last executing test programs: 2m32.834044125s ago: executing program 3 (id=430): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m32.638466745s ago: executing program 3 (id=432): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m32.548922676s ago: executing program 3 (id=433): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m32.372543677s ago: executing program 3 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) 2m32.276490697s ago: executing program 3 (id=436): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syzkaller1\x00', 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 2m32.082615716s ago: executing program 3 (id=437): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000300)={0x1, 0xfffffdfe, 0x1, 0x8, 0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 2m31.85643392s ago: executing program 32 (id=437): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000300)={0x1, 0xfffffdfe, 0x1, 0x8, 0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 1m12.379336305s ago: executing program 4 (id=1161): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m10.31029112s ago: executing program 4 (id=1172): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) close_range(r1, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000200)=""/170, 0xaa}, {&(0x7f0000000300)=""/157, 0x9d}], 0x2, 0xb, 0x4) 1m10.087239229s ago: executing program 4 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x2, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x80140912, 0x200000000005) 1m9.831989857s ago: executing program 4 (id=1180): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c060000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1m9.655023474s ago: executing program 4 (id=1182): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r1, 0x0, &(0x7f0000000500)='\x00Z', 0x2, 0xfffffff9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000380)="ee", 0x1, 0x5}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r1, 0x0, &(0x7f00000004c0)="87", 0x1, 0x304f601a}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0x8, 0x80000000}) 1m9.446682513s ago: executing program 4 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1m9.227955887s ago: executing program 33 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 7.727288767s ago: executing program 2 (id=1766): r0 = syz_socket_connect_nvme_tcp() r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xffffffff, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589"], 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1000, "0c6a05f3f91e158cd7adae738bb99afe4b5a2c341c18be07a4a2db18ab7526f6f55b6bebacbdaf95238170b0f3222f677546138518e56e1fbafb3e79297c18ebd852f4fca611de7e0b34f56ffbe7785bdae880639051b45b8685bb0186bc1e66d27178ab7a4354a148a833959ce5171b23fc90fca2641588719c4f3ae4b3f7cec55ab246b7228647ac3e5eb0ece2ceb3067d004a8402511512eadecd87b9a917a5c09dab78fee51458e6f9c0b97a0c1bfeb4534e8ebf58866a3e168e263d950d4e3c476a02e06d12949aa17fe7ccd7001d6c54b01ee319004372b58414c3f56343e1fde3e07220603dc722e095338138bff7778feb5ae9bc387ca3912a2ebd319df7b5bb5eaf7a796e4067b7aeb808ec233cae93ecc0008865a84311981dc7c08e3bc9b9a39238f8859aab1f2350a8f8b33a01461ff9790da12091df2adb36257a52fb381a837348fc8607e8dd2eb653766d17054144becb58f158c00773a8a3841fc09a92ce938fedd1d9d0985d7240228a0a39a4b938f92b70bc444ad8886c96b63634ce31438ab3dcfb24cc8ebfa0298c76b26f28172c45fa3d8b2fffab7c0aaad88bd41bb0a9243ba31f6cf035543963f3b0a0bb52f17aad7acea0809e52d2cdcb741176654e6dfdedc25af3ef8e8a1fed2405b4cfd84ab5ba6d7c3c2a3fba05992c4729d28306ac31f3ce5a857df39092d8e65f5d35845cf2dc8cf9369439cc3e0160f9bc07f42dc8b28c44fbc1e900bc959425fe079efe69078cb2a3fdd4ebe1e47058623aeb2c860d0a6c5d063aab5a628edb3a312ae9083f134ac5b8410de86133992b3a43e6f3a92b6cc3f70870211cb899afa49cd65354932078c2be7b61112357d196780764e379a271f4feb054dcb250d63832c9ea8545be53689b8d75b7f7544f5c7b9c21af67793ffdb3aa3b4f193c51fd86f15625a1e47a98f21d891dc44da622603b693973a75a86648b0d69dc8977372ee03d2adb8b5607c5b10f6ef4f45d9b99ad4216b4b79bc24f63c96ed827fed6eabd37d27652c2b4e83d66a5478bfb7c17a966a74f4af030bdba4f1d2f983fe46ee479b9ac78722b3d913b0ad7cb74b61c7d1cac56991435498d1acdc1b87f26450abcefef225149fe316abf75023893a23f7d51d463b2c06a289c00c78a58a6ada0b19bd000d0a0e8388f3bd5ae3b78f94dc99e72958284b0b99cd3bc1c5564b7e7781ed8e99d60efbd2c7fcb33121ee5048e020c9b0d9cfe6c0f4dd124df363fbc19fd0040620030c769f76feb495bd3dde80dd6eeb706a39cd494b17061f07c0d7b4c8b9e9eba4faee256d38d854d848dd933535738f0050a22ca618319ff13b9fb71ac1c4adea52425a0387019640908b1d5874ecb7892d0ebb4272dee890b55f28cee3c243278859897a01cb2b1b3e6e2046036f2ec415ff0d5cd5eb74076543595a6fbc6fadb96462439e04164201103e6a9e1ccac8f3142dbc629bdee63964cbc2cf5ece60214012c432607ed2333cd17e3dfb0db69ec566f7345db83485dadf98efea26dc60355e3299a0d5f52de937ff6567dc4307a11759a33e4bfd4eb2a5697a929bc50eebbfdcd7824499280990462d3ab8761ab52c0a5ca3bb11c4f0c1ab4b099e188e05180a6345eca63c5c923695e479dac8a2af7d2aa1c7445db1dfb589ba6f9148bfe072edcaaa5d770b7a7b84e95a72a70ca9bef82322124d8e16d54cc1af66b671b4521321a9107789d75131e11488ff901d7f00ea84b2ef38df694dab666060788e308768969262d0559062d3ad7ddb4d4b2d4f11a38a3090b83e9dacfe509ca7cb4237480187be08da83c01812b86e80023adb01770455d3bdf7100e9925e9e9f36cf24c5569ba6ad0174c8b83b4acb83da5342fdf1ab5b064369a6949918cf929dfb6fc2f22daf04fd447e2f60281521847c697e7b44cc973ff86881bb566b85e8410eea003df09781f0abde73496bbc7cb54c9f6a544e6f8927b31da9b8cc6bc7c3dd5eddf199a0e07e6671030a25e0190afeda0b6b14619a2439fe2fd53bc6ffa60e2215c20f799090da1f56b2b15fbb248440618c508e8f9056af846457f095ce02a01726b2dbee08616818637bb4ec690169594d20759eb6761f4110f8f171c3396a7b29160164e54be15a03db9c39536a670577a27990f7a4e88986bf0aa83f593e9fc57d3d5fda21cbd5ef2b94de383c7494d177513ac587e02750ab883893c7152178f632c32d3c797b634953c764beadd1ac8d329b3e99fa30c0e26323f606f4b0d88d60677a5b92d5f808a560fbb3b038466244abf80b790af66e395b64bdcd9f8c48b24121c41510ed98474b11fefc4e9789adc477dc92e1884b97ffa2bd3ac39e21655369d78f86960e3bdf0d9e60a73a9e932fdf21d437075f090ab3175e2ceaff9457f0a2fd2faae6b061338acef601ec651139ba976f456dae2d3449ced2e12655f0623cdd1030b618966009b3bc6732cd8f9ea143f1f9b5fb5a21c8cccc1f1744dffcfd13cbcc3bf0c41be0aeaf57471259ff8b44f5e501e3cb16fe103f752e4932df8d4b12fa505afa2a717a6277a7ea912bf518363c0b71b61152ce7b0c6fed6458d6d06f21528379473c13431406edc69de4a38083eb2d5b3ded27d4feb2e738c97870d7e595943714113e97bae410494249409c9f74bdc8d47bcb2c18d40b80ac7936fff3f692e70c7c2e12fcc82724420a5773af8ccf166fd65598f4448a228c2f18dcac0b26eb419faee51ea465cffafd71a85628ab374ecf908d563e9bd7ad0f81fc4c29e485733292a2f9823e8cc0725e549b2fcff26f1d8a0be7996e55bc182ee1db01e9647ad3b4222151b07ca47fe695dc9c7edb73bee6a45607134bf60fa54d16dace0659fbd438e080b16818fa2de906923b97d23df570bed1d7a3341ee2f6a645bc074f57609d8f04bdda888e12b06aebe628fcca89a1145395f2f3930e7cb2f0f8dbb87aab1c9c820da3db7817e16812c346b3b1b83c5a156ad2127f3ea65b202580c6a5f29f767843dfddb102f697f03dd49052b00414f843eb6b0d1e30c73353f50549109da36a0fd0088da187aa7c2f26ae219da7092e8b5460bc86babc025333d51da7012627dfc9bb8760d9be102e1df1365087727e0bdf2a8cd269b1fc88a6eaff08d7f09aea93e2261a776b8684494241d11feaabc46051d5824bece27ae0f16c6b2195955de5324ef9b62d72008c21b497524387a5195434067ca4187b8b7ad4652042e936f36cca46acad1fe4821db828be3774d8a20a162ad7d0b7f36e21a134f75d24e2115dcb8e27645573f1511d2942c3e4f42016659f436682814632b087f0d4e1e2339436840732ad4b19a38447ca33e06109a1ef43e41c59d6de2661600f846d6e695e567424a73eeb3b7fd6e568cdc0aa226c29c4fc47f2ea68460bb528abfe8a6ee084445a3b39ea6448d3c41d0c90cf68a7d8fcc2d92ef67662c165b2adf6f52939033c09a6ea5d9121fcf1a6b30d60a9412c5f456e5347422e2fcd0b6b83c84e286a2871de6fc45d22b52b21acfb1b960d19260e6efd6e91c57154cde812cf066ba94832d8bcf9eab746055f6620b7e9154a2aa6c2535d422cd09ab6f7a8569f16c5dd5da54f4fca5a0a62bc5fdec1e403edc793d691a458b4b05a214076019814686ac6069fa9638bacac1c90cb799f298bac69284eb9edc405404b93746199a0fdfb7cdfe55df5051854ddf8e82dd94339849be100b4a41477bc274be5487a04ced9497657f0a91c1cd21ee15b10a288404d1b6a64463b92df73756c8b9b32b07fda2ee82d1be732cfacc97b41f17d02ee01f64b3314a2def3ef609f1934aae0bfb965d49d74a9271bfec0c718c907a877aa9729cc6a2437149b671ef6ec3e5a4322f636ac28d795de34e103af6e335b479bf0a53165c9a73253cf8bbbcc2323aea1d18a9d231cb263185efc736730c2f16305342cf0ce075f482b8745e972717623e9b6f0704e787d570c340388802be92f8e592ef63ac962e252564971a40b1d6532195adae79a85d045cd04d6526e97b457a981809acff7ce42b1edb1aced2342d9dc29dadba25c5884d2398db5cea7799f955a70d7c96b3897c62fdb99a389e631bac682d15c3c36f39c238853912ea6aa006ac5114a51132f43c46c6d6e1767b270dd559859bc21375961abb19850c241b16a744d97bac081ab5d7485b487f633a4964cb82725be23410123d59a23a3d6beab7c9b0b882b832d3682275d1d9c51d61508eafa1c7c6928c81959681f406ae920156ee34a06dfe08d1e4fb89fa1d62a8f95ad9d6c5060605a2474fc20707aff801486de1815c554f19da034fefb0aef92bd11cbf905fb39e7ef2a9ed0bb923dfd339f7e4688c390fd51b1eb545b0dfe1e8c18eff4838e4e72e07fbd312bd32f87eba058ef52b8589d0a41fbb6ca8c14a26b38e1d456346268d7c7f718c9042d396b07ab3c124f2c29d8a47bab041fefe425cae22b2798758713de876a1cbcc35f1f3682b75e76699ebb9dbcfcf4ad4aaace51bef76da4fbbd6396f91a818f002aca1a9d9908b5abbbfb4baf94cca2260f5f7a65ec97b969d937b7be3922d834583b6130e34d0908897c27a4736c1a2dae5498b8dda70cde3dd90a67ab3806b61d509ac96e92e9f4c3facad8424e29980408483e90148121d10b203eb995ed0a3f3274a18cccf07a94050433b6854518742a3ca1ddd8ddde1ef84518de9625d75ab6f525676124f226254a6ec1c7f13f65d5c87db2278c73fe31acf88645003f63e8334b43c30e4a1b96032e5f03b67153a49e04714d4e2cbfcdcd335fbcfeb8047173982900dd7a4bdb483d1a027ff49d88e48403484752b5aa048eaa3a5d4de61eee2dc47e7ee1e72b1ffcec9d35179e46babc53fd2b7a40f1293570549d2eca449e488c391f91ad6950b93bf45db9db056c76f51ddaee3971c9f2283461fd96e629e59e845ee84572db41a56bdd9fb729989e66d7ea2d90dd0d554b1d6d85f3c09feacc0dead04bab4822cf5da9e30bb5a957eba6ec4b9f75931a9b83ff930d52a002ff11c0df9556c0a834ec398357f8599960af0ef19d6a9f28d68c43f0941035c4cc60051460455662b4306d3adf44b112a2d089ec0c7f8d69af2cb01254d4b91384920719914ee94b9a5d6f90d511859f9ca424696f8f93249fda023786da82b71936a240c96002cc2e6aac9176153d6c9d2539c569767a18f9ad3f7d283d072a0dc7d944a3669658e9b8387bd9fe0ee2b153cdf0c167e95127c0cdbd033f9fa90e0c55c88581ede0fffc68409a0326739fc09b8768756069823f219724e2b1a988454a04c6deec74f74723462261c9550c36fae6fc23f9455d612e3cbeeeac4ffcdc4188e82e990a4af8671753457e96587008a733e1a462a45e5dd4ae2653435fa052a746eb2427e63da90ef287b88d99b87b99164d15f9ca0c2091bfb8283de76ab8986dc40f1295f1baf2452dc9126cd93f42ee6aac029bbae78b8b7a0e20a48bc54ce7d658cfb8d8c4b51a9c12492706b3d925b28ca2e18767aec249b2116c8c1eb86e73c349a9e4f27761c27c608ff615c0390f78e163544206486b3ba5cdc1185feab3e53be0ebeca553f0baba52993ad775505e1c9ee9f89c640d4a52a6bf9ee986c5954954de322061a24310f65d39149653b44d9cfeb46cb20d9b4f737d3ae763b1b27b6b0234bf200967b4f2cf97ffaecb6c97ae55950965108e8ed38a17e1111b20e6e39378cd8278aa004d2857817a1263095ee826325cf18e0ad07702b611849be0570218"}, &(0x7f0000001040)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001080)={0x5, 0x4, 0x840c, 0xfffffffa, 0x80000000, 0xffffffe2, 0x3, 0x3ff, r2}, 0x20) close(r0) 6.354409304s ago: executing program 2 (id=1780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000380), 0x7fff, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000400)={0x0, 0x0, "4483e704505f23bac5ee86c9eb916c8e8789a7cf5b7a804e62f675470225b830"}) (async) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000400)={0x0, 0x0, "4483e704505f23bac5ee86c9eb916c8e8789a7cf5b7a804e62f675470225b830"}) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xc0000001, 0x8, 0x5, 0x42, 0xb, 0x6, 0x7}]}) (async) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xc0000001, 0x8, 0x5, 0x42, 0xb, 0x6, 0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.919184444s ago: executing program 2 (id=1793): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203120902120001000000000904000000ff"], 0x0) 3.015792782s ago: executing program 1 (id=1822): mknod(&(0x7f0000000a40)='./file0\x00', 0x10, 0x101) mount$afs(&(0x7f00000000c0)=ANY=[@ANYBLOB='%@mTsyz0:'], &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002e00030500"/20, @ANYRES32, @ANYBLOB="0d618f373af33b88b18c71da22611b4da452e5c263865f6c5a317f248803d36a622bdb095492b137e99856e6d61bdc5834ca64ac6f55a2ba6840050ab1304c9103cb8a7fc4f9a5e5be47ccb4d5afda3d5e211897293a7cda94e3150d4e3f00c3ce31d711eecc57a46d433cab2bd3a60f8bbe5e4946679f08d8a5beaed6eb7de55589510bffbc27c4c023c9ed3ebc8e86387f0629f2ef199a11c6d453fba9673107ea9ef9a2313ed4472cb2009450bcba704ad7e49be412a98ef1dba0ac7dd0f3f08bbecc0765c29f0da4f0dffa7280ac85f19ef1555ee1ac1acbec85c37544bd10300e6026000000000000000000"], 0x30}], 0x1}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8000"/12], 0x0}, 0x0) syz_usb_connect$printer(0xb75fc29c5d1037cc, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0xf2, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x81, 0x8}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x0, 0x8, 0x8, 0x20, 0xa}, 0xb, &(0x7f0000000100)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x459}}]}) 2.882370844s ago: executing program 2 (id=1824): r0 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) futex(0x0, 0x109, 0x1, 0x0, 0x0, 0x49) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FILS_KEK={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}}, 0xc00) r6 = inotify_init() ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x200000) inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) 2.790905952s ago: executing program 2 (id=1826): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) mount$cgroup(0xf6ff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, &(0x7f0000000380)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) 2.74895742s ago: executing program 2 (id=1827): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9000c0008000500068004"], 0x11) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) (async) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9000c0008000500068004"], 0x11) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 2.479268292s ago: executing program 1 (id=1832): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000094}, 0x40) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0x1, 0x400}]) io_destroy(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x0, 0x112, 0x7}) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 1.605910134s ago: executing program 1 (id=1835): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) userfaultfd(0x80001) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_submit(0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x79, 0x2, 0x4e, @rand_addr=' \x01\x00', @empty, 0x10, 0x40, 0x4cc, 0x4}}) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='G\x00\x00T'], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0xfe, {0x0, 0x6}}, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) 914.941774ms ago: executing program 0 (id=1836): socket(0x28, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) 757.542856ms ago: executing program 1 (id=1839): syz_usb_connect(0x0, 0xa4, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xc7, 0x28, 0xbc, 0x20, 0x3f0, 0xa31d, 0x3e89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x1, 0x0, 0x0, 0xc0, 0x3, [{{0x9, 0x4, 0x7d, 0x6, 0x0, 0xff, 0x6, 0x12, 0x0, [@generic={0x77, 0x24, "f7da7ce4a4cb78f3a33c204d96c81016a8ca97e1bc0ebc5f83825b3c65cd1ef39b8f3dc3b8e062e683bb65029f50cfdba9a230a30cbde342eed2c8d11984ff8465cb28454816f034ccf1d1a3b630cd20c63218b9465aa04cd935b4e8f5f7ee4d88b2e71dd725680e2361870b2380fa6733a7ce50e6"}, @hid_hid={0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0xbd2}}]}}]}}]}}, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 566.391523ms ago: executing program 5 (id=1843): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x7000000, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 528.819307ms ago: executing program 5 (id=1844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) 497.742639ms ago: executing program 5 (id=1845): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x5407, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2ddc3b0b4de81da99dd89b03a0520bf62d40d9"}) close(r0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = fsopen(&(0x7f0000000300)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x11, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x1c, r7, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) r12 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="7065726d686174201d"], 0x44) sendmmsg$inet6(r4, &(0x7f0000004480)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="6000000000000000290000003700000089080000f2a27a2b920085a1e8834c77f28996a9000000000738000000000c0a4b005766d96f00000000000100000000000005000000000000000100000000000000f7ff0600000400000000000000000014"], 0x78}}], 0x2, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000240), 0x34, 