last executing test programs: 11m59.748316329s ago: executing program 3 (id=109): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000100)) 11m55.653744424s ago: executing program 3 (id=116): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x44840, 0x1e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) 11m52.530146294s ago: executing program 3 (id=127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x693c7e9f30246731}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m51.29794263s ago: executing program 3 (id=131): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49084}, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000980)={0xffff, 0x0, "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"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090027f38200000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x42884}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 11m48.81875221s ago: executing program 3 (id=138): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in6=@empty, 0x34ff, 0x1, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11m47.520664462s ago: executing program 3 (id=141): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e804003e005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 11m32.331819414s ago: executing program 32 (id=141): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 10.708912196s ago: executing program 5 (id=3961): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x30, 0x3) landlock_restrict_self(r4, 0x5) r5 = getegid() fchown(r2, 0xffffffffffffffff, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0, 0x860}], 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105511, &(0x7f0000000400)={{0xc, 0x0, 0x82, 0xffffffff, 'syz1\x00', 0x1000}, 0x0, [0x0, 0x4000100, 0xd9, 0x0, 0x9, 0x100000000, 0x10001, 0x4, 0x8, 0x1, 0xc3, 0x7f, 0x1, 0x0, 0x8, 0xfff, 0x8, 0x0, 0x1, 0x1, 0x0, 0xd, 0x0, 0x3, 0x3, 0xee8000000000000, 0x0, 0x5, 0x0, 0x4, 0x2, 0xfffffffb, 0x0, 0x1, 0x0, 0xa, 0x40000, 0x0, 0x3, 0x1e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x3030, 0x100000001, 0x2, 0x40000000, 0x59, 0x0, 0x1, 0x401, 0xb4f, 0xffffffff, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0xee, 0xd87, 0x0, 0x41, 0x0, 0xfffffffffffffffe, 0xf, 0x0, 0x0, 0x0, 0x80000001, 0xcc64, 0x800000000002, 0x5f9cd92, 0x8000200, 0x9, 0x5, 0xd, 0x0, 0x0, 0xbb, 0x3, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x80000000, 0x4, 0x11d, 0x2, 0x3, 0x0, 0xfffffffc, 0x556a766c, 0x20000, 0x3, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0xb, 0x81, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) openat$ptp0(0xffffff9c, 0x0, 0x8c02, 0x0) 9.432543721s ago: executing program 0 (id=3966): socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000540)={0x2, 0x0, @pic={0x7, 0x0, 0x9, 0x3d, 0x5, 0x4, 0xf2, 0x0, 0x9, 0x6, 0x7, 0xed, 0xfe, 0x1, 0x1, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x10000, 0x3, 0x54000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_ublk_setup_io_uring(0x1000020, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, r1, &(0x7f0000001a00)=@ublk_start_user_recovery_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x20000000000000}) syz_io_uring_submit(0x0, 0x0, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x788b, 0x2ece, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) 7.647756114s ago: executing program 0 (id=3973): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 7.366547165s ago: executing program 1 (id=3975): dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4e24, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x4e22, 0xde50, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}}, {{0xa, 0x4e24, 0x7fff, @empty, 0x5}}]}, 0x190) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0), 0x0, 0x111, 0x0) 7.215186199s ago: executing program 1 (id=3977): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}]}}}}}}, 0x0) 6.988163643s ago: executing program 5 (id=3978): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 6.924528431s ago: executing program 1 (id=3979): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x92, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write(r1, &(0x7f0000000d00)='nf 127.0.0.1 -000000000 localhost\n', 0x24) socket$netlink(0x10, 0x3, 0x13) splice(r5, &(0x7f00000000c0)=0x7, r0, &(0x7f0000000300)=0x9, 0x100, 0x5) 6.41522505s ago: executing program 5 (id=3980): epoll_create1(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xbb}, 0x0, 0x0, 0x0, 0x0) 6.002143188s ago: executing program 5 (id=3981): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 5.90159313s ago: executing program 1 (id=3982): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x80002, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000740)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000047c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_retopts={{0xc}}], 0x1c}}], 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601010000000000000000030000000500010010000000"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e4b038f2e87416da7d656a6b177ab9a6a30f73da183bc436"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c840}, 0x0) 5.896866881s ago: executing program 5 (id=3983): socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000540)={0x2, 0x0, @pic={0x7, 0x0, 0x9, 0x3d, 0x5, 0x4, 0xf2, 0x0, 0x9, 0x6, 0x7, 0xed, 0xfe, 0x1, 0x1, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x10000, 0x3, 0x54000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_ublk_setup_io_uring(0x1000020, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, r1, &(0x7f0000001a00)=@ublk_start_user_recovery_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x20000000000000}) syz_io_uring_submit(0x0, 0x0, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x788b, 0x2ece, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) 4.407590227s ago: executing program 0 (id=3986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') 3.261369628s ago: executing program 0 (id=3987): dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4e24, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x4e22, 0xde50, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}}, {{0xa, 0x4e24, 0x7fff, @empty, 0x5}}]}, 0x190) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x111, 0x0) 3.253696357s ago: executing program 5 (id=3988): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = fsopen(&(0x7f0000000200)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x30, 0x3) landlock_restrict_self(r4, 0x5) r5 = getegid() fchown(r2, 0xffffffffffffffff, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0, 0x860}], 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105511, &(0x7f0000000400)={{0xc, 0x0, 0x82, 0xffffffff, 'syz1\x00', 0x1000}, 0x0, [0x0, 0x4000100, 0xd9, 0x0, 0x9, 0x100000000, 0x10001, 0x4, 0x8, 0x1, 0xc3, 0x7f, 0x1, 0x0, 0x8, 0xfff, 0x8, 0x0, 0x1, 0x1, 0x0, 0xd, 0x0, 0x3, 0x3, 0xee8000000000000, 0x0, 0x5, 0x0, 0x4, 0x2, 0xfffffffb, 0x0, 0x1, 0x0, 0xa, 0x40000, 0x0, 0x3, 0x1e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x3030, 0x100000001, 0x2, 0x40000000, 0x59, 0x0, 0x1, 0x401, 0xb4f, 0xffffffff, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0xee, 0xd87, 0x0, 0x41, 0x0, 0xfffffffffffffffe, 0xf, 0x0, 0x0, 0x0, 0x80000001, 0xcc64, 0x800000000002, 0x5f9cd92, 0x8000200, 0x9, 0x5, 0xd, 0x0, 0x0, 0xbb, 0x3, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x80000000, 0x4, 0x11d, 0x2, 0x3, 0x0, 0xfffffffc, 0x556a766c, 0x20000, 0x3, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0xb, 0x81, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) openat$ptp0(0xffffff9c, 0x0, 0x8c02, 0x0) 3.11982127s ago: executing program 2 (id=3990): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 2.524896776s ago: executing program 2 (id=3991): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x1c, 0xf5}, @val, @mpls={[{0x1, 0x0, 0x1}], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x139, 0x3a, 0xff, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0xfe}, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e28516"}, {0x2, 0x10, "eace981af1d11ae98764629a53f36708b06f1172ba6d52f5662c590717b6152a5b0cce9f0efb0c208952aa804ebd01b65223f8fb0a86ea2b48e030d8c920f45a1db2577493433d3ad638e894fc70098a0c0b0be7778ba5587cca7b1d9b4cbdbe421636e41dbe1a449be2ec74a2de16ae14bd449bb7032582eb42c4dc384647cc407b"}, {0x4, 0xf, "ad4b0531f50dd1048b7837eb7a3e6c96272d8d7af439cfce5a719b0e547bd0cbd3abe061bd9e941dcd39a53ed58f3e53e145b7cf6e223fc6d7f67f55cb2be57e8f7158f840b3aa2b8471c12cc86ed0671afd6aba6f8b5e88303ee1634759d71bc1b14e8422096c2585c0578806a59bfcccb013884a162d074df3"}]}}}}}, 0x173) 2.442533775s ago: executing program 0 (id=3993): r0 = getpid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone3(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x200000000000, 0x1, 0x8, 0x7f, 0x3}) 2.222322606s ago: executing program 0 (id=3994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x73, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}, 0xe) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) 1.931600432s ago: executing program 1 (id=3996): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1.826651775s ago: executing program 4 (id=3997): syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="05", 0x1, 0x0, 0x0, 0x2}]) 1.781625377s ago: executing program 1 (id=3998): socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000540)={0x2, 0x0, @pic={0x7, 0x0, 0x9, 0x3d, 0x5, 0x4, 0xf2, 0x0, 0x9, 0x6, 0x7, 0xed, 0xfe, 0x1, 0x1, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x10000, 0x3, 0x54000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_ublk_setup_io_uring(0x1000020, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit$UBLK(0x0, 0x0, r1, &(0x7f0000001a00)=@ublk_start_user_recovery_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x20000000000000}) syz_io_uring_submit(0x0, 0x0, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x788b, 0x2ece, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) 1.736274215s ago: executing program 2 (id=3999): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) poll(&(0x7f0000000180), 0x0, 0xfffff8f2) socket$netlink(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) 1.418781785s ago: executing program 4 (id=4000): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) write$P9_RWSTAT(r0, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) 1.235735816s ago: executing program 4 (id=4001): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 707.743884ms ago: executing program 4 (id=4002): syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="9ac24b3c34551eccc15c94cd5067f7e3795319d9d6d8d8d63e517db2aa") r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) dup3(r1, r0, 0x0) 603.068938ms ago: executing program 2 (id=4003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 514.464565ms ago: executing program 4 (id=4004): r0 = getpid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(0x0, 0x1, 0x0) 502.736579ms ago: executing program 2 (id=4005): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x92, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write(r1, &(0x7f0000000d00)='nf 127.0.0.1 -000000000 localhost\n', 0x24) socket$netlink(0x10, 0x3, 0x13) splice(r5, &(0x7f00000000c0)=0x7, r0, &(0x7f0000000300)=0x9, 0x100, 0x5) 126.250268ms ago: executing program 4 (id=4006): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x80002, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000740)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000047c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_retopts={{0xc}}], 0x1c}}], 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601010000000000000000030000000500010010000000"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e4b038f2e87416da7d656a6b177ab9a6a30f73da183bc436"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c840}, 0x0) 0s ago: executing program 2 (id=4007): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1) kernel console output (not intermixed with test programs): vice strings: Mfr=0, Product=0, SerialNumber=0 [ 683.942270][ T5620] Bluetooth: hci0: command tx timeout [ 684.002132][ T5905] usb 5-1: config 0 descriptor?? [ 684.051868][ T5905] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 684.100892][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3250'. [ 684.101018][T14577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.101031][T14577] IPv6: NLM_F_CREATE should be set when creating new route [ 684.195271][ T5616] usb 6-1: USB disconnect, device number 15 [ 684.785393][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.785524][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.785742][T14545] bridge_slave_0: entered allmulticast mode [ 684.800207][T14545] bridge_slave_0: entered promiscuous mode [ 684.855637][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.856319][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.856526][T14545] bridge_slave_1: entered allmulticast mode [ 684.871667][T14545] bridge_slave_1: entered promiscuous mode [ 685.015332][T14545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.055175][T14545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.293996][T14545] team0: Port device team_slave_0 added [ 685.300640][T14545] team0: Port device team_slave_1 added [ 685.489286][T14545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.489494][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.489528][T14545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.505968][T14545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.505993][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.506071][T14545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.790061][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.790133][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.032044][ T5620] Bluetooth: hci0: command tx timeout [ 686.516152][ T5616] usb 5-1: USB disconnect, device number 32 [ 686.516941][T14545] hsr_slave_0: entered promiscuous mode [ 686.521105][T14545] hsr_slave_1: entered promiscuous mode [ 686.571453][T14545] debugfs: 'hsr0' already exists in 'hsr' [ 686.571479][T14545] Cannot create hsr debugfs directory [ 686.948921][T14618] netlink: 6208 bytes leftover after parsing attributes in process `syz.4.3260'. [ 687.031594][T14619] syzkaller0: entered promiscuous mode [ 687.031624][T14619] syzkaller0: entered allmulticast mode [ 687.902050][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 688.013340][T14545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.051997][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 688.054043][ T10] usb 3-1: config 0 has no interfaces? [ 688.055282][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 688.055309][ T10] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 688.055330][ T10] usb 