last executing test programs: 57.135716596s ago: executing program 0 (id=1899): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 53.530200411s ago: executing program 0 (id=1909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x6, 0xa, 0xfffffffffffffffe, 0xc, 0x2, 0x1041, 0x4, 0x20, 0x3, 0xfffffffffffffffb, 0xffffffff, 0x4, 0x5, 0x800006, 0x68], 0xeeef0000, 0x304101}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.277833303s ago: executing program 0 (id=1910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/19, 0x13, 0x1, 0x7}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 53.2229731s ago: executing program 0 (id=1912): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80042) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 52.975479312s ago: executing program 0 (id=1915): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 52.830138731s ago: executing program 0 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x2e, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x67}, @srh={0x4, 0x6, 0x4, 0x3, 0x8f, 0x10, 0x1000, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e) 37.762623523s ago: executing program 32 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x2e, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x67}, @srh={0x4, 0x6, 0x4, 0x3, 0x8f, 0x10, 0x1000, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e) 6.830778s ago: executing program 4 (id=2269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x3, 0xfffffffa, 0x10000, 0x5, 0x7, 0x0, 0x9a, 0x80000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x8000) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="230302008e04", 0x6}], 0x1}, 0x0) 6.67717801s ago: executing program 4 (id=2270): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0xa7, 0xf5, 0xd, 0x10, 0x403, 0xdf35, 0xa01, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf3, 0xe, 0x20, 0x4c, [{{0x9, 0x4, 0x4b, 0xc, 0x0, 0x10, 0x68, 0x90, 0x8}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 4.650454561s ago: executing program 4 (id=2281): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 3.56881497s ago: executing program 3 (id=2290): syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x11, 0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='geneve1\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0xf000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x8040) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.442318377s ago: executing program 3 (id=2293): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.999981984s ago: executing program 2 (id=2297): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}, 0x40c0) 2.998865294s ago: executing program 1 (id=2298): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a175576e0e2b3aac968188bd2e43384abcaff7f14d4c93", 0xa5}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {0x0}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {0x0}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec62dffdbafb6", 0xa9}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cd", 0xe0}, {0x0}, {0x0}, {&(0x7f0000000f00)}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="09a2e1ee027661083e999e9ca6d50149a8f570299ce7e69670ddc2b032f442d775eae50f685af3e5b2c2e68757fed20964aeca6102540c836b277bc6b631bda10aaa806a296c6a50776091df6044e542d53a5a", 0x53}], 0x6, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507", 0x37}], 0x1, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}], 0x18}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.862984802s ago: executing program 2 (id=2299): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={0x18, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10008004}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x168, 0x188, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x330) socket(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e0000002"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x88, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa0, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x10) 2.7237762s ago: executing program 2 (id=2300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.306743813s ago: executing program 4 (id=2301): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xd941, 0x7ff, 0x2, 0xff}, {0xec, 0x1, 0x6, 0xd01a, 0x100, 0x280000}, 0x6, 0x5, 0x226b}}, @TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x1, 0x5, 0xdb, 0x6, 0x8}, {0x7, 0x0, 0x9, 0x2, 0x1, 0xfffffffd}, 0x5, 0x2000000, 0x8a6}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000640)="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", 0x17f}], 0x3}, 0x0) 2.25249946s ago: executing program 2 (id=2302): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 2.086768912s ago: executing program 4 (id=2303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x1, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.982538685s ago: executing program 1 (id=2304): syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x11, 0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='geneve1\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0xf000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x8040) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.902829285s ago: executing program 5 (id=2305): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000780)={0xc, {"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", 0x1000}}, 0x1006) 1.854024902s ago: executing program 1 (id=2306): mkdir(&(0x7f0000000400)='./file1\x00', 0x95) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)) 1.813500597s ago: executing program 4 (id=2307): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x848) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000280)={0x40, 0xf}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.674806904s ago: executing program 1 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x3, 0xfffffffa, 0x10000, 0x5, 0x7, 0x0, 0x9a, 0x80000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x8000) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="230302008e04", 0x6}], 0x1}, 0x0) 1.63769534s ago: executing program 5 (id=2309): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}, 0x40c0) 1.55726506s ago: executing program 5 (id=2310): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02cf5aa6a3618000031afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b0147a915378e6492e5b94473dcdc87e7c794fb262a7e9ee0b94300000000000004000005000000004896a16034ca022f4072dc7fb5ec", 0xd3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)="9cd568f007e6fbdb5a1be2afaf20620104bb485cb7d2dfcc63838529578dcb73e9adf0c31c8d318481f8fdf53d3c3e442f432eed7729dd31ebb2844bd318b9dca1c4d3e35d5ed5bab8b780431444550f170283849a58b3f025728a177a64dc07ec27b73305d532801d81ea55b1f16465e5b5b9fcc92def4c925dcce2f49a63cea0eddc84b367ad8bc94d03000000000000854ba9a6954722a02360c9c32dd2d434e6d621d929dcbcaab2b9fa02f105aea2e486f8fc046906a0c6fe0e0000004e75ef325da7af1e069c186fdd057974cd10bd57662cd43163f3122fbfcc210d", 0xdf}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$inet6(0xa, 0x80000, 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.406983579s ago: executing program 1 (id=2311): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) shutdown(0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={0x18, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10008004}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x168, 0x188, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x330) socket(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e0000002"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x88, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa0, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x10) 1.279268555s ago: executing program 2 (id=2312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.278912036s ago: executing program 5 (id=2313): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xd941, 0x7ff, 0x2, 0xff}, {0xec, 0x1, 0x6, 0xd01a, 0x100, 0x280000}, 0x6, 0x5, 0x226b}}, @TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x1, 0x5, 0xdb, 0x6, 0x8}, {0x7, 0x0, 0x9, 0x2, 0x1, 0xfffffffd}, 0x5, 0x2000000, 0x8a6}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000640)="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", 0x17f}], 0x3}, 0x0) 1.278501356s ago: executing program 1 (id=2314): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="f00d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.114666177s ago: executing program 5 (id=2315): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a175576e0e2b3aac968188bd2e43384abcaff7f14d4c93", 0xa5}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {0x0}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {0x0}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec62dffdbafb6", 0xa9}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cd", 0xe0}, {0x0}, {0x0}, {&(0x7f0000000f00)}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="09a2e1ee027661083e999e9ca6d50149a8f570299ce7e69670ddc2b032f442d775eae50f685af3e5b2c2e68757fed20964aeca6102540c836b277bc6b631bda10aaa806a296c6a50776091df6044e542d53a5a", 0x53}], 0x6, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507", 0x37}], 0x1, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}], 0x18}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.043972306s ago: executing program 2 (id=2316): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x40000000) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000000)) 355.850695ms ago: executing program 3 (id=2317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x1, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 204.861884ms ago: executing program 3 (id=2318): syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x11, 0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='geneve1\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0xf000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x8040) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 113.276276ms ago: executing program 5 (id=2319): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 46.309924ms ago: executing program 3 (id=2320): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000290000003e0000000008000000000000a44abf9f938b24a9e9ef56debe7d866bdf9ec5130f7271ba491a26f811dee5b12a66be46"], 0x18}, 0x40c0) 0s ago: executing program 3 (id=2321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x3, 0xfffffffa, 0x10000, 0x5, 0x7, 0x0, 0x9a, 0x80000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x8000) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="230302008e04", 0x6}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 86][ T8831] tipc: Resetting bearer [ 196.372689][ T8830] tipc: Resetting bearer [ 196.375424][ T4241] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 196.402065][ T8830] tipc: Disabling bearer [ 196.714965][ T8853] tipc: Enabling of bearer rejected, failed to enable media [ 196.797885][ T4290] usbhid 3-1:0.0: can't add hid device: -71 [ 196.804023][ T4290] usbhid: probe of 3-1:0.0 failed with error -71 [ 196.821144][ T4290] usb 3-1: USB disconnect, device number 3 [ 197.125350][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.160717][ T8861] tipc: Enabled bearer , priority 0 [ 197.171367][ T8861] device syzkaller0 entered promiscuous mode [ 197.182885][ T8860] tipc: Resetting bearer [ 197.202582][ T8860] tipc: Disabling bearer [ 197.254280][ T8863] device syzkaller0 entered promiscuous mode [ 197.321099][ T8865] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1641'. [ 197.330413][ T8865] block nbd0: not configured, cannot reconfigure [ 197.422358][ T8869] tipc: Enabled bearer , priority 0 [ 197.431784][ T8869] device syzkaller0 entered promiscuous mode [ 197.463874][ T8869] tipc: Resetting bearer [ 197.479736][ T8868] tipc: Resetting bearer [ 197.492196][ T8868] tipc: Disabling bearer [ 197.666516][ T8877] tipc: Enabling of bearer rejected, failed to enable media [ 197.765449][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 197.817746][ T8885] tipc: Enabled bearer , priority 0 [ 197.825813][ T8885] device syzkaller0 entered promiscuous mode [ 197.840758][ T8884] tipc: Resetting bearer [ 197.860963][ T8884] tipc: Disabling bearer [ 198.025441][ T4290] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 198.035433][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 198.165482][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.185483][ T4859] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 198.185572][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.204304][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.214176][ T23] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 198.223249][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.225340][ T4241] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 198.242823][ T4241] usb 5-1: USB disconnect, device number 3 [ 198.385359][ T4290] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.393688][ T4290] usb 4-1: config 0 has no interface number 0 [ 198.400102][ T4290] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 198.411290][ T4290] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 198.422275][ T4290] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.431656][ T4290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.441847][ T4290] usb 4-1: config 0 descriptor?? [ 198.466479][ T8883] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 198.489422][ T4290] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 198.555455][ T4859] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 198.576919][ T4859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.603874][ T4859] usb 2-1: config 0 descriptor?? [ 198.622401][ T8891] device syzkaller0 entered promiscuous mode [ 198.691058][ T4290] usb 4-1: USB disconnect, device number 5 [ 198.748123][ T23] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 198.757129][ T23] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 198.765808][ T23] creative-sb0540 0003:041E:3100.0002: item fetching failed at offset 3/5 [ 198.775454][ T23] creative-sb0540 0003:041E:3100.0002: parse failed [ 198.782097][ T23] creative-sb0540: probe of 0003:041E:3100.0002 failed with error -22 [ 198.952293][ T23] usb 3-1: USB disconnect, device number 4 [ 199.097765][ T4859] hid-generic 0003:0458:500F.0003: unknown main item tag 0x0 [ 199.105462][ T4859] hid-generic 0003:0458:500F.0003: unknown main item tag 0x0 [ 199.112961][ T4859] hid-generic 0003:0458:500F.0003: unknown main item tag 0x0 [ 199.120740][ T4859] hid-generic 0003:0458:500F.0003: unknown main item tag 0x0 [ 199.128591][ T4859] hid-generic 0003:0458:500F.0003: unknown main item tag 0x0 [ 199.136736][ T4859] hid-generic 0003:0458:500F.0003: unknown main item tag 0x0 [ 199.144588][ T4859] hid-generic 0003:0458:500F.0003: unknown main item tag 0x0 [ 199.152204][ T4241] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.164104][ T4859] hid-generic 0003:0458:500F.0003: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.1-1/input0 [ 199.205292][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.300789][ T4290] usb 2-1: USB disconnect, device number 4 [ 199.395264][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 199.515516][ T4241] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 199.524883][ T4241] usb 5-1: config 0 has no interface number 0 [ 199.541294][ T4241] usb 5-1: config 0 interface 12 has no altsetting 0 [ 199.555287][ T8902] tipc: Enabling of bearer rejected, already enabled [ 199.705378][ T4241] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 199.746071][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.754123][ T4241] usb 5-1: Product: syz [ 199.779711][ T4241] usb 5-1: Manufacturer: syz [ 199.784367][ T4241] usb 5-1: SerialNumber: syz [ 199.787443][ T8908] tipc: Enabled bearer , priority 0 [ 199.805205][ T8908] device syzkaller0 entered promiscuous mode [ 199.817246][ T4241] usb 5-1: config 0 