last executing test programs: 8.34531813s ago: executing program 3 (id=1937): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) capset(0x0, 0x0) r3 = getpgid(0x0) setpriority(0x0, r3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$6lowpan_control(r2, &(0x7f00000010c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x5, 0x17, 0x0, 0x3, 0xed, 0x2, 0x8, 0xff, 0x8, 0x1, 0x0, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) 8.215853463s ago: executing program 3 (id=1940): r0 = syz_open_procfs(0x0, &(0x7f0000000ac0)='setgroups\x00') write$binfmt_elf64(r0, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x3, 0x6, 0x3, 0x3, 0x3e, 0xab5a, 0x265, 0x40, 0x398, 0x5, 0x7, 0x38, 0x1, 0x7, 0x7fff, 0x7bb1}, [{0x3, 0x81, 0x8, 0x0, 0x9fe, 0x3, 0x9, 0x4373}]}, 0x78) 8.214727553s ago: executing program 3 (id=1941): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x3]}, &(0x7f00000002c0), 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket(0x11, 0x2, 0x0) bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004", @ANYRES16=r2], 0xb8}, 0x1, 0x0, 0x0, 0x40842}, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r9 = syz_open_pts(r8, 0x80) r10 = dup3(r9, r8, 0x80000) read(r10, &(0x7f0000000100)=""/213, 0xd5) read$watch_queue(r10, &(0x7f0000001d40)=""/4095, 0xfdef) 6.286644864s ago: executing program 0 (id=1949): syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 5.769924898s ago: executing program 2 (id=1952): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x181002, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r1, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) read$FUSE(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, 0x0, &(0x7f0000000140)='vfat\x00', 0x218000, 0x0) 5.31321063s ago: executing program 3 (id=1957): unshare(0x8040480) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 5.238669592s ago: executing program 3 (id=1958): syz_usb_connect$midi(0x5, 0x41, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x9, 0x20, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x90, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}], [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0xf3, 0x2, {0x8, 0x25, 0x1, 0x4, "8969ecae"}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 4.809343453s ago: executing program 2 (id=1960): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b", 0x6f}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc93171494957f635b0", 0xcc}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e97", 0x94}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1", 0x4a}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b96", 0x6d}], 0x2}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.294552056s ago: executing program 0 (id=1962): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty, 0x2}, 0x1c) r2 = socket(0x28, 0x5, 0x0) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28, 0x20000811}, 0x4008005) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)='%+9llu \x00'}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 3.859404818s ago: executing program 2 (id=1965): syz_open_dev$loop(0x0, 0x5, 0x3e3942) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6766aac1000073fffe880000000000000000000000000101ff020000000000000000000000000001f2a26e1e85ee71ea4477581e833dd6c6d2ad69862f12ebc08985b764481a784b9514a222594c100d0629d1370f0c1015d47fe44418e199409d47317ed258822b07e442c7a49be802c998ef78f8798ddd43ad0e18cd8c09bf73c45c1ad1ab85f1a4"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0xfffffffffffffff8, 0x2003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x25111, 0x31}, [@IFLA_EXT_MASK={0x8}, @IFLA_BROADCAST={0x58, 0x2, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0xc000800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) sendmsg$nl_route(r3, 0x0, 0x840) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r10 = dup(r9) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000040)) read(r10, &(0x7f0000006100)=""/102364, 0x18fdc) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000004c0)=[{0x6, 0x4, 0xa4, 0x7fff0003}]}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x6) close_range(r11, 0xffffffffffffffff, 0x0) 3.319149083s ago: executing program 0 (id=1966): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.260907984s ago: executing program 3 (id=1967): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x3]}, &(0x7f00000002c0), 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket(0x11, 0x2, 0x0) bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004", @ANYRES16=r2], 0xb8}, 0x1, 0x0, 0x0, 0x40842}, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r9 = syz_open_pts(r8, 0x80) r10 = dup3(r9, r8, 0x80000) read(r10, &(0x7f0000000100)=""/213, 0xd5) read$watch_queue(r10, &(0x7f0000001d40)=""/4095, 0xfdef) 3.210695415s ago: executing program 4 (id=1968): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.190425036s ago: executing program 4 (id=1969): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 3.119128338s ago: executing program 4 (id=1970): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x181002, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r1, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) read$FUSE(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x218000, 0x0) 3.116459438s ago: executing program 0 (id=1971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r2, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={r7, 0x5, 0x20}, &(0x7f00000001c0)=0x18) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x1, 0x12c, @pic={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x20, 0xe}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.165846393s ago: executing program 0 (id=1972): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003240000002403e7dab2a4d03ae8763e6f88fa84d4266ebd1cb7ebac00003008009b02184c8b99bc22"], 0x0, 0x0}, 0x0) 2.103721674s ago: executing program 4 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 2.044135286s ago: executing program 4 (id=1974): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={&(0x7f00000001c0)="5eae7d3b271f9e081891c11a32b252c098cb29684081e4629da0f1c7f163853d280da926c66c9fb800917b87c1e38a1dac7bea10983b0e45d74f236b1f984e", &(0x7f0000000400)}}, &(0x7f0000000000)) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c80cb6dc71bbb6e6fe7389565b0fe703b37fdce8173e60d636428eb484f585a7d271efae1ae456f0eae7563e3395048b86bf2b", 0x33, r0) socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe0b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) unshare(0x2a020400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept4(r4, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10000, 0xa380) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) readv(r3, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 2.041132386s ago: executing program 2 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x5, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x3}) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008001e4009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000100000008510000006"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5], 0xfe33) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0xca}, 0x8) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000580)={0x4, &(0x7f0000000500)=[{0x1000, 0x8, 0x80, 0x6}, {0x4, 0x4, 0x8, 0x6}, {0x80, 0x0, 0x0, 0xfffffff2}, {0xe, 0x0, 0x2, 0x5f0}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.774601843s ago: executing program 1 (id=1976): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0x2020) 1.381155294s ago: executing program 2 (id=1977): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="66643d679144e6777f53d566cac88d1bec17c078591a220b109423cf441b59a0962195a12ba1b7a58fbd1dd609f637", @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c67720b689683c0dc892d9d34626a6f75705f69643d", @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e310000000000000000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FE_SET_PROPERTY(r3, 0x40086f52, &(0x7f0000000240)={0x18, &(0x7f0000000100)=[{0x1c, '\x00', @buffer={"1a2a50f3cdf6828302ecf0658018d4d8acbcceb6ff7d205f4fe22662647881c8", 0x20}, 0x3}]}) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r8, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) r10 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0/file0\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) write$FUSE_INTERRUPT(r6, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r9}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0xffff, r5, 0x0}]) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 671.694412ms ago: executing program 2 (id=1978): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xed]}, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x1000, @local, 0x2}, r3, 0x8401}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 543.689356ms ago: executing program 1 (id=1979): socket$kcm(0x21, 0x2, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x4, 0x3, 0x1, 0x101, 0x1000, 0x9, 0x3, 0x3, 0xfffffffe, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x20100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x9, 0x8000100, 0x3, 0xfffff5b2, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x7, 0x101, 0xd7, 0xb780, 0xa, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x3, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x6, 0x2, 0x4, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x3, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x6, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5a, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 350.567911ms ago: executing program 1 (id=1980): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00']) 299.839042ms ago: executing program 1 (id=1981): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 258.866223ms ago: executing program 4 (id=1982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r2, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={r7, 0x5, 0x20}, &(0x7f00000001c0)=0x18) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x1, 0x12c, @pic={0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x20, 0xe}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 137.562916ms ago: executing program 1 (id=1983): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040a01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 112.910687ms ago: executing program 0 (id=1984): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x5, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) unshare(0x28040600) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200"/15, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c90"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x50, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000880)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xd4, 0xfffff014}, {0x6, 0x0, 0x4, 0x8}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {0x0}, {&(0x7f0000000e80)}], 0x4}}], 0x2, 0x0) 0s ago: executing program 1 (id=1985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) kernel console output (not intermixed with test programs): .523403][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 588.536430][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 588.555006][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 588.565614][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 588.577747][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 588.629400][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 588.658571][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 588.694833][ T13] gspca_vc032x: Unknown sensor... [ 588.700200][ T13] vc032x: probe of 1-1:0.0 failed with error -22 [ 588.729109][ T13] usb 1-1: USB disconnect, device number 36 [ 588.807385][ T4471] usb 5-1: string descriptor 0 read error: -22 [ 588.835741][ T4471] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 588.845113][ T4471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.920115][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 589.737306][ T4471] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 589.846259][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 589.893578][ T4471] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 589.969866][ T4471] usb 5-1: USB disconnect, device number 34 [ 590.160269][ T4470] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 590.310264][ T7667] udevd[7667]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.780140][ T4470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 591.710657][ T4470] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.736220][ T4470] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.790263][ T4470] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 591.805430][ T4470] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 591.820163][ T4470] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 591.940089][ T4470] usb 2-1: config 1 interface 1 has no altsetting 0 [ 592.250338][ T4470] usb 2-1: string descriptor 0 read error: -22 [ 592.256832][ T4470] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 592.300229][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.224913][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 596.320220][ T4471] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 596.327970][ T4470] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 596.359798][ T4470] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 596.530313][ T4470] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 596.558643][ T4470] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 596.600208][ T4470] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 596.642794][ T4470] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 596.690552][ T8970] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 596.699054][ T8970] device veth0_vlan left promiscuous mode [ 596.707337][ T8970] device veth0_vlan entered promiscuous mode [ 596.717387][ T8970] team0: Device veth0_vlan failed to register rx_handler [ 596.727034][ T4470] usb 2-1: USB disconnect, device number 26 [ 596.730428][ T4630] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 596.980139][ T4630] usb 4-1: Using ep0 maxpacket: 8 [ 597.007343][ T8977] kvm [8976]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2, nop [ 597.570494][ T4630] usb 4-1: string descriptor 0 read error: -22 [ 597.583081][ T4630] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 597.701455][ T4630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.013354][ T4630] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 598.033400][ T8986] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 598.077910][ T4630] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 598.222726][ T4630] usb 4-1: USB disconnect, device number 29 [ 598.235120][ T7667] udevd[7667]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.444521][ T8987] bond1: (slave gretap1): making interface the new active one [ 598.481657][ T8987] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 599.040640][ T8996] lo speed is unknown, defaulting to 1000 [ 599.260078][ T4855] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 599.600476][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 601.114112][ T4855] usb 5-1: Using ep0 maxpacket: 16 [ 601.250247][ T4855] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 601.273885][ T9016] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 601.282174][ T9016] device veth0_vlan left promiscuous mode [ 601.288589][ T9016] device veth0_vlan entered promiscuous mode [ 601.295774][ T9016] team0: Device veth0_vlan failed to register rx_handler [ 601.304077][ T4855] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 601.595670][ T4855] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 601.605814][ T4855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.634757][ T4855] usb 5-1: Product: syz [ 601.639080][ T4855] usb 5-1: Manufacturer: syz [ 601.646714][ T9023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 601.653704][ T9023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.669231][ T9023] vhci_hcd vhci_hcd.0: Device attached [ 601.724828][ T4855] usb 5-1: SerialNumber: syz [ 602.430287][ T9025] vhci_hcd: connection closed [ 602.564706][ T4401] vhci_hcd: stop threads [ 602.600101][ T4855] usb 5-1: can't set config #4, error -71 [ 602.617214][ T4855] usb 5-1: USB disconnect, device number 35 [ 602.626336][ T4401] vhci_hcd: release socket [ 602.650147][ T4630] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 602.659939][ T4401] vhci_hcd: disconnect device [ 602.725895][ T4470] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 602.880366][ T4470] usb 35-1: enqueue for inactive port 0 [ 602.970300][ T4470] vhci_hcd: vhci_device speed not set [ 603.400179][ T4630] usb 1-1: Using ep0 maxpacket: 16 [ 603.521368][ T4630] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.571090][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 603.660038][ T4630] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 603.694965][ T4630] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 603.707965][ T4630] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 603.827604][ T4265] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 604.063842][ T4630] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 604.313189][ T4630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 604.340107][ T4630] usb 1-1: SerialNumber: syz [ 604.350108][ T4265] usb 5-1: Using ep0 maxpacket: 8 [ 604.369401][ T9032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 604.381442][ T9032] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 604.396153][ T4630] hub 1-1:1.0: bad descriptor, ignoring hub [ 604.408808][ T4630] hub: probe of 1-1:1.0 failed with error -5 [ 604.627350][ T9030] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 604.645439][ T9030] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 604.716240][ T4265] usb 5-1: string descriptor 0 read error: -22 [ 604.812340][ T4265] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 604.829268][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.980173][ T4855] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 605.266344][ T4855] usb 4-1: Using ep0 maxpacket: 32 [ 605.439413][ T4630] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 605.723921][ T4265] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 605.810653][ T4265] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 605.818199][ T9030] udc-core: couldn't find an available UDC or it's busy [ 605.844391][ T9030] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 605.917810][ T4855] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 605.936197][ T4265] usb 5-1: USB disconnect, device number 36 [ 605.937512][ T4855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.943224][ T7667] udevd[7667]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.005527][ T4855] usb 4-1: Product: syz [ 606.009792][ T4855] usb 4-1: Manufacturer: syz [ 606.039536][ T4855] usb 4-1: SerialNumber: syz [ 606.054850][ T4855] usb 4-1: config 0 descriptor?? [ 606.128009][ T4855] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 606.260345][ T4191] usb 1-1: USB disconnect, device number 37 [ 606.268086][ T4191] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 607.434697][ T9115] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 607.970298][ T4855] gspca_ov534_9: reg_w failed -71 [ 608.360159][ T4855] gspca_ov534_9: Unknown sensor 0000 [ 608.360287][ T4855] ov534_9: probe of 4-1:0.0 failed with error -22 [ 608.457813][ T4855] usb 4-1: USB disconnect, device number 30 [ 611.199487][ T9167] netlink: 'syz.4.1365': attribute type 10 has an invalid length. [ 611.208010][ T9167] device veth0_vlan left promiscuous mode [ 611.214805][ T9167] device veth0_vlan entered promiscuous mode [ 611.221927][ T9167] team0: Device veth0_vlan failed to register rx_handler [ 617.990145][ T9181] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 618.088702][ T9215] binder: 9214:9215 ioctl 4018620d 0 returned -22 [ 618.141523][ T9216] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1378'. [ 618.470284][ T9181] usb 5-1: unable to get BOS descriptor or descriptor too short [ 618.570207][ T9181] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 618.578000][ T9181] usb 5-1: can't read configurations, error -71 [ 623.851387][ T9270] binder: 9268:9270 ioctl 4018620d 0 returned -22 [ 623.901307][ T9270] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1391'. [ 624.098768][ T9266] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 624.196185][ T9266] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 624.321610][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.328258][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.650271][ T9336] binder: 9334:9336 ioctl 4018620d 0 returned -22 [ 629.673032][ T9336] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1409'. [ 630.180171][ T23] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 630.547920][ T9351] ALSA: mixer_oss: invalid OSS volume '' [ 631.196697][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.210830][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 631.228371][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 631.783052][ T23] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 631.793663][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.860424][ T9367] device syzkaller0 entered promiscuous mode [ 632.900167][ T23] usb 1-1: can't set config #1, error -71 [ 632.920292][ T23] usb 1-1: USB disconnect, device number 38 [ 633.747548][ T23] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 633.787132][ T9388] binder: 9386:9388 ioctl 4018620d 0 returned -22 [ 633.906495][ T9388] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1425'. [ 634.345540][ T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 634.498985][ T23] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 634.525307][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.940246][ T4231] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 635.413161][ T23] usb 4-1: string descriptor 0 read error: -71 [ 635.421518][ T23] cypress_m8 4-1:2.0: HID->COM RS232 Adapter converter detected [ 635.429901][ T23] cyphidcom ttyUSB0: required endpoint is missing [ 635.448392][ T23] usb 4-1: USB disconnect, device number 31 [ 635.456759][ T23] cypress_m8 4-1:2.0: device disconnected [ 636.010087][ T4231] usb 1-1: device descriptor read/64, error -71 [ 637.132231][ T4231] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 637.274167][ T9416] Zero length message leads to an empty skb [ 637.321783][ T9416] device syzkaller0 entered promiscuous mode [ 637.418985][ T4231] usb 1-1: device descriptor read/64, error -71 [ 637.550860][ T4231] usb usb1-port1: attempt power cycle [ 637.580075][ T4455] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 637.819346][ T9433] binder: 9432:9433 ioctl 4018620d 0 returned -22 [ 637.847168][ T9433] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1439'. [ 637.940060][ T4455] usb 4-1: Using ep0 maxpacket: 8 [ 638.700282][ T4455] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 638.721381][ T4455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.792499][ T4455] pvrusb2: Hardware description: Terratec Grabster AV400 [ 638.799596][ T4455] pvrusb2: ********** [ 638.813910][ T4455] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 638.863484][ T4455] pvrusb2: Important functionality might not be entirely working. [ 638.883836][ T4455] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 638.904201][ T4455] pvrusb2: ********** [ 638.998942][ T9443] Cannot find del_set index 1 as target [ 639.010252][ T2425] pvrusb2: Invalid write control endpoint [ 639.060131][ T4231] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 639.155872][ T2425] pvrusb2: Invalid write control endpoint [ 639.169017][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 639.195723][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 639.269023][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 639.451481][ T4455] usb 4-1: USB disconnect, device number 32 [ 639.460237][ T4231] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 639.468790][ T4231] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 639.480026][ T2425] pvrusb2: Device being rendered inoperable [ 639.486271][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 639.516314][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 640.323656][ T4231] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 640.334152][ T4231] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 640.345670][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 640.356157][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 640.366734][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 640.388559][ T2425] pvrusb2: Attached sub-driver cx25840 [ 641.073664][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 641.096784][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 641.325627][ T4231] usb 3-1: string descriptor 0 read error: -22 [ 641.333106][ T4231] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 641.353439][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.377508][ T4231] usb 3-1: config 0 descriptor?? [ 641.430987][ T4231] hub 3-1:0.0: bad descriptor, ignoring hub [ 641.447292][ T4231] hub: probe of 3-1:0.0 failed with error -5 [ 641.465793][ T4231] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 641.550152][ T4265] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 641.583749][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.592107][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.950959][ T4265] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 642.184967][ T4231] usb 3-1: USB disconnect, device number 31 [ 642.627423][ T9483] binder: 9482:9483 ioctl 4018620d 0 returned -22 [ 642.635435][ T9483] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1451'. [ 643.297613][ T4265] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 643.315197][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.323788][ T4265] usb 2-1: Product: syz [ 643.328002][ T4265] usb 2-1: Manufacturer: syz [ 643.333204][ T4265] usb 2-1: SerialNumber: syz [ 643.423227][ T9496] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 643.434708][ T9496] SQUASHFS error: Failed to read block 0x0: -5 [ 643.452444][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 644.226834][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.373647][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.720143][ T4855] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 644.970084][ T4855] usb 4-1: Using ep0 maxpacket: 8 [ 645.090350][ T4855] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 645.125327][ T4855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.183691][ T9422] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.197093][ T9422] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.214181][ T4855] pvrusb2: Hardware description: Terratec Grabster AV400 [ 645.224312][ T9422] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.233756][ T4855] pvrusb2: ********** [ 645.237873][ T4855] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 645.248396][ T4855] pvrusb2: Important functionality might not be entirely working. [ 645.248563][ T9422] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.257025][ T4855] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 645.277143][ T4855] pvrusb2: ********** [ 645.364696][ T9422] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.373710][ T9422] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.382679][ T9422] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.391644][ T9422] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.413940][ T4227] lo speed is unknown, defaulting to 1000 [ 645.477139][ T2425] pvrusb2: Invalid write control endpoint [ 645.487008][ T9471] lo speed is unknown, defaulting to 1000 [ 645.583390][ T9474] lo speed is unknown, defaulting to 1000 [ 645.648654][ T4854] usb 4-1: USB disconnect, device number 33 [ 645.661926][ T2425] pvrusb2: Invalid write control endpoint [ 645.669639][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 645.690737][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 645.698731][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 645.726005][ T2425] pvrusb2: Device being rendered inoperable [ 645.732715][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 645.740508][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 645.763156][ T2425] pvrusb2: Attached sub-driver cx25840 [ 645.769219][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 645.806386][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 646.685588][ T9531] binder: 9530:9531 ioctl 4018620d 0 returned -22 [ 646.713067][ T9531] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1467'. [ 646.882138][ T9181] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 648.070143][ T9181] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 648.249659][ T9181] usb 4-1: config 0 has no interface number 0 [ 648.286797][ T9181] usb 4-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 648.325449][ T9181] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 648.335789][ T9181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.363441][ T9181] usb 4-1: config 0 descriptor?? [ 648.390349][ T9528] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 648.580210][ T4265] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -110 [ 648.628493][ T4854] usb 4-1: USB disconnect, device number 34 [ 648.640533][ T4265] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 648.720834][ T4265] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 648.752795][ T4265] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 648.795259][ T4265] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 648.838550][ T4265] lan78xx: probe of 2-1:1.0 failed with error -32 [ 649.431753][ T9560] device syzkaller0 entered promiscuous mode [ 649.824316][ T4637] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 650.390442][ T4637] usb 4-1: Using ep0 maxpacket: 8 [ 650.560340][ T4637] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 650.579832][ T4637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.652325][ T4637] pvrusb2: Hardware description: Terratec Grabster AV400 [ 650.659428][ T4637] pvrusb2: ********** [ 650.670207][ T4265] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 650.688340][ T4637] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 650.724744][ T9579] binder: 9578:9579 ioctl 4018620d 0 returned -22 [ 650.729637][ T4637] pvrusb2: Important functionality might not be entirely working. [ 650.759976][ T4637] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 650.765045][ T9579] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1480'. [ 650.795996][ T4637] pvrusb2: ********** [ 650.865658][ T2425] pvrusb2: Invalid write control endpoint [ 650.920142][ T4265] usb 1-1: Using ep0 maxpacket: 16 [ 650.984256][ T2425] pvrusb2: Invalid write control endpoint [ 650.996773][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 651.040287][ T4265] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 651.058960][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 651.068954][ T4265] usb 1-1: config 0 has no interface number 0 [ 651.098342][ T4265] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 651.119746][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 651.171740][ T2425] pvrusb2: Device being rendered inoperable [ 651.177807][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 651.185537][ T4265] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 651.257490][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 651.281475][ T4321] usb 4-1: USB disconnect, device number 35 [ 651.301179][ T2425] pvrusb2: Attached sub-driver cx25840 [ 651.313215][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 651.360314][ T4265] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 651.390155][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 651.398302][ T4265] usb 1-1: Product: syz [ 651.405418][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 651.455963][ T4265] usb 1-1: SerialNumber: syz [ 651.481235][ T4265] usb 1-1: config 0 descriptor?? [ 651.533574][ T4265] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 651.610065][ T4265] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input20 [ 651.736737][ T9584] device syzkaller0 entered promiscuous mode [ 651.747595][ T4265] usb 1-1: USB disconnect, device number 42 [ 651.760312][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 651.767671][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 651.811914][ T4265] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 652.200313][ T9181] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 652.267185][ T4637] usb 2-1: USB disconnect, device number 27 [ 652.560081][ T9181] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 652.568686][ T9181] usb 4-1: config 0 has no interface number 0 [ 652.575717][ T9181] usb 4-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 652.587422][ T9181] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 652.597398][ T9181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.020732][ T9181] usb 4-1: config 0 descriptor?? [ 653.040517][ T9593] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 653.150233][ T4637] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 653.272184][ T9606] device syzkaller0 entered promiscuous mode [ 653.362932][ T9181] usb 4-1: USB disconnect, device number 36 [ 653.530199][ T4637] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.543618][ T4637] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 653.543793][ T9617] binder: 9616:9617 ioctl 4018620d 0 returned -22 [ 653.553879][ T4637] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 653.595483][ T9619] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1492'. [ 653.609894][ T4637] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 653.660018][ T4637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.830455][ T9599] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 653.862330][ T4637] hub 2-1:1.0: bad descriptor, ignoring hub [ 653.872208][ T4637] hub: probe of 2-1:1.0 failed with error -5 [ 653.915823][ T4637] cdc_wdm 2-1:1.0: skipping garbage [ 653.944073][ T4637] cdc_wdm 2-1:1.0: skipping garbage [ 653.977037][ T4637] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 653.997894][ T4637] cdc_wdm 2-1:1.0: Unknown control protocol [ 654.370685][ T4321] usb 2-1: USB disconnect, device number 28 [ 654.466483][ T9627] device syzkaller0 entered promiscuous mode [ 656.889502][ T9653] device syzkaller0 entered promiscuous mode [ 657.140048][ T4321] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 657.310055][ T4630] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 657.330098][ T4854] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 657.413211][ T9669] binder: 9668:9669 ioctl 4018620d 0 returned -22 [ 657.421452][ T9669] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1507'. [ 657.660170][ T4321] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 657.669562][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.690163][ T4321] usb 4-1: Product: syz [ 657.694629][ T4321] usb 4-1: Manufacturer: syz [ 657.699505][ T4321] usb 4-1: SerialNumber: syz [ 657.723136][ T4321] usb 4-1: config 0 descriptor?? [ 657.740184][ T4630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 657.752412][ T4630] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 657.762965][ T4854] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 657.771915][ T4630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 657.776370][ T4321] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 657.789024][ T4854] usb 3-1: config 0 has no interface number 0 [ 657.796504][ T4854] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 657.808879][ T4630] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 657.820380][ T4854] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 657.830062][ T4630] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 657.839840][ T4854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.848260][ T4630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.869392][ T4854] usb 3-1: config 0 descriptor?? [ 657.880579][ T4630] usb 5-1: config 0 descriptor?? [ 657.920430][ T9664] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 658.163887][ T4227] usb 3-1: USB disconnect, device number 32 [ 658.170382][ T4630] hdpvr 5-1:0.0: firmware version 0x0 dated [ 658.181885][ T4630] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 658.199372][ T26] audit: type=1326 audit(1777391422.258:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.237313][ T26] audit: type=1326 audit(1777391422.288:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.281326][ T9655] netlink: 'syz.3.1503': attribute type 4 has an invalid length. [ 658.299668][ T26] audit: type=1326 audit(1777391422.288:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.324847][ T26] audit: type=1326 audit(1777391422.288:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.357667][ T26] audit: type=1326 audit(1777391422.288:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.384756][ T26] audit: type=1326 audit(1777391422.288:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.410195][ T26] audit: type=1326 audit(1777391422.288:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.452957][ T26] audit: type=1326 audit(1777391422.298:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.501336][ T9673] netlink: 'syz.3.1503': attribute type 4 has an invalid length. [ 658.550239][ T26] audit: type=1326 audit(1777391422.298:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.650173][ T26] audit: type=1326 audit(1777391422.298:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 658.745068][ T9676] device syzkaller0 entered promiscuous mode [ 658.828708][ T4321] usb 4-1: USB disconnect, device number 37 [ 659.712582][ T4630] hdpvr 5-1:0.0: Could not setup controls [ 659.939005][ T4630] hdpvr 5-1:0.0: registering videodev failed [ 659.952477][ T4630] hdpvr: probe of 5-1:0.0 failed with error -71 [ 659.961728][ T4630] usb 5-1: USB disconnect, device number 39 [ 660.726231][ T9698] kvm [9697]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x187 data 0x1 [ 660.760427][ T9698] kvm [9697]: vcpu0, guest rIP: 0x1b8 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 660.774066][ T9698] kvm [9697]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x1 [ 660.784945][ T9698] kvm [9697]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x187 data 0x1 [ 660.820191][ T4227] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 660.987947][ T9711] device syzkaller0 entered promiscuous mode [ 661.085641][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 661.330043][ T4321] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 661.400226][ T4227] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 661.413917][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.425281][ T4227] usb 2-1: Product: syz [ 661.429567][ T4227] usb 2-1: Manufacturer: syz [ 661.438126][ T4227] usb 2-1: SerialNumber: syz [ 661.447536][ T4227] usb 2-1: config 0 descriptor?? [ 661.474216][ T9716] binder: 9715:9716 ioctl 4018620d 0 returned -22 [ 661.483586][ T9716] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1518'. [ 661.502004][ T4227] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 661.570084][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 661.690178][ T4321] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 172, changing to 7 [ 661.706324][ T4321] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 7 [ 661.870262][ T4321] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 661.879890][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.897040][ T4321] usb 5-1: Product: syz [ 661.908882][ T4321] usb 5-1: Manufacturer: syz [ 661.914493][ T4321] usb 5-1: SerialNumber: syz [ 662.140222][ T4227] gspca_ov534_9: reg_w failed -71 [ 662.212980][ T4321] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 662.230105][ T4630] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 662.240488][ T4321] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 662.289899][ T4321] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 662.313224][ T4321] usb 5-1: USB disconnect, device number 40 [ 662.560171][ T4227] gspca_ov534_9: Unknown sensor 0000 [ 662.560217][ T4227] ov534_9: probe of 2-1:0.0 failed with error -22 [ 662.602707][ T4227] usb 2-1: USB disconnect, device number 29 [ 662.670279][ T4630] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 662.683647][ T4630] usb 4-1: config 0 has no interface number 0 [ 662.702768][ T4630] usb 4-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 662.732118][ T4630] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 662.742109][ T4630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.750280][ T9181] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 662.769744][ T4630] usb 4-1: config 0 descriptor?? [ 662.790712][ T9722] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 662.850087][ T4321] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 663.028961][ T4630] usb 4-1: USB disconnect, device number 38 [ 663.195255][ T9731] device syzkaller0 entered promiscuous mode [ 663.220333][ T4321] usb 5-1: config 0 has no interfaces? [ 663.226147][ T4321] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 663.242806][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.256400][ T4321] usb 5-1: config 0 descriptor?? [ 663.280338][ T9181] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 663.294772][ T9181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.304767][ T9199] udevd[9199]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.306308][ T9181] usb 3-1: Product: syz [ 663.331052][ T9181] usb 3-1: Manufacturer: syz [ 663.335942][ T9181] usb 3-1: SerialNumber: syz [ 663.370772][ T9181] usb 3-1: config 0 descriptor?? [ 663.544606][ T9181] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 664.077532][ T9181] gspca_sunplus: reg_r err -110 [ 664.446611][ T4637] usb 5-1: USB disconnect, device number 41 [ 664.600041][ T9744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1528'. [ 664.704092][ T9741] fuse: root generation should be zero [ 664.713082][ T9744] device syzkaller0 entered promiscuous mode [ 664.811324][ T26] kauditd_printk_skb: 72 callbacks suppressed [ 664.811338][ T26] audit: type=1326 audit(1777391428.878:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 664.863282][ T9749] netlink: 'syz.2.1521': attribute type 4 has an invalid length. [ 665.093316][ T26] audit: type=1326 audit(1777391428.908:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.175186][ T26] audit: type=1326 audit(1777391428.908:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.243038][ T26] audit: type=1326 audit(1777391428.908:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.295630][ T26] audit: type=1326 audit(1777391428.908:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.319071][ T9753] netlink: 'syz.2.1521': attribute type 4 has an invalid length. [ 665.387551][ T26] audit: type=1326 audit(1777391428.908:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.454395][ T26] audit: type=1326 audit(1777391428.908:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.477571][ T26] audit: type=1326 audit(1777391428.908:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.524994][ T26] audit: type=1326 audit(1777391428.908:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.566236][ T9759] binder: 9758:9759 ioctl 4018620d 0 returned -22 [ 665.574329][ T9759] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1531'. [ 665.598266][ T26] audit: type=1326 audit(1777391428.908:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9723 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfc422dd9 code=0x7ffc0000 [ 665.636202][ T9181] usb 3-1: USB disconnect, device number 33 [ 665.648065][ T9757] device syzkaller0 entered promiscuous mode [ 665.802463][ T9773] device syzkaller0 entered promiscuous mode [ 665.940077][ T4630] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 666.210190][ T4630] usb 1-1: Using ep0 maxpacket: 16 [ 667.130114][ T4630] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 667.159640][ T4630] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 667.191797][ T9791] securityfs: Unknown parameter '' [ 667.370091][ T4227] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 667.380465][ T4630] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 667.620006][ T4471] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 668.011048][ T4630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.040358][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 668.602986][ T4630] usb 1-1: Product: syz [ 668.701063][ T4630] usb 1-1: Manufacturer: syz [ 668.712789][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.780328][ T4630] usb 1-1: SerialNumber: syz [ 668.803579][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.012164][ T4227] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 669.171491][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.579293][ T4227] usb 3-1: config 0 descriptor?? [ 669.640774][ T4630] usb 1-1: can't set config #6, error -71 [ 669.701213][ T4227] hub 3-1:0.0: USB hub found [ 669.708959][ T4630] usb 1-1: USB disconnect, device number 43 [ 669.920337][ T4227] hub 3-1:0.0: 1 port detected [ 670.170256][ T4471] usb 5-1: device descriptor read/all, error -71 [ 670.428579][ T9810] sctp: [Deprecated]: syz.4.1547 (pid 9810) Use of int in maxseg socket option. [ 670.428579][ T9810] Use struct sctp_assoc_value instead [ 670.560123][ T4231] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 670.580892][ T4227] hub 3-1:0.0: activate --> -90 [ 670.826712][ T4630] usb 3-1: USB disconnect, device number 34 [ 670.843186][ T4227] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 671.175895][ T4231] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 671.195414][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.221592][ T4231] usb 4-1: Product: syz [ 671.227979][ T4231] usb 4-1: Manufacturer: syz [ 671.228004][ T4231] usb 4-1: SerialNumber: syz [ 671.241397][ T4231] usb 4-1: config 0 descriptor?? [ 671.282263][ T4231] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 671.730065][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 671.730084][ T26] audit: type=1326 audit(1777391435.768:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 671.842262][ T9803] netlink: 'syz.3.1543': attribute type 4 has an invalid length. [ 