last executing test programs: 1m7.274297544s ago: executing program 2 (id=33): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$kcm(0x11, 0x200000000000002, 0x300) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e1e, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m6.150983029s ago: executing program 2 (id=36): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000900)) 1m6.012622941s ago: executing program 2 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 1m5.973952936s ago: executing program 2 (id=38): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0xa0202, 0x0, 0x11}, 0x18) 1m5.821356403s ago: executing program 2 (id=41): add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000280)="a0f1f715a8fe82d19ebf50bf3769c01fdfab5a1c60755ebb4c994461c794f54f", 0x20, 0xfffffffffffffffe) 1m5.448540024s ago: executing program 2 (id=43): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) 1m5.044344964s ago: executing program 32 (id=43): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) 6.506747662s ago: executing program 3 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.303245831s ago: executing program 3 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmmsg$alg(r1, &(0x7f0000004f00)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000280)="d6b1af50837e3ce7a340618a2134dfb09026c4db7935410d7fb32b5deb017473ae37bfb096b48a2f18b25537c7669fa82bd64959ba6096df48786adbd4", 0x3d}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20004000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 6.116451317s ago: executing program 3 (id=461): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "8ac06f2b"}]}}, 0x0}, 0x0) 4.520446305s ago: executing program 0 (id=471): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x4008af24, &(0x7f0000000080)) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_script(r3, &(0x7f0000005e80)={'#! ', './file0'}, 0xb) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.384597604s ago: executing program 0 (id=474): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000002240)=ANY=[@ANYBLOB="201603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000002200)={0x40, 0x12, 0x2, "e50c"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100031624c1085e0475076ddd0102030109021200010708e0420904"], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) 4.247791046s ago: executing program 1 (id=478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3611c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x9, 0x20010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000040)="7c613e04ffdcea1e07917d5bc0396906ab642c408a45579740ac7ced4515d71fd68e5035c54bb38d5c0635bfa26d2f16abe3be2a88fe686abf672ca99b345be480abe2b57c217162", 0x0, 0x48) (async) open_by_handle_at(r0, &(0x7f00000000c0)=@raw={0x4c, 0xab, {"dc10faa36c8c4a5dac6702352094aa64b0e891e207388851e50238f7fd437890ae18b90b71fcf269f019971b7d0b173889f72eaddc504daa6c718d488ca7f23794ac85fb15b3503ef5"}}, 0x10000) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x7) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000002280)={{0x7, 0x4, 0x3, 0x3ff, '\x00', 0x6}, 0x3, 0x4, 0x3, r5, 0x8, 0x200, 'syz0\x00', &(0x7f0000002240)=[',}-\x00', '/dev/kvm\x00', '/dev/kvm\x00', '&-#[+#%+{\x00', '/dev/kvm\x00', '/dev/kvm\x00', '/dev/kvm\x00', '-\'\x00'], 0x3e}) (async) r6 = syz_open_dev$sndmidi(&(0x7f00000023c0), 0x4, 0x624600) r7 = fcntl$dupfd(r4, 0x406, r6) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000002400), 0x4) (async) copy_file_range(r0, &(0x7f0000002440)=0x9, r3, &(0x7f0000002480)=0xb909, 0x4, 0x0) (async) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f00000024c0)={0x0, 0xe3e, 0x6, 0x4, 0xff, 0x6c, 0x2, 0x9, 0x0, 0x9, 0xc, "06853643e28e10f4a8498b1dc99bb30bcf5f24a8e90613b2a560e74cf4ca4e46"}) syz_open_dev$usbfs(&(0x7f0000002500), 0xe9, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002580)={0x12c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0xa}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x41c8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c871) (async) read$char_usb(r7, &(0x7f0000002740)=""/168, 0xa8) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f0000002840), r7) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002880)={@loopback, @local, 0x0}, &(0x7f00000028c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002980)={'syztnl1\x00', &(0x7f0000002900)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x1, 0xffffffff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8000, 0x80, 0x80000000, 0x3}}) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002a40)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002b00)={'syztnl0\x00', &(0x7f0000002a80)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x2, 0x1, 0x40, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2b, 0x4, 0x101}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002bc0)={'gre0\x00', &(0x7f0000002b40)={'tunl0\x00', 0x0, 0x1, 0x40, 0x5, 0x57f, {{0x9, 0x4, 0x0, 0x3f, 0x24, 0x67, 0x0, 0x2, 0xd7da2746ce508285, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x7a, [@remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000003800)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000037c0)={&(0x7f0000003140)={0x664, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0x208, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x37, 0x0, 0x1}, {0xf680, 0xab, 0x8, 0x7}, {0xc, 0x1b, 0x9, 0x1000}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x336}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x48084}, 0x80) 4.209720022s ago: executing program 1 (id=479): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8, 0x80, 0xf, 0x9, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0xf3, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x41, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x25}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r0, 0x4, 0x8, 0x5, 0x2, 0x48, @dev={0xfe, 0x80, '\x00', 0x30}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x8, 0x10001, 0xfffffffb}}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x420102) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x20, 0x0, 0x9, 0xa, {{0x7, 0x4, 0x2, 0x37, 0x1c, 0x68, 0x0, 0x8, 0x2, 0x0, @multicast1, @local, {[@generic={0xf83f74584432f02, 0x6, "fb0e96cc"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'nr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @private, @loopback}, &(0x7f0000000380)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf1227fa9b5ef2547}, 0xc, &(0x7f0000000c00)={&(0x7f00000003c0)={0x808, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff800}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x337}}}]}}, {{0x8, 0x1, r0}, {0x17c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r6}, {0x98, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0x3, 0x5, 0xf}, {0x4, 0x6, 0x6, 0x5}, {0xc, 0x7, 0xf1, 0x80}, {0x5f, 0x3, 0x1, 0x7}, {0x2, 0x4, 0x1, 0x5}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9d}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff, 0x2, 0x0, 0xffffffff}, {0x40, 0x0, 0x8, 0x3}, {0x5, 0xb, 0x5, 0x567}, {0x2, 0x5, 0xfd, 0x32f}, {0x3, 0x76, 0x6, 0x80000001}, {0x101, 0xc2, 0xff, 0x81}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe4b3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9dc}}}]}}, {{0x8, 0x1, r0}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x97a3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x4}}]}, 0x808}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r8, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008014}, 0x8000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000e40)={&(0x7f0000000e00)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e80)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000f80)={r11, r12, r13, 0x8b, 0x0, 0x1, 0x992, 0x3, 0x2, 0x6, 0x1, 0x20000000}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f0000000fc0)={0x7, 'pimreg0\x00', {0x8}, 0x1}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r8) r15 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001040), 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r15, 0xc01064bd, &(0x7f00000010c0)={&(0x7f0000001080)="0441c02b", 0x4}) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000001100)=0xfffa, 0x2) preadv2(r8, &(0x7f0000001240)=[{&(0x7f0000001140)=""/194, 0xc2}], 0x1, 0xfffff989, 0x2, 0x2) socket$kcm(0x29, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, r14, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x20000080) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macsec0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c000}, 0x40011) syz_usb_connect(0x4, 0x49c, &(0x7f0000001480)={{0x12, 0x1, 0x201, 0xfc, 0x83, 0x83, 0x8, 0x15c2, 0x39, 0x4ed8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48a, 0x2, 0x9, 0x5, 0x50, 0x2f, [{{0x9, 0x4, 0xd1, 0xff, 0xa, 0x4, 0x7d, 0xa1, 0xf5, [@generic={0x102, 0xd, "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"}], [{{0x9, 0x5, 0x8, 0x1, 0x10, 0xe, 0x5, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x9, 0x0, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xca, 0x200}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x8, 0x46, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x3, 0x80, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xf, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1000}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x7, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x5, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xc}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x6, 0x4, 0x5, [@generic={0x62, 0x18, "40b725f65f22fe8601f2a3fce93527c5943b2af60253f18db9a4e5fae1691c9259341a193fff739b99aa981dd02825e1c30d63eca61bc01da16cf36a2d1b72e483ef4a390561271d362ab58fd0175b11a84a47ca98d568c260e9578df52cdc34"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x34, 0x2, 0xfb}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x10, 0x1, 0x1, [@generic={0x1e, 0x4, "159383d7bf35ac377cdc814236d18f3eb38c380e1d6704d188fe6752"}]}}]}}, {{0x9, 0x4, 0x72, 0xb, 0x6, 0xc, 0xba, 0x33, 0x7, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x52, "ead955900069b0"}, @as_header={0x7, 0x24, 0x1, 0x56, 0x12}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfd, 0x3, 0x7, 0x8, "dd", "048f8f"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfffa, 0xc8, 0x3, "9c3f52a3090ec57413"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8a, 0x1, 0x1, 0x9, "91db06"}]}, @generic={0xe9, 0x8, "be5c700ac0d9c680cb4c7f4b53882161727285b8e598a2a34187bddb4a7f9e122b72e8994263ad7be8600295ec4b42d884d6715a28ced48d309b5ed781860ad727ce24abc546389313e5a088c9989bd23a1a306ef98783257129e97c4f4510b82c5f2bd2eb41b5aab57ec611e16b0c962cf53e2d9f86ab418516ac30d8e3330005fa7dc6250f44fc26c8e0e4af1c6abf482703c24c428bde1e043484328a0d8b75c5dbe1b61a418e4c7a897114965211a3bb855f66fc3745b1ffd71fe44c67a94260bad815e4b227e1ed82b97b6cfb6812090f183c99a7eac89854065453c07938fb9929cad1c5"}], [{{0x9, 0x5, 0x8, 0x8, 0x200, 0x9, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0xa1}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0xf, 0x1, 0x2, [@generic={0x31, 0xf, "dfc9ddea39de0ab733977d7025ce4e9ca539f442cfae9a0895152669582484e16e52ec8eb70646b1a67258898d8d28"}, @generic={0xc5, 0x9, "c4fd34aa7a7c41e45daa6d27ad403a037944d1ec1a4f37e3068202f426489489d13dfbd146c0d9a80b17b53f5b1e4c8036212a501313dd8557319297c2cd166e07cec0964026595aadb0240ccce5558335bf948f7b35f4f1f224eda002afefae39f1b0b05c3012ba4313b9e51dfc4f1ce11770a464ff491d9e4e509b33df31d87d5857d0bfc2f550d1aba59fa96fd75e3aa6284e7eac7a45d90b428dc2eb070cd39e7e437fb237ee7e5763314ecfac4e4913717b054fc8b06d7afa831814e2c5bba47e"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x7f, 0x7f, 0x7f}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x1, 0x22, 0x88}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x19, 0x3, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb0, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xf0}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x6}]}}]}}]}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x110, 0xd, 0x1, 0x1, 0x8, 0x9}, 0x8c, &(0x7f0000001980)={0x5, 0xf, 0x8c, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0xdcf9, 0x1e1e, 0x3, [0x30, 0xc0, 0xf, 0xc000, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6fe0e978fd37d5b2026c2fddb365f09f"}, @ss_container_id={0x14, 0x10, 0x4, 0xc9, "4169234427e0e8de3ccedff51f82cb48"}, @generic={0x3f, 0x10, 0x2, "e91f4d4abdee8c8ade87e883c13d0717dbe9236288323b04ad9fd83b7f91c0358cf140769d8af281da01cad8b6ca71dcfc54d882c0608f07e4512324"}]}, 0x5, [{0xc4, &(0x7f0000001a40)=@string={0xc4, 0x3, "aa6f3047b4872a040a54318a42f2e65a740a7e6e0f61095baf34689a2b3e17acdb7ac9b2bfb967e92fe6f20edd05d05f1c522f1e9587219e76525e5a5925b385b39599df617d1ce3cd60dfe15be87dbad3d72a1118aeeb866a075d029a2e2a8dd4465636068174edb1ea636af5461251f75c2e74b989bf56ba5beb5c4d274b8515f2a0dc885792cfacd7dfbd625d1faeb6c2492f045e419b878f832384c2af33a2b6b4d47d8057e59817087749b1d814997cd7bca28b3115cf2a2b280f404e228c0f"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x804}}, {0x3c, &(0x7f0000001bc0)=@string={0x3c, 0x3, "6323312eaebbdef70f3e31a3db80627784fd504fb14c68136ad74f04c4f9a158c3edcfc5554bc088b6fc888859f5ea283aab7a9c9fd92c318b7c"}}, {0x78, &(0x7f0000001c00)=@string={0x78, 0x3, "a396a15a005bdab9a4431f7b6ed58a1cb9f4f34d290b0226d8b789578158a0ecf10aa863d9d2784b169406b89981346291ff1ee12843697d73ff62039327e4b48a46625b70bbd5fc8485487f3b5ce82dd3ae941c2c8d57426585aa403be4c047dfb542430036d3f3e214b720a3d0f19abdc2a465db24"}}]}) syz_genetlink_get_family_id$fou(&(0x7f0000001d00), r2) r16 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d80), r2) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, r16, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x2a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) 3.638425128s ago: executing program 1 (id=485): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x80, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000140)="2e3a28e0b606b4507baaf71de7ed9c6d182f4ec842c935c2924db3295b9ae3b9d932dfb2b21eb7ff96bc3f398256a98bb6a86d4c23e7d9506168e72ef0f7b466ca2298d4fd4a91652b24139eb5e72824b0caa87788feac4e86aa626c9a5e87ceb8df627e9f70c1f9c272387ea325d02724cc7070b61ae26d7292e39df3626d1cb0791ffde3fbdbcfcfd5281ad26d3e888907a08efc71eef7154b381388afc6d3b1ecaff5b9c62517c876ff105420a36019862909bd4f257c7dc99d575921c7effebeebb0df25bd931a5b64251a16e397ae87", 0xd2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000002c0)="0f01c826f30f487b00650f01d1640f34baf80c66b884e2e48e66efbafc0cb80300ef0f0fddb6baf80c66b81873188d66efbafc0cb80000ef640f1d100f015b00660f3a442bf2", 0x46}], 0x1, 0x0, &(0x7f0000000500)=[@flags={0x3, 0x12100}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r3}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00577fc2c424a47d730e000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xcc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80, 0x29}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 3.378937382s ago: executing program 1 (id=488): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') listen(r0, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x80, 0x3, &(0x7f0000000180)="689189554f8adfedbdfa2ad6086fb23a8088d4a1b10be280ed8470d31fcf2c877f31ec6ebae2c24ca81321fd662dbc23134c797bc6391eec0f1140c9a00c075769a731261e6667f6935f477ca0d9a997e881b7de2974ba9a3ef4eee9ec532e25136f3e2792d70f54a1f13163ec2b059c05f3023149697a95a171dcb154cbb8fafade90009c8876dcac11fda455e85139436ebf63", 0x94) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980914, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000000c0)={r5}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000940)={r5, 0x8}, &(0x7f0000000980)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000dc0)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="59f3a9609ee5760d206fd810151707736b216e0b2cdc8d18934f0e3ddeebfe5c536b3e1b0c41efee5e6cb301459b9c8b60a46cfe9e22a1b740fc5e40223c02845e6cd54fc89b73e987befc9255b453e638aea8218a2a77f6ac47ae99f50981053e55a49fe72c313f885400f6d0f1539ecc869abbe93a69c75776930437559aabb15f21473386f5f9793eee5a156f469cd3", 0x91}, {&(0x7f0000000340)="182b16861a3f5eac224bf0c603f06d815c386bb37a1f99c3d1aa99e439bb594ff64ab27d0e7b971c95dda698309f9fd936b693c04a38fea88041c971db1278680836a6dfc0d37aca5fd42ba482e6081a5fd552ed6a0451a65d43f3f51406fee4f83a39ebb23d4ca461be512a501279459d7f61bab57af55aee256bd1dfc37be15e0297c7d79000aa8fa7eef26885e99cfab25a231f81f3abae288067eddcc08ea5ec2fade88843bc71f8d51d1434451e0980a38f3bb0cf7e104fc382b54adb90328be81cfca9bb63c011d76633b12a6e5ba916", 0xd3}, {&(0x7f00000004c0)="114ea6fd60eaac707bc3054f22c59fd0d0a0d079883c1f8464c32fa3d5a8bb465f7f57657aad1af086b31f42da96eaaba1db861b0b4b90d59d6c3c92c1b7f7f6f0b277da46eaa593f10a09d21517c477c4eeab23e3dc53f91f320ee780b866cfb6027c8cc9fa4a971f8c0d25c89cc16e85fe128a905ae6e1558fef33f63cf4f839f4e157ee15fa5b1d9872b6689af71df0ed57b81641149642b2364e2e5efa2ea784510c68cf4c88574faa8c8a7fcc3ffff968643ebf46e918035766bba400aecc91b52c80164ded528247acf261a0d0c84978be50f4cb78d31f3c50ffc5b5e4c935dba1e59b7cd2755dab09e4", 0xed}, {&(0x7f00000005c0)="1c1f6d7ce11d765faa7a75a999088bd4b9d17bc8844288a1bd574ae8c1aad6172bef3aa45ab356eb8b8805f43d813153d1163b6d05e8e18c8303e6d05b15a41a8682bb5aead81af0404f4f922c6254e73ef68fd90244f938f62896b4896dffa590e6bbf9e085404932d9363b129d6cc46e94dfffc1b063edb4086c78aed82ef9d4ed5817377a5a6cdf5312021e42daafc99b6e582763c60ab46eba05ba107b52a45c40d11ef10668dc79d0de69e2b991e0c197f09d50fd6de539fce9cc3dda924b3d62f7a4986fec618e053e4dd5b7cbe77f3a32d519d2bf51213afd467c777a782b65e0d003fc5607b158999a5d65f177268d6bb364fac95d", 