3-1: Manufacturer: syz [ 688.060675][ T10] usb 3-1: config 0 descriptor?? [ 688.101997][ T5620] Bluetooth: hci0: command tx timeout [ 688.260900][T14635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3266'. [ 688.321984][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 688.322156][T14625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 688.322170][T14625] IPv6: NLM_F_CREATE should be set when creating new route [ 688.327020][ T10] usb 3-1: USB disconnect, device number 46 [ 688.614330][T14545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.037065][T14545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.071896][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 689.106714][T14643] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 689.243043][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 689.245674][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 689.245702][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.279685][ T10] usb 5-1: config 0 descriptor?? [ 689.301895][ T5905] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 689.451833][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 689.456700][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.456727][ T5905] usb 3-1: config 0 has no interface number 0 [ 689.456828][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.456875][ T5905] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 689.456958][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.564950][ T5905] usb 3-1: config 0 descriptor?? [ 689.609441][T14646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.661541][T14646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.672463][ T5905] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 689.735455][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 689.987271][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 690.183429][ T5620] Bluetooth: hci0: command tx timeout [ 690.185012][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 690.195335][T14646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.197074][T14646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.204699][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 690.204891][ T10] usb 5-1: media controller created [ 690.464886][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.892454][T14545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.198537][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 691.361716][ T10] az6027: usb out operation failed. (-71) [ 691.362939][ T10] az6027: usb out operation failed. (-71) [ 691.362956][ T10] stb0899_attach: Driver disabled by Kconfig [ 691.362966][ T10] az6027: no front-end attached [ 691.362966][ T10] [ 691.363478][ T10] az6027: usb out operation failed. (-71) [ 691.363493][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 691.418062][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 691.447342][T14661] netlink: 6208 bytes leftover after parsing attributes in process `syz.5.3274'. [ 691.617686][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 691.617718][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 691.659097][ T10] usb 5-1: USB disconnect, device number 33 [ 692.052163][ T5736] usb 3-1: USB disconnect, device number 47 [ 692.241954][T14668] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3277'. [ 692.636076][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 693.641704][ T31] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 693.826324][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 693.828245][ T31] usb 3-1: config 16 has an invalid descriptor of length 197, skipping remainder of the config [ 693.828283][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 3201, setting to 1024 [ 693.828302][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 693.828320][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 693.828350][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 693.828367][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.923195][T14545] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 693.942824][ T31] usbtmc 3-1:16.0: bulk endpoints not found [ 693.977302][T14545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.982357][T14545] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 694.191484][T14545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.193354][T14545] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 694.289368][T14545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.304458][T14545] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 694.351767][T14545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.096346][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.173290][T14545] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.281443][ T5736] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 695.293902][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.294216][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.331103][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.338832][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.437868][ T5736] usb 5-1: Using ep0 maxpacket: 8 [ 695.440139][ T5736] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 695.440163][ T5736] usb 5-1: config 179 has no interface number 0 [ 695.440208][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 695.440234][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 695.440260][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 695.440286][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 695.440313][ T5736] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 695.440355][ T5736] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 695.440378][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.560233][T14705] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 695.682662][T14710] netlink: 6208 bytes leftover after parsing attributes in process `syz.0.3288'. [ 695.831426][ T6234] usb 5-1: USB disconnect, device number 34 [ 695.831438][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 695.831505][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 696.288344][ T1428] bridge_slave_1: left allmulticast mode [ 696.288382][ T1428] bridge_slave_1: left promiscuous mode [ 696.288648][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.482490][ T1428] bridge_slave_0: left allmulticast mode [ 696.482515][ T1428] bridge_slave_0: left promiscuous mode [ 696.482738][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.787291][ T6234] usb 3-1: USB disconnect, device number 48 [ 698.112116][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.202136][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.254381][ T1428] bond0 (unregistering): Released all slaves [ 699.241173][ T5736] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 699.421142][ T5736] usb 5-1: Using ep0 maxpacket: 8 [ 699.423427][ T5736] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 699.423453][ T5736] usb 5-1: config 179 has no interface number 0 [ 699.423504][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 699.423530][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 699.423557][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 699.423582][ T5736] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 699.423609][ T5736] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 699.423648][ T5736] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 699.423669][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.552954][T14748] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 699.805903][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 699.805972][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 699.806031][ T5905] usb 5-1: USB disconnect, device number 35 [ 699.901161][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 699.973345][ T5736] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 700.061156][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 700.062983][ T31] usb 6-1: config 16 has an invalid descriptor of length 197, skipping remainder of the config [ 700.063064][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 3201, setting to 1024 [ 700.063085][ T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 700.063103][ T31] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 700.063136][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.063153][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.161124][ T5736] usb 3-1: Using ep0 maxpacket: 8 [ 700.168394][ T5736] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.168452][ T5736] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 700.168479][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.324333][ T31] usbtmc 6-1:16.0: bulk endpoints not found [ 700.342468][ T5736] usb 3-1: config 0 descriptor?? [ 700.355387][ T5736] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 700.778477][ T5736] gspca_vc032x: reg_w err -71 [ 700.778574][ T5736] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 700.822554][ T5736] usb 3-1: USB disconnect, device number 49 [ 701.107198][T14545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.541603][ T1428] hsr_slave_0: left promiscuous mode [ 701.582914][ T1428] hsr_slave_1: left promiscuous mode [ 701.584311][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.584336][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.633971][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.633996][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.039571][ T1428] veth1_macvtap: left promiscuous mode [ 702.039646][ T1428] veth0_macvtap: left promiscuous mode [ 702.039831][ T1428] veth1_vlan: left promiscuous mode [ 702.039959][ T1428] veth0_vlan: left promiscuous mode [ 703.269896][ T5736] usb 6-1: USB disconnect, device number 16 [ 704.313844][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 704.420919][ T5736] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 704.472215][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 704.580912][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.580941][ T5736] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.580977][ T5736] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 704.581000][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.634065][ T5736] usb 1-1: config 0 descriptor?? [ 705.269868][T14545] veth0_vlan: entered promiscuous mode [ 705.311990][T14545] veth1_vlan: entered promiscuous mode [ 705.505246][T14545] veth0_macvtap: entered promiscuous mode [ 705.522831][T14545] veth1_macvtap: entered promiscuous mode [ 705.727394][T14545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.818486][T14545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.021530][ T5723] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 706.221966][ T5723] usb 6-1: Using ep0 maxpacket: 16 [ 706.225148][ T5723] usb 6-1: config 0 has no interfaces? [ 706.241853][ T5723] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 706.241874][ T5723] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 706.241888][ T5723] usb 6-1: Manufacturer: syz [ 706.254181][ T5723] usb 6-1: config 0 descriptor?? [ 706.381181][ T1296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.492674][ T5586] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 706.499481][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3318'. [ 706.499569][T14803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.558926][ T31] usb 6-1: USB disconnect, device number 17 [ 706.640778][ T5586] usb 5-1: Using ep0 maxpacket: 8 [ 706.646713][ T5586] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.646737][ T5586] usb 5-1: config 0 has no interfaces? [ 706.646765][ T5586] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 706.646790][ T5586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.913448][ T5586] usb 5-1: config 0 descriptor?? [ 707.214493][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.214516][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.306444][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.376224][ T5586] usb 1-1: USB disconnect, device number 21 [ 707.760132][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.760154][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.869232][ T2334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.882607][ T1296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.046544][T14842] sctp: [Deprecated]: syz.0.3327 (pid 14842) Use of int in max_burst socket option deprecated. [ 709.046544][T14842] Use struct sctp_assoc_value instead [ 709.196205][ T5616] usb 5-1: USB disconnect, device number 36 [ 710.160600][ T5586] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 710.314174][ T5586] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.314210][ T5586] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.314252][ T5586] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 710.314267][ T5586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.372199][ T5586] usb 1-1: config 0 descriptor?? [ 710.409283][ T5586] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 710.517562][ T5905] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 710.640975][ T5736] usb 1-1: USB disconnect, device number 22 [ 710.670560][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 710.692216][ T5905] usb 2-1: config 0 has no interfaces? [ 710.713821][ T5905] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 710.713842][ T5905] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 710.713856][ T5905] usb 2-1: Manufacturer: syz [ 710.790282][ T5905] usb 2-1: config 0 descriptor?? [ 711.039862][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3332'. [ 711.039945][T14859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 711.039953][T14859] IPv6: NLM_F_CREATE should be set when creating new route [ 711.147549][ T5905] usb 2-1: USB disconnect, device number 35 [ 711.201222][ T5736] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 711.352870][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.352918][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.352948][ T5736] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 711.352964][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.423242][ T5736] usb 1-1: config 0 descriptor?? [ 711.448145][ T5736] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 711.562320][ T12] bridge_slave_1: left allmulticast mode [ 711.562356][ T12] bridge_slave_1: left promiscuous mode [ 711.562610][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.843922][ T12] bridge_slave_0: left allmulticast mode [ 711.843960][ T12] bridge_slave_0: left promiscuous mode [ 