0x12c0a2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$LOOP_GET_STATUS(r13, 0xc0c0128e, &(0x7f0000000380)) 383.242733ms ago: executing program 5 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x1400037e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7d, &(0x7f0000000300)=0x402) (async) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x64, r2, 0x907, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xe20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8150}, 0x220000d4) 357.652083ms ago: executing program 0 (id=1847): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0xc, {0x2, 0x4e22, @empty}, 'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x5}}, 0x80, r4}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r4}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x74, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x770}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7fffffff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x7, 0x200, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xdcad}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xae}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x53a8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x58}}, 0x24) 343.021425ms ago: executing program 5 (id=1848): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="3318ccd8ea10982fa32436234ad10c762d71da4404bf0867062ef1f488d7eab460cf3ae13dfd151520f44beaca950a8e459142080e7400c5e6a8472e48f64fcff3c9a097378addca9835fe747278ea", 0x4f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c000180080001"], 0x50}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 243.108957ms ago: executing program 0 (id=1849): r0 = socket$inet_sctp(0x2, 0x1, 0x84) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4050) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="3977291466646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x875, 0x3}, 0x18, 0x1) brk(0x4) landlock_restrict_self(r6, 0x4) close(0x3) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000084"], 0x18, 0x48060}], 0x1, 0x200000d0) 218.737777ms ago: executing program 0 (id=1850): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000200)={r2, 0x8, &(0x7f0000000080)=[0xfffffff7, 0x1f, 0x7, 0x5, 0xb7, 0x1b1f, 0x8, 0xffff], &(0x7f00000000c0)=[0xb7df], 0x32, 0x6, 0x1, &(0x7f0000000140)=[0x9, 0x5, 0x0, 0x7, 0xb, 0x1], &(0x7f00000001c0)=[0x7fff, 0x9, 0x7]}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000180)={0x9, 0x102, 0x1, {0x5, 0xfffffffd, 0x4, 0x4}}) 186.315845ms ago: executing program 1 (id=1851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 0', 0x1b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3416616e733766642c7266646e6f3d", @ANYRESHEX=r6, @ANYBLOB="2c128fa2ebd8f51fd2f2e86a22b5f93abc77666f3d0000", @ANYRESHEX=r5, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x6bb}) r10 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={r10, 0x4}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000200)={r10, 0x80000000, 0x1, r10}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 119.297454ms ago: executing program 5 (id=1852): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x5333578052521f3b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000300)=@attr_other={0x0, 0x0, 0x5, 0x0}) 119.001049ms ago: executing program 0 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) 55.951453ms ago: executing program 1 (id=1854): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect(r1, &(0x7f00000002c0)=@nfc_llcp={0x25, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x25}, 0x80) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf2502000000060006000400000014000b0000000000000000000000000000000000060006000000000008000100", @ANYRES32=r2, @ANYBLOB="99922833258a2c16fe549416de2b668f856b8d6a3b85e4fc0bc41dcaa8439b3af5d2aeea8158ee63b97b22d928bf9ffa8e58d7849b8f822e2964d3ee4df944325a1335fd7b6fb055109a880cb4", @ANYRES32=r0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000000) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x12100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000004c0)="0f090fde9a0a00f30f5a40850f11bf0d006766c7442400720000006766c7442402000000006766c744240600000000ea0020ea0066b80500000066b9738200000f01d9d834baf80c66b85144388f66efbafc0cecbad004b000eef20f1b41a0", 0x5f}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x4, 0x102, 0x9, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x9001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdffffffffda], 0x0, 0x80300}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_clone(0x321e4000, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002340)='./file0\x00', 0x1b) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000002380)={{0x4, 0x2, 0x1000, 0xffffeffc, 'syz0\x00', 0x101}, 0x3, 0x200, 0x7, 0x0, 0x0, 0xffc, 'syz0\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x604081) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r9, 0xc008aec1, &(0x7f0000000000)={0xa00}) 0s ago: executing program 0 (id=1855): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930f845763519"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) syz_usb_connect(0x0, 0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e0100000824030100021007082422df82a07739b63fda0cc8b4592740b7e9a3f9a07227f9dc4c4915e32c4e3876393a22425c178e08a282af69d8bbd3138bdb55bae0099c8f6048fa32aff2e9421769f503170a51d2", @ANYRES32=0x0], 0x0) kernel console output (not intermixed with test programs): ice strings: Mfr=1, Product=2, SerialNumber=3 [ 169.123744][ T10] usb 3-1: Product: syz [ 169.128021][ T10] usb 3-1: Manufacturer: syz [ 169.133378][ T10] usb 3-1: SerialNumber: syz [ 169.141051][ T10] usb 3-1: config 0 descriptor?? [ 169.374879][ T10] usb 3-1: USB disconnect, device number 31 [ 169.885465][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 169.924079][ T30] audit: type=1326 audit(1767675157.968:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.2.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x0 [ 170.065439][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 170.073792][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.083246][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.091274][ T10] usb 1-1: Product: syz [ 170.095498][ T10] usb 1-1: Manufacturer: syz [ 170.100090][ T10] usb 1-1: SerialNumber: syz [ 170.106600][ T10] usb 1-1: config 0 descriptor?? [ 170.318635][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 171.205952][ T7715] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.215948][ T7715] block device autoloading is deprecated and will be removed. [ 171.737170][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 171.750017][ T10] usb 1-1: USB disconnect, device number 36 [ 171.766324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 173.077217][ T9] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 173.244345][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 173.255613][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.277020][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.315434][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.337120][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.351449][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 173.359284][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.375420][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.396930][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.409248][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.446607][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 173.454567][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.466856][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.481796][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.493756][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.509411][ T9] usb 5-1: string descriptor 0 read error: -22 [ 173.516304][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 173.527044][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.567956][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 173.886599][ T9] usb 5-1: USB disconnect, device number 4 [ 173.901477][ T7761] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 174.139352][ T7765] overlayfs: failed to clone upperpath [ 174.216861][ T7767] overlayfs: failed to clone upperpath [ 174.291173][ T7760] tipc: Started in network mode [ 174.296575][ T7760] tipc: Node identity 4, cluster identity 4711 [ 174.302740][ T7760] tipc: Node number set to 4 [ 174.984881][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a88e000: rx timeout, send abort [ 175.485826][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a88e800: rx timeout, send abort [ 175.494740][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a88e000: abort rx timeout. Force session deactivation [ 175.994154][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a88e800: abort rx timeout. Force session deactivation [ 177.597739][ T7852] binder: BINDER_SET_CONTEXT_MGR already set [ 177.604074][ T7852] binder: 7851:7852 ioctl 4018620d 2000000002c0 returned -16 [ 177.613346][ T7852] binder: 7851:7852 ioctl c0306201 200000000240 returned -11 [ 178.144425][ T7864] overlayfs: failed to clone upperpath [ 178.355485][ T5866] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 178.505441][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 178.513156][ T5866] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.521994][ T5866] usb 3-1: config 0 has no interface number 0 [ 178.531771][ T5866] usb 3-1: config 0 interface 184 has no altsetting 0 [ 178.548303][ T5866] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.570146][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.588026][ T5866] usb 3-1: Product: syz [ 178.597979][ T5866] usb 3-1: Manufacturer: syz [ 178.602594][ T5866] usb 3-1: SerialNumber: syz [ 178.623389][ T5866] usb 3-1: config 0 descriptor?? [ 178.633044][ T5866] smsc75xx v1.0.0 [ 178.865591][ T5904] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 179.025426][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 179.032096][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.042686][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.054235][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.063427][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.071502][ T5904] usb 5-1: Product: syz [ 179.076446][ T5904] usb 5-1: Manufacturer: syz [ 179.081073][ T5904] usb 5-1: SerialNumber: syz [ 179.243637][ T5866] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 179.254543][ T5866] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.298127][ T5904] usb 5-1: 0:2 : does not exist [ 179.307094][ T5904] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 179.344510][ T5904] usb 5-1: USB disconnect, device number 5 [ 179.374105][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.992515][ T7883] netlink: 'syz.0.657': attribute type 3 has an invalid length. [ 180.138575][ T7894] tipc: Enabling of bearer rejected, failed to enable media [ 180.573185][ T7909] capability: warning: `syz.4.659' uses 32-bit capabilities (legacy support in use) [ 181.095410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 181.277573][ T5866] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 181.299014][ T5866] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 181.314440][ T5866] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 181.325535][ T5866] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.337704][ T5866] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 181.353195][ T5866] usb 3-1: USB disconnect, device number 32 [ 181.651491][ T7934] overlayfs: failed to clone upperpath [ 182.706539][ T7948] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 182.749528][ T7951] netlink: 'syz.1.676': attribute type 3 has an invalid length. [ 182.757434][ T7951] netlink: 'syz.1.676': attribute type 3 has an invalid length. [ 182.945546][ T5904] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.085446][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 183.105606][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 183.112053][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.122406][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.133939][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.143231][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.151285][ T5904] usb 5-1: Product: syz [ 183.155606][ T5904] usb 5-1: Manufacturer: syz [ 183.160198][ T5904] usb 5-1: SerialNumber: syz [ 183.237322][ T10] usb 3-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 183.246686][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.257361][ T10] usb 3-1: config 0 descriptor?? [ 183.372661][ T5904] usb 5-1: 0:2 : does not exist [ 183.383980][ T5904] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 183.424802][ T5904] usb 5-1: USB disconnect, device number 6 [ 183.454469][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.690019][ T10] lenovo 0003:04B3:3100.0022: item fetching failed at offset 0/3 [ 183.703774][ T10] lenovo 0003:04B3:3100.0022: hid_parse failed [ 183.710698][ T10] lenovo 0003:04B3:3100.0022: probe with driver lenovo failed with error -22 [ 183.896224][ T5904] usb 3-1: USB disconnect, device number 33 [ 184.865454][ T5820] Bluetooth: hci2: command 0x0401 tx timeout [ 184.905683][ T6181] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 185.065831][ T6181] usb 3-1: Using ep0 maxpacket: 32 [ 185.082499][ T6181] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.099225][ T6181] usb 3-1: config 0 has no interface number 0 [ 185.112183][ T6181] usb 3-1: config 0 interface 184 has no altsetting 0 [ 185.131661][ T6181] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.151496][ T6181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.174249][ T6181] usb 3-1: Product: syz [ 185.178879][ T6181] usb 3-1: Manufacturer: syz [ 185.183578][ T6181] usb 3-1: SerialNumber: syz [ 185.207357][ T6181] usb 3-1: config 0 descriptor?? [ 185.222886][ T8038] fuse: Unknown parameter 'grou00000000000000000000' [ 185.229040][ T6181] smsc75xx v1.0.0 [ 185.512485][ T8048] netlink: 'syz.4.703': attribute type 4 has an invalid length. [ 185.529165][ T8048] netlink: 152 bytes leftover after parsing attributes in process `syz.4.703'. [ 185.545985][ T8048] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 185.567509][ T8048] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 185.575448][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.703'. [ 185.838251][ T6181] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 185.861260][ T6181] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 186.445818][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.454524][ T8087] overlayfs: failed to clone lowerpath [ 186.469754][ T8087] overlayfs: failed to clone upperpath [ 186.605499][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 186.619651][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.635509][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.655574][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.663940][ T5904] usb 5-1: Product: syz [ 186.677660][ T5904] usb 5-1: Manufacturer: syz [ 186.682765][ T5904] usb 5-1: SerialNumber: syz [ 186.692505][ T5904] usb 5-1: config 0 descriptor?? [ 186.717501][ T5904] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.729424][ T5904] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 186.954362][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 187.315212][ T5904] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 187.741325][ T5904] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 187.761733][ T5904] em28xx 5-1:0.0: board has no eeprom [ 188.045428][ T5904] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 188.053424][ T5904] em28xx 5-1:0.0: dvb set to bulk mode. [ 188.059446][ T5905] em28xx 5-1:0.0: Binding DVB extension [ 188.444137][ T8074] em28xx 5-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=224) [ 188.637677][ T5905] em28xx 5-1:0.0: Registering input extension [ 188.644236][ T5904] usb 5-1: USB disconnect, device number 7 [ 188.651641][ T5904] em28xx 5-1:0.0: Disconnecting em28xx [ 188.659156][ T5904] em28xx 5-1:0.0: Closing input extension [ 188.690397][ T5904] em28xx 5-1:0.0: Freeing device [ 188.711148][ T6181] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000034: -71 [ 188.734586][ T6181] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write BURST_CAP: -71 [ 188.749495][ T6181] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 188.761497][ T6181] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 188.781562][ T6181] usb 3-1: USB disconnect, device number 34 [ 189.536518][ T5904] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 