0xf9}, {&(0x7f00000006c0)="3cb20201892bf32dcb35adf61712dd0dc4993f1a540b45d94ec0e0f141087c0d7070998c7f49796abbedc7713eb809a40ce02bcac2d917ba0b4790167a307434a2250a750f430e118a1a1d26aa8c84895f97c6749896d27fdda023f58072db37af280b104bfe07664035f624a752d1ad3b915b10f4", 0x75}, {&(0x7f0000000100)="e48df5bb0c37285900b16e3c653e0d683be135c8b1e4ac41206a1e8e", 0x1c}], 0x6, &(0x7f00000007c0)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x0, 0x820a, 0x6, 0x800, 0x7bb20376, 0x6f85ee0b, 0x5, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x70, 0x40000}, {&(0x7f0000000440)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000840)="0d95e2e70ee586d82983a7c205dd553b1225a8917836fbba0dd700d5314b56b007a4ec0cf007cef249c81b80fd99e065e47028d1c0294062bc82f2f918bdb6a601285aa8a6f8bb32f41beb9fa8dcd23af47d6ada0b67969a599a31e939cdbc14a6002622647a7d1bedfe75a4a17b346c9264aac1509c11b5f2ed596c3354d758fcd62da6486bbbc353586b477d1b412ac6bfe8878cdebbfe77d387dd38c80183bd6298acc6463bad76e2cb666bd178d2a26de187011c0a", 0xb7}], 0x1, &(0x7f00000009c0)=[@authinfo={0x18, 0x84, 0x6, {0x40}}, @sndrcv={0x30, 0x84, 0x1, {0xee, 0x2, 0x200, 0x8aef, 0x3, 0x8, 0x1, 0x3, r6}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x8003}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0xc0}, {&(0x7f0000000a80)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="1883c1979baec549589064448fbb810e783b35c67c29740beca997b12f306799e53b05554242af1fb089ca2013c060f686f3895fa81de9b71676c0982a427a8b264ca4458f314ec1501affa2528fd548ac29e72b13bccbb14324f42393782a9f97388d", 0x63}, {&(0x7f0000000b40)="6073aad80d81b0cb5f27617b4f05c68e86c3acc80c6abce06a4456ad95cf1c6c76c1a93819a8a080e7e6417eb663937a216da33f9fddb3e2e54d661b523f005eb2b98813f38c768d47e8f80825b140651ce279d5377fc63242d437e331670aa90ea1fb7807aa134177b5c16d86c0eefa36e69ee52c6530b8ef9c42db5f374880b7fd4f0b7bf8247e87aefa52819d89443dde39715efdc209e8d84ae4529307", 0x9f}], 0x2, 0x0, 0x0, 0x4}, {&(0x7f0000000c40)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000c80)="2e17aebf472c84a62fad781f78b9338d67c87981b2988a7cf912961f9c672d456bb22ef94738200a9bcb65857224ca3b1f5210613e3498fd4c7976db88ffc8f4060b92595ec8917545", 0x49}], 0x1, &(0x7f0000000d40)=[@authinfo={0x18, 0x84, 0x6, {0xb}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x2, 0x6, 0x8, 0x3, 0x6, 0x7fff, 0x7, r5}}, @init={0x18, 0x84, 0x0, {0x4, 0x1, 0x1, 0xff}}, @init={0x18, 0x84, 0x0, {0x7ff, 0x4, 0x1000}}], 0x78, 0x8010}], 0x4, 0x400c010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 3.214063044s ago: executing program 1 (id=489): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000340)=0x1000) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000340)=0x1000) getpid() (async) r1 = getpid() r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="57e3c4ee7afc7475b36160e65b62916b873e1f2018c117b2c48e9a98eda25f6e0b45fa729056c8e41af7c5edb29df8d5a45111996a265f64652630a8b9411012a3806fbcf559a81263457aa507132285a0562e2dc46d9d76b4f236bfde735ed53dc70074e37211a0", 0x68}], 0x1, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="67b5560b0000abe763a880ab3aceb07641f94267c5162d977db72f6831c4c6235c5299e9395284f730104e91ad778bee6db721339733fc523b563c383b4e738be092213a197949be56dd5fd100c91b4b9d3b2b9c28ee4b0ad23db1211fe5575469d7092fac774ba9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0x3}, @generic='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) (async) sendmsg$netlink(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0x3}, @generic='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x20, 0x1, 0x4, "5a909bc7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x20, 0x1, 0x4, "5a909bc7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x4, 0x8, 0xd, 'syz0\x00', 0xffffffff}, 0x1, 0x30, 0x7, r1, 0x7, 0x80000001, 'syz1\x00', &(0x7f0000000240)=['-)}{\x00', '/dev/snd/controlC#\x00', '-@\x00', '/dev/snd/pcmC#D#p\x00', '/dev/snd/pcmC#D#p\x00', '])*^+/%\xf2/J\xc9\\!.!,\x00', 'uyDp\x06\x0e\x16AN\xaa\xccl4\xc5\xa0\x0ez\x82@\xa470x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd}) r5 = memfd_secret(0x80000) ftruncate(r5, 0x3) ftruncate(r5, 0x1ff) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) (async) connect$rose(r6, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_GET_API_VERSION(r7, 0xae00, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) (async, rerun: 64) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000001200)=ANY=[@ANYBLOB="0100000000000000040000007f000000d8b06e5f0c000000030000000000000086bd41d3c10c2200dfb39df35790cb90d8d533db114a85f380ada97761c780ee0800"]) (async, rerun: 64) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.636106984s ago: executing program 4 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x121341, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xebf46000) ppoll(0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x39, 0x2c, 0x0, @empty, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "00ff7a", 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, [], "9e"}}}}}}, 0x6f) 2.060720766s ago: executing program 0 (id=497): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xa0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x0, 0xfff, @value=0x800000000e9fb}) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/67, 0x43, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000ca000307010200000000000000000a0000010900010073797a3000d4aab900001357"], 0x20}, 0x1, 0x0, 0x0, 0x92}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r4}, 0x10) r5 = syz_io_uring_setup(0x735d, &(0x7f0000000140)={0x0, 0xc270, 0x3000, 0x3, 0x17d}, &(0x7f0000000240), &(0x7f0000000200)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9", 0x10}], 0x1, 0x0, 0x0, 0x4000080}], 0x1, 0x40040000) recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0xc3}], 0x1, 0x2003, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x22}], 0x1, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000001ec0), 0x4) futex(0x0, 0xa, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}], 0x8) socket(0x10, 0x3, 0x0) 1.747523511s ago: executing program 4 (id=498): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) (async) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ff1000/0x3000)=nil, 0x3000}}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24000010}, 0x20040800) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00b320908400f30d6d60826f30fc7b2050000000f326691dac7110ff56198030ff5619803980f320f3566b857000f00d0", 0x5c}], 0x1, 0x0, 0x0, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x180000000) (async) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x301, 0x0) 1.632599962s ago: executing program 3 (id=499): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0xfffffec6, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000305000000045ec8043da6b2d6516497e085bd39bba59744274ff648dd6b53394848db789a7b2f3afeffffffffffffffedc0284cb3d83f6ae51f9b511979887e65a3ba8ba0ac891a671cd1676286376a9fc6513c8b9ef37177faaf0000000000000009852cf68a160a1c59e882972fd593607f6d5b2bcde60594796ef504ba0b8b9102c6df5fe05fea40db78152b552cfae41c89a2ede05e91354f9d98d0eb0181d0e9579925590b0fe7a86d7aa584e5326b495fda2492fed4bff20ed417741bf6ae9b31c249cc31a59fde5c2ba3b834346d3392a0b37fa98c5d7ee221cb75ae4d6edb5c63ba3a99deae94d6bbe55511225eec64a7f1d8ff9669b6232169f5950a00450704e6e719c20bf1ce8bf90e9ee920b326e242cc58fac2ce1051921c12825dfc9c3356bf7a540f78ab9a16cd561ffe498c6c443b471dde"], 0x0, 0x0, 0x0}, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x40, 0xe, 0x2d, "872c51aeb0d83b5364b9b41af1fb7597dc126ccb63c3cc85cee6da8c5692bedf28890038ac8d79cc3280ff18a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.568960663s ago: executing program 4 (id=500): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x40}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 1.507355837s ago: executing program 4 (id=501): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="002190085700"}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x340, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x20, 0xe1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xe0, 0xc6, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x53, 0xff}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x5, 0x7, 0x4, 0x20, 0xff}, 0xd2, &(0x7f0000000100)={0x5, 0xf, 0xd2, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf7, 0x7, 0x3}, @ptm_cap={0x3}, @generic={0xa5, 0x10, 0x3, "f0f16a00b5a594e036d61de36c36ca961a03e812b04b6ca4a8b1b931200e61a76a12df52e2e8eeeabea61fa2dfcb6d8a3f5b01063b821682f1326a549872a1d28284b14de58541767aa773aaf36cc5c91f0f9c60a59f5f4021fa74370c4be9365fe1a0d7135507fc982e70cb44b260570b214db0c6c15cc97de0e23ad97074ccd272d46d18e7eef76341dbe42e48740554cf33e0e5c0cdcfa4f570713ca4db29ce9f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x16, 0x7a, 0x2, 0x5, 0x50}, @ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x400b0df, 0xf0f, 0xff, [0x3f30]}]}, 0x8, [{0xe9, &(0x7f0000000200)=@string={0xe9, 0x3, "8f715048920d2a6c26e54ca3516723f445c2adf295d8d6f49630681a693f8d867eda2a30b4f5f72618eafe6fd9db18feddeb3e28cf0bc263bb10bc43a27f8c1813444c9fc7e0585a53728aacdfea2b43b93fcd440631ad6e2b51ba435554e809d22d7d9bffb9a03a6fb7ade82c6ba505943d01ea44f718268170677393554c95e06b76df021221d25f8723834074c4fb4a054216f978100982cc6b67955a463e4c887bbd69c6684730f14fc337791401aec5964b9e327b82522f07bbd7ed7336f4ccbd1285344934ff2c791e500d1af5a69e72d885751ca7633aa98cba548e20c799cee63ba4ae"}}, {0xb2, &(0x7f0000000300)=@string={0xb2, 0x3, "d6970c671f876f6c0c51c73d802871006a3ca2a00b979973767185d8c676435fa2fb2bb701c29a5a835ec20b6c14ccdd15f82d3a7b4f01fa291bc9cfe490c2ba035f65c35578caed9ea7ef7c1ff755a0e7beacca00c8effca896b5ff9f18d3484f531d360cd586a2d470ee90c6fed1ce8df158599efe807051963de9671c4225440bf97de909039a7f6cef6ad089bb96fbdcb612a93deeba1c640579cdec8347c6753d3a809e129681e2dd8e5c9ee225"}}, {0x5b, &(0x7f00000003c0)=@string={0x5b, 0x3, "3c38ad6a92eab1db05501db47adf87b5c630ee675d332d115001ec23dd187442d0c00b82ab7e64b9b111a892eb427b328cfb2eddcae7aa8c0a4dc7ce17ce76be247f55125ee6917336ad7df9d23b7d172adba9ca6aec2206f8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80a}}, {0xfa, &(0x7f0000000600)=@string={0xfa, 0x3, "79cd2367695dde9d42d83f11870593e8456f33b21d1356bb638290be06a0ce0f1b1258cb48d26e0aa0a845743062203464d659b9cbcb3a7642000174c120a45d32938091aeb66ab26a5ec9a0c325dc16f50495e486b8dd7b1a19b1697177785c45162ad53a1d12cf8fda99c8c0c4e44ab4fcac1c15b317a8cfc94f2b387043b6a176720a492842f1b71b63ec61ec1d46193111f76f63dd8a390ac996e7f02201d85f7ef2b200aa6fe0521ddddb5dede40d547bde68d95cd27f79e48a9b25046e1249646a0230d2b6d8b3680e5dae9abdd1d51c01683145bc8eb16b1a6ebcb8cde29c9872682ba055340a0edb8ceaa0fed76a07149fec5867"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1801}}, {0xeb, &(0x7f0000000740)=@string={0xeb, 0x3, "8df9e515d51709336e9255b4afa50bb7d4436faefb51bdb8c6c64e35824fa2a361c36e1442df409a0500d660d992c690bd84fae4169c8bebc1a7bd5e4e122ebd0345d519014559cf7733e5a0f970917a1104e463e8ab3d9946b8ee0185e160f1b8eb7fe4e6f7d6708ba035f458398e0ccd3c89e5cda1cd17302be2a3865a38c84cdd6da60a8f4ee4d15dbd1d611a8bc1eecb6fd84c2c3717effa92a67c2dfc146d0050a75f2f3a5db99fd829e664711973948224486709074b29b29a780c52a2b8b2b1062bf6f3b09232f7431d1f112679e016d2f5ec8a99062aa89faf05fa60ef1c3868f0206043e3"}}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.036616995s ago: executing program 0 (id=502): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x5148c981}}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1.033637217s ago: executing program 1 (id=503): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x29, 0x1}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff8300005800651593"], 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b4c, &(0x7f0000000080)) 976.871318ms ago: executing program 0 (id=504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r1, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) 930.63007ms ago: executing program 4 (id=505): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) close(r1) close(r0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r3) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000fffe000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c00000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000003000000000000003b0e000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000008a00000000000000000000000000e601"], 0xf8}}, 0x20040011) socket$kcm(0x10, 0x2, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000400)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r10 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40) ioctl$EVIOCSKEYCODE_V2(r14, 0x40284504, &(0x7f0000000300)={0x6, 0x2, 0x17, 0x6, "31be6d1de7378999cfb197a76fb6c82ab593459da153b022cad9c9e87a8ca068"}) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="070000007000fedbdf250200000008000100cec1f1185419a48824461d3bd7e9779adcbc245e", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24069c46458234ef181c5a8a5ff268144ce8471a9a453f5472ec796a1d974e848c15b381ffe27ae7231915472465d5ff9c16a16b4f7982b7bb74d260dc2a799edb56020000008c5e7442fb365cb455f6dff825a9a1180d757ecfbed54eb38f932e09", @ANYRES16=r6, @ANYBLOB="100027bd7000ffdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x20048001) ioctl$sock_SIOCGIFINDEX(r4, 0x2103, 0x0) socket$kcm(0x2, 0x3, 0x84) 836.448906ms ago: executing program 0 (id=506): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x200000, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04ee06"], 0xe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004093 '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000001c0)={0x0, 0x50, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ff8826bdd524cce62db7ea6ea77cbd997000fddbdf254b00000008000300000000000e0001006e656464657673233e00dc7c4a743b4c696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x5) read$FUSE(r4, &(0x7f0000000800)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac00048020000180070001006374000014000280080002400000000d0800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000180)) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000700)={0x1, @pix={0x200, 0x8000, 0x39565559, 0x7, 0x6000000, 0x1, 0x5, 0xfeedcafe, 0x3, 0x7, 0x0, 0x2}}) syz_usb_connect$uac1(0x2, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000a60201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0) 0s ago: executing program 4 (id=507): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000180)={0x0, 0xc, 0x4, "e8c7d131"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x25, 0xe, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0xf, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x1, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8a, 0x8, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0xa, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x5, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x2010001, 0x4c, 0x8, 0x3, 0x10000, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 68.636220][ T5810] cgroup: Unknown subsys name 'net' [ 68.805392][ T5810] cgroup: Unknown subsys name 'cpuset' [ 68.813728][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.194506][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.277270][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.283709][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.194436][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.202298][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.211203][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.219479][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.227157][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.229364][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.235451][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.242428][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.248741][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.263722][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.271221][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.273788][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.289081][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.296246][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.319234][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.330539][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.347221][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.354861][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.362997][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.384276][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.808621][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 72.875559][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 73.015332][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 73.089629][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.097147][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.105577][ T5826] bridge_slave_0: entered allmulticast mode [ 73.113165][ T5826] bridge_slave_0: entered promiscuous mode [ 73.144457][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.151702][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.159378][ T5826] bridge_slave_1: entered allmulticast mode [ 73.167340][ T5826] bridge_slave_1: entered promiscuous mode [ 73.193504][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.200653][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.207966][ T5819] bridge_slave_0: entered allmulticast mode [ 73.215501][ T5819] bridge_slave_0: entered promiscuous mode [ 73.258712][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.265883][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.273137][ T5819] bridge_slave_1: entered allmulticast mode [ 73.280067][ T5819] bridge_slave_1: entered promiscuous mode [ 73.333133][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.342557][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.357542][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.380852][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.413711][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.423123][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.430275][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.438015][ T5824] bridge_slave_0: entered allmulticast mode [ 73.445582][ T5824] bridge_slave_0: entered promiscuous mode [ 73.485762][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.493167][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.500264][ T5824] bridge_slave_1: entered allmulticast mode [ 73.507718][ T5824] bridge_slave_1: entered promiscuous mode [ 73.517221][ T5826] team0: Port device team_slave_0 added [ 73.560856][ T5826] team0: Port device team_slave_1 added [ 73.574062][ T5819] team0: Port device team_slave_0 added [ 73.607220][ T5819] team0: Port device team_slave_1 added [ 73.615855][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.654524][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.664770][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.671715][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.697841][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.744452][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.751404][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.777676][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.800235][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.807271][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.833613][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.867551][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.874764][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.881857][ T5831] bridge_slave_0: entered allmulticast mode [ 73.889179][ T5831] bridge_slave_0: entered promiscuous mode [ 73.897280][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.904365][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.930355][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.943356][ T5824] team0: Port device team_slave_0 added [ 73.955716][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.962971][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.970143][ T5831] bridge_slave_1: entered allmulticast mode [ 73.977406][ T5831] bridge_slave_1: entered promiscuous mode [ 73.986505][ T5824] team0: Port device team_slave_1 added [ 74.022826][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.035845][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.125908][ T5826] hsr_slave_0: entered promiscuous mode [ 74.132231][ T5826] hsr_slave_1: entered promiscuous mode [ 74.151632][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.158729][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.185200][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.214254][ T5819] hsr_slave_0: entered promiscuous mode [ 74.220996][ T5819] hsr_slave_1: entered promiscuous mode [ 74.227362][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 74.233552][ T5819] Cannot create hsr debugfs directory [ 74.241380][ T5831] team0: Port device team_slave_0 added [ 74.247800][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.254854][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.280757][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.303449][ T5831] team0: Port device team_slave_1 added [ 74.393301][ T5823] Bluetooth: hci1: command tx timeout [ 74.393305][ T5825] Bluetooth: hci0: command tx timeout [ 74.395203][ T52] Bluetooth: hci2: command tx timeout [ 74.438393][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.445547][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.471532][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.482946][ T52] Bluetooth: hci3: command tx timeout [ 74.484094][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.495383][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.521370][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.538151][ T5824] hsr_slave_0: entered promiscuous mode [ 74.544562][ T5824] hsr_slave_1: entered promiscuous mode [ 74.550716][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 74.556501][ T5824] Cannot create hsr debugfs directory [ 74.742985][ T5831] hsr_slave_0: entered promiscuous mode [ 74.749368][ T5831] hsr_slave_1: entered promiscuous mode [ 74.755804][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 74.761534][ T5831] Cannot create hsr debugfs directory [ 75.031490][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.043957][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.054538][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.073730][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.131471][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.144136][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.155067][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.165081][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.263491][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.274002][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.294829][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.305587][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.405185][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.420962][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.434059][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.445443][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.457267][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.497290][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.527312][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.534523][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.554409][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.561530][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.631744][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.695151][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.730761][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.740331][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.747592][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.778501][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.785750][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.840224][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.896491][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.903718][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.917551][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.924665][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.944773][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.979369][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.044590][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.051774][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.071567][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.078803][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.175620][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.337562][ T5819] veth0_vlan: entered promiscuous mode [ 76.394680][ T5819] veth1_vlan: entered promiscuous mode [ 76.437269][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.474560][ T52] Bluetooth: hci2: command tx timeout [ 76.475287][ T5825] Bluetooth: hci0: command tx timeout [ 76.479980][ T52] Bluetooth: hci1: command tx timeout [ 76.517466][ T5819] veth0_macvtap: entered promiscuous mode [ 76.544996][ T5819] veth1_macvtap: entered promiscuous mode [ 76.553119][ T52] Bluetooth: hci3: command tx timeout [ 76.624659][ T5826] veth0_vlan: entered promiscuous mode [ 76.653365][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.669119][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.682008][ T5826] veth1_vlan: entered promiscuous mode [ 76.711389][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.722134][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.765912][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.775513][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.800437][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.809557][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.845803][ T5831] veth0_vlan: entered promiscuous mode [ 76.877557][ T5826] veth0_macvtap: entered promiscuous mode [ 76.898303][ T5831] veth1_vlan: entered promiscuous mode [ 76.924188][ T5826] veth1_macvtap: entered promiscuous mode [ 76.988562][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.990073][ T5824] veth0_vlan: entered promiscuous mode [ 77.006191][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.021939][ T5831] veth0_macvtap: entered promiscuous mode [ 77.037060][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.070414][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.071270][ T5831] veth1_macvtap: entered promiscuous mode [ 77.084477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.096136][ T5824] veth1_vlan: entered promiscuous mode [ 77.105296][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.137352][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.158130][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.176059][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.181078][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.189642][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.223398][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.234343][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.276794][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.307505][ T5824] veth0_macvtap: entered promiscuous mode [ 77.321598][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.332111][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.350844][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.364107][ T5824] veth1_macvtap: entered promiscuous mode [ 77.438331][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.469526][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.507438][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.531351][ T1338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.541851][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.555760][ T1338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566313][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.580468][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.588981][ T1338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.613640][ T1338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.626703][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.635261][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.662268][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.671023][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.842808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.867889][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.957055][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.966745][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.044054][ T5919] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.553232][ T5823] Bluetooth: hci2: command tx timeout [ 78.558872][ T52] Bluetooth: hci0: command tx timeout [ 78.565005][ T5823] Bluetooth: hci1: command tx timeout [ 78.643295][ T5825] Bluetooth: hci3: command tx timeout [ 79.103277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.485918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.486180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.495110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.692258][ T5825] Bluetooth: hci1: command tx timeout [ 80.698095][ T5825] Bluetooth: hci0: command tx timeout [ 80.704135][ T5825] Bluetooth: hci2: command tx timeout [ 80.712613][ T5823] Bluetooth: hci3: command tx timeout [ 81.019556][ T793] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.212849][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 81.239190][ T793] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 81.267759][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 81.416586][ T793] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 81.426613][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.436069][ T793] usb 4-1: Product: syz [ 81.453905][ T793] usb 4-1: Manufacturer: syz [ 81.506235][ T793] usb 4-1: SerialNumber: syz [ 81.529199][ T793] usb 4-1: config 0 descriptor?? [ 81.593082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.612190][ T793] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 81.649609][ T793] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 82.186169][ T793] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 82.192975][ T793] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 83.292534][ T5869] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.463547][ T793] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 83.471274][ T793] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 83.480139][ T793] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 83.487457][ T793] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 83.496209][ T793] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 83.504663][ T5869] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.515959][ T5869] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.525146][ T5869] usb 2-1: config 1 has no interface number 0 [ 83.531813][ T5869] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.543832][ T5869] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 83.559020][ T5869] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 83.574256][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.585695][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.594055][ T5869] usb 2-1: Product: syz [ 83.598654][ T5869] usb 2-1: Manufacturer: syz [ 83.603920][ T793] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 83.615598][ T5869] usb 2-1: SerialNumber: syz [ 83.638521][ T793] usb 4-1: USB disconnect, device number 2 [ 83.661743][ T5990] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.668868][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.711266][ T5869] usb 2-1: selecting invalid altsetting 1 [ 83.791869][ T5995] sp0: Synchronizing with TNC [ 83.931427][ T5869] cdc_ncm 2-1:1.1: bind() failure [ 83.971396][ T5869] usb 2-1: USB disconnect, device number 2 [ 84.012708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.021245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.029892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.038463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.092640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.360669][ T5825] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 84.370791][ T5825] CPU: 1 UID: 0 PID: 5825 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 84.370808][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.370815][ T5825] Workqueue: hci1 hci_rx_work [ 84.370836][ T5825] Call Trace: [ 84.370844][ T5825] [ 84.370849][ T5825] dump_stack_lvl+0x189/0x250 [ 84.370867][ T5825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.370879][ T5825] ? __pfx__printk+0x10/0x10 [ 84.370894][ T5825] ? kernfs_path_from_node+0x250/0x290 [ 84.370907][ T5825] ? kernfs_path_from_node+0x2f/0x290 [ 84.370923][ T5825] sysfs_create_dir_ns+0x259/0x280 [ 84.370938][ T5825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.370957][ T5825] ? do_raw_spin_unlock+0x122/0x240 [ 84.370973][ T5825] kobject_add_internal+0x59f/0xb70 [ 84.370994][ T5825] kobject_add+0x155/0x220 [ 84.371011][ T5825] ? __pfx_kobject_add+0x10/0x10 [ 84.371025][ T5825] ? _raw_spin_unlock+0x28/0x50 [ 84.371039][ T5825] ? get_device_parent+0x366/0x3a0 [ 84.371053][ T5825] device_add+0x408/0xb80 [ 84.371068][ T5825] hci_conn_add_sysfs+0xd5/0x210 [ 84.371084][ T5825] le_conn_complete_evt+0xf26/0x14d0 [ 84.371104][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 84.371116][ T5825] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 84.371128][ T5825] ? __asan_memcpy+0x40/0x70 [ 84.371142][ T5825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.371153][ T5825] ? skb_pull_data+0xfb/0x200 [ 84.371170][ T5825] hci_le_conn_complete_evt+0x187/0x480 [ 84.371186][ T5825] hci_event_packet+0x78f/0x1260 [ 84.371202][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 84.371215][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 84.371231][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.371245][ T5825] ? hci_send_to_monitor+0xe2/0x590 [ 84.371258][ T5825] hci_rx_work+0x45d/0xfc0 [ 84.371275][ T5825] ? process_one_work+0x868/0x15d0 [ 84.371284][ T5825] process_one_work+0x94a/0x15d0 [ 84.371293][ T5825] ? __lock_acquire+0xab9/0xd20 [ 84.371313][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 84.371328][ T5825] ? assign_work+0x3a1/0x410 [ 84.371340][ T5825] worker_thread+0x9b0/0xee0 [ 84.371365][ T5825] kthread+0x711/0x8a0 [ 84.371378][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 84.371388][ T5825] ? __pfx_kthread+0x10/0x10 [ 84.371401][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.371412][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.371423][ T5825] ? __pfx_kthread+0x10/0x10 [ 84.371435][ T5825] ret_from_fork+0x599/0xb30 [ 84.371446][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 84.371462][ T5825] ? __switch_to_asm+0x39/0x70 [ 84.371473][ T5825] ? __switch_to_asm+0x33/0x70 [ 84.371484][ T5825] ? __pfx_kthread+0x10/0x10 [ 84.371496][ T5825] ret_from_fork_asm+0x1a/0x30 [ 84.371519][ T5825] [ 84.371553][ T5825] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.915355][ T5825] Bluetooth: hci1: failed to register connection device [ 85.212465][ T793] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.372054][ T5869] IPVS: starting estimator thread 0... [ 85.382538][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 85.400022][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 85.410057][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.504035][ T6014] IPVS: using max 24 ests per chain, 57600 per kthread [ 85.535096][ T793] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 85.544405][ T793] usb 2-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 85.553176][ T793] usb 2-1: Product: syz [ 85.560714][ T793] usb 2-1: Manufacturer: syz [ 85.570979][ T793] usb 2-1: SerialNumber: syz [ 85.587607][ T793] usb 2-1: config 0 descriptor?? [ 85.608838][ T793] usb 2-1: no audio or video endpoints found [ 85.819618][ T5869] usb 2-1: USB disconnect, device number 3 [ 86.412586][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.453429][ T6026] warning: `syz.3.