711.844234][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.004089][T14877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.004704][T14877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.784502][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.785427][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.810838][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.811967][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.395790][T14882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.060984][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.141097][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.192339][ T5586] usb 1-1: USB disconnect, device number 23 [ 714.217145][ T12] bond0 (unregistering): Released all slaves [ 714.287526][ T12] bond1 (unregistering): Released all slaves [ 714.346379][ T12] bond2 (unregistering): Released all slaves [ 714.399306][ T12] bond3 (unregistering): Released all slaves [ 714.489011][T14875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.873265][T14899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3345'. [ 715.140741][ T6234] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 715.322292][T14908] random: crng reseeded on system resumption [ 715.341126][ T6234] usb 5-1: Using ep0 maxpacket: 16 [ 715.342692][ T6234] usb 5-1: config 0 has no interfaces? [ 715.343613][ T6234] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 715.343633][ T6234] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 715.343647][ T6234] usb 5-1: Manufacturer: syz [ 715.500504][ T6234] usb 5-1: config 0 descriptor?? [ 715.827344][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 715.827420][T14918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.827429][T14918] IPv6: NLM_F_CREATE should be set when creating new route [ 715.858987][ T5586] bridge0: entered promiscuous mode [ 715.938000][ T5616] usb 5-1: USB disconnect, device number 37 [ 716.770539][ T5616] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 716.791963][T14932] tipc: Started in network mode [ 716.791988][T14932] tipc: Node identity ac14142f, cluster identity 4711 [ 716.848170][T14932] tipc: New replicast peer: 0.0.0.0 [ 716.884444][T14940] l2tp_ppp: sess 2/0: no socket in recv [ 716.919804][T14932] tipc: Enabled bearer , priority 10 [ 716.932422][ T5616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.932475][ T5616] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.932521][ T5616] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 716.932547][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.001163][ T5616] usb 3-1: config 0 descriptor?? [ 717.019069][ T5616] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 717.395630][ T5616] usb 3-1: USB disconnect, device number 50 [ 718.389491][ T198] tipc: Node number set to 2886997039 [ 718.581143][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 718.820500][ T5616] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 718.916796][ T6234] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 719.040106][ T5616] usb 1-1: Using ep0 maxpacket: 16 [ 719.042284][ T5616] usb 1-1: config 0 has no interfaces? [ 719.043426][ T5616] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 719.043447][ T5616] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 719.043462][ T5616] usb 1-1: Manufacturer: syz [ 719.090020][ T6234] usb 3-1: Using ep0 maxpacket: 16 [ 719.092328][ T6234] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 719.092356][ T6234] usb 3-1: config 1 has no interface number 0 [ 719.092402][ T6234] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 719.092428][ T6234] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 719.092453][ T6234] usb 3-1: config 1 interface 105 has no altsetting 0 [ 719.160528][ T5616] usb 1-1: config 0 descriptor?? [ 719.160615][ T6234] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 719.160632][ T6234] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 719.160646][ T6234] usb 3-1: Product: syz [ 719.160656][ T6234] usb 3-1: Manufacturer: syz [ 719.160665][ T6234] usb 3-1: SerialNumber: syz [ 719.273686][T14965] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 719.273826][T14965] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 719.476216][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3368'. [ 719.476339][T14963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 719.476353][T14963] IPv6: NLM_F_CREATE should be set when creating new route [ 719.613645][ T198] usb 1-1: USB disconnect, device number 24 [ 719.808474][T14965] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 719.808609][T14965] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 720.022754][ T6234] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 720.023072][ T6234] aqc111 3-1:1.105: probe with driver aqc111 failed with error -61 [ 720.715272][ T12] hsr_slave_0: left promiscuous mode [ 720.760457][ T12] hsr_slave_1: left promiscuous mode [ 720.761398][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.761423][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.823321][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.823347][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.207394][ T5736] usb 3-1: USB disconnect, device number 51 [ 721.382854][ T12] veth1_macvtap: left promiscuous mode [ 721.382945][ T12] veth0_macvtap: left promiscuous mode [ 721.383313][ T12] veth1_vlan: left promiscuous mode [ 721.383467][ T12] veth0_vlan: left promiscuous mode [ 721.462291][ T6234] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 721.659022][ T6234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.659092][ T6234] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.659123][ T6234] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 721.659140][ T6234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.768889][ T6234] usb 6-1: config 0 descriptor?? [ 721.794115][ T6234] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 722.189985][ T5616] usb 6-1: USB disconnect, device number 18 [ 722.800314][ T198] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 722.949989][ T198] usb 1-1: Using ep0 maxpacket: 16 [ 722.953042][ T198] usb 1-1: config 0 has no interfaces? [ 722.994576][ T198] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 722.994600][ T198] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 722.994615][ T198] usb 1-1: Manufacturer: syz [ 723.037484][ T198] usb 1-1: config 0 descriptor?? [ 723.219986][ T5905] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 723.311479][ T12] team0 (unregistering): Port device team_slave_1 removed [ 723.333159][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 723.369926][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 723.372098][ T5905] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 723.372126][ T5905] usb 6-1: config 1 has no interface number 0 [ 723.372171][ T5905] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 723.372190][ T5905] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 723.372208][ T5905] usb 6-1: config 1 interface 105 has no altsetting 0 [ 723.374696][ T5905] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 723.374724][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 723.374746][ T5905] usb 6-1: Product: syz [ 723.374761][ T5905] usb 6-1: Manufacturer: syz [ 723.374777][ T5905] usb 6-1: SerialNumber: syz [ 723.459101][T15022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 723.459241][T15022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 723.495368][ T12] team0 (unregistering): Port device team_slave_0 removed [ 723.884153][ T5616] usb 1-1: USB disconnect, device number 25 [ 723.941813][T15022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 723.941948][T15022] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 724.147234][ T5905] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 724.147544][ T5905] aqc111 6-1:1.105: probe with driver aqc111 failed with error -61 [ 724.610681][ T5736] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 724.784569][ T5736] usb 5-1: unable to get BOS descriptor or descriptor too short [ 724.788584][ T5736] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 724.788652][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.788673][ T5736] usb 5-1: Product: syz [ 724.788688][ T5736] usb 5-1: Manufacturer: syz [ 724.788710][ T5736] usb 5-1: SerialNumber: syz [ 724.850987][ T5720] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 724.884510][ T5736] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 725.030603][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.030632][ T5720] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 725.030670][ T5720] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 725.030695][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.087261][ T5720] usb 1-1: config 0 descriptor?? [ 725.607552][ T12] IPVS: stop unused estimator thread 0... [ 725.833266][ T12] bridge_slave_1: left allmulticast mode [ 725.833315][ T12] bridge_slave_1: left promiscuous mode [ 725.833718][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.936909][ T198] usb 6-1: USB disconnect, device number 19 [ 725.985590][ T12] bridge_slave_0: left allmulticast mode [ 725.985622][ T12] bridge_slave_0: left promiscuous mode [ 725.986961][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.019768][ T6234] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 726.169734][ T6234] usb 2-1: Using ep0 maxpacket: 8 [ 726.179331][ T6234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.179387][ T6234] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 726.179411][ T6234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.225733][ T6234] usb 2-1: config 0 descriptor?? [ 726.249795][ T6234] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 727.330463][ T6234] gspca_vc032x: reg_r err -110 [ 727.330562][ T6234] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 727.384353][ T198] usb 2-1: USB disconnect, device number 36 [ 727.671546][ T5736] usb 5-1: USB disconnect, device number 38 [ 727.712589][ T5616] usb 1-1: USB disconnect, device number 26 [ 727.938650][ T7687] udevd[7687]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.255254][ T5736] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 728.469519][ T5736] usb 5-1: Using ep0 maxpacket: 16 [ 728.471615][ T5736] usb 5-1: config 0 has no interfaces? [ 728.473732][ T5736] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 728.473761][ T5736] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 728.473784][ T5736] usb 5-1: Manufacturer: syz [ 728.513408][ T5736] usb 5-1: config 0 descriptor?? [ 728.756441][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'. [ 728.769537][ T5736] usb 5-1: USB disconnect, device number 39 [ 729.411060][ T5736] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 729.430938][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.490515][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.542717][ T12] bond0 (unregistering): Released all slaves [ 729.566588][ T5736] usb 1-1: unable to get BOS descriptor or descriptor too short [ 729.579877][ T5736] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 729.579910][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.579930][ T5736] usb 1-1: Product: syz [ 729.579944][ T5736] usb 1-1: Manufacturer: syz [ 729.579958][ T5736] usb 1-1: SerialNumber: syz [ 729.679447][ T5616] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 729.796994][ T5736] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 729.853613][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 729.857605][ T5616] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 729.857633][ T5616] usb 5-1: config 1 has no interface number 0 [ 729.857678][ T5616] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 729.857705][ T5616] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 729.857730][ T5616] usb 5-1: config 1 interface 105 has no altsetting 0 [ 729.887529][ T5616] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 729.887556][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 729.887577][ T5616] usb 5-1: Product: syz [ 729.887592][ T5616] usb 5-1: Manufacturer: syz [ 729.887606][ T5616] usb 5-1: SerialNumber: syz [ 729.966370][T15124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 729.966721][T15124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 730.069672][ T5723] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 730.323640][ T5723] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 730.323685][ T5723] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 730.323771][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.363202][ T5723] usb 3-1: config 0 descriptor?? [ 730.439010][T15124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 730.439221][T15124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 730.656682][ T5616] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 730.657062][ T5616] aqc111 5-1:1.105: probe with driver aqc111 failed with error -61 [ 731.415098][ T10] usb 3-1: USB disconnect, device number 52 [ 731.809351][ T5616] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 731.981404][ T5616] usb 6-1: Using ep0 maxpacket: 16 [ 731.995873][ T5616] usb 6-1: config 0 has no interfaces? [ 731.997437][ T5616] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 731.997466][ T5616] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 731.997488][ T5616] usb 6-1: Manufacturer: syz [ 732.041074][ T5616] usb 6-1: config 0 descriptor?? [ 732.294034][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3430'. [ 732.360467][ T5621] usb 6-1: USB disconnect, device number 20 [ 732.526743][ T5616] usb 5-1: USB disconnect, device number 40 [ 732.594328][ T5736] usb 1-1: USB disconnect, device number 27 [ 733.310186][T10445] udevd[10445]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.659497][ T5736] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 733.809252][ T5736] usb 1-1: Using ep0 maxpacket: 8 [ 733.813855][ T5736] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 733.813885][ T5736] usb 1-1: config 179 has no interface number 0 [ 733.813934][ T5736] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 733.813977][ T5736] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 733.814007][ T5736] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 733.814034][ T5736] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 733.814063][ T5736] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 733.814132][ T5736] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 733.814157][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.927331][T15192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 737.403577][ T5736] usb 1-1: USB disconnect, device number 28 [ 737.403652][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 737.403712][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 738.029090][ T5586] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 