 282.454003][ T5980] usb 6-1: SerialNumber: syz [ 282.463075][ T5955] usb 1-1: SerialNumber: syz [ 282.488458][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 282.503278][ T5955] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input27 [ 282.730764][ T5955] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 282.755430][ T5955] (id 0x00) [ 282.843620][ T5955] rc_core: IR keymap rc-imon-pad not found [ 282.850430][ T5955] Registered IR keymap rc-empty [ 282.856331][ T5955] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 282.882436][ T5955] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 282.912120][ T5980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 282.936172][ T5980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 282.951157][ T5955] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 283.010765][ T5921] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 283.038988][ T5955] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input28 [ 283.058230][ T5955] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:24> initialized [ 283.171857][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 283.197853][ T5921] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 283.230142][ T5921] usb 5-1: config 0 has no interface number 0 [ 283.244730][ T5921] usb 5-1: config 0 interface 184 has no altsetting 0 [ 283.257810][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 283.269048][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.286401][ T5921] usb 5-1: Product: syz [ 283.291909][ T5921] usb 5-1: Manufacturer: syz [ 283.301310][ T9871] lo speed is unknown, defaulting to 1000 [ 283.326807][ T5921] usb 5-1: SerialNumber: syz [ 283.362404][ T5921] usb 5-1: config 0 descriptor?? [ 283.857113][ T9873] imon:send_packet: task interrupted [ 283.869984][ T9873] imon:send_packet: packet tx failed (-512) [ 283.888299][ T9873] imon:vfd_write: send packet #2 failed [ 283.917965][ T9871] lo speed is unknown, defaulting to 1000 [ 284.040702][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 284.048782][ C1] lec:lec_tx_timeout: lec0 [ 284.054057][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 284.158611][ T9873] imon:send_packet: packet tx failed (-32) [ 284.169152][ T5980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 284.200006][ T9873] imon:vfd_write: send packet #0 failed [ 284.205394][ T5980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 284.242266][ T5980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 284.279848][ T5980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 284.320105][ T5980] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 284.343266][ T5980] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 284.372944][ T5980] usb 6-1: USB disconnect, device number 11 [ 284.568727][ T9894] syzkaller0: entered promiscuous mode [ 284.584657][ T9894] syzkaller0: entered allmulticast mode [ 284.813629][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM is busy [ 284.918829][ T24] usb 1-1: USB disconnect, device number 24 [ 285.037130][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 285.049322][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 285.077418][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 285.088053][ T5921] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 285.108023][ T5921] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 285.172912][ T5921] usb 5-1: USB disconnect, device number 27 [ 285.733781][ T9910] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 285.740448][ T9910] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 285.762075][ T9910] vhci_hcd vhci_hcd.0: Device attached [ 285.786996][ T9914] vhci_hcd: connection closed [ 285.793079][ T138] vhci_hcd vhci_hcd.0: stop threads [ 285.843933][ T138] vhci_hcd vhci_hcd.0: release socket [ 285.858955][ T138] vhci_hcd vhci_hcd.0: disconnect device [ 286.563814][ T5839] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 286.770157][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.780603][ T5839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 286.789913][ T5839] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 