last executing test programs: 7.526738771s ago: executing program 2 (id=5929): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000040)={'\x00', 0x9, 0x9, 0x9, 0x579c1b24, 0x6, r0}) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502004000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000080)={0x18, &(0x7f0000000000)={0x0, 0xa, 0x7, {0x7, 0x0, "ffffffffea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x5b01, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0x8, 0xd) (async) ptrace$cont(0x1f, r0, 0x8, 0xd) ptrace(0x11, r0) 6.757795216s ago: executing program 2 (id=5934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0x300, 0xfffffffc, 0x81}, 0x9c) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) socket$inet_sctp(0x2, 0x0, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000340)=""/204, 0xcc}], 0x1) 5.849533121s ago: executing program 2 (id=5935): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) read$nci(r5, &(0x7f0000002780)=""/3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00'}) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000180)='\xa7x{8\xb8\x81\xae$\xbb\x17\x90\xaa\x96\xd4\x9b\xd8\x87\x84\xca\xf6\xa6;\xd2!?,J\r\x94EA\x11\xc2\n\xc4h\xad\xc4\xe7*<\x87\xb5H\xfb\xf6j\x12\xed\x8f\x9caU^\xffW\xa1\x06\xcc', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0xf, 0x8, 0x0, 0x12, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0xfd, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xaa6a}}]}, 0x90}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x5, &(0x7f00000000c0)) 5.770559227s ago: executing program 3 (id=5937): socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x47d}) ioctl$UFFDIO_REGISTER(r2, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsm_list_modules(&(0x7f0000000380)=[0x0], &(0x7f0000000400)=0x8, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x33, 0x0, 0x4, 0x49, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2={0xff, 0x3}, 0x10, 0xba08, 0x0, 0x2}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x10000000000005, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x80, 0x7fff7ffc}]}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) io_uring_setup(0x41531, &(0x7f0000000480)={0x0, 0x10ed, 0x80, 0x2, 0x1d4}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r7, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200741, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@l2={0x1f, 0x9, @none, 0x6}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x1000}, {0x0}, {&(0x7f00000015c0)="3fc0c58479b438d0817b045e45bebeedccc29c77449a5fb8408ad74e9859a03bb03770a6b259014bd1e2e9e4d9eccfa9f833dfebbe11552e4c1abd3d973238c9ac38c344eb109f6dacf3396a13ea12cabc126c5c05dfc24d63a48ff620e6d962356cce3fe3990631d31fb5c307c8e365b07732a16ea879ee5c3072eeafbf5969d39dfed302cc8fca99dc8381483ccb55", 0x90}], 0x3}, 0x50) 5.29721711s ago: executing program 4 (id=5940): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3, 0x2}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r1) ioctl$TIOCCBRK(r0, 0x5428) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) r4 = dup2(r2, r2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x7, 0x684, 0x8}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x4c, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x3, @remote, 0x7}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000240)=0xc) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x2, 0x7fff, 0x1, 0x0, 0x0, [{{r4}, 0x4000000000000}]}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000002c0)) setsockopt(r4, 0x1, 0x2d1, &(0x7f0000000300)="04ede076d31479733ce996cb902f877366449b9974c914ba3730be15", 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x8, 0x4, 0x2, @empty, @empty, 0x0, 0x40, 0x80000000, 0x7}}) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@bridge_getlink={0x5c, 0x12, 0x200, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40186417, &(0x7f0000000540)={0x8, 0x1, 0x0, 0x8, 0x6, 0xfad1}) fanotify_mark(r4, 0x20, 0x40000000, r4, &(0x7f0000000580)='./file0\x00') connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', r6, 0x0, 0x10, 0x5, 0x80, {{0x10, 0x4, 0x1, 0x32, 0x40, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x26}, {[@end, @lsrr={0x83, 0x1b, 0x15, [@private=0xa010101, @rand_addr=0x64010102, @local, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x7, 0x58, [@local]}, @end, @lsrr={0x83, 0x7, 0xf0, [@empty]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@getchain={0x4c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xf}, {0xfff3, 0xfff2}, {0x1b60eb8d49c7b3cc, 0xffff}}, [{0x8, 0xb, 0xfffffff6}, {0x8, 0xb, 0x1}, {0x8}, {0x8}, {0x8, 0xb, 0x90000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r8 = socket(0x22, 0x800, 0x8) eventfd(0x8) recvmmsg(r4, &(0x7f0000002080)=[{{&(0x7f0000000800)=@sco, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000880)=""/148, 0x94}, {&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/194, 0xc2}, {&(0x7f0000001b40)=""/9, 0x9}, {&(0x7f0000001b80)=""/148, 0x94}], 0x6}, 0x8}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/151, 0x97}], 0x1}, 0x7}, {{&(0x7f0000001d80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/103, 0x67}, {&(0x7f0000001e80)=""/23, 0x17}, {&(0x7f0000001ec0)=""/174, 0xae}, {&(0x7f0000001f80)=""/24, 0x18}], 0x4, &(0x7f0000002000)=""/67, 0x43}, 0x7}], 0x3, 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000002100)={r5, 0x7, 0xb5f4}, 0x8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002140)={[0x8001, 0x5, 0x2451, 0xabb, 0x1, 0x9, 0x100, 0x400, 0x5, 0x10000000, 0x10, 0xc00000000000000, 0x40000000000, 0x8001, 0xd514, 0x5], 0xeeee0000, 0x80000}) prlimit64(r1, 0x8, &(0x7f0000002200)={0x61a, 0x3}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/247, 0xf7, 0x1, &(0x7f0000002340)=""/30, 0x1e}, &(0x7f00000023c0)=0x40) 5.04321247s ago: executing program 4 (id=5941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f"], 0x22) r4 = socket$netlink(0x10, 0x3, 0x10) io_uring_enter(r0, 0x10e3, 0xac5a, 0x10, &(0x7f0000000100)={[0xfffffff5, 0x968]}, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x20) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x7}], 0x1c) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r7, &(0x7f00000001c0)="f9681d8ff74a119fc839377bd1ea92c02c9cac135c632ab4f96506bf6cf5dc808436a8b7bcfeac0794782aa9722550676bba11f387a777eee948678db7ae924ba6ae425b50532aec8731db9e2ba37a20a65d9822f266f211c96699f8c613303826f352662140f259c2", 0x69, 0x4, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @private0, 0x2}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x3, 0x4) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b607003772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) flock(r1, 0xc) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0xb, 0x400008, 0x3013, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x7, 0x8, 0x47, 0xd61, 0x7, 0x4, 0x1, 0xeb]}) 4.755400192s ago: executing program 4 (id=5942): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x41, 0x0, 0x20000000}, 0x84) 4.44247239s ago: executing program 0 (id=5943): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0003001101a80016000b00014002000000035c3b61c1d67f6f940071", 0x49}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) 4.225482354s ago: executing program 4 (id=5945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0x300, 0xfffffffc, 0x81}, 0x9c) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) socket$inet_sctp(0x2, 0x0, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000340)=""/204, 0xcc}], 0x1) 4.225275003s ago: executing program 1 (id=5946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000020b702000014000000b7030000000000008500000005000006bf09000000ffffffe5090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 4.225094336s ago: executing program 0 (id=5947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2, 0xfffc}, @ptr={0x70742a85, 0x0, 0x0, 0x50, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4.105184467s ago: executing program 2 (id=5948): syz_open_dev$video4linux(&(0x7f00000010c0), 0x4, 0x40000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r2 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) truncate(&(0x7f0000000700)='./file0\x00', 0xffff3c1b) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0xc, 0x9) inotify_init() r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_getneigh={0x30, 0x1e, 0x4, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x2000, 0x100}, [@IFLA_NET_NS_FD={0x8}, @IFLA_GROUP={0x8, 0x1b, 0xed0b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYRES32=r2], 0x70}}, 0x0) 4.028704892s ago: executing program 1 (id=5949): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = inotify_init1(0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.933348209s ago: executing program 0 (id=5950): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="85000000550000007b2000000000006416000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 3.932836946s ago: executing program 3 (id=5951): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x200000000006, 0x7e, 0x5, 0x7ffc0002}, {0x1, 0x4, 0x2}, {0x6, 0x3, 0x0, 0x800}]}) landlock_create_ruleset(&(0x7f0000000040)={0xc00, 0x1}, 0x18, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x200000000006, 0x7e, 0x5, 0x7ffc0002}, {0x1, 0x4, 0x2}, {0x6, 0x3, 0x0, 0x800}]}) (async) landlock_create_ruleset(&(0x7f0000000040)={0xc00, 0x1}, 0x18, 0x2) (async) 3.811091448s ago: executing program 0 (id=5952): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x90000004}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x20008850) 3.780239707s ago: executing program 3 (id=5953): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sigaltstack(&(0x7f0000003e80)={&(0x7f0000003d80)=""/237, 0x2, 0xed}, &(0x7f0000003f40)={0x0}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r5}}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b8192300080000fe807a3a0000000000000000001200aafe8000000000000000000000080000aa0000000000000000"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000140)='-3', 0x2}]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010018000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4b8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.457044658s ago: executing program 0 (id=5954): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x102) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x4, 0x4, 0x320, 0xffffffff, 0x0, 0x190, 0x0, 0xfeffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [], [0xff000000], 'batadv_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x6, 0x0, 0x1, 0x1a}, 0x2f2, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'hsr0\x00', 'veth0_macvtap\x00', {}, {}, 0x89}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x37c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x122}}, 0x2405c044) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00222200000096231306073f07060000002afa1057dc9522ce0b6dcd6d127add9b80"], 0x0}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x44, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x22004080) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0xbb000000) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r1, &(0x7f0000000b00)={0x14, &(0x7f0000000580)={0x20, 0x10, 0xd5, {0xd5, 0xc, "497edc4f331bda272f29ab8a60b7df4c2d8ceb666241a7c07c7896864a23eb34cd14cc082dc1fb73c1b6e822314cece2876b5c9c7f6f0aa577879c8524d4cc9a52e3eba1866fc25d29f5d0b63272321fba41c1b4416c73535785b2bc1c867ee2d532a1ab5f167a50eb3e040648401e303be0755950b32b0dd83e1c6933154512ef2d7db14a8a0ee7e5c6e67ed96ebba122246a975cc4f2abdae5b8e95f8c0b2443ff45b23e808e09098d0c17ed3734f3f47e51c2eac67422945080feb316b2a29acc44719c1c711e208d7f89d5bd0c5b49e65b"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f00000006c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "be19f58f"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x764}}}}, &(0x7f0000000e00)={0x18, &(0x7f0000000b40)={0x20, 0x16, 0xef, "673c20d63fa047e7c03584e853fee612dc07578fb0f372874d3ce9a047fadd0d5e4bd256571aecbeed467ee2ae3d66681289b4c66ea8658a11f0f689539d717222c31b87cab2dc43773ba496e433da0c16f177592d9909b41c497fe9375756603b078b3c1348f177b8c3001d64055a783c18188db2a33bbd87469e64bd540b0cd16903b50b37a2ff4ebb3cc6d2f18bc822f00bd2a9e703803b21bf026cd388a56c2e0332390206526f9e77878f2aa7a30ab07c22464e9150d149a1beb7da691688b06a86cf69814c4e0ced622a44a0ce0e455bbe1e55c6d1a779d7cc5e2497df07607a7e2ab1eb539d441052526bd8"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000cc0)={0x20, 0x1, 0xbd, "b8dd611e2d97f0f69843ea97b03f47e13295a86371adbb6a4f9b68418e8ceba15a9dd9c87a11e4f86d1400d4c15d894cab1b10e28068fde873a5e75b7a11265a368fd04090764c59e4b667b67d79bf3026ccde05a2eb1330b893ab577fbd135d859777a957a55b26f41b7e8b26a9b4cfede6862b7770e05dbd80e584fc9125bc429a6e6504703a0e985a06b6a80935dba892f63dcf4f5e1b8ea0d42aff23fbe75b7e55623df26428c5357c8e3356c3593a6189b482150f34a8fdceb4f1"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0xa}}) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc000000010a0300000000000000000007000001090001"], 0xdc}}, 0x40400d4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @flat=@weak_binder={0x66646185, 0xe61d606700e505fc, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.177393186s ago: executing program 4 (id=5955): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0xfffffc72, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, 0x0, 0x3) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 2.405130807s ago: executing program 3 (id=5956): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0xfffffc72, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="f04a2bb7000003"], 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="cb50f9170600000000000000001f0a5c41c8dbb115c1ae62", @ANYRES16=r1, @ANYBLOB="01000000000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="bada9e824096b17ddc", 0x9) 2.401117754s ago: executing program 2 (id=5966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 2.17953447s ago: executing program 1 (id=5957): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="850000005f0000007b2000000000000006000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x2010000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 2.163063988s ago: executing program 2 (id=5958): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ipvlan1\x00', 0x10) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000080)=0x1) r2 = openat$btrfs_control(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0xd, 0x4) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x30, 0x0, [{@remote}, {}, {@dev}]}}) unshare(0x40000) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000240)={0xeeee0000, 0x20000}) unshare(0x40080) ioctl$KDENABIO(r2, 0x4b36) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x180, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff9b}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xad}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x363}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xca26}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r2, &(0x7f0000000580)="530d30fc048aa9395a2132fea27129b5e0ce789aa8167b14978358257012ff95b242b464d7acac495dd9eaadd285cd4cc5a9524e14faf8ffda8b8245", 0x3c, 0x4000000, &(0x7f00000005c0)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100}, 0x1c) openat$rfkill(0xffffff9c, &(0x7f0000000600), 0x240a00, 0x0) r6 = syz_usb_connect(0x5, 0xf9, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x1a, 0x83, 0x9c, 0x1b6, 0x471, 0x81e, 0x8901, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x1, 0xf4, 0x2, 0xf0, 0x9, [{{0x9, 0x4, 0xe0, 0x6, 0x4, 0xe0, 0x9d, 0x50, 0xb4, [@hid_hid={0x9, 0x21, 0x4a, 0x7, 0x1, {0x22, 0xb71}}], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0xf, 0xfe, 0x6, [@generic={0x89, 0x22, "8d4f27b5cc61892f1e449c43b05e36fcf4a435ebaeaeeea2469ae9cf867a53aaf79f911d78daa365a1d561ec72139a489d76a93b4a9e4428247ec5c0ecb763b8888f395351341926c60f1954dbf47d1fc6805f991bedea9ee8eb0954024fea1083193c5e4aec4dd0992ce8b7bb7afbfb5db170dfcd3dd2f0dde57b3125d3c91a462f6e40ccb33a"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x8, 0xf, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9a, 0xb64}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x2, 0x7, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x4, 0x4}]}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x3, 0x4, 0x8, [@generic={0x3, 0x31, 'Z'}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x1, 0x5, 0x5, 0x8, 0x9}, 0x114, &(0x7f0000000780)={0x5, 0xf, 0x114, 0x5, [@generic={0xdf, 0x10, 