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.572979][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 86.622968][ T5869] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 86.632273][ T5869] usb 1-1: config 0 has no interface number 0 [ 86.641961][ T10] cfg80211: failed to load regulatory.db [ 86.652682][ T5869] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 86.672945][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 86.680947][ T5869] usb 1-1: Product: syz [ 86.706976][ T5869] usb 1-1: Manufacturer: syz [ 86.743456][ T5869] usb 1-1: config 0 descriptor?? [ 86.990477][ T5869] usb 1-1: USB disconnect, device number 2 [ 87.013448][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.376800][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.398707][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.407258][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.415246][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.424143][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.431773][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.521441][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.683896][ T5823] Bluetooth: Frame is too long (len 18, expected len 4) [ 87.810813][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.062665][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.109749][ T6038] chnl_net:caif_netlink_parms(): no params data found [ 88.151600][ T12] bridge_slave_1: left allmulticast mode [ 88.159037][ T12] bridge_slave_1: left promiscuous mode [ 88.165598][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.179419][ T12] bridge_slave_0: left allmulticast mode [ 88.186282][ T12] bridge_slave_0: left promiscuous mode [ 88.194288][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.232953][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 88.242280][ T5889] usb 4-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 88.253999][ T5889] usb 4-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 88.262074][ T5889] usb 4-1: Product: syz [ 88.266353][ T5889] usb 4-1: Manufacturer: syz [ 88.271042][ T5889] usb 4-1: SerialNumber: syz [ 88.278876][ T5889] usb 4-1: config 0 descriptor?? [ 88.751226][ T5889] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 88.766643][ T5889] gspca_sonixj: reg_w1 err -71 [ 88.771643][ T5889] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 88.806259][ T5889] usb 4-1: USB disconnect, device number 3 [ 89.049728][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.063204][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.073262][ T12] bond0 (unregistering): Released all slaves [ 89.182515][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.250811][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.258194][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.265441][ T6038] bridge_slave_0: entered allmulticast mode [ 89.273423][ T6038] bridge_slave_0: entered promiscuous mode [ 89.301886][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.318328][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.343800][ T6038] bridge_slave_1: entered allmulticast mode [ 89.363368][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 89.371012][ T6038] bridge_slave_1: entered promiscuous mode [ 89.380137][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.428794][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.446184][ T6080] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.533645][ T5825] Bluetooth: hci3: command tx timeout [ 89.550231][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.560541][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.581910][ T5889] usb 1-1: config 0 descriptor?? [ 89.595288][ T5889] hub 1-1:0.0: USB hub found [ 89.719778][ T6080] pim6reg: entered allmulticast mode [ 89.758848][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.811009][ T5889] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 89.859015][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.868269][ T5825] Bluetooth: hci0: command tx timeout [ 89.917184][ T12] hsr_slave_0: left promiscuous mode [ 89.945968][ T12] hsr_slave_1: left promiscuous mode [ 89.959110][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.978270][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.027381][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 90.054933][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.115979][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 90.124876][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.183886][ T5889] usb 1-1: USB disconnect, device number 3 [ 90.223744][ T12] veth1_macvtap: left promiscuous mode [ 90.253346][ T12] veth0_macvtap: left promiscuous mode [ 90.270553][ T12] veth1_vlan: left promiscuous mode [ 90.297505][ T12] veth0_vlan: left promiscuous mode [ 90.902514][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.990905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 91.020369][ T12] team0 (unregistering): Port device team_slave_0 removed [ 91.042622][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 91.063136][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 91.070432][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.083111][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.092281][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.100394][ T24] usb 1-1: Product: syz [ 91.104670][ T24] usb 1-1: Manufacturer: syz [ 91.109277][ T24] usb 1-1: SerialNumber: syz [ 91.132055][ T24] usb 1-1: config 0 descriptor?? [ 91.142810][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 91.152334][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 91.449039][ T6038] team0: Port device team_slave_0 added [ 91.459679][ T6038] team0: Port device team_slave_1 added [ 91.518769][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.542446][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.593212][ T5823] Bluetooth: hci3: command tx timeout [ 91.608958][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.624637][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.631742][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.658947][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.753485][ T24] em28xx 1-1:0.0: chip ID is em2765 [ 91.855562][ T6038] hsr_slave_0: entered promiscuous mode [ 91.899538][ T6038] hsr_slave_1: entered promiscuous mode [ 91.914516][ T6038] debugfs: 'hsr0' already exists in 'hsr' [ 91.920905][ T6038] Cannot create hsr debugfs directory [ 91.996657][ T12] IPVS: stop unused estimator thread 0... [ 92.030328][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 92.083322][ T24] em28xx 1-1:0.0: board has no eeprom [ 92.112454][ T5869] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.166067][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 92.187179][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 92.202914][ T5890] em28xx 1-1:0.0: Binding DVB extension [ 92.225006][ T24] usb 1-1: USB disconnect, device number 4 [ 92.249565][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 92.262789][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 92.305805][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.332642][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.335300][ T5890] em28xx 1-1:0.0: Registering input extension [ 92.344890][ T5869] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 92.359229][ T24] em28xx 1-1:0.0: Closing input extension [ 92.374202][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.405402][ T24] em28xx 1-1:0.0: Freeing device [ 92.421401][ T5869] usb 4-1: config 0 descriptor?? [ 92.566127][ T6038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.601988][ T6038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.630752][ T6038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.654496][ T6038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.891078][ T5869] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 92.937758][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.989328][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.024530][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.031722][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.100224][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.107434][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.263204][ T5890] usb 4-1: USB disconnect, device number 4 [ 93.673579][ T5823] Bluetooth: hci3: command tx timeout [ 93.771728][ T5869] IPVS: starting estimator thread 0... [ 93.872607][ T6182] IPVS: using max 25 ests per chain, 60000 per kthread [ 93.891394][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.017663][ T6187] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 94.568765][ T6206] random: crng reseeded on system resumption [ 95.479882][ T6038] veth0_vlan: entered promiscuous mode [ 95.514061][ T6038] veth1_vlan: entered promiscuous mode [ 95.655495][ T6038] veth0_macvtap: entered promiscuous mode [ 95.687678][ T6038] veth1_macvtap: entered promiscuous mode [ 95.740581][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.755125][ T5823] Bluetooth: hci3: command tx timeout [ 95.796247][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.822470][ T1338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.841701][ T1338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.875483][ T1338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.923415][ T1338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.973166][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.166136][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.210002][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 96.236869][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.510287][ T24] usb 4-1: config 0 descriptor?? [ 96.599573][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 96.612857][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.638504][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.767395][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.787300][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.964212][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 97.203159][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 97.212583][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 97.232209][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 97.263278][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 97.277800][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 97.307202][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 97.333482][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 97.346431][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 97.365023][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 97.377375][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 97.425103][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 97.439597][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 97.451383][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 97.459748][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 97.495025][ T24] pwc: Registered as video103. [ 97.514964][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 97.576170][ T24] usb 4-1: USB disconnect, device number 5 [ 97.822502][ T5890] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.000968][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.033555][ T5890] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 98.058481][ T6260] fuseblk: Bad value for 'fd' [ 98.076692][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.103648][ T5890] usb 5-1: config 0 descriptor?? [ 98.143283][ T5890] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 98.343579][ T5890] usb 5-1: USB disconnect, device number 2 [ 99.271843][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.454563][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 99.467718][ T5869] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 99.484021][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.492073][ T5869] usb 5-1: Product: syz [ 99.496892][ T5869] usb 5-1: Manufacturer: syz [ 99.501555][ T5869] usb 5-1: SerialNumber: syz [ 99.516529][ T5869] usb 5-1: config 0 descriptor?? [ 99.534875][ T5869] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 99.565981][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.871190][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.894520][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.905348][ T5920] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 99.916878][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.940015][ T5920] usb 1-1: config 0 descriptor?? [ 100.192445][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.354984][ T5915] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 100.367450][ T5920] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 5/7 [ 100.379081][ T5920] pyra 0003:1E7D:2CF6.0002: parse failed [ 100.385162][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.398586][ T5920] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -22 [ 100.415035][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.426713][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.444782][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.458663][ T5915] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.467996][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.485657][ T5915] usb 4-1: config 0 descriptor?? [ 100.495676][ T6308] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 100.568355][ T5920] usb 1-1: USB disconnect, device number 5 [ 100.926301][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.939573][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.947770][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.955581][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.963221][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.970615][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.979853][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.987564][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 100.997286][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 101.004930][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 101.032697][ T5915] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 101.197384][ T5920] usb 4-1: USB disconnect, device number 6 [ 101.361476][ T5869] gspca_ov534_9: reg_w failed -71 [ 101.366814][ T6318] random: crng reseeded on system resumption [ 101.632423][ T5869] gspca_ov534_9: Unknown sensor 0000 [ 101.632560][ T5869] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 101.664493][ T5869] usb 5-1: USB disconnect, device number 3 [ 102.012445][ T5890] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.182542][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 102.189669][ T5890] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.220982][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.242920][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 102.252286][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.269509][ T5890] usb 4-1: config 0 descriptor?? [ 102.622721][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.697414][ T5890] lg-g15 0003:046D:C225.0004: hidraw0: USB HID vb.27 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 102.772608][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 102.779440][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 102.793401][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.803370][ T5869] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 102.813405][ T5869] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 102.824241][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.834522][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.842899][ T5869] usb 1-1: SerialNumber: syz [ 102.850526][ T6334] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 102.857976][ T6334] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 102.865195][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.898082][ T5889] usb 4-1: USB disconnect, device number 7 [ 103.032642][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 103.043895][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.055413][ T5876] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.065569][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.078249][ T5876] usb 2-1: config 0 descriptor?? [ 