last executing test programs: 9m56.251935878s ago: executing program 1 (id=1455): syz_usbip_server_init(0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r2 = timerfd_create(0x9, 0x80800) timerfd_gettime(r2, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x289997207a1480ff}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x1, @empty, 0x2}, {0xa, 0x4e1f, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x400202, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) memfd_secret(0x0) 9m54.469117233s ago: executing program 1 (id=1460): syz_usbip_server_init(0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r2 = timerfd_create(0x9, 0x80800) timerfd_gettime(r2, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x289997207a1480ff}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x1, @empty, 0x2}, {0xa, 0x4e1f, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x400202, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) memfd_secret(0x0) 9m52.542637235s ago: executing program 1 (id=1462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000080)={0x3, [[0x9], [0x0, 0x1000], [0x403, 0x100]], '\x00', [{0x7, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x8}, {0x0, 0x7}, {}, {0xffffffff}], '\x00', 0x100}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$cuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002ec0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1ff}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x3, 0x0, 0x2}, {0xeda7, 0x4, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2404cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000000003ff, 0x2], 0x0, 0x200306}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xfffffffc) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x4c) 9m50.944201267s ago: executing program 1 (id=1468): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x40, 0x1, 0x1, 0x5, {{0xd, 0x4, 0x2, 0xe, 0x34, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0xe3, [@broadcast, @loopback, @empty, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', r4, 0x8, 0x40, 0xd6f, 0x81, {{0x1e, 0x4, 0x3, 0x8, 0x78, 0x66, 0x0, 0x5, 0x2b, 0x0, @empty, @local, {[@rr={0x7, 0xb, 0x13, [@empty, @loopback]}, @lsrr={0x83, 0xf, 0x6b, [@loopback, @remote, @local]}, @end, @rr={0x7, 0x17, 0x28, [@rand_addr=0x64010101, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x4, [0x2]}, @timestamp_addr={0x44, 0x24, 0x26, 0x1, 0x7, [{@local, 0x87e9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3b}}]}]}}}}}) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) 9m46.251154408s ago: executing program 1 (id=1481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x20040940) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 9m44.243578401s ago: executing program 1 (id=1487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000080)={0x3, [[0x9], [0x0, 0x1000], [0x403, 0x100]], '\x00', [{0x7, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x8}, {0x0, 0x7}, {}, {0xffffffff}], '\x00', 0x100}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$cuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002ec0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1ff}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x3, 0x0, 0x2}, {0xeda7, 0x4, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000140)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xfffffffc) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x4c) 9m44.128069105s ago: executing program 32 (id=1487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000080)={0x3, [[0x9], [0x0, 0x1000], [0x403, 0x100]], '\x00', [{0x7, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x8}, {0x0, 0x7}, {}, {0xffffffff}], '\x00', 0x100}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$cuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002ec0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x0, 0x1ff}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x3, 0x0, 0x2}, {0xeda7, 0x4, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000140)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xfffffffc) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x4c) 3.747861446s ago: executing program 3 (id=6306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="fc00000000000000000000000000000000000000f4ffaf54458f1511077a93ae5386f435c6324d0d416d6e3cdb221b2d02cdd7c17a25db51347ec023c616e7512e6bdbd733f7343defbc8452cb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008895a7e4e0400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r10], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) 3.263064923s ago: executing program 3 (id=6309): socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f0000005880)=ANY=[@ANYBLOB="0407ff00aaaaaaaaaa"], 0x102) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "44ee4dcf6df6b457eba45bc88153e9b5cbf7cc1af7b76983c2717759237e827d8b738dbbf41db40d00"}, 0x48, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x20, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xffff, 0x5}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x7, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x3, 0x1, 0xfffffffd}) syz_emit_ethernet(0xa5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x1, 0x8, [0xafb, 0x55d, 0x8b8, 0x99d]}) close(0xffffffffffffffff) r2 = syz_open_pts(0xffffffffffffffff, 0x20002) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000200)={0x7, 0x7, 0x7, 0x2e46, 0xc, "c1f7479db2e70220"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.206214705s ago: executing program 4 (id=6310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200349f5e72ed4b5f509c2c5a48274e1702804e33336c78ae2239a25e91bde49e0c6ee6d97412747a0e9d2b30a1daad29c979f444be03fce5e86548fedf2c1eadd51ab9f1d873c5f10e357cb30fed3fd2e4bd855c2b0c85a7567d6044cca468ef64092560ef01b1fcf052be814684c215f8857f1603a622ad1f64", 0x91) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) 3.139728646s ago: executing program 3 (id=6311): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f01000000fdf0df252000040000000000000000fe80000052c1000000000000000000bb4e2000004e23fffc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100000000000000000000000000000040000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.139417093s ago: executing program 4 (id=6312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000080)={0x3, [[0x9], [0x0, 0x1000], [0x403, 0x100]], '\x00', [{0x7, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x8}, {0x0, 0x7}, {}, {0xffffffff}], '\x00', 0x100}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$cuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002ec0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2404cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000000003ff, 0x2], 0x0, 0x200306}) pipe(&(0x7f0000000140)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xfffffffc) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x4c) 3.139347953s ago: executing program 3 (id=6313): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, 0x0) write$char_usb(r1, &(0x7f0000000100)='l', 0x1) 2.861419849s ago: executing program 4 (id=6315): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 2.472112729s ago: executing program 0 (id=6317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="fc00000000000000000000000000000000000000f4ffaf54458f1511077a93ae5386f435c6324d0d416d6e3cdb221b2d02cdd7c17a25db51347ec023c616e7512e6bdbd733f7343defbc8452cb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008895a7e4e0400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r10], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) 2.3199394s ago: executing program 0 (id=6318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000080)={0x3, [[0x9], [0x0, 0x1000], [0x403, 0x100]], '\x00', [{0x7, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x8}, {0x0, 0x7}, {}, {0xffffffff}], '\x00', 0x100}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$cuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002ec0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2404cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000000003ff, 0x2], 0x0, 0x200306}) pipe(&(0x7f0000000140)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0xfffffffc) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x4c) 2.313326459s ago: executing program 2 (id=6319): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x40, 0x1, 0x1, 0x5, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0xe3}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', r2, 0x8, 0x40, 0xd6f, 0x81, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x66, 0x0, 0x5, 0x2b, 0x0, @empty, @local, {[@rr={0x7, 0xb, 0x13, [@empty, @loopback]}, @lsrr={0x83, 0xf, 0x6b, [@loopback, @remote, @local]}, @end, @rr={0x7, 0x17, 0x28, [@rand_addr=0x64010101, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x4, [0x2]}, @timestamp_addr={0x44, 0x4, 0x26, 0x1, 0x7}]}}}}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x61, 0x2e, 0x0]}}, 0x0, 0x1e}, 0x28) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 2.248423052s ago: executing program 2 (id=6320): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200349f5e72ed4b5f509c2c5a48274e1702804e33336c78ae2239a25e91bde49e0c6ee6d97412747a0e9d2b30a1daad29c979f444be03fce5e86548fedf2c1eadd51ab9f1d873c5f10e357cb30fed3fd2e4bd855c2b0c85a7567d6044cca468ef64092560ef01b1fcf052be814684c215f8857f1603a622ad1f64", 0x91) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) 2.167815667s ago: executing program 2 (id=6321): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001300)="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", 0x763}], 0x1}}], 0x1, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 2.165191091s ago: executing program 0 (id=6322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, 0x0, 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x3c}}, 0x20040940) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.656417842s ago: executing program 4 (id=6323): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="91685102d30000001300001088", 0xd, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.656091236s ago: executing program 4 (id=6324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x20040940) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.338768846s ago: executing program 2 (id=6325): r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x880, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x28c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x30, 0x3a, 0xff, @local, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5, {0x4, 0x6, "288db7", 0x8, 0x0, 0x0, @loopback, @empty}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000100"/17, @ANYBLOB], 0x28}}, 0x0) sendto$packet(r1, &(0x7f0000000080)="a084d380d3fc030000e50788031c", 0x5ea, 0x20004084, &(0x7f00000001c0)={0x11, 0x86dd, 0x0, 0x1, 0xb, 0x6, @local}, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r4, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x20004001) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) 1.186095757s ago: executing program 0 (id=6326): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000044) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0xc6, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) 611.123639ms ago: executing program 4 (id=6327): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xaaa9, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'wg0\x00', {0x1}, 0x2d}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000740)=ANY=[@ANYRES8=r5, @ANYRES32=r6, @ANYRES64=r0, @ANYRESDEC=r2, @ANYBLOB="5c5d1e9f229775ce1bb71d2bb12091d9306a233872ffa0ad463646a56eb8da8fe94896ae557758f7d109f48f2a8ba1cf7277c45969d489fb1a4a4aabb34f44e3925e38b5debb78ec902113007fb2d20ba15fe1657dc5da084dfee59d5923e5870714b688efcdaf7eda14a1a325788d76bc1d94e953fbc2e858f6fe60b2909e2e05579226df3c2b401ddd01670c9b5ca15f19fc81e6b1a85c7c94a099d24e70e48df8a378b7492dceac38741c5c6e64cf8ad5fdd60d59164bb8a96488110539b64ef03bc51f1c41c0c0f51f6744179f9992"], 0xa99, &(0x7f0000001800)='GPL\x00') r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff7ffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x34}}, 0x14) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) poll(&(0x7f00000001c0)=[{r9, 0x40}], 0x1, 0x0) 328.121695ms ago: executing program 0 (id=6328): r0 = userfaultfd(0x40800) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x42) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x301101, 0x143) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30783030303030376246648bce10bad99ffa3de3b030303030303030346532322c7072692c000000000000"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setparam(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24048040) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000240)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 315.274496ms ago: executing program 2 (id=6329): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r4, 0x4b2f, 0xb00000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x4c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000008100), 0x4) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r8, r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x48000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xe}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000004c0)={r10, 0x1ff}, &(0x7f0000000500)=0x8) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020044fc19c60480280001800b00010064796e7365740000180002800900010073797a320500000008000340000000000900010073797a3000000000000011000100000000000000ff000000000a00"/128], 0x80}}, 0x0) 186.619252ms ago: executing program 3 (id=6330): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4090) 104.375673ms ago: executing program 2 (id=6331): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0xb0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd6, 0xd, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xac, 0x7, 0x5, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7}}}}}}}}]}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 100.975885ms ago: executing program 3 (id=6332): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x8, 0x7f, 0x5}, 0x7) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xb00) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 0 (id=6333): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x3e3, 0x0, 0x0, 0x0, &(0x7f0000002140)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) io_uring_enter(r1, 0x24b7, 0xcb15, 0x21, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfbfbfbfb}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, 0x0) getgroups(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000080000000000000000000000095000000000000008d003a9b3a81999817716e688ecb3582ee568d5357295a14f253bd82cc295d32e1156128ebe5c7a13bf00a411524187a2abb58e816"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000041c0)={{{@in6, @in=@local}}, {{@in=@local}, 0x0, @in=@private}}, 0x0) statx(r4, &(0x7f0000004300)='./file0\x00', 0x2000, 0x800, &(0x7f0000004340)) syz_clone(0x0, &(0x7f0000004440)="6a1c10d21ba56b1f5bf412e89be22597ec5cc6f2c4", 0x15, &(0x7f00000044c0), 0x0, &(0x7f0000004540)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705c, 0x80000000}, {0x6, 0x7f}]}}) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r7, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): ][T16238] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 980.003261][T16238] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 980.008922][T16238] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 980.012312][T16238] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 980.015551][T16238] usb 7-1: Product: syz [ 980.017039][T16238] usb 7-1: Manufacturer: syz [ 980.023966][T16238] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 980.219494][T13105] Bluetooth: hci2: command tx timeout [ 980.221902][ T6719] usb 7-1: USB disconnect, device number 78 [ 980.482576][T22632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4710'. [ 980.597288][T22641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4714'. [ 980.618801][ T6719] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 980.628197][T22644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4716'. [ 980.790076][ T6719] usb 7-1: Using ep0 maxpacket: 32 [ 980.797204][ T6719] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 980.801087][ T6719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.805237][ T6719] usb 7-1: config 0 has no interface number 0 [ 980.812240][ T6719] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 980.816228][ T6719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.818906][ T6719] usb 7-1: Product: syz [ 980.820439][ T6719] usb 7-1: Manufacturer: syz [ 980.822070][ T6719] usb 7-1: SerialNumber: syz [ 980.825637][ T6719] usb 7-1: config 0 descriptor?? [ 980.831839][ T6719] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 980.834876][ T6719] cx231xx 7-1:0.1: Not found matching IAD interface [ 980.878132][T22663] netlink: 'syz.3.4724': attribute type 11 has an invalid length. [ 980.912231][T22667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4726'. [ 981.024173][T16238] usb 7-1: USB disconnect, device number 79 [ 981.123550][ T6719] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 981.266287][ T6719] usb 9-1: Using ep0 maxpacket: 32 [ 981.269227][ T6719] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 981.271888][ T6719] usb 9-1: config 0 has no interface number 0 [ 981.275666][ T6719] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 981.278984][ T6719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.281806][ T6719] usb 9-1: Product: syz [ 981.283553][ T6719] usb 9-1: Manufacturer: syz [ 981.285126][ T6719] usb 9-1: SerialNumber: syz [ 981.289343][ T6719] usb 9-1: config 0 descriptor?? [ 981.293293][ T6719] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 981.447939][T16238] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 981.490575][ T6719] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 981.499077][ T6719] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 981.564109][T22692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4738'. [ 981.601521][T16238] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 981.604421][T16238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.607553][T16238] usb 7-1: config 0 has no interface number 0 [ 981.611158][T16238] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 981.614046][T16238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.616548][T16238] usb 7-1: Product: syz [ 981.618078][T16238] usb 7-1: Manufacturer: syz [ 981.619775][T16238] usb 7-1: SerialNumber: syz [ 981.622983][T16238] usb 7-1: config 0 descriptor?? [ 981.630066][T16238] cx231xx 7-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 981.632774][T16238] cx231xx 7-1:0.1: Not found matching IAD interface [ 981.871376][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 981.871803][ T58] usb 9-1: USB disconnect, device number 49 [ 981.881052][ T58] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 981.888032][ T58] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 981.891824][ T58] quatech2 9-1:0.51: device disconnected [ 982.199890][T13105] Bluetooth: hci2: command tx timeout [ 982.742891][T16238] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 982.752448][ T58] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 982.889641][T16238] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 982.893421][T16238] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.897451][T16238] usb 9-1: Product: syz [ 982.899234][T16238] usb 9-1: Manufacturer: syz [ 982.901261][T16238] usb 9-1: SerialNumber: syz [ 982.906148][ T58] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 982.908737][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 982.912060][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 982.915521][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.919976][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 982.923926][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.103579][T16238] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 983.108423][T16238] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 983.112544][T16238] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 983.119072][T16238] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 983.127244][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 983.129304][ T58] usbtmc 5-1:16.0: can't read capabilities [ 983.442168][T22749] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4759'. [ 983.892753][T22758] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4761'. [ 983.898912][T22758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.909756][ T70] lo speed is unknown, defaulting to 1000 [ 984.835490][ T5846] usb 7-1: USB disconnect, device number 80 [ 984.946679][ T40] audit: type=1804 audit(1781383007.992:217): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4769" name="bus" dev="ramfs" ino=89208 res=1 errno=0 [ 984.955510][ T40] audit: type=1804 audit(1781383007.992:218): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4769" name="bus" dev="ramfs" ino=89208 res=1 errno=0 [ 985.050901][T22786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 985.383918][ T5846] usb 5-1: USB disconnect, device number 84 [ 985.404305][ T1040] usb 9-1: USB disconnect, device number 50 [ 985.471766][T22797] netlink: 11910 bytes leftover after parsing attributes in process `syz.4.4778'. [ 985.508807][T22803] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4781'. [ 985.512610][T22803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.620252][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4783'. [ 985.768867][T22816] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4787'. [ 985.929272][T22824] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4791'. [ 985.933269][T22824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 986.324391][ T70] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 986.453672][T13105] block nbd0: Receive control failed (result -32) [ 986.454296][T22813] block nbd0: shutting down sockets [ 986.482024][ T70] usb 7-1: config 7 has an invalid interface number: 225 but max is 0 [ 986.485304][ T70] usb 7-1: config 7 has no interface number 0 [ 986.488369][ T70] usb 7-1: config 7 interface 225 has no altsetting 0 [ 986.492259][ T70] usb 7-1: New USB device found, idVendor=12d1, idProduct=f0c6, bcdDevice=d2.55 [ 986.495086][ T70] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.497633][ T70] usb 7-1: Product: syz [ 986.498927][ T70] usb 7-1: Manufacturer: syz [ 986.500329][ T70] usb 7-1: SerialNumber: syz [ 986.521291][ T5983] IPVS: starting estimator thread 0... [ 986.629339][T22854] IPVS: using max 39 ests per chain, 93600 per kthread [ 986.649783][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 986.704226][ T70] option 7-1:7.225: GSM modem (1-port) converter detected [ 986.708656][ T70] usb 7-1: USB disconnect, device number 81 [ 986.714360][ T70] option 7-1:7.225: device disconnected [ 986.819724][T17283] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 986.973609][T17283] usb 9-1: unable to get BOS descriptor or descriptor too short [ 986.976809][T17283] usb 9-1: not running at top speed; connect to a high speed hub [ 986.980205][T17283] usb 9-1: config 88 has an invalid interface number: 235 but max is 0 [ 986.982659][T17283] usb 9-1: config 88 has no interface number 0 [ 986.984562][T17283] usb 9-1: config 88 interface 235 has no altsetting 0 [ 986.988741][T17283] usb 9-1: string descriptor 0 read error: -22 [ 986.990674][T17283] usb 9-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=31.e6 [ 986.994123][T17283] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.000811][T17283] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 987.025321][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 987.235922][T22897] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4826'. [ 987.384207][T17283] gspca_sn9c20x: Write register 1001 failed -71 [ 987.386192][T17283] gspca_sn9c20x: Device initialization failed [ 987.388158][T17283] gspca_sn9c20x 9-1:88.235: probe with driver gspca_sn9c20x failed with error -71 [ 987.392375][T17283] usb 9-1: USB disconnect, device number 51 [ 987.824701][T22925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4828'. [ 988.114166][T22957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 988.629569][T16238] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 988.785587][T16238] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 988.789745][T16238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.793989][T16238] usb 7-1: Product: syz [ 988.795779][T16238] usb 7-1: Manufacturer: syz [ 988.797781][T16238] usb 7-1: SerialNumber: syz [ 988.802249][T16238] usb 7-1: config 0 descriptor?? [ 988.808336][T16238] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 989.215802][T23018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.381153][T16238] gspca_stk1135: reg_w 0x3 err -71 [ 989.383923][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.386252][T16238] gspca_stk1135: Sensor write failed [ 989.387964][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.389862][T16238] gspca_stk1135: Sensor write failed [ 989.394284][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.396338][T16238] gspca_stk1135: Sensor read failed [ 989.398128][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.400265][T16238] gspca_stk1135: Sensor read failed [ 989.402301][T16238] gspca_stk1135: Detected sensor type unknown (0x0) [ 989.404390][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.406409][T16238] gspca_stk1135: Sensor read failed [ 989.408323][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.410285][T16238] gspca_stk1135: Sensor read failed [ 989.412696][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.414820][T16238] gspca_stk1135: Sensor write failed [ 989.416552][T16238] gspca_stk1135: serial bus timeout: status=0x00 [ 989.418509][T16238] gspca_stk1135: Sensor write failed [ 989.420211][T16238] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 989.423805][T16238] usb 7-1: USB disconnect, device number 82 [ 990.005359][T23053] __nla_validate_parse: 6 callbacks suppressed [ 990.005370][T23053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4890'. [ 990.024664][T23057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4892'. [ 990.062206][T23062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4895'. [ 990.351825][T23077] netlink: 'syz.0.4901': attribute type 10 has an invalid length. [ 990.363419][ T5983] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 990.366782][T23077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 990.370131][T23077] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 990.437733][T23077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4901'. [ 990.448775][T23077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.453604][T23077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.458257][T23077] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 990.465540][T23077] bond0 (unregistering): Released all slaves [ 990.515811][ T5983] usb 9-1: Using ep0 maxpacket: 8 [ 990.520000][ T5983] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 990.522942][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.525602][ T5983] usb 9-1: Product: syz [ 990.526916][ T5983] usb 9-1: Manufacturer: syz [ 990.528395][ T5983] usb 9-1: SerialNumber: syz [ 990.531412][ T5983] usb 9-1: config 0 descriptor?? [ 990.731220][ T5983] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.809873][T23080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4902'. [ 991.214132][T23103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4913'. [ 991.276756][T13105] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 991.871640][T23116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4919'. [ 991.919310][T23120] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4920'. [ 991.923213][T23120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 992.083368][ T5983] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 992.089911][ T5983] usb 9-1: USB disconnect, device number 52 [ 992.172893][T23134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4927'. [ 992.287437][ T5983] IPVS: starting estimator thread 0... [ 992.373196][T23145] IPVS: using max 41 ests per chain, 98400 per kthread [ 992.443998][T23155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4936'. [ 992.830768][T17283] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 992.993945][T17283] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.999112][T17283] usb 9-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 993.002201][T17283] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.006253][T17283] usb 9-1: config 0 descriptor?? [ 993.230092][T13105] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 993.335830][ T70] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 993.401536][T17283] hid_parser_main: 16 callbacks suppressed [ 993.401549][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.406131][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.408382][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.410689][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.413050][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.415176][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.417278][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.419344][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.421608][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.423628][T17283] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 993.425937][T17283] asus 0003:0B05:1ABE.0012: ignoring exceeding usage max [ 993.428526][T17283] asus 0003:0B05:1ABE.0012: unexpected long global item [ 993.431313][T17283] asus 0003:0B05:1ABE.0012: Asus hid parse failed: -22 [ 993.433491][T17283] asus 0003:0B05:1ABE.0012: probe with driver asus failed with error -22 [ 993.468568][ T70] usb 7-1: device descriptor read/64, error -71 [ 993.589408][T16238] usb 9-1: USB disconnect, device number 53 [ 993.697226][ T70] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 993.820965][ T70] usb 7-1: device descriptor read/64, error -71 [ 993.867811][T23236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 993.926125][ T70] usb usb7-port1: attempt power cycle [ 994.100011][T23246] lo: entered promiscuous mode [ 994.102272][T23245] lo: left promiscuous mode [ 994.259182][ T70] usb 7-1: new full-speed USB device number 85 using dummy_hcd [ 994.288594][ T70] usb 7-1: device descriptor read/8, error -71 [ 994.516526][ T70] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 994.536849][ T70] usb 7-1: device descriptor read/8, error -71 [ 994.613285][T23275] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 994.640383][ T70] usb usb7-port1: unable to enumerate USB device [ 995.335586][ T1040] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 995.497490][ T1040] usb 5-1: Using ep0 maxpacket: 8 [ 995.502667][ T1040] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 995.505923][ T1040] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 995.509706][ T1040] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 995.513256][ T1040] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 995.517247][ T1040] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 995.521354][ T1040] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 995.524078][ T1040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.530085][ T1040] usbtmc 5-1:16.0: bulk endpoints not found [ 995.723487][ T1040] usb 5-1: USB disconnect, device number 85 [ 995.972443][T13105] Bluetooth: hci4: unexpected event for opcode 0x202d [ 996.084508][T23329] binder: 23328:23329 ioctl c0306201 80000680 returned -14 [ 996.322711][T23355] binder: BINDER_SET_CONTEXT_MGR already set [ 996.324876][T23355] binder: 23354:23355 ioctl 4018620d 80000100 returned -16 [ 996.329762][T23355] binder: BINDER_SET_CONTEXT_MGR already set [ 996.331623][T23355] binder: 23354:23355 ioctl 4018620d 80001000 returned -16 [ 996.407005][T23361] __nla_validate_parse: 4 callbacks suppressed [ 996.407017][T23361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5033'. [ 996.432289][ T70] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 996.586636][ T70] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 996.589971][ T70] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 996.595775][ T70] usb 9-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 996.602462][ T70] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.606265][ T70] usb 9-1: config 0 descriptor?? [ 996.881366][T23373] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5038'. [ 996.885779][T23373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 997.001323][ T70] kye 0003:0458:4018.0013: ignoring exceeding usage max [ 997.006675][ T70] kye 0003:0458:4018.0013: hidraw1: USB HID v4.00 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 997.190895][T11550] usb 9-1: USB disconnect, device number 54 [ 997.631431][T16238] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 997.775738][T16238] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 997.779022][T16238] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 997.782767][T16238] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 997.786286][T16238] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 997.790161][T16238] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 