671.915561][ T26] audit: type=1326 audit(1777391435.768:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 671.938619][ T26] audit: type=1326 audit(1777391435.768:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 672.262983][ T26] audit: type=1326 audit(1777391435.768:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 672.378066][ T9827] binder: 9826:9827 ioctl 4018620d 0 returned -22 [ 672.385755][ T9827] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1550'. [ 672.405558][ T26] audit: type=1326 audit(1777391435.768:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 672.437448][ T26] audit: type=1326 audit(1777391435.768:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 672.468098][ T26] audit: type=1326 audit(1777391435.768:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 672.510125][ T9822] netlink: 'syz.3.1543': attribute type 4 has an invalid length. [ 672.543503][ T26] audit: type=1326 audit(1777391435.888:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 672.572506][ T26] audit: type=1326 audit(1777391435.888:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1e6e03b42 code=0x7ffc0000 [ 672.602599][ T26] audit: type=1326 audit(1777391435.888:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9800 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff1e6e03bd7 code=0x7ffc0000 [ 672.850012][ T4231] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 672.871008][ T9835] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 672.871316][ T9835] SQUASHFS error: Failed to read block 0x0: -5 [ 673.350256][ T4630] usb 4-1: USB disconnect, device number 39 [ 673.470199][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 673.523572][ T9844] securityfs: Unknown parameter '' [ 673.730131][ T1325] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 674.850118][ T4231] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 675.080424][ T1325] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 675.123798][ T1325] usb 1-1: config 0 has no interface number 0 [ 675.232581][ T1325] usb 1-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 675.311503][ T1325] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 675.349777][ T9845] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 675.375816][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.646464][ T1325] usb 1-1: config 0 descriptor?? [ 675.786013][ T9840] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 676.588393][ T4231] usb 2-1: config 0 has no interface number 0 [ 676.594788][ T4231] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 676.640140][ T4231] usb 2-1: string descriptor 0 read error: -71 [ 676.646413][ T4231] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 676.655978][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 676.671270][ T4231] usb 2-1: config 0 descriptor?? [ 676.710189][ T4231] usb 2-1: can't set config #0, error -71 [ 676.717433][ T4227] usb 1-1: USB disconnect, device number 44 [ 676.754298][ T4231] usb 2-1: USB disconnect, device number 30 [ 678.060714][ T9869] device ip6gretap1 entered promiscuous mode [ 678.109686][ T9873] binder: 9872:9873 ioctl 4018620d 0 returned -22 [ 678.161884][ T9875] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1565'. [ 678.332685][ T4471] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 678.456016][ T9882] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 678.467517][ T9882] SQUASHFS error: Failed to read block 0x0: -5 [ 678.493008][ T4227] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 678.792273][ T4471] usb 2-1: Using ep0 maxpacket: 32 [ 679.342845][ T4471] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 679.365388][ T4471] usb 2-1: config 0 has no interface number 0 [ 679.378211][ T4471] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 679.436907][ T4471] usb 2-1: config 0 interface 89 has no altsetting 0 [ 679.453850][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 679.560057][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 679.565749][ T9886] device macvlan2 entered promiscuous mode [ 679.660634][ T4471] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 679.671312][ T4471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.679491][ T4471] usb 2-1: Product: syz [ 679.689808][ T4471] usb 2-1: Manufacturer: syz [ 679.700047][ T4471] usb 2-1: SerialNumber: syz [ 679.747570][ T4471] usb 2-1: config 0 descriptor?? [ 679.754140][ T9886] device syz_tun entered promiscuous mode [ 679.754602][ T4227] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 679.828367][ T4471] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 679.858528][ T4471] em28xx 2-1:0.89: Video interface 89 found: [ 680.114748][ T4227] usb 4-1: config 0 has no interface number 0 [ 680.155877][ T4227] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 680.319533][ T4227] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 680.340099][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 680.364039][ T4227] usb 4-1: Product: syz [ 680.370211][ T4227] usb 4-1: SerialNumber: syz [ 680.390557][ T4227] usb 4-1: config 0 descriptor?? [ 680.432032][ T4227] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 680.530111][ T4471] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 681.600158][ T4630] usb 4-1: USB disconnect, device number 40 [ 681.764789][ T9905] securityfs: Unknown parameter '' [ 681.840104][ T4471] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 682.020991][ T9865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1562'. [ 684.200199][ T4286] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 684.450285][ T4471] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 684.460469][ T4286] usb 4-1: Using ep0 maxpacket: 32 [ 684.470238][ T4471] em28xx 2-1:0.89: board has no eeprom [ 684.600141][ T4471] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 684.609349][ T4471] em28xx 2-1:0.89: analog set to bulk mode. [ 684.648856][ T4321] em28xx 2-1:0.89: Registering V4L2 extension [ 684.663945][ T4471] usb 2-1: USB disconnect, device number 31 [ 684.689014][ T4471] em28xx 2-1:0.89: Disconnecting em28xx [ 684.760215][ T4286] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 684.779840][ T4286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.817646][ T4286] usb 4-1: Product: syz [ 684.818576][ T4321] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 684.823010][ T4286] usb 4-1: Manufacturer: syz [ 684.855517][ T4321] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 684.880983][ T4321] em28xx 2-1:0.89: No AC97 audio processor [ 685.072881][ T4321] usb 2-1: Decoder not found [ 685.077585][ T4321] em28xx 2-1:0.89: failed to create media graph [ 685.153446][ T9918] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 685.164933][ T9918] SQUASHFS error: Failed to read block 0x0: -5 [ 685.881157][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.882831][ T4286] usb 4-1: config 0 descriptor?? [ 685.887792][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.920059][ T4286] usb 4-1: can't set config #0, error -71 [ 685.940421][ T4321] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 686.000278][ T9921] binder: 9919:9921 ioctl 4018620d 0 returned -22 [ 686.029346][ T4321] em28xx 2-1:0.89: Registering snapshot button... [ 686.036817][ T4286] usb 4-1: USB disconnect, device number 41 [ 686.054101][ T9921] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1579'. [ 686.115659][ T4321] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input21 [ 686.731232][ T4321] em28xx 2-1:0.89: Remote control support is not available for this card. [ 686.761410][ T4471] em28xx 2-1:0.89: Closing input extension [ 686.787540][ T4471] em28xx 2-1:0.89: Deregistering snapshot button [ 686.984856][ T4286] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 687.076874][ T4471] em28xx 2-1:0.89: Freeing device [ 687.245732][ T4286] usb 4-1: Using ep0 maxpacket: 32 [ 687.280164][ T4231] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 687.373895][ T4286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 687.387870][ T4286] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 687.870248][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.891148][ T4471] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 688.232500][ T4231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 688.242037][ T4231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 688.253602][ T4231] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 688.263000][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.388903][ T4286] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 688.398322][ T4286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.401218][ T9928] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 688.406585][ T4286] usb 4-1: Product: syz [ 688.417867][ T4286] usb 4-1: Manufacturer: syz [ 688.434927][ T4286] usb 4-1: SerialNumber: syz [ 688.461261][ T4231] hub 5-1:1.0: bad descriptor, ignoring hub [ 688.477742][ T4231] hub: probe of 5-1:1.0 failed with error -5 [ 688.480422][ T4286] usb 4-1: config 0 descriptor?? [ 688.489143][ T4231] cdc_wdm 5-1:1.0: skipping garbage [ 688.507311][ T4231] cdc_wdm 5-1:1.0: skipping garbage [ 688.545294][ T4231] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 688.551489][ T4471] usb 2-1: Using ep0 maxpacket: 32 [ 688.582991][ T4231] cdc_wdm 5-1:1.0: Unknown control protocol [ 688.690397][ T4471] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 688.720066][ T4471] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 688.739104][ T4471] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 688.759041][ T4471] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.789482][ T4471] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 688.813832][ T4471] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 688.872254][ T4471] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 688.884928][ T4471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.896514][ T4471] usb 2-1: config 0 descriptor?? [ 688.905486][ T4231] usb 4-1: USB disconnect, device number 42 [ 689.020361][ T9181] usb 5-1: USB disconnect, device number 44 [ 689.121640][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1589'. [ 689.163917][ T4471] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 689.205757][ T9181] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 689.422358][ T4471] usb 2-1: USB disconnect, device number 32 [ 689.451045][ T4471] usblp0: removed [ 689.497257][ T9953] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 689.508760][ T9953] SQUASHFS error: Failed to read block 0x0: -5 [ 690.283128][ T9181] usb 3-1: Using ep0 maxpacket: 32 [ 690.471390][ T9961] binder: 9959:9961 ioctl 4018620d 0 returned -22 [ 690.479582][ T9961] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1593'. [ 690.560603][ T9954] securityfs: Unknown parameter '' [ 690.690878][ T9181] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 690.706657][ T9181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.725076][ T9181] usb 3-1: Product: syz [ 690.729476][ T9181] usb 3-1: Manufacturer: syz [ 690.735365][ T9181] usb 3-1: SerialNumber: syz [ 690.750590][ T9181] usb 3-1: config 0 descriptor?? [ 690.792372][ T9181] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 691.071192][ T13] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 691.361509][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 691.510136][ T13] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 691.518195][ T13] usb 2-1: config 0 has no interface number 0 [ 691.540114][ T13] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 691.663055][ T4231] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 691.671035][ T9181] gspca_ov534_9: reg_w failed -71 [ 691.680477][ T13] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 691.689569][ T13] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 691.705221][ T13] usb 2-1: Product: syz [ 691.709583][ T13] usb 2-1: SerialNumber: syz [ 691.726516][ T13] usb 2-1: config 0 descriptor?? [ 691.784094][ T13] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 691.986618][ T13] usb 2-1: USB disconnect, device number 33 [ 692.030145][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.046090][ T4231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 692.055743][ T4231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 692.067226][ T9181] gspca_ov534_9: Unknown sensor 0000 [ 692.070367][ T9181] ov534_9: probe of 3-1:0.0 failed with error -22 [ 692.088945][ T4231] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 692.104866][ T9181] usb 3-1: USB disconnect, device number 35 [ 692.117044][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.150368][ T9983] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 692.191194][ T4231] hub 1-1:1.0: bad descriptor, ignoring hub [ 692.197170][ T4231] hub: probe of 1-1:1.0 failed with error -5 [ 692.228110][ T4231] cdc_wdm 1-1:1.0: skipping garbage [ 692.249533][ T4231] cdc_wdm 1-1:1.0: skipping garbage [ 692.413671][ T4231] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 692.419718][ T4231] cdc_wdm 1-1:1.0: Unknown control protocol [ 692.531495][ T9994] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 692.543260][ T9994] SQUASHFS error: Failed to read block 0x0: -5 [ 693.400823][ T4231] usb 1-1: USB disconnect, device number 45 [ 693.519775][T10011] securityfs: Unknown parameter '' [ 695.781420][T10016] binder: 10014:10016 ioctl 4018620d 0 returned -22 [ 695.906021][T10016] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1610'. [ 696.299627][T10023] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 696.715078][ T4231] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 696.754797][T10037] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 696.766323][T10037] SQUASHFS error: Failed to read block 0x0: -5 [ 697.670247][ T9181] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 697.720040][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 697.940065][ T9181] usb 1-1: Using ep0 maxpacket: 16 [ 698.655862][ T9181] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 698.670030][ T9181] usb 1-1: config 0 has no interface number 0 [ 698.691085][ T9181] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 698.743121][ T4231] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 698.760118][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.788670][ T4231] usb 5-1: Product: syz [ 698.803381][ T4231] usb 5-1: Manufacturer: syz [ 698.808324][ T4231] usb 5-1: SerialNumber: syz [ 698.833914][ T4231] usb 5-1: config 0 descriptor?? [ 698.863809][ T9181] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 698.890082][ T9181] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 698.904116][ T4231] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 698.917694][ T9181] usb 1-1: Product: syz [ 698.930070][ T9181] usb 1-1: SerialNumber: syz [ 698.944231][ T9181] usb 1-1: config 0 descriptor?? [ 698.992404][ T9181] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 699.194394][ T9181] usb 1-1: USB disconnect, device number 46 [ 699.416177][T10059] securityfs: Unknown parameter '' [ 699.980393][ T4231] gspca_ov534_9: reg_w failed -110 [ 700.430180][ T4231] gspca_ov534_9: Unknown sensor 0000 [ 700.430451][ T4231] ov534_9: probe of 5-1:0.0 failed with error -22 [ 701.240290][ T4231] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 701.340223][ T9181] usb 5-1: USB disconnect, device number 45 [ 701.650736][ T4231] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.692374][ T4231] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 