189.676442][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.697813][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.710160][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.720695][ T5904] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 189.730132][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.740432][ T5904] usb 3-1: config 0 descriptor?? [ 189.827532][ T5873] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 189.838745][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.848213][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.859178][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.869352][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.878421][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.887890][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.898878][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.908913][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.916674][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.925743][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.936906][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.946850][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.954751][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.964496][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.976256][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.986563][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.994279][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.003481][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.014716][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.024678][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.033126][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.042574][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.053843][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.064625][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.072841][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.082515][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.093834][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.104123][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.116977][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.126891][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.138785][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.142234][ T5820] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 190.165432][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.178165][ T5873] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.196408][ T5873] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.204982][ T5873] usb 5-1: Product: syz [ 190.209808][ T5873] usb 5-1: Manufacturer: syz [ 190.214448][ T5873] usb 5-1: SerialNumber: syz [ 190.224718][ T5873] usb 5-1: config 0 descriptor?? [ 190.238487][ T5873] yurex 5-1:0.0: Could not submitting URB [ 190.244496][ T5873] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 190.290714][ T5904] holtek_kbd 0003:04D9:A055.0023: unknown main item tag 0x0 [ 190.298140][ T5904] holtek_kbd 0003:04D9:A055.0023: unknown main item tag 0x0 [ 190.308357][ T5904] holtek_kbd 0003:04D9:A055.0023: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 190.440962][ T10] usb 5-1: USB disconnect, device number 8 [ 190.504642][ T6181] usb 3-1: USB disconnect, device number 35 [ 191.345841][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 191.430476][ T51] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 191.442369][ T8206] usb usb8: usbfs: process 8206 (syz.2.751) did not claim interface 0 before use [ 191.628633][ T8212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.754'. [ 191.637751][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 191.656109][ T8212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.754'. [ 191.665772][ T8212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.754'. [ 191.916691][ T8236] netlink: zone id is out of range [ 191.928154][ T8236] netlink: get zone limit has 4 unknown bytes [ 192.046444][ T8242] Mount JFS Failure: -5 [ 192.052086][ T8242] jfs_mount failed w/return code = -5 [ 192.259526][ T8255] netlink: zone id is out of range [ 192.264834][ T8255] netlink: zone id is out of range [ 192.270496][ T8255] netlink: zone id is out of range [ 192.276087][ T8255] netlink: zone id is out of range [ 192.338242][ T8260] vlan1: entered promiscuous mode [ 192.530625][ T8270] netlink: 'syz.1.782': attribute type 10 has an invalid length. [ 192.551337][ T8270] team0: Cannot enslave team device to itself [ 192.621861][ T51] Bluetooth: hci2: unexpected event for opcode 0x204e [ 192.645868][ T5866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 192.690012][ T8278] openvswitch: netlink: Message has 4 unknown bytes. [ 192.700718][ T8278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.805475][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 192.820265][ T5866] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 192.854514][ T5866] usb 5-1: config 0 has no interface number 0 [ 192.862208][ T5866] usb 5-1: config 0 interface 184 has no altsetting 0 [ 192.878291][ T5866] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 192.890424][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.899578][ T5866] usb 5-1: Product: syz [ 192.919071][ T5866] usb 5-1: Manufacturer: syz [ 192.923750][ T5866] usb 5-1: SerialNumber: syz [ 192.938195][ T5866] usb 5-1: config 0 descriptor?? [ 192.958565][ T5866] smsc75xx v1.0.0 [ 193.275568][ T6181] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 193.427079][ T6181] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 193.435495][ T6181] usb 3-1: config 0 has no interface number 0 [ 193.441866][ T6181] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 193.454273][ T6181] usb 3-1: config 0 interface 128 has no altsetting 0 [ 193.468242][ T6181] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 193.477977][ T6181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.486445][ T6181] usb 3-1: Product: syz [ 193.490813][ T6181] usb 3-1: Manufacturer: syz [ 193.495857][ T6181] usb 3-1: SerialNumber: syz [ 193.504384][ T6181] usb 3-1: config 0 descriptor?? [ 193.519080][ T6181] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 193.527198][ T6181] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 193.537258][ T6181] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 193.566954][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 193.580262][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 193.732251][ T6181] usb 3-1: USB disconnect, device number 36 [ 193.924851][ T8313] tipc: New replicast peer: 255.255.255.32 [ 193.932944][ T8313] tipc: Enabled bearer , priority 10 [ 194.136554][ T8317] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 194.154454][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161427][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.190079][ T8317] team0: Port device macvlan0 added [ 194.651830][ T8339] netlink: set zone limit has 4 unknown bytes [ 194.686418][ T8345] binder: 8344:8345 ioctl c0306201 200000000080 returned -22 [ 194.806151][ T8352] program syz.2.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.125444][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 195.298827][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.307513][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 195.316871][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 195.328869][ T9] usb 3-1: config 220 has no interface number 2 [ 195.335787][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.349091][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 195.355956][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 195.363007][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 195.372861][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.383026][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.393644][ T9] usb 3-1: Product: syz [ 195.398728][ T9] usb 3-1: Manufacturer: syz [ 195.403359][ T9] usb 3-1: SerialNumber: syz [ 195.622826][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 195.631123][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 195.638254][ T9] usb 3-1: selecting invalid altsetting 0 [ 195.657778][ T9] usb 3-1: selecting invalid altsetting 0 [ 195.664109][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 195.682495][ T9] usb 3-1: USB disconnect, device number 37 [ 196.163923][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.173785][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.181566][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.189103][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.196906][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.204594][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.212868][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.220530][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.228574][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 196.230391][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.242895][ T5873] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 196.254724][ T5873] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 196.317090][ T8373] fido_id[8373]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.407875][ T8377] sp0: Synchronizing with TNC [ 196.421600][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000034: -71 [ 196.438921][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write BURST_CAP: -71 [ 196.449397][ T5866] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 196.467195][ T5866] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 196.483086][ T5866] usb 5-1: USB disconnect, device number 9 [ 196.805526][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 196.957629][ T9] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 196.967528][ T9] usb 3-1: config 0 has no interface number 0 [ 196.980552][ T9] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 196.992449][ T9] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.020444][ T9] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 197.030351][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.039732][ T9] usb 3-1: Product: syz [ 197.044117][ T9] usb 3-1: Manufacturer: syz [ 197.050159][ T9] usb 3-1: SerialNumber: syz [ 197.059553][ T9] usb 3-1: config 0 descriptor?? [ 197.067570][ T8381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.077418][ T9] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 197.100331][ T9] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 197.531536][ T5904] usb 3-1: USB disconnect, device number 38 [ 197.564678][ T5904] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 197.589082][ T5904] cyberjack 3-1:0.69: device disconnected [ 197.678613][ T8422] program syz.4.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.535503][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 198.605634][ T5866] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.705642][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 198.713261][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 198.723078][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.739924][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 198.748692][ T9] pvrusb2: ********** [ 198.754012][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 198.765450][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 198.765839][ T9] pvrusb2: Important functionality might not be entirely working. [ 198.781040][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 198.782723][ T5866] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 198.793211][ T9] pvrusb2: ********** [ 198.812814][ T5866] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.836404][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.843688][ T5866] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 198.856092][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.879290][ T5866] usb 5-1: config 0 descriptor?? [ 198.952375][ T2343] pvrusb2: Invalid write control endpoint [ 199.024597][ T2343] pvrusb2: Invalid write control endpoint [ 199.039121][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 199.058855][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 199.071254][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 199.083452][ T2343] pvrusb2: Device being rendered inoperable [ 199.096454][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 199.105040][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 199.117817][ T2343] pvrusb2: Attached sub-driver cx25840 [ 199.124654][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 199.138488][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 199.164930][ T9] usb 3-1: USB disconnect, device number 39 [ 199.304349][ T5866] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0025/input/input31 [ 199.403540][ T5866] uclogic 0003:28BD:0933.0025: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 199.502183][ T6181] usb 5-1: USB disconnect, device number 10 [ 200.066283][ T5866] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 200.227969][ T5866] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 200.243222][ T5866] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 200.255890][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.266292][ T5866] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.276327][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 200.286549][ T5905] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.296764][ T5866] usb 3-1: Product: syz [ 200.301290][ T5866] usb 3-1: Manufacturer: syz [ 200.306152][ T5866] usb 3-1: SerialNumber: syz [ 200.313794][ T5866] usb 3-1: config 0 descriptor?? [ 200.323002][ T5866] usb 3-1: selecting invalid altsetting 0 [ 200.455430][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 200.462396][ T8493] Set syz1 is full, maxelem 1023 reached [ 200.470288][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 200.484570][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.513976][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 200.521675][ T5905] pvrusb2: ********** [ 200.527013][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 200.538406][ T5905] pvrusb2: Important functionality might not be entirely working. [ 200.547517][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 200.550889][ T9] usb 3-1: USB disconnect, device number 40 [ 200.560597][ T5905] pvrusb2: ********** [ 200.718232][ T2343] pvrusb2: Invalid write control endpoint [ 200.756205][ T2343] pvrusb2: Invalid write control endpoint [ 200.762492][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 200.772827][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 200.783041][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 200.793310][ T2343] pvrusb2: Device being rendered inoperable [ 200.800337][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 200.808805][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 200.818039][ T2343] pvrusb2: Attached sub-driver cx25840 [ 200.823719][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 200.834257][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 200.921846][ T8489] pvrusb2: Attempted to execute control transfer when device not ok [ 200.932244][ T5905] usb 5-1: USB disconnect, device number 11 [ 201.385537][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 201.539126][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.551923][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.562203][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 201.571534][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.582178][ T9] usb 3-1: config 0 descriptor?? [ 201.795542][ T6337] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 201.966985][ T6337] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.979506][ T6337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 201.991375][ T6337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.002358][ T6337] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 202.007387][ T9] cp2112 0003:10C4:EA90.0026: unknown global tag 0xe [ 202.023543][ T9] cp2112 0003:10C4:EA90.0026: item 0 4 1 14 parsing failed [ 202.023659][ T6337] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.032646][ T9] cp2112 0003:10C4:EA90.0026: parse failed [ 202.048461][ T9] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -22 [ 202.055537][ T6337] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.067250][ T6337] usb 5-1: Manufacturer: syz [ 202.085162][ T6337] usb 5-1: config 0 descriptor?? [ 202.259990][ T5905] usb 3-1: USB disconnect, device number 41 [ 202.378565][ T6337] rc_core: IR