997.796591][T16238] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 997.799494][T16238] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 997.801920][T16238] usb 5-1: Product: syz [ 997.803344][T16238] usb 5-1: Manufacturer: syz [ 997.807976][T16238] cdc_wdm 5-1:1.0: skipping garbage [ 997.810054][T16238] cdc_wdm 5-1:1.0: skipping garbage [ 997.812612][T16238] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 997.815034][T16238] cdc_wdm 5-1:1.0: Unknown control protocol [ 998.221838][T17283] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 998.374209][T17283] usb 7-1: Using ep0 maxpacket: 16 [ 998.377175][T17283] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 998.381955][T17283] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 998.385157][T17283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.387884][T17283] usb 7-1: Product: syz [ 998.389185][T17283] usb 7-1: Manufacturer: syz [ 998.390740][T17283] usb 7-1: SerialNumber: syz [ 998.393873][T17283] usb 7-1: config 0 descriptor?? [ 998.398191][T17283] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 998.401163][T17283] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 998.722785][T23413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.725960][T23413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.729313][T23413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.732083][T23413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.736318][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 998.736554][ T10] usb 5-1: USB disconnect, device number 86 [ 998.743809][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 998.812352][ T70] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 998.964772][ T70] usb 9-1: Using ep0 maxpacket: 16 [ 998.968165][ T70] usb 9-1: config index 0 descriptor too short (expected 4996, got 96) [ 998.970805][ T70] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.973940][ T70] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 998.976901][T17283] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 998.980597][ T70] usb 9-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 998.983400][ T70] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.985921][ T70] usb 9-1: Product: syz [ 998.987201][ T70] usb 9-1: Manufacturer: syz [ 998.988632][ T70] usb 9-1: SerialNumber: syz [ 998.991267][ T70] usb 9-1: config 0 descriptor?? [ 999.187592][T23415] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5054'. [ 999.191028][ T58] usb 9-1: USB disconnect, device number 55 [ 999.476828][T23427] syz.0.5060: page allocation failure: order:6, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 999.482932][T23427] CPU: 2 UID: 0 PID: 23427 Comm: syz.0.5060 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.482961][T23427] Tainted: [L]=SOFTLOCKUP [ 999.482968][T23427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 999.482978][T23427] Call Trace: [ 999.482984][T23427] [ 999.482991][T23427] dump_stack_lvl+0x100/0x190 [ 999.483033][T23427] warn_alloc.cold+0x95/0x1c1 [ 999.483055][T23427] ? __pfx_warn_alloc+0x10/0x10 [ 999.483097][T23427] ? __pfx___might_resched+0x10/0x10 [ 999.483123][T23427] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 999.483165][T23427] ? sysfs_add_file_mode_ns+0x22f/0x3c0 [ 999.483186][T23427] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 999.483215][T23427] ? kernfs_put+0x3f/0x60 [ 999.483236][T23427] ? internal_create_group+0x915/0xfb0 [ 999.483270][T23427] ? trace_kmalloc+0xe3/0x110 [ 999.483288][T23427] ? __kasan_kmalloc+0xaa/0xb0 [ 999.483305][T23427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 999.483333][T23427] ? policy_nodemask+0xed/0x4f0 [ 999.483358][T23427] alloc_pages_mpol+0x1fb/0x540 [ 999.483381][T23427] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 999.483411][T23427] ? ib_setup_port_attrs+0x2b4/0x600 [ 999.483439][T23427] ___kmalloc_large_node+0xe5/0x120 [ 999.483465][T23427] __kmalloc_large_node_noprof+0x1c/0x70 [ 999.483491][T23427] __kmalloc_noprof+0x5be/0x850 [ 999.483518][T23427] ? rdma_port_get_link_layer+0x57/0xe0 [ 999.483542][T23427] ib_setup_port_attrs+0x2b4/0x600 [ 999.483571][T23427] ? kobject_put+0xb9/0x640 [ 999.483603][T23427] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 999.483641][T23427] ? rdma_counter_init+0x20a/0x400 [ 999.483667][T23427] ? __pfx_rxe_ib_alloc_hw_port_stats+0x10/0x10 [ 999.483698][T23427] ib_register_device+0x8cb/0xde0 [ 999.483722][T23427] ? __pfx_ib_register_device+0x10/0x10 [ 999.483742][T23427] ? lockdep_hardirqs_on+0x78/0x100 [ 999.483770][T23427] ? ib_device_set_netdev+0xdd/0x860 [ 999.483797][T23427] rxe_register_device+0x277/0x360 [ 999.483825][T23427] rxe_net_add+0x95/0xf0 [ 999.483846][T23427] rxe_newlink+0x9c/0x160 [ 999.483865][T23427] nldev_newlink+0x3b0/0x620 [ 999.483884][T23427] ? __pfx_nldev_newlink+0x10/0x10 [ 999.483977][T23427] ? __pfx___might_resched+0x10/0x10 [ 999.484035][T23427] ? security_capable+0x80/0x260 [ 999.484057][T23427] ? ns_capable+0xd2/0xf0 [ 999.484077][T23427] ? __pfx_nldev_newlink+0x10/0x10 [ 999.484096][T23427] rdma_nl_rcv_msg+0x392/0x6f0 [ 999.484125][T23427] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 999.484156][T23427] ? __lock_acquire+0x4a5/0x2630 [ 999.484190][T23427] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 999.484225][T23427] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 999.484264][T23427] ? netlink_deliver_tap+0x1ae/0xcc0 [ 999.484292][T23427] netlink_unicast+0x585/0x850 [ 999.484320][T23427] ? __pfx_netlink_unicast+0x10/0x10 [ 999.484352][T23427] netlink_sendmsg+0x8b0/0xda0 [ 999.484381][T23427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.484410][T23427] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 999.484434][T23427] ____sys_sendmsg+0x9e1/0xb70 [ 999.484458][T23427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.484485][T23427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.484506][T23427] ? __pfx___futex_wait+0x10/0x10 [ 999.484532][T23427] ? __pfx_futex_wake_mark+0x10/0x10 [ 999.484561][T23427] ___sys_sendmsg+0x190/0x1e0 [ 999.484589][T23427] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.484628][T23427] ? find_held_lock+0x2b/0x80 [ 999.484666][T23427] __sys_sendmsg+0x170/0x220 [ 999.484686][T23427] ? __pfx___sys_sendmsg+0x10/0x10 [ 999.484704][T23427] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 999.484737][T23427] ? rcu_is_watching+0x12/0xc0 [ 999.484761][T23427] __do_fast_syscall_32+0xe7/0x970 [ 999.484792][T23427] do_fast_syscall_32+0x32/0x70 [ 999.484820][T23427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 999.484845][T23427] RIP: 0023:0xf7fe3f7c [ 999.484861][T23427] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 999.484879][T23427] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 999.484897][T23427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 999.484909][T23427] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 999.484920][T23427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 999.484931][T23427] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 999.484942][T23427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 999.484967][T23427] [ 999.484975][T23427] Mem-Info: [ 999.665053][T23427] active_anon:380 inactive_anon:1121 isolated_anon:0 [ 999.665053][T23427] active_file:1412 inactive_file:3168 isolated_file:0 [ 999.665053][T23427] unevictable:1768 dirty:51 writeback:0 [ 999.665053][T23427] slab_reclaimable:6603 slab_unreclaimable:107891 [ 999.665053][T23427] mapped:21882 shmem:1768 pagetables:1314 [ 999.665053][T23427] sec_pagetables:407 bounce:0 [ 999.665053][T23427] kernel_misc_reclaimable:0 [ 999.665053][T23427] free:38608 free_pcp:481 free_cma:0 [ 999.683036][T23427] Node 0 active_anon:8kB inactive_anon:124kB active_file:76kB inactive_file:120kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:200kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7648kB pagetables:1356kB sec_pagetables:1344kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 999.696417][T23427] Node 1 active_anon:1512kB inactive_anon:4260kB active_file:5572kB inactive_file:12552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87128kB dirty:204kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8872kB pagetables:3900kB sec_pagetables:284kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 999.710161][T23427] Node 0 DMA free:3220kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 999.723730][T23427] lowmem_reserve[]: 0 285 285 285 285 [ 999.726016][T23427] Node 0 DMA32 free:38780kB boost:29460kB min:42556kB low:45828kB high:49100kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:124kB active_file:68kB inactive_file:120kB unevictable:3536kB writepending:0kB zspages:192kB present:1032196kB managed:292740kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 999.738654][T23427] lowmem_reserve[]: 0 0 0 0 0 [ 999.740657][T23427] Node 1 DMA32 free:112528kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1740kB inactive_anon:4260kB active_file:5572kB inactive_file:12552kB unevictable:3536kB writepending:204kB zspages:5472kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2028kB local_pcp:992kB free_cma:0kB [ 999.754320][T23427] lowmem_reserve[]: 0 0 0 0 0 [ 999.756576][T23427] Node 0 DMA: 125*4kB (UM) 38*8kB (UM) 13*16kB (UM) 21*32kB (UM) 6*64kB (UM) 1*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 3220kB [ 999.758494][T17283] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 999.762758][T23427] Node 0 DMA32: 1255*4kB (UME) 508*8kB (UME) 236*16kB (UME) 254*32kB (UME) 78*64kB (UME) 28*128kB (UME) 8*256kB (UME) 4*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 0*4096kB = 38780kB [ 999.762953][T23427] Node 1 DMA32: 3808*4kB (UME) 3861*8kB (UME) 3698*16kB (UME) 146*32kB (UME) 20*64kB (UME) 4*128kB (UME) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 112008kB [ 999.763100][T23427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 999.763117][T23427] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 999.763132][T23427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 999.763147][T23427] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 999.763162][T23427] 7629 total pagecache pages [ 999.763170][T23427] 1229 pages in swap cache [ 999.763178][T23427] Free swap = 99448kB [ 999.763186][T23427] Total swap = 124996kB [ 999.763194][T23427] 524155 pages RAM [ 999.763201][T23427] 0 pages HighMem/MovableOnly [ 999.763209][T23427] 210077 pages reserved [ 999.763216][T23427] 0 pages cma reserved [ 999.801428][T17283] em28xx 7-1:0.0: board has no eeprom [ 999.815199][T23427] infiniband syz0: Couldn't register device with driver model [ 999.821388][T23427] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 999.869909][T17283] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 999.873228][T17283] em28xx 7-1:0.0: dvb set to bulk mode. [ 999.875758][ T10] em28xx 7-1:0.0: Binding DVB extension [ 999.888027][T17283] usb 7-1: USB disconnect, device number 87 [ 999.895875][T17283] em28xx 7-1:0.0: Disconnecting em28xx [ 999.921835][T23432] sctp: [Deprecated]: syz.0.5062 (pid 23432) Use of int in max_burst socket option deprecated. [ 999.921835][T23432] Use struct sctp_assoc_value instead [ 999.948078][ T10] em28xx 7-1:0.0: Registering input extension [ 999.950985][T17283] em28xx 7-1:0.0: Closing input extension [ 999.966166][ T70] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 999.996352][T17283] em28xx 7-1:0.0: Freeing device [ 1000.111795][ T70] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1000.114833][ T70] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.117900][ T70] usb 9-1: Product: syz [ 1000.119203][ T70] usb 9-1: Manufacturer: syz [ 1000.120706][ T70] usb 9-1: SerialNumber: syz [ 1000.123386][ T70] usb 9-1: config 0 descriptor?? [ 1000.127210][ T70] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1000.255535][T23434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5063'. [ 1000.540424][T23452] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.542287][T23452] binder: 23450:23452 ioctl 4018620d 80000100 returned -16 [ 1000.547696][T23452] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.550096][T23452] binder: 23450:23452 ioctl 4018620d 80001000 returned -16 [ 1000.554076][T23452] binder: 23450:23452 ioctl c0306201 0 returned -14 [ 1001.276217][ T70] gspca_sunplus: reg_w_riv err -71 [ 1001.277927][ T70] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 1001.281503][ T70] usb 9-1: USB disconnect, device number 56 [ 1001.483406][T23497] netlink: 'syz.2.5093': attribute type 7 has an invalid length. [ 1001.608976][T23511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5100'. [ 1001.857006][T23530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5109'. [ 1001.907443][T23536] binder: 23535:23536 ioctl c0306201 0 returned -14 [ 1002.044171][T23553] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5120'. [ 1002.336876][ T10] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1002.403538][ T1040] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1002.479732][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1002.485758][ T10] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1002.489079][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.491854][ T10] usb 7-1: Product: syz [ 1002.493335][ T10] usb 7-1: Manufacturer: syz [ 1002.494766][ T10] usb 7-1: SerialNumber: syz [ 1002.497514][ T10] usb 7-1: config 0 descriptor?? [ 1002.501107][ T10] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 1002.546424][ T1040] usb 9-1: Using ep0 maxpacket: 8 [ 1002.550179][ T1040] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.553532][ T1040] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1002.557169][ T1040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1002.560480][ T1040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1002.563773][ T1040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1002.567223][ T1040] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.572710][ T1040] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1002.575942][ T1040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.578517][ T1040] usb 9-1: Product: syz [ 1002.579829][ T1040] usb 9-1: Manufacturer: syz [ 1002.581274][ T1040] usb 9-1: SerialNumber: syz [ 1002.584001][ T1040] usb 9-1: config 0 descriptor?? [ 1002.586146][T23568] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1002.896128][ T10] usb 7-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1003.103661][ T58] usb 7-1: USB disconnect, device number 88 [ 1003.113992][ T58] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1003.119197][ T58] visor 7-1:0.0: device disconnected [ 1003.441838][ T9694] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1003.550998][T23568] ipvlan0: entered promiscuous mode [ 1003.553672][T23568] ipvlan0: entered allmulticast mode [ 1003.555838][T23568] veth0_vlan: entered allmulticast mode [ 1003.586663][ T9694] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1003.592749][ T9694] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1003.596166][ T9694] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1003.600007][ T9694] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.605334][ T9694] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1003.609034][ T9694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.620988][ T9694] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 1003.675659][T23591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5138'. [ 1003.876967][T23601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1004.172595][T23610] random: crng reseeded on system resumption [ 1004.718180][ T1040] rc_core: IR keymap rc-snapstream-firefly not found [ 1004.720590][ T1040] Registered IR keymap rc-empty [ 1004.723508][ T1040] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 1004.727257][ T1040] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 1004.738257][ T1040] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input27 [ 1004.754931][ T1040] usb 9-1: USB disconnect, device number 57 [ 1004.757066][ C3] ati_remote 9-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1004.984280][T23623] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.986609][T23623] binder: 23622:23623 ioctl 4018620d 80000100 returned -16 [ 1004.990999][T23623] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.992927][T23623] binder: 23622:23623 ioctl 4018620d 80001000 returned -16 [ 1006.091306][T16238] usb 5-1: USB disconnect, device number 87 [ 1006.797009][T23656] fuse: Bad value for 'fd' [ 1006.871221][ T10] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1007.014136][ T70] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1007.016482][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1007.019855][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1007.022488][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1007.025561][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1007.029314][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1007.034057][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1007.038060][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.042676][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1007.045420][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.051209][ T10] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 1007.158570][ T70] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1007.162020][ T70] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1007.166137][ T70] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1007.169254][ T70] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.173179][ T70] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1007.176083][ T70] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.183139][ T70] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 1007.245379][T16238] usb 7-1: USB disconnect, device number 89 [ 1007.331717][T23674] fuse: Bad value for 'fd' [ 1007.586050][ T5983] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1007.742003][ T5983] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1007.746078][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.749726][ T5983] usb 5-1: Product: syz [ 1007.751451][ T5983] usb 5-1: Manufacturer: syz [ 1007.753445][ T5983] usb 5-1: SerialNumber: syz [ 1008.150923][ T5983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1008.155285][ T5983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1008.223997][ T1040] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1008.351000][T23719] block nbd3: shutting down sockets [ 1008.385873][ T1040] usb 7-1: Using ep0 maxpacket: 16 [ 1008.391813][ T1040] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 1008.400133][ T1040] usb 7-1: config 251 has no interface number 0 [ 1008.403960][ T1040] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1008.411300][ T1040] usb 7-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1008.420814][ T1040] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1008.424347][ T1040] usb 7-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1008.428796][ T1040] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.433833][ T1040] usb 7-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.439219][ T1040] usb 7-1: config 251 interface 202 has no altsetting 0 [ 1008.444867][ T1040] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1008.447758][ T1040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.450238][ T1040] usb 7-1: Product: syz [ 1008.451551][ T1040] usb 7-1: Manufacturer: syz [ 1008.453115][ T1040] usb 7-1: SerialNumber: syz [ 1008.458673][T23699] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1008.622579][T23731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1008.626595][T23731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1008.661203][ T1040] cxacru 7-1:251.202: cxacru_bind: interface has incorrect endpoints [ 1008.664327][ T1040] cxacru 7-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1008.676029][ T1040] usb 7-1: USB disconnect, device number 90 [ 1009.308513][ T5983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1009.312730][ T5983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1009.508527][ T5983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 1009.512356][ T5983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1009.515490][ T5983] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1009.519101][ T5983] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1009.526503][ T5983] usb 5-1: USB disconnect, device number 88 [ 1009.595373][ T9694] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1009.663079][ T70] usb 9-1: USB disconnect, device number 58 [ 1009.740295][ T9694] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1009.743666][ T9694] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1009.747787][ T9694] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1009.752040][ T9694] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1009.754954][ T9694] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1009.757690][ T9694] usb 7-1: Product: syz [ 1009.759026][ T9694] usb 7-1: Manufacturer: syz [ 1009.760489][ T9694] usb 7-1: SerialNumber: syz [ 1009.763485][ T9694] usb 7-1: config 0 descriptor?? [ 1009.766611][ T9694] hub 7-1:0.0: bad descriptor, ignoring hub [ 1009.768531][ T9694] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1009.772012][ T9694] usb 7-1: selecting invalid altsetting 0 [ 1010.140201][T23763] binder: 23762:23763 ioctl 4018620d 0 returned -22 [ 1010.519275][ T9694] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 1010.666034][T23748] usb 7-1: reset high-speed USB device number 91 using dummy_hcd [ 1010.667120][ T9694] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1010.673535][ T9694] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.676620][ T9694] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1010.679747][ T9694] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.683815][ T9694] usb 9-1: config 0 descriptor?? [ 1011.074819][ T9694] isku 0003:1E7D:319C.0014: item fetching failed at offset 5/7 [ 1011.077557][ T9694] isku 0003:1E7D:319C.0014: parse failed [ 1011.079907][ T9694] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -22 [ 1011.086680][T23780] loop5: detected capacity change from 0 to 7 [ 1011.090693][T23780] Dev loop5: unable to read RDB block 7 [ 1011.093591][T23780] loop5: AHDI p1 [ 1011.095225][T23780] loop5: partition table partially beyond EOD, truncated [ 1011.238941][ T70] usb 7-1: USB disconnect, device number 91 [ 1011.267441][ T10] usb 9-1: USB disconnect, device number 59 [ 1011.396531][T23797] binder: 23796:23797 ioctl c0306201 80000680 returned -14 [ 1011.711249][T23814] Dead loop on virtual device ip6_vti0 (net 442), fix it urgently! [ 1011.818548][T23826] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5247'. [ 1011.857290][T23830] netlink: 'syz.4.5249': attribute type 2 has an invalid length. [ 1011.864536][T23830] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5249'. [ 1011.868844][T23833] deleting an unspecified loop device is not supported. [ 1011.979794][T23843] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1012.058548][T23853] binder: 23852:23853 ioctl c0306201 0 returned -14 [ 1012.125554][T23861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5264'. [ 1012.194626][ T40] audit: type=1326 audit(1781383036.599:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23864 comm="syz.2.5266" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x0 [ 1012.310742][ T6719] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1012.455080][ T6719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 1012.459644][ T6719] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.465125][ T6719] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1012.468864][ T6719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.476301][ T6719] usb 9-1: config 0 descriptor?? [ 1012.877022][ T6719] hid_parser_main: 47 callbacks suppressed [ 1012.877035][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.881290][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.884391][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.888107][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.891403][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.894462][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.897524][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.900551][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.903044][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.905524][ T6719] megaworld 0003:07B5:0312.0015: unknown main item tag 0x0 [ 1012.918578][ T6719] megaworld 0003:07B5:0312.0015: hidraw1: USB HID v0.01 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0 [ 1012.923317][ T6719] megaworld 0003:07B5:0312.0015: no inputs found [ 1013.058308][ T6719] usb 9-1: USB disconnect, device number 60 [ 1013.355381][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5288'. [ 1014.198213][T11550] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1014.367594][T11550] usb 9-1: Using ep0 maxpacket: 8 [ 1014.370523][T11550] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1014.372998][T11550] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.376021][T11550] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1014.380313][T11550] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1014.383061][T11550] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.390467][T11550] usbtmc 9-1:16.0: bulk endpoints not found [ 1014.748653][ T70] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1014.891694][ T70] usb 5-1: Using ep0 maxpacket: 16 [ 1014.896257][ T70] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1014.900835][ T70] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 1014.905441][ T70] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1014.910757][ T70] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1014.914373][ T70] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.919765][ T70] usb 5-1: config 0 descriptor?? [ 1015.312117][ T70] logitech 0003:046D:C293.0016: unexpected long global item [ 1015.314781][ T70] logitech 0003:046D:C293.0016: parse failed [ 1015.316753][ T70] logitech 0003:046D:C293.0016: probe with driver logitech failed with error -22 [ 1015.499730][ T70] usb 5-1: USB disconnect, device number 89 [ 1015.616668][T23979] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5318'. [ 1015.993208][T23990] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5323'. [ 1016.011328][T23992] binder: BINDER_SET_CONTEXT_MGR already set [ 1016.013967][T23992] binder: 23991:23992 ioctl 4018620d 80000100 returned -16 [ 1016.021157][T23992] binder: BINDER_SET_CONTEXT_MGR already set [ 1016.023690][T23992] binder: 23991:23992 ioctl 4018620d 80001000 returned -16 [ 1016.171358][T24003] syzkaller1: entered promiscuous mode [ 1016.173221][T24003] syzkaller1: entered allmulticast mode [ 1016.548987][ T9694] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 1016.672857][ T9694] usb 7-1: device descriptor read/64, error -71 [ 1016.824068][ T1040] usb 9-1: USB disconnect, device number 61 [ 1016.901524][ T9694] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 1017.034962][ T9694] usb 7-1: device descriptor read/64, error -71 [ 1017.140482][ T9694] usb usb7-port1: attempt power cycle [ 1017.482576][ T9694] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1017.513241][ T9694] usb 7-1: device descriptor read/8, error -71 [ 1017.759809][ T9694] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1017.788000][ T9694] usb 7-1: device descriptor read/8, error -71 [ 1017.858041][T24047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5348'. [ 1017.892405][ T9694] usb usb7-port1: unable to enumerate USB device [ 1017.931422][T24051] comedi comedi2: fl512: I/O base address not correctly aligned [ 1018.082409][T24058] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5353'. [ 1018.256971][T24080] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5364'. [ 1018.501753][ T5983] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1018.644538][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 1018.647390][ T5983] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1018.650315][ T5983] usb 5-1: config 0 has no interface number 0 [ 1018.655693][ T5983] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1018.658474][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.661120][ T5983] usb 5-1: Product: syz [ 1018.662401][ T5983] usb 5-1: Manufacturer: syz [ 1018.663978][ T5983] usb 5-1: SerialNumber: syz [ 1018.671647][ T5983] usb 5-1: config 0 descriptor?? [ 1018.675080][ T5983] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1018.870815][ T5983] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1018.876298][ T5983] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1019.262276][ C2] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1019.262648][T17283] usb 5-1: USB disconnect, device number 90 [ 1019.273998][T17283] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1019.285150][T17283] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1019.291339][T17283] quatech2 5-1:0.51: device disconnected [ 1019.537730][T24140] binder: 24139:24140 ioctl c0306201 0 returned -14 [ 1019.542171][T24140] binder: 24139:24140 unknown command 1020 [ 1019.544067][T24140] binder: 24139:24140 ioctl c0306201 80000040 returned -22 [ 1019.891583][T24171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5406'. [ 1019.894437][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5406'. [ 1019.968597][T11550] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 1020.122591][T11550] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.126816][T11550] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1020.130357][T11550] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1020.134200][T11550] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1020.137553][T11550] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1020.145153][T11550] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1020.148844][T11550] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1020.152405][T11550] usb 9-1: Product: syz [ 1020.154231][T11550] usb 9-1: Manufacturer: syz [ 1020.156196][T11550] usb 9-1: SerialNumber: syz [ 1020.161901][T11550] usb 9-1: config 0 descriptor?? [ 1020.358676][T11550] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1020.361578][T11550] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1020.406918][T16238] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1020.485229][T13105] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1020.552689][T11550] radio-si470x 9-1:0.0: software version 62, hardware version 11 [ 1020.558620][T16238] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1020.562259][T11550] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1020.568544][T16238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.574801][T16238] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1020.579039][T16238] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1020.581809][T16238] usb 5-1: Manufacturer: syz [ 1020.587889][T16238] usb 5-1: config 0 descriptor?? [ 1020.598902][T16238] igorplugusb 5-1:0.0: incorrect number of endpoints [ 1020.746262][T11550] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1020.751852][T11550] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 1020.754227][T11550] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1020.756832][T11550] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 1020.762830][T11550] usb 9-1: USB disconnect, device number 62 [ 1020.789200][ T58] usb 5-1: USB disconnect, device number 91 [ 1020.819577][T24221] binder: BINDER_SET_CONTEXT_MGR already set [ 1020.821538][T24221] binder: 24220:24221 ioctl 4018620d 80004a80 returned -16 [ 1020.825732][T13105] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 1020.902195][ T9694] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1021.056169][ T9694] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1021.058764][ T9694] usb 7-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 1021.061976][ T9694] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1021.066043][ T9694] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1021.068756][ T9694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.073559][ T9694] usbtmc 7-1:16.0: bulk endpoints not found [ 1021.293703][T24232] tmpfs: Bad value for 'mpol' [ 1021.450136][T24240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5438'. [ 1021.559574][ T5983] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1021.721400][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 1021.724433][ T5983] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1021.727994][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.731966][ T5983] usb 5-1: config 0 descriptor?? [ 1021.737485][ T5983] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1022.699855][ T5983] gspca_nw80x: reg_w err -71 [ 1022.701390][ T5983] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 1022.705356][ T5983] usb 5-1: USB disconnect, device number 92 [ 1022.726583][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1022.732724][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1022.739106][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1022.752358][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1022.773093][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1022.982872][T24269] lo speed is unknown, defaulting to 1000 [ 