descriptor?? [ 199.876216][ T8907] tipc: Resetting bearer [ 199.938145][ T8907] tipc: Disabling bearer [ 200.210019][ T8918] device syzkaller0 entered promiscuous mode [ 200.245261][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.425813][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 200.434363][ T8930] tipc: Enabled bearer , priority 0 [ 200.472190][ T8930] device syzkaller0 entered promiscuous mode [ 200.503039][ T8934] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 200.523097][ T8930] tipc: Resetting bearer [ 200.530912][ T8929] tipc: Resetting bearer [ 200.539779][ T8929] tipc: Disabling bearer [ 200.670403][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 200.935282][ T4863] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.043701][ T8956] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 201.135233][ T4290] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.285361][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.366854][ T4863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.395207][ T4290] usb 2-1: Using ep0 maxpacket: 8 [ 201.412307][ T8964] tipc: Enabled bearer , priority 0 [ 201.420348][ T8964] device syzkaller0 entered promiscuous mode [ 201.432304][ T8964] tipc: Resetting bearer [ 201.440637][ T8963] tipc: Resetting bearer [ 201.447519][ T4863] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 201.463412][ T8963] tipc: Disabling bearer [ 201.515582][ T4290] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 201.524882][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.535360][ T4290] usb 2-1: config 0 descriptor?? [ 201.636698][ T4863] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 201.646103][ T4863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.654141][ T4863] usb 4-1: Product: syz [ 201.657208][ T8966] tipc: Enabled bearer , priority 0 [ 201.663152][ T4863] usb 4-1: Manufacturer: syz [ 201.666306][ T8966] device syzkaller0 entered promiscuous mode [ 201.669918][ T4863] usb 4-1: SerialNumber: syz [ 201.688824][ T8966] tipc: Resetting bearer [ 201.697143][ T8965] tipc: Resetting bearer [ 201.706309][ T8965] tipc: Disabling bearer [ 201.805389][ T4241] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 201.813447][ T4241] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 201.820959][ T4241] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 201.828735][ T4241] f81534: probe of 5-1:0.12 failed with error -71 [ 201.841020][ T4241] usb 5-1: USB disconnect, device number 4 [ 202.017086][ T4290] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 202.024218][ T4290] a4tech 0003:09DA:001A.0004: unknown main item tag 0x0 [ 202.045424][ T4290] a4tech 0003:09DA:001A.0004: item fetching failed at offset 4/5 [ 202.053440][ T4290] a4tech 0003:09DA:001A.0004: parse failed [ 202.059504][ T4290] a4tech: probe of 0003:09DA:001A.0004 failed with error -22 [ 202.220177][ T4303] usb 2-1: USB disconnect, device number 5 [ 202.320039][ T8980] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 202.328280][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.465277][ T4863] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 202.825253][ T4241] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 202.835225][ T4863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.853530][ T4863] usb 4-1: device firmware changed [ 202.893921][ T4863] usb 4-1: USB disconnect, device number 6 [ 203.001883][ T26] audit: type=1326 audit(1768715408.949:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.1.1703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f6eed4cb9 code=0x0 [ 203.195345][ T4241] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 203.203669][ T4241] usb 3-1: config 0 has no interface number 0 [ 203.213128][ T4241] usb 3-1: config 0 interface 41 has no altsetting 0 [ 203.329383][ T9004] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 203.365296][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.376281][ T4241] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 203.385818][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.411909][ T4241] usb 3-1: Product: syz [ 203.417294][ T4241] usb 3-1: Manufacturer: syz [ 203.422287][ T4241] usb 3-1: SerialNumber: syz [ 203.429574][ T4241] usb 3-1: config 0 descriptor?? [ 203.518653][ T9011] netlink: 'syz.3.1708': attribute type 10 has an invalid length. [ 203.529717][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.542915][ T9011] bond0: (slave team0): Enslaving as an active interface with an up link [ 203.766509][ T9025] netlink: 'syz.0.1710': attribute type 10 has an invalid length. [ 203.793860][ T9025] team0: Device ipvlan0 failed to register rx_handler [ 204.005368][ T4290] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.171023][ T9030] syz.0.1710 (9030): drop_caches: 2 [ 204.311444][ T9039] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 204.355398][ T4241] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 204.388707][ T4290] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 204.405216][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.425242][ T4290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.446670][ T4290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.469318][ T4290] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 204.580032][ T4290] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 204.602150][ T4290] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 204.627726][ T4290] usb 5-1: Manufacturer: syz [ 204.658667][ T4290] usb 5-1: config 0 descriptor?? [ 205.205484][ T4290] usbhid 5-1:0.0: can't add hid device: -71 [ 205.211578][ T4290] usbhid: probe of 5-1:0.0 failed with error -71 [ 205.233599][ T4290] usb 5-1: USB disconnect, device number 5 [ 205.375178][ T4303] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.445317][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.491258][ T4241] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 205.502898][ T4241] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 205.520088][ T4241] CoreChips: probe of 3-1:0.41 failed with error -71 [ 205.536650][ T4241] usb 3-1: USB disconnect, device number 5 [ 205.582266][ T9070] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) ! [ 205.669095][ T4303] usb 4-1: Using ep0 maxpacket: 8 [ 205.815465][ T4303] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 205.831458][ T4303] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 205.849353][ T4200] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 205.857210][ T4303] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 205.911404][ T4303] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 205.928269][ T4303] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 205.943141][ T4303] usb 4-1: config 168 interface 0 has no altsetting 0 [ 206.041392][ T4241] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.045633][ T4303] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 206.049514][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.063106][ T4303] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.096814][ T4303] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.141126][ T4303] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 206.172190][ T4303] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.197632][ T4303] usb 4-1: config 168 interface 0 has no altsetting 0 [ 206.305323][ T4303] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 206.315584][ T4303] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.325166][ T4241] usb 3-1: Using ep0 maxpacket: 32 [ 206.335208][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 206.369037][ T4303] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.391937][ T4303] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 206.417717][ T4303] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.442766][ T4303] usb 4-1: config 168 interface 0 has no altsetting 0 [ 206.465932][ T4241] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 206.485275][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.517256][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.549020][ T4241] usb 3-1: config 0 descriptor?? [ 206.601212][ T4241] gspca_main: sunplus-2.14.0 probing 041e:400b [ 206.615941][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.628693][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.636923][ T13] usb 2-1: Product: syz [ 206.641135][ T13] usb 2-1: Manufacturer: syz [ 206.649451][ T13] usb 2-1: SerialNumber: syz [ 206.657229][ T13] usb 2-1: config 0 descriptor?? [ 206.715221][ T4859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 206.742883][ T4303] usb 4-1: string descriptor 0 read error: -22 [ 206.750254][ T4303] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 206.771592][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.778390][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 206.847167][ T4303] adutux 4-1:168.0: interrupt endpoints not found [ 206.915369][ T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.052600][ T4303] usb 4-1: USB disconnect, device number 7 [ 207.085411][ T4859] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 207.255538][ T4859] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 207.264658][ T4859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.272880][ T4859] usb 5-1: Product: syz [ 207.277145][ T4859] usb 5-1: Manufacturer: syz [ 207.281851][ T4859] usb 5-1: SerialNumber: syz [ 207.326944][ T4859] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 207.525299][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.787746][ T4859] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.799328][ T4859] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 207.810167][ T4859] usb 5-1: media controller created [ 207.843597][ T4859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.909499][ T9104] netlink: 'syz.3.1744': attribute type 3 has an invalid length. [ 207.930478][ T9104] netlink: 'syz.3.1744': attribute type 10 has an invalid length. [ 207.971072][ T4859] usb 5-1: USB disconnect, device number 6 [ 208.275309][ T4303] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.345535][ T4241] gspca_sunplus: reg_w_riv err -71 [ 208.351305][ T4241] sunplus: probe of 3-1:0.0 failed with error -71 [ 208.360469][ T4241] usb 3-1: USB disconnect, device number 6 [ 208.545209][ T4303] usb 4-1: Using ep0 maxpacket: 8 [ 208.565284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.685328][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.695643][ T4303] usb 4-1: config 0 has no interfaces? [ 208.835318][ T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 208.850902][ T13] usb 2-1: USB disconnect, device number 6 [ 208.875558][ T4303] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 208.884691][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.901828][ T4303] usb 4-1: Product: syz [ 208.907432][ T4303] usb 4-1: Manufacturer: syz [ 208.912512][ T4303] usb 4-1: SerialNumber: syz [ 208.923907][ T4303] usb 4-1: config 0 descriptor?? [ 209.029735][ T9120] tipc: Enabled bearer , priority 0 [ 209.037520][ T9120] device syzkaller0 entered promiscuous mode [ 209.048436][ T9119] tipc: Resetting bearer [ 209.062385][ T9119] tipc: Disabling bearer [ 209.202991][ T13] usb 4-1: USB disconnect, device number 8 [ 209.605319][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.705284][ T23] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 210.105402][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.145250][ T23] usb 5-1: not running at top speed; connect to a high speed hub [ 210.235354][ T23] usb 5-1: config 2 has an invalid interface number: 4 but max is 0 [ 210.243614][ T23] usb 5-1: config 2 has no interface number 0 [ 210.250398][ T23] usb 5-1: config 2 interface 4 has no altsetting 0 [ 210.293350][ T9151] tipc: Enabled bearer , priority 0 [ 210.302097][ T9151] device syzkaller0 entered promiscuous mode [ 210.312335][ T9150] tipc: Resetting bearer [ 210.333291][ T9150] tipc: Disabling bearer [ 210.415510][ T23] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=91.0c [ 210.424649][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.432876][ T23] usb 5-1: Product: syz [ 210.437390][ T23] usb 5-1: Manufacturer: syz [ 210.442814][ T23] usb 5-1: SerialNumber: syz [ 210.645373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.766264][ T23] option 5-1:2.4: GSM modem (1-port) converter detected [ 210.779682][ T23] usb 5-1: USB disconnect, device number 7 [ 210.788270][ T23] option 5-1:2.4: device disconnected [ 211.671671][ T9180] tipc: Enabled bearer , priority 0 [ 211.679853][ T9180] device syzkaller0 entered promiscuous mode [ 211.695240][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.712074][ T9179] tipc: Resetting bearer [ 211.742921][ T9179] tipc: Disabling bearer [ 212.725263][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.225318][ T4863] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 213.479263][ T4863] usb 4-1: Using ep0 maxpacket: 32 [ 213.608475][ T4863] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 213.628400][ T4863] usb 4-1: config 0 has no interface number 0 [ 213.634597][ T4863] usb 4-1: config 0 interface 230 has no altsetting 0 [ 213.745190][ T4241] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.765386][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.795405][ T4863] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 213.804656][ T4863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.812936][ T4863] usb 4-1: Product: syz [ 213.817521][ T4863] usb 4-1: Manufacturer: syz [ 213.822557][ T4863] usb 4-1: SerialNumber: syz [ 213.830593][ T4863] usb 4-1: config 0 descriptor?? [ 213.876363][ T4863] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 213.891560][ T4863] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 214.005496][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 214.145527][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.156785][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.167210][ T4241] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.176605][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.187232][ T4241] usb 2-1: config 0 descriptor?? [ 214.226187][ T4241] hub 2-1:0.0: USB hub found [ 214.445407][ T4241] hub 2-1:0.0: 1 port detected [ 214.740133][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.805339][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.980374][ T9239] fuse: Unknown parameter ''' [ 214.986124][ T9239] process 'syz.2.1797' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 215.095384][ T4241] hub 2-1:0.0: activate --> -90 [ 215.566672][ T4863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 215.750293][ T6871] usb 2-1: USB disconnect, device number 7 [ 215.755199][ T4241] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 215.764457][ T4241] usb 2-1-port1: attempt power cycle [ 215.825159][ T4863] usb 5-1: Using ep0 maxpacket: 16 [ 215.830603][ T4303] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 215.845243][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.970715][ T4863] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 216.005254][ T4863] usb 5-1: config 0 has no interface number 0 [ 216.037857][ T23] usb 4-1: USB disconnect, device number 9 [ 216.062665][ T9247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1800'. [ 216.076102][ T9247] device syzkaller0 entered promiscuous mode [ 216.225280][ T4863] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 216.234679][ T4863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.243558][ T4863] usb 5-1: Product: syz [ 216.255249][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.290949][ T4863] usb 5-1: Manufacturer: syz [ 216.295743][ T4303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.312182][ T4863] usb 5-1: SerialNumber: syz [ 216.318238][ T4303] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 216.337551][ T4863] usb 5-1: config 0 descriptor?? [ 