701.932722][ T4231] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 702.896087][ T4231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 702.938159][ T4231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 703.141724][T10080] securityfs: Unknown parameter '' [ 703.170213][ T4231] usb 4-1: string descriptor 0 read error: -71 [ 703.240425][T10082] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 703.252485][T10082] SQUASHFS error: Failed to read block 0x0: -5 [ 704.030566][ T4231] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 704.051147][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 704.080481][ T4231] usb 4-1: can't set config #1, error -71 [ 704.092935][ T4231] usb 4-1: USB disconnect, device number 43 [ 704.319694][T10072] device syzkaller0 entered promiscuous mode [ 707.480076][ T4227] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 707.720045][ T4455] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 707.850017][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 708.150727][ T4227] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 708.168433][ T4227] usb 1-1: config 0 has no interface number 0 [ 708.204178][ T4227] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 708.714889][T10112] securityfs: Unknown parameter '' [ 708.780231][ T4455] usb 3-1: Using ep0 maxpacket: 32 [ 709.101010][ T4455] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 710.132720][ T4455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.194313][ T4455] usb 3-1: Product: syz [ 710.238128][ T4455] usb 3-1: Manufacturer: syz [ 710.280083][ T4227] usb 1-1: string descriptor 0 read error: -71 [ 710.286818][ T4227] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 710.299498][ T4455] usb 3-1: SerialNumber: syz [ 710.402757][ T4455] usb 3-1: config 0 descriptor?? [ 710.530432][ T4455] usb 3-1: can't set config #0, error -71 [ 710.605114][ T4455] usb 3-1: USB disconnect, device number 36 [ 711.444142][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 711.463374][ T4227] usb 1-1: config 0 descriptor?? [ 711.483767][ T4227] usb 1-1: can't set config #0, error -71 [ 711.633606][ T4227] usb 1-1: USB disconnect, device number 47 [ 711.815706][T10123] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 711.828264][T10123] SQUASHFS error: Failed to read block 0x0: -5 [ 712.539986][T10124] securityfs: Unknown parameter '' [ 712.840250][ T4227] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 716.172021][T10130] device syzkaller0 entered promiscuous mode [ 716.213260][T10132] device syzkaller0 entered promiscuous mode [ 717.182301][T10113] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 717.273603][T10160] securityfs: Unknown parameter '' [ 717.280422][ T4455] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 717.480003][T10113] usb 5-1: Using ep0 maxpacket: 8 [ 718.780259][T10113] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 719.519975][ T4455] usb 1-1: Using ep0 maxpacket: 32 [ 719.689293][T10113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.730104][T10113] usb 5-1: can't set config #252, error -71 [ 719.747545][T10113] usb 5-1: USB disconnect, device number 46 [ 719.870222][ T4455] usb 1-1: device descriptor read/all, error -71 [ 720.245542][T10113] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 720.720340][T10113] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 721.259314][T10113] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 721.269759][T10113] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 721.278996][T10113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 721.290231][T10113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 721.376518][T10179] device syzkaller0 entered promiscuous mode [ 721.440322][T10113] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 721.459844][T10113] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 721.474445][T10113] usb 5-1: Product: syz [ 721.478735][T10113] usb 5-1: Manufacturer: syz [ 721.551070][T10113] cdc_wdm 5-1:1.0: skipping garbage [ 721.556364][T10113] cdc_wdm 5-1:1.0: skipping garbage [ 721.615394][T10113] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 721.630350][T10113] cdc_wdm 5-1:1.0: Unknown control protocol [ 721.779507][T10182] device syzkaller0 entered promiscuous mode [ 722.661075][ T4455] usb 5-1: USB disconnect, device number 47 [ 722.818604][T10198] securityfs: Unknown parameter '' [ 723.020277][ T4286] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 723.280490][ T4286] usb 1-1: Using ep0 maxpacket: 8 [ 723.320284][ T13] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 723.410730][ T4286] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 723.468600][ T4286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.600101][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 723.891240][ T13] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 724.262921][ T4286] pvrusb2: Hardware description: Terratec Grabster AV400 [ 724.327328][T10206] securityfs: Unknown parameter '' [ 726.706421][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.883738][ T4286] pvrusb2: ********** [ 727.888144][ T13] usb 4-1: Product: syz [ 727.894017][ T4286] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 727.905676][ T13] usb 4-1: Manufacturer: syz [ 727.911455][ T13] usb 4-1: SerialNumber: syz [ 727.916931][ T4286] pvrusb2: Important functionality might not be entirely working. [ 727.932682][ T4286] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 727.945756][ T13] usb 4-1: config 0 descriptor?? [ 728.136842][ T13] usb 4-1: can't set config #0, error -71 [ 728.220463][ T13] usb 4-1: USB disconnect, device number 44 [ 728.231671][ T4286] pvrusb2: ********** [ 728.250202][ T2425] pvrusb2: Invalid write control endpoint [ 728.333995][ T4286] usb 1-1: USB disconnect, device number 51 [ 728.524413][ T2425] pvrusb2: Invalid write control endpoint [ 728.542291][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 728.609622][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 728.678300][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 728.728389][ T2425] pvrusb2: Device being rendered inoperable [ 728.759162][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 728.789120][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 728.798218][ T2425] pvrusb2: Attached sub-driver cx25840 [ 728.804249][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 728.814887][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 729.974720][T10252] device syzkaller0 entered promiscuous mode [ 730.231985][T10262] securityfs: Unknown parameter '' [ 730.520104][ T4286] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 731.560175][ T4191] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 731.840342][ T4191] usb 4-1: Using ep0 maxpacket: 32 [ 732.180710][ T4191] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 732.212452][ T4191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.276238][ T4191] usb 4-1: Product: syz [ 732.311672][ T4191] usb 4-1: Manufacturer: syz [ 732.345007][ T4191] usb 4-1: SerialNumber: syz [ 732.433953][ T4191] usb 4-1: config 0 descriptor?? [ 732.531300][ T4191] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 732.710090][ T4286] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 733.174833][ T4286] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 733.185291][ T4286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 733.194428][ T4286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 733.206258][ T4286] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 733.370066][ T4286] usb 1-1: string descriptor 0 read error: -71 [ 733.376363][ T4286] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 733.413192][ T4286] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 733.480211][ T4286] usb 1-1: can't set config #1, error -71 [ 733.628206][T10274] securityfs: Unknown parameter '' [ 733.640096][ T4191] gspca_ov534_9: reg_w failed -71 [ 733.768731][T10275] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 733.780836][T10275] SQUASHFS error: Failed to read block 0x0: -5 [ 733.838460][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'. [ 734.518615][ T4286] usb 1-1: USB disconnect, device number 52 [ 736.240033][ T4191] gspca_ov534_9: Unknown sensor 0000 [ 736.240102][ T4191] ov534_9: probe of 4-1:0.0 failed with error -22 [ 736.467179][ T4191] usb 4-1: USB disconnect, device number 45 [ 736.668958][T10312] securityfs: Unknown parameter '' [ 739.304583][T10326] SET target dimension over the limit! [ 739.615478][T10328] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 739.626744][T10328] SQUASHFS error: Failed to read block 0x0: -5 [ 739.635000][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 740.550092][ T4471] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 740.940152][ T4471] usb 2-1: Using ep0 maxpacket: 32 [ 741.780601][ T4471] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 741.849410][ T4471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.858539][ T4471] usb 2-1: Product: syz [ 741.863194][ T4471] usb 2-1: Manufacturer: syz [ 741.867915][ T4471] usb 2-1: SerialNumber: syz [ 741.881152][ T4471] usb 2-1: config 0 descriptor?? [ 741.922302][ T4471] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 742.101506][T10347] securityfs: Unknown parameter '' [ 742.411157][T10357] device syzkaller0 entered promiscuous mode [ 742.630649][ T4471] gspca_ov534_9: reg_w failed -71 [ 742.685696][T10361] device syzkaller0 entered promiscuous mode [ 743.086217][T10369] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 743.097687][T10369] SQUASHFS error: Failed to read block 0x0: -5 [ 743.169975][ T4471] gspca_ov534_9: Unknown sensor 0000 [ 743.170306][ T4471] ov534_9: probe of 2-1:0.0 failed with error -22 [ 743.218584][ T4471] usb 2-1: USB disconnect, device number 34 [ 745.731127][T10376] securityfs: Unknown parameter '' [ 746.161506][T10383] device syzkaller0 entered promiscuous mode [ 747.202224][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.210353][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.338948][T10400] device syzkaller0 entered promiscuous mode [ 747.428419][T10402] device syzkaller0 entered promiscuous mode [ 747.523362][T10411] securityfs: Unknown parameter '' [ 750.197578][T10420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 750.666512][T10428] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 750.677996][T10428] SQUASHFS error: Failed to read block 0x0: -5 [ 751.684297][T10437] securityfs: Unknown parameter '' [ 753.880291][ T4855] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 754.250323][ T4855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.293215][ T4855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 755.161201][ T4855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 755.172821][ T4855] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 755.182256][ T4855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.220370][T10441] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 755.281211][ T4855] hub 5-1:1.0: bad descriptor, ignoring hub [ 755.288709][ T4855] hub: probe of 5-1:1.0 failed with error -5 [ 755.298371][ T4855] cdc_wdm 5-1:1.0: skipping garbage [ 755.304166][ T4855] cdc_wdm 5-1:1.0: skipping garbage [ 755.314796][ T4855] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 755.321079][ T4855] cdc_wdm 5-1:1.0: Unknown control protocol [ 755.464006][T10450] device syzkaller0 entered promiscuous mode [ 755.627625][T10457] device syzkaller0 entered promiscuous mode [ 756.049946][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 756.056723][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 756.117450][T10474] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 756.128833][T10474] SQUASHFS error: Failed to read block 0x0: -5 [ 756.886868][T10475] securityfs: Unknown parameter '' [ 756.930430][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 756.937065][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 758.118791][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 758.125458][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 758.131617][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 758.220399][ T4637] usb 5-1: USB disconnect, device number 48 [ 759.575972][T10502] device syzkaller0 entered promiscuous mode [ 759.645407][T10504] device syzkaller0 entered promiscuous mode [ 760.199466][T10517] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 760.211047][T10517] SQUASHFS error: Failed to read block 0x0: -5 [ 761.061011][T10523] SET target dimension over the limit! [ 761.079986][ T4227] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 761.290052][ T4227] usb 4-1: device descriptor read/64, error -71 [ 761.569992][ T4227] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 761.780039][ T4227] usb 4-1: device descriptor read/64, error -71 [ 761.878724][T10529] netlink: 'syz.0.1751': attribute type 29 has an invalid length. [ 761.930202][ T4227] usb usb4-port1: attempt power cycle [ 762.710502][ T4227] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 762.850155][ T4227] usb 4-1: device descriptor read/8, error -71 [ 763.005354][T10540] securityfs: Unknown parameter '' [ 763.210018][ T4227] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 765.792310][ T4227] usb 4-1: device descriptor read/8, error -71 [ 766.197271][ T4227] usb usb4-port1: unable to enumerate USB device [ 766.395294][T10547] device syzkaller0 entered promiscuous mode [ 766.809969][ T4471] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 767.010060][ T4321] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 767.060079][ T4471] usb 2-1: Using ep0 maxpacket: 32 [ 767.290023][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 767.400232][ T4471] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 767.440404][ T4321] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 767.449628][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.464196][ T4471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.484320][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 767.484328][ T4471] usb 2-1: Product: syz [ 767.484334][ T26] audit: type=1326 audit(1777391531.548:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 767.485321][ T26] audit: type=1326 audit(1777391531.548:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.3.