1023.033152][T18847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.116707][T18847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.218162][T18847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.297029][T24269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.299257][T24269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.302063][T24269] bridge_slave_0: entered allmulticast mode [ 1023.305887][T24269] bridge_slave_0: entered promiscuous mode [ 1023.310510][T24269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.314417][T24269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.317442][T24269] bridge_slave_1: entered allmulticast mode [ 1023.321347][T24269] bridge_slave_1: entered promiscuous mode [ 1023.362431][T18847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.376688][T24269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.381736][T24269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.383563][T24301] binder: 24300:24301 ioctl c0306201 0 returned -14 [ 1023.397710][T24269] team0: Port device team_slave_0 added [ 1023.402114][T24269] team0: Port device team_slave_1 added [ 1023.432012][T24269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.434204][T24269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.445193][T24269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.450717][T24269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.455059][T24269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.464551][T24269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.514108][T24269] hsr_slave_0: entered promiscuous mode [ 1023.516479][T24269] hsr_slave_1: entered promiscuous mode [ 1023.518597][T24269] debugfs: 'hsr0' already exists in 'hsr' [ 1023.520400][T24269] Cannot create hsr debugfs directory [ 1023.560883][ T5983] usb 7-1: USB disconnect, device number 96 [ 1023.600229][T24311] No control pipe specified [ 1023.613716][T18847] bridge_slave_1: left allmulticast mode [ 1023.616384][T18847] bridge_slave_1: left promiscuous mode [ 1023.618632][T18847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.623612][T18847] bridge_slave_0: left allmulticast mode [ 1023.625324][T18847] bridge_slave_0: left promiscuous mode [ 1023.631807][T18847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.796067][T18847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.801554][T18847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.806042][T18847] bond0 (unregistering): Released all slaves [ 1023.967548][ T5983] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1024.094111][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1024.112239][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 1024.115743][ T5983] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.119441][ T5983] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1024.125272][ T5983] usb 7-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 1024.128783][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.132554][ T5983] usb 7-1: Product: syz [ 1024.134205][ T5983] usb 7-1: Manufacturer: syz [ 1024.135746][ T5983] usb 7-1: SerialNumber: syz [ 1024.189053][T17194] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1024.331380][T17194] usb 5-1: Using ep0 maxpacket: 32 [ 1024.335114][T17194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.344715][T17194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.350993][T17194] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1024.354529][T17194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.360392][T17194] usb 5-1: config 0 descriptor?? [ 1024.370311][T17194] hub 5-1:0.0: USB hub found [ 1024.541354][T17283] usb 7-1: USB disconnect, device number 97 [ 1024.612602][T17194] hub 5-1:0.0: 1 port detected [ 1024.683885][T18847] hsr_slave_0: left promiscuous mode [ 1024.686296][T18847] hsr_slave_1: left promiscuous mode [ 1024.688426][T18847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.690728][T18847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.693832][T18847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.696153][T18847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.716067][T18847] veth1_macvtap: left promiscuous mode [ 1024.718046][T18847] veth0_macvtap: left promiscuous mode [ 1024.719813][T18847] veth1_vlan: left promiscuous mode [ 1024.721553][T18847] veth0_vlan: left promiscuous mode [ 1024.723826][T13105] Bluetooth: hci0: command tx timeout [ 1024.900081][T18847] team0 (unregistering): Port device team_slave_1 removed [ 1024.909144][T18847] team0 (unregistering): Port device team_slave_0 removed [ 1024.971402][T19188] smc: removing ib device sz1 [ 1024.981686][ T1040] lo speed is unknown, defaulting to 1000 [ 1024.983535][ T1040] sz1: Port: 1 Link DOWN [ 1024.995091][T19188] smbdirect: ib_dev[sz1] removed [ 1024.995248][T24269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1025.005301][T24269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.019165][T24269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1025.025312][T24269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.029771][T24269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1025.035412][T24269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.037183][T24365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5478'. [ 1025.040405][T24269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1025.047593][T24269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1025.131551][T24269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.148426][T24376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5481'. [ 1025.159156][T24269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.165760][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.167968][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.191543][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.194423][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.197824][T17194] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 1025.494668][ T5983] usb 5-1: USB disconnect, device number 93 [ 1025.538496][T24269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.574612][T24269] veth0_vlan: entered promiscuous mode [ 1025.583578][T24269] veth1_vlan: entered promiscuous mode [ 1025.601554][T24269] veth0_macvtap: entered promiscuous mode [ 1025.609350][T24269] veth1_macvtap: entered promiscuous mode [ 1025.630488][T24269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.638319][T24269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.648997][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.651820][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.654938][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.662314][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.750805][ T6719] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1025.788089][ T58] IPVS: starting estimator thread 0... [ 1025.818308][T18881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.820780][T18881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.843157][T18881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.849880][T18881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.875082][T24420] IPVS: using max 41 ests per chain, 98400 per kthread [ 1025.913353][ T6719] usb 7-1: Using ep0 maxpacket: 8 [ 1025.916768][ T6719] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1025.919507][ T6719] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.924583][ T6719] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1025.928574][ T6719] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1025.936847][ T6719] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1025.951391][ T6719] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1025.954407][ T6719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.965224][ T6719] usbtmc 7-1:16.0: bulk endpoints not found [ 1025.992972][T18847] IPVS: stop unused estimator thread 0... [ 1026.088800][T24432] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 1026.088800][T24432] program syz.0.5501 not setting count and/or reply_len properly [ 1026.120983][T18847] bridge_slave_1: left allmulticast mode [ 1026.123735][T18847] bridge_slave_1: left promiscuous mode [ 1026.125989][T18847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.133493][T18847] bridge_slave_0: left allmulticast mode [ 1026.136005][T18847] bridge_slave_0: left promiscuous mode [ 1026.138593][T18847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.307734][T18847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.312342][T18847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.316173][T18847] bond0 (unregistering): Released all slaves [ 1026.649918][T18847] hsr_slave_0: left promiscuous mode [ 1026.652916][T18847] hsr_slave_1: left promiscuous mode [ 1026.656053][T18847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.659341][T18847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.662876][T18847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.666175][T18847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.678656][T18847] veth1_macvtap: left promiscuous mode [ 1026.681024][T18847] veth0_macvtap: left promiscuous mode [ 1026.683198][T18847] veth1_vlan: left promiscuous mode [ 1026.686262][T18847] veth0_vlan: left promiscuous mode [ 1026.825340][T18847] team0 (unregistering): Port device team_slave_1 removed [ 1026.836312][T18847] team0 (unregistering): Port device team_slave_0 removed [ 1027.284345][T18847] IPVS: stop unused estimator thread 0... [ 1027.846278][T13105] Bluetooth: hci0: command tx timeout [ 1028.074870][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1028.230500][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1028.234135][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.236683][ T10] usb 5-1: Product: syz [ 1028.238225][ T10] usb 5-1: Manufacturer: syz [ 1028.239705][ T10] usb 5-1: SerialNumber: syz [ 1028.244900][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1028.267839][ T70] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.396436][ T5983] usb 7-1: USB disconnect, device number 98 [ 1028.661229][T24510] exFAT-fs (nullb0): invalid boot record signature [ 1028.664569][T24510] exFAT-fs (nullb0): failed to read boot sector [ 1028.665956][T24512] fuse: Bad value for 'group_id' [ 1028.668197][T24512] fuse: Bad value for 'group_id' [ 1028.669617][T24510] exFAT-fs (nullb0): failed to recognize exfat type [ 1029.044856][ T10] usb 5-1: USB disconnect, device number 94 [ 1029.304762][ T70] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1029.308146][ T70] ath9k_htc: Failed to initialize the device [ 1029.312882][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 1029.577121][T24559] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5557'. [ 1029.827947][ T5747] Bluetooth: hci0: command tx timeout [ 1029.920176][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5563'. [ 1030.294353][ T58] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1030.448455][ T58] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.451788][ T58] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1030.454558][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.458321][ T58] usb 7-1: config 0 descriptor?? [ 1030.463387][ T58] pwc: Askey VC010 type 2 USB webcam detected. [ 1030.842158][ T5753] Bluetooth: hci1: link tx timeout [ 1030.844776][ T5753] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1030.848728][ T58] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1030.851376][ T5753] Bluetooth: hci1: link tx timeout [ 1030.852137][ T58] pwc: recv_control_msg error -32 req 02 val 2700 [ 1030.853390][ T5753] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1030.858316][ T58] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1030.861879][ T58] pwc: recv_control_msg error -32 req 04 val 1000 [ 1030.868097][ T58] pwc: recv_control_msg error -32 req 04 val 1300 [ 1030.872350][ T58] pwc: recv_control_msg error -32 req 04 val 1400 [ 1030.874915][ T58] pwc: recv_control_msg error -32 req 02 val 2000 [ 1030.877743][ T58] pwc: recv_control_msg error -32 req 02 val 2100 [ 1031.071315][ T58] pwc: recv_control_msg error -71 req 02 val 2500 [ 1031.073661][ T58] pwc: recv_control_msg error -71 req 02 val 2400 [ 1031.078862][ T58] pwc: recv_control_msg error -71 req 02 val 2600 [ 1031.083000][ T58] pwc: recv_control_msg error -71 req 02 val 2900 [ 1031.087613][ T58] pwc: recv_control_msg error -71 req 02 val 2800 [ 1031.090153][ T58] pwc: recv_control_msg error -71 req 04 val 1100 [ 1031.092344][ T58] pwc: recv_control_msg error -71 req 04 val 1200 [ 1031.095604][ T58] pwc: Registered as video103. [ 1031.098134][ T58] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb7/7-1/input/input28 [ 1031.104895][ T58] usb 7-1: USB disconnect, device number 99 [ 1031.606896][T24613] fuse: Bad value for 'group_id' [ 1031.608466][T24613] fuse: Bad value for 'group_id' [ 1031.808985][T13105] Bluetooth: hci0: command 0x0406 tx timeout [ 1031.853917][T24634] netdevsim netdevsim0: Direct firmware load for . [ 1031.853917][T24634] failed with error -2 [ 1031.859231][T24634] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1031.859231][T24634] [ 1032.010642][T24642] hsr0: entered promiscuous mode [ 1032.323236][ T1040] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1032.466133][ T1040] usb 9-1: Using ep0 maxpacket: 8 [ 1032.469654][ T1040] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1032.472267][ T1040] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1032.475433][ T1040] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1032.478923][ T1040] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1032.482041][ T1040] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.486030][ T1040] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1032.488863][ T1040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.690048][ T1040] usb 9-1: usb_control_msg returned -32 [ 1032.691941][ T1040] usbtmc 9-1:16.0: can't read capabilities [ 1032.799891][T13105] Bluetooth: hci1: command 0x0406 tx timeout [ 1033.029047][T24684] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 1033.039068][ T6719] usb 9-1: USB disconnect, device number 63 [ 1034.707397][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 1034.709672][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.780910][T13105] Bluetooth: hci1: command 0x0406 tx timeout [ 1034.936865][T24763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5620'. [ 1036.046849][T24789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1036.134560][T24793] fuse: Unknown parameter '' [ 1037.232073][T24825] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5639'. [ 1037.480385][T24834] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1037.482437][T24834] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1037.485041][T24834] vhci_hcd vhci_hcd.0: Device attached [ 1037.524514][ T5983] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1037.667081][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 1037.688428][ T5983] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1037.694084][ T5983] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1037.698269][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1037.702842][ T5983] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.707309][ T5983] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.713022][ T5983] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1037.717741][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.755555][ T5983] usbtmc 7-1:16.0: bulk endpoints not found [ 1037.818347][ T9694] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1038.267214][ T1040] usb 46-1: SetAddress Request (22) to port 0 [ 1038.281205][T24835] vhci_hcd: connection closed [ 1038.283023][T19188] vhci_hcd vhci_hcd.4: stop threads [ 1038.286317][T19188] vhci_hcd vhci_hcd.4: release socket [ 1038.288184][T19188] vhci_hcd vhci_hcd.4: disconnect device [ 1038.608872][ T1040] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1038.629200][ T1040] usb 46-1: enqueue for inactive port 0 [ 1038.754563][ T9694] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.758697][ T9694] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1038.774832][ T9694] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1038.778620][ T9694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1038.781875][ T9694] usb 5-1: SerialNumber: syz [ 1038.814381][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5645'. [ 1039.012758][ T9694] usb 5-1: 0:2 : does not exist [ 1039.022253][ T1040] usb usb46-port1: attempt power cycle [ 1039.039185][ T9694] usb 5-1: USB disconnect, device number 95 [ 1039.311033][T24849] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1039.516333][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5648'. [ 