0x1, "18a0cbeec3fc52741db161f45e95b95e5261d8a1941686662e3ae4b0ceb874f55168f91f6b43a2eeac7a63788d563b222e51a43a785936124ce8630beeb6298a0f057cd0de75b0a8df8b8f3e93fcdc75309c3e8c428c544bba24e8140fd1a0add38d13177035f75cf4fd986b9ad58a232c7772b48ec3a17c17a8a3e09e4a36774c528dd813e03bd62a5e8cedd9938bb419d8d5fcfa4e4f421929771bc873935fbdf003eb051d065cee7b3ab571225c51c48e74cd2a94507f707fc7ae29f9a1bdcfca36162fca4dfdc4b255d2772e5d7f0d02705a3c4eaa083d91835a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x2, 0x5, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc1, 0x2, 0x1, 0x13, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x6, 0x0, 0xc, [0xcf, 0x30]}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xc09}}, {0xa9, &(0x7f0000000940)=@string={0xa9, 0x3, "b2e4cdf70ecdfc377e1def3112c438fb7b8426f298815711c3a8661da3d74560856c40d7b8abcc3833ee5ef2d19ce17474d8679eef539c4a045bad46ea04e3576f24a97210c73e48032d3ab2af1eaee2eee1bf69a47c2920d350198ee379e1ac145edf305bf12960ccaa5cb1a62ae53afe266c3065408029e2364db103185a7b61bff4ee7242c04fcab033fd76b6d183a039b028e8c879285f27e748c0da2cb9970bd617582dfa"}}, {0x83, &(0x7f0000000a00)=@string={0x83, 0x3, "589f8383a80e131c940ca21890959702b366d69caa5d45cb8d279691e4d36d5dd879ca5f053ce5193430d545e03e5b74e911846c0a45d68d3c9378565e676ad3cdd0bdbe0b9f7ced49d0b25f68906dc4c17d819c5206ef985a9cd5021f556bba35e3dc48e6b0e8f719e071d8eaeea7a7ff378e9416702b2d057e27bfeb0d9f1d96"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_ep_write(r6, 0xd, 0xd3, &(0x7f0000000b40)="7fe5b452a96c355b9c88bf371f8f7ed9be5db9721b10a0c11bb4a7dc933aa587043df6c1c329b7e9c7316a02b45e043367b876dbfa64a0f859d20df2d45f0a1aa2a915eb5705825aab9ff6f14b3f88124077e58410b23f656d39f0e9486c6d02c8accc014eed3675db3d9af056bca6f54a31356907421414a9db881b10e6eeab31aad70243cbdc535d787974e6ee28ea2ef2168631db20b368ff84a230d085a909940cbe1d2e7866e30e9f7b0aac60c13a05a18ee667ef117498b53f3a1ceab17fccb14d8a53eb3f815f985e225966d34f44c6") ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000c80)=0x0) statx(r2, &(0x7f0000000cc0)='./file0\x00', 0x4000, 0x8, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000c40)='./file0\x00', r7, r8) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e00)) 2.045393721s ago: executing program 1 (id=5959): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback={0xe803000000000000}}, 0x1c) 1.737426329s ago: executing program 3 (id=5960): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3, 0x2}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r1) ioctl$TIOCCBRK(r0, 0x5428) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) r4 = dup2(r2, r2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x7, 0x684, 0x8}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x4c, &(0x7f0000000180)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x3, @remote, 0x7}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000240)=0xc) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000280)={0x2, 0x7fff, 0x1, 0x0, 0x0, [{{r4}, 0x4000000000000}]}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000002c0)) setsockopt(r4, 0x1, 0x2d1, &(0x7f0000000300)="04ede076d31479733ce996cb902f877366449b9974c914ba3730be15", 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x8, 0x4, 0x2, @empty, @empty, 0x0, 0x40, 0x80000000, 0x7}}) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@bridge_getlink={0x5c, 0x12, 0x200, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dvmrp1\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40186417, &(0x7f0000000540)={0x8, 0x1, 0x0, 0x8, 0x6, 0xfad1}) fanotify_mark(r4, 0x20, 0x40000000, r4, &(0x7f0000000580)='./file0\x00') connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', r6, 0x0, 0x10, 0x5, 0x80, {{0x10, 0x4, 0x1, 0x32, 0x40, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x26}, {[@end, @lsrr={0x83, 0x1b, 0x15, [@private=0xa010101, @rand_addr=0x64010102, @local, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x7, 0x58, [@local]}, @end, @lsrr={0x83, 0x7, 0xf0, [@empty]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@getchain={0x4c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xf}, {0xfff3, 0xfff2}, {0x1b60eb8d49c7b3cc, 0xffff}}, [{0x8, 0xb, 0xfffffff6}, {0x8, 0xb, 0x1}, {0x8}, {0x8}, {0x8, 0xb, 0x90000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r8 = socket(0x22, 0x800, 0x8) eventfd(0x8) recvmmsg(r4, &(0x7f0000002080)=[{{&(0x7f0000000800)=@sco, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000880)=""/148, 0x94}, {&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/194, 0xc2}, {&(0x7f0000001b40)=""/9, 0x9}, {&(0x7f0000001b80)=""/148, 0x94}], 0x6}, 0x8}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/151, 0x97}], 0x1}, 0x7}, {{&(0x7f0000001d80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/103, 0x67}, {&(0x7f0000001e80)=""/23, 0x17}, {&(0x7f0000001ec0)=""/174, 0xae}, {&(0x7f0000001f80)=""/24, 0x18}], 0x4, &(0x7f0000002000)=""/67, 0x43}, 0x7}], 0x3, 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000002100)={r5, 0x7, 0xb5f4}, 0x8) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000002140)={[0x8001, 0x5, 0x2451, 0xabb, 0x1, 0x9, 0x100, 0x400, 0x5, 0x10000000, 0x10, 0xc00000000000000, 0x40000000000, 0x8001, 0xd514, 0x5], 0xeeee0000, 0x80000}) prlimit64(r1, 0x8, &(0x7f0000002200)={0x61a, 0x3}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/247, 0xf7, 0x1, &(0x7f0000002340)=""/30, 0x1e}, &(0x7f00000023c0)=0x40) 1.663761032s ago: executing program 3 (id=5961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x7b, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r0}, 0x38) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x40000000) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003ffe, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000140)=[0xcd7a0000], 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x810, r4, 0x4000) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0) 1.153285041s ago: executing program 1 (id=5962): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) 444.939684ms ago: executing program 0 (id=5963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@ldst={0x3, 0x2, 0x3, 0x9, 0x0, 0xfffffffffffffffe}], {{0x5, 0x1, 0xb, 0x8, 0x9, 0x600}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 259.896047ms ago: executing program 1 (id=5965): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendto$inet(r4, &(0x7f00000002c0), 0x20, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) lstat(0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1}, &(0x7f00000000c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00'}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) close(r1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100041eba02c7000b8449e1608cf5389", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000005001000040000"], 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) 0s ago: executing program 4 (id=5967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (fail_nth: 1) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.3.5378'. [ 1165.424199][T22775] ip6gre0: entered promiscuous mode [ 1165.448127][ T9202] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1165.534152][T22609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.556124][T22609] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1165.559190][T17176] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1165.577059][T22611] usb 4-1: USB disconnect, device number 49 [ 1165.598830][ T9202] usb 2-1: Using ep0 maxpacket: 8 [ 1165.606516][ T9202] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1165.609297][T22609] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1165.618649][ T9202] usb 2-1: can't read configurations, error -61 [ 1165.645940][T22609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.664713][T22609] usb 5-1: config 0 descriptor?? [ 1165.730190][T17176] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.749797][T17176] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1165.762962][ T9202] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1165.776454][T17176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1165.795247][T17176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1165.806879][T17176] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1165.829824][T17176] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1165.844615][T17176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1165.853641][T17176] usb 3-1: Product: syz [ 1165.864752][T17176] usb 3-1: Manufacturer: syz [ 1165.869935][T17176] usb 3-1: SerialNumber: syz [ 1165.885539][T17176] usb 3-1: config 0 descriptor?? [ 1165.943646][ T9202] usb 2-1: Using ep0 maxpacket: 8 [ 1165.951823][ T9202] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1165.974142][ T9202] usb 2-1: can't read configurations, error -61 [ 1165.985598][ T9202] usb usb2-port1: attempt power cycle [ 1166.098665][T17176] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1166.121291][T17176] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1166.297183][T17176] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1166.323334][T17176] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1166.338611][ T9202] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1166.378143][T17176] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1166.393377][ T9202] usb 2-1: Using ep0 maxpacket: 8 [ 1166.402340][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1166.421946][ T9202] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1166.444851][ T9202] usb 2-1: can't read configurations, error -61 [ 1166.455704][T22838] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1166.462283][T22838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1166.479880][T17176] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1166.495716][T22841] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 1166.495755][T17176] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1166.502260][T22841] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1166.512050][T22841] vhci_hcd vhci_hcd.0: Device attached [ 1166.543108][T22838] vhci_hcd vhci_hcd.0: Device attached [ 1166.543969][T17176] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1166.566048][T17176] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1166.590179][T22846] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1166.595244][T17176] usb 3-1: USB disconnect, device number 79 [ 1166.618244][ T9202] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1166.651539][ T9202] usb 2-1: Using ep0 maxpacket: 8 [ 1166.660723][ T9202] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1166.670924][T22838] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(6) [ 1166.677492][T22838] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1166.680981][T22609] megaworld 0003:07B5:0312.0032: item fetching failed at offset 1/5 [ 1166.685231][ T9202] usb 2-1: can't read configurations, error -61 [ 1166.713688][T22838] vhci_hcd vhci_hcd.0: Device attached [ 1166.721325][ T9202] usb usb2-port1: unable to enumerate USB device [ 1166.742265][T22841] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 1166.745769][T22609] megaworld 0003:07B5:0312.0032: parse failed [ 1166.748993][T22841] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1166.761573][T22841] vhci_hcd vhci_hcd.0: Device attached [ 1166.764943][T22610] usb 39-2: new low-speed USB device number 3 using vhci_hcd [ 1166.782898][T22609] megaworld 0003:07B5:0312.0032: probe with driver megaworld failed with error -22 [ 1166.791891][T22838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1166.817684][T22838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1166.994429][T22838] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(18) [ 1167.001083][T22838] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1167.016371][T22838] vhci_hcd vhci_hcd.0: Device attached [ 1167.025377][T22855] vhci_hcd: connection closed [ 1167.025801][ T36] vhci_hcd: stop threads [ 1167.082791][T22852] vhci_hcd: connection closed [ 1167.084479][T22847] vhci_hcd: connection closed [ 1167.086966][T22842] vhci_hcd: connection reset by peer [ 1167.107637][T22839] vhci_hcd: connection closed [ 1167.119347][ T36] vhci_hcd: release socket [ 1167.136046][ T36] vhci_hcd: disconnect device [ 1167.146774][ T36] vhci_hcd: stop threads [ 1167.162430][ T36] vhci_hcd: release socket [ 1167.174619][ T36] vhci_hcd: disconnect device [ 1167.187135][ T36] vhci_hcd: stop threads [ 1167.193812][ T36] vhci_hcd: release socket [ 1167.203972][ T36] vhci_hcd: disconnect device [ 1167.215254][ T36] vhci_hcd: stop threads [ 1167.225615][ T36] vhci_hcd: release socket [ 1167.241578][ T36] vhci_hcd: disconnect device [ 1167.254154][ T36] vhci_hcd: stop threads [ 1167.264579][ T36] vhci_hcd: release socket [ 1167.285774][ T36] vhci_hcd: disconnect device [ 1168.239319][T22608] usb 5-1: USB disconnect, device number 54 [ 1168.321073][T22868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5406'. [ 1168.493369][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1168.493389][ T30] audit: type=1326 audit(1747064834.416:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.571281][T22875] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5409'. [ 1168.595930][ T30] audit: type=1326 audit(1747064834.416:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.631841][T22879] fuse: Unknown parameter 'ð' [ 1168.651308][ T30] audit: type=1326 audit(1747064834.416:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.678843][ T30] audit: type=1326 audit(1747064834.416:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.707254][ T30] audit: type=1326 audit(1747064834.416:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.724154][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5413'. [ 1168.744453][T22882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5413'. [ 1168.768464][ T30] audit: type=1326 audit(1747064834.416:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.780913][T22881] [U]  [ 1168.795481][ T30] audit: type=1326 audit(1747064834.416:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.817563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1168.818137][T17176] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1168.866300][ T30] audit: type=1326 audit(1747064834.416:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.893936][ T30] audit: type=1326 audit(1747064834.416:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.916032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1168.923248][ T30] audit: type=1326 audit(1747064834.416:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22869 comm="syz.4.5407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1168.990724][T22888] netlink: 'syz.1.5415': attribute type 13 has an invalid length. [ 1169.002138][T17176] usb 5-1: device descriptor read/64, error -71 [ 1169.288250][T17176] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1169.468456][T15653] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1169.476432][T17176] usb 5-1: device descriptor read/64, error -71 [ 1169.604316][T17176] usb usb5-port1: attempt power cycle [ 1169.688886][T15653] usb 4-1: Using ep0 maxpacket: 8 [ 1169.698944][T15653] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1169.706727][T15653] usb 4-1: can't read configurations, error -61 [ 1169.868230][T15653] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1169.935664][T22915] netlink: 'syz.1.5422': attribute type 1 has an invalid length. [ 1169.959105][T17176] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1170.001970][T22915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1170.010976][T17176] usb 5-1: device descriptor read/8, error -71 [ 1170.057403][T15653] usb 4-1: Using ep0 maxpacket: 8 [ 1170.069635][T15653] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1170.077245][T15653] usb 4-1: can't read configurations, error -61 [ 1170.085989][T15653] usb usb4-port1: attempt power cycle [ 1170.269270][T17176] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1170.358816][T17176] usb 5-1: device descriptor read/8, error -71 [ 1170.479275][T17176] usb usb5-port1: unable to enumerate USB device [ 1170.485722][T15653] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1170.509130][T15653] usb 4-1: Using ep0 maxpacket: 8 [ 1170.517724][T15653] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1170.530633][T15653] usb 4-1: can't read configurations, error -61 [ 1170.632817][T22923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1170.689956][T15653] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1170.723597][T15653] usb 4-1: Using ep0 maxpacket: 8 [ 1170.732013][T15653] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1170.740306][T15653] usb 4-1: can't read configurations, error -61 [ 1170.747037][T15653] usb usb4-port1: unable to enumerate USB device [ 