keymap rc-hauppauge not found [ 202.385204][ T6337] Registered IR keymap rc-empty [ 202.392853][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.426231][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.446914][ T6337] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 202.462913][ T6337] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 202.485621][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.519192][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.555732][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.575505][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.595493][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.615535][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.636643][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.666088][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.705696][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.739034][ T6337] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 202.767707][ T6337] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.777269][ T6337] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.797645][ T6337] usb 5-1: USB disconnect, device number 12 [ 203.095507][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 203.245471][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 203.252955][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 203.265539][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.276663][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.288001][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.306691][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.324370][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.333977][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.560408][ T9] usb 3-1: usb_control_msg returned -32 [ 203.567168][ T9] usbtmc 3-1:16.0: can't read capabilities [ 203.605513][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.755446][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 203.762943][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 203.771675][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.781975][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.794707][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.805130][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.820604][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.831095][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.921145][ T8554] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 204.048041][ T10] usb 5-1: usb_control_msg returned -32 [ 204.054589][ T10] usbtmc 5-1:16.0: can't read capabilities [ 204.068340][ T10] usb 5-1: USB disconnect, device number 13 [ 204.122030][ T9] usb 3-1: USB disconnect, device number 42 [ 204.803735][ T8569] syzkaller1: entered promiscuous mode [ 204.811051][ T8569] syzkaller1: entered allmulticast mode [ 204.981963][ T8576] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 205.004526][ T8576] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 205.295640][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 205.375491][ T5866] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 205.446844][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 205.457342][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.467340][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.479511][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.488271][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.498340][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.512568][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.522491][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.532976][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.546066][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.556101][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.556496][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.566690][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.578157][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.589097][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.590582][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.600780][ T5866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 205.607333][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.618038][ T5866] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 205.629945][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.642599][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.655808][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.681861][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.686500][ T8582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 205.693856][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.708893][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.719213][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.731016][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.742599][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 205.752562][ T5866] hub 5-1:1.0: bad descriptor, ignoring hub [ 205.752783][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 205.775549][ T5866] hub 5-1:1.0: probe with driver hub failed with error -5 [ 205.794720][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 205.805909][ T5866] cdc_wdm 5-1:1.0: skipping garbage [ 205.812507][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.825994][ T5866] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 205.831104][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 205.844078][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 205.844230][ T5866] cdc_wdm 5-1:1.0: Unknown control protocol [ 205.853669][ T9] usb 3-1: Product: syz [ 205.853688][ T9] usb 3-1: Manufacturer: syz [ 205.853703][ T9] usb 3-1: SerialNumber: syz [ 205.886373][ T9] usb 3-1: config 0 descriptor?? [ 205.909673][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 206.161343][ T6337] usb 3-1: USB disconnect, device number 43 [ 209.151352][ T5866] usb 5-1: USB disconnect, device number 14 [ 209.155061][ T8582] cdc_wdm 5-1:1.0: Error autopm - -16 [ 209.166748][ T8578] cdc_wdm 5-1:1.0: Error autopm - -16 [ 209.178920][ T6337] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 209.897910][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 211.107446][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 211.265576][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 211.283335][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.310550][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 211.332033][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.352742][ T9] usb 5-1: config 0 descriptor?? [ 211.772926][ T9] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 211.875499][ T6337] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 212.047375][ T6337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.066793][ T6337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.078969][ T6337] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.094216][ T6337] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.104630][ T6337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.119053][ T6337] usb 3-1: config 0 descriptor?? [ 212.173071][ T9] usb 5-1: USB disconnect, device number 15 [ 212.541734][ T6337] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 213.036325][ T6337] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 213.195618][ T6337] usb 5-1: Using ep0 maxpacket: 8 [ 213.203033][ T6337] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 213.213411][ T6337] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.224414][ T6337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.235476][ T6337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.245783][ T6337] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.260646][ T6337] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.270485][ T6337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.491688][ T6337] usb 5-1: usb_control_msg returned -32 [ 213.497676][ T6337] usbtmc 5-1:16.0: can't read capabilities [ 213.778034][ C0] plantronics 0003:047F:FFFF.0028: usb_submit_urb(ctrl) failed: -1 [ 213.948549][ T5820] Bluetooth: hci2: unexpected event for opcode 0x040d [ 214.628262][ T6181] usb 3-1: reset high-speed USB device number 44 using dummy_hcd [ 214.639419][ T6181] usb 3-1: device reset changed ep0 maxpacket size! [ 214.657039][ T5905] usb 3-1: USB disconnect, device number 44 [ 214.806051][ T5905] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 214.965957][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 214.974429][ T5905] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 214.992882][ T5905] usb 3-1: config 0 has no interface number 0 [ 215.005575][ T5905] usb 3-1: config 0 interface 184 has no altsetting 0 [ 215.017820][ T5905] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 215.035436][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.053476][ T5905] usb 3-1: Product: syz [ 215.058018][ T5905] usb 3-1: Manufacturer: syz [ 215.062648][ T5905] usb 3-1: SerialNumber: syz [ 215.069550][ T5905] usb 3-1: config 0 descriptor?? [ 215.077870][ T5905] smsc75xx v1.0.0 [ 215.685049][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 215.697021][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.811228][ T5866] usb 5-1: USB disconnect, device number 16 [ 215.908954][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 215.925051][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 215.935144][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 215.958123][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 215.972515][ T5905] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 215.995870][ T5905] usb 3-1: USB disconnect, device number 45 [ 216.189732][ T1154] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 217.849028][ T8911] mac80211_hwsim hwsim11 4: renamed from wlan1 [ 217.939152][ T8914] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 218.485577][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 218.645573][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 218.652172][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.663980][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.670815][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 218.679907][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.693175][ T10] usb 3-1: config 0 descriptor?? [ 219.118732][ T10] nzxt-smart2 0003:1E71:2009.0029: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 219.512332][ T5873] usb 3-1: USB disconnect, device number 46 [ 219.747206][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 219.915488][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 219.927338][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 219.935978][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.947686][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.958428][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.969240][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.983383][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.992632][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.209325][ T10] usb 5-1: usb_control_msg returned -32 [ 220.215468][ T10] usbtmc 5-1:16.0: can't read capabilities [ 220.675534][ T5866] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 220.825529][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 220.832832][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.842813][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.852787][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.862866][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.876103][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.885477][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.988562][ T8986] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 221.107039][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 221.112640][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 221.193032][ T5866] usb 5-1: USB disconnect, device number 17 [ 221.270201][ T8999] overlayfs: failed to clone upperpath [ 221.316629][ T29] usb 3-1: USB disconnect, device number 47 [ 222.125474][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 222.157549][ T9017] overlayfs: failed to get inode (-116) [ 222.164306][ T9017] overlayfs: failed to get inode (-116) [ 222.171400][ T9017] overlayfs: failed to get inode (-116) [ 222.178218][ T9017] overlayfs: failed to get inode (-116) [ 222.306377][ T29] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 222.314680][ T29] usb 5-1: config 0 has no interface number 0 [ 222.337419][ T29] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 222.347635][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.369427][ T29] usb 5-1: Product: syz [ 222.385379][ T29] usb 5-1: Manufacturer: syz [ 222.390026][ T29] usb 5-1: SerialNumber: syz [ 222.407034][ T29] usb 5-1: config 0 descriptor?? [ 222.414784][ T29] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 222.432130][ T29] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 222.644097][ T6181] usb 5-1: USB disconnect, device number 18 [ 223.431741][ T9063] overlayfs: failed to clone upperpath [ 223.456773][ T5866] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 223.628306][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.639387][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.645701][ T6181] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.664032][ T5866] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.675979][ T5866] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 223.684068][ T5866] usb 3-1: Manufacturer: syz [ 223.694890][ T5866] usb 3-1: config 0 descriptor?? [ 223.807510][ T6181] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 223.816976][ T6181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.828437][ T6181] usb 5-1: config 0 descriptor?? [ 223.903364][ T9089] overlayfs: failed to clone upperpath [ 224.729894][ T5866] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002A/input/input33 [ 224.753172][ T5866] uclogic 0003:256C:006D.002A: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 224.935816][ T10] usb 3-1: USB disconnect, device number 48 [ 225.278681][ T30] audit: type=1800 audit(1767675213.328:5): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1134" name="nullb0" dev="tmpfs" ino=1734 res=0 errno=0 [ 225.455844][ T6181] pegasus 5-1:0.0: setup Pegasus II specific registers [ 225.550277][ T9124] overlayfs: failed to clone upperpath [ 225.569121][ T6181] pegasus 5-1:0.0: can't locate MII phy, using default [ 225.587990][ T6181] pegasus 5-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 46:be:b0:df:de:9f [ 225.601530][ T6181] usb 5-1: USB disconnect, device number 19 [ 225.950724][ T30] audit: type=1326 audit(1767675213.998:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.0.