738.030653][ T12] hsr_slave_0: left promiscuous mode [ 738.083010][ T12] hsr_slave_1: left promiscuous mode [ 738.084718][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.084741][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.145908][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.145933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.171135][T15221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3446'. [ 738.171155][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3446'. [ 738.182070][ T5586] usb 5-1: unable to get BOS descriptor or descriptor too short [ 738.206692][ T5586] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 738.206722][ T5586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.206743][ T5586] usb 5-1: Product: syz [ 738.206758][ T5586] usb 5-1: Manufacturer: syz [ 738.206782][ T5586] usb 5-1: SerialNumber: syz [ 738.275106][ T5586] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 738.416956][ T12] veth1_macvtap: left promiscuous mode [ 738.417060][ T12] veth0_macvtap: left promiscuous mode [ 738.417351][ T12] veth1_vlan: left promiscuous mode [ 738.417531][ T12] veth0_vlan: left promiscuous mode [ 738.466183][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3448'. [ 739.824474][T15239] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3452'. [ 740.570107][ T12] team0 (unregistering): Port device team_slave_1 removed [ 740.671143][ T12] team0 (unregistering): Port device team_slave_0 removed [ 742.395417][ T5586] usb 5-1: USB disconnect, device number 41 [ 742.450147][T15264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3459'. [ 742.450171][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3459'. [ 742.483106][ T5736] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 742.628757][ T5736] usb 3-1: Using ep0 maxpacket: 8 [ 742.631412][ T5736] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 742.631438][ T5736] usb 3-1: config 179 has no interface number 0 [ 742.631484][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 742.631513][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 742.631544][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 742.631571][ T5736] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 742.631599][ T5736] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 742.631643][ T5736] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 742.631666][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.781109][T15258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.882449][T15205] udevd[15205]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.028742][ T6234] usb 3-1: USB disconnect, device number 53 [ 743.028833][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 743.028899][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 744.748622][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 744.849462][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3471'. [ 744.888650][ T5736] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 744.909190][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 744.909218][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.942485][ T10] usb 1-1: config 0 descriptor?? [ 745.038615][ T5736] usb 2-1: Using ep0 maxpacket: 8 [ 745.041655][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.041750][ T5736] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 745.041770][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.082554][ T5736] usb 2-1: config 0 descriptor?? [ 745.105216][ T5736] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 745.205388][ T10] usb 1-1: Cannot read MAC address [ 745.205678][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 745.244515][ T10] usb 1-1: USB disconnect, device number 29 [ 745.387649][T15313] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 745.678597][ T5616] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 745.838598][ T5616] usb 3-1: Using ep0 maxpacket: 8 [ 745.867415][ T5616] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 745.867613][ T5616] usb 3-1: config 0 has no interface number 0 [ 745.867877][ T5616] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 745.867925][ T5616] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 745.867968][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.138503][ T5616] usb 3-1: config 0 descriptor?? [ 746.187352][ T5616] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 747.222632][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.222704][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.470166][ T6234] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 747.588070][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3484'. [ 747.638501][ T6234] usb 6-1: Using ep0 maxpacket: 16 [ 747.645916][ T6234] usb 6-1: config 0 has no interfaces? [ 747.659972][ T6234] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 747.659992][ T6234] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 747.660397][ T6234] usb 6-1: Manufacturer: syz [ 747.713615][ T6234] usb 6-1: config 0 descriptor?? [ 747.747964][ T5736] usb 2-1: USB disconnect, device number 37 [ 747.948591][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3485'. [ 747.993073][ T5736] usb 6-1: USB disconnect, device number 21 [ 748.452579][ T5736] usb 3-1: USB disconnect, device number 54 [ 748.682041][T15351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3489'. [ 749.613912][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3496'. [ 749.798394][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 749.968343][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 749.971774][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.971827][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 749.971849][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.989255][ T10] usb 5-1: config 0 descriptor?? [ 750.019907][ T10] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 750.078391][ T5736] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 750.158344][ T5621] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 750.228284][ T5736] usb 6-1: Using ep0 maxpacket: 16 [ 750.230608][ T5736] usb 6-1: config 0 has no interfaces? [ 750.232269][ T5736] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 750.232297][ T5736] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 750.232320][ T5736] usb 6-1: Manufacturer: syz [ 750.237575][ T5736] usb 6-1: config 0 descriptor?? [ 750.310297][ T5621] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 750.310316][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.315201][ T5621] usb 3-1: config 0 descriptor?? [ 750.524456][ T5736] usb 6-1: USB disconnect, device number 22 [ 750.573360][ T5621] usb 3-1: Cannot read MAC address [ 750.573561][ T5621] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 750.597321][ T5621] usb 3-1: USB disconnect, device number 55 [ 751.931411][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3513'. [ 752.572990][ T5621] usb 5-1: USB disconnect, device number 42 [ 753.598128][ T5621] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 753.790575][ T5621] usb 3-1: Using ep0 maxpacket: 16 [ 753.793265][ T5621] usb 3-1: config 0 has no interfaces? [ 753.794878][ T5621] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 753.794907][ T5621] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 753.794930][ T5621] usb 3-1: Manufacturer: syz [ 753.804501][ T5621] usb 3-1: config 0 descriptor?? [ 753.970121][ T5616] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 754.034165][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 754.115160][ T5621] usb 3-1: USB disconnect, device number 56 [ 754.131103][ T5616] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.131149][ T5616] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.131188][ T5616] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 754.131210][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.183678][ T5616] usb 1-1: config 0 descriptor?? [ 754.200060][ T5616] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 754.420156][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 754.443727][ T5621] usb 1-1: USB disconnect, device number 30 [ 754.600108][ T5616] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 754.848230][ T5616] usb 6-1: Using ep0 maxpacket: 8 [ 755.006269][ T5616] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.006327][ T5616] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 755.006370][ T5616] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 755.006394][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.008336][ T5736] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 755.320193][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.320333][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 755.320424][ T5736] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 755.320498][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.486307][ T5736] usb 1-1: config 0 descriptor?? [ 755.579752][ T5616] usb 6-1: config 0 descriptor?? [ 755.579828][ T5736] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 755.585259][ T5616] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 756.049976][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.053031][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.668242][ T5616] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 756.766662][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.781667][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.621465][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.646037][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.852159][ T10] usb 6-1: USB disconnect, device number 23 [ 757.892221][ T5616] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 757.892253][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.521791][ T5616] usb 3-1: config 0 descriptor?? [ 759.678439][ T5616] usb 3-1: can't set config #0, error -71 [ 759.689068][ T5616] usb 3-1: USB disconnect, device number 57 [ 759.749381][ T5736] usb 1-1: USB disconnect, device number 31 [ 759.791240][ T5720] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 759.913588][T15510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3547'. [ 759.948773][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 759.951412][ T5720] usb 2-1: config 0 has no interfaces? [ 759.952821][ T5720] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 759.952849][ T5720] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 759.952871][ T5720] usb 2-1: Manufacturer: syz [ 759.995084][ T5720] usb 2-1: config 0 descriptor?? [ 760.216442][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 760.226454][ T5720] usb 2-1: USB disconnect, device number 38 [ 760.407996][ T5616] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 760.577872][ T5616] usb 6-1: Using ep0 maxpacket: 8 [ 760.583203][ T5616] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.583254][ T5616] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 760.583277][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.604898][ T5616] usb 6-1: config 0 descriptor?? [ 760.654268][ T5616] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 761.327918][ T5720] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 761.407842][ T6234] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 761.487650][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 761.489759][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.489810][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.489889][ T5720] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 761.489906][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.495717][ T5720] usb 2-1: config 0 descriptor?? [ 761.510453][ T5723] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 761.585701][ T5720] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 761.600571][ T6234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.600604][ T6234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.600670][ T6234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 761.600700][ T6234] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.600716][ T6234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.680595][ T6234] usb 1-1: config 0 descriptor?? [ 761.749888][ T5723] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 761.749910][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.783100][ T5723] usb 3-1: config 0 descriptor?? [ 761.792582][ T5616] gspca_vc032x: reg_w err -71 [ 761.794004][ T5616] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 761.850924][ T5616] usb 6-1: USB disconnect, device number 24 [ 762.209944][ T5723] usb 3-1: Cannot read MAC address [ 762.210221][ T5723] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 762.230431][ T6234] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 762.252317][ T5723] usb 3-1: USB disconnect, device number 58 [ 762.488702][T15538] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3554'. [ 762.488929][T15538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.159979][ T31] usb 2-1: USB disconnect, device number 39 [ 764.519868][ T6234] usb 1-1: reset high-speed USB device number 32 using dummy_hcd [ 764.601612][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3561'. [ 765.357489][ T5621] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 765.417567][ T31] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 765.530242][ T5621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.530297][ T5621] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 765.530348][ T5621] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 765.530373][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.600706][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 765.607190][ T31] usb 5-1: config 0 has no interfaces? [ 765.624241][ T31] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 765.625460][ T31] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 765.625482][ T31] usb 5-1: Manufacturer: syz [ 765.677414][ T31] usb 5-1: config 0 descriptor?? [ 765.689449][ T5621] usb 2-1: config 0 descriptor?? [ 765.724014][ T5621] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 765.920317][ T31] usb 5-1: USB disconnect, device number 43 [ 765.985415][ T5621] usb 2-1: USB disconnect, device number 40 [ 766.155310][ T5723] usb 1-1: USB disconnect, device number 32 [ 766.839937][ T5621] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 766.847806][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 767.052200][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.052321][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.052410][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 767.052434][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.737293][ T5621] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 