1170.753597][T17176] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1170.910314][T17176] usb 2-1: Using ep0 maxpacket: 8 [ 1170.918227][T17176] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1170.918260][T17176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.918281][T17176] usb 2-1: Product: syz [ 1170.918296][T17176] usb 2-1: Manufacturer: syz [ 1170.918312][T17176] usb 2-1: SerialNumber: syz [ 1170.926921][T17176] usb 2-1: config 0 descriptor?? [ 1171.155699][T17176] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1171.426474][T22940] input: syz0 as /devices/virtual/input/input153 [ 1171.819142][T17176] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1171.832830][T17176] usb 2-1: USB disconnect, device number 69 [ 1171.848551][T22610] vhci_hcd: vhci_device speed not set [ 1171.878720][T22608] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1172.028681][T22608] usb 1-1: device descriptor read/64, error -71 [ 1172.530725][T22608] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1172.781535][T22608] usb 1-1: device descriptor read/64, error -71 [ 1172.898685][T22608] usb usb1-port1: attempt power cycle [ 1172.957752][T22964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.966785][T22964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.008494][T22964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.019740][T22964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.188092][T17176] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1173.268342][T22608] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1173.289638][T22608] usb 1-1: device descriptor read/8, error -71 [ 1173.318287][T17176] usb 2-1: device descriptor read/64, error -71 [ 1173.558347][T22608] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1173.558938][T17176] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1173.579368][T22608] usb 1-1: device descriptor read/8, error -71 [ 1173.706233][T22608] usb usb1-port1: unable to enumerate USB device [ 1173.718108][T17176] usb 2-1: device descriptor read/64, error -71 [ 1173.829425][T17176] usb usb2-port1: attempt power cycle [ 1174.188087][T17176] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1174.209394][T17176] usb 2-1: device descriptor read/8, error -71 [ 1174.218127][ T9202] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1174.370821][ T9202] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1174.379264][ T9202] usb 3-1: not running at top speed; connect to a high speed hub [ 1174.394268][ T9202] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1174.411155][ T9202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1174.421214][ T9202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.429607][ T9202] usb 3-1: Product: syz [ 1174.434034][ T9202] usb 3-1: Manufacturer: syz [ 1174.438971][ T9202] usb 3-1: SerialNumber: syz [ 1174.449494][T17176] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1174.460797][ T9202] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1174.470052][T17176] usb 2-1: device descriptor read/8, error -71 [ 1174.578833][T17176] usb usb2-port1: unable to enumerate USB device [ 1174.755151][T17176] usb 3-1: USB disconnect, device number 80 [ 1175.218251][T22609] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1175.448427][T22609] usb 4-1: Using ep0 maxpacket: 8 [ 1175.462325][T22609] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.480801][T22609] usb 4-1: config 0 has no interfaces? [ 1175.487820][T22609] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1175.518167][T22609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.535761][T22609] usb 4-1: config 0 descriptor?? [ 1176.328707][T23014] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1176.340379][T23014] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1176.358992][T22609] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1176.528106][T17176] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1176.531638][T22609] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 1176.553792][T22609] usb 3-1: config 0 has no interface number 0 [ 1176.561842][T22609] usb 3-1: config 0 interface 160 has no altsetting 0 [ 1176.571880][T22609] usb 3-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1176.592404][T22609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.602378][T22609] usb 3-1: Product: syz [ 1176.606896][T22609] usb 3-1: Manufacturer: syz [ 1176.613076][T22609] usb 3-1: SerialNumber: syz [ 1176.621946][T22609] usb 3-1: config 0 descriptor?? [ 1176.632476][T22609] usb-storage 3-1:0.160: USB Mass Storage device detected [ 1176.678399][T17176] usb 2-1: device descriptor read/64, error -71 [ 1176.852225][T22609] usb 3-1: USB disconnect, device number 81 [ 1176.948086][T17176] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1176.974387][T23026] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5458'. [ 1177.078084][T17176] usb 2-1: device descriptor read/64, error -71 [ 1177.199972][T17176] usb usb2-port1: attempt power cycle [ 1177.306688][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.316511][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.574542][T17176] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1177.753025][T17176] usb 2-1: device descriptor read/8, error -71 [ 1177.963964][T22609] usb 4-1: USB disconnect, device number 54 [ 1177.998486][T17176] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1178.048927][T17176] usb 2-1: device descriptor read/8, error -71 [ 1178.168717][T17176] usb usb2-port1: unable to enumerate USB device [ 1180.572145][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1180.572160][ T30] audit: type=1800 audit(1747064846.506:1433): pid=23073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5470" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1180.658371][T22610] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1180.824715][T22610] usb 1-1: Using ep0 maxpacket: 8 [ 1180.842628][T22610] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.864997][T22610] usb 1-1: config 0 has no interfaces? [ 1180.878033][T22610] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1180.887359][T22610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.931855][T22610] usb 1-1: config 0 descriptor?? [ 1181.146511][T17176] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1181.188561][T23088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5474'. [ 1181.239962][ T9202] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1181.307409][T23089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1181.394617][T17176] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 1181.406486][T17176] usb 4-1: config 0 has no interface number 0 [ 1181.413326][T17176] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x1 has invalid maxpacket 544, setting to 64 [ 1181.428017][T17176] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=16.25 [ 1181.437620][T17176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.446423][T17176] usb 4-1: Product: syz [ 1181.509465][T17176] usb 4-1: Manufacturer: syz [ 1181.516424][T17176] usb 4-1: SerialNumber: syz [ 1181.529728][T17176] usb 4-1: config 0 descriptor?? [ 1181.535954][T23082] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1181.550619][T17176] as10x_usb: device has been detected [ 1181.556949][T17176] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1181.585252][T17176] usb 4-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1181.600292][ T9202] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.630127][T17176] as10x_usb: error during firmware upload part1 [ 1181.638197][ T9202] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1181.905008][T17176] Registered device nBox DVB-T Dongle [ 1181.907925][T17176] usb 4-1: USB disconnect, device number 55 [ 1181.920866][ T9202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.992340][ T9202] usb 3-1: config 0 descriptor?? [ 1182.020632][T17176] Unregistered device nBox DVB-T Dongle [ 1182.025498][T17176] as10x_usb: device has been disconnected [ 1183.075143][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.089122][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.318234][T23120] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5485'. [ 1183.358086][T23120] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5485'. [ 1183.408151][T22608] usb 1-1: USB disconnect, device number 52 [ 1183.592900][T23125] input: syz0 as /devices/virtual/input/input154 [ 1183.685641][T23127] binder: 23126:23127 ioctl c0306201 800003c0 returned -14 [ 1183.940044][T23132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5491'. [ 1184.204344][ T9202] usbhid 3-1:0.0: can't add hid device: -71 [ 1184.221489][T23083] delete_channel: no stack [ 1184.233753][ T9202] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1184.283448][ T9202] usb 3-1: USB disconnect, device number 82 [ 1184.362406][T23141] tipc: Enabling of bearer rejected, already enabled [ 1184.618335][T17176] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1184.770382][T17176] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1184.783793][T17176] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1184.795834][ T9202] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1184.804793][T17176] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1184.814137][T17176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1184.825517][T17176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1184.828450][T22608] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1184.841713][T17176] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1184.853754][T17176] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1184.862413][T17176] usb 1-1: Product: syz [ 1184.866994][T17176] usb 1-1: Manufacturer: syz [ 1184.886477][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5499'. [ 1184.928264][ T5890] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1185.008831][T17176] cdc_wdm 1-1:1.0: skipping garbage [ 1185.015277][T17176] cdc_wdm 1-1:1.0: skipping garbage [ 1185.022623][T17176] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1185.051055][T22608] usb 5-1: Using ep0 maxpacket: 8 [ 1185.069158][T22608] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.088133][T22608] usb 5-1: config 0 has no interfaces? [ 1185.102356][T22608] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1185.121715][T22608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.125951][T17176] usb 1-1: USB disconnect, device number 53 [ 1185.153880][T22608] usb 5-1: config 0 descriptor?? [ 1185.158250][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 1185.207589][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1185.246579][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 148, changing to 7 [ 1185.261605][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1185.272593][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.315438][ T5890] usb 4-1: Product: syz [ 1185.321426][ T5890] usb 4-1: Manufacturer: syz [ 1185.327734][ T5890] usb 4-1: SerialNumber: syz [ 1185.348387][ T5890] usb 4-1: config 0 descriptor?? [ 1185.375285][ T5890] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1185.396967][ T5890] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1185.678230][T15653] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1185.840818][T15653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.863210][T15653] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1185.874552][T15653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.895531][T15653] usb 2-1: config 0 descriptor?? [ 1185.924679][T15653] pwc: Askey VC010 type 2 USB webcam detected. [ 1185.969964][T23180] netlink: 'syz.0.5506': attribute type 3 has an invalid length. [ 1185.981338][T23180] netlink: 'syz.0.5506': attribute type 1 has an invalid length. [ 1185.983083][ T5890] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1185.990141][T23180] netlink: 199796 bytes leftover after parsing attributes in process `syz.0.5506'. [ 1186.007633][ T5890] em28xx 4-1:0.0: Config register raw data: 0x56 [ 1186.122977][T15653] pwc: send_video_command error -71 [ 1186.132777][T15653] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1186.142806][T15653] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1186.155506][T15653] usb 2-1: USB disconnect, device number 78 [ 1186.222746][ T5890] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1186.234903][ T5890] em28xx 4-1:0.0: No AC97 audio processor [ 1186.255023][ T5890] usb 4-1: USB disconnect, device number 56 [ 1186.274947][ T5890] em28xx 4-1:0.0: Disconnecting em28xx [ 1186.283397][ T5890] em28xx 4-1:0.0: Freeing device [ 1186.337487][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1186.591622][T22608] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1186.758493][T22608] usb 2-1: Using ep0 maxpacket: 32 [ 1186.770087][T22608] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1186.781502][T22608] usb 2-1: config 0 has no interface number 0 [ 1186.787707][T22608] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1186.802593][T22608] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1186.816528][T22608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.827531][T22608] usb 2-1: Product: syz [ 1186.832532][T22608] usb 2-1: Manufacturer: syz [ 1186.837232][T22608] usb 2-1: SerialNumber: syz [ 1186.852106][T22608] usb 2-1: config 0 descriptor?? [ 1186.869668][T22608] smsc75xx v1.0.0 [ 1186.874335][T22608] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1186.890859][T22608] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1187.204932][T23199] xt_cgroup: path and classid specified [ 1187.288994][T23203] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5516'. [ 1187.488109][T22610] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1187.561668][T22608] usb 5-1: USB disconnect, device number 59 [ 1187.653132][T22610] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1187.664672][T22610] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1187.675556][T22610] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1187.686378][T22610] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1187.698314][T22610] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1187.715302][T22610] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1187.725044][T22610] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1187.733674][T22610] usb 1-1: Product: syz [ 1187.738386][T22610] usb 1-1: Manufacturer: syz [ 1187.754591][T22610] cdc_wdm 1-1:1.0: skipping garbage [ 1187.760235][T22610] cdc_wdm 1-1:1.0: skipping garbage [ 1187.765644][T22610] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1187.968437][T22610] usb 1-1: USB disconnect, device number 54 [ 1188.518231][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1188.527480][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1188.537246][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1188.566725][ T9196] usb 2-1: USB disconnect, device number 79 [ 1188.967326][T23239] gre0: entered promiscuous mode [ 1188.978792][ T9196] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1189.113568][T23245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5527'. [ 1189.216953][ T9196] usb 3-1: config 0 has no interfaces? [ 1189.241765][ T9196] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1189.251554][ T9196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.260106][ T9196] usb 3-1: Product: syz [ 1189.264377][ T9196] usb 3-1: Manufacturer: syz [ 1189.269311][ T9196] usb 3-1: SerialNumber: syz [ 1189.284353][ T9196] usb 3-1: config 0 descriptor?? [ 1189.373034][T23254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5530'. [ 1189.383946][T23254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.528070][ T5890] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1189.678234][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 1189.693669][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.725095][ T5890] usb 2-1: config 0 has no interfaces? [ 1189.734252][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1189.747220][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.772142][ T5890] usb 2-1: config 0 descriptor?? [ 1190.228059][ T5890] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1190.390769][ T5890] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1190.408226][ T5890] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1190.418832][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1190.428857][ T5890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1190.440106][ T5890] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1190.453591][ T5890] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1190.464260][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1190.472383][ T5890] usb 1-1: Product: syz [ 1190.476740][ T5890] usb 1-1: Manufacturer: syz [ 1190.497111][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 1190.508720][ T5890] cdc_wdm 1-1:1.0: skipping garbage [ 1190.517935][ T5890] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1190.710288][T22608] usb 1-1: USB disconnect, device number 55 [ 1191.718820][ T5890] usb 3-1: USB disconnect, device number 84 [ 1191.898209][T22608] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1191.952097][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5542'. [ 1192.106132][T22608] usb 4-1: config 0 has no interfaces? [ 1192.130349][ T9202] usb 2-1: USB disconnect, device number 80 [ 1192.176265][T22608] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1192.186929][T22608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.205753][T22608] usb 4-1: Product: syz [ 1192.215754][T22608] usb 4-1: Manufacturer: syz [ 1192.228205][ T5890] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1192.243501][T23300] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1192.264469][T23300] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1192.282083][T22608] usb 4-1: SerialNumber: syz [ 1192.312743][T22608] usb 4-1: config 0 descriptor?? [ 1192.368455][ T5890] usb 5-1: device descriptor read/64, error -71 [ 1192.543211][T23287] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1193.028541][ T5890] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1193.286110][ T5890] usb 5-1: device descriptor read/64, error -71 [ 1193.398983][ T5890] usb usb5-port1: attempt power cycle [ 1193.748172][ T5890] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1193.769329][ T5890] usb 5-1: device descriptor read/8, error -71 [ 1194.019160][ T5890] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1194.040700][ T5890] usb 5-1: device descriptor read/8, error -71 [ 1194.099097][ T9196] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1194.148484][ T5890] usb usb5-port1: unable to enumerate USB device [ 1194.261292][ T9196] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1194.276235][ T9196] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1194.286559][ T9196] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1194.295705][ T9196] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1194.308037][ T9196] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1194.321328][ T9196] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1194.339518][ T9196] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1194.347643][ T9196] usb 2-1: Product: syz [ 1194.352123][ T9196] usb 2-1: Manufacturer: syz [ 1194.377261][ T9196] cdc_wdm 2-1:1.0: skipping garbage [ 1194.387512][ T9196] cdc_wdm 2-1:1.0: skipping garbage [ 1194.394674][ T9196] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1194.507451][T23318] netlink: 'syz.2.5551': attribute type 13 has an invalid length. [ 1194.555993][ T5890] usb 4-1: USB disconnect, device number 57 [ 1194.593732][T22610] usb 2-1: USB disconnect, device number 81 [ 1194.737450][T23324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1194.815970][T23328] netlink: 'syz.0.5554': attribute type 6 has an invalid length. [ 1195.198217][T22610] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1195.369343][T22610] usb 1-1: Using ep0 maxpacket: 8 [ 1195.376584][T22610] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.392227][T22609] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1195.400006][T22610] usb 1-1: config 0 has no interfaces? [ 1195.406280][T22610] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1195.416035][T22610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.430740][T22610] usb 1-1: config 0 descriptor?? [ 1195.528405][T22609] usb 5-1: device descriptor read/64, error -71 [ 1195.702667][ T30] audit: type=1326 audit(1747064861.636:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.3.5562" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 1195.788581][T22609] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1195.881777][T23358] FAULT_INJECTION: forcing a failure. [ 1195.881777][T23358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.903697][T23358] CPU: 1 UID: 0 PID: 23358 Comm: syz.3.5566 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1195.903726][T23358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1195.903740][T23358] Call Trace: [ 1195.903750][T23358] [ 1195.903759][T23358] dump_stack_lvl+0x189/0x250 [ 1195.903800][T23358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.903924][T23358] ? __pfx__printk+0x10/0x10 [ 1195.903964][T23358] should_fail_ex+0x414/0x560 [ 1195.904003][T23358] _copy_to_user+0x31/0xb0 [ 1195.904033][T23358] simple_read_from_buffer+0xe1/0x170 [ 1195.904063][T23358] proc_fail_nth_read+0x1df/0x250 [ 1195.904095][T23358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1195.904126][T23358] ? rw_verify_area+0x258/0x650 [ 1195.904147][T23358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1195.904177][T23358] vfs_read+0x1fd/0x980 [ 1195.904204][T23358] ? __pfx___mutex_lock+0x10/0x10 [ 1195.904231][T23358] ? __pfx_vfs_read+0x10/0x10 [ 1195.904254][T23358] ? __fget_files+0x2a/0x420 [ 1195.904284][T23358] ? __fget_files+0x3a0/0x420 [ 1195.904307][T23358] ? __fget_files+0x2a/0x420 [ 1195.904341][T23358] ksys_read+0x145/0x250 [ 1195.904366][T23358] ? __pfx_ksys_read+0x10/0x10 [ 1195.904390][T23358] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1195.904423][T23358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1195.904457][T23358] __do_fast_syscall_32+0xb4/0x110 [ 1195.904484][T23358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1195.904510][T23358] do_fast_syscall_32+0x34/0x80 [ 1195.904534][T23358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1195.904558][T23358] RIP: 0023:0xf707e539 [ 1195.904575][T23358] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1195.904594][T23358] RSP: 002b:00000000f506e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1195.904616][T23358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f506e620 [ 1195.904630][T23358] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 1195.904642][T23358] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1195.904654][T23358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1195.904666][T23358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1195.904696][T23358] [ 1195.958675][T22609] usb 5-1: device descriptor read/64, error -71 [ 1196.378179][ T9196] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1196.419688][T22609] usb usb5-port1: attempt power cycle [ 1196.529813][ T9196] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1196.538977][ T9196] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1196.564708][ T9196] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1196.599919][ T9196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1196.614444][ T9196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1196.641145][ T9196] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1196.653864][ T9196] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1196.675531][ T9196] usb 4-1: Product: syz [ 1196.689531][ T9196] usb 4-1: Manufacturer: syz [ 1196.706549][ T9196] cdc_wdm 4-1:1.0: skipping garbage [ 1196.719077][ T9196] cdc_wdm 4-1:1.0: skipping garbage [ 1196.724460][ T9196] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1196.788518][T22609] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1196.821745][T22609] usb 5-1: device descriptor read/8, error -71 [ 1196.911393][T22610] usb 4-1: USB disconnect, device number 58 [ 1197.078148][T22609] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1197.102706][T22609] usb 5-1: device descriptor read/8, error -71 [ 1197.228772][T22609] usb usb5-port1: unable to enumerate USB device [ 1197.683495][T23376] netlink: 'syz.3.5571': attribute type 13 has an invalid length. [ 1197.880488][T23386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5571'. [ 1197.946509][T23376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.953872][T23376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.068665][T15653] usb 1-1: USB disconnect, device number 56 [ 1198.147667][T23376] tipc: Resetting bearer [ 1198.226139][T23390] input: syz0 as /devices/virtual/input/input155 [ 1198.339824][T22610] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1198.393832][T23376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.439609][T23376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.578959][T22610] usb 3-1: Using ep0 maxpacket: 8 [ 1198.606197][T22610] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1198.648457][T22610] usb 3-1: config 220 has an invalid interface number: 2 but max is 0 [ 1198.669262][T23376] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.678335][T23376] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.687289][T23376] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.698836][T23376] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.718807][T22610] usb 3-1: config 220 has an invalid interface number: 2 but max is 0 [ 1198.732837][T22610] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.761433][T22610] usb 3-1: config 220 has no interface number 0 [ 1198.777773][T22610] usb 3-1: config 220 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1198.879437][T23376] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.891942][T23376] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.918775][T22610] usb 3-1: config 220 interface 2 has no altsetting 0 [ 1198.925176][T23376] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.935689][T23376] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.937212][T22610] usb 3-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=9b.39 [ 1198.954468][T22610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.962868][T22610] usb 3-1: Product: syz [ 1198.971047][T23408] netlink: 5028 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1198.980764][T23408] netlink: 5028 bytes leftover after parsing attributes in process `syz.4.5579'. [ 1199.002717][T22610] usb 3-1: Manufacturer: syz [ 1199.007562][T22610] usb 3-1: SerialNumber: syz [ 1199.292120][T23411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.306915][T23411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.447768][T22610] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1199.558571][T22609] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1199.738448][T22609] usb 2-1: device descriptor read/64, error -71 [ 1200.025732][T22610] snd-usb-audio 3-1:220.2: probe with driver snd-usb-audio failed with error -2 [ 1200.043822][T22610] usb 3-1: USB disconnect, device number 85 [ 1200.088340][T22609] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1200.172028][T14438] udevd[14438]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:220.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1200.248769][T22609] usb 2-1: device descriptor read/64, error -71 [ 1200.358995][T22609] usb usb2-port1: attempt power cycle [ 1200.639070][ T9196] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1200.708376][T22609] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1200.765248][T22609] usb 2-1: device descriptor read/8, error -71 [ 1200.788292][ T9196] usb 4-1: Using ep0 maxpacket: 8 [ 1200.795223][ T9196] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.813925][ T9196] usb 4-1: config 0 has no interfaces? [ 1200.837692][ T9196] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1200.868594][ T9196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.907583][ T9196] usb 4-1: config 0 descriptor?? [ 1201.083243][T22609] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1201.091733][T23443] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5586'. [ 1201.164390][T22609] usb 2-1: device descriptor read/8, error -71 [ 1201.278757][T22609] usb usb2-port1: unable to enumerate USB device [ 1201.431916][T23448] vlan2: entered promiscuous mode [ 1201.638225][ T9196] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1201.800301][ T9196] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1201.810394][ T9196] usb 1-1: config 2 has no interface number 0 [ 1201.813075][T23457] netlink: 'syz.2.5596': attribute type 13 has an invalid length. [ 1201.816603][ T9196] usb 1-1: config 2 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.905460][ T9196] usb 1-1: Duplicate descriptor for config 2 interface 1 altsetting 0, skipping [ 1201.940863][ T9196] usb 1-1: config 2 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1201.964539][T23459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1201.993286][ T9196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1202.002673][ T9196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.010770][ T9196] usb 1-1: Product: syz [ 1202.014977][ T9196] usb 1-1: Manufacturer: syz [ 1202.049463][ T9196] usb 1-1: SerialNumber: syz [ 1202.915784][ T9196] cdc_ncm 1-1:2.1: bind() failure [ 1203.154249][ T9196] usb 1-1: USB disconnect, device number 57 [ 1203.182439][T23476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.218911][T23476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.309874][T22610] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1203.334646][ T5890] usb 4-1: USB disconnect, device number 59 [ 1203.568985][T23479] netlink: 'syz.3.5600': attribute type 4 has an invalid length. [ 1203.587189][T23479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5600'. [ 1203.906495][T23486] Cannot find del_set index 2 as target [ 1204.106579][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1204.388318][T22609] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1204.438237][T15653] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1204.538265][T22608] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1204.589288][T15653] usb 2-1: Using ep0 maxpacket: 8 [ 1204.596429][T15653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.598182][T22609] usb 5-1: device descriptor read/64, error -71 [ 1204.613307][T15653] usb 2-1: config 0 has no interfaces? [ 1204.619004][T15653] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1204.629258][T15653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.640799][T15653] usb 2-1: config 0 descriptor?? [ 1205.048197][T22609] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1205.086932][T22608] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 1205.111653][T22608] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1205.147694][T22608] usb 1-1: config 0 has no interface number 0 [ 1205.167006][T22608] usb 1-1: config 0 interface 207 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1205.198068][T22609] usb 5-1: device descriptor read/64, error -71 [ 1205.237237][T22608] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1205.262351][T22608] usb 1-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3 [ 1205.284614][T22608] usb 1-1: Product: syz [ 1205.313065][T22608] usb 1-1: Manufacturer: syz [ 1205.331181][T22609] usb usb5-port1: attempt power cycle [ 1205.346469][T22608] usb 1-1: SerialNumber: syz [ 1205.367093][T22608] usb 1-1: config 0 descriptor?? [ 1205.708076][T22609] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1205.740572][T22609] usb 5-1: device descriptor read/8, error -71 [ 1206.008269][T22608] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1206.089054][T22609] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1206.148685][T22609] usb 5-1: device descriptor read/8, error -71 [ 1206.211415][T22608] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1206.226039][T22608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.243191][T22608] usb 4-1: Product: syz [ 1206.252040][T22608] usb 4-1: Manufacturer: syz [ 1206.260158][T22609] usb usb5-port1: unable to enumerate USB device [ 1206.274018][T22608] usb 4-1: SerialNumber: syz [ 1206.298462][T22608] usb 4-1: config 0 descriptor?? [ 1206.327890][T22608] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 1206.342286][T22608] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1206.366278][T22608] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1206.541165][T22608] usb 4-1: USB disconnect, device number 60 [ 1206.882681][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5615'. [ 1207.198128][T22608] usb 2-1: USB disconnect, device number 86 [ 1207.217374][T23532] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1207.234735][T23531] binder: 23530:23531 ioctl c0306201 800003c0 returned -14 [ 1207.253236][T23532] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5617'. [ 1207.332214][T22609] usb 1-1: USB disconnect, device number 58 [ 1207.613554][T23552] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1208.302702][T23567] Cannot