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f728cd8f749 code=0x0 [ 226.312524][ T30] audit: type=1800 audit(1767675214.358:7): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1152" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=27663 res=0 errno=0 [ 226.409593][ T6181] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 226.465575][ T9165] overlayfs: failed to clone upperpath [ 226.575391][ T6181] usb 3-1: Using ep0 maxpacket: 32 [ 226.582943][ T6181] usb 3-1: config 0 interface 0 has no altsetting 0 [ 226.604208][ T6181] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 226.614139][ T6181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.624780][ T6181] usb 3-1: Product: syz [ 226.630025][ T6181] usb 3-1: Manufacturer: syz [ 226.639234][ T6181] usb 3-1: SerialNumber: syz [ 226.655480][ T6181] usb 3-1: config 0 descriptor?? [ 227.015455][ T5866] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 227.065064][ T6181] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 227.169362][ T5866] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 227.179890][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.191569][ T5866] usb 5-1: Product: syz [ 227.195820][ T5866] usb 5-1: Manufacturer: syz [ 227.200952][ T5866] usb 5-1: SerialNumber: syz [ 227.208064][ T5866] usb 5-1: config 0 descriptor?? [ 227.420191][ T5866] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.872867][ T6181] gs_usb 3-1:0.0: Disabling termination support for channel 1 (-EPROTO) [ 227.902269][ T6181] usb 3-1: USB disconnect, device number 49 [ 228.232307][ T5866] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 228.250825][ T5866] usb 5-1: USB disconnect, device number 20 [ 228.464251][ T9204] overlayfs: failed to clone lowerpath [ 228.468027][ T9206] overlayfs: failed to clone upperpath [ 228.705976][ T5905] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 228.875711][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 228.888829][ T5905] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 228.904529][ T5905] usb 3-1: config 0 has no interface number 0 [ 228.929704][ T5905] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 228.949673][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.965454][ T5905] usb 3-1: Product: syz [ 228.969680][ T5905] usb 3-1: Manufacturer: syz [ 228.984442][ T5905] usb 3-1: SerialNumber: syz [ 229.011690][ T5905] usb 3-1: config 0 descriptor?? [ 229.043618][ T5905] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 229.221073][ T9246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.231846][ T9246] block device autoloading is deprecated and will be removed. [ 229.264426][ T5905] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 229.282489][ T5905] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 229.700635][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.799585][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.810935][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 229.811334][ T6181] usb 3-1: USB disconnect, device number 50 [ 229.860889][ T6181] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 229.898004][ T6181] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 229.935306][ T6181] quatech2 3-1:0.51: device disconnected [ 229.966564][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.063386][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.087517][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.096731][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.104606][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 230.114808][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.123820][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.127186][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.360557][ T12] bridge_slave_1: left allmulticast mode [ 230.366705][ T12] bridge_slave_1: left promiscuous mode [ 230.372510][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.408574][ T12] bridge_slave_0: left allmulticast mode [ 230.416574][ T12] bridge_slave_0: left promiscuous mode [ 230.423707][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.868596][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.880301][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.890308][ T12] bond0 (unregistering): Released all slaves [ 230.913458][ T9262] chnl_net:caif_netlink_parms(): no params data found [ 231.140572][ T9262] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.149352][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.156745][ T9262] bridge_slave_0: entered allmulticast mode [ 231.196682][ T9262] bridge_slave_0: entered promiscuous mode [ 231.230031][ T9262] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.237786][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.264393][ T9262] bridge_slave_1: entered allmulticast mode [ 231.283505][ T9262] bridge_slave_1: entered promiscuous mode [ 231.406769][ T12] hsr_slave_0: left promiscuous mode [ 231.422340][ T12] hsr_slave_1: left promiscuous mode [ 231.446447][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.465683][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.478353][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.487395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.535449][ T12] veth1_macvtap: left promiscuous mode [ 231.541159][ T12] veth0_macvtap: left promiscuous mode [ 231.547908][ T12] veth1_vlan: left promiscuous mode [ 231.956222][ T6181] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 232.119449][ T6181] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 232.128796][ T6181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.144882][ T6181] usb 3-1: config 0 descriptor?? [ 232.190804][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.228295][ T5820] Bluetooth: hci1: command tx timeout [ 232.244872][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.715261][ T9262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.736445][ T9262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.799901][ T9262] team0: Port device team_slave_0 added [ 232.817121][ T9262] team0: Port device team_slave_1 added [ 232.892538][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.909084][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.956071][ T9262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.978569][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.985885][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.013633][ T9262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.092334][ T9262] hsr_slave_0: entered promiscuous mode [ 233.106759][ T9262] hsr_slave_1: entered promiscuous mode [ 233.114017][ T9262] debugfs: 'hsr0' already exists in 'hsr' [ 233.161122][ T9262] Cannot create hsr debugfs directory [ 233.175248][ T9323] overlayfs: failed to clone upperpath [ 233.321726][ T9327] tipc: Enabling of bearer rejected, failed to enable media [ 233.508061][ T9262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.527723][ T9262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.542809][ T9262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.560573][ T9262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.689904][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.713450][ T9262] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.746672][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.753879][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.771991][ T6181] pegasus 3-1:0.0: setup Pegasus II specific registers [ 233.790867][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.798076][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.890135][ T6181] pegasus 3-1:0.0: can't locate MII phy, using default [ 233.937456][ T6181] pegasus 3-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, ba:2d:8f:c4:32:b7 [ 233.953714][ T6181] usb 3-1: USB disconnect, device number 51 [ 234.306531][ T5820] Bluetooth: hci1: command tx timeout [ 234.360933][ T9262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.051696][ T9262] veth0_vlan: entered promiscuous mode [ 235.091687][ T9262] veth1_vlan: entered promiscuous mode [ 235.250128][ T9262] veth0_macvtap: entered promiscuous mode [ 235.272357][ T9262] veth1_macvtap: entered promiscuous mode [ 235.326720][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.341789][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.361086][ T3510] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.381435][ T3510] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.413016][ T3510] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.429855][ T3510] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.566388][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.595286][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.653290][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.671337][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.385736][ T5820] Bluetooth: hci1: command tx timeout [ 237.377486][ T9482] netlink: 'syz.2.1239': attribute type 11 has an invalid length. [ 238.078017][ T9504] overlayfs: failed to clone upperpath [ 238.094436][ T5821] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 238.249108][ T5821] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 238.265413][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.277112][ T5821] usb 3-1: Product: syz [ 238.281357][ T5821] usb 3-1: Manufacturer: syz [ 238.295732][ T5821] usb 3-1: SerialNumber: syz [ 238.303155][ T5821] usb 3-1: config 0 descriptor?? [ 238.318494][ T5821] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 238.465794][ T5820] Bluetooth: hci1: command tx timeout [ 240.546731][ T5821] gspca_stk1135: reg_w 0x2ff err -71 [ 240.560839][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.568029][ T5821] gspca_stk1135: Sensor write failed [ 240.573366][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.580515][ T5821] gspca_stk1135: Sensor write failed [ 240.586578][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.626972][ T5821] gspca_stk1135: Sensor read failed [ 240.632265][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.671589][ T5821] gspca_stk1135: Sensor read failed [ 240.681393][ T5821] gspca_stk1135: Detected sensor type unknown (0x0) [ 240.688365][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.694782][ T5821] gspca_stk1135: Sensor read failed [ 240.700447][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.710459][ T5821] gspca_stk1135: Sensor read failed [ 240.716220][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.722620][ T5821] gspca_stk1135: Sensor write failed [ 240.728333][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 240.734783][ T5821] gspca_stk1135: Sensor write failed [ 240.740283][ T5821] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 240.753965][ T5821] usb 3-1: USB disconnect, device number 52 [ 240.999827][ T9537] overlayfs: failed to clone upperpath [ 241.409033][ T5821] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 241.577700][ T5821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.588082][ T5821] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.595571][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 241.597379][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.616610][ T5821] usb 3-1: config 0 descriptor?? [ 241.625031][ T5821] pwc: Askey VC010 type 2 USB webcam detected. [ 241.760957][ T29] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 241.770188][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.778402][ T29] usb 6-1: Product: syz [ 241.782599][ T29] usb 6-1: Manufacturer: syz [ 241.787296][ T29] usb 6-1: SerialNumber: syz [ 241.794334][ T29] usb 6-1: config 0 descriptor?? [ 241.802409][ T29] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 241.831579][ T5821] pwc: send_video_command error -71 [ 241.842045][ T5821] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 241.849717][ T5821] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 241.862707][ T5821] usb 3-1: USB disconnect, device number 53 [ 242.274272][ T9563] could not allocate digest TFM handle cmac-aes-ce [ 242.282224][ T6337] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 242.447336][ T6337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.458234][ T6337] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 242.468111][ T6337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.478409][ T6337] usb 3-1: config 0 descriptor?? [ 242.487862][ T6337] pwc: Askey VC010 type 2 USB webcam detected. [ 242.890559][ T6337] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.898219][ T6337] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.905941][ T6337] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.913317][ T6337] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.920782][ T6337] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.930090][ T6337] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.937375][ T6337] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.945269][ T6337] pwc: recv_control_msg error -32 req 02 val 2100 [ 243.154973][ T6337] pwc: recv_control_msg error -71 req 02 val 2500 [ 243.166900][ T6337] pwc: recv_control_msg error -71 req 02 val 2400 [ 243.174019][ T6337] pwc: recv_control_msg error -71 req 02 val 2600 [ 243.188979][ T6337] pwc: recv_control_msg error -71 req 02 val 2900 [ 243.196020][ T6337] pwc: recv_control_msg error -71 req 02 val 2800 [ 243.203731][ T6337] pwc: recv_control_msg error -71 req 04 val 1100 [ 243.211032][ T6337] pwc: recv_control_msg error -71 req 04 val 1200 [ 243.225516][ T6337] pwc: Registered as video103. [ 243.232517][ T6337] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 243.272435][ T6337] usb 3-1: USB disconnect, device number 54 [ 243.620075][ T29] gspca_sunplus: reg_r err -71 [ 243.632541][ T29] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 243.647633][ T29] usb 6-1: USB disconnect, device number 2 [ 243.812021][ T9595] binder_alloc: 9594: binder_alloc_buf, no vma [ 244.273717][ T9606] netlink: 'syz.5.1286': attribute type 4 has an invalid length. [ 244.281603][ T9606] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1286'. [ 244.296469][ T9606] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 244.315424][ T5905] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 244.468115][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 244.474817][ T5905] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 244.484401][ T5905] usb 3-1: config 0 has no interface number 0 [ 244.491873][ T5905] usb 3-1: config 0 interface 89 has no altsetting 0 [ 244.501282][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 244.513353][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.522843][ T5905] usb 3-1: Product: syz [ 244.528146][ T5905] usb 3-1: Manufacturer: syz [ 244.532861][ T5905] usb 3-1: SerialNumber: syz [ 244.540764][ T5905] usb 3-1: config 0 descriptor?? [ 244.549410][ T5905] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 244.559721][ T5905] em28xx 3-1:0.89: Video interface 89 found: bulk [ 244.615488][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 244.788647][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.799177][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.810786][ T29] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.820511][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.828883][ T29] usb 6-1: SerialNumber: syz [ 245.063126][ T29] usb 6-1: 0:2 : does not exist [ 245.068739][ T29] usb 6-1: unit 255 not found! [ 245.088035][ T29] usb 6-1: 5:0: cannot get min/max values for control 6 (id 5) [ 245.111669][ T29] usb 6-1: 5:0: cannot get min/max values for control 7 (id 5) [ 245.128300][ T29] usb 6-1: 5:0: cannot get min/max values for control 14 (id 5) [ 245.163451][ T5905] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 245.190412][ T9624] netlink: 'syz.1.1295': attribute type 4 has an invalid length. [ 245.194411][ T29] usb 6-1: USB disconnect, device number 3 [ 245.200972][ T9624] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1295'. [ 245.229548][ T9624] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 246.027190][ T5905] em28xx 3-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1) [ 246.040237][ T5905] em28xx 3-1:0.89: failed to read eeprom (err=-5) [ 246.048523][ T5905] em28xx 3-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 246.261559][ T5905] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 246.275018][ T5905] em28xx 3-1:0.89: analog set to bulk mode. [ 246.345473][ T5866] em28xx 3-1:0.89: Registering V4L2 extension [ 246.362135][ T5905] usb 3-1: USB disconnect, device number 55 [ 246.379618][ T5905] em28xx 3-1:0.89: Disconnecting em28xx [ 246.481673][ T5866] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 246.499195][ T5866] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 246.536522][ T5866] em28xx 3-1:0.89: No AC97 audio processor [ 246.565776][ T5866] usb 3-1: Decoder not found [ 246.570502][ T5866] em28xx 3-1:0.89: failed to create media graph [ 246.577234][ T5866] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 246.592429][ T5866] em28xx 3-1:0.89: Registering snapshot button... [ 246.605873][ T5866] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input35 [ 246.630432][ T5866] em28xx 3-1:0.89: Remote control support is not available for this card. [ 246.641480][ T5905] em28xx 3-1:0.89: Closing input extension [ 246.652348][ T5905] em28xx 3-1:0.89: Deregistering snapshot button [ 246.699464][ T5905] em28xx 3-1:0.89: Freeing device [ 246.982015][ T9662] overlayfs: failed to clone lowerpath [ 246.992690][ T9662] overlayfs: failed to clone upperpath [ 247.164459][ T5905] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 247.328378][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.337540][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.345674][ T5905] usb 3-1: Product: syz [ 247.349885][ T5904] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 247.358036][ T5905] usb 3-1: Manufacturer: syz [ 247.362911][ T5905] usb 3-1: SerialNumber: syz [ 247.371124][ T5905] usb 3-1: config 0 descriptor?? [ 247.514167][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 247.521218][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.532515][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 247.546178][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 247.559246][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 247.570539][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.587340][ T5905] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.598470][ T5904] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 247.607831][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.616063][ T5904] usb 6-1: Product: syz [ 247.620262][ T5904] usb 6-1: Manufacturer: syz [ 247.624955][ T5904] usb 6-1: SerialNumber: syz [ 247.642124][ T5904] usb 6-1: config 0 descriptor?? [ 247.754030][ T5904] rc_core: IR keymap rc-imon-rsc not found [ 247.759927][ T5904] Registered IR keymap rc-empty [ 247.785120][ T5904] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 247.809210][ T5904] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 247.812704][ T9676] netlink: 'syz.1.1314': attribute type 4 has an invalid length. [ 247.827382][ T9676] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1314'. [ 247.839051][ T9676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 247.860323][ T9676] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 247.869358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 247.878295][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'. [ 247.901854][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.912360][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.947138][ T9666] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1310'. [ 247.979172][ T5866] usb 6-1: USB disconnect, device number 4 [ 248.194844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 248.198036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.203493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 248.364358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.444068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 249.250990][ T5820] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 249.447355][ T5905] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 249.585643][ T5905] usb 3-1: USB disconnect, device number 56 [ 249.804759][ T5905] IPVS: starting estimator thread 0... [ 249.917672][ T9747] IPVS: using max 29 ests per chain, 69600 per kthread [ 250.176249][ T9759] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 250.184825][ T9759] netlink: 'syz.2.1325': attribute type 3 has an invalid length. [ 250.193254][ T9759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1325'. [ 250.802657][ T5821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 250.965592][ T5821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.976653][ T5821] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.988727][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.000002][ T5821] usb 6-1: config 0 descriptor?? [ 251.014101][ T5821] pwc: Askey VC010 type 2 USB webcam detected. [ 251.154586][ T9796] kAFS: unable to lookup cell '(/c¾ûL' [ 251.392339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 251.433002][ T5821] pwc: recv_control_msg error -32 req 02 val 2b00 [ 251.449218][ T5821] pwc: recv_control_msg error -32 req 02 val 2700 [ 251.464974][ T5821] pwc: recv_control_msg error -32 req 02 val 2c00 [ 251.476479][ T5821] pwc: recv_control_msg error -32 req 04 val 1000 [ 251.498968][ T5821] pwc: recv_control_msg error -32 req 04 val 1300 [ 251.507832][ T5821] pwc: recv_control_msg error -32 req 04 val 1400 [ 251.516487][ T5821] pwc: recv_control_msg error -32 req 02 val 2000 [ 251.526875][ T5821] pwc: recv_control_msg error -32 req 02 val 2100 [ 251.535060][ T5821] pwc: recv_control_msg error -32 req 04 val 1500 [ 251.543842][ T5821] pwc: recv_control_msg error -32 req 02 val 2500 [ 251.551091][ T5821] pwc: recv_control_msg error -32 req 02 val 2400 [ 251.559345][ T5821] pwc: recv_control_msg error -32 req 02 val 2600 [ 251.566860][ T5821] pwc: recv_control_msg error -32 req 02 val 2900 [ 251.574718][ T5821] pwc: recv_control_msg error -32 req 02 val 2800 [ 251.585297][ T5821] pwc: recv_control_msg error -32 req 04 val 1100 [ 251.594993][ T5821] pwc: Registered as video103. [ 251.621390][ T5821] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37 [ 251.813802][ T5905] usb 6-1: USB disconnect, device number 5 [ 253.032400][ T9832] FAULT_INJECTION: forcing a failure. [ 253.032400][ T9832] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 253.050357][ T9832] CPU: 1 UID: 0 PID: 9832 Comm: syz.2.1353 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.050390][ T9832] Tainted: [L]=SOFTLOCKUP [ 253.050397][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.050414][ T9832] Call Trace: [ 253.050422][ T9832] [ 253.050430][ T9832] dump_stack_lvl+0xe8/0x150 [ 253.050454][ T9832] should_fail_ex+0x414/0x560 [ 253.050482][ T9832] _copy_from_user+0x2d/0xb0 [ 253.050501][ T9832] tls_setsockopt+0x666/0x1600 [ 253.050536][ T9832] ? __pfx_tls_setsockopt+0x10/0x10 [ 253.050571][ T9832] ? __fget_files+0x2a/0x420 [ 253.050591][ T9832] ? aa_sock_opt_perm+0xff/0x1a0 [ 253.050618][ T9832] ? sock_common_setsockopt+0x36/0xc0 [ 253.050645][ T9832] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 253.050668][ T9832] do_sock_setsockopt+0x17c/0x1b0 [ 253.050696][ T9832] __x64_sys_setsockopt+0x13f/0x1b0 [ 253.050726][ T9832] do_syscall_64+0xec/0xf80 [ 253.050750][ T9832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.050766][ T9832] ? trace_irq_disable+0x37/0x100 [ 253.050787][ T9832] ? clear_bhb_loop+0x40/0x90 [ 253.050810][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.050827][ T9832] RIP: 0033:0x7fa80c98f749 [ 253.050851][ T9832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.050866][ T9832] RSP: 002b:00007fa80d7e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 253.050891][ T9832] RAX: ffffffffffffffda RBX: 00007fa80cbe5fa0 RCX: 00007fa80c98f749 [ 253.050905][ T9832] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 253.050915][ T9832] RBP: 00007fa80d7e1090 R08: 0000000000000028 R09: 0000000000000000 [ 253.050927][ T9832] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 253.050938][ T9832] R13: 00007fa80cbe6038 R14: 00007fa80cbe5fa0 R15: 00007ffd4ccc16c8 [ 253.050968][ T9832] [ 253.267783][ T5820] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 253.277815][ T5820] Bluetooth: hci2: Injecting HCI hardware error event [ 253.287047][ T51] Bluetooth: hci2: hardware error 0x00 [ 253.742128][ T6039] wlan0: Trigger new scan to find an IBSS to join [ 253.831748][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1364'. [ 253.983873][ T9865] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1366'. [ 254.155576][ T9874] x_tables: duplicate underflow at hook 2 [ 254.190818][ T29] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 254.352120][ T29] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 254.361526][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.378829][ T29] usb 3-1: config 0 descriptor?? [ 254.550671][ T5866] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 254.720583][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 254.727690][ T5866] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.736705][ T5866] usb 6-1: config 0 has no interface number 0 [ 254.744150][ T5866] usb 6-1: config 0 interface 184 has no altsetting 0 [ 254.755226][ T5866] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.765247][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.773838][ T5866] usb 6-1: Product: syz [ 254.778144][ T5866] usb 6-1: Manufacturer: syz [ 254.783353][ T5866] usb 6-1: SerialNumber: syz [ 254.798721][ T5866] usb 6-1: config 0 descriptor?? [ 254.817455][ T5866] smsc75xx v1.0.0 [ 254.864677][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 255.021163][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1384'. [ 255.350652][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 255.425457][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 255.436555][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 255.588054][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.598906][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.817432][ T9923] 9pnet_fd: p9_fd_create_tcp (9923): problem connecting socket to 127.0.0.1 [ 256.617564][ T29] pegasus 3-1:0.0: setup Pegasus II specific registers [ 256.700418][ T13] wlan0: Trigger new scan to find an IBSS to join [ 257.040860][ T9942] overlay: ./file0 is not a directory [ 257.048285][ T9942] overlay: ./file0 is not a directory [ 257.388263][ T9959] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1408'. [ 257.930758][ T9983] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1413'. [ 258.069207][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 258.096419][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 258.108781][ T5866] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.121829][ T5866] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.142222][ T5866] usb 6-1: USB disconnect, device number 6 [ 258.242688][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1417'. [ 258.257602][ T29] pegasus 3-1:0.0: can't locate MII phy, using default [ 258.278531][ T29] pegasus 3-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, fa:e3:44:17:b2:2b [ 258.311952][ T29] usb 3-1: USB disconnect, device number 57 [ 258.900224][T10027] tmpfs: Unknown parameter 'grppuota_block¾·E' [ 259.749885][ T12] wlan0: Trigger new scan to find an IBSS to join [ 260.697260][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.717916][ T5905] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 260.899429][ T5905] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 260.907797][ T5905] usb 6-1: config 0 has no interface number 0 [ 260.914058][ T5905] usb 6-1: config 0 interface 41 has no altsetting 0 [ 260.923740][ T5905] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 260.934293][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.942475][ T5905] usb 6-1: Product: syz [ 260.956426][ T5905] usb 6-1: Manufacturer: syz [ 260.963248][ T5905] usb 6-1: SerialNumber: syz [ 260.978079][ T5905] usb 6-1: config 0 descriptor?? [ 261.552642][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1450'. [ 261.692789][T10109] cgroup: release_agent respecified [ 261.792758][ T5905] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 262.016986][ T122] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 262.167049][ T122] usb 3-1: Using ep0 maxpacket: 8 [ 262.175333][ T122] usb 3-1: config index 0 descriptor too short (expected 30482, got 18) [ 262.184509][ T122] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 262.194754][ T122] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 262.208890][ T122] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 262.218291][ T122] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 262.226811][ T122] usb 3-1: Product: syz [ 262.230974][ T122] usb 3-1: Manufacturer: syz [ 262.239750][ T122] usb 3-1: config 0 descriptor?? [ 262.247955][ T122] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 262.257263][ T122] usb 3-1: Detected FT2232C/D [ 262.655338][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.668977][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.681381][ T122] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 262.707206][ T122] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 262.724855][ T122] usb 3-1: USB disconnect, device number 58 [ 262.744921][ T122] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 262.755132][ T122] ftdi_sio 3-1:0.0: device disconnected [ 262.999728][T10149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1470'. [ 263.018534][ T5905] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 263.044920][ T5905] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 263.055969][ T5905] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 263.072483][ T5905] usb 6-1: USB disconnect, device number 7 [ 263.279917][T10157] overlayfs: failed to resolve './file1': -2 [ 263.472477][T10159] netlink: 'syz.0.1473': attribute type 10 has an invalid length. [ 264.125077][T10179] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1482'. [ 264.135058][T10179] openvswitch: netlink: Message has 16 unknown bytes. [ 264.486332][T10196] netlink: 'syz.0.1488': attribute type 6 has an invalid length. [ 264.507405][T10196] netlink: 'syz.0.1488': attribute type 4 has an invalid length. [ 264.515371][T10196] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1488'. [ 264.805657][ T122] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 264.955401][ T122] usb 6-1: Using ep0 maxpacket: 32 [ 264.962082][ T122] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 264.970833][ T122] usb 6-1: config 0 has no interface number 0 [ 264.977244][ T122] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 264.989261][ T122] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 265.000734][ T122] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 265.011106][ T122] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 265.021374][ T122] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 265.033816][ T122] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 265.043093][ T122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.051205][ T122] usb 6-1: Product: syz [ 265.055479][ T122] usb 6-1: Manufacturer: syz [ 265.060105][ T122] usb 6-1: SerialNumber: syz [ 265.073769][ T122] usb 6-1: config 0 descriptor?? [ 265.086304][T10198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 265.148760][T10201] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1490'. [ 265.161594][T10201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.367479][ T122] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 265.377975][ T122] etas_es58x 6-1:0.219: could not retrieve the product info string [ 265.407214][ T122] usb 6-1: USB disconnect, device number 8 [ 265.425432][ T122] etas_es58x 6-1:0.219: Disconnecting syz syz [ 265.632946][T10222] syz.2.1498 (10222) used obsolete PPPIOCDETACH ioctl [ 265.687071][T10222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1498'. [ 265.697986][T10222] netlink: 'syz.2.1498': attribute type 6 has an invalid length. [ 265.706492][T10222] netlink: 'syz.2.1498': attribute type 5 has an invalid length. [ 265.714400][T10222] netlink: 'syz.2.1498': attribute type 4 has an invalid length. [ 265.792661][T10224] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 265.929490][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'. [ 266.204852][ T122] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 266.376494][ T122] usb 6-1: config 0 has an invalid interface number: 25 but max is 0 [ 266.384749][ T122] usb 6-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 266.396145][ T122] usb 6-1: config 0 has no interface number 0 [ 266.402241][ T122] usb 6-1: too many endpoints for config 0 interface 25 altsetting 111: 171, using maximum allowed: 30 [ 266.414013][ T122] usb 6-1: config 0 interface 25 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 171 [ 266.428489][ T122] usb 6-1: config 0 interface 25 has no altsetting 0 [ 266.436181][ T122] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 266.446099][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.458256][ T122] usb 6-1: config 0 descriptor?? [ 266.549359][ T30] audit: type=1326 audit(6059077553.609:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.573582][ T30] audit: type=1326 audit(6059077553.619:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.596890][ T30] audit: type=1326 audit(6059077553.619:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.621061][ T30] audit: type=1326 audit(6059077553.619:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.653922][ T30] audit: type=1326 audit(6059077553.619:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.680275][ T122] usb 6-1: string descriptor 0 read error: -71 [ 266.693338][ T122] usb 6-1: USB disconnect, device number 9 [ 266.701965][ T30] audit: type=1326 audit(6059077553.619:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.735109][ T30] audit: type=1326 audit(6059077553.619:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.761793][ T30] audit: type=1326 audit(6059077553.619:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.788073][ T30] audit: type=1326 audit(6059077553.619:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.817198][ T30] audit: type=1326 audit(6059077553.619:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10221 comm="syz.2.