767.737366][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.726749][ T5621] usb 3-1: config 0 descriptor?? [ 769.756076][ T10] usb 2-1: config 0 descriptor?? [ 769.910746][ T5621] usb 3-1: can't set config #0, error -71 [ 769.942505][ T5621] usb 3-1: USB disconnect, device number 59 [ 770.094051][ T10] usb 2-1: can't set config #0, error -71 [ 770.110351][ T10] usb 2-1: USB disconnect, device number 41 [ 770.548943][T15599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3573'. [ 770.745445][T15605] IPVS: length: 24 != 73752 [ 771.237254][ T5621] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 771.387108][ T5621] usb 1-1: Using ep0 maxpacket: 16 [ 771.389935][ T5621] usb 1-1: config 0 has no interfaces? [ 771.391883][ T5621] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 771.391911][ T5621] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 771.391933][ T5621] usb 1-1: Manufacturer: syz [ 771.432529][ T5621] usb 1-1: config 0 descriptor?? [ 771.470490][ T37] audit: type=1326 audit(1785524050.589:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.470930][ T37] audit: type=1326 audit(1785524050.589:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.471220][ T37] audit: type=1326 audit(1785524050.589:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.471621][ T37] audit: type=1326 audit(1785524050.589:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.472005][ T37] audit: type=1326 audit(1785524050.589:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.472772][ T37] audit: type=1326 audit(1785524050.589:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.473224][ T37] audit: type=1326 audit(1785524050.589:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.473526][ T37] audit: type=1326 audit(1785524050.589:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15622 comm="syz.2.3582" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0377fe019 code=0x7ffc0000 [ 771.750471][ T10] usb 1-1: USB disconnect, device number 33 [ 773.948857][T15637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.977077][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3589'. [ 774.656977][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 774.817087][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 774.836538][ T10] usb 2-1: config 0 has no interfaces? [ 774.850311][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 774.850341][ T10] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 774.850365][ T10] usb 2-1: Manufacturer: syz [ 774.893029][ T10] usb 2-1: config 0 descriptor?? [ 775.003172][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 775.340393][ T10] usb 2-1: USB disconnect, device number 42 [ 777.194530][T15685] input: syz0 as /devices/virtual/input/input12 [ 780.042297][T15708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.217111][T15712] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 780.217235][T15712] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 780.645924][T15712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 780.646076][T15712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 780.798451][T15712] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 780.798557][T15712] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 780.885584][T15712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 780.885699][T15712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 781.024914][T15712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 781.357220][ T5720] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 781.376945][ T31] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 781.376970][ T31] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 781.386629][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 781.409084][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 781.506528][ T5720] usb 5-1: Using ep0 maxpacket: 16 [ 781.509307][ T5720] usb 5-1: config 0 has no interfaces? [ 781.510707][ T5720] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 781.510735][ T5720] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 781.510756][ T5720] usb 5-1: Manufacturer: syz [ 781.569261][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 781.572293][ T5720] usb 5-1: config 0 descriptor?? [ 781.608436][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 781.608467][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.608490][ T10] usb 6-1: Product: syz [ 781.608505][ T10] usb 6-1: Manufacturer: syz [ 781.608521][ T10] usb 6-1: SerialNumber: syz [ 781.741463][ T10] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 781.862829][ T5720] usb 5-1: USB disconnect, device number 44 [ 782.256481][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 782.667410][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 782.716492][T15587] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 782.826472][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 782.870177][T15587] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 782.870200][T15587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.896521][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 782.945466][T15587] usb 3-1: config 0 descriptor?? [ 783.815684][T15587] usb 3-1: Cannot set autoneg [ 783.815882][T15587] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 784.076495][T15587] usb 3-1: USB disconnect, device number 60 [ 784.336458][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 784.564020][ T10] usb 6-1: USB disconnect, device number 25 [ 784.770481][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 784.896523][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 784.980175][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 785.606530][T15767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.002967][T15205] udevd[15205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.496582][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 786.498135][ T31] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 786.498159][ T31] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 786.586283][T15534] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 786.736301][T15534] usb 5-1: Using ep0 maxpacket: 16 [ 786.739305][T15534] usb 5-1: config 0 has no interfaces? [ 786.740584][T15534] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 786.740610][T15534] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 786.740630][T15534] usb 5-1: Manufacturer: syz [ 786.786085][T15534] usb 5-1: config 0 descriptor?? [ 787.056750][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 787.058169][ T10] usb 5-1: USB disconnect, device number 45 [ 787.146234][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 787.306921][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 787.311238][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 787.311258][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 787.311276][ T9] usb 1-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 787.311294][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 787.311312][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 787.311329][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.311358][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 787.311374][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.546253][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 787.747126][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 787.769131][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.769159][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.806615][ T10] usb 3-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 787.806647][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.806669][ T10] usb 3-1: Product: syz [ 787.806684][ T10] usb 3-1: Manufacturer: syz [ 787.806699][ T10] usb 3-1: SerialNumber: syz [ 787.893003][ T10] usb 3-1: config 0 descriptor?? [ 788.130089][T15823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.134849][T15823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.159656][T15534] usb 3-1: USB disconnect, device number 61 [ 788.607217][T15830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.826659][ T6234] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 788.968212][ T9] usb 1-1: usb_control_msg returned -71 [ 788.968262][ T9] usbtmc 1-1:16.0: can't read capabilities [ 788.983612][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 788.994266][ T31] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 788.994283][ T31] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 789.028424][ T6234] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 789.028453][ T6234] usb 3-1: config 0 has no interface number 0 [ 789.028502][ T6234] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 789.031628][ T6234] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 789.031655][ T6234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.031675][ T6234] usb 3-1: Product: syz [ 789.031689][ T6234] usb 3-1: Manufacturer: syz [ 789.031719][ T6234] usb 3-1: SerialNumber: syz [ 789.126825][ T6234] usb 3-1: config 0 descriptor?? [ 789.157006][ T9] usb 1-1: USB disconnect, device number 34 [ 789.363030][ T5586] usb 3-1: USB disconnect, device number 62 [ 792.326036][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 792.476105][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 792.478470][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 792.478491][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 792.478509][ T9] usb 1-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 792.478527][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 792.478547][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 792.478565][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.478595][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 792.478611][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.857182][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 792.857235][ T9] usbtmc 1-1:16.0: can't read capabilities [ 793.368920][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.369008][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.369083][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.373897][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.373976][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.374047][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.444216][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.444304][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.444706][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.444780][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.444851][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.506597][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.506681][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.506762][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.615893][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 793.616019][ T31] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 793.616038][ T31] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 793.748306][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 793.748366][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 794.025865][ T5720] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 794.182440][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 794.194822][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.194895][ T5720] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 794.194921][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.266516][ T5720] usb 2-1: config 0 descriptor?? [ 794.301280][ T5720] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 794.433546][ T9] usb 1-1: USB disconnect, device number 35 [ 794.721464][ T5586] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 794.886641][ T5586] usb 3-1: Using ep0 maxpacket: 16 [ 794.940143][ T5586] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.940177][ T5586] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 794.990108][ T5720] gspca_vc032x: reg_w err -110 [ 794.990204][ T5720] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 795.019239][ T5586] usb 3-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 795.019271][ T5586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.019293][ T5586] usb 3-1: Product: syz [ 795.019308][ T5586] usb 3-1: Manufacturer: syz [ 795.019324][ T5586] usb 3-1: SerialNumber: syz [ 795.087379][ T5586] usb 3-1: config 0 descriptor?? [ 795.319245][T15908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.319714][T15908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.361286][ T5720] usb 3-1: USB disconnect, device number 63 [ 795.402391][T15919] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 795.402426][T15919] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 795.498497][T15534] usb 2-1: USB disconnect, device number 43 [ 795.825723][ T5586] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 795.891277][ T9] bridge0: entered promiscuous mode [ 795.997867][ T5586] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 795.997899][ T5586] usb 3-1: config 0 has no interface number 0 [ 795.997949][ T5586] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.034114][ T5586] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 796.034145][ T5586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.034167][ T5586] usb 3-1: Product: syz [ 796.034182][ T5586] usb 3-1: Manufacturer: syz [ 796.034198][ T5586] usb 3-1: SerialNumber: syz [ 796.122648][ T5586] usb 3-1: config 0 descriptor?? [ 796.202742][T15941] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3661'. [ 796.438186][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 796.443647][ T31] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 796.443675][ T31] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 796.544622][ T5586] usb 3-1: USB disconnect, device number 64 [ 797.176428][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 797.929442][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 797.946959][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.946992][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 797.947019][ T9] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 797.947048][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 797.947077][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 797.947104][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.947150][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 797.947175][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.227255][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3669'. [ 798.291898][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 798.291949][ T9] usbtmc 6-1:16.0: can't read capabilities [ 