find add_set index 128 as target [ 1209.058228][T15653] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1209.198886][T15653] usb 1-1: device descriptor read/64, error -71 [ 1209.438591][T15653] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1209.483638][T23578] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5632'. [ 1209.493061][ T9196] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1209.603193][T15653] usb 1-1: device descriptor read/64, error -71 [ 1209.630366][T23578] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1209.668091][ T9196] usb 3-1: Using ep0 maxpacket: 8 [ 1209.674838][ T9196] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.686416][ T9196] usb 3-1: config 0 has no interfaces? [ 1209.696532][ T9196] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1209.738755][T15653] usb usb1-port1: attempt power cycle [ 1209.757460][ T9196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.001695][ T5890] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1210.035672][ T9196] usb 3-1: config 0 descriptor?? [ 1210.215833][ T5890] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1210.227683][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.238437][T15653] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1210.265660][ T5890] usb 2-1: Product: syz [ 1210.275356][T15653] usb 1-1: device descriptor read/8, error -71 [ 1210.303783][ T5890] usb 2-1: Manufacturer: syz [ 1210.316330][ T5890] usb 2-1: SerialNumber: syz [ 1210.330531][ T5890] usb 2-1: config 0 descriptor?? [ 1210.353225][ T5890] usb 2-1: selecting invalid altsetting 3 [ 1210.362896][ T5890] comedi comedi0: could not set alternate setting 3 in high speed [ 1210.377099][ T5890] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1210.401320][ T5890] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 1210.560652][T15653] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1210.607265][T15653] usb 1-1: device descriptor read/8, error -71 [ 1210.728616][T15653] usb usb1-port1: unable to enumerate USB device [ 1211.508165][T22608] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1211.671111][T22608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1211.685255][T22608] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1211.696815][T22608] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1211.707624][T22608] usb 4-1: Manufacturer: syz [ 1211.716235][T22608] usb 4-1: config 0 descriptor?? [ 1211.726502][T22608] hub 4-1:0.0: USB hub found [ 1211.921977][T23606] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5641'. [ 1211.936486][T22608] hub 4-1:0.0: 1 port detected [ 1212.634761][T15653] usb 3-1: USB disconnect, device number 87 [ 1212.724668][T22610] usb 2-1: USB disconnect, device number 87 [ 1212.996561][T23622] loop6: detected capacity change from 0 to 524287999 [ 1213.308631][T22610] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1213.502404][T22610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1213.527520][T23638] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1213.535069][T22610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1213.577248][T22610] usb 2-1: can't read configurations, error -61 [ 1213.704291][T22609] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1213.712178][T22608] usb 4-1.1: new full-speed USB device number 62 using dummy_hcd [ 1213.721864][T22610] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1213.733144][T22608] dummy_hcd dummy_hcd.3: usb_device address has changed! [ 1213.878516][T22609] usb 1-1: device descriptor read/64, error -71 [ 1213.904403][T22611] usb 4-1: USB disconnect, device number 61 [ 1213.913745][T22608] usb 4-1-port1: attempt power cycle [ 1213.922937][T22610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1213.934089][T22610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1213.942633][T22610] usb 2-1: can't read configurations, error -61 [ 1213.949657][T22610] usb usb2-port1: attempt power cycle [ 1214.078112][T15653] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1214.139202][T22609] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1214.228182][T15653] usb 3-1: Using ep0 maxpacket: 8 [ 1214.234982][T15653] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.245386][T15653] usb 3-1: config 0 has no interfaces? [ 1214.251476][T15653] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1214.261682][T15653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.280331][T15653] usb 3-1: config 0 descriptor?? [ 1214.285505][T22609] usb 1-1: device descriptor read/64, error -71 [ 1214.303672][T22610] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1214.354372][T22610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1214.380804][T22610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1214.393207][T22610] usb 2-1: can't read configurations, error -61 [ 1214.418517][T22609] usb usb1-port1: attempt power cycle [ 1214.451856][T23650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5656'. [ 1214.531101][T22610] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1214.571406][T22610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1214.583775][T22610] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1214.592890][T22610] usb 2-1: can't read configurations, error -61 [ 1214.600205][T22610] usb usb2-port1: unable to enumerate USB device [ 1214.718063][T22607] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1214.779064][T22609] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1214.819604][T22609] usb 1-1: device descriptor read/8, error -71 [ 1214.880737][T22607] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1214.890079][T22607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.950230][T22607] usb 4-1: config 0 descriptor?? [ 1214.961849][T23663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5660'. [ 1214.971980][T23663] bridge_slave_1: left allmulticast mode [ 1214.981949][T23663] bridge_slave_1: left promiscuous mode [ 1214.988014][T23663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.003839][T23663] bridge_slave_0: left allmulticast mode [ 1215.012503][T23663] bridge_slave_0: left promiscuous mode [ 1215.021423][T23663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.074243][T22609] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1215.108924][T22609] usb 1-1: device descriptor read/8, error -71 [ 1215.229701][T22609] usb usb1-port1: unable to enumerate USB device [ 1215.402782][T22607] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1215.426067][T22607] usb 4-1: USB disconnect, device number 66 [ 1215.518444][T23669] openvswitch: netlink: Message has 20 unknown bytes. [ 1215.525623][T23669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.842883][T23674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1216.327357][T23682] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1216.795208][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1216.816012][T23688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1216.832990][T15653] usb 3-1: USB disconnect, device number 88 [ 1217.014149][T23694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5672'. [ 1217.197068][T23702] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5676'. [ 1217.230252][T23702] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1217.398203][T15653] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1217.498056][T22609] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1217.583910][T23709] netlink: 'syz.0.5679': attribute type 1 has an invalid length. [ 1217.674955][T23709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1217.687439][ T5890] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1217.698695][T22609] usb 3-1: Using ep0 maxpacket: 32 [ 1217.705495][T22609] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1217.714085][T22609] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1217.730276][T22609] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1217.741932][T22609] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1217.776794][T22609] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1217.792069][T22609] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1217.802145][T22609] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1217.819312][T22609] usb 3-1: Product: syz [ 1217.823541][T22609] usb 3-1: Manufacturer: syz [ 1217.845314][T22609] usb 3-1: SerialNumber: syz [ 1217.848355][ T5890] usb 2-1: device descriptor read/64, error -71 [ 1217.874695][T22609] usb 3-1: config 0 descriptor?? [ 1217.900975][T22609] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1217.923843][T22609] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1218.088238][ T5890] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1218.108467][T23703] ldusb 3-1:0.0: Write buffer overflow, 64957 bytes dropped [ 1218.154238][T23717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5681'. [ 1218.182905][ T9196] usb 3-1: USB disconnect, device number 89 [ 1218.241603][ T9196] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1218.250233][ T5890] usb 2-1: device descriptor read/64, error -71 [ 1218.410706][ T5890] usb usb2-port1: attempt power cycle [ 1218.748419][ T9202] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1218.788344][ T5890] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1218.823994][ T5890] usb 2-1: device descriptor read/8, error -71 [ 1218.884115][T22609] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1218.908398][ T9202] usb 1-1: Using ep0 maxpacket: 8 [ 1218.915703][ T9202] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.971185][ T9202] usb 1-1: config 0 has no interfaces? [ 1218.981189][ T9202] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1218.996689][ T9202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.059107][T22609] usb 5-1: Using ep0 maxpacket: 8 [ 1219.062424][ T9202] usb 1-1: config 0 descriptor?? [ 1219.067361][T22609] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1219.079008][T22609] usb 5-1: config 248 has an invalid interface number: 51 but max is 0 [ 1219.087652][T22609] usb 5-1: config 248 has no interface number 0 [ 1219.098162][ T5890] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1219.100527][T22609] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=39.f0 [ 1219.115846][T22609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.126259][T22609] usb 5-1: Product: syz [ 1219.131188][T22609] usb 5-1: Manufacturer: syz [ 1219.136177][T22609] usb 5-1: SerialNumber: syz [ 1219.149127][ T5890] usb 2-1: device descriptor read/8, error -71 [ 1219.268365][ T5890] usb usb2-port1: unable to enumerate USB device [ 1219.365274][T22609] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:248.51/input/input156 [ 1219.395163][ T5186] bcm5974 5-1:248.51: could not read from device [ 1219.412834][ T5186] bcm5974 5-1:248.51: could not read from device [ 1219.423356][T22609] usb 5-1: USB disconnect, device number 72 [ 1219.424737][ T5186] bcm5974 5-1:248.51: could not read from device [ 1219.443160][ T5186] bcm5974 5-1:248.51: could not read from device [ 1220.223953][T23735] FAULT_INJECTION: forcing a failure. [ 1220.223953][T23735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.239912][T23735] CPU: 0 UID: 0 PID: 23735 Comm: syz.4.5687 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1220.239940][T23735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1220.239953][T23735] Call Trace: [ 1220.239963][T23735] [ 1220.239972][T23735] dump_stack_lvl+0x189/0x250 [ 1220.240008][T23735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1220.240037][T23735] ? __pfx__printk+0x10/0x10 [ 1220.240070][T23735] should_fail_ex+0x414/0x560 [ 1220.240095][T23735] _copy_to_user+0x31/0xb0 [ 1220.240125][T23735] video_usercopy+0xeb2/0x14f0 [ 1220.240164][T23735] ? __pfx___video_do_ioctl+0x10/0x10 [ 1220.240192][T23735] ? __pfx_video_usercopy+0x10/0x10 [ 1220.240238][T23735] ? __fget_files+0x2a/0x420 [ 1220.240267][T23735] v4l2_ioctl+0x18a/0x1e0 [ 1220.240298][T23735] v4l2_compat_ioctl32+0x1d4/0x260 [ 1220.240324][T23735] __ia32_compat_sys_ioctl+0x551/0x840 [ 1220.240349][T23735] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1220.240372][T23735] ? __fget_files+0x3a0/0x420 [ 1220.240404][T23735] ? fput+0xa0/0xd0 [ 1220.240433][T23735] ? ksys_write+0x1f0/0x250 [ 1220.240469][T23735] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1220.240495][T23735] ? lockdep_hardirqs_on+0x9c/0x150 [ 1220.240521][T23735] __do_fast_syscall_32+0xb4/0x110 [ 1220.240548][T23735] ? lockdep_hardirqs_on+0x9c/0x150 [ 1220.240575][T23735] do_fast_syscall_32+0x34/0x80 [ 1220.240601][T23735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1220.240625][T23735] RIP: 0023:0xf70de539 [ 1220.240642][T23735] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1220.240660][T23735] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1220.240682][T23735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02c563a [ 1220.240697][T23735] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1220.240709][T23735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1220.240721][T23735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1220.240734][T23735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1220.240762][T23735] [ 1220.248120][ T5890] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1220.632220][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.677180][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1220.703590][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1220.753118][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1220.839004][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1220.873123][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.887702][T23751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5692'. [ 1220.921850][ T5890] usb 3-1: config 0 descriptor?? [ 1221.188663][T15653] usb 4-1: device descriptor read/64, error -71 [ 1221.294765][T23753] xt_nat: multiple ranges no longer supported [ 1221.448241][T15653] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1221.510760][ T9196] usb 1-1: USB disconnect, device number 67 [ 1221.605937][T23729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.614839][T23756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.627580][T23729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.630432][T15653] usb 4-1: config 0 has no interfaces? [ 1221.679545][T15653] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1221.689272][T15653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.697307][T15653] usb 4-1: Product: syz [ 1221.701950][T15653] usb 4-1: Manufacturer: syz [ 1221.706575][T15653] usb 4-1: SerialNumber: syz [ 1221.728233][T23756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.743785][T15653] usb 4-1: config 0 descriptor?? [ 1221.824861][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 1221.833078][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1221.863342][ T5890] usb 3-1: USB disconnect, device number 90 [ 1222.017226][T23749] QAT: Device 127 not found [ 1222.036066][T23762] netlink: 'syz.4.5697': attribute type 13 has an invalid length. [ 1222.260392][T23767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1222.284009][T23771] fuse: Bad value for 'group_id' [ 1222.290430][T23771] fuse: Bad value for 'group_id' [ 1222.533195][T23762] tipc: Resetting bearer [ 1222.538277][ T5890] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1222.564681][T23775] kvm: pic: level sensitive irq not supported [ 1222.565125][T23775] kvm: pic: single mode not supported [ 1222.637169][T23775] kvm: pic: non byte write [ 1222.668315][T15653] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1222.699092][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 1222.710297][ T5890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1222.733924][T23775] kvm: pic: non byte read [ 1222.749220][T23775] kvm: pic: non byte read [ 1222.753135][ T5890] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1222.753716][T23775] kvm: pic: non byte write [ 1222.767482][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1222.780682][ T5890] usb 1-1: Product: syz [ 1222.781999][T23775] kvm: pic: non byte write [ 1222.793199][ T5890] usb 1-1: Manufacturer: syz [ 1222.807346][ T5890] usb 1-1: SerialNumber: syz [ 1222.813079][T15653] usb 3-1: device descriptor read/64, error -71 [ 1222.844247][ T5890] usb 1-1: config 0 descriptor?? [ 1222.867455][T23771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1222.895061][T23762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.959498][T22610] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1223.020902][T23762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.058190][T15653] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1223.091228][T23771] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.5700'. [ 