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80c98f749 code=0x7fc00000 [ 266.899987][T10247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.074014][T10259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.004146][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 268.083279][T10291] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.1525'. [ 268.185873][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.204747][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.222395][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.233946][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.248281][T10278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.268427][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.461906][ T10] usb 3-1: USB disconnect, device number 59 [ 268.643585][ T5873] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 268.813517][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 268.820513][ T5873] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 268.832228][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.852178][ T5873] usb 6-1: config 0 descriptor?? [ 268.877356][ T5873] gspca_main: sunplus-2.14.0 probing 041e:400b [ 269.085221][ T5873] gspca_sunplus: reg_w_riv err -71 [ 269.094285][ T5873] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 269.116318][ T5873] usb 6-1: USB disconnect, device number 11 [ 269.773102][ T5873] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 269.934282][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 269.943544][ T5873] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 269.955696][ T5873] usb 3-1: config 0 has no interface number 0 [ 269.962085][ T5873] usb 3-1: config 0 interface 184 has no altsetting 0 [ 269.981070][ T5873] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 269.995285][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.003500][ T5873] usb 3-1: Product: syz [ 270.007688][ T5873] usb 3-1: Manufacturer: syz [ 270.013291][ T5873] usb 3-1: SerialNumber: syz [ 270.028243][ T5873] usb 3-1: config 0 descriptor?? [ 270.041581][ T5873] smsc75xx v1.0.0 [ 270.071821][T10340] cgroup: release_agent respecified [ 270.203462][ T5905] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 270.364983][ T5905] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 270.373298][ T5905] usb 6-1: config 0 has no interface number 0 [ 270.379798][ T5905] usb 6-1: config 0 interface 12 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 270.392228][ T5905] usb 6-1: config 0 interface 12 altsetting 1 endpoint 0x82 has an invalid bInterval 165, changing to 7 [ 270.404221][ T5905] usb 6-1: config 0 interface 12 altsetting 1 endpoint 0x82 has invalid maxpacket 41327, setting to 1024 [ 270.415808][ T5905] usb 6-1: config 0 interface 12 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.429223][ T5905] usb 6-1: config 0 interface 12 has no altsetting 0 [ 270.438192][ T5905] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a2, bcdDevice=53.bc [ 270.447788][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.456281][ T5905] usb 6-1: Product: syz [ 270.460602][ T5905] usb 6-1: Manufacturer: syz [ 270.465374][ T5905] usb 6-1: SerialNumber: syz [ 270.473761][ T5905] usb 6-1: config 0 descriptor?? [ 270.585525][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1548'. [ 270.663284][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 270.684468][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 270.739932][ T5905] em28xx 6-1:0.12: New device syz syz @ 480 Mbps (0ccd:10a2, interface 12, class 12) [ 270.772913][ T5905] em28xx 6-1:0.12: Video interface 12 found: isoc [ 270.848030][ T5905] em28xx 6-1:0.12: unknown em28xx chip ID (0) [ 270.927433][ T5905] em28xx 6-1:0.12: reading from i2c device at 0xa0 failed (error=-5) [ 270.946333][ T5905] em28xx 6-1:0.12: board has no eeprom [ 271.012498][ T5905] em28xx 6-1:0.12: Identified as Terratec Cinergy H5 (card=79) [ 271.020809][ T5905] em28xx 6-1:0.12: Currently, V4L2 is not supported on this model [ 271.028971][ T5866] em28xx 6-1:0.12: Binding DVB extension [ 271.035491][ T5866] em28xx 6-1:0.12: no endpoint for DVB mode and transfer type 0 [ 271.048399][ T5905] usb 6-1: USB disconnect, device number 12 [ 271.058310][ T5866] em28xx 6-1:0.12: failed to pre-allocate USB transfer buffers for DVB. [ 271.068891][ T5905] em28xx 6-1:0.12: Disconnecting em28xx [ 271.074791][ T5866] em28xx 6-1:0.12: Remote control support is not available for this card. [ 271.083697][ T5905] em28xx 6-1:0.12: Closing input extension [ 271.103793][ T5905] em28xx 6-1:0.12: Freeing device [ 271.216640][T10368] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 271.225909][T10368] overlayfs: failed to clone upperpath [ 271.355290][T10376] usb usb8: usbfs: process 10376 (syz.5.1562) did not claim interface 0 before use [ 271.370128][T10376] x_tables: unsorted underflow at hook 2 [ 271.404256][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1564'. [ 271.943020][T10388] vivid-001: disconnect [ 271.949661][T10387] vivid-001: reconnect [ 272.102115][T10399] tipc: Enabling of bearer rejected, failed to enable media [ 272.412341][ T5866] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 272.561650][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 272.568584][ T5866] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.579992][ T5866] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.590157][ T5866] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 272.599794][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.817590][ T5866] mcp2221 0003:04D8:00DD.002B: item fetching failed at offset 1/5 [ 272.826079][ T5866] mcp2221 0003:04D8:00DD.002B: can't parse reports [ 272.832732][ T5866] mcp2221 0003:04D8:00DD.002B: probe with driver mcp2221 failed with error -22 [ 272.922616][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 272.934811][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 272.944652][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 272.954366][ T5873] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 272.966344][ T5873] usb 3-1: USB disconnect, device number 60 [ 273.014966][ T10] usb 6-1: USB disconnect, device number 13 [ 273.487523][T10425] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 273.499832][T10425] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.514358][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.522145][T10425] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 273.532571][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.554815][ T12] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 273.590323][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1583'. [ 273.860998][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 274.000965][ T5873] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 274.012256][ T10] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 274.020337][ T10] usb 6-1: config 1 has no interface number 0 [ 274.026810][ T10] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 274.038447][ T10] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 274.048357][ T10] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.061640][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 274.071131][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.079179][ T10] usb 6-1: Product: syz [ 274.083496][ T10] usb 6-1: Manufacturer: syz [ 274.088114][ T10] usb 6-1: SerialNumber: syz [ 274.095762][T10428] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.150810][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 274.157724][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.164859][ T5873] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 274.174429][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.185004][ T5873] usb 3-1: config 0 descriptor?? [ 274.305109][T10428] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.401160][ T5873] wacom 0003:056A:00BA.002C: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 274.414476][ T5873] wacom 0003:056A:00BA.002C: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.2-1/input0 [ 274.429471][ T5873] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BA.002C/input/input39 [ 274.522577][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1583'. [ 274.550559][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1583'. [ 274.565234][ T10] usb 6-1: Incompatible driver and firmware versions [ 274.771108][ T10] usb 6-1: USB disconnect, device number 14 [ 275.676224][T10475] cgroup: Unknown subsys name 'smackfsfloor' [ 275.949947][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 276.099886][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 276.106771][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 276.115347][ T9] usb 6-1: config 0 has no interface number 0 [ 276.122085][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 276.137391][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 276.146822][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.155097][ T9] usb 6-1: Product: syz [ 276.159545][ T9] usb 6-1: Manufacturer: syz [ 276.164358][ T9] usb 6-1: SerialNumber: syz [ 276.171567][ T9] usb 6-1: config 0 descriptor?? [ 276.181912][ T9] smsc75xx v1.0.0 [ 276.554516][T10499] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1608'. [ 276.566735][T10499] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1608'. [ 276.736105][ T5873] usb 3-1: USB disconnect, device number 61 [ 276.783192][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 276.809915][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 276.833679][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1611'. [ 277.149351][ T5873] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 277.309259][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 277.318268][ T5873] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 277.327592][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.336472][ T5873] usb 3-1: Product: syz [ 277.340788][ T5873] usb 3-1: Manufacturer: syz [ 277.345480][ T5873] usb 3-1: SerialNumber: syz [ 277.357168][ T5873] r8152-cfgselector 3-1: Unknown version 0x0000 [ 277.364361][ T5873] r8152-cfgselector 3-1: config 0 descriptor?? [ 277.574232][T10507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.583241][T10507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.592553][ T5873] r8152-cfgselector 3-1: Needed 1 retries to read version [ 277.601337][ T5873] r8152-cfgselector 3-1: Unknown version 0x0000 [ 277.608081][ T5873] r8152-cfgselector 3-1: bad CDC descriptors [ 277.798258][ T5873] r8152-cfgselector 3-1: USB disconnect, device number 62 [ 278.050815][T10525] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1620'. [ 278.061951][T10525] .30ªX¹¦D: renamed from macvtap0 (while UP) [ 278.070863][T10525] .30ªX¹¦D: entered allmulticast mode [ 278.076403][T10525] veth0_macvtap: entered allmulticast mode [ 278.083834][T10525] A link change request failed with some changes committed already. Interface .30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 278.688611][ T6337] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 278.849020][ T6337] usb 3-1: Using ep0 maxpacket: 8 [ 278.870212][ T6337] usb 3-1: unable to get BOS descriptor or descriptor too short [ 278.903357][ T6337] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 278.913783][ T6337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.921900][ T6337] usb 3-1: Product: syz [ 278.929403][ T6337] usb 3-1: Manufacturer: syz [ 278.934637][ T6337] usb 3-1: SerialNumber: syz [ 279.042030][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 279.069300][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 279.080755][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 279.097982][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 279.128759][ T9] usb 6-1: USB disconnect, device number 15 [ 279.156654][T10543] fuse: Bad value for 'fd' [ 279.191382][ T6337] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 279.219647][ T6337] dvb-usb: bulk message failed: -22 (3/0) [ 279.257067][ T6337] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.267572][ T6337] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 279.279366][ T6337] usb 3-1: media controller created [ 279.301268][ T6337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.358015][ T6337] DVB: Unable to find symbol mt352_attach() [ 279.364177][ T6337] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 279.375680][ T6337] dvb-usb: bulk message failed: -22 (3/0) [ 279.398252][ T6337] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 279.398339][T10575] overlayfs: failed to clone lowerpath [ 279.422007][ T6337] usb 3-1: USB disconnect, device number 63 [ 279.461785][ T6337] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 279.774652][T10591] cgroup: Unknown subsys name 'smackfsdef' [ 280.019413][T10581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.031496][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1643'. [ 280.234843][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1650'. [ 281.202170][T10637] overlayfs: failed to clone upperpath [ 282.742703][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.762389][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.896922][T10681] input: syz0 as /devices/virtual/input/input42 [ 282.986410][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 283.117802][ T10] usb 6-1: device descriptor read/64, error -71 [ 283.236673][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 283.356495][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 283.371771][T10708] netlink: 'syz.1.1692': attribute type 9 has an invalid length. [ 283.380585][T10708] netlink: 'syz.1.1692': attribute type 11 has an invalid length. [ 283.387416][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 283.389132][T10708] netlink: 'syz.1.1692': attribute type 12 has an invalid length. [ 283.402513][T10708] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1692'. [ 283.404413][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 283.412072][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 283.433581][ T9] usb 3-1: config 9 has an invalid interface number: 33 but max is 0 [ 283.444040][ T9] usb 3-1: config 9 has no interface number 0 [ 283.450703][ T9] usb 3-1: config 9 interface 33 has no altsetting 0 [ 283.461260][ T9] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8 [ 283.472267][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.480646][ T9] usb 3-1: Product: syz [ 283.485196][ T9] usb 3-1: Manufacturer: syz [ 283.491366][ T9] usb 3-1: SerialNumber: syz [ 283.497550][ T10] usb 6-1: device descriptor read/64, error -71 [ 283.606791][ T10] usb usb6-port1: attempt power cycle [ 283.713709][ T9] usbhid 3-1:9.33: couldn't find an input interrupt endpoint [ 283.731765][ T9] usb 3-1: USB disconnect, device number 64 [ 283.956073][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 283.978907][ T10] usb 6-1: device descriptor read/8, error -71 [ 284.216042][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 284.236730][ T10] usb 6-1: device descriptor read/8, error -71 [ 284.347133][ T10] usb usb6-port1: unable to enumerate USB device [ 284.546090][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 284.716100][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 284.722913][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.733361][ T10] usb 3-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.743556][ T10] usb 3-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 284.753836][ T10] usb 3-1: config 1 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 284.767490][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 284.775224][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.784437][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 284.792477][ T10] usb 3-1: SerialNumber: syz [ 284.800290][T10724] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 284.811311][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 284.819533][ T10] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 284.826040][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 285.051368][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.065591][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.695862][ T6337] usb 3-1: USB disconnect, device number 65 [ 286.200086][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1718'. [ 286.815899][T10794] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1726'. [ 286.825203][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'. [ 286.986048][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 287.137754][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 287.150989][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 287.168279][T10801] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 287.177741][ T10] usb 3-1: config 220 has no interface number 2 [ 287.190526][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 287.204088][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 287.211161][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 287.218262][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 