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 767.560971][ T4471] usb 2-1: Manufacturer: syz [ 767.583421][ T4471] usb 2-1: SerialNumber: syz [ 767.612280][ T4321] pvrusb2: Hardware description: Terratec Grabster AV400 [ 767.640394][ T4471] usb 2-1: config 0 descriptor?? [ 767.645579][ T4321] pvrusb2: ********** [ 767.649587][ T4321] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 767.701271][ T4321] pvrusb2: Important functionality might not be entirely working. [ 767.712398][ T4471] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 767.750101][ T4321] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 767.792256][ T4321] pvrusb2: ********** [ 767.831548][ T2425] pvrusb2: Invalid write control endpoint [ 767.939033][ T2425] pvrusb2: Invalid write control endpoint [ 767.945126][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 767.955477][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 767.963768][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 767.975700][ T2425] pvrusb2: Device being rendered inoperable [ 767.983187][T10580] SET target dimension over the limit! [ 768.006089][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 768.021925][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 768.049574][ T4231] usb 1-1: USB disconnect, device number 53 [ 768.060727][ T2425] pvrusb2: Attached sub-driver cx25840 [ 768.068055][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 768.089961][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 768.160017][ T4321] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 768.340077][ T4471] gspca_ov534_9: reg_w failed -71 [ 768.410068][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 768.590844][ T4321] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 768.622228][ T4321] usb 5-1: can't read configurations, error -61 [ 768.760160][ T4471] gspca_ov534_9: Unknown sensor 0000 [ 768.760947][ T4471] ov534_9: probe of 2-1:0.0 failed with error -22 [ 768.850078][ T4321] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 768.882906][ T4471] usb 2-1: USB disconnect, device number 35 [ 769.160033][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 769.341347][ T4321] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 769.348987][ T4321] usb 5-1: can't read configurations, error -61 [ 769.436418][ T4321] usb usb5-port1: attempt power cycle [ 769.467133][T10590] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 769.640818][T10594] device syzkaller0 entered promiscuous mode [ 769.778616][T10597] securityfs: Unknown parameter '' [ 769.900030][ T4321] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 770.464371][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 771.440778][ T4321] usb 5-1: device descriptor read/all, error -71 [ 773.529986][ T4321] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 774.489961][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 774.520192][T10586] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 774.660534][ T4321] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 774.712238][T10634] netlink: 'syz.4.1783': attribute type 10 has an invalid length. [ 774.720667][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.721380][T10634] device veth0_vlan left promiscuous mode [ 774.770057][T10634] device veth0_vlan entered promiscuous mode [ 774.800102][T10586] usb 2-1: Using ep0 maxpacket: 32 [ 774.821406][T10634] team0: Device veth0_vlan failed to register rx_handler [ 774.866130][ T4321] pvrusb2: Hardware description: Terratec Grabster AV400 [ 774.874639][ T4321] pvrusb2: ********** [ 774.878785][ T4321] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 774.889143][ T4321] pvrusb2: Important functionality might not be entirely working. [ 774.897329][ T4321] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 774.908822][ T4321] pvrusb2: ********** [ 775.221505][ T2425] pvrusb2: Invalid write control endpoint [ 775.280387][T10586] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 775.310366][T10586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.339966][T10586] usb 2-1: Product: syz [ 775.350358][T10586] usb 2-1: Manufacturer: syz [ 775.360044][T10586] usb 2-1: SerialNumber: syz [ 775.378568][ T2425] pvrusb2: Invalid write control endpoint [ 775.386343][T10586] usb 2-1: config 0 descriptor?? [ 775.395934][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 775.419505][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 775.436698][ T4227] usb 4-1: USB disconnect, device number 50 [ 775.451733][T10586] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 775.458880][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 775.490137][ T2425] pvrusb2: Device being rendered inoperable [ 775.504413][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 775.525153][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 775.546350][ T2425] pvrusb2: Attached sub-driver cx25840 [ 775.578250][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 775.617476][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 776.022266][T10641] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 776.033787][T10641] SQUASHFS error: Failed to read block 0x0: -5 [ 776.121005][ T4471] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 776.820192][T10586] gspca_ov534_9: reg_w failed -71 [ 776.856627][T10645] SET target dimension over the limit! [ 776.862549][ T4471] usb 5-1: Using ep0 maxpacket: 16 [ 777.030130][ T4471] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 777.040426][ T4471] usb 5-1: can't read configurations, error -61 [ 777.190140][ T4471] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 777.210149][T10586] gspca_ov534_9: Unknown sensor 0000 [ 777.210218][T10586] ov534_9: probe of 2-1:0.0 failed with error -22 [ 777.248853][T10586] usb 2-1: USB disconnect, device number 36 [ 777.440364][ T4471] usb 5-1: Using ep0 maxpacket: 16 [ 777.980095][ T4471] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 777.987914][ T4471] usb 5-1: can't read configurations, error -61 [ 778.010759][ T4471] usb usb5-port1: attempt power cycle [ 778.429977][ T4471] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 778.507465][T10661] securityfs: Unknown parameter '' [ 780.529994][ T4471] usb 5-1: device not accepting address 55, error -71 [ 782.442549][T10672] netlink: 'syz.3.1794': attribute type 10 has an invalid length. [ 782.455969][T10672] device veth0_vlan left promiscuous mode [ 782.474363][T10672] device veth0_vlan entered promiscuous mode [ 782.503643][T10672] team0: Device veth0_vlan failed to register rx_handler [ 783.010739][T10675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 783.364092][T10689] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 783.375641][T10689] SQUASHFS error: Failed to read block 0x0: -5 [ 783.470147][ T4471] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 783.570104][T10586] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 784.640811][ T4471] usb 3-1: Using ep0 maxpacket: 8 [ 784.750040][T10586] usb 4-1: Using ep0 maxpacket: 32 [ 784.770235][ T4471] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 784.793143][ T4471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.882493][ T4471] pvrusb2: Hardware description: Terratec Grabster AV400 [ 784.895491][ T4471] pvrusb2: ********** [ 784.906339][ T4471] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 784.931022][ T4471] pvrusb2: Important functionality might not be entirely working. [ 784.952423][ T4471] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 784.981822][ T4471] pvrusb2: ********** [ 785.091592][ T2425] pvrusb2: Invalid write control endpoint [ 785.111576][T10586] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 785.128592][T10586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.161576][T10586] usb 4-1: Product: syz [ 785.178105][T10586] usb 4-1: Manufacturer: syz [ 785.196453][T10586] usb 4-1: SerialNumber: syz [ 785.220701][ T2425] pvrusb2: Invalid write control endpoint [ 785.235320][T10586] usb 4-1: config 0 descriptor?? [ 785.240578][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 785.264598][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 785.287026][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 785.300815][T10586] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 785.315092][ T4471] usb 3-1: USB disconnect, device number 37 [ 785.334619][ T2425] pvrusb2: Device being rendered inoperable [ 785.347505][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 785.368567][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 785.387285][ T2425] pvrusb2: Attached sub-driver cx25840 [ 785.405997][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 785.434648][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 785.616999][T10704] SET target dimension over the limit! [ 785.950084][T10586] gspca_ov534_9: reg_w failed -71 [ 786.151782][T10712] securityfs: Unknown parameter '' [ 786.380271][T10586] gspca_ov534_9: Unknown sensor 0000 [ 786.380536][T10586] ov534_9: probe of 4-1:0.0 failed with error -22 [ 786.526981][T10586] usb 4-1: USB disconnect, device number 51 [ 789.960500][T10725] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 789.972101][T10725] SQUASHFS error: Failed to read block 0x0: -5 [ 790.856178][T10723] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 790.887138][T10723] device veth0_vlan left promiscuous mode [ 790.900912][T10723] device veth0_vlan entered promiscuous mode [ 790.922996][T10723] team0: Device veth0_vlan failed to register rx_handler [ 792.762892][T10586] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 793.030181][T10586] usb 3-1: Using ep0 maxpacket: 8 [ 793.089542][T10756] securityfs: Unknown parameter '' [ 794.490766][T10586] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 794.575349][T10586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.756080][T10586] pvrusb2: Hardware description: Terratec Grabster AV400 [ 794.820155][T10586] pvrusb2: ********** [ 794.848438][T10586] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 794.910557][T10586] pvrusb2: Important functionality might not be entirely working. [ 794.964136][T10586] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 795.077693][T10586] pvrusb2: ********** [ 795.140599][ T2425] pvrusb2: Invalid write control endpoint [ 795.444536][ T9506] usb 3-1: USB disconnect, device number 38 [ 795.951431][T10764] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 795.963692][T10764] SQUASHFS error: Failed to read block 0x0: -5 [ 796.020929][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'. [ 796.651192][T10586] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 796.728697][ T2425] pvrusb2: Invalid write control endpoint [ 797.370040][T10586] usb 4-1: Using ep0 maxpacket: 32 [ 797.558590][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 797.568558][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 797.577341][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 797.587885][ T2425] pvrusb2: Device being rendered inoperable [ 797.595017][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 797.602657][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 797.622939][ T2425] pvrusb2: Attached sub-driver cx25840 [ 797.628685][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 797.640060][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 797.831343][T10586] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 798.320382][T10586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.345677][T10586] usb 4-1: Product: syz [ 798.350617][T10586] usb 4-1: Manufacturer: syz [ 798.355518][T10586] usb 4-1: SerialNumber: syz [ 798.366794][T10586] usb 4-1: config 0 descriptor?? [ 798.570670][T10586] usb 4-1: can't set config #0, error -71 [ 798.608132][T10586] usb 4-1: USB disconnect, device number 52 [ 798.888206][T10772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 799.041365][T10778] netlink: 'syz.3.1826': attribute type 10 has an invalid length. [ 799.084809][T10778] device veth0_vlan left promiscuous mode [ 799.097763][T10778] device veth0_vlan entered promiscuous mode [ 799.107976][T10778] team0: Device veth0_vlan failed to register rx_handler [ 799.742225][T10799] device syzkaller0 entered promiscuous mode [ 800.215513][T10807] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 800.227508][T10807] SQUASHFS error: Failed to read block 0x0: -5 [ 800.293275][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 800.964137][T10808] securityfs: Unknown parameter '' [ 802.170008][T10586] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 802.550024][T10586] usb 1-1: Using ep0 maxpacket: 32 [ 803.308981][T10826] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 803.319458][T10826] device veth0_vlan left promiscuous mode [ 803.333059][T10826] device veth0_vlan entered promiscuous mode [ 803.351995][T10826] team0: Device veth0_vlan failed to register rx_handler [ 803.414092][T10586] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 803.503874][T10586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.783341][T10586] usb 1-1: Product: syz [ 803.788060][T10586] usb 1-1: Manufacturer: syz [ 803.793059][T10586] usb 1-1: SerialNumber: syz [ 803.800393][T10586] usb 1-1: config 0 descriptor?? [ 803.852285][T10586] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 803.977230][T10830] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 804.254891][T10837] device syzkaller0 entered promiscuous mode [ 804.484521][T10842] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 804.495829][T10842] SQUASHFS error: Failed to read block 0x0: -5 [ 804.504623][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1846'. [ 805.290028][T10586] gspca_ov534_9: reg_w failed -71 [ 805.660412][ T4855] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 805.699924][T10586] gspca_ov534_9: Unknown sensor 0000 [ 805.699994][T10586] ov534_9: probe of 1-1:0.0 failed with error -22 [ 806.416142][T10586] usb 1-1: USB disconnect, device number 54 [ 806.658179][ T4855] usb 5-1: Using ep0 maxpacket: 16 [ 807.251171][ T4855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.273812][ T4855] usb 5-1: config 0 has no interfaces? [ 807.470040][ T4855] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 807.500907][ T4855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.537414][ T4855] usb 5-1: Product: syz [ 807.550228][ T4855] usb 5-1: Manufacturer: syz [ 807.560208][ T4855] usb 5-1: SerialNumber: syz [ 807.577828][ T4855] usb 5-1: config 0 descriptor?? [ 807.679907][T10863] securityfs: Unknown parameter '' [ 808.632637][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.639273][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.670870][ T4855] usb 5-1: USB disconnect, device number 57 [ 810.018986][T10868] netlink: 'syz.0.1855': attribute type 10 has an invalid length. [ 810.035696][T10868] device veth0_vlan left promiscuous mode [ 810.067816][T10868] device veth0_vlan entered promiscuous mode [ 810.114250][T10868] team0: Device veth0_vlan failed to register rx_handler [ 811.194885][ T4286] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 811.220297][T10879] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 811.231775][T10879] SQUASHFS error: Failed to read block 0x0: -5 [ 811.252689][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1857'. [ 811.277520][T10878] device syzkaller0 entered promiscuous mode [ 812.240001][ T4286] usb 5-1: Using ep0 maxpacket: 16 [ 812.310147][ T9506] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 813.026305][ T4286] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 813.040265][ T4286] usb 5-1: config 0 has no interface number 0 [ 813.060474][ T4286] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 813.074368][ T4286] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 813.250063][ T9506] usb 3-1: Using ep0 maxpacket: 32 [ 813.467963][T10893] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 813.710211][ T9506] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 813.730317][ T4286] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 813.737381][ T9506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.739777][ T4286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.758462][ T9506] usb 3-1: Product: syz [ 813.770044][ T9506] usb 3-1: Manufacturer: syz [ 813.785018][ T9506] usb 3-1: SerialNumber: syz [ 813.795172][ T4286] usb 5-1: Product: syz [ 813.799396][ T4286] usb 5-1: Manufacturer: syz [ 813.811092][ T9506] usb 3-1: config 0 descriptor?? [ 813.837547][ T4286] usb 5-1: SerialNumber: syz [ 813.851964][ T4286] usb 5-1: config 0 descriptor?? [ 813.854143][ T9506] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 813.870370][T10870] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 