1223.104585][T23771] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1223.123781][T22610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1223.131682][T23771] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1223.156688][T22610] usb 2-1: not running at top speed; connect to a high speed hub [ 1223.182127][T22610] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1223.188208][T15653] usb 3-1: device descriptor read/64, error -71 [ 1223.203923][T22610] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 1223.227412][T22610] usb 2-1: config 2 has no interface number 0 [ 1223.244786][T22610] usb 2-1: config 2 has no interface number 1 [ 1223.257668][T22610] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1223.290283][T22610] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1223.308519][T15653] usb usb3-port1: attempt power cycle [ 1223.319845][T22610] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1223.346309][T22610] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1223.373445][T22610] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1223.402702][ T9196] usb 1-1: USB disconnect, device number 68 [ 1223.419769][T22610] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1223.453235][T23762] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.462488][T23762] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.472223][T23762] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.482801][T23762] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.507358][T22610] usb 2-1: string descriptor 0 read error: -22 [ 1223.516258][T22610] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1223.538740][T22610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.563558][T23762] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.573988][T23762] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.577658][T22610] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input157 [ 1223.582976][T23762] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.583013][T23762] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.668280][T15653] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1223.713688][T15653] usb 3-1: device descriptor read/8, error -71 [ 1223.726789][ C0] xpad 2-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1 [ 1223.748818][T23779] syzkaller0: entered promiscuous mode [ 1223.754365][T23779] syzkaller0: entered allmulticast mode [ 1224.008801][T15653] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1224.028739][T15653] usb 3-1: device descriptor read/8, error -71 [ 1224.140680][T15653] usb usb3-port1: unable to enumerate USB device [ 1224.199891][T22610] usb 2-1: USB disconnect, device number 96 [ 1224.257866][T15653] usb 4-1: USB disconnect, device number 68 [ 1224.387312][T23786] netlink: 'syz.0.5704': attribute type 8 has an invalid length. [ 1224.400735][T23786] netlink: 'syz.0.5704': attribute type 8 has an invalid length. [ 1224.668145][T15653] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1224.748041][T22610] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1224.828021][T15653] usb 4-1: Using ep0 maxpacket: 32 [ 1224.840232][T15653] usb 4-1: config 0 has no interfaces? [ 1224.845808][T15653] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1224.855663][T15653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.879165][T15653] usb 4-1: config 0 descriptor?? [ 1224.909378][T22610] usb 1-1: Using ep0 maxpacket: 8 [ 1224.919736][T22610] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.934866][T22610] usb 1-1: config 0 has no interfaces? [ 1224.941164][T22610] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1224.956389][T22610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.966762][T22610] usb 1-1: config 0 descriptor?? [ 1225.094902][T15653] usb 4-1: USB disconnect, device number 69 [ 1225.910035][T15653] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1226.080224][T15653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.096103][T15653] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1226.137896][T15653] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1226.158310][T15653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.166443][T15653] usb 2-1: Product: syz [ 1226.171360][T15653] usb 2-1: Manufacturer: syz [ 1226.175985][T15653] usb 2-1: SerialNumber: syz [ 1226.199394][T15653] usb 2-1: config 0 descriptor?? [ 1226.249251][T22610] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1226.411447][T22610] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1226.412819][T15653] usb 2-1: USB disconnect, device number 97 [ 1226.436843][T22610] usb 5-1: not running at top speed; connect to a high speed hub [ 1226.452833][T22610] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1226.473023][T22610] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.483075][T22610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.492254][T22610] usb 5-1: Product: syz [ 1226.496557][T22610] usb 5-1: Manufacturer: syz [ 1226.501584][T22610] usb 5-1: SerialNumber: syz [ 1226.512491][T22610] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1226.521871][T22609] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1226.693494][T22609] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1226.702925][T22609] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1226.713690][T22609] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1226.723079][T22609] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.741077][T22609] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1226.755373][T22609] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1226.767795][T22609] usb 3-1: Product: syz [ 1226.772100][T22609] usb 3-1: Manufacturer: syz [ 1226.785424][T22609] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1226.815000][T22609] usb 5-1: USB disconnect, device number 73 [ 1226.990176][T15653] usb 3-1: USB disconnect, device number 95 [ 1227.044147][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5725'. [ 1227.055792][T23845] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5725'. [ 1227.425848][T23860] fuse: Bad value for 'fd' [ 1227.433627][T23861] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5731'. [ 1227.508173][ T9196] usb 1-1: USB disconnect, device number 69 [ 1227.831955][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1227.870532][T23876] binder: 23875:23876 ioctl c0306201 80000100 returned -14 [ 1227.948167][ T9196] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1228.138068][ T9196] usb 1-1: device descriptor read/64, error -71 [ 1228.210605][T23889] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5740'. [ 1228.222332][T23889] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5740'. [ 1228.402439][T23891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1228.407626][ T9196] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1228.425452][T23891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1228.548242][ T9196] usb 1-1: device descriptor read/64, error -71 [ 1228.668353][ T9196] usb usb1-port1: attempt power cycle [ 1229.008082][T15653] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1229.024551][ T9196] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1229.068773][ T9196] usb 1-1: device descriptor read/8, error -71 [ 1229.179992][T15653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.197147][T15653] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.207412][T15653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.221333][T15653] usb 4-1: config 0 descriptor?? [ 1229.252261][T15653] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.318791][ T9196] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1229.350474][ T9196] usb 1-1: device descriptor read/8, error -71 [ 1229.408251][ T5890] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1229.453755][T15653] pwc: send_video_command error -71 [ 1229.464529][T15653] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1229.474890][ T9196] usb usb1-port1: unable to enumerate USB device [ 1229.484249][T15653] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1229.503115][T15653] usb 4-1: USB disconnect, device number 70 [ 1229.554839][T23901] vlan2: entered promiscuous mode [ 1229.561756][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 1229.563702][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.574871][T23901] gretap0: entered promiscuous mode [ 1229.579374][ T5890] usb 3-1: config 0 has no interfaces? [ 1229.589975][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1229.600175][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.611625][ T5890] usb 3-1: config 0 descriptor?? [ 1229.908125][T15653] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1229.988054][ T5890] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1230.064761][T15653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.077419][T15653] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1230.087664][T15653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.109721][T15653] usb 4-1: config 0 descriptor?? [ 1230.122087][T15653] pwc: Askey VC010 type 2 USB webcam detected. [ 1230.158760][ T5890] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1230.174638][ T5890] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1230.197873][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1230.220445][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1230.260686][ T5890] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1230.281557][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1230.300731][ T5890] usb 5-1: Product: syz [ 1230.304965][ T5890] usb 5-1: Manufacturer: syz [ 1230.332905][ T5890] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1230.520787][T15653] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1230.527922][T15653] pwc: recv_control_msg error -32 req 02 val 2700 [ 1230.540286][T15653] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1230.553549][ T5890] usb 5-1: USB disconnect, device number 74 [ 1230.560726][T15653] pwc: recv_control_msg error -32 req 04 val 1000 [ 1230.573143][T23913] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5750'. [ 1230.674538][T15653] pwc: recv_control_msg error -32 req 04 val 1300 [ 1230.683355][T15653] pwc: recv_control_msg error -32 req 04 val 1400 [ 1230.701245][T15653] pwc: recv_control_msg error -32 req 02 val 2000 [ 1230.712761][T15653] pwc: recv_control_msg error -32 req 02 val 2100 [ 1230.723292][T15653] pwc: recv_control_msg error -32 req 04 val 1500 [ 1231.338570][T15653] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.351372][T15653] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.354424][T23921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1231.359468][T15653] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.373718][T15653] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.386304][T15653] pwc: Registered as video103. [ 1231.411615][T15653] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input158 [ 1231.484032][T15653] usb 4-1: USB disconnect, device number 71 [ 1231.563157][T23924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5754'. [ 1231.823509][T23934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5758'. [ 1231.858851][T22610] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1231.868172][ T5890] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1232.028083][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 1232.041193][ T5890] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1232.050365][ T5890] usb 5-1: config 0 has no interface number 0 [ 1232.050553][T22610] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.056633][ T5890] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1232.073492][T22610] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1232.082687][ T5890] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1232.097572][T22610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.105800][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.114116][ T5890] usb 5-1: Product: syz [ 1232.119759][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1232.129552][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1232.152731][ T5890] usb 5-1: Manufacturer: syz [ 1232.157488][ T5890] usb 5-1: SerialNumber: syz [ 1232.166465][T22610] usb 2-1: config 0 descriptor?? [ 1232.196678][T15653] usb 3-1: USB disconnect, device number 96 [ 1232.232316][ T5890] usb 5-1: config 0 descriptor?? [ 1232.279093][T22609] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1232.439435][T23924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5754'. [ 1232.473471][T22609] usb 4-1: Using ep0 maxpacket: 8 [ 1232.487668][T22609] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1232.514151][T22609] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 1232.521446][T23953] binder: 23952:23953 ioctl c0306201 800003c0 returned -14 [ 1232.536994][T22609] usb 4-1: config 11 has no interface number 0 [ 1232.543833][T22609] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1232.555458][T23924] netlink: 'syz.1.5754': attribute type 13 has an invalid length. [ 1232.583613][T22609] usb 4-1: config 11 interface 244 has no altsetting 0 [ 1232.591855][T23924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.610913][T22609] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1232.624301][T23924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.632333][T22609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.632389][T22609] usb 4-1: Product: syz [ 1232.632407][T22609] usb 4-1: Manufacturer: syz [ 1232.632424][T22609] usb 4-1: SerialNumber: syz [ 1232.663510][ T5890] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1232.669925][T23924] batman_adv: batadv0: Interface activated: dummy0 [ 1232.679683][ T5890] usb 5-1: USB disconnect, device number 75 [ 1232.703235][T23924] batadv0: mtu less than device minimum [ 1232.716996][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.729064][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.741492][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.753360][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.765069][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.776713][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.788456][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.800210][T23924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1232.830140][T15653] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1232.860165][ T1157] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1232.877005][ T1157] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1232.899299][ T1157] bond0: now running without any active interface! [ 1232.906815][T22609] usb 4-1: USB disconnect, device number 72 [ 1232.958181][T22610] usbhid 2-1:0.0: can't add hid device: -71 [ 1232.964248][T22610] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1232.999288][T15653] usb 3-1: Using ep0 maxpacket: 32 [ 1233.006419][T15653] usb 3-1: config 2 has an invalid interface number: 157 but max is 0 [ 1233.015288][T22610] usb 2-1: USB disconnect, device number 98 [ 1233.021474][T15653] usb 3-1: config 2 has an invalid descriptor of length 87, skipping remainder of the config [ 1233.021500][T15653] usb 3-1: config 2 has no interface number 0 [ 1233.044488][T15653] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1233.055568][T15653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.064128][T15653] usb 3-1: Product: syz [ 1233.069266][T15653] usb 3-1: Manufacturer: syz [ 1233.073916][T15653] usb 3-1: SerialNumber: syz [ 1233.128092][ T5890] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1233.310813][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.315374][ T5890] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1233.334949][ T5890] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1233.335551][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.361909][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.370638][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1233.373515][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.424041][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.452490][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.459071][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1233.503187][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.536473][ T5890] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1233.536750][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.564590][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1233.575901][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.608450][ T5890] usb 5-1: Product: syz [ 1233.612106][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.638649][ T5890] usb 5-1: Manufacturer: syz [ 1233.672493][ T5890] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1233.861036][T15653] imon 3-1:2.157: unable to register, err -19 [ 1233.884189][T15653] usb 3-1: USB disconnect, device number 97 [ 1233.931703][T22609] usb 5-1: USB disconnect, device number 76 [ 1234.130123][T23978] tipc: Enabled bearer , priority 27 [ 1234.308166][T22610] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1234.458345][T22610] usb 4-1: Using ep0 maxpacket: 8 [ 1234.510419][T22610] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.536377][T22610] usb 4-1: config 0 has no interfaces? [ 1234.546523][T22610] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1234.566337][T22610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.591314][T22610] usb 4-1: config 0 descriptor?? [ 1235.038171][T22610] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1235.156240][T23982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1235.946080][T24004] tipc: Started in network mode [ 1235.968212][T24004] tipc: Node identity ac1414aa, cluster identity 4711 [ 1236.002950][T24004] tipc: Enabled bearer , priority 10 [ 1237.059196][T22609] usb 4-1: USB disconnect, device number 73 [ 1237.128341][T15653] tipc: Node number set to 2886997162 [ 1237.372468][T22610] usb 2-1: device descriptor read/all, error -71 [ 1237.578551][T22609] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1237.740064][T22609] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1237.754093][T22609] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1237.771979][T22609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1237.794556][T22609] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.825165][T22609] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1237.836402][T22609] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1237.863766][T22609] usb 4-1: Product: syz [ 1237.873882][T22609] usb 4-1: Manufacturer: syz [ 1237.919678][T22609] cdc_wdm 4-1:1.0: skipping garbage [ 1237.937852][T22609] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1238.138686][T22609] usb 4-1: USB disconnect, device number 74 [ 1238.753541][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.764064][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.851273][T24052] net_ratelimit: 12 callbacks suppressed [ 1238.851290][T24052] netlink: zone id is out of range [ 1238.869562][T24052] netlink: zone id is out of range [ 1238.890455][T24052] netlink: zone id is out of range [ 1238.901248][T24052] netlink: zone id is out of range [ 1238.906416][T24052] netlink: zone id is out of range [ 1238.966150][T24052] netlink: zone id is out of range [ 1238.976326][T24052] netlink: zone id is out of range [ 1239.015930][T24052] netlink: zone id is out of range [ 1239.048268][T24052] netlink: zone id is out of range [ 1239.059286][T15653] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1239.067456][T24052] netlink: zone id is out of range [ 1239.358678][ T5890] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1239.540788][ T5890] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.551203][ T5890] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1239.564818][ T5890] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.579459][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.640866][ T5890] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.720377][ T5890] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1239.808700][T14438] udevd[14438]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.976835][T24048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.056957][T24048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.104410][T24048] binder: 24044:24048 ioctl 4018620d 0 returned -22 [ 1240.112367][T24048] binder: 24044:24048 ioctl c0306201 0 returned -14 [ 1240.787386][T24080] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5801'. [ 1241.332018][T22609] usb 3-1: USB disconnect, device number 98 [ 1241.389545][ T5890] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1241.500034][ T9196] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1241.563254][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.585752][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.632704][ T5890] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1241.666863][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.691676][ T9196] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1241.716763][ T9196] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1241.737599][ T9196] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1241.748689][ T9196] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.770332][ T9196] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1241.788071][ T5890] usb 4-1: config 0 descriptor?? [ 1241.811854][ T9196] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1241.826544][ T9196] usb 2-1: Product: syz [ 1241.833902][ T9196] usb 2-1: Manufacturer: syz [ 1241.910978][ T9196] cdc_wdm 2-1:1.0: skipping garbage [ 1241.931913][ T9196] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1242.122854][ T9196] usb 2-1: USB disconnect, device number 101 [ 1242.457579][ T5890] megaworld 0003:07B5:0312.0033: item fetching failed at offset 1/5 [ 1242.480751][ T5890] megaworld 0003:07B5:0312.0033: parse failed [ 1242.487096][ T5890] megaworld 0003:07B5:0312.0033: probe with driver megaworld failed with error -22 [ 1243.206621][T24117] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1243.480458][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5815'. [ 1243.908629][T24139] netlink: 'syz.0.5818': attribute type 13 has an invalid length. [ 1244.267359][ T5890] usb 4-1: USB disconnect, device number 75 [ 1245.089601][ T5890] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1245.277426][ T5890] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.318678][ T5890] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1245.398250][ T5890] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1245.413606][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.432821][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1245.533277][ T5890] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1245.795691][T24168] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1245.849549][T24134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.861443][T24168] net_ratelimit: 38 callbacks suppressed [ 1245.861461][T24168] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1245.888794][T24134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.909659][T24134] binder: 24126:24134 ioctl 4018620d 0 returned -22 [ 1245.952619][T24134] binder: 24126:24134 ioctl c0306201 0 returned -14 [ 1247.052035][T15653] usb 5-1: USB disconnect, device number 77 [ 1247.264224][T24200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5838'. [ 1247.403547][T24204] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1247.423462][T24204] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1247.432643][T24204] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1247.440911][T24204] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1247.451790][T24204] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1247.460057][T24204] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1247.671598][T24209] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1247.671598][T24209] program syz.0.5839 not setting count and/or reply_len properly [ 1247.974677][T24217] FAULT_INJECTION: forcing a failure. [ 1247.974677][T24217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.989017][T24216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5842'. [ 1248.043449][T24217] CPU: 1 UID: 0 PID: 24217 Comm: syz.3.5843 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1248.043479][T24217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1248.043491][T24217] Call Trace: [ 1248.043499][T24217] [ 1248.043508][T24217] dump_stack_lvl+0x189/0x250 [ 1248.043544][T24217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1248.043574][T24217] ? __pfx__printk+0x10/0x10 [ 1248.043608][T24217] should_fail_ex+0x414/0x560 [ 1248.043634][T24217] _copy_to_user+0x31/0xb0 [ 1248.043664][T24217] simple_read_from_buffer+0xe1/0x170 [ 1248.043695][T24217] proc_fail_nth_read+0x1df/0x250 [ 1248.043737][T24217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.043769][T24217] ? rw_verify_area+0x258/0x650 [ 1248.043791][T24217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1248.043821][T24217] vfs_read+0x1fd/0x980 [ 1248.043850][T24217] ? __pfx___mutex_lock+0x10/0x10 [ 1248.043876][T24217] ? __pfx_vfs_read+0x10/0x10 [ 1248.043900][T24217] ? __fget_files+0x2a/0x420 [ 1248.043931][T24217] ? __fget_files+0x3a0/0x420 [ 1248.043956][T24217] ? __fget_files+0x2a/0x420 [ 1248.043992][T24217] ksys_read+0x145/0x250 [ 1248.044018][T24217] ? __pfx_ksys_read+0x10/0x10 [ 1248.044043][T24217] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1248.044070][T24217] ? lockdep_hardirqs_on+0x9c/0x150 [ 1248.044096][T24217] __do_fast_syscall_32+0xb4/0x110 [ 1248.044123][T24217] ? lockdep_hardirqs_on+0x9c/0x150 [ 1248.044152][T24217] do_fast_syscall_32+0x34/0x80 [ 1248.044179][T24217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1248.044204][T24217] RIP: 0023:0xf707e539 [ 1248.044221][T24217] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1248.044239][T24217] RSP: 002b:00000000f506e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1248.044260][T24217] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f506e620 [ 1248.044273][T24217] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 1248.044285][T24217] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1248.044296][T24217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1248.044308][T24217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1248.044337][T24217] [ 1248.283050][T15653] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1248.468918][T15653] usb 1-1: Using ep0 maxpacket: 8 [ 1248.475318][T15653] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1248.485276][T15653] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1248.497526][T15653] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 54446, setting to 1024 [ 1248.509738][T15653] usb 1-1: config 6 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1248.531007][T15653] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1248.540293][T15653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.548466][T15653] usb 1-1: Product: syz [ 1248.553945][T24220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.562867][T15653] usb 1-1: Manufacturer: syz [ 1248.567497][T15653] usb 1-1: SerialNumber: syz [ 1248.570379][T24220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.594801][T24204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1248.627501][T24224] xt_nat: multiple ranges no longer supported [ 1248.635362][T15653] hso 1-1:6.0: Can't find BULK OUT endpoint [ 1248.708044][T22609] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1248.724333][T24220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.733920][T24220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.741437][T24227] netlink: 'syz.3.5846': attribute type 4 has an invalid length. [ 1248.846166][T24204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.899486][T22609] usb 3-1: Using ep0 maxpacket: 32 [ 1248.906149][T22609] usb 3-1: device descriptor read/all, error -61 [ 1248.913405][T24204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.924489][T24204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.959558][T24204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.001392][T22610] usb 1-1: USB disconnect, device number 75 [ 1249.079754][T22609] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1249.278666][T22609] usb 3-1: device descriptor read/64, error -71 [ 1249.408658][T22609] usb usb3-port1: attempt power cycle [ 1249.418883][T22610] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1249.578377][T22610] usb 5-1: device descriptor read/64, error -71 [ 1249.799052][T22609] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1249.818991][T22610] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1249.831421][T22609] usb 3-1: device descriptor read/8, error -71 [ 1249.981339][T22610] usb 5-1: device descriptor read/64, error -71 [ 1250.089301][T22610] usb usb5-port1: attempt power cycle [ 1250.095174][T22609] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1250.118665][T22609] usb 3-1: device descriptor read/8, error -71 [ 1250.232898][T22609] usb usb3-port1: unable to enumerate USB device [ 1250.438290][T22610] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1250.469092][T22610] usb 5-1: device descriptor read/8, error -71 [ 1250.522401][T24262] netlink: 'syz.1.5856': attribute type 13 has an invalid length. [ 1250.619340][T24262] batman_adv: batadv0: Interface deactivated: dummy0 [ 1250.728758][T22610] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1250.773131][T22610] usb 5-1: device descriptor read/8, error -71 [ 1250.789125][T24262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5856'. [ 1250.888410][T22610] usb usb5-port1: unable to enumerate USB device [ 1251.185946][T24274] x_tables: duplicate underflow at hook 2 [ 1251.259320][ T9202] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1251.989082][T22610] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1252.178534][T22610] usb 3-1: Using ep0 maxpacket: 32 [ 1252.185830][T22610] usb 3-1: config 0 has no interfaces? [ 1252.198996][T22610] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1252.355497][T22610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.358065][T15653] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1252.450944][T22609] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1252.470267][T22610] usb 3-1: config 0 descriptor?? [ 1252.607356][T15653] usb 1-1: config 0 has no interfaces? [ 1252.640262][T22609] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1252.651364][T22609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 1252.675659][T22609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.698822][T15653] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1252.707671][T22610] usb 3-1: USB disconnect, device number 103 [ 1252.716830][T15653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.734709][T22609] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1252.749508][T22609] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 1252.753677][T15653] usb 1-1: Product: syz [ 1252.761702][T22609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.763784][T15653] usb 1-1: Manufacturer: syz [ 1252.781024][T15653] usb 1-1: SerialNumber: syz [ 1252.786278][T22609] usb 2-1: config 0 descriptor?? [ 1252.837650][T15653] usb 1-1: config 0 descriptor?? [ 1253.281134][T24298] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1253.359834][T24317] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1253.526498][T24300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.559378][T24300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.627105][T22609] usb 2-1: string descriptor 0 read error: -71 [ 1253.643330][T22609] uclogic 0003:5543:0045.0034: failed retrieving string descriptor #200: -71 [ 1253.724723][T22609] uclogic 0003:5543:0045.0034: failed retrieving pen parameters: -71 [ 1253.752956][T22609] uclogic 0003:5543:0045.0034: failed probing pen v2 parameters: -71 [ 1253.774182][T22609] uclogic 0003:5543:0045.0034: failed probing parameters: -71 [ 1253.804849][T22609] uclogic 0003:5543:0045.0034: probe with driver uclogic failed with error -71 [ 1253.872470][T22609] usb 2-1: USB disconnect, device number 102 [ 1254.765091][T24337] input: syz0 as /devices/virtual/input/input160 [ 1254.878249][T22610] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1255.436021][T15653] usb 1-1: USB disconnect, device number 76 [ 1255.619671][T22610] usb 2-1: Using ep0 maxpacket: 16 [ 1255.656381][T22610] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1255.695759][T22610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.715995][T22610] usb 2-1: Product: syz [ 1255.737699][T22610] usb 2-1: Manufacturer: syz [ 1255.754829][T22610] usb 2-1: SerialNumber: syz [ 1255.779881][T22610] usb 2-1: config 0 descriptor?? [ 1255.958895][ T9202] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1256.032412][T22610] usb_8dev 2-1:0.0 can0: sending command message failed [ 1256.054351][T22610] usb_8dev 2-1:0.0 can0: can't get firmware version [ 1256.119282][ T9202] usb 5-1: Using ep0 maxpacket: 32 [ 