798.742201][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.764147][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.765627][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.766271][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.823570][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.824942][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.850516][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.856990][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.914826][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.914997][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.965972][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.966030][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.966077][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.966122][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.967818][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 798.967899][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 800.915630][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 801.258703][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 801.258739][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.326380][ T9] usb 3-1: config 0 descriptor?? [ 801.414570][T15987] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3674'. [ 801.748155][ T5586] usb 6-1: USB disconnect, device number 26 [ 802.364184][ T9] usb 3-1: Cannot set autoneg [ 802.364552][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 802.448957][ T9] usb 3-1: USB disconnect, device number 65 [ 803.218186][T16021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.355291][T15534] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 803.505336][T15534] usb 2-1: Using ep0 maxpacket: 8 [ 803.509865][T15534] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.509886][T15534] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.509904][T15534] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 803.509923][T15534] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 803.509943][T15534] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 803.509960][T15534] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.510012][T15534] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 803.510038][T15534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.794750][T15534] usb 2-1: GET_CAPABILITIES returned 0 [ 803.794801][T15534] usbtmc 2-1:16.0: can't read capabilities [ 804.171683][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.171776][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.171824][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.176100][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.179789][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.183099][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.206319][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.206541][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.207283][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.207491][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.208625][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.209139][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.209614][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.210268][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.210488][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.211156][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 804.409793][T16033] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 804.675260][ T31] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 804.716497][T15534] usb 2-1: USB disconnect, device number 44 [ 804.968140][ T31] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 804.968318][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 804.968405][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.638655][T16052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.756624][T16045] syzkaller0: entered promiscuous mode [ 805.756644][T16045] syzkaller0: entered allmulticast mode [ 806.053754][T15587] usb 3-1: USB disconnect, device number 66 [ 806.338183][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 806.350005][T16077] input: syz0 as /devices/virtual/input/input13 [ 806.486732][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 806.490326][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.490390][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 806.490415][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.552693][ T9] usb 2-1: config 0 descriptor?? [ 806.606608][T15587] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 806.630629][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 806.755505][T15587] usb 3-1: Using ep0 maxpacket: 8 [ 806.791395][T15587] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 806.792731][T15587] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 806.792761][T15587] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 806.792788][T15587] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 806.793460][T15587] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 806.793491][T15587] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.794510][T15587] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 806.794669][T15587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.288997][ T9] gspca_vc032x: reg_w err -110 [ 807.289375][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 807.428529][T15587] usb 3-1: GET_CAPABILITIES returned 0 [ 807.428581][T15587] usbtmc 3-1:16.0: can't read capabilities [ 807.466185][ T31] usb 2-1: USB disconnect, device number 45 [ 807.585075][ T5720] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 807.689338][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.689395][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.689440][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.689484][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.689872][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.689947][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690018][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690349][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690396][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690440][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690483][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690726][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690772][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690815][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.690873][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.691145][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 807.768793][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 807.853530][ T5720] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 807.853563][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.853585][ T5720] usb 5-1: Product: syz [ 807.853602][ T5720] usb 5-1: Manufacturer: syz [ 807.853618][ T5720] usb 5-1: SerialNumber: syz [ 807.908745][ T5720] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 807.948537][T15587] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 808.013557][T16098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.060037][ T31] usb 3-1: USB disconnect, device number 67 [ 808.120530][T15587] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 808.120584][T15587] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 808.120607][T15587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.673970][T16111] syzkaller0: entered promiscuous mode [ 808.674208][T16111] syzkaller0: entered allmulticast mode [ 808.677838][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.677907][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.084587][T16140] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 810.148861][ T5720] usb 5-1: USB disconnect, device number 46 [ 810.194693][T16145] netlink: 'syz.0.3735': attribute type 1 has an invalid length. [ 810.318100][T16145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.414930][ T6234] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 810.423459][T15255] udevd[15255]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.491778][T16148] bond1: (slave geneve2): making interface the new active one [ 810.523871][T16148] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 810.564899][ T6234] usb 2-1: Using ep0 maxpacket: 8 [ 810.567059][ T6234] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 810.567085][ T6234] usb 2-1: config 0 has no interface number 0 [ 810.567130][ T6234] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 810.567173][ T6234] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 810.567197][ T6234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.646729][ T6234] usb 2-1: config 0 descriptor?? [ 810.667690][ T6234] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 810.701616][ T6234] usb 6-1: USB disconnect, device number 27 [ 810.724877][ T5720] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 810.914858][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 810.916673][ T5720] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.916700][ T5720] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.916725][ T5720] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 810.916752][ T5720] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 810.916780][ T5720] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 810.916804][ T5720] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.916846][ T5720] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 810.916871][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.241824][ T5720] usb 5-1: GET_CAPABILITIES returned 0 [ 811.241876][ T5720] usbtmc 5-1:16.0: can't read capabilities [ 812.065824][T15534] usb 5-1: USB disconnect, device number 47 [ 812.286052][T16165] input: syz0 as /devices/virtual/input/input14 [ 812.359008][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 812.557682][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.557737][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.557783][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 812.557808][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.604401][ T9] usb 1-1: config 0 descriptor?? [ 812.633379][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 812.806357][T15587] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 812.866949][ T9] usb 1-1: USB disconnect, device number 36 [ 812.989651][T15587] usb 6-1: unable to get BOS descriptor or descriptor too short [ 813.016150][T15587] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 813.016183][T15587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.016205][T15587] usb 6-1: Product: syz [ 813.016220][T15587] usb 6-1: Manufacturer: syz [ 813.016235][T15587] usb 6-1: SerialNumber: syz [ 813.020844][ T6234] usb 2-1: USB disconnect, device number 46 [ 813.124003][T15587] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 813.524814][ T5736] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 813.950903][ T5736] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.950956][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.951069][ T5736] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 813.951087][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.020177][ T5736] usb 1-1: config 0 descriptor?? [ 814.071126][ T5736] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 814.603092][T16202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.603753][T16202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.014662][T15534] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 815.164668][T15534] usb 2-1: Using ep0 maxpacket: 8 [ 815.167441][T15534] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 815.167468][T15534] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 815.167496][T15534] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 815.167525][T15534] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 815.167555][T15534] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 815.167580][T15534] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.167634][T15534] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 815.167659][T15534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.450398][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.467077][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.520194][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.524283][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.569100][T15534] usb 2-1: GET_CAPABILITIES returned 0 [ 815.569149][T15534] usbtmc 2-1:16.0: can't read capabilities [ 815.860770][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.866695][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.866774][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.866821][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.869682][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.871584][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.871812][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.872781][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.878888][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.886567][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.886760][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.887385][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.887534][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.890137][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.890339][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 815.891138][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 816.009870][T15534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.163522][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.163557][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.315338][T15587] usb 6-1: USB disconnect, device number 28 [ 817.319140][T16221] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3761'. [ 817.387372][ T9] usb 2-1: USB disconnect, device number 47 [ 817.640983][T15534] usb 1-1: USB disconnect, device number 37 [ 818.174854][T15534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.288834][T15205] udevd[15205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.850263][T16251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.851441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.924533][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3774'. [ 818.973348][T16256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.973587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.974792][T15587] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 818.987869][T15534] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 819.133714][T16258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.133900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.154371][T15534] usb 