813.877500][T10870] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 813.971229][ T4286] usb 5-1: can't set config #0, error -71 [ 814.000020][ T4855] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 814.019179][ T4286] usb 5-1: USB disconnect, device number 58 [ 814.212614][T10909] netlink: 'syz.4.1869': attribute type 10 has an invalid length. [ 814.222407][T10909] device veth0_vlan left promiscuous mode [ 814.238983][T10909] device veth0_vlan entered promiscuous mode [ 814.257078][T10909] team0: Device veth0_vlan failed to register rx_handler [ 814.410515][ T9506] gspca_ov534_9: reg_w failed -110 [ 814.460934][ T4855] usb 1-1: Using ep0 maxpacket: 16 [ 814.760231][ T4855] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 814.776636][ T4855] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 4 [ 814.950285][ T4855] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 814.970172][ T9506] gspca_ov534_9: Unknown sensor 0000 [ 814.970237][ T9506] ov534_9: probe of 3-1:0.0 failed with error -22 [ 814.988331][ T4855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.010303][ T4855] usb 1-1: Product: syz [ 815.019509][ T4855] usb 1-1: Manufacturer: syz [ 815.139351][ T4855] usb 1-1: SerialNumber: syz [ 815.255349][T10918] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 815.266674][T10918] SQUASHFS error: Failed to read block 0x0: -5 [ 815.275553][T10918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1871'. [ 816.056787][ T9506] usb 1-1: USB disconnect, device number 55 [ 816.125360][ T13] usb 3-1: USB disconnect, device number 39 [ 816.143626][T10921] device syzkaller0 entered promiscuous mode [ 816.305277][T10931] SET target dimension over the limit! [ 817.216551][T10947] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 817.686381][T10949] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 817.696884][T10949] device veth0_vlan left promiscuous mode [ 817.710752][T10949] device veth0_vlan entered promiscuous mode [ 817.732772][T10949] team0: Device veth0_vlan failed to register rx_handler [ 818.337030][T10959] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 818.348564][T10959] SQUASHFS error: Failed to read block 0x0: -5 [ 818.368882][T10959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1883'. [ 819.117505][T10960] usb usb8: usbfs: process 10960 (syz.3.1884) did not claim interface 0 before use [ 819.619960][ T9181] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 819.692219][T10966] device syzkaller0 entered promiscuous mode [ 820.040042][ T9181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.834601][ T9181] usb 2-1: config 0 interface 0 has no altsetting 0 [ 821.020183][ T9181] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 821.040027][ T9181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.056171][ T9181] usb 2-1: Product: syz [ 821.060870][ T9181] usb 2-1: Manufacturer: syz [ 821.070188][ T9181] usb 2-1: SerialNumber: syz [ 821.092781][ T9181] usb 2-1: config 0 descriptor?? [ 821.153643][ T9181] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 821.213567][ T9181] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.266794][ T9181] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 821.321117][ T9181] usb 2-1: media controller created [ 821.510410][ T9181] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.936327][ T9181] DVB: Unable to find symbol tda10046_attach() [ 821.949909][ T9181] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 821.982480][ T9181] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 822.038900][T10996] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1895'. [ 822.050036][ T9181] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 822.067252][T10986] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 822.075524][T10986] device veth0_vlan left promiscuous mode [ 822.081908][T10986] device veth0_vlan entered promiscuous mode [ 822.089135][T10986] team0: Device veth0_vlan failed to register rx_handler [ 822.115004][ T9181] usb 2-1: USB disconnect, device number 37 [ 822.314643][T11001] device syzkaller0 entered promiscuous mode [ 822.470042][ T9181] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 822.560164][ T13] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 822.840091][ T9181] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.862412][ T9181] usb 2-1: config 0 interface 0 has no altsetting 0 [ 822.900270][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 822.990210][ T13] usb 5-1: config 6 has an invalid descriptor of length 64, skipping remainder of the config [ 823.060019][ T9181] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 823.079569][ T9181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.180071][ T13] usb 5-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24 [ 823.969962][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.978245][ T13] usb 5-1: Product: syz [ 823.982606][ T13] usb 5-1: Manufacturer: syz [ 823.990544][ T13] usb 5-1: SerialNumber: syz [ 823.996389][ T9181] usb 2-1: Product: syz [ 824.010076][ T9181] usb 2-1: Manufacturer: syz [ 824.041373][ T9181] usb 2-1: config 0 descriptor?? [ 824.150472][ T9181] usb 2-1: can't set config #0, error -71 [ 824.200902][ T9181] usb 2-1: USB disconnect, device number 38 [ 824.451104][ T13] qmi_wwan 5-1:6.0: invalid descriptor buffer length [ 824.500168][ T4637] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 824.664916][T11033] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 824.675079][T11033] device veth0_vlan left promiscuous mode [ 824.687982][T11033] device veth0_vlan entered promiscuous mode [ 824.708101][T11033] team0: Device veth0_vlan failed to register rx_handler [ 824.956292][T11035] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 824.967966][T11035] SQUASHFS error: Failed to read block 0x0: -5 [ 824.989037][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 825.490579][ T13] qmi_wwan: probe of 5-1:6.0 failed with error -22 [ 825.840464][ T13] usb 5-1: USB disconnect, device number 59 [ 825.909981][ T4637] usb 3-1: Using ep0 maxpacket: 16 [ 825.942486][T11040] device syzkaller0 entered promiscuous mode [ 826.030124][ T4637] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 826.051042][ T4637] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 4 [ 826.220288][ T4637] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 826.239402][ T4637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.250016][ T13] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 826.264828][ T4637] usb 3-1: Product: syz [ 826.289229][ T4637] usb 3-1: Manufacturer: syz [ 826.299447][ T4637] usb 3-1: SerialNumber: syz [ 826.554154][ T4855] usb 3-1: USB disconnect, device number 40 [ 826.660191][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 826.710252][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 826.800023][ T13] usb 5-1: config 12 has an invalid interface number: 231 but max is 0 [ 826.809001][ T13] usb 5-1: config 12 has no interface number 0 [ 826.815670][ T13] usb 5-1: config 12 interface 231 has no altsetting 0 [ 826.980263][ T13] usb 5-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=93.b7 [ 826.989608][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.998379][ T13] usb 5-1: Product: syz [ 827.022756][ T13] usb 5-1: Manufacturer: syz [ 827.031659][ T13] usb 5-1: SerialNumber: syz [ 828.000101][ T13] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 828.097349][ T13] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 828.200359][ T13] dib0700: firmware download failed at 7 with -71 [ 828.335970][ T13] usb 5-1: USB disconnect, device number 60 [ 828.460207][T10113] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 828.869619][T11072] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 828.878168][T11072] device veth0_vlan left promiscuous mode [ 828.884537][T11072] device veth0_vlan entered promiscuous mode [ 828.891577][T11072] team0: Device veth0_vlan failed to register rx_handler [ 829.010588][T10113] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 829.036640][T10113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.044876][T10113] usb 4-1: Product: syz [ 829.049092][T10113] usb 4-1: Manufacturer: syz [ 829.054079][T10113] usb 4-1: SerialNumber: syz [ 829.072507][T10113] usb 4-1: config 0 descriptor?? [ 829.123854][T10113] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 829.140007][ T1325] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 829.187394][T11091] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 829.249965][ T4227] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 829.440089][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 829.490294][ T13] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 829.510250][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 829.535093][ T26] audit: type=1326 audit(1777391593.598:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 829.562855][T11067] netlink: 'syz.3.1917': attribute type 4 has an invalid length. [ 829.572062][ T26] audit: type=1326 audit(1777391593.598:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 829.599956][ T1325] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 829.613912][ T1325] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 829.626704][ T26] audit: type=1326 audit(1777391593.598:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 829.628627][T11093] netlink: 'syz.3.1917': attribute type 4 has an invalid length. [ 829.657676][ T1325] usb 1-1: config 0 has no interface number 0 [ 829.664259][ T4227] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.682762][ T4227] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.695896][ T1325] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.713508][ T26] audit: type=1326 audit(1777391593.598:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 829.807882][ T26] audit: type=1326 audit(1777391593.618:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 829.852447][ T26] audit: type=1326 audit(1777391593.618:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 829.901866][ T26] audit: type=1326 audit(1777391593.618:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 829.919842][ T4227] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 829.933751][ T1325] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 829.953315][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 829.971952][ T4227] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 829.990342][ T1325] usb 1-1: Product: syz [ 829.994694][ T1325] usb 1-1: SerialNumber: syz [ 829.999438][ T4227] usb 2-1: Product: syz [ 830.010852][ T4227] usb 2-1: Manufacturer: syz [ 830.016694][ T1325] usb 1-1: config 0 descriptor?? [ 830.048437][ T26] audit: type=1326 audit(1777391593.618:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 830.078331][ T26] audit: type=1326 audit(1777391593.618:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 830.111446][ T4227] hub 2-1:4.0: USB hub found [ 830.119048][ T1325] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 830.134483][ T26] audit: type=1326 audit(1777391593.618:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11066 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 830.316317][T10113] usb 1-1: USB disconnect, device number 56 [ 830.370259][ T4227] hub 2-1:4.0: 5 ports detected [ 830.391733][ T4227] hub 2-1:4.0: insufficient power available to use all downstream ports [ 830.566660][T10113] usb 4-1: USB disconnect, device number 53 [ 830.710166][ T4227] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 830.718427][ T4227] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 830.767340][ T4227] usb 2-1: USB disconnect, device number 39 [ 831.334099][T11113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1932'. [ 831.371949][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1933'. [ 832.610062][ T4321] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 832.800664][T11118] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 832.860020][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 832.980141][ T4321] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 832.991725][ T4321] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 833.017274][ T4321] usb 1-1: config 0 has no interface number 0 [ 833.029441][ T4321] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.130240][T10203] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 833.180054][ T4321] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 833.189429][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 833.219380][ T4321] usb 1-1: Product: syz [ 833.223682][ T4321] usb 1-1: SerialNumber: syz [ 833.245407][ T4321] usb 1-1: config 0 descriptor?? [ 833.292241][ T4321] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 833.414352][T11118] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 833.435420][T11118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.446633][T11118] usb 4-1: Product: syz [ 833.454707][T11118] usb 4-1: Manufacturer: syz [ 833.459757][T11118] usb 4-1: SerialNumber: syz [ 833.483759][T11118] usb 4-1: config 0 descriptor?? [ 833.497506][ T4321] usb 1-1: USB disconnect, device number 57 [ 833.526598][T11118] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 833.550140][T10203] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.607415][T11158] capability: warning: `syz.1.1947' uses 32-bit capabilities (legacy support in use) [ 833.644346][T10203] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.658968][T10203] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 833.674022][T10203] usb 5-1: config 1 has no interface number 0 [ 833.682330][T10203] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x62, skipping [ 833.860925][T10203] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 833.895500][T10203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.983469][T10203] usb 5-1: Product: syz [ 834.029214][T10203] usb 5-1: Manufacturer: syz [ 834.072690][T10203] usb 5-1: SerialNumber: syz [ 834.113697][T11137] netlink: 'syz.3.1941': attribute type 4 has an invalid length. [ 834.544297][ T26] kauditd_printk_skb: 379 callbacks suppressed [ 834.544313][ T26] audit: type=1326 audit(1777391598.608:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.606358][ T26] audit: type=1326 audit(1777391598.638:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.637347][ T26] audit: type=1326 audit(1777391598.638:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.660406][ T26] audit: type=1326 audit(1777391598.638:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.680568][ T4227] usb 4-1: USB disconnect, device number 54 [ 834.691681][ T26] audit: type=1326 audit(1777391598.638:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.716367][ T26] audit: type=1326 audit(1777391598.638:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.746648][ T26] audit: type=1326 audit(1777391598.638:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.775132][ T26] audit: type=1326 audit(1777391598.638:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.825355][ T26] audit: type=1326 audit(1777391598.638:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.868116][ T26] audit: type=1326 audit(1777391598.638:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e6e03dd9 code=0x7ffc0000 [ 834.910147][ T13] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 834.980106][T10203] us122l: couldn't allocate write buffer [ 834.986546][T10203] snd-usb-us122l: probe of 5-1:1.1 failed with error -22 [ 835.041505][T10203] usb 5-1: USB disconnect, device number 61 [ 835.170005][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 