103.096280][ T5869] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 103.105716][ T5869] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 103.122447][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 103.132136][ T5869] usb 1-1: USB disconnect, device number 6 [ 103.534439][ T5876] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 103.924998][ T5876] usb 2-1: USB disconnect, device number 4 [ 104.056590][ T6367] mmap: syz.0.133 (6367) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.155508][ T6371] sctp: [Deprecated]: syz.4.135 (pid 6371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.155508][ T6371] Use struct sctp_sack_info instead [ 104.334020][ T6374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.372685][ T5889] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.536420][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 104.546613][ T5889] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.610252][ T5889] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.643792][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.707857][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.866646][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.892632][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.912683][ T5889] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.987115][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.066649][ T5889] usb 4-1: config 0 descriptor?? [ 105.319736][ T5889] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.374557][ T5889] usb 4-1: USB disconnect, device number 8 [ 105.403709][ T5889] usblp0: removed [ 105.553476][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.722434][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 105.730218][ T5876] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 105.745851][ T5876] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.762798][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.773557][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.786449][ T5876] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.804461][ T5876] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.814704][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.842507][ T5889] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.910130][ T6374] wireguard: wg1: Could not create IPv4 socket [ 105.942490][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.002474][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 106.013661][ T5889] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.022448][ T5889] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.031080][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.050480][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.070540][ T5876] usb 2-1: usb_control_msg returned -32 [ 106.076781][ T5876] usbtmc 2-1:16.0: can't read capabilities [ 106.086631][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.096431][ T5869] usb 1-1: device descriptor read/64, error -71 [ 106.119303][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.127677][ T6393] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.143'. [ 106.152895][ T5889] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.161946][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.175921][ T5889] usb 4-1: config 0 descriptor?? [ 106.343632][ T5869] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 106.405719][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.416353][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.429437][ T5889] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.463311][ T6369] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 106.484264][ T5869] usb 1-1: device descriptor read/64, error -71 [ 106.546141][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.557056][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.565842][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.573940][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.581805][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.589780][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.596378][ T5869] usb usb1-port1: attempt power cycle [ 106.597677][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.610849][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.619001][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.628120][ T6399] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 106.797134][ T6402] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 106.942514][ T5869] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.964946][ T5869] usb 1-1: device descriptor read/8, error -71 [ 107.213574][ T5869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 107.246081][ T5869] usb 1-1: device descriptor read/8, error -71 [ 107.362704][ T5869] usb usb1-port1: unable to enumerate USB device [ 107.532905][ T5915] usb 4-1: USB disconnect, device number 9 [ 107.546247][ T5915] usblp1: removed [ 107.589615][ T6412] syz.3.148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 107.833258][ T6427] ======================================================= [ 107.833258][ T6427] WARNING: The mand mount option has been deprecated and [ 107.833258][ T6427] and is ignored by this kernel. Remove the mand [ 107.833258][ T6427] option from the mount to silence this warning. [ 107.833258][ T6427] ======================================================= [ 107.876207][ T6427] overlayfs: failed to clone lowerpath [ 108.032493][ T5889] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 108.182436][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 108.190875][ T5889] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 108.200086][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.209124][ T5889] usb 4-1: Product: syz [ 108.214000][ T5889] usb 4-1: Manufacturer: syz [ 108.218599][ T5889] usb 4-1: SerialNumber: syz [ 108.225367][ T5889] usb 4-1: config 0 descriptor?? [ 108.299044][ T5869] usb 2-1: USB disconnect, device number 5 [ 108.652558][ T5889] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 108.685614][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.700703][ T5889] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 108.720470][ T5889] usb 4-1: media controller created [ 108.767910][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.847501][ T6425] dtv5100: wlen = 0, aborting. [ 109.208342][ T5889] zl10353_read_register: readreg error (reg=127, ret==0) [ 109.238726][ T5889] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 109.253347][ T5889] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 109.271468][ T5889] usb 4-1: USB disconnect, device number 10 [ 109.389780][ T5889] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 109.642454][ T5915] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 109.732472][ T5890] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 109.794633][ T5915] usb 2-1: not running at top speed; connect to a high speed hub [ 109.816886][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 109.828864][ T5915] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 109.843955][ T5915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.862397][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.870852][ T5915] usb 2-1: Product: 탎嫻즠첌ᵰ璷氎໎搪⍫该걑刎堚ﶻ㹖፷沕뼦蝤筶㴖 [ 109.892730][ T5915] usb 2-1: Manufacturer: 㒔 [ 109.897395][ T5915] usb 2-1: SerialNumber: 칗쉜厪ꞿ礲ꁤ修狗鷑銺㡱ึ㩊ÿ窀]嚈턬빤鎶㐀ᤱ䒽ྀ籪뎳䛡欂壘究၁̻ᖖ營⫹㔦㭪㮇ꃏ罐噕嶨兟淦훘鷷 [ 109.916822][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 109.927806][ T5890] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 109.939573][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.952491][ T5915] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 109.961979][ T5915] usb 2-1: no configuration chosen from 1 choice [ 109.968407][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.981884][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.993254][ T5890] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.008311][ T5890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.017658][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.235136][ T5890] usb 1-1: usb_control_msg returned -32 [ 110.249141][ T6512] kvm: kvm [6511]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 110.252243][ T5890] usbtmc 1-1:16.0: can't read capabilities [ 110.258618][ T6512] kvm: kvm [6511]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 110.303947][ T6512] kvm: kvm [6511]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 110.354080][ T6512] kvm: kvm [6511]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 110.369107][ T6512] kvm: kvm [6511]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 111.082211][ T5889] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.251710][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 111.258891][ T5889] usb 4-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 111.269493][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.282205][ T5889] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.291250][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.299593][ T5889] usb 4-1: Product: М [ 111.303742][ T5889] usb 4-1: Manufacturer: ◘蛂펐咾ꌳ䘭棔ⷬ뇑즏ꀏꎒᅮꃶ㊿σ柉쪇Ӵ靵蛸ᳲ唢⃴⸽釹 [ 111.315165][ T5889] usb 4-1: SerialNumber: О [ 111.637804][ T5889] usb 4-1: 0:2 : does not exist [ 111.680108][ T5889] usb 4-1: USB disconnect, device number 11 [ 111.732741][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.868420][ T6577] overlayfs: failed to clone upperpath [ 111.917761][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 112.371402][ T5915] usb 2-1: USB disconnect, device number 6 [ 112.441709][ T5889] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.611425][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 112.626605][ T5889] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 112.636681][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.656551][ T5889] usb 4-1: Product: syz [ 112.660767][ T5889] usb 4-1: Manufacturer: syz [ 112.676745][ T5889] usb 4-1: SerialNumber: syz [ 112.692971][ T5889] usb 4-1: config 0 descriptor?? [ 112.707291][ T5889] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 112.913419][ T5920] usb 4-1: USB disconnect, device number 12 [ 113.180795][ T5890] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 113.332736][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.341488][ T5890] usb 2-1: not running at top speed; connect to a high speed hub [ 113.350303][ T5890] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 113.358711][ T5890] usb 2-1: config 3 has no interface number 0 [ 113.364956][ T5890] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 113.375986][ T5890] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 113.388029][ T5890] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid wMaxPacketSize 0 [ 113.398029][ T5890] usb 2-1: config 3 interface 106 has no altsetting 0 [ 113.407589][ T5890] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 113.416790][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.424834][ T5890] usb 2-1: Product: syz [ 113.429253][ T5890] usb 2-1: Manufacturer: syz [ 113.434026][ T5890] usb 2-1: SerialNumber: syz [ 113.443789][ T6607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.653757][ T6607] binder: 6606:6607 unknown command 0 [ 113.659329][ T6607] binder: 6606:6607 ioctl c0306201 200000000080 returned -22 [ 113.730561][ T6607] binder: 6606:6607 ioctl c0306201 2000000003c0 returned -14 [ 113.909801][ T5890] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 113.925315][ T5890] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 113.944588][ T5890] usb 2-1: USB disconnect, device number 7 [ 113.985499][ T5890] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 114.007801][ T5890] kobil_sct 2-1:3.106: device disconnected [ 114.420096][ T5915] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 114.559974][ T5915] usb 4-1: device descriptor read/64, error -71 [ 114.574946][ T6643] random: crng reseeded on system resumption [ 114.799859][ T5915] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 114.909790][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.929763][ T5915] usb 4-1: device descriptor read/64, error -71 [ 115.040926][ T5915] usb usb4-port1: attempt power cycle [ 115.081619][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.092587][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.104647][ T5889] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.114103][ T5889] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 115.123082][ T5889] usb 2-1: Manufacturer: syz [ 115.130538][ T5889] usb 2-1: config 0 descriptor?? [ 115.379627][ T5915] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 115.412349][ T5915] usb 4-1: device descriptor read/8, error -71 [ 115.649467][ T5915] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 115.670616][ T5915] usb 4-1: device descriptor read/8, error -71 [ 115.745698][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.754574][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.780666][ T5915] usb usb4-port1: unable to enumerate USB device [ 115.934227][ T6660] capability: warning: `syz.4.207' uses deprecated v2 capabilities in a way that may be insecure [ 115.969042][ T5889] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input8 [ 115.991813][ T6554] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 116.010900][ T5920] usb 1-1: USB disconnect, device number 11 [ 116.059311][ T5889] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input9 [ 116.097431][ T5889] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input10 [ 116.140930][ T5889] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0006/input/input11 [ 116.173835][ T5889] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 116.210015][ T5889] usb 2-1: USB disconnect, device number 8 [ 116.462415][ T6673] fido_id[6673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 116.813212][ T6682] netlink: 360 bytes leftover after parsing attributes in process `syz.1.213'. [ 116.907859][ T6688] process 'syz.1.216' launched './file0' with NULL argv: empty string added [ 116.954926][ T6686] overlayfs: failed to clone upperpath [ 117.431704][ T6703] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.590335][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 117.702976][ T6715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.224'. [ 117.769526][ T6718] binder: 6717:6718 ioctl c0306201 2000000002c0 returned -14 [ 117.798691][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 117.811590][ T5889] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 117.830157][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.841211][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.851727][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.861871][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.875370][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.886355][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.114990][ T5889] usb 4-1: usb_control_msg returned -32 [ 118.121237][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 118.166918][ T6727] syz.4.231 uses obsolete (PF_INET,SOCK_PACKET) [ 118.178192][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.362103][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.373509][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.385170][ T5869] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.398980][ T5869] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.407203][ T5869] usb 2-1: Manufacturer: syz [ 118.417713][ T5869] usb 2-1: config 0 descriptor?? [ 118.807858][ T5890] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 118.834970][ T6752] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 118.961708][ T5890] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 118.973625][ T5890] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 118.983180][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.003639][ T5890] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 119.446292][ T5869] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 119.455664][ T5869] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 119.463825][ T5869] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 119.472090][ T5869] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 119.479702][ T5869] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 119.494381][ T5869] usb 2-1: USB disconnect, device number 9 [ 120.068679][ T5890] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 120.075694][ T5890] stv0680 1-1:4.0: last error: 86, command = 0x90 [ 120.236984][ T5876] usb 4-1: USB disconnect, device number 17 [ 120.295093][ T5869] usb 1-1: USB disconnect, device number 12 [ 120.453407][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.242'. [ 120.462429][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.242'. [ 120.471594][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.242'. [ 120.480894][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.242'. [ 120.627247][ T5876] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 120.666911][ T5889] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 120.790719][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 120.801825][ T5876] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 120.811266][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.824166][ T5876] usb 4-1: config 0 descriptor?? [ 120.830111][ T6774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.849363][ T5889] usb 2-1: not running at top speed; connect to a high speed hub [ 120.871268][ T5889] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 120.883559][ T5889] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.894497][ T5889] usb 2-1: config 1 interface 0 has no altsetting 0 [ 120.905508][ T5889] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40 [ 120.926979][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.935116][ T5889] usb 2-1: Product: 좐焯㹋䋠ᗲ轳ಆ⁍ꈼ㨇燙孃郻ᯖȠ萅ℿﵥ鳮㾐খ꧶垔募蹫㕨聴✨됕叆೯딽⾮ꉿ [ 120.949784][ T5889] usb 2-1: Manufacturer: 㠊 [ 120.955505][ T5889] usb 2-1: SerialNumber: ࠓ [ 120.965225][ T6778] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 121.213018][ T5889] usbhid 2-1:1.0: can't add hid device: -71 [ 121.223611][ T5889] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 121.243544][ T5889] usb 2-1: USB disconnect, device number 10 [ 121.443501][ T6792] Zero length message leads to an empty skb [ 121.467110][ T5876] usbhid 4-1:0.0: can't add hid device: -71 [ 121.473170][ T5876] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 121.497866][ T5876] usb 4-1: USB disconnect, device number 18 [ 121.628251][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 121.687135][ T30] audit: type=1326 audit(6054151867.