1039.612179][ T1040] usb usb46-port1: unable to enumerate USB device [ 1039.665592][T24857] 9p: Bad value for 'port' [ 1039.779839][T24857] tipc: Started in network mode [ 1039.782182][T24857] tipc: Node identity 4, cluster identity 4711 [ 1039.784853][T24857] tipc: Node number set to 4 [ 1040.411565][T16238] usb 7-1: USB disconnect, device number 100 [ 1040.467767][T24877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1040.469817][T24877] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1040.484468][T24877] vhci_hcd vhci_hcd.0: Device attached [ 1040.763277][T16238] usb 38-1: SetAddress Request (38) to port 0 [ 1041.213682][T24878] vhci_hcd: connection closed [ 1041.225751][T19199] vhci_hcd vhci_hcd.0: stop threads [ 1041.232922][T19199] vhci_hcd vhci_hcd.0: release socket [ 1041.241827][T19199] vhci_hcd vhci_hcd.0: disconnect device [ 1041.427612][T16238] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1041.458292][T16238] usb 38-1: enqueue for inactive port 0 [ 1041.568916][ T5747] Bluetooth: hci3: command 0x0406 tx timeout [ 1041.615583][T24887] fuse: Bad value for 'group_id' [ 1041.617193][T24887] fuse: Bad value for 'group_id' [ 1041.637879][T24889] 8021q: VLANs not supported on wg0 [ 1041.641483][T24889] Invalid ELF header magic: != ELF [ 1041.840593][T16238] usb usb38-port1: attempt power cycle [ 1042.086978][T16240] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1042.230004][T16240] usb 5-1: Using ep0 maxpacket: 8 [ 1042.234457][T16240] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1042.238283][T16240] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1042.243998][T16240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1042.248756][T16240] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1042.253039][T16240] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.257196][T16240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1042.260601][T16240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.273491][T16240] usbtmc 5-1:16.0: bulk endpoints not found [ 1042.375006][T16238] usb usb38-port1: unable to enumerate USB device [ 1042.953795][T24906] comedi comedi0: reset error (fatal) [ 1043.011129][T24919] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1043.013703][T24919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1043.016706][T24919] vhci_hcd vhci_hcd.0: Device attached [ 1043.902181][T24920] vhci_hcd: connection closed [ 1043.912817][T18881] vhci_hcd vhci_hcd.3: stop threads [ 1043.916640][T18881] vhci_hcd vhci_hcd.3: release socket [ 1043.918752][T18881] vhci_hcd vhci_hcd.3: disconnect device [ 1044.416854][T24937] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1044.419592][T24937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1044.423803][T24937] vhci_hcd vhci_hcd.0: Device attached [ 1044.496944][ T10] usb 44-1: SetAddress Request (52) to port 0 [ 1044.498896][ T10] usb 44-1: new SuperSpeed USB device number 52 using vhci_hcd [ 1044.740018][T17283] usb 5-1: USB disconnect, device number 96 [ 1044.996732][T24948] 9p: Bad value for 'port' [ 1045.281991][T24938] vhci_hcd: connection reset by peer [ 1045.284683][ T5963] vhci_hcd vhci_hcd.3: stop threads [ 1045.286947][ T5963] vhci_hcd vhci_hcd.3: release socket [ 1045.289686][ T5963] vhci_hcd vhci_hcd.3: disconnect device [ 1045.519404][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1046.010315][T24960] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1046.012353][T24960] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1046.016442][T24960] vhci_hcd vhci_hcd.0: Device attached [ 1046.773490][T24955] comedi comedi0: reset error (fatal) [ 1046.866084][T24961] vhci_hcd: connection closed [ 1046.868487][T19188] vhci_hcd vhci_hcd.3: stop threads [ 1046.871975][T19188] vhci_hcd vhci_hcd.3: release socket [ 1046.873809][T19188] vhci_hcd vhci_hcd.3: disconnect device [ 1047.127698][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5687'. [ 1047.252889][T17283] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1048.011813][T17283] usb 5-1: Using ep0 maxpacket: 8 [ 1048.015267][T17283] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1048.020324][T17283] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1048.028203][T17283] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1048.032044][T17283] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1048.037488][T17283] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.042233][T17283] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1048.045778][T17283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.066004][T17283] usbtmc 5-1:16.0: bulk endpoints not found [ 1048.636398][T24999] Bluetooth: MGMT ver 1.23 [ 1048.803699][T24996] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5694'. [ 1049.272357][T24988] comedi comedi0: reset error (fatal) [ 1049.342261][ T10] usb 44-1: device descriptor read/8, error -110 [ 1049.412819][T25027] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1049.414863][T25027] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1049.417550][T25027] vhci_hcd vhci_hcd.0: Device attached [ 1049.442376][ T10] usb usb44-port1: attempt power cycle [ 1049.522845][T25034] 9p: Bad value for 'port' [ 1049.577646][T25034] tipc: Started in network mode [ 1049.579251][T25034] tipc: Node identity 4, cluster identity 4711 [ 1049.581820][T25034] tipc: Node number set to 4 [ 1049.856149][ T1040] usb 5-1: USB disconnect, device number 97 [ 1049.886560][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1049.969426][T25028] vhci_hcd: connection closed [ 1049.972216][ T5963] vhci_hcd vhci_hcd.2: stop threads [ 1049.983496][ T5963] vhci_hcd vhci_hcd.2: release socket [ 1049.986426][ T5963] vhci_hcd vhci_hcd.2: disconnect device [ 1050.050305][ T6719] usb 42-1: enqueue for inactive port 0 [ 1050.229783][ T10] usb usb44-port1: unable to enumerate USB device [ 1050.534630][ T6719] usb usb42-port1: attempt power cycle [ 1051.019806][T25057] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5703'. [ 1051.081506][ T6719] usb usb42-port1: unable to enumerate USB device [ 1052.648129][T25092] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5715'. [ 1052.773273][T25096] 9p: Bad value for 'port' [ 1052.817287][T25096] tipc: Started in network mode [ 1052.822259][T25096] tipc: Node identity 4, cluster identity 4711 [ 1052.824248][T25096] tipc: Node number set to 4 [ 1053.266206][T25118] fuse: Unknown parameter 'grou00000000000000000000' [ 1053.329334][T25117] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5724'. [ 1054.098704][ T58] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1054.246223][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.255078][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.261378][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1054.271022][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1054.277823][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.288341][ T58] usb 7-1: config 0 descriptor?? [ 1054.381618][T25150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1054.384312][T25150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1054.388847][T25150] vhci_hcd vhci_hcd.0: Device attached [ 1054.432688][T25154] fuse: Unknown parameter 'group_id00000000000000000000' [ 1054.642799][ T6719] usb 46-1: SetAddress Request (26) to port 0 [ 1054.645477][ T6719] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1054.706307][ T58] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1055.345246][T25151] vhci_hcd: connection reset by peer [ 1055.352795][T19199] vhci_hcd vhci_hcd.4: stop threads [ 1055.355129][T19199] vhci_hcd vhci_hcd.4: release socket [ 1055.359555][T19199] vhci_hcd vhci_hcd.4: disconnect device [ 1056.261998][T25192] overlayfs: failed to resolve './bus': -2 [ 1056.550337][T25202] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5755'. [ 1056.595397][T17551] usb 7-1: USB disconnect, device number 101 [ 1057.162361][T25218] loop5: detected capacity change from 0 to 7 [ 1057.175857][T25218] Dev loop5: unable to read RDB block 7 [ 1057.177636][T25218] loop5: AHDI p1 [ 1057.181641][T25218] loop5: partition table partially beyond EOD, truncated [ 1057.235362][T25222] syzkaller1: entered promiscuous mode [ 1057.237759][T25222] syzkaller1: entered allmulticast mode [ 1057.479923][T25229] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1057.485684][T25229] kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 1057.498582][T25229] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 1057.503526][T25229] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 1057.555406][T25240] fuse: Bad value for 'group_id' [ 1057.557248][T25240] fuse: Bad value for 'group_id' [ 1057.714217][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5770'. [ 1058.408555][T25258] 9p: Bad value for 'port' [ 1058.595833][T25264] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1058.598159][T25264] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1058.605844][T25264] vhci_hcd vhci_hcd.0: Device attached [ 1058.992002][T25282] overlayfs: failed to resolve './bus': -2 [ 1059.460871][T25265] vhci_hcd: connection closed [ 1059.461496][ T5967] vhci_hcd vhci_hcd.0: stop threads [ 1059.465377][ T5967] vhci_hcd vhci_hcd.0: release socket [ 1059.467221][ T5967] vhci_hcd vhci_hcd.0: disconnect device [ 1059.474491][ T6719] usb 46-1: device descriptor read/8, error -110 [ 1059.558328][T25285] overlay: Unknown parameter '/' [ 1059.929715][T25288] loop5: detected capacity change from 0 to 7 [ 1059.952620][T25288] Dev loop5: unable to read RDB block 7 [ 1059.959369][T25288] loop5: AHDI p1 [ 1059.960790][T25288] loop5: partition table partially beyond EOD, truncated [ 1059.980070][T25292] 9p: Bad value for 'port' [ 1060.065228][ T6719] usb usb46-port1: attempt power cycle [ 1060.214415][ T1040] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1060.251715][T25309] 8021q: VLANs not supported on wg0 [ 1060.259001][T25309] Invalid ELF header magic: != ELF [ 1060.263915][T25308] syzkaller1: entered promiscuous mode [ 1060.265652][T25308] syzkaller1: entered allmulticast mode [ 1060.366491][ T1040] usb 9-1: Using ep0 maxpacket: 8 [ 1060.372269][ T1040] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1060.387874][ T1040] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1060.441713][ T1040] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1060.445895][ T1040] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.450977][ T1040] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1060.454641][ T1040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.595900][ T6719] usb usb46-port1: unable to enumerate USB device [ 1060.671550][ T1040] usb 9-1: GET_CAPABILITIES returned 0 [ 1060.676459][ T1040] usbtmc 9-1:16.0: can't read capabilities [ 1060.719139][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'. [ 1060.865406][ T58] usb 9-1: USB disconnect, device number 64 [ 1060.917673][T25339] netdevsim netdevsim2: Direct firmware load for . [ 1060.917673][T25339] failed with error -2 [ 1060.921218][T25339] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1060.921218][T25339] [ 1061.618722][T25362] syzkaller1: entered promiscuous mode [ 1061.621148][T25362] syzkaller1: entered allmulticast mode [ 1061.898578][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1063.092319][T25411] netdevsim netdevsim2: Direct firmware load for . [ 1063.092319][T25411] failed with error -2 [ 1063.097816][T25411] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1063.097816][T25411] [ 1063.269513][T25418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5833'. [ 1063.709918][T25404] comedi comedi0: reset error (fatal) [ 1063.982654][T25421] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5834'. [ 1064.331618][T25440] 8021q: VLANs not supported on wg0 [ 1064.334583][T25440] Invalid ELF header magic: != ELF [ 1064.671555][T25451] netdevsim netdevsim0: Direct firmware load for . [ 1064.671555][T25451] failed with error -2 [ 1064.676091][T25451] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1064.676091][T25451] [ 1065.045128][T25459] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5846'. [ 1066.056725][T25494] 8021q: VLANs not supported on wg0 [ 1066.061742][T25494] Invalid ELF header magic: != ELF [ 1066.594586][T25519] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5856'. [ 1067.759709][T25553] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5867'. [ 1067.975595][T25564] overlayfs: missing 'lowerdir' [ 1068.104193][T25547] comedi comedi0: reset error (fatal) [ 1068.421638][T25591] fuse: Bad value for 'fd' [ 1068.525931][T25598] 9p: Bad value for 'port' [ 1068.587087][T17283] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1068.732384][T17283] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1068.735971][T17283] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1068.740419][T17283] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1068.744971][T17283] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1068.750523][T17283] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1068.754211][T17283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.765272][T17283] usbtmc 5-1:16.0: bulk endpoints not found [ 1069.006976][T13105] Bluetooth: hci2: unknown advertising packet type: 0x6e [ 1069.007055][T13105] Bluetooth: hci2: unknown advertising packet type: 0x7f [ 1069.012318][T13105] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1069.648070][T25635] 9p: Bad value for 'port' [ 1069.682499][T17283] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1069.838600][T17283] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1069.841428][T17283] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1069.845126][T17283] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1069.849294][T17283] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1069.852483][T17283] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.858449][T17283] usbtmc 9-1:16.0: bulk endpoints not found [ 1070.465758][T25645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1070.468274][T25645] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1070.470945][T25645] vhci_hcd vhci_hcd.0: Device attached [ 1070.634386][T25646] vhci_hcd: connection closed [ 1070.634540][T18875] vhci_hcd vhci_hcd.3: stop threads [ 1070.639208][T18875] vhci_hcd vhci_hcd.3: release socket [ 1070.641306][T18875] vhci_hcd vhci_hcd.3: disconnect device [ 1071.263598][T17283] usb 5-1: USB disconnect, device number 98 [ 1071.492844][T25670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1071.547907][T25672] 9p: Bad value for 'port' [ 1072.499644][T17551] usb 9-1: USB disconnect, device number 65 [ 1072.888743][T25720] overlayfs: missing 'workdir' [ 1073.017332][T25725] fuse: Bad value for 'fd' [ 1073.061678][T25727] binder: BINDER_SET_CONTEXT_MGR already set [ 1073.065881][T25727] binder: 25726:25727 ioctl 4018620d 80000240 returned -16 [ 1073.072226][T25727] binder: 25726:25727 ioctl c0306201 800004c0 returned -14 [ 1073.119421][T25730] binder: BINDER_SET_CONTEXT_MGR already set [ 1073.121957][T25730] binder: 25729:25730 ioctl 4018620d 80000240 returned -16 [ 1073.127602][T25730] binder: 25729:25730 ioctl c0306201 800004c0 returned -14 [ 1073.357211][T25735] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5937'. [ 1073.813154][T25747] overlayfs: missing 'workdir' [ 1073.816808][T16240] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1073.952299][T16240] usb 5-1: device descriptor read/64, error -71 [ 1074.178899][T16240] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1074.317089][T16240] usb 5-1: device descriptor read/64, error -71 [ 1074.426564][T16240] usb usb5-port1: attempt power cycle [ 1074.750142][T16240] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1074.873905][T25750] comedi comedi0: reset error (fatal) [ 1074.976790][T16240] usb 5-1: device descriptor read/8, error -71 [ 1075.245441][T16240] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1075.266207][T16240] usb 5-1: device descriptor read/8, error -71 [ 1075.373759][T16240] usb usb5-port1: unable to enumerate USB device [ 1075.770154][T25774] overlayfs: missing 'workdir' [ 1075.856655][T25780] 9p: Bad value for 'port' [ 1077.512533][T17551] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1077.643728][T17551] usb 5-1: device descriptor read/64, error -71 [ 1077.712495][T25804] comedi comedi0: reset error (fatal) [ 1077.885049][T17551] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1078.027051][T17551] usb 5-1: device descriptor read/64, error -71 [ 1078.134220][T17551] usb usb5-port1: attempt power cycle [ 1078.475200][T17551] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1078.533891][T17551] usb 5-1: device descriptor read/8, error -71 [ 