287.230154][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 287.242933][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.256085][ T10] usb 3-1: Product: syz [ 287.262789][ T10] usb 3-1: Manufacturer: syz [ 287.267945][ T10] usb 3-1: SerialNumber: syz [ 287.317082][T10815] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1735'. [ 287.326647][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1735'. [ 287.500509][ T10] usb 3-1: selecting invalid altsetting 0 [ 287.508892][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 287.516870][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 287.530902][ T10] usb 3-1: selecting invalid altsetting 0 [ 287.536816][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 287.547615][ T10] usb 3-1: USB disconnect, device number 66 [ 287.646849][T10825] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1736'. [ 287.803148][T10815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.276988][ T5873] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 288.447880][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.459283][ T5873] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.468392][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.479072][ T5873] usb 6-1: config 0 descriptor?? [ 288.506117][ T6337] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 288.646064][ T6337] usb 3-1: device descriptor read/64, error -71 [ 288.688688][ T5873] usbhid 6-1:0.0: can't add hid device: -71 [ 288.694776][ T5873] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 288.705386][ T5873] usb 6-1: USB disconnect, device number 20 [ 288.907124][ T6337] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 289.036111][ T6337] usb 3-1: device descriptor read/64, error -71 [ 289.126580][ T122] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 289.146304][ T6337] usb usb3-port1: attempt power cycle [ 289.286100][ T122] usb 6-1: Using ep0 maxpacket: 32 [ 289.292868][ T122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.303931][ T122] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 289.313056][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.327063][ T122] usb 6-1: config 0 descriptor?? [ 289.335857][ T122] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 289.347010][ T122] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 289.486479][ T6337] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 289.515123][T10876] overlayfs: failed to clone upperpath [ 289.527132][ T6337] usb 3-1: device descriptor read/8, error -71 [ 289.623383][ T5873] usb 6-1: USB disconnect, device number 21 [ 289.635852][ T5873] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 289.766117][ T6337] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 289.786611][ T6337] usb 3-1: device descriptor read/8, error -71 [ 289.898953][ T6337] usb usb3-port1: unable to enumerate USB device [ 290.536106][ T6337] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 290.686233][ T6337] usb 6-1: Using ep0 maxpacket: 32 [ 290.696706][ T6337] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 290.704989][ T6337] usb 6-1: config 0 has no interface number 0 [ 290.711307][ T6337] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.723522][ T6337] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 290.733041][ T6337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.741227][ T6337] usb 6-1: Product: syz [ 290.745417][ T6337] usb 6-1: Manufacturer: syz [ 290.750054][ T6337] usb 6-1: SerialNumber: syz [ 290.756764][ T6337] usb 6-1: config 0 descriptor?? [ 290.770581][ T6337] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 290.781294][ T6337] em28xx 6-1:0.132: Video interface 132 found: [ 291.173401][ T6337] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 291.584234][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.604303][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.626786][ T6337] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 291.640153][ T6337] em28xx 6-1:0.132: board has no eeprom [ 291.706244][ T122] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 291.716071][ T6337] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 291.724363][ T6337] em28xx 6-1:0.132: analog set to bulk mode. [ 291.737343][ T5905] em28xx 6-1:0.132: Registering V4L2 extension [ 291.754337][ T6337] usb 6-1: USB disconnect, device number 22 [ 291.767352][ T6337] em28xx 6-1:0.132: Disconnecting em28xx [ 291.861048][ T5905] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 291.861287][ T122] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.876111][ T5905] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 291.878587][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 291.892122][ T5905] em28xx 6-1:0.132: No AC97 audio processor [ 291.901093][ T122] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 291.918856][ T122] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 291.922554][ T5905] usb 6-1: Decoder not found [ 291.928645][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.933502][ T5905] em28xx 6-1:0.132: failed to create media graph [ 291.947352][ T122] usb 3-1: config 0 descriptor?? [ 291.963818][ T5905] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 291.978074][ T5905] em28xx 6-1:0.132: Remote control support is not available for this card. [ 291.987450][ T6337] em28xx 6-1:0.132: Closing input extension [ 292.018310][ T6337] em28xx 6-1:0.132: Freeing device [ 292.208960][ T122] usb 3-1: USB disconnect, device number 71 [ 292.957946][T10954] x_tables: unsorted underflow at hook 2 [ 292.978561][T10943] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 293.336102][ T70] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.406100][ T5866] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 293.436048][ T29] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 293.558682][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.569410][ T29] usb 3-1: device descriptor read/64, error -71 [ 293.586287][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 293.600384][ T5866] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 293.609716][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.620596][ T5866] usb 6-1: config 0 descriptor?? [ 293.735485][T10984] overlayfs: failed to clone upperpath [ 293.743649][T10984] netlink: 157136 bytes leftover after parsing attributes in process `syz.1.1797'. [ 293.836321][ T29] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 294.006178][ T29] usb 3-1: device descriptor read/64, error -71 [ 294.127001][ T29] usb usb3-port1: attempt power cycle [ 294.466110][ T29] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 294.488599][ T29] usb 3-1: device descriptor read/8, error -71 [ 294.686510][ T5866] ath6kl: Failed to submit usb control message: -110 [ 294.693396][ T5866] ath6kl: unable to send the bmi data to the device: -110 [ 294.700678][ T5866] ath6kl: Unable to send get target info: -110 [ 294.707931][ T5866] ath6kl: Failed to init ath6kl core: -110 [ 294.719006][ T5866] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 294.728680][ T29] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 294.756648][ T29] usb 3-1: device descriptor read/8, error -71 [ 294.866544][ T29] usb usb3-port1: unable to enumerate USB device [ 295.051372][T11013] netlink: 'syz.1.1809': attribute type 13 has an invalid length. [ 295.306438][T11021] netlink: 'syz.1.1813': attribute type 13 has an invalid length. [ 295.314793][T11021] macvtap0: entered promiscuous mode [ 295.323164][T11021] macvtap0: refused to change device tx_queue_len [ 296.057191][T11042] kAFS: unable to lookup cell '@mTsyz0' [ 296.165109][ T122] usb 6-1: USB disconnect, device number 23 [ 296.399471][T11055] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1828'. [ 296.617165][ T5905] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 296.776154][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 296.783922][ T5905] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 296.793705][ T5905] usb 3-1: config 0 has no interface number 0 [ 296.800053][ T5905] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 296.813103][ T5905] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 296.823162][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 296.831598][ T5905] usb 3-1: Product: syz [ 296.836627][ T5905] usb 3-1: SerialNumber: syz [ 296.844011][ T5905] usb 3-1: config 0 descriptor?? [ 296.856788][ T5905] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 296.865577][ T5905] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input43 [ 297.231850][T11071] netlink: 26 bytes leftover after parsing attributes in process `syz.5.1834'. [ 297.258449][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.270416][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.476112][ T5904] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 297.489383][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 297.489402][ T30] audit: type=1326 audit(2000000000.220:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11074 comm="syz.1.1835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37bdf8f749 code=0x0 [ 297.710529][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1834'. [ 297.723497][ T5904] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 297.731668][ T5904] usb 6-1: can't read configurations, error -71 [ 298.287516][ T51] Bluetooth: hci1: command tx timeout [ 298.416034][T11089] netlink: 'syz.5.1841': attribute type 10 has an invalid length. [ 298.639000][T11098] AppArmor: change_hat: Invalid input '' [ 298.642109][T11098] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1845'. [ 298.853060][T11112] 9p: Bad value for 'rfdno' [ 299.196052][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 299.203165][ C1] ------------[ cut here ]------------ [ 299.209085][ C1] URB ffff888028585a00 submitted while active [ 299.215181][ C1] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x7b/0x18d0, CPU#1: ksoftirqd/1/23 [ 299.225239][ C1] Modules linked in: [ 299.229477][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.240311][ C1] Tainted: [L]=SOFTLOCKUP [ 299.244745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.254910][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 299.260410][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 87 02 1d fb 49 83 3e 00 74 40 e8 ec 3e b6 fa 48 8d 3d 65 f1 c5 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 3e b6 fa eb 05 e8 ca 3e [ 299.280161][ C1] RSP: 0018:ffffc900001d7718 EFLAGS: 00010083 [ 299.286280][ C1] RAX: ffffffff870abcc4 RBX: ffff888028585a00 RCX: 0000000000040000 [ 299.294278][ C1] RDX: ffffc90002382000 RSI: ffff888028585a00 RDI: ffffffff8fd0ae30 [ 299.302365][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 299.310453][ C1] R10: dffffc0000000000 R11: fffff5200003aee4 R12: 0000000000000820 [ 299.318499][ C1] R13: ffff888026658830 R14: ffff888028585a08 R15: dffffc0000000000 [ 299.326503][ C1] FS: 0000000000000000(0000) GS:ffff888125ac1000(0000) knlGS:0000000000000000 [ 299.335455][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.342071][ C1] CR2: 00007f728dbbef98 CR3: 0000000075c9c000 CR4: 00000000003526f0 [ 299.350060][ C1] Call Trace: [ 299.353349][ C1] [ 299.356303][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.362161][ C1] ? ___ratelimit+0x5a0/0x900 [ 299.366889][ C1] cm109_urb_irq_callback+0x709/0xcd0 [ 299.372356][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 299.377899][ C1] dummy_timer+0x85f/0x45b0 [ 299.382408][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 299.387379][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.392760][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.397692][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.403517][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.408447][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.413385][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 299.419033][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 299.424743][ C1] ? read_tsc+0x9/0x20 [ 299.428821][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 299.433931][ C1] handle_softirqs+0x22b/0x7c0 [ 299.438698][ C1] ? run_ksoftirqd+0x36/0x60 [ 299.443291][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 299.448320][ C1] run_ksoftirqd+0x36/0x60 [ 299.453376][ C1] smpboot_thread_fn+0x542/0xa60 [ 299.458326][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 299.463379][ C1] kthread+0x389/0x480 [ 299.467483][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 299.473110][ C1] ? __pfx_kthread+0x10/0x10 [ 299.477699][ C1] ret_from_fork+0x510/0xa50 [ 299.482292][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 299.487398][ C1] ? __switch_to+0xc9e/0x1480 [ 299.492074][ C1] ? __pfx_kthread+0x10/0x10 [ 299.496660][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.501435][ C1] [ 299.504465][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.511740][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.522624][ C1] Tainted: [L]=SOFTLOCKUP [ 299.526938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.536982][ C1] Call Trace: [ 299.540262][ C1] [ 299.543184][ C1] vpanic+0x1e0/0x670 [ 299.547176][ C1] panic+0xb9/0xc0 [ 299.550904][ C1] ? __pfx_panic+0x10/0x10 [ 299.555414][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 299.560352][ C1] __warn+0x317/0x4b0 [ 299.564507][ C1] ? usb_submit_urb+0x7b/0x18d0 [ 299.569360][ C1] ? usb_submit_urb+0x7b/0x18d0 [ 299.574218][ C1] __report_bug+0x288/0x500 [ 299.578747][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 299.584120][ C1] ? usb_submit_urb+0x7b/0x18d0 [ 299.588980][ C1] ? __pfx___report_bug+0x10/0x10 [ 299.594002][ C1] ? mark_lock+0x180/0x190 [ 299.598416][ C1] ? dev_printk_emit+0xe0/0x130 [ 299.603262][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 299.608376][ C1] report_bug_entry+0x19a/0x290 [ 299.613237][ C1] ? usb_submit_urb+0x7e/0x18d0 [ 299.618524][ C1] ? usb_submit_urb+0x83/0x18d0 [ 299.623368][ C1] handle_bug+0xca/0x200 [ 299.627604][ C1] exc_invalid_op+0x1a/0x50 [ 299.632094][ C1] asm_exc_invalid_op+0x1a/0x20 [ 299.636933][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 299.642407][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 87 02 1d fb 49 83 3e 00 74 40 e8 ec 3e b6 fa 48 8d 3d 65 f1 c5 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 3e b6 fa eb 05 e8 ca 3e [ 299.662009][ C1] RSP: 0018:ffffc900001d7718 EFLAGS: 00010083 [ 299.668172][ C1] RAX: ffffffff870abcc4 RBX: ffff888028585a00 RCX: 0000000000040000 [ 299.676133][ C1] RDX: ffffc90002382000 RSI: ffff888028585a00 RDI: ffffffff8fd0ae30 [ 299.684098][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 299.692662][ C1] R10: dffffc0000000000 R11: fffff5200003aee4 R12: 0000000000000820 [ 299.700626][ C1] R13: ffff888026658830 R14: ffff888028585a08 R15: dffffc0000000000 [ 299.708616][ C1] ? usb_submit_urb+0x74/0x18d0 [ 299.713490][ C1] ? usb_submit_urb+0x74/0x18d0 [ 299.718349][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.724159][ C1] ? ___ratelimit+0x5a0/0x900 [ 299.728842][ C1] cm109_urb_irq_callback+0x709/0xcd0 [ 299.734216][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 299.739600][ C1] dummy_timer+0x85f/0x45b0 [ 299.744107][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 299.749077][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.755079][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.760018][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.765839][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.770776][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 299.775718][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 299.780956][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 299.786682][ C1] ? read_tsc+0x9/0x20 [ 299.790775][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 299.796065][ C1] handle_softirqs+0x22b/0x7c0 [ 299.800845][ C1] ? run_ksoftirqd+0x36/0x60 [ 299.805453][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 299.810497][ C1] run_ksoftirqd+0x36/0x60 [ 299.814917][ C1] smpboot_thread_fn+0x542/0xa60 [ 299.819856][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 299.824881][ C1] kthread+0x389/0x480 [ 299.828951][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 299.834403][ C1] ? __pfx_kthread+0x10/0x10 [ 299.838992][ C1] ret_from_fork+0x510/0xa50 [ 299.843593][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 299.848712][ C1] ? __switch_to+0xc9e/0x1480 [ 299.853387][ C1] ? __pfx_kthread+0x10/0x10 [ 299.857975][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.862783][ C1] [ 299.866137][ C1] Kernel Offset: disabled [ 299.870464][ C1] Rebooting in 86400 seconds..