286.809795][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.839161][ T5839] usb 6-1: config 0 descriptor?? [ 286.857480][ T5839] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 286.874382][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 286.892664][ T5839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 286.903458][ T5839] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 286.913313][ T5839] usb 6-1: media controller created [ 286.921246][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.985910][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 287.018986][ T5839] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 287.062734][ T9924] dvb-usb: bulk message failed: -22 (2/0) [ 287.064838][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 287.191921][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 287.220742][ T5839] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 287.248208][ T5839] usb 6-1: USB disconnect, device number 12 [ 287.339235][ T5839] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 288.736622][ T9962] overlayfs: upper fs does not support tmpfile. [ 289.060704][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 289.068749][ C1] lec:lec_tx_timeout: lec0 [ 289.073467][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 289.945164][ T5844] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 290.122684][ T5844] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 290.147172][ T5844] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 290.195844][ T5844] usb 1-1: config 1 interface 0 has no altsetting 0 [ 290.219457][ T5844] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 290.242667][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.267293][ T5844] usb 1-1: Product: syz [ 290.276220][ T5844] usb 1-1: Manufacturer: syz [ 290.289330][ T5844] usb 1-1: SerialNumber: syz [ 290.371321][ T9979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.379196][ T9979] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 291.280748][ T5839] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 291.484984][ T5839] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 291.494467][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.505438][ T5839] usb 6-1: Product: syz [ 291.513081][ T5839] usb 6-1: Manufacturer: syz [ 291.518971][ T5839] usb 6-1: SerialNumber: syz [ 291.650788][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 291.812478][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 291.830591][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.849926][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.867798][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 291.877367][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.896324][ T24] usb 5-1: config 0 descriptor?? [ 291.936379][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 291.956345][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 292.388277][ T24] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 292.543115][ T24] usb 5-1: USB disconnect, device number 28 [ 292.785970][ T5844] rtl8150 1-1:1.0: couldn't reset the device [ 292.802914][ T5844] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 292.845880][ T5844] usb 1-1: USB disconnect, device number 25 [ 293.165446][T10027] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 293.192885][T10027] lo speed is unknown, defaulting to 1000 [ 293.280774][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 293.340590][T10027] lo speed is unknown, defaulting to 1000 [ 293.442618][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.453625][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.464806][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 293.475820][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.492831][ T24] usb 4-1: config 0 descriptor?? [ 293.664199][ T5159] Bluetooth: hci3: command 0x0406 tx timeout [ 293.714858][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.725211][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.759655][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 293.780475][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 