216.350066][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.374247][ T4303] usb 3-1: config 0 descriptor?? [ 216.386048][ T4863] hub 5-1:0.145: bad descriptor, ignoring hub [ 216.392269][ T4863] hub: probe of 5-1:0.145 failed with error -5 [ 216.417991][ T4863] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input7 [ 216.723718][ T9260] device syzkaller0 entered promiscuous mode [ 216.885049][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.907427][ T4303] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 216.934168][ T4303] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 217.100978][ T4303] usb 3-1: USB disconnect, device number 7 [ 217.152054][ T9274] netlink: 'syz.1.1810': attribute type 41 has an invalid length. [ 217.168389][ T9271] fido_id[9271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 217.183494][ T9274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1810'. [ 217.210773][ T9274] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 217.233910][ T9275] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1811'. [ 217.263216][ T9275] device syzkaller0 entered promiscuous mode [ 217.598539][ T9283] netlink: 'syz.3.1815': attribute type 3 has an invalid length. [ 217.608711][ T9283] netlink: 'syz.3.1815': attribute type 10 has an invalid length. [ 217.732759][ T9290] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 217.750976][ T9290] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 217.864878][ T9295] tipc: Enabled bearer , priority 0 [ 217.888902][ T9295] device syzkaller0 entered promiscuous mode [ 217.916452][ T9299] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1822'. [ 217.926114][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.946781][ T9294] tipc: Resetting bearer [ 217.982264][ T9294] tipc: Disabling bearer [ 217.997150][ T9299] device syzkaller0 entered promiscuous mode [ 218.474544][ T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 218.488001][ T4303] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 218.527975][ T9326] device syzkaller0 entered promiscuous mode [ 218.864542][ T23] usb 3-1: config 0 has an invalid interface number: 90 but max is 0 [ 218.873624][ T23] usb 3-1: config 0 has no interface number 0 [ 218.888873][ T23] usb 3-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 218.914296][ T4303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 218.931923][ T4303] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 218.942015][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.959778][ T4303] usb 4-1: config 0 descriptor?? [ 218.964071][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.984281][ T9313] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 219.039457][ T9330] tipc: Enabled bearer , priority 0 [ 219.047855][ T9330] device syzkaller0 entered promiscuous mode [ 219.058445][ T9329] tipc: Resetting bearer [ 219.074358][ T9329] tipc: Disabling bearer [ 219.084098][ T23] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 219.094135][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.102263][ T23] usb 3-1: Product: syz [ 219.106802][ T23] usb 3-1: Manufacturer: syz [ 219.111417][ T23] usb 3-1: SerialNumber: syz [ 219.117817][ T23] usb 3-1: config 0 descriptor?? [ 219.134655][ T9315] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 219.204053][ T4241] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 219.334887][ T9336] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1838'. [ 219.348211][ T9336] device syzkaller0 entered promiscuous mode [ 219.374057][ T23] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 219.382737][ T23] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.90/input/input8 [ 219.449288][ T4303] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 219.468922][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 219.647357][ T4303] usb 4-1: USB disconnect, device number 10 [ 219.783733][ T4241] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 219.792957][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.796184][ T23] usb 3-1: USB disconnect, device number 8 [ 219.804554][ T4241] usb 2-1: Product: syz [ 219.811087][ T4241] usb 2-1: Manufacturer: syz [ 219.813511][ C1] powermate: config urb returned -71 [ 219.815864][ T4241] usb 2-1: SerialNumber: syz [ 219.820989][ C1] powermate: usb_submit_urb(config) failed [ 219.837728][ T4241] usb 2-1: config 0 descriptor?? [ 220.003541][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.103453][ T4241] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.482190][ T9353] device syzkaller0 entered promiscuous mode [ 220.496348][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 220.637072][ T9355] device syzkaller1 entered promiscuous mode [ 220.843118][ T4241] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 220.846190][ T9357] tipc: Enabled bearer , priority 0 [ 220.866542][ T9357] device syzkaller0 entered promiscuous mode [ 220.868696][ T4241] usb 2-1: USB disconnect, device number 12 [ 220.900804][ T9356] tipc: Resetting bearer [ 220.924517][ T9356] tipc: Disabling bearer [ 221.043044][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.116949][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 221.136811][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.150245][ T23] usb 4-1: Product: syz [ 221.166282][ T23] usb 4-1: Manufacturer: syz [ 221.173053][ T23] usb 4-1: SerialNumber: syz [ 221.292922][ T3544] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 221.354505][ T3544] usb 5-1: device reset changed ep0 maxpacket size! [ 221.371002][ T4863] usb 5-1: USB disconnect, device number 8 [ 221.552767][ T4863] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 221.662955][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 221.822535][ T4863] usb 5-1: Using ep0 maxpacket: 32 [ 221.964530][ T4863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.975685][ T6871] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.989301][ T4863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.999187][ T4863] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 222.016447][ T4863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.036700][ T4863] usb 5-1: config 0 descriptor?? [ 222.082505][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.232648][ T6871] usb 2-1: Using ep0 maxpacket: 8 [ 222.362665][ T6871] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 222.392362][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 222.412251][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 222.429558][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 222.441614][ T23] lan78xx: probe of 4-1:1.0 failed with error -71 [ 222.458614][ T23] usb 4-1: USB disconnect, device number 11 [ 222.540601][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1856'. [ 222.553212][ T6871] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 222.570777][ T6871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.579308][ T4863] usbhid 5-1:0.0: can't add hid device: -71 [ 222.605688][ T4863] usbhid: probe of 5-1:0.0 failed with error -71 [ 222.621708][ T6871] usb 2-1: Product: syz [ 222.630750][ T4863] usb 5-1: USB disconnect, device number 9 [ 222.639159][ T6871] usb 2-1: Manufacturer: syz [ 222.655670][ T6871] usb 2-1: SerialNumber: syz [ 222.662372][ T9391] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 222.680776][ T6871] usb 2-1: config 0 descriptor?? [ 222.744256][ T6871] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 223.087079][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 223.122182][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.456740][ T9426] tipc: Enabled bearer , priority 0 [ 223.464109][ T9426] device syzkaller0 entered promiscuous mode [ 223.483567][ T9425] tipc: Resetting bearer [ 223.502369][ T9425] tipc: Disabling bearer [ 223.601843][ T6871] gspca_zc3xx: reg_w_i err -71 [ 223.651725][ T4241] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 223.701782][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 223.711096][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.719599][ T23] usb 3-1: Product: syz [ 223.724178][ T23] usb 3-1: Manufacturer: syz [ 223.728800][ T23] usb 3-1: SerialNumber: syz [ 223.754194][ T9433] kvm: pic: non byte write [ 223.760794][ T9433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 223.922999][ T1241] wlan0: Trigger new scan to find an IBSS to join [ 224.021682][ T4241] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.034003][ T4241] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.121627][ T4241] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.131171][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.140742][ T4241] usb 4-1: SerialNumber: syz [ 224.161546][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.211580][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 224.231435][ T6871] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 224.238054][ T6871] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 224.246755][ T6871] usb 2-1: USB disconnect, device number 13 [ 224.425873][ T4241] usb 4-1: 0:2 : does not exist [ 224.468450][ T4241] usb 4-1: USB disconnect, device number 12 [ 224.743477][ T9460] tipc: Enabled bearer , priority 0 [ 224.750830][ T9460] device syzkaller0 entered promiscuous mode [ 224.765176][ T9459] tipc: Resetting bearer [ 224.788358][ T9459] tipc: Disabling bearer [ 224.865355][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'. [ 224.875906][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'. [ 224.974198][ T9464] device syzkaller1 entered promiscuous mode [ 225.200977][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.266037][ T9482] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1891'. [ 225.279777][ T9482] device syzkaller0 entered promiscuous mode [ 225.307756][ T9484] tipc: Enabled bearer , priority 0 [ 225.318159][ T9484] tipc: Resetting bearer [ 225.344108][ T9483] tipc: Disabling bearer [ 225.380964][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 225.404614][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 225.415007][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 225.424132][ T23] lan78xx: probe of 3-1:1.0 failed with error -71 [ 225.441360][ T4241] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.441901][ T23] usb 3-1: USB disconnect, device number 9 [ 225.501097][ T9486] program syz.3.1893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.690669][ T4241] usb 2-1: Using ep0 maxpacket: 16 [ 225.780593][ T4863] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 225.830710][ T4852] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 225.839170][ T4241] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 225.848868][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.893789][ T4241] usb 2-1: config 0 descriptor?? [ 225.948733][ T4241] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 226.001701][ T9498] ªªªªªª: renamed from lo [ 226.040442][ T4863] usb 5-1: Using ep0 maxpacket: 32 [ 226.097822][ T4852] usb 4-1: Using ep0 maxpacket: 8 [ 226.160579][ T4863] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 226.169122][ T4863] usb 5-1: config 0 has no interface number 0 [ 226.175415][ T4863] usb 5-1: config 0 interface 12 has no altsetting 0 [ 226.240451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.270672][ T4852] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.281016][ T4852] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.291471][ T4852] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.301483][ T4852] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.315076][ T4852] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.324583][ T4852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.340509][ T4863] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 226.349848][ T4863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.358062][ T4863] usb 5-1: Product: syz [ 226.363428][ T4863] usb 5-1: Manufacturer: syz [ 226.368068][ T4863] usb 5-1: SerialNumber: syz [ 226.374942][ T4863] usb 5-1: config 0 descriptor?? [ 226.600758][ T4852] usb 4-1: GET_CAPABILITIES returned 0 [ 226.606342][ T4852] usbtmc 4-1:16.0: can't read capabilities [ 226.804699][ T23] usb 4-1: USB disconnect, device number 13 [ 226.840375][ T4226] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.880435][ T1241] wlan0: Trigger new scan to find an IBSS to join [ 227.099940][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 227.250132][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.261215][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.271774][ T4226] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 227.279871][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.280994][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.297795][ T4226] usb 3-1: config 0 descriptor?? [ 227.689835][ T4852] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.781526][ T4226] logitech-djreceiver 0003:046D:C71F.0007: item fetching failed at offset 5/8 [ 227.791157][ T4226] logitech-djreceiver 0003:046D:C71F.0007: logi_dj_probe: parse failed [ 227.799621][ T4226] logitech-djreceiver: probe of 0003:046D:C71F.0007 failed with error -22 [ 227.959527][ T4852] usb 4-1: Using ep0 maxpacket: 32 [ 227.984089][ T13] usb 3-1: USB disconnect, device number 10 [ 228.099661][ T4852] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 228.107864][ T4852] usb 4-1: config 0 has no interface number 0 [ 228.118263][ T4852] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 228.279531][ T4852] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 228.288867][ T4852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.297038][ T4852] usb 4-1: Product: syz [ 228.301414][ T4852] usb 4-1: Manufacturer: syz [ 228.306124][ T4852] usb 4-1: SerialNumber: syz [ 228.312453][ T4852] usb 4-1: config 0 descriptor?? [ 228.319463][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.329656][ T9513] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 228.521098][ T9516] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1904'. [ 228.534096][ T9516] device syzkaller0 entered promiscuous mode [ 228.557687][ T9513] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 228.589501][ T4863] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 228.598337][ T4863] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 228.606448][ T4863] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 228.614622][ T4863] f81534: probe of 5-1:0.12 failed with error -71 [ 228.623998][ T4863] usb 5-1: USB disconnect, device number 10 [ 229.009198][ T4241] gspca_sonixj: reg_w err -71 [ 229.013987][ T4241] sonixj: probe of 2-1:0.0 failed with error -71 [ 229.659331][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.704649][ T4241] usb 2-1: USB disconnect, device number 14 [ 229.784217][ T6871] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.920183][ T1241] wlan0: Trigger new scan to find an IBSS to join [ 229.937667][ T9533] binder: 9532:9533 unknown command 0 [ 229.945063][ T9533] binder: 9532:9533 ioctl c0306201 200000000080 returned -22 [ 229.956673][ T9533] binder: 9532:9533 ioctl c0306201 2000000003c0 returned -14 [ 230.048901][ T6871] usb 3-1: Using ep0 maxpacket: 16 [ 230.089551][ T9535] block nbd0: NBD_DISCONNECT [ 230.119365][ T9534] block nbd0: Disconnected due to user request. [ 230.126122][ T9534] block nbd0: shutting down sockets [ 230.204901][ T6871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.234220][ T6871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.248884][ T6871] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 230.275323][ T6871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.294048][ T6871] usb 3-1: config 0 descriptor?? [ 230.304905][ T9541] ======================================================= [ 230.304905][ T9541] WARNING: The mand mount option has been deprecated and [ 230.304905][ T9541] and is ignored by this kernel. Remove the mand [ 230.304905][ T9541] option from the