2-1: Using ep0 maxpacket: 8 [ 819.162282][T15534] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.162318][T15534] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 819.162344][T15534] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 819.162372][T15534] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 819.162402][T15534] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 819.162427][T15534] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.162471][T15534] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 819.162493][T15534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.169984][T15587] usb 1-1: unable to get BOS descriptor or descriptor too short [ 819.250224][T15587] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 819.250263][T15587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.250323][T15587] usb 1-1: Product: syz [ 819.250376][T15587] usb 1-1: Manufacturer: syz [ 819.250425][T15587] usb 1-1: SerialNumber: syz [ 819.352577][T15587] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 820.737505][T15534] usb 2-1: usb_control_msg returned -71 [ 820.737555][T15534] usbtmc 2-1:16.0: can't read capabilities [ 820.783094][T15534] usb 2-1: USB disconnect, device number 48 [ 821.321330][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3785'. [ 821.375498][ T6234] net_ratelimit: 3 callbacks suppressed [ 821.375519][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.252188][T15587] usb 1-1: USB disconnect, device number 38 [ 822.414727][T15534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.575498][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.608145][T15255] udevd[15255]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 822.734317][ T5736] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 822.736014][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.826025][T15587] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 822.884264][ T5736] usb 6-1: Using ep0 maxpacket: 8 [ 822.891397][ T5736] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 822.891426][ T5736] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 822.891447][ T5736] usb 6-1: config 179 has no interface number 0 [ 822.891494][ T5736] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 822.891518][ T5736] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 822.891562][ T5736] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 822.891586][ T5736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.015660][T15587] usb 1-1: Using ep0 maxpacket: 8 [ 823.018635][T15587] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.018694][T15587] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 823.018720][T15587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.095245][T15587] usb 1-1: config 0 descriptor?? [ 823.137865][T15587] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 823.235748][T15534] usb 6-1: USB disconnect, device number 29 [ 823.309667][T16321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3798'. [ 823.454654][T15534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.684196][ T6234] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 823.840135][ T6234] usb 3-1: unable to get BOS descriptor or descriptor too short [ 823.854266][ T6234] usb 3-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 823.854290][ T6234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.854326][ T6234] usb 3-1: Product: syz [ 823.854341][ T6234] usb 3-1: Manufacturer: syz [ 823.854354][ T6234] usb 3-1: SerialNumber: syz [ 823.908455][ T6234] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 824.284435][T15587] gspca_vc032x: reg_w err -110 [ 824.284550][T15587] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 824.489372][ T5586] usb 1-1: USB disconnect, device number 39 [ 824.571014][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.075691][ T6234] usb 3-1: USB disconnect, device number 68 [ 825.394257][T15255] udevd[15255]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.615635][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.671594][T16361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3811'. [ 825.864470][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.118546][T16370] CIFS: Attempting to mount //127.0.0.1/share [ 826.395213][T16373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3816'. [ 826.659272][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.020958][T16370] CIFS: VFS: cifs_mount failed w/return code = -512 [ 827.417050][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 827.434135][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 827.435505][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 827.436929][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 828.122888][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 828.292626][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.610213][ T37] audit: type=1107 audit(1785524107.722:54): pid=16400 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 828.743352][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 828.896670][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.925303][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 828.945980][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 828.950379][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 828.951147][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 829.233879][ T5586] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 829.296554][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.574265][ T5586] usb 5-1: Using ep0 maxpacket: 8 [ 829.576325][ T5586] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 829.576346][ T5586] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 829.576363][ T5586] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 829.576381][ T5586] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 829.576411][ T5586] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 829.576427][ T5586] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.576533][ T5586] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 829.576551][ T5586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.335741][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.563918][ T5586] usb 5-1: usb_control_msg returned -71 [ 830.563965][ T5586] usbtmc 5-1:16.0: can't read capabilities [ 830.613808][T15587] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 830.667306][ T5586] usb 5-1: USB disconnect, device number 48 [ 830.692847][ T1428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.692883][ T1428] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.785008][T15587] usb 2-1: Using ep0 maxpacket: 8 [ 830.787482][T15587] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 830.787506][T15587] usb 2-1: config 0 has no interface number 0 [ 830.787547][T15587] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.787586][T15587] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 830.787609][T15587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.793095][T15587] usb 2-1: config 0 descriptor?? [ 830.863388][T15587] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 830.919456][T16425] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 831.213982][ T5620] Bluetooth: hci1: command tx timeout [ 831.374791][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.062432][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.328693][ T5620] Bluetooth: hci1: command tx timeout [ 833.430025][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.487439][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.855302][ T31] usb 2-1: USB disconnect, device number 49 [ 834.094618][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.220923][ T1428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.220962][ T1428] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.317321][ T5586] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 834.465848][ T5586] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 834.465883][ T5586] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 834.465907][ T5586] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.465951][ T5586] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 834.465976][ T5586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.548304][ T5586] usbtmc 5-1:16.0: bulk endpoints not found [ 834.633532][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 834.798402][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.798438][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.798467][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 834.798497][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 834.798514][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.803163][ T9] usb 6-1: config 0 descriptor?? [ 835.136189][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.158583][ T1428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.158611][ T1428] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.373997][ T5620] Bluetooth: hci1: command tx timeout [ 835.489674][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 835.714343][T16504] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3846'. [ 835.715074][T16504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.066876][ T1428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.066916][ T1428] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.187609][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.661638][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.768261][T16520] warning: `syz.0.3859' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 837.623921][ T5620] Bluetooth: hci1: command tx timeout [ 837.691590][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.799042][ T6234] usb 5-1: USB disconnect, device number 49 [ 838.236069][T16531] 0: reclassify loop, rule prio 0, protocol 03 [ 838.587697][ T31] usb 6-1: USB disconnect, device number 30 [ 838.736369][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.695859][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.777399][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.913299][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 840.064225][T16389] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.064313][T16389] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.064468][T16389] bridge_slave_0: entered allmulticast mode [ 840.066663][T16389] bridge_slave_0: entered promiscuous mode [ 840.078184][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 840.081380][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.081420][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 840.081437][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.086644][T16389] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.086965][T16389] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.091041][T16389] bridge_slave_1: entered allmulticast mode [ 840.127923][T16389] bridge_slave_1: entered promiscuous mode [ 840.193256][ T6234] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 840.220880][ T31] usb 1-1: config 0 descriptor?? [ 840.272604][ T31] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 840.355650][ T6234] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 840.355751][ T6234] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.355776][ T6234] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.355820][ T6234] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 840.355844][ T6234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.500795][ T6234] usbtmc 6-1:16.0: bulk endpoints not found [ 840.772834][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.824586][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.874170][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.155765][T16569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3876'. [ 841.155787][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3876'. [ 841.161631][ T1428] bridge_slave_1: left allmulticast mode [ 841.161731][ T1428] bridge_slave_1: left promiscuous mode [ 841.161997][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.277900][ T31] gspca_vc032x: reg_w err -71 [ 841.278042][ T31] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 841.286973][ T31] usb 1-1: USB disconnect, device number 40 [ 841.364590][ T1428] bridge_slave_0: left allmulticast mode [ 841.364635][ T1428] bridge_slave_0: left promiscuous mode [ 841.364873][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.756992][T16580] capability: warning: `syz.4.3879' uses deprecated v2 capabilities in a way that may be insecure [ 842.865113][T16583] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 842.925238][ T5586] usb 6-1: USB disconnect, device number 31 [ 844.445894][T16585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.366280][ T1428] gretap0 (unregistering): left promiscuous mode [ 847.129551][ T1428] bond1 (unregistering): Released all slaves [ 847.150864][ T1428] bond2 (unregistering): Released all slaves [ 847.176316][ T1428] bond0 (unregistering): Released all slaves [ 847.199099][ T1428] bond3 (unregistering): Released all slaves [ 847.221226][ T1428] bond4 (unregistering): Released all slaves [ 847.313571][T16389] team0: Port device team_slave_0 added [ 847.353643][T16389] team0: Port device team_slave_1 added [ 847.372851][ T5586] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 847.546022][ T5586] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 847.546053][ T5586] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 847.546076][ T5586] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.546116][ T5586] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 847.546140][ T5586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.628271][ T5586] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 847.681001][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.681017][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.681046][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.741567][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.741580][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.741599][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.870205][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 848.900856][T16389] hsr_slave_0: entered promiscuous mode [ 848.911533][T16389] hsr_slave_1: entered promiscuous mode [ 849.359237][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 850.159954][ T9] usb 1-1: USB disconnect, device number 41 [ 850.161680][ T1428] team0: left promiscuous mode [ 850.161709][ T1428] team_slave_0: left promiscuous mode [ 850.161922][ T1428] team_slave_1: left promiscuous mode [ 850.415182][ T1428] hsr_slave_0: left promiscuous mode [ 850.463620][ T1428] hsr_slave_1: left promiscuous mode [ 