293.794333][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 293.820131][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.832528][ T24] usb 4-1: USB disconnect, device number 35 [ 293.867074][ T5839] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.893002][ T5839] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 293.928949][ T5839] usb 6-1: USB disconnect, device number 13 [ 294.074043][T10030] ------------[ cut here ]------------ [ 294.080712][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 294.088714][T10030] refcount_t: decrement hit 0; leaking memory. [ 294.088749][T10030] WARNING: lib/refcount.c:31 at refcount_warn_saturate+0x70/0x110, CPU#0: syz.2.1247/10030 [ 294.094983][ C1] lec:lec_tx_timeout: lec0 [ 294.095365][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 294.105040][T10030] Modules linked in: [ 294.119753][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.2.1247 Not tainted syzkaller #0 PREEMPT(full) [ 294.129369][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.139702][T10030] RIP: 0010:refcount_warn_saturate+0x70/0x110 [ 294.146198][T10030] Code: c6 a0 93 10 8f e8 50 13 17 fd 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 b7 0d 17 fd 48 8d 3d c0 78 8d 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 9b 0d 17 fd 48 [ 294.166283][T10030] RSP: 0018:ffffc90004ad7b08 EFLAGS: 00010293 [ 294.172871][T10030] RAX: ffffffff84af13d9 RBX: 0000000000000004 RCX: ffff88807b8a9e80 [ 294.180912][T10030] RDX: 0000000000000000 RSI: ffffffff8f1093a0 RDI: ffffffff903c8ca0 [ 294.188903][T10030] RBP: ffffc90004ad7c60 R08: ffff88807b8a9e80 R09: 0000000000000005 [ 294.196935][T10030] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 294.204968][T10030] R13: dffffc0000000000 R14: ffff888078ca4668 R15: 0000000000000001 [ 294.213038][T10030] FS: 000055556e7d5500(0000) GS:ffff88812525c000(0000) knlGS:0000000000000000 [ 294.222032][T10030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.228612][T10030] CR2: 0000001b31523ffc CR3: 0000000077d06000 CR4: 00000000003526f0 [ 294.236626][T10030] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 294.244647][T10030] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 294.252834][T10030] Call Trace: [ 294.256163][T10030] [ 294.259090][T10030] ref_tracker_free+0x6fc/0x840 [ 294.264003][T10030] ? __pfx_ref_tracker_free+0x10/0x10 [ 294.269389][T10030] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.274512][T10030] ? vcc_release+0x54/0x580 [ 294.279042][T10030] mpoad_close+0x1fc/0x3e0 [ 294.283554][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 294.291257][T10030] ? __pfx_mpoad_close+0x10/0x10 [ 294.296245][T10030] vcc_release+0x10f/0x580 [ 294.300703][T10030] sock_close+0xc3/0x240 [ 294.304954][T10030] ? __pfx_sock_close+0x10/0x10 [ 294.309796][T10030] __fput+0x44f/0xa60 [ 294.313927][T10030] task_work_run+0x1d9/0x270 [ 294.318542][T10030] ? __pfx_task_work_run+0x10/0x10 [ 294.323682][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.329752][T10030] exit_to_user_mode_loop+0xed/0x480 [ 294.335063][T10030] ? rcu_is_watching+0x15/0xb0 [ 294.339832][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.346002][T10030] do_syscall_64+0x33e/0xf80 [ 294.350603][T10030] ? clear_bhb_loop+0x40/0x90 [ 294.355413][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.361351][T10030] RIP: 0033:0x7fd2f399c819 [ 294.365798][T10030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.385494][T10030] RSP: 002b:00007ffdd82f5078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 294.393983][T10030] RAX: 0000000000000000 RBX: 00007fd2f3c17da0 RCX: 00007fd2f399c819 [ 294.402012][T10030] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 294.409998][T10030] RBP: 00007fd2f3c17da0 R08: 00007fd2f3c16128 R09: 0000000000000000 [ 294.418001][T10030] R10: 00000000003ff16c R11: 0000000000000246 R12: 0000000000047e14 [ 294.425992][T10030] R13: 00007fd2f3c15fac R14: 0000000000047ba1 R15: 00007fd2f3c15fa0 [ 294.433988][T10030] [ 294.437000][T10030] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 294.444282][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.2.1247 Not tainted syzkaller #0 