835.290300][ T13] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 835.299212][ T13] usb 1-1: config 139 has no interface number 0 [ 835.312471][ T13] usb 1-1: config 139 interface 49 has no altsetting 0 [ 835.470109][ T13] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 835.479500][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.513643][ T13] usb 1-1: Product: syz [ 835.517900][ T13] usb 1-1: Manufacturer: syz [ 835.522965][ T13] usb 1-1: SerialNumber: syz [ 835.640047][T10586] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 835.789956][ T4321] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 835.842167][ T13] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 836.060094][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 836.110114][T10586] usb 4-1: unable to get BOS descriptor or descriptor too short [ 836.222688][ T4321] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 836.235434][ T4321] usb 5-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 836.257502][ T4321] usb 5-1: config 0 has no interface number 0 [ 836.270942][ T4321] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 836.311469][ T13] radio-usb-si4713: probe of 1-1:139.49 failed with error -71 [ 836.330447][ T13] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 836.358649][ T13] usb 1-1: USB disconnect, device number 58 [ 836.405956][T10586] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 836.423606][T10586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.444624][T10586] usb 4-1: Product: syz [ 836.449460][T10586] usb 4-1: Manufacturer: syz [ 836.454636][ T4321] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 836.469292][T11202] SET target dimension over the limit! [ 836.471295][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 836.489688][T10586] usb 4-1: SerialNumber: syz [ 836.512779][ T4321] usb 5-1: Product: syz [ 836.530950][ T4321] usb 5-1: SerialNumber: syz [ 836.553895][ T4321] usb 5-1: config 0 descriptor?? [ 836.632817][ T4321] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 836.837829][T10113] usb 5-1: USB disconnect, device number 62 [ 836.980145][T10586] usb 4-1: MIDIStreaming interface descriptor not found [ 837.016599][T10586] usb 4-1: USB disconnect, device number 55 [ 837.100080][ T13] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 837.103265][ T4321] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 837.281262][ T9282] udevd[9282]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.342462][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 837.379952][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 837.460243][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 837.474473][ T13] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 837.535467][ T4321] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 837.650203][ T13] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 837.670348][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.678775][ T13] usb 3-1: Product: syz [ 837.700276][ T13] usb 3-1: Manufacturer: syz [ 837.710276][ T13] usb 3-1: SerialNumber: syz [ 837.730174][ T4321] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 837.738401][ T13] usb 3-1: config 0 descriptor?? [ 837.739357][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.765964][ T4321] usb 2-1: Product: syz [ 837.770239][T11118] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 837.781632][ T4321] usb 2-1: Manufacturer: syz [ 837.786374][ T4321] usb 2-1: SerialNumber: syz [ 837.808380][ T4321] r8152-cfgselector 2-1: config 0 descriptor?? [ 838.049078][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 838.280084][ T4321] r8152-cfgselector 2-1: Unknown version 0x0000 [ 838.286803][ T4321] r8152-cfgselector 2-1: bad CDC descriptors [ 838.290437][T11118] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 838.302669][T11118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.311202][T11118] usb 4-1: Product: syz [ 838.315661][T11118] usb 4-1: Manufacturer: syz [ 838.320303][ T4321] r8152-cfgselector 2-1: Unknown version 0x0000 [ 838.328086][ T4321] r8152-cfgselector 2-1: USB disconnect, device number 40 [ 838.343573][T11118] usb 4-1: SerialNumber: syz [ 838.351420][T11118] usb 4-1: config 0 descriptor?? [ 838.392423][T11118] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 838.661964][T11239] udc-core: couldn't find an available UDC or it's busy [ 838.669710][T11239] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 838.790127][ T13] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 838.823361][T11216] netlink: 'syz.3.1967': attribute type 4 has an invalid length. [ 839.049980][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 839.342077][ T13] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 839.357677][T11245] fuse: Bad value for 'fd' [ 839.363086][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.398896][ T13] usb 1-1: Product: syz [ 839.428517][ T13] usb 1-1: Manufacturer: syz [ 839.447024][ T13] usb 1-1: SerialNumber: syz [ 839.479428][ T13] usb 1-1: config 0 descriptor?? [ 839.550329][ T26] kauditd_printk_skb: 440 callbacks suppressed [ 839.550342][ T26] audit: type=1326 audit(1777391603.618:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 839.616986][ T26] audit: type=1326 audit(1777391603.638:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 839.647448][ T26] audit: type=1326 audit(1777391603.638:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 839.708262][ T26] audit: type=1326 audit(1777391603.638:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 839.770146][ T13] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 839.781896][ T13] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 839.830810][ T26] audit: type=1326 audit(1777391603.638:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 839.919708][ T26] audit: type=1326 audit(1777391603.638:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 839.978545][ T4321] usb 1-1: USB disconnect, device number 59 [ 840.024908][ T26] audit: type=1326 audit(1777391603.638:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 840.105984][ T26] audit: type=1326 audit(1777391603.648:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 840.164826][ T26] audit: type=1326 audit(1777391603.648:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 840.201359][ T26] audit: type=1326 audit(1777391603.648:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11215 comm="syz.3.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1e6dc460e code=0x7ffc0000 [ 840.256041][T10586] usb 4-1: USB disconnect, device number 56 [ 840.549322][T11264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 840.682088][T11271] ------------[ cut here ]------------ [ 840.689579][T11271] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 840.697892][T11271] WARNING: CPU: 1 PID: 11271 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 840.710302][T11271] Modules linked in: [ 840.714571][T11271] CPU: 1 PID: 11271 Comm: syz.1.1985 Not tainted syzkaller #0 [ 840.723073][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 840.733479][T11271] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 840.741215][T11271] Code: 0b 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 09 ec 38 f8 0f 0b e9 b1 fe ff ff e8 fd eb [ 840.761305][T11271] RSP: 0018:ffffc9000327f248 EFLAGS: 00010246 [ 840.767614][T11271] RAX: b709e186537b9100 RBX: 0000000000400000 RCX: 0000000000080000 [ 840.777327][T11271] RDX: ffffc90003b61000 RSI: 000000000000412b RDI: 000000000000412c [ 840.785612][T11271] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 840.810029][T11274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.834775][T11271] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88807d370000 [ 840.843218][T11271] R13: ffff88807d371290 R14: ffff8880257c0e00 R15: ffff88807d372268 [ 840.851499][T11271] FS: 00007fc14ca516c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 840.861088][T11271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.867905][T11271] CR2: 00007ff1e70512f8 CR3: 0000000076be9000 CR4: 00000000003526e0 [ 840.876258][T11271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 840.886027][T11271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 840.894322][T11271] Call Trace: [ 840.897804][T11271] [ 840.900999][T11271] ? netif_carrier_on+0x91/0x120 [ 840.906364][T11271] ieee80211_ocb_leave+0x26f/0x320 [ 840.919985][T11271] __cfg80211_leave_ocb+0x219/0x3f0 [ 840.936122][T11271] cfg80211_leave_ocb+0x53/0x70 [ 840.950143][T11271] cfg80211_change_iface+0x4f1/0xeb0 [ 840.972260][T11271] nl80211_set_interface+0x5a7/0x7e0 [ 840.983996][T11271] ? nl80211_dump_interface+0x5c0/0x5c0 [ 840.997215][T11271] ? mutex_lock_nested+0x17/0x20 [ 841.003047][T11271] genl_rcv_msg+0xcea/0xf90 [ 841.007802][T11271] ? genl_bind+0x380/0x380 [ 841.013159][T11271] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 841.018579][T11271] ? verify_lock_unused+0x140/0x140 [ 841.024491][T11271] ? dev_queue_xmit+0x20/0x20 [ 841.029337][T11271] ? nl80211_dump_interface+0x5c0/0x5c0 [ 841.038271][T11271] netlink_rcv_skb+0x1f5/0x440 [ 841.043482][T11271] ? genl_bind+0x380/0x380 [ 841.048723][T11271] ? netlink_ack+0xb50/0xb50 [ 841.053986][T11271] ? __lock_acquire+0x7d10/0x7d10 [ 841.059394][T11271] ? down_read+0x1aa/0x2e0 [ 841.064361][T11271] genl_rcv+0x24/0x40 [ 841.068437][T11271] netlink_unicast+0x774/0x920 [ 841.073836][T11271] netlink_sendmsg+0x8ba/0xbe0 [ 841.078809][T11271] ? netlink_getsockopt+0x570/0x570 [ 841.085886][T11271] ? aa_sock_msg_perm+0x94/0x150 [ 841.091626][T11271] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 841.097196][T11271] ? security_socket_sendmsg+0x7c/0xa0 [ 841.103750][T11271] ? netlink_getsockopt+0x570/0x570 [ 841.109008][T11271] ____sys_sendmsg+0x5b7/0x8f0 [ 841.114627][T11271] ? __sys_sendmsg_sock+0x30/0x30 [ 841.119721][T11271] ? import_iovec+0x6f/0xa0 [ 841.124413][T11271] ___sys_sendmsg+0x236/0x2e0 [ 841.129145][T11271] ? __sys_sendmsg+0x2a0/0x2a0 [ 841.134314][T11271] __se_sys_sendmsg+0x1af/0x290 [ 841.139218][T11271] ? __x64_sys_sendmsg+0x80/0x80 [ 841.144262][T11271] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 841.150338][T11271] ? lockdep_hardirqs_on+0x94/0x140 [ 841.155716][T11271] do_syscall_64+0x4c/0xa0 [ 841.160330][T11271] ? clear_bhb_loop+0x30/0x80 [ 841.165230][T11271] ? clear_bhb_loop+0x30/0x80 [ 841.170053][T11271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 841.176111][T11271] RIP: 0033:0x7fc14e7f7dd9 [ 841.180890][T11271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.201041][T11271] RSP: 002b:00007fc14ca51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.210787][T11271] RAX: ffffffffffffffda RBX: 00007fc14ea70fa0 RCX: 00007fc14e7f7dd9 [ 841.218934][T11271] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 841.227714][T11271] RBP: 00007fc14e88dd69 R08: 0000000000000000 R09: 0000000000000000 [ 841.235829][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.243967][T11271] R13: 00007fc14ea71038 R14: 00007fc14ea70fa0 R15: 00007ffffcd37908 [ 841.256074][T11271] [ 841.259167][T11271] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 841.266474][T11271] CPU: 1 PID: 11271 Comm: syz.1.1985 Not tainted syzkaller #0 [ 841.273974][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 841.284158][T11271] Call Trace: [ 841.287480][T11271] [ 841.290456][T11271] dump_stack_lvl+0x188/0x250 [ 841.295282][T11271] ? show_regs_print_info+0x20/0x20 [ 841.300723][T11271] ? load_image+0x400/0x400 [ 841.305315][T11271] panic+0x2e5/0x810 [ 841.309317][T11271] ? bpf_jit_dump+0xd0/0xd0 [ 841.314411][T11271] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 841.321053][T11271] __warn+0x248/0x2b0 [ 841.325198][T11271] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 841.331859][T11271] report_bug+0x1b7/0x2e0 [ 841.336334][T11271] handle_bug+0x3a/0x70 [ 841.340867][T11271] exc_invalid_op+0x16/0x40 [ 841.345428][T11271] asm_exc_invalid_op+0x16/0x20 [ 841.350318][T11271] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 841.357386][T11271] Code: 0b 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 09 ec 38 f8 0f 0b e9 b1 fe ff ff e8 fd eb [ 841.377193][T11271] RSP: 0018:ffffc9000327f248 EFLAGS: 00010246 [ 841.383423][T11271] RAX: b709e186537b9100 RBX: 0000000000400000 RCX: 0000000000080000 [ 841.391548][T11271] RDX: ffffc90003b61000 RSI: 000000000000412b RDI: 000000000000412c [ 841.399548][T11271] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 841.407663][T11271] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88807d370000 [ 841.415663][T11271] R13: ffff88807d371290 R14: ffff8880257c0e00 R15: ffff88807d372268 [ 841.423683][T11271] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 841.430129][T11271] ? netif_carrier_on+0x91/0x120 [ 841.435101][T11271] ieee80211_ocb_leave+0x26f/0x320 [ 841.440268][T11271] __cfg80211_leave_ocb+0x219/0x3f0 [ 841.445601][T11271] cfg80211_leave_ocb+0x53/0x70 [ 841.450486][T11271] cfg80211_change_iface+0x4f1/0xeb0 [ 841.456028][T11271] nl80211_set_interface+0x5a7/0x7e0 [ 841.461439][T11271] ? nl80211_dump_interface+0x5c0/0x5c0 [ 841.467015][T11271] ? mutex_lock_nested+0x17/0x20 [ 841.471992][T11271] genl_rcv_msg+0xcea/0xf90 [ 841.476705][T11271] ? genl_bind+0x380/0x380 [ 841.481173][T11271] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 841.486406][T11271] ? verify_lock_unused+0x140/0x140 [ 841.491736][T11271] ? dev_queue_xmit+0x20/0x20 [ 841.496536][T11271] ? nl80211_dump_interface+0x5c0/0x5c0 [ 841.502162][T11271] netlink_rcv_skb+0x1f5/0x440 [ 841.506954][T11271] ? genl_bind+0x380/0x380 [ 841.511402][T11271] ? netlink_ack+0xb50/0xb50 [ 841.516014][T11271] ? __lock_acquire+0x7d10/0x7d10 [ 841.521070][T11271] ? down_read+0x1aa/0x2e0 [ 841.525512][T11271] genl_rcv+0x24/0x40 [ 841.529513][T11271] netlink_unicast+0x774/0x920 [ 841.534305][T11271] netlink_sendmsg+0x8ba/0xbe0 [ 841.539190][T11271] ? netlink_getsockopt+0x570/0x570 [ 841.544412][T11271] ? aa_sock_msg_perm+0x94/0x150 [ 841.549468][T11271] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 841.554778][T11271] ? security_socket_sendmsg+0x7c/0xa0 [ 841.560351][T11271] ? netlink_getsockopt+0x570/0x570 [ 841.565572][T11271] ____sys_sendmsg+0x5b7/0x8f0 [ 841.570647][T11271] ? __sys_sendmsg_sock+0x30/0x30 [ 841.575801][T11271] ? import_iovec+0x6f/0xa0 [ 841.580391][T11271] ___sys_sendmsg+0x236/0x2e0 [ 841.585192][T11271] ? __sys_sendmsg+0x2a0/0x2a0 [ 841.590020][T11271] __se_sys_sendmsg+0x1af/0x290 [ 841.594898][T11271] ? __x64_sys_sendmsg+0x80/0x80 [ 841.599872][T11271] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 841.606028][T11271] ? lockdep_hardirqs_on+0x94/0x140 [ 841.611261][T11271] do_syscall_64+0x4c/0xa0 [ 841.615706][T11271] ? clear_bhb_loop+0x30/0x80 [ 841.620404][T11271] ? clear_bhb_loop+0x30/0x80 [ 841.625109][T11271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 841.631026][T11271] RIP: 0033:0x7fc14e7f7dd9 [ 841.635731][T11271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.655378][T11271] RSP: 002b:00007fc14ca51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.663923][T11271] RAX: ffffffffffffffda RBX: 00007fc14ea70fa0 RCX: 00007fc14e7f7dd9 [ 841.672015][T11271] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 841.680470][T11271] RBP: 00007fc14e88dd69 R08: 0000000000000000 R09: 0000000000000000 [ 841.688566][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.696562][T11271] R13: 00007fc14ea71038 R14: 00007fc14ea70fa0 R15: 00007ffffcd37908 [ 841.704574][T11271] [ 841.707893][T11271] Kernel Offset: disabled [ 841.712483][T11271] Rebooting in 86400 seconds..