850.464637][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.464664][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.526480][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.526513][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.765762][ T1428] veth1_macvtap: left promiscuous mode [ 850.765864][ T1428] veth0_macvtap: left promiscuous mode [ 850.766116][ T1428] veth1_vlan: left promiscuous mode [ 850.803566][ T1428] veth0_vlan: left promiscuous mode [ 850.852650][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 850.873532][T16677] CIFS: Attempting to mount //127.0.0.1/share [ 850.991888][T16677] CIFS: VFS: Error connecting to socket. Aborting operation. [ 850.991941][T16677] CIFS: VFS: cifs_mount failed w/return code = -111 [ 851.022625][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 851.024674][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 851.024694][ T9] usb 5-1: config 179 has no interface number 0 [ 851.024733][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 851.024753][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 851.024773][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 851.024795][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 851.024879][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 851.024911][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 851.024928][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.103245][T16670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 851.155197][ T9] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 851.155781][T16661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.327579][ T9] usb 5-1: USB disconnect, device number 50 [ 852.461477][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 853.059186][T16705] ======================================================= [ 853.059186][T16705] WARNING: The mand mount option has been deprecated and [ 853.059186][T16705] and is ignored by this kernel. Remove the mand [ 853.059186][T16705] option from the mount to silence this warning. [ 853.059186][T16705] ======================================================= [ 853.203118][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 853.373457][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 853.801657][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 856.520710][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 858.129437][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3933'. [ 859.742232][ T6234] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 859.894102][ T6234] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.894125][ T6234] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.894155][ T6234] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 859.894171][ T6234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.153872][ T6234] usb 2-1: usb_control_msg returned -32 [ 860.153920][ T6234] usbtmc 2-1:16.0: can't read capabilities [ 860.722856][ T6234] usb 2-1: USB disconnect, device number 50 [ 861.919668][T16389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 862.006663][T16389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.020864][T16389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 862.267525][T16389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.269772][T16389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 862.339667][T16389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.356659][T16389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 862.460480][T16389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 863.145525][T16389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.188299][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 863.191615][T16389] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.235964][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.236095][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.277898][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.278086][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.663329][ T9] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 865.864926][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 865.864960][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.865003][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 865.865027][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.891782][T15534] IPVS: starting estimator thread 0... [ 865.993127][T16389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.009528][T16926] IPVS: using max 12 ests per chain, 28800 per kthread [ 866.105955][ T9] usb 5-1: usb_control_msg returned -32 [ 866.106004][ T9] usbtmc 5-1:16.0: can't read capabilities [ 866.274945][T16389] veth0_vlan: entered promiscuous mode [ 866.299802][T16389] veth1_vlan: entered promiscuous mode [ 866.350418][T16389] veth0_macvtap: entered promiscuous mode [ 866.382927][T16389] veth1_macvtap: entered promiscuous mode [ 866.447541][T16389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.464328][T16389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.702432][ T5723] usb 5-1: USB disconnect, device number 51 [ 866.784485][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.802287][ T2334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.803793][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.803911][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.832325][T16951] sctp: [Deprecated]: syz.1.3965 (pid 16951) Use of int in max_burst socket option. [ 867.832325][T16951] Use struct sctp_assoc_value instead [ 867.917221][ T2334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.917236][ T2334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.248543][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.248567][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.313738][T16985] CIFS: Attempting to mount //127.0.0.1/share [ 869.371193][T16985] CIFS: VFS: Error connecting to socket. Aborting operation. [ 869.371229][T16985] CIFS: VFS: cifs_mount failed w/return code = -111 [ 869.944225][ T5586] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 870.099301][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.099373][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.340013][ T5586] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.340037][ T5586] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.340065][ T5586] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 870.340080][ T5586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.459439][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3979'. [ 870.595965][ T5586] usb 5-1: usb_control_msg returned -32 [ 870.596015][ T5586] usbtmc 5-1:16.0: can't read capabilities [ 871.180866][T15632] usb 5-1: USB disconnect, device number 52 [ 872.635977][T17023] CIFS: Attempting to mount //127.0.0.1/share [ 872.750763][T17024] bridge0: port 3(erspan0) entered blocking state [ 872.754895][T17024] bridge0: port 3(erspan0) entered disabled state [ 872.772491][T17024] erspan0: entered allmulticast mode [ 872.835562][T17024] erspan0: entered promiscuous mode [ 872.881178][T17024] bridge0: port 3(erspan0) entered blocking state [ 872.882214][T17024] bridge0: port 3(erspan0) entered forwarding state [ 873.049464][T17024] erspan0: left allmulticast mode [ 873.049738][T17024] erspan0: left promiscuous mode [ 873.053696][T17024] bridge0: port 3(erspan0) entered disabled state [ 873.446384][T17023] CIFS: VFS: Error connecting to socket. Aborting operation. [ 873.446434][T17023] CIFS: VFS: cifs_mount failed w/return code = -111 [ 874.372003][T17039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3992'. [ 874.922053][T15632] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 874.926188][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3996'. [ 875.093387][T15632] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 875.093415][T15632] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 875.093454][T15632] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 875.093469][T15632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.368456][T15632] usb 1-1: usb_control_msg returned -32 [ 875.368501][T15632] usbtmc 1-1:16.0: can't read capabilities [ 876.315239][T15534] usb 1-1: USB disconnect, device number 42 [ 876.402282][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4005'. [ 876.828751][T17046] ------------[ cut here ]------------ [ 876.828763][T17046] kcov->t != t [ 876.828774][T17046] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#1: syz.0.3994/17046 [ 876.828818][T17046] Modules linked in: [ 876.828841][T17046] CPU: 1 UID: 0 PID: 17046 Comm: syz.0.3994 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 876.828863][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.828890][T17046] RIP: 0010:kcov_task_exit+0x181/0x240 [ 876.828917][T17046] Code: 90 00 00 00 e8 e0 d2 57 00 4c 89 f7 5b 41 5e 41 5f e9 c3 92 5d 00 7c 40 5b 41 5e 41 5f e9 97 4b 82 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 876.828932][T17046] RSP: 0018:ffffc90003abfd20 EFLAGS: 00010206 [ 876.828945][T17046] RAX: fd9b4a5939c47e00 RBX: ffff88802f9a9f00 RCX: 0000000000000000 [ 876.828958][T17046] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 876.828969][T17046] RBP: ffffc90003abfe80 R08: ffffffff8b46bb20 R09: 0000000000000000 [ 876.828980][T17046] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 876.828991][T17046] R13: ffff88802f9a9f00 R14: ffff88802c3d4c00 R15: ffff88802c3d4c08 [ 876.829003][T17046] FS: 000055555a111500(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 876.829017][T17046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.829028][T17046] CR2: 00007f252fe53ff8 CR3: 000000003801c000 CR4: 00000000003526f0 [ 876.829042][T17046] Call Trace: [ 876.829048][T17046] [ 876.829056][T17046] do_exit+0x159/0x2360 [ 876.829077][T17046] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 876.829102][T17046] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 876.829121][T17046] ? reacquire_held_locks+0x104/0x190 [ 876.829143][T17046] ? __pfx_do_exit+0x10/0x10 [ 876.829174][T17046] ? rt_spin_unlock+0x157/0x200 [ 876.829193][T17046] ? rt_spin_unlock+0x163/0x200 [ 876.829211][T17046] do_group_exit+0x22d/0x2f0 [ 876.829242][T17046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.829260][T17046] __x64_sys_exit_group+0x3f/0x40 [ 876.829275][T17046] x64_sys_call+0x221a/0x2240 [ 876.829291][T17046] do_syscall_64+0x174/0x580 [ 876.829313][T17046] ? clear_bhb_loop+0x40/0x90 [ 876.829333][T17046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.829348][T17046] RIP: 0033:0x7fd9d51ee019 [ 876.829365][T17046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.829378][T17046] RSP: 002b:00007ffc75b73b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 876.829394][T17046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9d51ee019 [ 876.829405][T17046] RDX: 00007fd9d4449000 RSI: 0000000000000000 RDI: 0000000000000000 [ 876.829415][T17046] RBP: 00007ffc75b73b8c R08: 0000000000000000 R09: 00000000000927c0 [ 876.829425][T17046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000098 [ 876.829434][T17046] R13: 00000000000927c0 R14: 00000000000d5654 R15: 00007ffc75b73be0 [ 876.829458][T17046] [ 876.829465][T17046] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 876.829476][T17046] CPU: 1 UID: 0 PID: 17046 Comm: syz.0.3994 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 876.829493][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.829503][T17046] Call Trace: [ 876.829508][T17046] [ 876.829514][T17046] vpanic+0x56c/0xa60 [ 876.829530][T17046] ? __pfx__printk+0x10/0x10 [ 876.829550][T17046] ? __pfx_vpanic+0x10/0x10 [ 876.829565][T17046] ? is_bpf_text_address+0x292/0x2b0 [ 876.829586][T17046] ? is_bpf_text_address+0x26/0x2b0 [ 876.829611][T17046] panic+0xc5/0xd0 [ 876.829625][T17046] ? __pfx_panic+0x10/0x10 [ 876.829653][T17046] __warn+0x315/0x4c0 [ 876.829667][T17046] ? kcov_task_exit+0x181/0x240 [ 876.829693][T17046] ? kcov_task_exit+0x181/0x240 [ 876.829738][T17046] __report_bug+0x276/0x570 [ 876.829776][T17046] ? kcov_task_exit+0x181/0x240 [ 876.829813][T17046] ? __pfx___report_bug+0x10/0x10 [ 876.829842][T17046] ? lockdep_hardirqs_on+0x7a/0x110 [ 876.829877][T17046] ? irqentry_exit+0x218/0x8f0 [ 876.829903][T17046] ? kcov_task_exit+0x183/0x240 [ 876.829931][T17046] ? kcov_task_exit+0x181/0x240 [ 876.829955][T17046] report_bug+0x16a/0x220 [ 876.829979][T17046] ? kcov_task_exit+0x181/0x240 [ 876.830002][T17046] ? kcov_task_exit+0x183/0x240 [ 876.830025][T17046] handle_bug+0x9c/0x200 [ 876.830049][T17046] exc_invalid_op+0x1a/0x50 [ 876.830078][T17046] asm_exc_invalid_op+0x1a/0x20 [ 876.830093][T17046] RIP: 0010:kcov_task_exit+0x181/0x240 [ 876.830118][T17046] Code: 90 00 00 00 e8 e0 d2 57 00 4c 89 f7 5b 41 5e 41 5f e9 c3 92 5d 00 7c 40 5b 41 5e 41 5f e9 97 4b 82 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 876.830131][T17046] RSP: 0018:ffffc90003abfd20 EFLAGS: 00010206 [ 876.830144][T17046] RAX: fd9b4a5939c47e00 RBX: ffff88802f9a9f00 RCX: 0000000000000000 [ 876.830156][T17046] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 876.830167][T17046] RBP: ffffc90003abfe80 R08: ffffffff8b46bb20 R09: 0000000000000000 [ 876.830178][T17046] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 876.830187][T17046] R13: ffff88802f9a9f00 R14: ffff88802c3d4c00 R15: ffff88802c3d4c08 [ 876.830204][T17046] ? rt_spin_lock+0x1e0/0x400 [ 876.830226][T17046] do_exit+0x159/0x2360 [ 876.830239][T17046] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 876.830260][T17046] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 876.830278][T17046] ? reacquire_held_locks+0x104/0x190 [ 876.830299][T17046] ? __pfx_do_exit+0x10/0x10 [ 876.830327][T17046] ? rt_spin_unlock+0x157/0x200 [ 876.830346][T17046] ? rt_spin_unlock+0x163/0x200 [ 876.830363][T17046] do_group_exit+0x22d/0x2f0 [ 876.830379][T17046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.830396][T17046] __x64_sys_exit_group+0x3f/0x40 [ 876.830411][T17046] x64_sys_call+0x221a/0x2240 [ 876.830426][T17046] do_syscall_64+0x174/0x580 [ 876.830448][T17046] ? clear_bhb_loop+0x40/0x90 [ 876.830467][T17046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.830483][T17046] RIP: 0033:0x7fd9d51ee019 [ 876.830496][T17046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.830508][T17046] RSP: 002b:00007ffc75b73b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 876.830523][T17046] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9d51ee019 [ 876.830534][T17046] RDX: 00007fd9d4449000 RSI: 0000000000000000 RDI: 0000000000000000 [ 876.830544][T17046] RBP: 00007ffc75b73b8c R08: 0000000000000000 R09: 00000000000927c0 [ 876.830554][T17046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000098 [ 876.830565][T17046] R13: 00000000000927c0 R14: 00000000000d5654 R15: 00007ffc75b73be0 [ 876.830589][T17046] [ 876.831190][T17046] Kernel Offset: disabled