PREEMPT(full) [ 294.453636][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.463678][T10030] Call Trace: [ 294.466946][T10030] [ 294.469862][T10030] vpanic+0x56c/0xa60 [ 294.473864][T10030] ? __pfx__printk+0x10/0x10 [ 294.478482][T10030] ? __pfx_vpanic+0x10/0x10 [ 294.482972][T10030] ? is_bpf_text_address+0x292/0x2b0 [ 294.488246][T10030] ? is_bpf_text_address+0x26/0x2b0 [ 294.493438][T10030] panic+0xc5/0xd0 [ 294.497150][T10030] ? __pfx_panic+0x10/0x10 [ 294.501576][T10030] __warn+0x315/0x4c0 [ 294.505562][T10030] ? refcount_warn_saturate+0x70/0x110 [ 294.511024][T10030] ? refcount_warn_saturate+0x70/0x110 [ 294.516482][T10030] __report_bug+0x29a/0x540 [ 294.520979][T10030] ? refcount_warn_saturate+0x70/0x110 [ 294.526431][T10030] ? __pfx___report_bug+0x10/0x10 [ 294.531489][T10030] ? kasan_save_stack+0x4d/0x60 [ 294.536327][T10030] ? kasan_save_stack+0x3e/0x60 [ 294.541169][T10030] ? kasan_record_aux_stack+0xbd/0xd0 [ 294.546528][T10030] ? __fput_deferred+0x143/0x380 [ 294.551450][T10030] ? fput_close+0x11f/0x240 [ 294.555938][T10030] ? filp_close+0x27/0x40 [ 294.560250][T10030] ? __se_sys_close_range+0x3d4/0x900 [ 294.565604][T10030] ? do_syscall_64+0x15f/0xf80 [ 294.570356][T10030] report_bug_entry+0x19a/0x290 [ 294.575195][T10030] ? refcount_warn_saturate+0x70/0x110 [ 294.580801][T10030] ? refcount_warn_saturate+0x75/0x110 [ 294.586295][T10030] handle_bug+0xce/0x200 [ 294.590546][T10030] exc_invalid_op+0x1a/0x50 [ 294.595035][T10030] asm_exc_invalid_op+0x1a/0x20 [ 294.599870][T10030] RIP: 0010:refcount_warn_saturate+0x70/0x110 [ 294.605921][T10030] Code: c6 a0 93 10 8f e8 50 13 17 fd 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 b7 0d 17 fd 48 8d 3d c0 78 8d 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 9b 0d 17 fd 48 [ 294.625711][T10030] RSP: 0018:ffffc90004ad7b08 EFLAGS: 00010293 [ 294.631762][T10030] RAX: ffffffff84af13d9 RBX: 0000000000000004 RCX: ffff88807b8a9e80 [ 294.639722][T10030] RDX: 0000000000000000 RSI: ffffffff8f1093a0 RDI: ffffffff903c8ca0 [ 294.647677][T10030] RBP: ffffc90004ad7c60 R08: ffff88807b8a9e80 R09: 0000000000000005 [ 294.655640][T10030] R10: 0000000000000004 R11: 0000000000000000 R12: f8f8f8f8f8f8f8f8 [ 294.663592][T10030] R13: dffffc0000000000 R14: ffff888078ca4668 R15: 0000000000000001 [ 294.671552][T10030] ? refcount_warn_saturate+0x69/0x110 [ 294.676998][T10030] ? refcount_warn_saturate+0x69/0x110 [ 294.682443][T10030] ref_tracker_free+0x6fc/0x840 [ 294.687277][T10030] ? __pfx_ref_tracker_free+0x10/0x10 [ 294.692642][T10030] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.697669][T10030] ? vcc_release+0x54/0x580 [ 294.702166][T10030] mpoad_close+0x1fc/0x3e0 [ 294.706577][T10030] ? __pfx_mpoad_close+0x10/0x10 [ 294.711504][T10030] vcc_release+0x10f/0x580 [ 294.715911][T10030] sock_close+0xc3/0x240 [ 294.720165][T10030] ? __pfx_sock_close+0x10/0x10 [ 294.725024][T10030] __fput+0x44f/0xa60 [ 294.728998][T10030] task_work_run+0x1d9/0x270 [ 294.733589][T10030] ? __pfx_task_work_run+0x10/0x10 [ 294.738690][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.744739][T10030] exit_to_user_mode_loop+0xed/0x480 [ 294.750018][T10030] ? rcu_is_watching+0x15/0xb0 [ 294.754761][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.760816][T10030] do_syscall_64+0x33e/0xf80 [ 294.765397][T10030] ? clear_bhb_loop+0x40/0x90 [ 294.770058][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.775930][T10030] RIP: 0033:0x7fd2f399c819 [ 294.780330][T10030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.800355][T10030] RSP: 002b:00007ffdd82f5078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 294.808774][T10030] RAX: 0000000000000000 RBX: 00007fd2f3c17da0 RCX: 00007fd2f399c819 [ 294.816746][T10030] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 294.824704][T10030] RBP: 00007fd2f3c17da0 R08: 00007fd2f3c16128 R09: 0000000000000000 [ 294.832669][T10030] R10: 00000000003ff16c R11: 0000000000000246 R12: 0000000000047e14 [ 294.840621][T10030] R13: 00007fd2f3c15fac R14: 0000000000047ba1 R15: 00007fd2f3c15fa0 [ 294.848597][T10030] [ 294.852095][T10030] Kernel Offset: disabled [ 294.856413][T10030] Rebooting in 86400 seconds..