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18e438f6c9 code=0x0 [ 122.058894][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 122.093065][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 122.216385][ T5915] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 122.378355][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 122.393581][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.409112][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.420440][ T5915] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 122.429771][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.447003][ T5915] usb 2-1: config 0 descriptor?? [ 122.876878][ T5876] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 122.892807][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 122.900861][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.920625][ T5915] usb 2-1: USB disconnect, device number 11 [ 122.942095][ T6852] netlink: 44 bytes leftover after parsing attributes in process `syz.3.261'. [ 123.050262][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.061324][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 123.225811][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 123.236926][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.253114][ T5876] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 123.262325][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.270683][ T5876] usb 1-1: Product: syz [ 123.274867][ T5876] usb 1-1: Manufacturer: syz [ 123.279546][ T5876] usb 1-1: SerialNumber: syz [ 123.286883][ T5876] usb 1-1: config 0 descriptor?? [ 123.300128][ T5876] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 123.500724][ T5915] usb 1-1: USB disconnect, device number 13 [ 123.543001][ T6859] xt_l2tp: v2 sid > 0xffff: 1114112 [ 123.802274][ T30] audit: type=1326 audit(6054151869.221:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.826331][ T30] audit: type=1326 audit(6054151869.221:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.835402][ T5876] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.850084][ T30] audit: type=1326 audit(6054151869.221:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.878546][ T30] audit: type=1326 audit(6054151869.221:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.901270][ T30] audit: type=1326 audit(6054151869.221:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.924589][ T30] audit: type=1326 audit(6054151869.221:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.947515][ T30] audit: type=1326 audit(6054151869.231:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.974091][ T30] audit: type=1326 audit(6054151869.231:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 123.998808][ T30] audit: type=1326 audit(6054151869.231:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e5d78f6c9 code=0x7ffc0000 [ 124.076043][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 124.087395][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.101484][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 124.103992][ T6875] ucma_write: process 136 (syz.0.269) changed security contexts after opening file descriptor, this is not allowed. [ 124.122503][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 124.137263][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.146974][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 124.156645][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 124.166308][ T5876] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166 [ 124.178846][ T5876] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 124.187994][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.196042][ T5876] usb 2-1: Product: syz [ 124.200211][ T5876] usb 2-1: Manufacturer: syz [ 124.204814][ T5876] usb 2-1: SerialNumber: syz [ 124.215985][ T5876] usb 2-1: config 0 descriptor?? [ 124.221698][ T6858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.233182][ T6858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.240428][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 124.250843][ T5876] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.405063][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 124.411562][ T5889] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 124.420741][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.422668][ T6879] validate_nla: 55 callbacks suppressed [ 124.422683][ T6879] netlink: 'syz.4.270': attribute type 4 has an invalid length. [ 124.430607][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.464835][ T5876] usb 2-1: USB disconnect, device number 12 [ 124.482931][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.500007][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.531225][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.558202][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.782948][ T5889] usb 4-1: usb_control_msg returned -32 [ 124.789133][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 125.143665][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.177510][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.232749][ T6896] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 125.247746][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.286283][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.328334][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.332139][ T5915] usb 4-1: USB disconnect, device number 19 [ 125.360670][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.474277][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 125.493070][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.503725][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.509586][ T6914] dvmrp0: entered allmulticast mode [ 125.815039][ T5889] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 125.966835][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.981007][ T5889] usb 1-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=3a.ba [ 125.991188][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.999653][ T5889] usb 1-1: Product: syz [ 126.004144][ T5889] usb 1-1: Manufacturer: syz [ 126.009329][ T5889] usb 1-1: SerialNumber: syz [ 126.018462][ T5889] usb 1-1: config 0 descriptor?? [ 126.027705][ T5889] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 126.235009][ T24] usb 1-1: USB disconnect, device number 14 [ 126.680448][ T6943] x_tables: duplicate entry at hook 1 [ 126.901859][ T5823] Bluetooth: hci0: SCO packet for unknown connection handle 2989 [ 126.929086][ T5890] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 127.019766][ T6957] netlink: 'syz.1.294': attribute type 28 has an invalid length. [ 127.023927][ T6955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.035541][ T6957] netlink: 80 bytes leftover after parsing attributes in process `syz.1.294'. [ 127.125036][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 127.132073][ T5890] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 127.144058][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.175289][ T5890] usb 4-1: config 0 has no interface number 0 [ 127.181428][ T5890] usb 4-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.198393][ T5890] usb 4-1: config 0 interface 120 has no altsetting 0 [ 127.208694][ T5890] usb 4-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 127.225260][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.233300][ T5890] usb 4-1: Product: syz [ 127.250124][ T5890] usb 4-1: Manufacturer: syz [ 127.254752][ T5890] usb 4-1: SerialNumber: syz [ 127.265467][ T5890] usb 4-1: config 0 descriptor?? [ 127.270959][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 127.273068][ T5890] rndis_host 4-1:0.120: skipping garbage [ 127.291694][ T5890] usb 4-1: bad CDC descriptors [ 127.311611][ T5890] cdc_acm 4-1:0.120: Zero length descriptor references [ 127.319750][ T5890] cdc_acm 4-1:0.120: probe with driver cdc_acm failed with error -22 [ 127.413113][ T6969] program syz.0.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.423868][ T6969] netlink: 328 bytes leftover after parsing attributes in process `syz.0.299'. [ 127.472585][ T6943] x_tables: duplicate entry at hook 1 [ 127.512337][ T24] usb 4-1: USB disconnect, device number 20 [ 127.573890][ T6974] netlink: 64 bytes leftover after parsing attributes in process `syz.4.300'. [ 127.918623][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 128.002603][ T6997] capability: warning: `syz.1.308' uses 32-bit capabilities (legacy support in use) [ 128.055092][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.085115][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 128.097641][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 128.117149][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.134105][ T24] usb 4-1: config 0 descriptor?? [ 128.148591][ T24] pwc: Logitech QuickCam Zoom USB webcam detected. [ 128.155542][ T24] pwc: Warning: more than 1 configuration available. [ 128.205071][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 128.212534][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 128.225984][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.241704][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.251256][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.259600][ T5889] usb 1-1: Product: syz [ 128.264618][ T5889] usb 1-1: Manufacturer: syz [ 128.270102][ T5889] usb 1-1: SerialNumber: syz [ 128.278513][ T5889] usb 1-1: config 0 descriptor?? [ 128.287994][ T5889] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.302518][ T5889] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 128.358643][ T24] pwc: Failed to set LED on/off time (-71) [ 128.371811][ T24] pwc: send_video_command error -71 [ 128.377676][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 128.389166][ T24] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 128.406762][ T24] usb 4-1: USB disconnect, device number 21 [ 128.425056][ T5876] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 128.506760][ T7009] openvswitch: netlink: Message has 4 unknown bytes. [ 128.513478][ T7009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.585072][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 128.591480][ T5876] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.599597][ T5876] usb 2-1: config 0 has no interface number 0 [ 128.605886][ T5876] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 128.616638][ T5876] usb 2-1: config 0 interface 1 has no altsetting 0 [ 128.625730][ T5876] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 128.635587][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.643603][ T5876] usb 2-1: Product: syz [ 128.647916][ T5876] usb 2-1: Manufacturer: syz [ 128.652544][ T5876] usb 2-1: SerialNumber: syz [ 128.659397][ T5876] usb 2-1: config 0 descriptor?? [ 128.878298][ T5876] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 128.890345][ T5876] cx231xx 2-1:0.1: Failed to read PCB config [ 128.898043][ T5889] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 128.915324][ T5876] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 128.924394][ T5889] em28xx 1-1:0.0: Config register raw data: 0x0a [ 128.933697][ T5876] usb 2-1: USB disconnect, device number 13 [ 129.181342][ T7017] netlink: 348 bytes leftover after parsing attributes in process `syz.4.317'. [ 129.245722][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 129.395034][ T5876] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 129.405115][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 129.412324][ T24] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 129.421729][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.436929][ T24] usb 4-1: config 0 descriptor?? [ 129.465262][ T24] as10x_usb: device has been detected [ 129.473406][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 129.500220][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 129.546684][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 129.557852][ T24] as10x_usb: error during firmware upload part1 [ 129.564486][ T5876] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.564913][ T24] Registered device nBox DVB-T Dongle [ 129.574161][ T5876] usb 2-1: config 0 has no interface number 0 [ 129.588485][ T5876] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 129.599538][ T5876] usb 2-1: config 0 interface 1 has no altsetting 0 [ 129.609053][ T5876] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 129.618479][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.626754][ T5876] usb 2-1: Product: syz [ 129.631105][ T5876] usb 2-1: Manufacturer: syz [ 129.636031][ T5876] usb 2-1: SerialNumber: syz [ 129.644716][ T5876] usb 2-1: config 0 descriptor?? [ 129.667492][ T24] usb 4-1: USB disconnect, device number 22 [ 129.711574][ T24] Unregistered device nBox DVB-T Dongle [ 129.717541][ T24] as10x_usb: device has been disconnected [ 129.863792][ T5876] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 129.882553][ T5876] cx231xx 2-1:0.1: bad scenario!!!!! [ 129.882553][ T5876] config_info=0 [ 129.895193][ T5876] cx231xx 2-1:0.1: Failed to read PCB config [ 129.898808][ T7027] netlink: 'syz.4.321': attribute type 21 has an invalid length. [ 129.925107][ T7027] netlink: 156 bytes leftover after parsing attributes in process `syz.4.321'. [ 129.938837][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 129.951187][ T7027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.085447][ T5876] usb 2-1: USB disconnect, device number 14 [ 130.767258][ T5920] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 130.855491][ T24] usb 1-1: USB disconnect, device number 15 [ 130.862802][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 130.874595][ T24] em28xx 1-1:0.0: Freeing device [ 130.936822][ T5920] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 130.953840][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.994823][ T5920] usb 4-1: config 0 has no interface number 0 [ 131.015084][ T5920] usb 4-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 131.024451][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.033185][ T5920] usb 4-1: Product: syz [ 131.039849][ T5920] usb 4-1: Manufacturer: syz [ 131.044601][ T5920] usb 4-1: SerialNumber: syz [ 131.055426][ T5920] usb 4-1: config 0 descriptor?? [ 131.071825][ T5920] cdc_acm 4-1:0.123: skipping garbage [ 131.274022][ T5889] usb 4-1: USB disconnect, device number 23 [ 131.398502][ T5920] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 131.420351][ T7063] can: request_module (can-proto-0) failed. [ 131.567252][ T5920] usb 1-1: config 0 has an invalid interface number: 225 but max is 1 [ 131.575615][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.586291][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.596931][ T5920] usb 1-1: config 0 has no interface number 0 [ 131.604195][ T5920] usb 1-1: too many endpoints for config 0 interface 225 altsetting 155: 172, using maximum allowed: 30 [ 131.615391][ T5920] usb 1-1: config 0 interface 225 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 131.628813][ T5920] usb 1-1: config 0 interface 225 has no altsetting 0 [ 131.635671][ T5920] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=51.27 [ 131.644726][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.654793][ T5920] usb 1-1: config 0 descriptor?? [ 131.877097][ T5920] usb 1-1: string descriptor 0 read error: -71 [ 131.889751][ T5920] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 132.036300][ T7073] netlink: 'syz.1.339': attribute type 2 has an invalid length. [ 132.054733][ T5920] usb 1-1: USB disconnect, device number 16 [ 132.125059][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 132.157771][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 132.297865][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 132.306425][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.318375][ T24] usb 4-1: config 220 has no interface number 2 [ 132.324746][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 132.339410][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 132.359591][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 132.366584][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 132.375911][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 132.385154][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.393161][ T24] usb 4-1: Product: syz [ 132.397463][ T24] usb 4-1: Manufacturer: syz [ 132.402064][ T24] usb 4-1: SerialNumber: syz [ 132.515073][ T5920] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.613366][ T7070] netlink: 44 bytes leftover after parsing attributes in process `syz.3.338'. [ 132.718084][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.734880][ T5920] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 132.748386][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.754716][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.763828][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.787363][ T5920] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 132.805094][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.814703][ T24] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 132.815531][ T5920] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 132.816950][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.823066][ T24] uvcvideo 4-1:220.0: No valid video chain found. [ 132.823157][ T24] usb 4-1: selecting invalid altsetting 0 [ 132.840241][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.858013][ T24] usb 4-1: selecting invalid altsetting 0 [ 132.863828][ T5920] usb 2-1: SerialNumber: syz [ 132.906275][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 132.934902][ T24] usb 4-1: USB disconnect, device number 24 [ 133.155688][ T43] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 133.210268][ T5920] usb 2-1: USB disconnect, device number 15 [ 133.259959][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.345'. [ 133.305021][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 133.436329][ T43] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 133.489259][ T7103] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 133.496956][ T7103] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 133.595395][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 133.616361][ T43] usb usb1-port1: attempt power cycle [ 133.814376][ T7122] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 133.965531][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 133.975779][ T43] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 133.976984][ T7124] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.988447][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 134.011532][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 134.115078][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 134.125792][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 134.134155][ T24] usb 4-1: config 0 has no interface number 0 [ 134.143298][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 134.152893][ T43] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 134.162397][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.171388][ T24] usb 4-1: Product: syz [ 134.175739][ T24] usb 4-1: Manufacturer: syz [ 134.180360][ T24] usb 4-1: SerialNumber: syz [ 134.185563][ T43] usb 1-1: Invalid ep0 maxpacket: 64 [ 134.192065][ T43] usb usb1-port1: unable to enumerate USB device [ 134.199413][ T24] usb 4-1: config 0 descriptor?? [ 134.206659][ T24] smsc95xx v2.0.0 [ 134.365770][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 134.448071][ T7138] overlayfs: failed to clone upperpath [ 134.458498][ T7138] overlayfs: failed to clone upperpath [ 134.515170][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 134.528652][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.543122][ T5920] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=58.d6 [ 134.552413][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.560478][ T5920] usb 2-1: Product: syz [ 134.564718][ T5920] usb 2-1: Manufacturer: syz [ 134.570371][ T5920] usb 2-1: SerialNumber: syz [ 134.578743][ T5920] usb 2-1: config 0 descriptor?? [ 134.607067][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 134.622878][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 134.789983][ T5920] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 134.798340][ T5920] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 134.996553][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.005584][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.010271][ T7116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.022356][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.032566][ T7116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.034084][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.055966][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 135.060314][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.069532][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 135.080097][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.092926][ T24] usb 4-1: USB disconnect, device number 25 [ 135.098913][ T5920] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 135.099020][ T5920] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 135.102729][ T5920] usb 2-1: USB disconnect, device number 16 [ 135.175310][ T7146] netlink: 'syz.4.364': attribute type 21 has an invalid length. [ 135.183118][ T7146] netlink: 156 bytes leftover after parsing attributes in process `syz.4.364'. [ 135.657891][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.367'. [ 135.832195][ T5920] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 135.870199][ T7163] netlink: 'syz.4.372': attribute type 6 has an invalid length. [ 135.878600][ T7163] netlink: 168 bytes leftover after parsing attributes in process `syz.4.372'. [ 135.973063][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 135.994047][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 136.015433][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.035158][ T5920] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 136.044580][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.056955][ T5920] usb 4-1: config 0 descriptor?? [ 136.271490][ T5920] cherry 0003:046A:0023.0008: item fetching failed at offset 5/7 [ 136.280648][ T5920] cherry 0003:046A:0023.0008: probe with driver cherry failed with error -22 [ 136.300417][ T5920] usb 4-1: USB disconnect, device number 26 [ 136.335024][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 136.432866][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 136.513522][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 136.531436][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 136.544030][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 136.560587][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 136.570458][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 136.579968][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.603779][ T43] usb 1-1: config 0 descriptor?? [ 136.615047][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 136.776926][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.788952][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.800076][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.809231][ T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 136.817323][ T24] usb 2-1: Manufacturer: syz [ 136.823572][ T43] hdpvr 1-1:0.0: firmware version 0x15 dated &S+3 Q"ߨTe3;x&X^ w [ 136.835511][ T5915] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 136.844243][ T24] usb 2-1: config 0 descriptor?? [ 136.998650][ T5915] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.007816][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.015866][ T5915] usb 4-1: Product: syz [ 137.020041][ T5915] usb 4-1: Manufacturer: syz [ 137.024811][ T43] hdpvr 1-1:0.0: device init failed [ 137.031026][ T5915] usb 4-1: SerialNumber: syz [ 137.038261][ T43] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 137.050381][ T5915] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.071862][ T43] usb 1-1: USB disconnect, device number 21 [ 137.090948][ T793] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.863535][ T24] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #100: -71 [ 137.875334][ T24] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 137.883482][ T24] uclogic 0003:256C:006D.0009: failed probing pen v1 parameters: -71 [ 137.891736][ T24] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 137.899381][ T24] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 137.912417][ T24] usb 2-1: USB disconnect, device number 17 [ 138.048612][ T7215] Bluetooth: MGMT ver 1.23 [ 138.156321][ T793] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 138.163891][ T793] ath9k_htc: Failed to initialize the device [ 138.194313][ T793] usb 4-1: ath9k_htc: USB layer deinitialized [ 138.395825][ T793] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 138.425510][ T24] usb 4-1: USB disconnect, device number 27 [ 138.565177][ T793] usb 1-1: Using ep0 maxpacket: 32 [ 138.576402][ T793] usb 1-1: config 28 has too many interfaces: 154, using maximum allowed: 32 [ 138.587590][ T793] usb 1-1: config 28 has an invalid descriptor of length 37, skipping remainder of the config [ 138.601372][ T793] usb 1-1: config 28 has 1 interface, different from the descriptor's value: 154 [ 138.611018][ T793] usb 1-1: config 28 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.638281][ T793] usb 1-1: config 28 interface 0 has no altsetting 0 [ 138.651124][ T793] usb 1-1: New USB device found, idVendor=1199, idProduct=9019, bcdDevice=93.dc [ 138.664374][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.676086][ T793] usb 1-1: Product: 䀁 [ 138.681044][ T793] usb 1-1: Manufacturer:  [ 138.686825][ T793] usb 1-1: SerialNumber: ј [ 138.898377][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 138.940491][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 139.485395][ T5920] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 139.635761][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 139.643340][ T5920] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 139.652054][ T5920] usb 2-1: config 0 has no interface number 0 [ 139.660642][ T5920] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 139.671445][ T5920] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 139.686323][ T5920] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 139.695928][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.704285][ T5920] usb 2-1: Product: syz [ 139.709401][ T5920] usb 2-1: Manufacturer: syz [ 139.714011][ T5920] usb 2-1: SerialNumber: syz [ 139.721780][ T5920] usb 2-1: config 0 descriptor?? [ 139.727874][ T7251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.736100][ T7251] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.746755][ T5920] usb-storage 2-1:0.20: USB Mass Storage device detected [ 139.759926][ T5920] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 139.947191][ T5920] scsi host1: usb-storage 2-1:0.20 [ 140.157945][ T43] usb 2-1: USB disconnect, device number 18 [ 140.381173][ T7272] netlink: 'syz.3.407': attribute type 21 has an invalid length. [ 140.390504][ T7272] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 140.607013][ T7279] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 140.634144][ T7279] CIFS mount error: No usable UNC path provided in device string! [ 140.634144][ T7279] [ 140.644839][ T7279] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.655808][ T7279] netlink: 'syz.3.409': attribute type 21 has an invalid length. [ 140.663607][ T7279] netlink: 132 bytes leftover after parsing attributes in process `syz.3.409'. [ 140.744153][ T7283] fuse: Bad value for 'rootmode' [ 140.872160][ T7287] program syz.3.412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.874732][ T7289] netlink: 'syz.4.413': attribute type 5 has an invalid length. [ 140.890608][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.413'. [ 140.900548][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 140.995623][ T5920] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 141.115941][ T793] usb 1-1: USB disconnect, device number 22 [ 141.131004][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 141.145047][ T5920] usb 2-1: device descriptor read/64, error -71 [ 141.225051][ T7294] sp0: Synchronizing with TNC [ 141.387041][ T5920] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.418147][ T7301] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 141.495346][ T793] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 141.545048][ T5920] usb 2-1: device descriptor read/64, error -71 [ 141.655654][ T5920] usb usb2-port1: attempt power cycle [ 141.655953][ T793] usb 1-1: config 0 has no interfaces? [ 141.703027][ T793] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 141.723111][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.740831][ T793] usb 1-1: SerialNumber: syz [ 141.758125][ T793] usb 1-1: config 0 descriptor?? [ 142.005285][ T5920] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 142.027277][ T5920] usb 2-1: device descriptor read/8, error -71 [ 142.029713][ T793] usb 1-1: USB disconnect, device number 23 [ 142.285079][ T5920] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 142.311429][ T5920] usb 2-1: device descriptor read/8, error -71 [ 142.426188][ T5920] usb usb2-port1: unable to enumerate USB device [ 142.636890][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 142.737224][ T7329] netlink: 128 bytes leftover after parsing attributes in process `syz.4.427'. [ 142.820557][ T7334] : renamed from lo [ 142.887700][ T43] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 143.050598][ T43] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 143.065074][ T43] usb 4-1: config 0 has no interface number 0 [ 143.073880][ T43] usb 4-1: config 0 interface 41 has no altsetting 0 [ 143.096154][ T43] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 143.109962][ T7351] netlink: 'syz.4.433': attribute type 10 has an invalid length. [ 143.114994][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.134989][ T43] usb 4-1: Product: syz [ 143.139166][ T43] usb 4-1: Manufacturer: syz [ 143.143791][ T43] usb 4-1: SerialNumber: syz [ 143.144210][ T7351] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.162440][ T7350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.174430][ T43] usb 4-1: config 0 descriptor?? [ 143.389074][ T7322] netlink: 'syz.3.424': attribute type 27 has an invalid length. [ 143.413251][ T7322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.664717][ T43] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 143.675885][ T43] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 143.689108][ T43] usb 4-1: USB disconnect, device number 28 [ 143.695602][ T793] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 143.780260][ T7359] overlayfs: failed to clone upperpath [ 143.858678][ T793] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 143.877242][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.888920][ T793] usb 1-1: Product: syz [ 143.893192][ T793] usb 1-1: Manufacturer: syz [ 143.899575][ T793] usb 1-1: SerialNumber: syz [ 143.912574][ T793] usb 1-1: config 0 descriptor?? [ 143.981378][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 144.132653][ T793] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 144.225643][ T43] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 144.364860][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 144.391722][ T43] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 144.393281][ T5920] IPVS: starting estimator thread 0... [ 144.420755][ T43] usb 2-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=c6.10 [ 144.449956][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.459835][ T43] usb 2-1: Product: syz [ 144.468215][ T43] usb 2-1: Manufacturer: syz [ 144.481310][ T43] usb 2-1: SerialNumber: syz [ 144.525481][ T7378] IPVS: using max 28 ests per chain, 67200 per kthread [ 144.696250][ T43] HFC-S_USB 2-1:252.0: probe with driver HFC-S_USB failed with error -5 [ 144.709484][ T43] usb 2-1: USB disconnect, device number 23 [ 144.905098][ T24] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 145.069934][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.079941][ T24] usb 4-1: config 1 has no interface number 0 [ 145.086162][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.097558][ T24] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 145.109328][ T24] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 145.120352][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 145.131301][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.144004][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.153637][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.161842][ T24] usb 4-1: Product: syz [ 145.166212][ T24] usb 4-1: Manufacturer: syz [ 145.170837][ T24] usb 4-1: SerialNumber: syz [ 145.183759][ T7387] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 145.271077][ T7397] overlayfs: failed to clone upperpath [ 145.518955][ T24] cdc_ncm 4-1:1.1: bind() failure [ 145.542420][ T24] usb 4-1: USB disconnect, device number 29 [ 145.598901][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.455'. [ 146.226531][ T7434] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 146.234730][ T7434] UDF-fs: Scanning with blocksize 512 failed [ 146.242798][ T7434] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 146.252403][ T7434] UDF-fs: Scanning with blocksize 1024 failed [ 146.259405][ T7434] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 146.279358][ T7434] UDF-fs: Scanning with blocksize 2048 failed [ 146.286257][ T7434] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 146.293750][ T7434] UDF-fs: Scanning with blocksize 4096 failed [ 146.365368][ T5889] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 146.505034][ T5889] usb 4-1: device descriptor read/64, error -71 [ 146.515101][ T5920] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 146.665089][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 146.671967][ T5920] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.681806][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.688656][ T5920] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 146.698091][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.708710][ T5920] usb 2-1: config 0 descriptor?? [ 146.755775][ T5889] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 146.829102][ T793] gspca_stk1135: reg_w 0x351 err -71 [ 146.835465][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.841930][ T793] gspca_stk1135: Sensor write failed [ 146.847311][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.853721][ T793] gspca_stk1135: Sensor write failed [ 146.861823][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.868847][ T793] gspca_stk1135: Sensor read failed [ 146.874067][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.880557][ T793] gspca_stk1135: Sensor read failed [ 146.885828][ T793] gspca_stk1135: Detected sensor type unknown (0x0) [ 146.892421][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.895036][ T5889] usb 4-1: device descriptor read/64, error -71 [ 146.898775][ T793] gspca_stk1135: Sensor read failed [ 146.910210][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.916665][ T793] gspca_stk1135: Sensor read failed [ 146.921878][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.928570][ T793] gspca_stk1135: Sensor write failed [ 146.933974][ T793] gspca_stk1135: serial bus timeout: status=0x00 [ 146.940411][ T793] gspca_stk1135: Sensor write failed [ 146.946180][ T793] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 146.962508][ T793] usb 1-1: USB disconnect, device number 24 [ 147.015827][ T5889] usb usb4-port1: attempt power cycle [ 147.142769][ T5920] hid_parser_main: 7 callbacks suppressed [ 147.142789][ T5920] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0 [ 147.158622][ T5920] sigmamicro 0003:1C4F:0059.000A: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.1-1/input0 [ 147.341270][ T5920] usb 2-1: USB disconnect, device number 24 [ 147.355191][ T5889] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 147.387490][ T5889] usb 4-1: device descriptor read/8, error -71 [ 147.570295][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 147.645062][ T5889] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 147.668444][ T5889] usb 4-1: device descriptor read/8, error -71 [ 147.695127][ T7455] could not allocate digest TFM handle hmac(sha1-avx2) [ 147.730881][ T7464] netlink: 'syz.0.471': attribute type 6 has an invalid length. [ 147.743678][ T7464] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 147.758164][ T7467] netlink: 'syz.4.472': attribute type 28 has an invalid length. [ 147.778515][ T7464] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.789558][ T5889] usb usb4-port1: unable to enumerate USB device [ 148.085420][ T5889] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 148.256842][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.265253][ T5889] usb 1-1: not running at top speed; connect to a high speed hub [ 148.273934][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.284235][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.297239][ T5889] usb 1-1: string descriptor 0 read error: -22 [ 148.303475][ T5889] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.314035][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.339507][ T5889] usb 1-1: 0:2 : does not exist [ 148.439959][ T7494] netlink: 'syz.4.482': attribute type 21 has an invalid length. [ 148.447935][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.4.482'. [ 148.740360][ T7510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.296472][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 149.405816][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 149.466602][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 149.474351][ T5876] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.485009][ T5876] usb 2-1: config 0 has no interface number 0 [ 149.491177][ T5876] usb 2-1: config 0 interface 184 has no altsetting 0 [ 149.513157][ T5876] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.527702][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.545016][ T5876] usb 2-1: Product: syz [ 149.549329][ T5876] usb 2-1: Manufacturer: syz [ 149.553951][ T5876] usb 2-1: SerialNumber: syz [ 149.558320][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.575077][ T5869] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 149.578909][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.591419][ T5876] usb 2-1: config 0 descriptor?? [ 149.606053][ T5876] smsc75xx v1.0.0 [ 149.639222][ T5889] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 149.662798][ T5889] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 149.680099][ T5889] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 149.728861][ T5889] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 149.757995][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.776780][ T5889] usb 1-1: USB disconnect, device number 25 [ 149.794277][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.832563][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 149.848488][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.907650][ T5869] usb 4-1: config 0 descriptor?? [ 150.207556][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 150.240770][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 150.408863][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 150.420228][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 150.430706][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 150.442440][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 150.453269][ T5876] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 150.518305][ T5869] usbhid 4-1:0.0: can't add hid device: -32 [ 150.535247][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 150.575441][ T24] usb 4-1: USB disconnect, device number 34 [ 150.945084][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 151.095036][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 151.102230][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.112810][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.124045][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.133760][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.144471][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.159135][ T5876] usb 2-1: USB disconnect, device number 25 [ 151.177628][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 151.196803][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.210252][ T24] usb 4-1: Manufacturer: syz [ 151.242022][ T24] usb 4-1: config 0 descriptor?? [ 151.402130][ T7573] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 151.423496][ T7573] netlink: 64 bytes leftover after parsing attributes in process `syz.0.506'. [ 151.605014][ T5876] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 151.675055][ T793] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 151.716590][ T24] rc_core: IR keymap rc-hauppauge not found [ 151.722543][ T24] Registered IR keymap rc-empty [ 151.728773][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.755161][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.765602][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 151.772299][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.776750][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 151.783887][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.798936][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 151.804723][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.824063][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.829621][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.829646][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.840361][ T5876] usb 2-1: config 0 descriptor?? [ 151.855974][ T793] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 151.867898][ T793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.878753][ T793] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.888288][ T793] usb 1-1: config 1 has no interface number 1 [ 151.894395][ T793] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 151.908794][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.916063][ T793] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 124, setting to 64 [ 151.929743][ T793] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.939041][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.947210][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.954424][ T793] usb 1-1: Product: syz [ 151.958636][ T793] usb 1-1: Manufacturer: syz [ 151.963262][ T793] usb 1-1: SerialNumber: syz [ 151.968069][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 151.995125][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.015359][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.035192][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.055086][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.064821][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.075201][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.075218][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.084827][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.100302][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.105387][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 152.109399][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.124026][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.133226][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.143108][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.144742][ T24] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 152.153647][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.164454][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.169232][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.190203][ T24] usb 4-1: USB disconnect, device number 35 [ 152.213242][ T30] kauditd_printk_skb: 13 callbacks suppressed ** 1 printk messages dropped ** [ 152.219525][ T5182] ------------[ cut here ]------------ [ 152.219585][ T5182] WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x48a/0x840, CPU#1: klogd/5182 [ 152.219618][ T5182] Modules linked in: [ 152.242878][ T5182] CPU: 1 UID: 0 PID: 5182 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 152.252412][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.262882][ T5182] RIP: 0010:get_data+0x48a/0x840 [ 152.268314][ T5182] Code: 83 c4 f8 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 ee 01 00 00 44 89 65 00 49 83 c5 08 eb 13 e8 87 47 1f 00 90 <0f> 0b 90 eb 05 e8 7c 47 1f 00 45 31 ed 4c 89 e8 48 83 c4 28 5b 41 [ 152.288559][ T5182] RSP: 0018:ffffc90003127960 EFLAGS: 00010293 [ 152.294906][ T5182] RAX: ffffffff81a288a9 RBX: 00003fffffffffff RCX: ffff88807f228000 [ 152.302974][ T5182] RDX: 0000000000000000 RSI: 00003fffffffffff RDI: 0000000000000000 [ 152.311123][ T5182] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 152.319172][ T5182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000012 [ 152.327247][ T5182] R13: 0000000000000000 R14: ffffc90003127aa8 R15: 1ffffffff1c4a6c2 [ 152.335292][ T5182] FS: 00007f6d90e62c80(0000) GS:ffff888125b79000(0000) knlGS:0000000000000000 [ 152.344235][ T5182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.350907][ T5182] CR2: 000000110c4214b8 CR3: 000000007f58a000 CR4: 00000000003526f0 [ 152.359057][ T5182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 152.367121][ T5182] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 152.375186][ T5182] Call Trace: [ 152.378481][ T5182] [ 152.381427][ T5182] _prb_read_valid+0x672/0xa90 [ 152.386451][ T5182] ? __lock_acquire+0x9f0/0xd20 [ 152.391912][ T5182] ? __pfx__prb_read_valid+0x10/0x10 [ 152.397625][ T5182] prb_read_valid+0x3c/0x60 [ 152.402165][ T5182] syslog_print+0x2a7/0x590 [ 152.406817][ T5182] ? __pfx_syslog_print+0x10/0x10 [ 152.411884][ T5182] ? __pfx_autoremove_wake_function+0x10/0x10 [ 152.418042][ T5182] ? bpf_lsm_capable+0x9/0x20 [ 152.422745][ T5182] ? security_capable+0x7e/0x2e0 [ 152.427811][ T5182] do_syslog+0x544/0x760 [ 152.429752][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 152.432066][ T5182] ? __pfx_do_syslog+0x10/0x10 [ 152.432094][ T5182] ? irqentry_exit+0x5ba/0x640 [ 152.432140][ T5182] __x64_sys_syslog+0x7c/0x90 [ 152.453640][ T5182] do_syscall_64+0xfa/0xfa0 [ 152.453772][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 152.458221][ T5182] ? irqentry_exit+0x10f/0x640 [ 152.458246][ T5182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.458265][ T5182] ? clear_bhb_loop+0x60/0xb0 [ 152.458288][ T5182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.458308][ T5182] RIP: 0033:0x7f6d9102ca37 [ 152.458340][ T5182] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 152.458357][ T5182] RSP: 002b:00007ffd4b8cb4b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 152.471013][ T5876] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 152.476506][ T5182] RAX: ffffffffffffffda RBX: 00007f6d911cc490 RCX: 00007f6d9102ca37 [ 152.476524][ T5182] RDX: 00000000000003ff RSI: 00007f6d911cc490 RDI: 0000000000000002 [ 152.476538][ T5182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.476549][ T5182] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f6d911cc490 [ 152.476562][ T5182] R13: 00007f6d911a9dfe R14: 00007f6d911cc549 R15: 00007f6d911cc549 [ 152.507466][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input16 [ 152.512002][ T5182] [ 152.581835][ T5182] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.589100][ T5182] CPU: 1 UID: 0 PID: 5182 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 152.597935][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.607979][ T5182] Call Trace: [ 152.611243][ T5182] [ 152.614159][ T5182] dump_stack_lvl+0x99/0x250 [ 152.618738][ T5182] ? __asan_memcpy+0x40/0x70 [ 152.623317][ T5182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.628505][ T5182] ? __pfx__printk+0x10/0x10 [ 152.633091][ T5182] vpanic+0x237/0x6d0 [ 152.637057][ T5182] ? __pfx_vpanic+0x10/0x10 [ 152.641542][ T5182] ? is_bpf_text_address+0x292/0x2b0 [ 152.646818][ T5182] ? is_bpf_text_address+0x26/0x2b0 [ 152.652012][ T5182] panic+0xb9/0xc0 [ 152.655716][ T5182] ? __pfx_panic+0x10/0x10 [ 152.660127][ T5182] __warn+0x334/0x4c0 [ 152.664091][ T5182] ? get_data+0x48a/0x840 [ 152.668406][ T5182] ? get_data+0x48a/0x840 [ 152.672717][ T5182] report_bug+0x2be/0x4f0 [ 152.677036][ T5182] ? get_data+0x48a/0x840 [ 152.681349][ T5182] ? get_data+0x48a/0x840 [ 152.685660][ T5182] ? get_data+0x48c/0x840 [ 152.689973][ T5182] handle_bug+0x84/0x160 [ 152.694200][ T5182] exc_invalid_op+0x1a/0x50 [ 152.698699][ T5182] asm_exc_invalid_op+0x1a/0x20 [ 152.703543][ T5182] RIP: 0010:get_data+0x48a/0x840 [ 152.708465][ T5182] Code: 83 c4 f8 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 ee 01 00 00 44 89 65 00 49 83 c5 08 eb 13 e8 87 47 1f 00 90 <0f> 0b 90 eb 05 e8 7c 47 1f 00 45 31 ed 4c 89 e8 48 83 c4 28 5b 41 [ 152.728058][ T5182] RSP: 0018:ffffc90003127960 EFLAGS: 00010293 [ 152.734112][ T5182] RAX: ffffffff81a288a9 RBX: 00003fffffffffff RCX: ffff88807f228000 [ 152.742068][ T5182] RDX: 0000000000000000 RSI: 00003fffffffffff RDI: 0000000000000000 [ 152.750023][ T5182] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 152.757974][ T5182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000012 [ 152.765927][ T5182] R13: 0000000000000000 R14: ffffc90003127aa8 R15: 1ffffffff1c4a6c2 [ 152.773890][ T5182] ? get_data+0x489/0x840 [ 152.778216][ T5182] _prb_read_valid+0x672/0xa90 [ 152.782968][ T5182] ? __lock_acquire+0x9f0/0xd20 [ 152.787812][ T5182] ? __pfx__prb_read_valid+0x10/0x10 [ 152.793093][ T5182] prb_read_valid+0x3c/0x60 [ 152.797586][ T5182] syslog_print+0x2a7/0x590 [ 152.802079][ T5182] ? __pfx_syslog_print+0x10/0x10 [ 152.807101][ T5182] ? __pfx_autoremove_wake_function+0x10/0x10 [ 152.813159][ T5182] ? bpf_lsm_capable+0x9/0x20 [ 152.817818][ T5182] ? security_capable+0x7e/0x2e0 [ 152.822747][ T5182] do_syslog+0x544/0x760 [ 152.826979][ T5182] ? __pfx_do_syslog+0x10/0x10 [ 152.831725][ T5182] ? irqentry_exit+0x5ba/0x640 [ 152.836498][ T5182] __x64_sys_syslog+0x7c/0x90 [ 152.841164][ T5182] do_syscall_64+0xfa/0xfa0 [ 152.845655][ T5182] ? irqentry_exit+0x10f/0x640 [ 152.850402][ T5182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.856451][ T5182] ? clear_bhb_loop+0x60/0xb0 [ 152.861115][ T5182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.866991][ T5182] RIP: 0033:0x7f6d9102ca37 [ 152.871390][ T5182] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 152.890978][ T5182] RSP: 002b:00007ffd4b8cb4b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 152.899376][ T5182] RAX: ffffffffffffffda RBX: 00007f6d911cc490 RCX: 00007f6d9102ca37 [ 152.907332][ T5182] RDX: 00000000000003ff RSI: 00007f6d911cc490 RDI: 0000000000000002 [ 152.915287][ T5182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.923237][ T5182] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f6d911cc490 [ 152.931190][ T5182] R13: 00007f6d911a9dfe R14: 00007f6d911cc549 R15: 00007f6d911cc549 [ 152.939157][ T5182] [ 152.942398][ T5182] Kernel Offset: disabled [ 152.946703][ T5182] Rebooting in 86400 seconds..