mount to silence this warning. [ 230.304905][ T9541] ======================================================= [ 230.582973][ T9522] udc-core: couldn't find an available UDC or it's busy [ 230.590229][ T4226] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 230.595568][ T9522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.718406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.830211][ T6871] elecom 0003:056E:00FF.0008: unknown main item tag 0x0 [ 230.837239][ T6871] elecom 0003:056E:00FF.0008: unknown main item tag 0x4 [ 230.844375][ T6871] elecom 0003:056E:00FF.0008: unknown main item tag 0x1 [ 230.851653][ T6871] elecom 0003:056E:00FF.0008: unknown main item tag 0x6 [ 230.858999][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 230.864320][ T6871] elecom 0003:056E:00FF.0008: unknown main item tag 0xe [ 230.871617][ T6871] elecom 0003:056E:00FF.0008: unknown global tag 0xe [ 230.878956][ T6871] elecom 0003:056E:00FF.0008: item 0 2 1 14 parsing failed [ 230.886487][ T6871] elecom: probe of 0003:056E:00FF.0008 failed with error -22 [ 230.899844][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.917256][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.178172][ T4226] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 231.193875][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.203181][ T4226] usb 2-1: Product: syz [ 231.207396][ T4226] usb 2-1: Manufacturer: syz [ 231.218316][ T4226] usb 2-1: SerialNumber: syz [ 231.238976][ T4226] usb 2-1: config 0 descriptor?? [ 231.281870][ T4226] hub 2-1:0.0: bad descriptor, ignoring hub [ 231.293655][ T4226] hub: probe of 2-1:0.0 failed with error -5 [ 231.301612][ T4226] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 231.553604][ T13] usb 3-1: USB disconnect, device number 11 [ 231.707672][ T4226] gspca_vc032x: reg_w err -71 [ 231.712422][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.727627][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.732971][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.764504][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.767989][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.777566][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.783234][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.805830][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.817481][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.822829][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.837541][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.848900][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.867696][ T4852] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 231.868897][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.885198][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.888626][ T4852] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 231.894014][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.926465][ T4852] asix: probe of 4-1:0.188 failed with error -71 [ 231.927844][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.949624][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.965190][ T4852] usb 4-1: USB disconnect, device number 14 [ 231.967402][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.979354][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 231.985142][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.001364][ T4226] gspca_vc032x: Unknown sensor... [ 232.011210][ T4226] vc032x: probe of 2-1:0.0 failed with error -22 [ 232.069251][ T4226] usb 2-1: USB disconnect, device number 15 [ 232.337310][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.387465][ T6871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.473554][ T9571] device syzkaller0 entered promiscuous mode [ 232.477229][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 232.586261][ T9573] device syzkaller0 entered promiscuous mode [ 232.627242][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 232.757215][ T6871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.777020][ T6871] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.793560][ T6871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.797319][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.811385][ T6871] usb 5-1: config 0 descriptor?? [ 232.879552][ T6871] pwc: Askey VC010 type 2 USB webcam detected. [ 232.977366][ T23] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 232.986567][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.015845][ T23] usb 3-1: Product: syz [ 233.026208][ T23] usb 3-1: Manufacturer: syz [ 233.036043][ T23] usb 3-1: SerialNumber: syz [ 233.048292][ T23] usb 3-1: config 0 descriptor?? [ 233.314053][ T6871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.382459][ T6871] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.436819][ T6871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.506840][ T6871] pwc: recv_control_msg error -32 req 04 val 1000 [ 233.517058][ T4852] usb 3-1: USB disconnect, device number 12 [ 233.524633][ T4852] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -19 [ 233.556933][ T6871] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.570335][ T4852] f81534a_ctrl 3-1:0.0: failed to enable ports: -19 [ 233.616148][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.617761][ T6871] pwc: recv_control_msg error -32 req 04 val 1400 [ 233.624642][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.638181][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.646213][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.654015][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.668973][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.680469][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.690694][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.696626][ T6871] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.701728][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.715707][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.730116][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.740896][ T4241] hid-generic 0103:0004:0000.0009: unknown main item tag 0x0 [ 233.756687][ T6871] pwc: recv_control_msg error -32 req 02 val 2100 [ 233.779692][ T4241] hid-generic 0103:0004:0000.0009: hidraw0: HID v0.02 Device [syz0] on syz1 [ 233.796777][ T6871] pwc: recv_control_msg error -32 req 04 val 1500 [ 233.835401][ T9589] fido_id[9589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.850298][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.856554][ T6871] pwc: recv_control_msg error -32 req 02 val 2500 [ 233.907303][ T6871] pwc: recv_control_msg error -32 req 02 val 2400 [ 233.956602][ T6871] pwc: recv_control_msg error -32 req 02 val 2600 [ 234.016610][ T6871] pwc: recv_control_msg error -32 req 02 val 2900 [ 234.056608][ T6871] pwc: recv_control_msg error -32 req 02 val 2800 [ 234.222385][ T4241] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 234.306442][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 234.339061][ T6871] pwc: Registered as video103. [ 234.344797][ T6871] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 234.434046][ T9612] device syzkaller0 entered promiscuous mode [ 234.489285][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 234.554399][ T4226] usb 5-1: USB disconnect, device number 11 [ 234.606241][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 234.606354][ T4241] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 234.620964][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.642731][ T4241] usb 2-1: config 0 descriptor?? [ 234.687489][ T4241] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 234.756405][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 234.765636][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.838689][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 234.851256][ T23] pvrusb2: ********** [ 234.855304][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 234.865451][ T23] pvrusb2: Important functionality might not be entirely working. [ 234.873442][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 234.876304][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.885341][ T23] pvrusb2: ********** [ 235.064487][ T2421] pvrusb2: Invalid write control endpoint [ 235.073240][ T23] usb 4-1: USB disconnect, device number 15 [ 235.186648][ T2421] pvrusb2: Invalid write control endpoint [ 235.193392][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 235.204938][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 235.212910][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 235.223539][ T2421] pvrusb2: Device being rendered inoperable [ 235.232725][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 235.241834][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 235.257223][ T2421] pvrusb2: Attached sub-driver cx25840 [ 235.263181][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 235.274074][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 235.345868][ T4241] gspca_vc032x: reg_w err -71 [ 235.352034][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.371172][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.384876][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.392388][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.403218][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.410341][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.421383][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.428546][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.433869][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.444688][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.451955][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.462876][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.470398][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492652][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.498501][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.504011][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.516111][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.521693][ T4241] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.532940][ T4241] gspca_vc032x: Unknown sensor... [ 235.539712][ T4241] vc032x: probe of 2-1:0.0 failed with error -22 [ 235.571612][ T4241] usb 2-1: USB disconnect, device number 16 [ 235.916614][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.692890][ T9652] IPVS: Error connecting to the multicast addr [ 236.734794][ T9654] device syzkaller0 entered promiscuous mode [ 236.796377][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1950'. [ 236.955284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.169080][ T9668] device syzkaller1 entered promiscuous mode [ 237.824685][ T4226] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 237.884732][ T9691] overlayfs: failed to decode file handle (len=6, type=8192, flags=0, err=-22) [ 237.969387][ T9693] device syzkaller0 entered promiscuous mode [ 237.995098][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.244614][ T4226] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 238.253264][ T4226] usb 5-1: config 0 has no interface number 0 [ 238.270507][ T4226] usb 5-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 238.484314][ T4226] usb 5-1: New USB device found, idVendor=0489, idProduct=e0da, bcdDevice=a4.45 [ 238.493618][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.503436][ T4226] usb 5-1: Product: syz [ 238.508162][ T4226] usb 5-1: Manufacturer: syz [ 238.521168][ T4226] usb 5-1: SerialNumber: syz [ 238.536398][ T4226] usb 5-1: config 0 descriptor?? [ 238.564594][ T9674] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.595994][ T4226] option 5-1:0.170: GSM modem (1-port) converter detected [ 238.805006][ T4852] usb 5-1: USB disconnect, device number 12 [ 238.826414][ T4852] option 5-1:0.170: device disconnected [ 239.034056][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.254530][ T9740] device syzkaller0 entered promiscuous mode [ 239.403436][ T9749] netlink: 'syz.4.1982': attribute type 2 has an invalid length. [ 239.411636][ T9749] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1982'. [ 240.003508][ T4852] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 240.074382][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.126808][ T4241] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 240.374761][ T4852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.386006][ T4241] usb 5-1: Using ep0 maxpacket: 16 [ 240.407200][ T4852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.498213][ T4852] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.508036][ T4241] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 240.528143][ T4852] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 240.541001][ T4852] usb 2-1: Manufacturer: syz [ 240.551358][ T4852] usb 2-1: config 0 descriptor?? [ 240.587102][ T9789] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.596993][ T9789] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.618852][ T9789] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 240.628239][ T9789] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 240.637577][ T13] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 240.638204][ T9789] overlayfs: d_ino too big (422, ino=9223372036854777962, xinobits=3) [ 240.646176][ T13] Bluetooth: hci4: Injecting HCI hardware error event [ 240.660444][ T9789] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 240.662949][ T4191] Bluetooth: hci4: hardware error 0x00 [ 240.696710][ T4241] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.723504][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.731822][ T4241] usb 5-1: Product: syz [ 240.736241][ T4241] usb 5-1: Manufacturer: syz [ 240.740877][ T4241] usb 5-1: SerialNumber: syz [ 240.750532][ T4241] usb 5-1: config 0 descriptor?? [ 241.113184][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.703499][ T9845] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1999'. [ 241.721719][ T9845] device syzkaller0 entered promiscuous mode [ 241.737306][ T4852] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input10 [ 241.837342][ T4852] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 241.938767][ T4852] usb 2-1: USB disconnect, device number 17 [ 241.989733][ T9855] fido_id[9855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 242.129269][ T4241] usb 5-1: USB disconnect, device number 13 [ 242.153254][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.212376][ T4226] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 242.492196][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 242.628491][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 242.692087][ T4241] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 242.781819][ T9899] netlink: 'syz.2.2005': attribute type 3 has an invalid length. [ 242.791235][ T6871] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 242.808697][ T9899] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 242.819556][ T9899] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.827775][ T9899] bond0: (slave team0): Enslaving as an active interface with an up link [ 242.836996][ T4226] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 242.848658][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.857240][ T4226] usb 4-1: Product: syz [ 242.861566][ T4226] usb 4-1: Manufacturer: syz [ 242.866249][ T4226] usb 4-1: SerialNumber: syz [ 242.883048][ T4226] usb 4-1: config 0 descriptor?? [ 242.925457][ T4226] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 242.932054][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 243.052140][ T4241] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.060196][ T4241] usb 5-1: config 0 has no interface number 0 [ 243.066832][ T4241] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 243.077514][ T4241] usb 5-1: config 0 interface 1 has no altsetting 0 [ 243.181879][ T4852] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 