1078.757642][T25840] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1078.759709][T25840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1078.763514][T25840] vhci_hcd vhci_hcd.0: Device attached [ 1078.769849][T17551] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1078.816821][T17551] usb 5-1: device descriptor read/8, error -71 [ 1079.414073][T17551] usb usb5-port1: unable to enumerate USB device [ 1079.561012][T25841] vhci_hcd: connection closed [ 1079.575026][T18876] vhci_hcd vhci_hcd.4: stop threads [ 1079.578579][T18876] vhci_hcd vhci_hcd.4: release socket [ 1079.581751][T18876] vhci_hcd vhci_hcd.4: disconnect device [ 1079.617649][ T58] usb 46-1: enqueue for inactive port 0 [ 1079.636009][T25853] overlayfs: missing 'workdir' [ 1079.655415][T25855] 9p: Bad value for 'port' [ 1079.752130][T13105] Bluetooth: hci2: unknown advertising packet type: 0x6e [ 1079.752160][T13105] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1080.086706][ T58] usb usb46-port1: attempt power cycle [ 1080.171797][T25873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5986'. [ 1080.216084][T25876] overlayfs: missing 'lowerdir' [ 1080.602135][T25895] qrtr: Invalid version 97 [ 1080.618697][ T58] usb usb46-port1: unable to enumerate USB device [ 1081.256062][ T9694] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1081.381342][ T9694] usb 9-1: device descriptor read/64, error -71 [ 1081.439216][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1081.483627][T25914] 9p: Bad value for 'port' [ 1081.608496][ T9694] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1081.741869][ T9694] usb 9-1: device descriptor read/64, error -71 [ 1081.857073][ T9694] usb usb9-port1: attempt power cycle [ 1082.180005][ T9694] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1082.199482][ T9694] usb 9-1: device descriptor read/8, error -71 [ 1082.437226][ T9694] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1082.459199][ T9694] usb 9-1: device descriptor read/8, error -71 [ 1082.562035][ T9694] usb usb9-port1: unable to enumerate USB device [ 1083.008341][T13105] block nbd0: Receive control failed (result -32) [ 1083.008931][T25923] block nbd0: shutting down sockets [ 1083.173058][ T5747] block nbd2: Receive control failed (result -32) [ 1083.174123][T25929] block nbd2: shutting down sockets [ 1083.398868][T25938] 8021q: VLANs not supported on wg0 [ 1083.402059][T25938] Invalid ELF header magic: != ELF [ 1083.941815][ T5747] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1084.015138][T25945] 9p: Could not find request transport: fd0x0000000000000005 [ 1084.414711][T25965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1084.941860][T25976] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.944000][T25976] binder: 25975:25976 ioctl 4018620d 80000100 returned -16 [ 1084.984069][T25982] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1084.987076][T25982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1085.882067][T25999] binder: BINDER_SET_CONTEXT_MGR already set [ 1085.883945][T25999] binder: 25998:25999 ioctl 4018620d 80000100 returned -16 [ 1085.890542][T25999] binder: BINDER_SET_CONTEXT_MGR already set [ 1085.892754][T25999] binder: 25998:25999 ioctl 4018620d 80001000 returned -16 [ 1086.056161][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'. [ 1086.325018][T26033] 8021q: VLANs not supported on wg0 [ 1086.327906][T26033] Invalid ELF header magic: != ELF [ 1086.561009][T26055] loop5: detected capacity change from 0 to 8 [ 1086.630665][T26055] Dev loop5: unable to read RDB block 8 [ 1086.633885][T26055] loop5: unable to read partition table [ 1086.637599][T26055] loop5: partition table beyond EOD, truncated [ 1086.643634][T26055] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1087.705098][T26102] fuse: Bad value for 'user_id' [ 1087.711092][T26102] fuse: Bad value for 'user_id' [ 1087.832965][T26107] 9p: Bad value for 'port' [ 1087.997669][ T5747] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1088.035596][T26113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6068'. [ 1088.082918][T26116] fuse: Unknown parameter 'use00000000000000000000' [ 1089.181315][ T70] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1089.344872][ T70] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1089.348343][ T70] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1089.353032][ T70] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 1089.357452][ T70] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.363842][ T70] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.367572][ T70] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.435494][T26184] fuse: Unknown parameter 'use00000000000000000000' [ 1089.574343][ T70] usb 5-1: usb_control_msg returned -32 [ 1089.576174][ T70] usbtmc 5-1:16.0: can't read capabilities [ 1090.686871][T26215] fuse: Unknown parameter 'user_i00000000000000000000' [ 1091.515795][T26241] 9p: Bad value for 'port' [ 1091.531659][T26241] tipc: Started in network mode [ 1091.533503][T26241] tipc: Node identity 4, cluster identity 4711 [ 1091.537098][T26241] tipc: Node number set to 4 [ 1091.773782][T26264] fuse: Unknown parameter 'user_i00000000000000000000' [ 1091.805039][ T10] usb 5-1: USB disconnect, device number 107 [ 1093.232117][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 1093.239318][T26284] comedi comedi0: reset error (fatal) [ 1093.241100][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.573701][T26300] block nbd4: shutting down sockets [ 1093.687896][T26325] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1093.690378][T26325] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1093.693068][T26325] vhci_hcd vhci_hcd.0: Device attached [ 1094.487806][T26326] vhci_hcd: connection closed [ 1094.488266][ T238] vhci_hcd vhci_hcd.4: stop threads [ 1094.492763][ T238] vhci_hcd vhci_hcd.4: release socket [ 1094.495196][ T238] vhci_hcd vhci_hcd.4: disconnect device [ 1094.563609][ T6719] usb 46-1: enqueue for inactive port 0 [ 1095.264236][ T5747] block nbd3: Receive control failed (result -32) [ 1095.311723][T26371] block nbd3: shutting down sockets [ 1095.321654][ T5747] block nbd2: Receive control failed (result -32) [ 1095.336114][T26378] block nbd2: shutting down sockets [ 1095.430602][ T6719] usb usb46-port1: attempt power cycle [ 1095.723920][T26406] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1095.725999][T26406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1095.730240][T26406] vhci_hcd vhci_hcd.0: Device attached [ 1095.757463][T26410] fuse: Bad value for 'fd' [ 1095.896764][T26352] comedi comedi0: reset error (fatal) [ 1095.966729][ T6719] usb usb46-port1: unable to enumerate USB device [ 1096.315932][T16240] usb 42-1: SetAddress Request (50) to port 0 [ 1096.525194][T26407] vhci_hcd: connection closed [ 1096.525862][T19183] vhci_hcd vhci_hcd.2: stop threads [ 1096.531854][T19183] vhci_hcd vhci_hcd.2: release socket [ 1096.533940][T19183] vhci_hcd vhci_hcd.2: disconnect device [ 1096.664208][T16240] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1096.899277][T26426] 9p: Bad value for 'port' [ 1097.025095][T16240] usb 42-1: enqueue for inactive port 0 [ 1097.325664][T13218] usb 7-1: new full-speed USB device number 102 using dummy_hcd [ 1097.394590][T16240] usb usb42-port1: attempt power cycle [ 1097.469896][T13218] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1097.472474][T13218] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1097.476701][T13218] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 1097.481328][T13218] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.487070][T13218] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1097.493823][T13218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.679469][T26448] 9p: Bad value for 'port' [ 1097.695746][T13218] usb 7-1: usb_control_msg returned -32 [ 1097.698075][T13218] usbtmc 7-1:16.0: can't read capabilities [ 1097.747499][T26452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1097.749577][T26452] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1097.752202][T26452] vhci_hcd vhci_hcd.0: Device attached [ 1097.933598][T16240] usb usb42-port1: unable to enumerate USB device [ 1098.116396][ T34] usb 46-1: SetAddress Request (38) to port 0 [ 1098.559672][T26453] vhci_hcd: connection closed [ 1098.561211][T19193] vhci_hcd vhci_hcd.4: stop threads [ 1098.571366][T19193] vhci_hcd vhci_hcd.4: release socket [ 1098.579376][T19193] vhci_hcd vhci_hcd.4: disconnect device [ 1098.636168][ T34] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1099.068901][ T34] usb 46-1: enqueue for inactive port 0 [ 1099.260566][T26478] 9p: Bad value for 'port' [ 1099.441136][ T34] usb usb46-port1: attempt power cycle [ 1099.976125][ T34] usb usb46-port1: unable to enumerate USB device [ 1099.995667][T26491] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1099.997844][T26491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1100.000782][T26491] vhci_hcd vhci_hcd.0: Device attached [ 1100.100919][T16240] usb 7-1: USB disconnect, device number 102 [ 1100.478980][ T58] usb 46-1: SetAddress Request (42) to port 0 [ 1100.602457][T16240] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1100.756474][T16240] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.761609][T16240] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1100.770385][T16240] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1100.775021][T16240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.784789][T16240] usb 7-1: config 0 descriptor?? [ 1100.798955][T16240] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1100.820202][T26492] vhci_hcd: connection closed [ 1100.821822][T19200] vhci_hcd vhci_hcd.4: stop threads [ 1100.826841][T19200] vhci_hcd vhci_hcd.4: release socket [ 1100.829188][T19200] vhci_hcd vhci_hcd.4: disconnect device [ 1100.878027][ T58] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1101.076499][T26512] 9p: Bad value for 'port' [ 1101.316900][ T58] usb 46-1: enqueue for inactive port 0 [ 1101.690941][ T58] usb usb46-port1: attempt power cycle [ 1102.225042][ T58] usb usb46-port1: unable to enumerate USB device [ 1102.452777][ T5747] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1102.566779][T26546] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1102.572174][T26546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1103.135711][ T34] usb 7-1: USB disconnect, device number 103 [ 1103.193617][ T58] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1103.339743][ T58] usb 5-1: config 0 has no interfaces? [ 1103.346024][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1103.352040][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.364666][ T58] usb 5-1: config 0 descriptor?? [ 1103.386978][T26577] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1103.564765][T26561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.568471][T26561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.642355][ T34] usb 5-1: USB disconnect, device number 108 [ 1104.003044][ T58] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1104.160834][T26598] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1104.171768][ T58] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1104.174711][ T58] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1104.178177][ T58] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1104.181713][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1104.189078][ T58] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1104.193569][ T58] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1104.196462][ T58] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1104.199271][ T58] usb 9-1: Product: syz [ 1104.200562][ T58] usb 9-1: Manufacturer: syz [ 1104.209787][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 1104.211450][ T58] cdc_wdm 9-1:1.0: skipping garbage [ 1104.213944][ T58] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1104.216778][ T58] cdc_wdm 9-1:1.0: Unknown control protocol [ 1104.584202][ T5846] usb 7-1: new full-speed USB device number 104 using dummy_hcd [ 1104.728640][ T5846] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1104.731400][ T5846] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1104.734933][ T5846] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 1104.738473][ T5846] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.742729][ T5846] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1104.745883][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.944688][ T5846] usb 7-1: usb_control_msg returned -32 [ 1104.945687][ C1] cdc_wdm 9-1:1.0: Unexpected error -71 [ 1104.947228][ T5846] usbtmc 7-1:16.0: can't read capabilities [ 1104.948833][ C1] wdm_int_callback: 3 callbacks suppressed [ 1104.948844][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1104.955098][ C1] wdm_int_callback: 3 callbacks suppressed [ 1104.955108][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1104.959640][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1104.962062][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1104.964189][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1104.966282][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1104.972362][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1104.974406][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1104.976539][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1104.978696][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1104.980704][T16240] usb 9-1: USB disconnect, device number 70 [ 1104.982588][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1104.982600][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1104.982608][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1105.289059][ T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1105.431957][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1105.435172][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1105.438279][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.441187][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1105.444096][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.451853][T16240] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1105.593861][T16240] usb 9-1: Using ep0 maxpacket: 16 [ 1105.598233][T16240] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1105.602276][T16240] usb 9-1: config 127 has an invalid interface number: 124 but max is 0 [ 1105.605742][T16240] usb 9-1: config 127 has no interface number 0 [ 1105.607850][T16240] usb 9-1: config 127 interface 124 has no altsetting 0 [ 1105.612391][T16240] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1105.616179][T16240] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.619322][T16240] usb 9-1: Product: syz [ 1105.620965][T16240] usb 9-1: Manufacturer: syz [ 1105.622885][T16240] usb 9-1: SerialNumber: syz [ 1105.848285][T26594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.851280][T26594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.639855][T16240] usb 9-1: USB disconnect, device number 71 [ 1107.231425][ T5846] usb 7-1: USB disconnect, device number 104 [ 1107.362130][T26636] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.364104][T26636] binder: 26635:26636 ioctl 4018620d 80000100 returned -16 [ 1107.369246][T26636] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.371213][T26636] binder: 26635:26636 ioctl 4018620d 80001000 returned -16 [ 1107.936495][ T58] usb 5-1: USB disconnect, device number 109 [ 1108.119989][T26655] binder: BINDER_SET_CONTEXT_MGR already set [ 1108.125223][T26655] binder: 26654:26655 ioctl 4018620d 80000100 returned -16 [ 1108.133942][T26655] binder: BINDER_SET_CONTEXT_MGR already set [ 1108.136077][T26655] binder: 26654:26655 ioctl 4018620d 80001000 returned -16 [ 1108.140194][T26656] 8021q: VLANs not supported on wg0 [ 1108.144869][T26656] Invalid ELF header magic: != ELF [ 1109.480230][T26668] comedi comedi0: reset error (fatal) [ 1109.752517][T26699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1109.818597][T26702] fuse: Unknown parameter 'use00000000000000000000' [ 1109.897851][T26704] 8021q: VLANs not supported on wg0 [ 1109.905479][T26704] Invalid ELF header magic: != ELF [ 1110.696355][T13105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1110.705753][T13105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1110.709184][T13105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1110.723342][T13105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1110.738368][T13105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1110.812429][T20311] bond0: (slave syz_tun): Releasing backup interface [ 1111.383269][T13105] Bluetooth: hci2: Invalid handle: 0x15c9 > 0x0eff [ 1111.400605][ T5747] Bluetooth: hci1: Invalid handle: 0x15c9 > 0x0eff [ 