243.192221][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.211941][ T6871] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.222449][ T6871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.242000][ T4241] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 243.251195][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.259492][ T4241] usb 5-1: Product: syz [ 243.263817][ T4241] usb 5-1: Manufacturer: syz [ 243.268628][ T4241] usb 5-1: SerialNumber: syz [ 243.275494][ T4241] usb 5-1: config 0 descriptor?? [ 243.311996][ T6871] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.321178][ T6871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.333047][ T6871] usb 2-1: SerialNumber: syz [ 243.421635][ T4852] usb 3-1: Using ep0 maxpacket: 32 [ 243.541706][ T4852] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 243.550250][ T4852] usb 3-1: config 0 has no interface number 0 [ 243.558173][ T4241] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 243.567368][ T4852] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 243.591639][ T4241] cx231xx 5-1:0.1: Failed to read PCB config [ 243.597816][ T4241] cx231xx: probe of 5-1:0.1 failed with error -71 [ 243.606258][ T4241] usb 5-1: USB disconnect, device number 14 [ 243.624201][ T6871] usb 2-1: 0:2 : does not exist [ 243.629724][ T6871] usb 2-1: unit 255 not found! [ 243.731409][ T4852] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 243.740731][ T4852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.748857][ T4852] usb 3-1: Product: syz [ 243.753176][ T4852] usb 3-1: Manufacturer: syz [ 243.757791][ T4852] usb 3-1: SerialNumber: syz [ 243.764300][ T4852] usb 3-1: config 0 descriptor?? [ 243.781566][ T9905] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 243.851525][ T6871] usb 2-1: 5:0: cannot get min/max values for control 6 (id 5) [ 244.003758][ T9905] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 244.061036][ T6871] usb 2-1: 5:0: cannot get min/max values for control 7 (id 5) [ 244.124918][ T4241] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 244.231885][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.260870][ T6871] usb 2-1: 5:0: cannot get min/max values for control 14 (id 5) [ 244.283827][ T6871] usb 2-1: USB disconnect, device number 18 [ 244.410577][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 244.512119][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.530682][ T4241] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.539063][ T4241] usb 5-1: config 0 has no interface number 0 [ 244.551645][ T4241] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 244.564684][ T4241] usb 5-1: config 0 interface 1 has no altsetting 0 [ 244.670420][ T4226] gspca_zc3xx: reg_w_i err -71 [ 244.730469][ T4241] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 244.739549][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.751083][ T4241] usb 5-1: Product: syz [ 244.755513][ T4241] usb 5-1: Manufacturer: syz [ 244.762234][ T4241] usb 5-1: SerialNumber: syz [ 244.769197][ T4241] usb 5-1: config 0 descriptor?? [ 245.134654][ T9929] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2010'. [ 245.146754][ T9929] device syzkaller0 entered promiscuous mode [ 245.231843][ T4241] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 245.269843][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.279819][ T4241] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 245.329925][ T4226] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 245.337336][ T4226] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 245.379278][ T4226] usb 4-1: USB disconnect, device number 16 [ 245.399986][ T4241] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 245.439695][ T4241] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 245.489675][ T4241] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 245.524847][ T4241] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 245.555208][ T4241] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 245.569778][ T4241] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -71 [ 245.606764][ T4241] i2c i2c-2: Added multiplexed i2c bus 4 [ 245.635027][ T4241] i2c i2c-2: Added multiplexed i2c bus 5 [ 245.670619][ T4241] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 245.688723][ T4241] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 245.752749][ T4241] cx231xx: probe of 5-1:0.1 failed with error -71 [ 245.768229][ T4241] usb 5-1: USB disconnect, device number 15 [ 245.799159][ T4226] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 246.074203][ T9941] chnl_net:caif_netlink_parms(): no params data found [ 246.128942][ T4226] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 246.179014][ T4852] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 246.205381][ T4519] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.205635][ T4852] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 246.229888][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.249510][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.277677][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.309435][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.322744][ T4852] asix: probe of 3-1:0.188 failed with error -71 [ 246.333506][ T4852] usb 3-1: USB disconnect, device number 13 [ 246.388938][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.398049][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.425690][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.440655][ T4519] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.479464][ T9941] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.486897][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.495610][ T9941] device bridge_slave_0 entered promiscuous mode [ 246.505894][ T9941] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.513407][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.521306][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.524228][ T9941] device bridge_slave_1 entered promiscuous mode [ 246.537479][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.554109][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.568093][ T4519] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.623542][ T9941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.648626][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.658647][ T9941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.667932][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.679576][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.709576][ T4519] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.755499][ T9941] team0: Port device team_slave_0 added [ 246.768615][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.778540][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.800345][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.815692][ T9941] team0: Port device team_slave_1 added [ 246.888683][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.903707][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 246.946995][ T9941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.962819][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.962821][ T9941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.962852][ T9941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.052200][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.061551][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.075538][ T9941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.083349][ T9941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.110366][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.118430][ T9941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.141529][ T9978] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2025'. [ 247.182908][ T4241] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 247.198067][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.220230][ T4226] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.246478][ T9978] device syzkaller0 entered promiscuous mode [ 247.269084][ T4226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.310331][ T9941] device hsr_slave_0 entered promiscuous mode [ 247.318663][ T9941] device hsr_slave_1 entered promiscuous mode [ 247.325474][ T9941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.334270][ T9941] Cannot create hsr debugfs directory [ 247.341095][ T4519] tipc: Disabling bearer [ 247.349154][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.378970][ T4519] tipc: Disabling bearer [ 247.392474][ T4519] tipc: Disabling bearer [ 247.401550][ T4519] tipc: Left network mode [ 247.438300][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 247.447931][ T4226] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 247.457020][ T4226] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 247.525676][ T4226] usb 4-1: Product: syz [ 247.548334][ T4226] usb 4-1: Manufacturer: syz [ 247.562061][ T4226] usb 4-1: SerialNumber: syz [ 247.577632][ T4241] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 247.586062][ T4241] usb 2-1: config 0 has no interface number 0 [ 247.594947][ T4226] usb 4-1: config 0 descriptor?? [ 247.607430][ T4241] usb 2-1: config 0 interface 230 has no altsetting 0 [ 247.679754][ T4226] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 247.767636][ T4241] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 247.776922][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.822217][ T4241] usb 2-1: Product: syz [ 247.832496][ T4241] usb 2-1: Manufacturer: syz [ 247.843598][ T4241] usb 2-1: SerialNumber: syz [ 247.875856][ T4241] usb 2-1: config 0 descriptor?? [ 247.907257][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 247.918457][ T4241] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 247.943644][ T4241] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 247.993665][ T6871] usb 4-1: USB disconnect, device number 17 [ 248.029756][ T6871] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 248.059981][ T9941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.137027][ T9941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.189356][ T9941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.201177][ T9941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.387263][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.451801][ T4519] bond0: (slave wlan1): Releasing backup interface [ 248.580695][ T9941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.657302][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.665423][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.674946][T10027] netlink: 'syz.3.2031': attribute type 3 has an invalid length. [ 248.703067][T10027] netlink: 'syz.3.2031': attribute type 10 has an invalid length. [ 248.715152][ T9941] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.756826][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.779942][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.823269][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.830588][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.905284][ T4519] device hsr_slave_0 left promiscuous mode [ 248.913628][ T4519] device hsr_slave_1 left promiscuous mode [ 248.939955][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.964810][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.004347][ T4519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.037996][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.064298][ T4519] device bridge_slave_1 left promiscuous mode [ 249.080543][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.143595][ T4519] device bridge_slave_0 left promiscuous mode [ 249.151661][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.238955][ T4519] device veth1_macvtap left promiscuous mode [ 249.245967][ T4519] device veth0_macvtap left promiscuous mode [ 249.252079][ T4519] device veth1_vlan left promiscuous mode [ 249.258575][ T4519] device veth0_vlan left promiscuous mode [ 249.425660][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.619781][ T4519] team0 (unregistering): Port device team_slave_1 removed [ 249.654283][ T4519] team0 (unregistering): Port device team_slave_0 removed [ 249.710353][ T4519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.749545][ T4519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.917816][ T4519] bond0 (unregistering): (slave team0): Releasing backup interface [ 249.943713][ T4519] bond0 (unregistering): Released all slaves [ 249.985055][ T4852] Bluetooth: hci5: command 0x041b tx timeout [ 250.145359][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.154233][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.171750][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.181143][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.188241][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.229487][T10057] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2035'. [ 250.251314][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.268289][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.296067][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.340301][ T4241] ums-usbat: probe of 2-1:0.230 failed with error 4 [ 250.349115][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.357440][ T4241] usb 2-1: USB disconnect, device number 19 [ 250.359451][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.373816][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.443459][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.459452][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.465037][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.469067][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.525248][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.544149][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.568746][ T9941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.702439][T10089] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 250.742221][T10089] netlink: 'syz.1.2041': attribute type 10 has an invalid length. [ 250.800116][T10089] bridge0: port 3(team0) entered disabled state [ 250.851735][T10089] device team0 left promiscuous mode [ 250.860199][T10089] device team_slave_0 left promiscuous mode [ 250.868653][T10089] device team_slave_1 left promiscuous mode [ 250.884891][T10089] bridge0: port 3(team0) entered disabled state [ 250.907632][T10089] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.918831][T10089] bond0: (slave team0): Enslaving as an active interface with an up link [ 250.946859][T10100] tipc: Enabled bearer , priority 0 [ 250.994127][ T4852] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 251.005716][T10098] tipc: Resetting bearer [ 251.076620][T10096] tipc: Disabling bearer [ 251.105037][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.112589][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.142947][ T9941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.243490][ T4852] usb 4-1: Using ep0 maxpacket: 32 [ 251.503740][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.533717][ T4852] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=67.fe [ 251.573542][ T4852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.581788][ T4852] usb 4-1: Product: syz [ 251.632897][ T4852] usb 4-1: Manufacturer: syz [ 251.647795][ T4852] usb 4-1: SerialNumber: syz [ 251.684141][T10136] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2050'. [ 251.704564][ T4852] usb 4-1: config 0 descriptor?? [ 251.737495][T10136] device syzkaller0 entered promiscuous mode [ 251.833918][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.848172][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.904746][ T9941] device veth0_vlan entered promiscuous mode [ 251.933982][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.965548][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.983363][ T4852] dvb-usb: found a 'Terratec Cinergy HT Express' in warm state. [ 251.987830][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.035409][ T4852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.037878][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.074520][ T4857] Bluetooth: hci5: command 0x040f tx timeout [ 252.086900][ T9941] device veth1_vlan entered promiscuous mode [ 252.094645][ T4852] dvbdev: DVB: registering new adapter (Terratec Cinergy HT Express) [ 252.129483][ T4852] usb 4-1: media controller created [ 252.182170][ T4852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.191654][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.218239][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.250060][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.268390][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.292019][ T9941] device veth0_macvtap entered promiscuous mode [ 252.339378][ T4852] DVB: Unable to find symbol dib7000p_attach() [ 252.347004][ T4852] dvb-usb: no frontend was attached by 'Terratec Cinergy HT Express' [ 252.378750][ T9941] device veth1_macvtap entered promiscuous mode [ 252.434873][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.481688][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.540732][ T9941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.543100][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.562383][ T4852] rc_core: IR keymap rc-dib0700-rc5 not found [ 252.569786][ T4852] Registered IR keymap rc-empty [ 252.590102][ T4852] dvb-usb: could not initialize remote control. [ 252.600441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.619134][ T4852] dvb-usb: Terratec Cinergy HT Express successfully initialized and connected. [ 252.630117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.674986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.720749][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.745947][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.780025][ T9941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.802576][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.832773][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.884253][ T9941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.899428][ T4852] usb 4-1: USB disconnect, device number 18 [ 252.903332][ T9941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.917464][ T9941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.929876][ T9941] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.994577][ T4852] dvb-usb: Terratec Cinergy HT Express successfully deinitialized and disconnected. [ 253.005067][T10170] netlink: 'syz.2.2054': attribute type 3 has an invalid length. [ 253.032692][T10172] netlink: 'syz.2.2054': attribute type 10 has an invalid length. [ 253.232017][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.263831][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.304831][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.344210][ T4517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.371336][T10180] tipc: Enabled bearer , priority 0 [ 253.395171][ T4517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.413868][T10180] tipc: Resetting bearer [ 253.439336][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.464826][T10179] tipc: Disabling bearer [ 253.581653][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.704682][T10194] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2060'. [ 253.748934][T10195] tipc: Enabled bearer , priority 0 [ 253.778289][T10195] tipc: Resetting bearer [ 253.806887][T10194] device syzkaller0 entered promiscuous mode [ 253.817839][T10193] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 253.828512][T10192] tipc: Disabling bearer [ 253.879544][T10193] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 254.141422][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 254.364103][T10185] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 254.439586][T10235] netlink: 'syz.1.2066': attribute type 3 has an invalid length. [ 254.482778][T10235] netlink: 'syz.1.2066': attribute type 10 has an invalid length. [ 254.620909][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.810353][T10250] tipc: Enabled bearer , priority 0 [ 254.852541][T10255] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2073'. [ 254.904608][T10250] tipc: Resetting bearer [ 254.945983][T10255] device syzkaller0 entered promiscuous mode [ 254.982791][T10257] tipc: Started in network mode [ 254.987901][T10257] tipc: Node identity c25b6a3aabdd, cluster identity 4711 [ 255.021987][T10257] tipc: Enabled bearer , priority 0 [ 255.063786][T10249] tipc: Disabling bearer [ 255.138972][T10257] tipc: Resetting bearer [ 255.165275][T10253] tipc: Disabling bearer [ 255.236564][ T4241] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 255.280260][ T4241] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.659424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.671893][T10284] fido_id[10284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.721327][T10291] netlink: 'syz.4.2082': attribute type 3 has an invalid length. [ 255.744401][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.751470][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.795531][T10291] netlink: 'syz.4.2082': attribute type 10 has an invalid length. [ 255.843145][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.875725][T10291] bond0: (slave team0): Enslaving as an active interface with an up link [ 256.019234][ T6871] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 256.428770][ T6871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.518542][ T6871] usb 4-1: no configurations [ 256.523567][ T6871] usb 4-1: can't read configurations, error -22 [ 256.596647][T10324] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2087'. [ 256.636622][T10324] device syzkaller0 entered promiscuous mode [ 256.689849][T10328] loop8: detected capacity change from 0 to 8 [ 256.698687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.713448][T10328] Dev loop8: unable to read RDB block 8 [ 256.721461][T10328] loop8: unable to read partition table [ 256.727422][T10328] loop8: partition table beyond EOD, truncated [ 256.728994][ T4226] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 256.746361][T10328] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 256.872902][T10333] tipc: Enabled bearer , priority 0 [ 256.916940][T10333] tipc: Resetting bearer [ 256.946474][T10332] tipc: Disabling bearer [ 256.983484][T10337] tipc: Enabled bearer , priority 0 [ 257.005510][T10337] tipc: Resetting bearer [ 257.023064][T10336] tipc: Disabling bearer [ 257.152882][T10349] netlink: 'syz.4.2093': attribute type 10 has an invalid length. [ 257.217027][T10347] device syzkaller0 entered promiscuous mode [ 257.244091][T10350] device syzkaller0 entered promiscuous mode [ 257.268361][ T4226] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 257.277488][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.315065][ T4226] usb 2-1: Product: syz [ 257.325052][ T4226] usb 2-1: Manufacturer: syz [ 257.335888][ T4226] usb 2-1: SerialNumber: syz [ 257.361587][ T4226] usb 2-1: config 0 descriptor?? [ 257.375952][T10356] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 257.407409][T10358] netlink: 'syz.4.2096': attribute type 3 has an invalid length. [ 257.427136][T10362] netlink: 'syz.4.2096': attribute type 10 has an invalid length. [ 257.673859][T10371] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2099'. [ 257.700489][T10371] device syzkaller0 entered promiscuous mode [ 257.737270][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.873707][ T4226] airspy 2-1:0.0: Board ID: 00 [ 257.893058][ T4226] airspy 2-1:0.0: Firmware version: [ 258.032031][T10389] sg_read: process 1080 (syz.4.2103) changed security contexts after opening file descriptor, this is not allowed. [ 258.089857][T10393] tipc: Enabled bearer , priority 0 [ 258.114395][T10393] tipc: Resetting bearer [ 258.141149][T10392] tipc: Disabling bearer [ 258.161842][T10396] tipc: Enabled bearer , priority 0 [ 258.181314][T10396] tipc: Resetting bearer [ 258.191091][T10395] tipc: Disabling bearer [ 258.297578][ T4226] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 258.324526][ T4226] airspy 2-1:0.0: Registered as swradio24 [ 258.345570][ T4226] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 258.375919][ T4226] usb 2-1: USB disconnect, device number 20 [ 258.449700][T10408] device syzkaller0 entered promiscuous mode [ 258.467040][T10412] device syzkaller0 entered promiscuous mode [ 258.505219][T10406] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 258.592160][ T4857] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 258.661673][T10418] netlink: 'syz.5.2110': attribute type 3 has an invalid length. [ 258.698992][T10418] netlink: 'syz.5.2110': attribute type 10 has an invalid length. [ 258.754733][T10418] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.763484][T10418] bond0: (slave team0): Enslaving as an active interface with an up link [ 258.776593][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.802535][T10421] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2111'. [ 258.834828][T10421] device syzkaller0 entered promiscuous mode [ 258.842158][ T4857] usb 4-1: Using ep0 maxpacket: 32 [ 258.976109][ T4857] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 258.984263][ T4857] usb 4-1: config 0 has no interface number 0 [ 259.003894][ T4857] usb 4-1: config 0 interface 12 has no altsetting 0 [ 259.176114][ T4857] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 259.195889][ T4290] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 259.233998][ T4857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.251595][ T4857] usb 4-1: Product: syz [ 259.269262][ T4857] usb 4-1: Manufacturer: syz [ 259.274024][ T4857] usb 4-1: SerialNumber: syz [ 259.293999][T10442] tipc: Enabled bearer , priority 0 [ 259.306883][ T4857] usb 4-1: config 0 descriptor?? [ 259.325390][T10442] tipc: Resetting bearer [ 259.348362][T10441] tipc: Disabling bearer [ 259.435558][ T4290] usb 2-1: Using ep0 maxpacket: 8 [ 259.555655][ T4290] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 259.563918][ T4290] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.605355][ T4290] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.615371][ T4226] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 259.615826][ T4290] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.671280][ T4290] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.711821][ T4290] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.731322][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.815232][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.821916][T10451] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 259.859742][T10453] device syzkaller0 entered promiscuous mode [ 259.905106][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 260.025047][ T4290] usb 2-1: usb_control_msg returned -32 [ 260.030687][ T4290] usbtmc 2-1:16.0: can't read capabilities [ 260.093706][T10457] device syzkaller0 entered promiscuous mode [ 260.100763][ T4226] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 260.109185][ T4226] usb 3-1: can't read configurations, error -61 [ 260.286801][ T4226] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.312228][T10459] tipc: Enabled bearer , priority 0 [ 260.322450][T10459] tipc: Resetting bearer [ 260.330537][T10458] tipc: Disabling bearer [ 260.404759][T10460] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 260.498912][T10466] netlink: 'syz.4.2125': attribute type 10 has an invalid length. [ 260.554634][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 260.561490][T10469] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2126'. [ 260.574000][T10469] device syzkaller0 entered promiscuous mode [ 260.608422][ T4290] usb 2-1: USB disconnect, device number 21 [ 260.734555][ T4226] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 260.742284][ T4226] usb 3-1: can't read configurations, error -61 [ 260.750577][ T4226] usb usb3-port1: attempt power cycle [ 260.854891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.929826][T10478] tipc: Enabling of bearer rejected, failed to enable media [ 261.148848][T10489] device syzkaller0 entered promiscuous mode [ 261.160608][T10489] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 261.163963][ T4226] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 261.273961][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 261.298331][T10491] device syzkaller0 entered promiscuous mode [ 261.373832][ T6871] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 261.418654][T10493] tipc: Enabled bearer , priority 0 [ 261.430078][T10493] tipc: Resetting bearer [ 261.436141][ T4226] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.446749][T10492] tipc: Disabling bearer [ 261.449606][ T4226] usb 3-1: can't read configurations, error -61 [ 261.568088][T10497] netlink: 'syz.1.2136': attribute type 10 has an invalid length. [ 261.603422][ T4226] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 261.614860][T10499] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2137'. [ 261.630497][T10499] device syzkaller0 entered promiscuous mode [ 261.713485][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 261.733689][ T6871] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 261.741841][ T6871] usb 5-1: config 0 has no interface number 0 [ 261.751027][ T6871] usb 5-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 261.873224][ T4226] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 261.888922][ T4226] usb 3-1: can't read configurations, error -61 [ 261.896978][ T4226] usb usb3-port1: unable to enumerate USB device [ 261.903121][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.923770][ T6871] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 261.937655][ T6871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.948139][ T6871] usb 5-1: Product: syz [ 261.952621][ T6871] usb 5-1: Manufacturer: syz [ 261.959477][ T6871] usb 5-1: SerialNumber: syz [ 261.965534][T10510] tipc: Enabling of bearer rejected, failed to enable media [ 261.979000][ T6871] usb 5-1: config 0 descriptor?? [ 262.003485][T10487] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 262.179113][ T4857] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 262.188273][ T4857] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 262.196472][ T4857] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 262.204511][ T4857] f81534: probe of 4-1:0.12 failed with error -71 [ 262.215870][ T4857] usb 4-1: USB disconnect, device number 21 [ 262.243011][ T6871] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 262.282326][T10521] device syzkaller0 entered promiscuous mode [ 262.283082][ T6871] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.90/input/input12 [ 262.300621][T10521] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 262.448482][ T4290] usb 5-1: USB disconnect, device number 16 [ 262.452463][ C1] powermate: config urb returned -71 [ 262.459751][ C1] powermate: usb_submit_urb(config) failed [ 262.459870][ C1] powermate 5-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 262.649924][T10523] device syzkaller0 entered promiscuous mode [ 262.710689][T10528] tipc: Enabling of bearer rejected, failed to enable media [ 262.830086][T10535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2148'. [ 262.878252][T10535] device syzkaller0 entered promiscuous mode [ 262.932604][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.978655][T10542] netlink: 'syz.2.2149': attribute type 10 has an invalid length. [ 263.215530][T10555] tipc: Enabling of bearer rejected, failed to enable media [ 263.262653][T10556] device syzkaller0 entered promiscuous mode [ 263.294469][T10556] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 263.664613][T10583] device syzkaller0 entered promiscuous mode [ 263.770646][T10590] tipc: Enabling