1111.594680][T26723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.597154][T26723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.599620][T26723] bridge_slave_0: entered allmulticast mode [ 1111.602281][T26723] bridge_slave_0: entered promiscuous mode [ 1111.607217][T26723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.610607][T26723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.612946][T26723] bridge_slave_1: entered allmulticast mode [ 1111.616726][T26723] bridge_slave_1: entered promiscuous mode [ 1111.636646][T26723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.641124][T26723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.661863][T26723] team0: Port device team_slave_0 added [ 1111.665356][T26723] team0: Port device team_slave_1 added [ 1111.681629][T26723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.683892][T26723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.691931][T26723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.696420][T26723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.698621][T26723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.706756][T26723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.751004][T26723] hsr_slave_0: entered promiscuous mode [ 1111.754698][T26723] hsr_slave_1: entered promiscuous mode [ 1111.757870][T26723] debugfs: 'hsr0' already exists in 'hsr' [ 1111.760433][T26723] Cannot create hsr debugfs directory [ 1111.902562][T26723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.003785][T26723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.065780][T26723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.080693][T26736] comedi comedi0: reset error (fatal) [ 1112.175839][T26723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.353733][T26723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1112.358123][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.361218][T26723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1112.369841][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.374180][T26723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1112.381113][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1112.385296][T26723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1112.392643][T26723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1112.472633][T26723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.490088][T26723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.498421][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.501212][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.513252][T18850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.516007][T18850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.532163][ T10] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1112.652434][ T10] usb 7-1: device descriptor read/64, error -71 [ 1112.743217][T13105] Bluetooth: hci4: command tx timeout [ 1112.881402][ T10] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1112.936600][T26723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.004718][ T10] usb 7-1: device descriptor read/64, error -71 [ 1113.110991][ T10] usb usb7-port1: attempt power cycle [ 1113.156007][T26723] veth0_vlan: entered promiscuous mode [ 1113.164744][T26723] veth1_vlan: entered promiscuous mode [ 1113.190759][T26723] veth0_macvtap: entered promiscuous mode [ 1113.197773][T26723] veth1_macvtap: entered promiscuous mode [ 1113.209869][T26723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.217867][T26723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.225513][T18860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.229137][T18860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.235612][T18860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.238668][T18860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.274042][T19200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.284534][T19200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.321207][T19193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.323701][T19193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.433398][ T10] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1113.453490][ T10] usb 7-1: device descriptor read/8, error -71 [ 1113.681156][ T10] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1113.700783][ T10] usb 7-1: device descriptor read/8, error -71 [ 1113.805179][ T10] usb usb7-port1: unable to enumerate USB device [ 1113.957552][ T70] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1114.100238][ T70] usb 5-1: Using ep0 maxpacket: 8 [ 1114.103174][ T70] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1114.105761][ T70] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.108881][ T70] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1114.112041][ T70] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.722252][T13105] Bluetooth: hci4: command tx timeout [ 1115.086194][T26800] fuse: Bad value for 'fd' [ 1116.233962][ T58] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 1116.281734][ T70] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1116.387763][ T58] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1116.390937][ T58] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 1116.395254][ T58] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 1116.400304][ T58] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.405062][ T58] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1116.408815][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.424385][ T70] usb 7-1: Using ep0 maxpacket: 8 [ 1116.427357][ T70] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1116.430701][ T70] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.433770][ T70] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1116.437322][ T70] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1116.441311][ T70] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1116.445974][ T70] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1116.448760][ T70] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.456507][ T70] usbtmc 7-1:16.0: bulk endpoints not found [ 1116.609578][ T6719] usb 5-1: USB disconnect, device number 110 [ 1116.613230][ T58] usb 9-1: GET_CAPABILITIES returned 0 [ 1116.616881][ T58] usbtmc 9-1:16.0: can't read capabilities [ 1116.710252][T13105] Bluetooth: hci4: command tx timeout [ 1116.784805][T26829] fuse: Bad value for 'fd' [ 1117.142686][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1117.149399][T26833] usbtmc 9-1:16.0: Unable to send data, error -71 [ 1117.152639][T26833] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1117.156761][T17551] usb 9-1: USB disconnect, device number 72 [ 1117.657981][T26844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'. [ 1118.681941][ T5747] Bluetooth: hci4: command tx timeout [ 1118.735311][T26879] fuse: Unknown parameter '0x0000000000000003' [ 1118.925333][ T58] usb 7-1: USB disconnect, device number 109 [ 1119.377287][ T34] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1119.540412][ T34] usb 9-1: config 0 has no interfaces? [ 1119.542321][ T34] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1119.546484][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.552833][ T34] usb 9-1: config 0 descriptor?? [ 1119.596490][ T5747] Bluetooth: hci2: command 0x0405 tx timeout [ 1119.792401][ T34] usb 9-1: USB disconnect, device number 73 [ 1120.652364][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6325'. [ 1121.743664][T26961] 9p: Bad value for 'port' [ 1121.798557][T26962] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1121.883983][T26966] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6330'. [ 1121.905514][T26967] 8021q: VLANs not supported on wg0 [ 1121.912830][T26967] Invalid ELF header magic: != ELF [ 1122.177851][ T34] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1122.485992][T26956] ------------[ cut here ]------------ [ 1122.487871][T26956] inode->i_blocks [ 1122.487879][T26956] WARNING: mm/shmem.c:1433 at shmem_evict_inode+0x93b/0xc40, CPU#1: syz.4.6327/26956 [ 1122.491933][T26956] Modules linked in: [ 1122.493762][T26956] CPU: 1 UID: 0 PID: 26956 Comm: syz.4.6327 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.498061][T26956] Tainted: [L]=SOFTLOCKUP [ 1122.499411][T26956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1122.502532][T26956] RIP: 0010:shmem_evict_inode+0x93b/0xc40 [ 1122.504299][T26956] Code: fe e8 c9 94 b7 ff 45 85 ff 75 ac e8 0f 9a b7 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 f0 fa 8f ff e9 e5 fd ff ff e8 f6 99 b7 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 e8 99 b7 ff 4c 89 e2 48 b8 00 00 00 00 [ 1122.510066][T26956] RSP: 0018:ffffc90002dc7938 EFLAGS: 00010293 [ 1122.511951][T26956] RAX: 0000000000000000 RBX: ffff8880697ce140 RCX: ffffffff82505cc3 [ 1122.515121][T26956] RDX: ffff88804aeb2540 RSI: ffffffff8250636a RDI: ffff88804aeb2540 [ 1122.517989][T26956] RBP: ffffc90002dc7a60 R08: 0000000000000007 R09: 0000000000000000 [ 1122.520434][T26956] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 1122.523179][T26956] R13: 0000000000000000 R14: ffffed100d2f9c24 R15: 0000000000000000 [ 1122.526168][T26956] FS: 0000000000000000(0000) GS:ffff88809728e000(0000) knlGS:0000000000000000 [ 1122.529369][T26956] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1122.531538][T26956] CR2: 00000000f542d50c CR3: 000000006cfb2000 CR4: 0000000000352ef0 [ 1122.534063][T26956] DR0: 000000007fffffff DR1: 00000000000001f8 DR2: 0000000000000004 [ 1122.536480][T26956] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1122.538888][T26956] Call Trace: [ 1122.540028][T26956] [ 1122.540955][T26956] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1122.542670][T26956] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1122.544649][T26956] ? find_held_lock+0x2b/0x80 [ 1122.546117][T26956] ? evict+0x37e/0xad0 [ 1122.547393][T26956] ? evict+0x37e/0xad0 [ 1122.548706][T26956] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1122.550439][T26956] evict+0x3c2/0xad0 [ 1122.551665][T26956] ? find_held_lock+0x2b/0x80 [ 1122.553241][T26956] ? __pfx_evict+0x10/0x10 [ 1122.554669][T26956] ? iput.part.0+0x5fd/0xf50 [ 1122.556128][T26956] iput.part.0+0x605/0xf50 [ 1122.557503][T26956] ? __pfx_inode_just_drop+0x10/0x10 [ 1122.559296][T26956] iput+0x35/0x40 [ 1122.560442][T26956] dentry_unlink_inode+0x2c0/0x4c0 [ 1122.562053][T26956] __dentry_kill+0x1d0/0x690 [ 1122.563516][T26956] finish_dput+0x76/0x480 [ 1122.564883][T26956] dput.part.0+0x456/0x570 [ 1122.566602][T26956] dput+0x1f/0x30 [ 1122.568108][T26956] __fput+0x519/0xb50 [ 1122.569675][T26956] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.571276][T26956] task_work_run+0x150/0x240 [ 1122.572706][T26956] ? __pfx_task_work_run+0x10/0x10 [ 1122.574279][T26956] ? do_raw_spin_unlock+0x145/0x1e0 [ 1122.575986][T26956] do_exit+0x951/0x2af0 [ 1122.577517][T26956] ? preempt_schedule_thunk+0x16/0x30 [ 1122.579760][T26956] ? __pfx_do_exit+0x10/0x10 [ 1122.581495][T26956] ? preempt_schedule_thunk+0x16/0x30 [ 1122.583793][T26956] do_group_exit+0xd5/0x2a0 [ 1122.585688][T26956] __ia32_sys_exit_group+0x3e/0x50 [ 1122.587924][T26956] ia32_sys_call+0x19ea/0x19f0 [ 1122.589967][T26956] __do_fast_syscall_32+0xe7/0x970 [ 1122.592108][T26956] do_fast_syscall_32+0x32/0x70 [ 1122.594004][T26956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1122.596048][T26956] RIP: 0023:0xf703ef7c [ 1122.597486][T26956] Code: Unable to access opcode bytes at 0xf703ef52. [ 1122.599538][T26956] RSP: 002b:00000000fff0160c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 1122.602587][T26956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1122.605436][T26956] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f71a7299 [ 1122.608717][T26956] RBP: 00000000f7404ff4 R08: 0000000000000000 R09: 0000000000000000 [ 1122.612001][T26956] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1122.615120][T26956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1122.618455][T26956] [ 1122.619776][T26956] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1122.622737][T26956] CPU: 1 UID: 0 PID: 26956 Comm: syz.4.6327 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.626442][T26956] Tainted: [L]=SOFTLOCKUP [ 1122.628039][T26956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1122.632459][T26956] Call Trace: [ 1122.633852][T26956] [ 1122.635118][T26956] dump_stack_lvl+0x100/0x190 [ 1122.637080][T26956] vpanic+0x552/0x970 [ 1122.638770][T26956] ? __pfx_vpanic+0x10/0x10 [ 1122.640654][T26956] panic+0xd1/0xe0 [ 1122.642199][T26956] ? __pfx_panic+0x10/0x10 [ 1122.643782][T26956] ? check_panic_on_warn+0x1f/0x90 [ 1122.645317][T26956] check_panic_on_warn.cold+0x19/0x34 [ 1122.647018][T26956] ? shmem_evict_inode+0x93b/0xc40 [ 1122.649127][T26956] __warn.cold+0x191/0x328 [ 1122.650766][T26956] __report_bug+0x296/0x3d0 [ 1122.652041][T26956] ? shmem_evict_inode+0x93b/0xc40 [ 1122.653616][T26956] ? __pfx___report_bug+0x10/0x10 [ 1122.655171][T26956] ? find_held_lock+0x2b/0x80 [ 1122.656634][T26956] ? __lock_acquire+0x4a5/0x2630 [ 1122.658442][T26956] ? shmem_evict_inode+0x93b/0xc40 [ 1122.660202][T26956] report_bug+0xb2/0x220 [ 1122.661501][T26956] ? shmem_evict_inode+0x93b/0xc40 [ 1122.663100][T26956] handle_bug+0x16a/0x2a0 [ 1122.664474][T26956] exc_invalid_op+0x17/0x50 [ 1122.665874][T26956] asm_exc_invalid_op+0x1a/0x20 [ 1122.667327][T26956] RIP: 0010:shmem_evict_inode+0x93b/0xc40 [ 1122.669199][T26956] Code: fe e8 c9 94 b7 ff 45 85 ff 75 ac e8 0f 9a b7 ff 48 8b 74 24 28 48 8b 7c 24 30 e8 f0 fa 8f ff e9 e5 fd ff ff e8 f6 99 b7 ff 90 <0f> 0b 90 e9 59 f9 ff ff e8 e8 99 b7 ff 4c 89 e2 48 b8 00 00 00 00 [ 1122.675981][T26956] RSP: 0018:ffffc90002dc7938 EFLAGS: 00010293 [ 1122.677827][T26956] RAX: 0000000000000000 RBX: ffff8880697ce140 RCX: ffffffff82505cc3 [ 1122.680287][T26956] RDX: ffff88804aeb2540 RSI: ffffffff8250636a RDI: ffff88804aeb2540 [ 1122.682715][T26956] RBP: ffffc90002dc7a60 R08: 0000000000000007 R09: 0000000000000000 [ 1122.685124][T26956] R10: 0000000000000008 R11: 0000000000000000 R12: 0000000000000008 [ 1122.687545][T26956] R13: 0000000000000000 R14: ffffed100d2f9c24 R15: 0000000000000000 [ 1122.690223][T26956] ? shmem_evict_inode+0x293/0xc40 [ 1122.691888][T26956] ? shmem_evict_inode+0x93a/0xc40 [ 1122.693505][T26956] ? shmem_evict_inode+0x93a/0xc40 [ 1122.695506][T26956] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1122.698153][T26956] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1122.700448][T26956] ? find_held_lock+0x2b/0x80 [ 1122.701968][T26956] ? evict+0x37e/0xad0 [ 1122.703370][T26956] ? evict+0x37e/0xad0 [ 1122.704683][T26956] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1122.706402][T26956] evict+0x3c2/0xad0 [ 1122.707646][T26956] ? find_held_lock+0x2b/0x80 [ 1122.709281][T26956] ? __pfx_evict+0x10/0x10 [ 1122.710712][T26956] ? iput.part.0+0x5fd/0xf50 [ 1122.712225][T26956] iput.part.0+0x605/0xf50 [ 1122.713847][T26956] ? __pfx_inode_just_drop+0x10/0x10 [ 1122.715554][T26956] iput+0x35/0x40 [ 1122.716732][T26956] dentry_unlink_inode+0x2c0/0x4c0 [ 1122.718360][T26956] __dentry_kill+0x1d0/0x690 [ 1122.719908][T26956] finish_dput+0x76/0x480 [ 1122.721283][T26956] dput.part.0+0x456/0x570 [ 1122.722704][T26956] dput+0x1f/0x30 [ 1122.723898][T26956] __fput+0x519/0xb50 [ 1122.725186][T26956] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.726851][T26956] task_work_run+0x150/0x240 [ 1122.728304][T26956] ? __pfx_task_work_run+0x10/0x10 [ 1122.730139][T26956] ? do_raw_spin_unlock+0x145/0x1e0 [ 1122.732246][T26956] do_exit+0x951/0x2af0 [ 1122.733829][T26956] ? preempt_schedule_thunk+0x16/0x30 [ 1122.735527][T26956] ? __pfx_do_exit+0x10/0x10 [ 1122.737031][T26956] ? preempt_schedule_thunk+0x16/0x30 [ 1122.738747][T26956] do_group_exit+0xd5/0x2a0 [ 1122.740274][T26956] __ia32_sys_exit_group+0x3e/0x50 [ 1122.741878][T26956] ia32_sys_call+0x19ea/0x19f0 [ 1122.743412][T26956] __do_fast_syscall_32+0xe7/0x970 [ 1122.745049][T26956] do_fast_syscall_32+0x32/0x70 [ 1122.746591][T26956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1122.748572][T26956] RIP: 0023:0xf703ef7c [ 1122.749878][T26956] Code: Unable to access opcode bytes at 0xf703ef52. [ 1122.752322][T26956] RSP: 002b:00000000fff0160c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc [ 1122.755292][T26956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1122.758505][T26956] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f71a7299 [ 1122.761618][T26956] RBP: 00000000f7404ff4 R08: 0000000000000000 R09: 0000000000000000 [ 1122.764520][T26956] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1122.766888][T26956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1122.769371][T26956] [ 1122.771025][T26956] Kernel Offset: disabled [ 1122.772375][T26956] Rebooting in 86400 seconds..