of bearer rejected, failed to enable media [ 263.881125][ T4290] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 263.921101][ T6871] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 263.971080][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.126478][T10612] netlink: 'syz.2.2167': attribute type 10 has an invalid length. [ 264.291121][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.329464][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.349977][ T4290] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 264.383018][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.416702][ T4290] usb 2-1: config 0 descriptor?? [ 264.460995][ T6871] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 264.474968][ T6871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.485887][ T6871] usb 5-1: Product: syz [ 264.490199][ T6871] usb 5-1: Manufacturer: syz [ 264.495440][ T6871] usb 5-1: SerialNumber: syz [ 264.536795][ T6871] usb 5-1: config 0 descriptor?? [ 264.582646][ T6871] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 264.610662][ T4241] Bluetooth: hci3: command 0x2016 tx timeout [ 264.687553][T10637] tipc: Enabling of bearer rejected, failed to enable media [ 264.931911][ T4290] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 264.939496][ T4290] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 264.983140][ T4290] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000C/input/input13 [ 265.010378][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.053514][ T4290] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 265.095157][T10649] device syzkaller0 entered promiscuous mode [ 265.229104][ T4303] usb 2-1: USB disconnect, device number 22 [ 265.255896][T10656] tipc: Enabling of bearer rejected, failed to enable media [ 265.588592][T10673] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 265.669337][ T4290] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 265.986126][T10693] tipc: Enabling of bearer rejected, failed to enable media [ 266.048963][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.079100][ T4290] usb 6-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 266.090383][ T4290] usb 6-1: config 0 interface 0 has no altsetting 0 [ 266.208999][ T4241] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 266.253933][ T4290] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.263542][ T4290] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.265828][T10703] IPv6: ADDRCONF(NETDEV_CHANGE): rose1: link becomes ready [ 266.273281][ T4290] usb 6-1: Product: syz [ 266.284235][ T4290] usb 6-1: Manufacturer: syz [ 266.289258][ T4290] usb 6-1: SerialNumber: syz [ 266.305029][ T4290] usb 6-1: config 0 descriptor?? [ 266.415718][T10707] device syzkaller0 entered promiscuous mode [ 266.458466][ T4241] usb 3-1: Using ep0 maxpacket: 32 [ 266.581864][T10711] tipc: Enabling of bearer rejected, failed to enable media [ 266.603668][ T4241] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 266.626941][ T4241] usb 3-1: config 0 has no interface number 0 [ 266.639933][ T4290] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 266.647112][ T4241] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 266.671976][ T4290] usb 6-1: USB disconnect, device number 2 [ 266.686060][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.874800][ T4241] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 266.889312][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.906759][ T4241] usb 3-1: Product: syz [ 266.917064][ T4241] usb 3-1: Manufacturer: syz [ 266.932266][ T4241] usb 3-1: SerialNumber: syz [ 266.935057][T10725] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 266.951750][ T4241] usb 3-1: config 0 descriptor?? [ 266.975331][T10691] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 267.088252][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.150211][T10737] tipc: Enabling of bearer rejected, failed to enable media [ 267.227771][T10691] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 267.288403][ T4303] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 267.417714][ T6871] gspca_stk1135: reg_w 0x350 err -71 [ 267.424087][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.447156][ T6871] gspca_stk1135: Sensor write failed [ 267.465618][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.480633][ T6871] gspca_stk1135: Sensor write failed [ 267.497588][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.503982][ T6871] gspca_stk1135: Sensor read failed [ 267.540106][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.546502][ T6871] gspca_stk1135: Sensor read failed [ 267.562022][ T6871] gspca_stk1135: Detected sensor type unknown (0x0) [ 267.570540][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.582102][ T6871] gspca_stk1135: Sensor read failed [ 267.595150][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.612358][ T6871] gspca_stk1135: Sensor read failed [ 267.629055][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.636283][ T6871] gspca_stk1135: Sensor write failed [ 267.662236][ T6871] gspca_stk1135: serial bus timeout: status=0x00 [ 267.669696][ T4303] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.690169][ T4303] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.714138][ T6871] gspca_stk1135: Sensor write failed [ 267.724322][ T6871] stk1135: probe of 5-1:0.0 failed with error -71 [ 267.747191][ T4303] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.756296][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.779721][ T6871] usb 5-1: USB disconnect, device number 17 [ 268.080482][T10776] device syzkaller0 entered promiscuous mode [ 268.087045][ T4303] usb 2-1: usb_control_msg returned -32 [ 268.092841][ T4303] usbtmc 2-1:16.0: can't read capabilities [ 268.136893][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.402299][T10784] tipc: Enabling of bearer rejected, failed to enable media [ 268.667653][ T4290] usb 2-1: USB disconnect, device number 23 [ 269.016072][ T4241] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 269.028085][ T4241] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 269.055745][ T4241] asix: probe of 3-1:0.188 failed with error -71 [ 269.077503][ T4241] usb 3-1: USB disconnect, device number 18 [ 269.153214][T10809] netlink: 'syz.3.2205': attribute type 10 has an invalid length. [ 269.166283][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.308198][T10817] binder: 10816:10817 unknown command 0 [ 269.313816][T10817] binder: 10816:10817 ioctl c0306201 200000000080 returned -22 [ 269.334255][T10819] tipc: Enabling of bearer rejected, failed to enable media [ 269.347817][T10817] binder: 10816:10817 ioctl c0306201 2000000003c0 returned -14 [ 269.862384][T10845] device syzkaller0 entered promiscuous mode [ 270.019635][T10857] tipc: Enabling of bearer rejected, failed to enable media [ 270.204823][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.395821][T10880] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 270.831684][T10899] tipc: Enabling of bearer rejected, failed to enable media [ 271.254172][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.332930][T10926] device syzkaller0 entered promiscuous mode [ 271.348288][T10931] tipc: Enabling of bearer rejected, failed to enable media [ 271.362980][T10938] netlink: 'syz.4.2230': attribute type 10 has an invalid length. [ 272.061523][T10980] tipc: Enabling of bearer rejected, failed to enable media [ 272.282705][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.638968][T11011] tipc: Enabling of bearer rejected, failed to enable media [ 272.723279][T11012] device syzkaller0 entered promiscuous mode [ 272.802272][ T6871] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 272.859083][T11023] netlink: 'syz.5.2247': attribute type 10 has an invalid length. [ 273.062156][ T6871] usb 5-1: Using ep0 maxpacket: 8 [ 273.181949][ T6871] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 273.192292][ T6871] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.209302][ T6871] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.234373][ T6871] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 273.260280][ T6871] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.307358][ T6871] usb 5-1: config 168 interface 0 has no altsetting 0 [ 273.322123][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.395563][ T6871] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 273.410138][ T6871] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.411907][ T4290] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 273.447376][ T6871] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.475005][ T6871] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 273.484389][T11056] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 273.491286][ T6871] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.507906][ T6871] usb 5-1: config 168 interface 0 has no altsetting 0 [ 273.591616][ T6871] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 273.599270][ T6871] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.612171][ T6871] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.630089][ T6871] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 273.642222][ T6871] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.656274][ T6871] usb 5-1: config 168 interface 0 has no altsetting 0 [ 273.895771][T11079] tipc: Enabling of bearer rejected, failed to enable media [ 273.905080][ T6871] usb 5-1: string descriptor 0 read error: -22 [ 273.911167][ T4241] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 273.915177][ T6871] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 273.938415][ T6871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.002692][ T6871] adutux 5-1:168.0: interrupt endpoints not found [ 274.024025][ T4290] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 274.042179][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.068510][ T4290] usb 2-1: Product: syz [ 274.083638][ T4290] usb 2-1: Manufacturer: syz [ 274.100917][ T4290] usb 2-1: SerialNumber: syz [ 274.128149][ T4290] usb 2-1: config 0 descriptor?? [ 274.183685][ T4290] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 274.231409][ T4226] usb 5-1: USB disconnect, device number 18 [ 274.281252][ T4241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.287926][ T4241] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 274.298135][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.309120][ T4241] usb 4-1: config 0 descriptor?? [ 274.360676][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.500457][ T4852] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 274.633729][T11104] device syzkaller0 entered promiscuous mode [ 274.770386][ T4852] usb 6-1: Using ep0 maxpacket: 16 [ 274.800412][ T4241] video4linux radio48: keene_cmd_main failed (-71) [ 274.810738][ T4241] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 274.823466][T11109] tipc: Enabling of bearer rejected, failed to enable media [ 274.846902][ T4241] usb 4-1: USB disconnect, device number 22 [ 274.920875][ T4852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 275.130175][ T4852] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.153290][ T4852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.161934][ T4852] usb 6-1: Product: syz [ 275.166358][ T4852] usb 6-1: Manufacturer: syz [ 275.171232][ T4852] usb 6-1: SerialNumber: syz [ 275.187786][T11120] netlink: 'syz.4.2261': attribute type 10 has an invalid length. [ 275.189155][ T4852] usb 6-1: config 0 descriptor?? [ 275.252495][ T4852] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.281405][ T4852] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 275.395614][T11128] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 275.404203][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.629412][ T4859] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 275.645036][T11133] tipc: Enabling of bearer rejected, failed to enable media [ 275.912415][ T4852] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 276.043492][ T4859] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.159821][ T4859] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.173454][ T4859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.188759][ T4859] usb 4-1: SerialNumber: syz [ 276.417017][T11145] device syzkaller0 entered promiscuous mode [ 276.438566][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.558493][ T4290] gspca_stk1135: reg_w 0x2ff err -71 [ 276.564871][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.589201][ T4290] gspca_stk1135: Sensor write failed [ 276.594584][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.601614][ T4290] gspca_stk1135: Sensor write failed [ 276.606960][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.618304][ T4290] gspca_stk1135: Sensor read failed [ 276.623646][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.639091][ T4290] gspca_stk1135: Sensor read failed [ 276.644590][ T4290] gspca_stk1135: Detected sensor type unknown (0x0) [ 276.651366][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.657817][ T4290] gspca_stk1135: Sensor read failed [ 276.663601][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.670059][ T4290] gspca_stk1135: Sensor read failed [ 276.675400][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.682535][ T4290] gspca_stk1135: Sensor write failed [ 276.687967][ T4290] gspca_stk1135: serial bus timeout: status=0x00 [ 276.694463][ T4290] gspca_stk1135: Sensor write failed [ 276.705305][ T4290] stk1135: probe of 2-1:0.0 failed with error -71 [ 276.730838][ T4290] usb 2-1: USB disconnect, device number 24 [ 276.828326][ T4852] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 276.838472][ T4852] em28xx 6-1:0.0: board has no eeprom [ 276.908878][ T4859] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 276.948301][ T4852] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 276.959199][ T4852] em28xx 6-1:0.0: dvb set to bulk mode. [ 276.965648][ T4859] em28xx 6-1:0.0: Binding DVB extension [ 276.995786][ T4852] usb 6-1: USB disconnect, device number 3 [ 277.027500][ T4852] em28xx 6-1:0.0: Disconnecting em28xx [ 277.051217][ T4859] em28xx 6-1:0.0: Registering input extension [ 277.057927][ T4852] em28xx 6-1:0.0: Closing input extension [ 277.058023][ T4303] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 277.102480][T11152] tipc: Enabling of bearer rejected, failed to enable media [ 277.105181][ T4852] em28xx 6-1:0.0: Freeing device [ 277.431677][T11171] netlink: 'syz.5.2272': attribute type 10 has an invalid length. [ 277.467815][ T4303] usb 5-1: config 243 has an invalid interface number: 75 but max is 0 [ 277.478080][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.483429][ T4303] usb 5-1: config 243 has no interface number 0 [ 277.508060][ T4303] usb 5-1: config 243 interface 75 has no altsetting 0 [ 277.650452][T11182] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 277.687754][ T4303] usb 5-1: New USB device found, idVendor=0403, idProduct=df35, bcdDevice= a.01 [ 277.697581][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.705625][ T4303] usb 5-1: Product: syz [ 277.710021][ T4303] usb 5-1: Manufacturer: syz [ 277.714657][ T4303] usb 5-1: SerialNumber: syz [ 277.807208][ T4226] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 277.830094][T11188] tipc: Enabling of bearer rejected, failed to enable media [ 277.947848][ T4859] usb 4-1: USB disconnect, device number 23 [ 277.961821][ T4859] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 278.058396][ T4303] ftdi_sio 5-1:243.75: FTDI USB Serial Device converter detected [ 278.067487][ T4303] usb 5-1: Detected FT232H [ 278.097076][ T4303] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 278.117814][ T4303] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 278.137120][ T4303] ftdi_sio 5-1:243.75: GPIO initialisation failed: -71 [ 278.147600][ T4303] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.178217][ T4303] usb 5-1: USB disconnect, device number 19 [ 278.221896][ T4303] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.231862][ T4226] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.246667][ T4226] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 278.262068][ T4303] ftdi_sio 5-1:243.75: device disconnected [ 278.268605][ T4226] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 278.299404][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.317316][ T4226] usb 2-1: config 0 descriptor?? [ 278.368888][ T4226] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 278.379268][ T4226] dvb-usb: bulk message failed: -22 (3/0) [ 278.402387][ T4226] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 278.437030][ T4226] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 278.446863][ T4226] usb 2-1: media controller created [ 278.476719][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.516494][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.574042][ T4226] dvb-usb: bulk message failed: -22 (6/0) [ 278.601517][ T4226] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 278.668332][T11215] device syzkaller0 entered promiscuous mode [ 278.687936][ T4226] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 278.720376][ T4226] dvb-usb: schedule remote query interval to 150 msecs. [ 278.735420][ T4226] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 278.779514][ T4226] usb 2-1: USB disconnect, device number 25 [ 278.833502][ T4226] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 278.956086][ T4852] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 279.039954][T11233] tipc: Enabling of bearer rejected, failed to enable media [ 279.335847][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.376886][ T4852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.404837][ T4852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.469087][ T4852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.519670][ T4852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.530411][T11254] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 279.555857][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.570343][ T4852] usb 5-1: config 0 descriptor?? [ 279.607657][T11256] tipc: Enabled bearer , priority 0 [ 279.626660][T11256] tipc: Resetting bearer [ 279.646425][T11255] tipc: Disabling bearer [ 279.682160][T11260] netlink: 'syz.3.2290': attribute type 3 has an invalid length. [ 279.700966][T11260] netlink: 'syz.3.2290': attribute type 10 has an invalid length. [ 279.709438][ T4290] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.971199][ T4290] usb 6-1: Using ep0 maxpacket: 8 [ 280.001028][T11276] device syzkaller0 entered promiscuous mode [ 280.057452][ T4852] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 280.105323][ T4290] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 280.114791][ T4852] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 280.127069][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 280.284866][ T4290] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 280.294275][ T4290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.338684][ T4226] usb 5-1: USB disconnect, device number 20 [ 280.338902][ T4290] usb 6-1: Product: syz [ 280.377836][ T4290] usb 6-1: Manufacturer: syz [ 280.382643][ T4290] usb 6-1: SerialNumber: syz [ 280.396020][T11287] fido_id[11287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 280.432581][ T4290] usb 6-1: config 0 descriptor?? [ 280.499382][ T4290] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 280.572981][T11300] tipc: Enabling of bearer rejected, failed to enable media [ 280.594443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.724434][ T4290] gspca_zc3xx: reg_w_i err -71 [ 281.010733][T11317] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 281.230716][T11324] tipc: Enabled bearer , priority 0 [ 281.271555][T11324] tipc: Resetting bearer [ 281.327008][T11323] tipc: Disabling bearer [ 281.337143][T11326] netlink: 'syz.1.2304': attribute type 3 has an invalid length. [ 281.340179][T11326] netlink: 'syz.1.2304': attribute type 10 has an invalid length. [ 281.343790][ T4290] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 281.451991][ T4290] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 281.471150][ T4290] usb 6-1: USB disconnect, device number 4 [ 281.633726][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.634547][T11334] device syzkaller0 entered promiscuous mode [ 281.749134][ T4859] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 281.983129][T11346] tipc: Enabled bearer , priority 0 [ 282.021241][T11350] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 282.053385][T11346] tipc: Resetting bearer [ 282.061654][T11345] tipc: Disabling bearer [ 282.123038][ T4859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.157239][ T4859] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.193116][ T4859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.243661][ T4859] usb 5-1: config 0 descriptor?? [ 282.272881][ T4226] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 282.285093][ T4859] pwc: Askey VC010 type 2 USB webcam detected. [ 282.538685][ T6871] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 282.566966][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 282.672348][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.696021][ T4226] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 282.712303][ T4859] pwc: recv_control_msg error -32 req 02 val 2b00 [ 282.715612][ T4226] usb 2-1: config 0 has no interface number 0 [ 282.744767][ T4226] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 282.752362][ T4859] pwc: recv_control_msg error -32 req 02 val 2700 [ 282.795876][ T6871] usb 3-1: Using ep0 maxpacket: 8 [ 282.802422][ T4859] pwc: recv_control_msg error -32 req 02 val 2c00 [ 282.906647][T11358] tipc: Enabled bearer , priority 0 [ 282.918558][T11358] tipc: Resetting bearer [ 282.927637][T11357] tipc: Disabling bearer [ 282.938013][ T4226] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 282.947727][ T6871] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.964045][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.976050][ T6871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.988429][ T4226] usb 2-1: Product: syz [ 282.996639][ T6871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.009316][ T4226] usb 2-1: Manufacturer: syz [ 283.018534][ T4226] usb 2-1: SerialNumber: syz [ 283.025726][ T6871] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.045029][ T4226] usb 2-1: config 0 descriptor?? [ 283.050406][ T6871] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.061959][ T4859] pwc: recv_control_msg error -71 req 04 val 1300 [ 283.064780][ T6871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.080642][T11349] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 283.081890][ T4859] pwc: recv_control_msg error -71 req 04 val 1400 [ 283.122814][ T4859] pwc: recv_control_msg error -71 req 02 val 2000 [ 283.130594][T11360] netlink: 'syz.3.2318': attribute type 3 has an invalid length. [ 283.139751][T11360] netlink: 'syz.3.2318': attribute type 10 has an invalid length. [ 283.151981][ T4859] pwc: recv_control_msg error -71 req 02 val 2100 [ 283.174943][ T4859] pwc: recv_control_msg error -71 req 04 val 1500 [ 283.193659][ T4859] pwc: recv_control_msg error -71 req 02 val 2500 [ 283.207127][T11362] [ 283.209504][T11362] ====================================================== [ 283.216544][T11362] WARNING: possible circular locking dependency detected [ 283.223590][T11362] syzkaller #0 Not tainted [ 283.228033][T11362] ------------------------------------------------------ [ 283.235074][T11362] syz.5.2319/11362 is trying to acquire lock: [ 283.241163][T11362] ffff88805b94aad8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 283.245729][T11366] device syzkaller0 entered promiscuous mode [ 283.252879][T11362] [ 283.252879][T11362] but task is already holding lock: [ 283.252890][T11362] ffff88805b9497a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 283.252950][T11362] [ 283.252950][T11362] which lock already depends on the new lock. [ 283.252950][T11362] [ 283.252957][T11362] [ 283.252957][T11362] the existing dependency chain (in reverse order) is: [ 283.252963][T11362] [ 283.252963][T11362] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 283.252994][T11362] lock_sock_nested+0x44/0x100 [ 283.253015][T11362] smc_listen_out+0x109/0x3d0 [ 283.253033][T11362] smc_listen_work+0x526/0xd00 [ 283.253053][T11362] process_one_work+0x85f/0x1010 [ 283.253071][T11362] worker_thread+0xaa6/0x1290 [ 283.253088][T11362] kthread+0x436/0x520 [ 283.253104][T11362] ret_from_fork+0x1f/0x30 [ 283.253122][T11362] [ 283.253122][T11362] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 283.253151][T11362] __lock_acquire+0x2c42/0x7d10 [ 283.312378][T11349] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 283.313705][T11362] lock_acquire+0x19e/0x400 [ 283.367125][T11362] __flush_work+0x116/0x210 [ 283.372152][T11362] __cancel_work_timer+0x3f4/0x560 [ 283.377797][T11362] smc_clcsock_release+0x5c/0xe0 [ 283.383442][T11362] __smc_release+0x398/0x500 [ 283.388578][T11362] smc_close_non_accepted+0xd1/0x1f0 [ 283.394472][T11362] smc_close_active+0x9d3/0xd90 [ 283.399849][T11362] __smc_release+0x9a/0x500 [ 283.404970][T11362] smc_release+0x2ca/0x530 [ 283.409927][T11362] sock_close+0xd5/0x240 [ 283.411746][ T6871] usb 3-1: GET_CAPABILITIES returned 0 [ 283.414689][T11362] __fput+0x234/0x930 [ 283.414713][T11362] task_work_run+0x125/0x1a0 [ 283.414734][T11362] exit_to_user_mode_loop+0x10f/0x130 [ 283.421954][ T6871] usbtmc 3-1:16.0: can't read capabilities [ 283.424805][T11362] exit_to_user_mode_prepare+0xee/0x180 [ 283.424840][T11362] syscall_exit_to_user_mode+0x16/0x40 [ 283.454038][T11362] do_syscall_64+0x58/0xa0 [ 283.459018][T11362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.465699][T11362] [ 283.465699][T11362] other info that might help us debug this: [ 283.465699][T11362] [ 283.476201][T11362] Possible unsafe locking scenario: [ 283.476201][T11362] [ 283.483649][T11362] CPU0 CPU1 [ 283.489018][T11362] ---- ---- [ 283.494377][T11362] lock(sk_lock-AF_SMC/1); [ 283.498907][T11362] lock((work_completion)(&new_smc->smc_listen_work)); [ 283.508366][T11362] lock(sk_lock-AF_SMC/1); [ 283.515416][T11362] lock((work_completion)(&new_smc->smc_listen_work)); [ 283.522374][T11362] [ 283.522374][T11362] *** DEADLOCK *** [ 283.522374][T11362] [ 283.530774][T11362] 2 locks held by syz.5.2319/11362: [ 283.535963][T11362] #0: ffff888073c9b810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 283.546407][T11362] #1: ffff88805b9497a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 283.555814][T11362] [ 283.555814][T11362] stack backtrace: [ 283.561838][T11362] CPU: 0 PID: 11362 Comm: syz.5.2319 Not tainted syzkaller #0 [ 283.569571][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.579812][T11362] Call Trace: [ 283.583248][T11362] [ 283.586208][T11362] dump_stack_lvl+0x188/0x250 [ 283.591118][T11362] ? load_image+0x400/0x400 [ 283.595737][T11362] ? show_regs_print_info+0x20/0x20 [ 283.600939][T11362] ? print_circular_bug+0x12b/0x1a0 [ 283.606138][T11362] check_noncircular+0x296/0x330 [ 283.611254][T11362] ? look_up_lock_class+0x71/0x110 [ 283.616417][T11362] ? add_chain_block+0x940/0x940 [ 283.621471][T11362] ? lockdep_lock+0xf1/0x1f0 [ 283.626110][T11362] ? lock_release+0xb5/0x8a0 [ 283.628517][ T6871] usb 3-1: USB disconnect, device number 19 [ 283.630827][T11362] ? mark_lock+0x94/0x320 [ 283.630857][T11362] __lock_acquire+0x2c42/0x7d10 [ 283.645915][T11362] ? unwind_next_frame+0x1296/0x1d90 [ 283.651319][T11362] ? hlock_conflict+0x59/0x1f0 [ 283.656080][T11362] ? __bfs+0x2a3/0x5c0 [ 283.660151][T11362] ? check_path+0x40/0x40 [ 283.664478][T11362] ? verify_lock_unused+0x140/0x140 [ 283.669674][T11362] ? mark_lock+0x94/0x320 [ 283.674028][T11362] ? __lock_acquire+0x13bc/0x7d10 [ 283.679049][T11362] ? add_chain_block+0x940/0x940 [ 283.684072][T11362] lock_acquire+0x19e/0x400 [ 283.688570][T11362] ? __flush_work+0xfa/0x210 [ 283.693157][T11362] ? verify_lock_unused+0x140/0x140 [ 283.698355][T11362] ? read_lock_is_recursive+0x10/0x10 [ 283.703725][T11362] __flush_work+0x116/0x210 [ 283.708248][T11362] ? __flush_work+0xfa/0x210 [ 283.712849][T11362] ? verify_lock_unused+0x140/0x140 [ 283.718049][T11362] ? flush_work+0x20/0x20 [ 283.722370][T11362] ? try_to_grab_pending+0xfa/0x7f0 [ 283.727567][T11362] ? mark_lock+0x94/0x320 [ 283.731894][T11362] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 283.737873][T11362] ? lock_chain_count+0x20/0x20 [ 283.742817][T11362] ? __cancel_work_timer+0x36a/0x560 [ 283.748101][T11362] __cancel_work_timer+0x3f4/0x560 [ 283.753228][T11362] ? cancel_work_sync+0x20/0x20 [ 283.758079][T11362] ? __local_bh_enable_ip+0x136/0x1c0 [ 283.763490][T11362] ? lockdep_hardirqs_on+0x94/0x140 [ 283.768712][T11362] ? __local_bh_enable_ip+0x136/0x1c0 [ 283.774092][T11362] ? _local_bh_enable+0xa0/0xa0 [ 283.778976][T11362] smc_clcsock_release+0x5c/0xe0 [ 283.784033][T11362] __smc_release+0x398/0x500 [ 283.788638][T11362] smc_close_non_accepted+0xd1/0x1f0 [ 283.793952][T11362] smc_close_active+0x9d3/0xd90 [ 283.798818][T11362] __smc_release+0x9a/0x500 [ 283.803347][T11362] smc_release+0x2ca/0x530 [ 283.807761][T11362] sock_close+0xd5/0x240 [ 283.812367][T11362] ? sock_mmap+0x90/0x90 [ 283.816642][T11362] __fput+0x234/0x930 [ 283.820665][T11362] task_work_run+0x125/0x1a0 [ 283.825259][T11362] exit_to_user_mode_loop+0x10f/0x130 [ 283.830630][T11362] exit_to_user_mode_prepare+0xee/0x180 [ 283.836181][T11362] syscall_exit_to_user_mode+0x16/0x40 [ 283.841638][T11362] do_syscall_64+0x58/0xa0 [ 283.846080][T11362] ? clear_bhb_loop+0x30/0x80 [ 283.850749][T11362] ? clear_bhb_loop+0x30/0x80 [ 283.855423][T11362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.861406][T11362] RIP: 0033:0x7f4403160cb9 [ 283.865843][T11362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.885449][T11362] RSP: 002b:00007f44013bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 283.894076][T11362] RAX: 0000000000000000 RBX: 00007f44033dbfa0 RCX: 00007f4403160cb9 [ 283.902048][T11362] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 283.910020][T11362] RBP: 00007f44031cebf7 R08: 0000000000000000 R09: 0000000000000000 [ 283.918018][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.926153][T11362] R13: 00007f44033dc038 R14: 00007f44033dbfa0 R15: 00007ffe9107e798 [ 283.934268][T11362] [ 283.938352][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.961050][ T4859] pwc: recv_control_msg error -71 req 02 val 2400 [ 283.991033][ T4859] pwc: recv_control_msg error -71 req 02 val 2600 [ 284.010992][ T4859] pwc: recv_control_msg error -71 req 02 val 2900 [ 284.031110][ T4859] pwc: recv_control_msg error -71 req 02 val 2800 [ 284.050967][ T4859] pwc: recv_control_msg error -71 req 04 val 1100 [ 284.070925][ T4859] pwc: recv_control_msg error -71 req 04 val 1200 [ 284.078534][ T4859] pwc: Registered as video103. [ 284.084594][ T4859] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 284.103746][ T4859] usb 5-1: USB disconnect, device number 21 [ 284.510739][ T4226] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 284.521549][ T4226] asix: probe of 2-1:0.188 failed with error -71 [ 284.529523][ T4226] usb 2-1: USB disconnect, device number 26 [ 284.990059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.029307][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.068045][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.107249][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.145871][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.185221][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.223801][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.262971][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available