1256.138248][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.152205][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.175060][ T9202] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1256.190302][ T9202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.208525][T22610] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 1256.234655][T22610] usb 2-1: USB disconnect, device number 103 [ 1256.241409][ T9202] usb 5-1: config 0 descriptor?? [ 1256.668499][ T9202] ft260 0003:0403:6030.0035: item fetching failed at offset 0/2 [ 1256.743277][ T9202] ft260 0003:0403:6030.0035: failed to parse HID [ 1256.789383][T24368] netlink: 5028 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1256.798861][T24368] netlink: 5028 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1256.817401][ T9202] ft260 0003:0403:6030.0035: probe with driver ft260 failed with error -22 [ 1256.886491][T15653] usb 5-1: USB disconnect, device number 82 [ 1256.974894][T24371] vlan2: entered promiscuous mode [ 1258.158984][T24409] Cannot find del_set index 2 as target [ 1258.336007][T24414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5910'. [ 1258.448866][T22610] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1258.610880][T22610] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1258.627009][T22610] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1258.658116][T22610] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1258.668351][T15653] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1258.687363][T22610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.707638][T22610] usb 4-1: Product: syz [ 1258.714211][T22610] usb 4-1: Manufacturer: syz [ 1258.732506][T22610] usb 4-1: SerialNumber: syz [ 1258.758774][T22610] usb 4-1: config 0 descriptor?? [ 1258.766402][T24411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1258.784829][T24411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1258.818760][T15653] usb 2-1: device descriptor read/64, error -71 [ 1259.013154][T24411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1259.021665][T24411] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1259.068064][T15653] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1259.169108][T22609] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1259.198079][T15653] usb 2-1: device descriptor read/64, error -71 [ 1259.243059][T22610] Error reading MAC address [ 1259.308501][T15653] usb usb2-port1: attempt power cycle [ 1259.340650][T22609] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1259.351934][T22609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.364503][T22609] usb 1-1: config 0 descriptor?? [ 1259.648189][T15653] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1259.680994][T15653] usb 2-1: device descriptor read/8, error -71 [ 1259.777989][T22609] ath6kl: Unsupported hardware version: 0x0 [ 1259.796680][T22609] ath6kl: Failed to init ath6kl core: -22 [ 1259.810323][T22609] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1259.852218][ T30] audit: type=1326 audit(1747064925.786:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1259.876038][ T30] audit: type=1326 audit(1747064925.786:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1259.898804][ T30] audit: type=1326 audit(1747064925.786:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1259.922688][ T30] audit: type=1326 audit(1747064925.786:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1259.945588][T15653] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1259.959983][ T30] audit: type=1326 audit(1747064925.786:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1259.978083][T22609] usb 4-1: USB disconnect, device number 77 [ 1259.983270][ T30] audit: type=1326 audit(1747064925.786:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1260.018610][T15653] usb 2-1: device descriptor read/8, error -71 [ 1260.054703][ T30] audit: type=1326 audit(1747064925.786:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1260.084181][ T30] audit: type=1326 audit(1747064925.786:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1260.111991][ T30] audit: type=1326 audit(1747064925.786:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1260.134427][T15653] usb usb2-port1: unable to enumerate USB device [ 1260.148999][ T30] audit: type=1326 audit(1747064925.786:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24426 comm="syz.2.5915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7fc00000 [ 1260.151158][T24438] binder: 24437:24438 ioctl c0306201 800003c0 returned -14 [ 1260.479076][T22609] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1260.579898][T15653] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1260.744476][T15653] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1260.763407][T15653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.788680][T15653] usb 4-1: config 0 descriptor?? [ 1260.998279][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.007268][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.022364][T15653] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1261.062430][T15653] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1261.105938][T15653] [drm:udl_init] *ERROR* Selecting channel failed [ 1261.165100][T15653] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1261.178887][T15653] [drm] Initialized udl on minor 2 [ 1261.187407][T15653] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1261.203705][T15653] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1261.212405][ T9202] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1261.220633][ T9202] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1261.234551][T15653] usb 4-1: USB disconnect, device number 78 [ 1261.532620][T24470] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5928'. [ 1261.543865][T24470] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1261.700780][T15653] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1261.779783][T24472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.799213][T24472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.814155][T24480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.824683][T24480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.838134][T17176] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1261.868161][T15653] usb 2-1: Using ep0 maxpacket: 8 [ 1261.876327][T15653] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.886757][T15653] usb 2-1: config 0 has no interfaces? [ 1261.893056][T15653] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1261.902236][T15653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.918691][T15653] usb 2-1: config 0 descriptor?? [ 1261.953502][T22610] usb 1-1: USB disconnect, device number 77 [ 1262.168307][T22609] usb 5-1: device descriptor read/64, error -71 [ 1262.348108][T22610] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1262.429098][T22609] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1262.511049][T22610] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1262.522124][T22610] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1262.533255][T22610] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1262.547327][T22610] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.604170][T22610] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1262.615818][T22610] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1262.629441][T22609] usb 5-1: config 0 has an invalid interface number: 114 but max is 0 [ 1262.642512][T22610] usb 1-1: Product: syz [ 1262.648187][T22609] usb 5-1: config 0 has no interface number 0 [ 1262.654393][T22610] usb 1-1: Manufacturer: syz [ 1262.667750][T22609] usb 5-1: config 0 interface 114 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1262.684992][T22610] cdc_wdm 1-1:1.0: skipping garbage [ 1262.692585][T22610] cdc_wdm 1-1:1.0: skipping garbage [ 1262.697853][T22609] usb 5-1: config 0 interface 114 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1262.707909][T22610] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1262.725471][T22609] usb 5-1: config 0 interface 114 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1262.752050][T22609] usb 5-1: New USB device found, idVendor=bcc7, idProduct=f7e6, bcdDevice= d.10 [ 1262.761436][T22609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1262.811481][T22609] usb 5-1: Product: syz [ 1262.825570][T22609] usb 5-1: Manufacturer: syz [ 1262.837058][T22609] usb 5-1: SerialNumber: syz [ 1262.850124][T22609] usb 5-1: config 0 descriptor?? [ 1262.866085][T22609] usb-storage 5-1:0.114: USB Mass Storage device detected [ 1262.921997][T15653] usb 1-1: USB disconnect, device number 78 [ 1263.061916][T22609] usb 5-1: USB disconnect, device number 84 [ 1263.297711][T24501] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1264.592318][T15653] usb 2-1: USB disconnect, device number 108 [ 1265.129790][T24541] netlink: 'syz.2.5948': attribute type 13 has an invalid length. [ 1265.200576][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1265.200597][ T30] audit: type=1326 audit(1747064931.136:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.212155][T24548] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1265.255121][ T30] audit: type=1326 audit(1747064931.176:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.313660][ T30] audit: type=1326 audit(1747064931.206:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.337581][ T30] audit: type=1326 audit(1747064931.216:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.375474][ T30] audit: type=1326 audit(1747064931.216:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.401735][ T30] audit: type=1326 audit(1747064931.216:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.425157][ T30] audit: type=1326 audit(1747064931.216:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.459786][T24553] gre0: left promiscuous mode [ 1265.465436][T24553] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5952'. [ 1265.480305][T24553] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1265.526816][T22610] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1265.529386][ T30] audit: type=1326 audit(1747064931.216:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24544 comm="syz.3.5951" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1265.753792][T22610] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1265.762827][T22610] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1265.778625][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1265.792520][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1265.801767][T22610] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1265.811250][T22610] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1265.828796][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1265.840892][T22610] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1265.848836][T15653] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1265.850717][T22610] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1265.881648][T22610] usb 2-1: Product: syz [ 1265.886606][T22610] usb 2-1: Manufacturer: syz [ 1265.945073][T22610] cdc_wdm 2-1:1.0: skipping garbage [ 1265.952519][T22610] cdc_wdm 2-1:1.0: skipping garbage [ 1265.958239][T22610] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1266.039572][T15653] usb 1-1: Using ep0 maxpacket: 16 [ 1266.046895][T15653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.059493][T15653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.071102][T15653] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1266.087289][T15653] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1266.105135][T15653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.129620][T15653] usb 1-1: config 0 descriptor?? [ 1266.156792][T22609] usb 2-1: USB disconnect, device number 109 [ 1266.238133][T22610] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1266.350530][T24558] xt_TCPMSS: Only works on TCP SYN packets [ 1266.438064][T22610] usb 5-1: Using ep0 maxpacket: 8 [ 1266.454261][T22610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.468103][T22610] usb 5-1: config 0 has no interfaces? [ 1266.474362][T22610] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1266.484766][T22610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.533254][T22610] usb 5-1: config 0 descriptor?? [ 1266.585797][T15653] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1266.594889][T15653] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1266.603895][T15653] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1266.613279][T15653] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1266.628063][T15653] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1266.635646][T15653] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 1266.694570][T15653] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0036/input/input161 [ 1266.745498][T15653] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1267.083585][T24570] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1267.218354][T15653] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1267.358560][T15653] usb 3-1: device descriptor read/64, error -71 [ 1267.598503][T15653] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1267.728314][T22610] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1267.732676][T15653] usb 3-1: device descriptor read/64, error -71 [ 1267.850879][T15653] usb usb3-port1: attempt power cycle [ 1267.858417][T22610] usb 4-1: device descriptor read/64, error -71 [ 1268.098420][T22610] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1268.188956][T15653] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1268.218866][T15653] usb 3-1: device descriptor read/8, error -71 [ 1268.228202][T22610] usb 4-1: device descriptor read/64, error -71 [ 1268.338587][T22610] usb usb4-port1: attempt power cycle [ 1268.458375][T15653] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1268.479355][T15653] usb 3-1: device descriptor read/8, error -71 [ 1268.589991][T15653] usb usb3-port1: unable to enumerate USB device [ 1268.636284][T22607] usb 1-1: USB disconnect, device number 79 [ 1268.678740][T22610] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1268.728930][T22610] usb 4-1: device descriptor read/8, error -71 [ 1268.977218][T22607] usb 5-1: USB disconnect, device number 85 [ 1268.986316][T22610] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1269.061554][T22610] usb 4-1: device descriptor read/8, error -71 [ 1269.353354][T22610] usb usb4-port1: unable to enumerate USB device [ 1269.551392][T24595] FAULT_INJECTION: forcing a failure. [ 1269.551392][T24595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.613930][ C0] [ 1269.616306][ C0] ============================= [ 1269.621259][ C0] [ BUG: Invalid wait context ] [ 1269.626127][ C0] 6.15.0-rc6-syzkaller #0 Not tainted [ 1269.631514][ C0] ----------------------------- [ 1269.636373][ C0] swapper/0/0 is trying to lock: [ 1269.641320][ C0] ffffc9000f162410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1269.650849][ C0] other info that might help us debug this: [ 1269.656758][ C0] context-{2:2} [ 1269.660233][ C0] 2 locks held by swapper/0/0: [ 1269.665001][ C0] #0: ffffffff8df3d860 (rcu_read_lock){....}-{1:3}, at: sched_core_balance+0xc9/0xf00 [ 1269.674714][ C0] #1: ffffc9000f162958 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 1269.684784][ C0] stack backtrace: [ 1269.688520][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1269.688545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1269.688559][ C0] Call Trace: [ 1269.688567][ C0] [ 1269.688577][ C0] dump_stack_lvl+0x189/0x250 [ 1269.688612][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.688640][ C0] ? __pfx__printk+0x10/0x10 [ 1269.688661][ C0] ? print_lock_name+0xde/0x100 [ 1269.688694][ C0] __lock_acquire+0xbcf/0xd20 [ 1269.688725][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1269.688746][ C0] lock_acquire+0x120/0x360 [ 1269.688773][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1269.688796][ C0] ? __lock_acquire+0xaac/0xd20 [ 1269.688826][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 1269.688848][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1269.688870][ C0] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1269.688900][ C0] ? xa_load+0x1ea/0x210 [ 1269.688929][ C0] kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1269.688950][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1269.688975][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1269.688996][ C0] ? kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 1269.689019][ C0] xen_timer_callback+0x109/0x220 [ 1269.689043][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 1269.689064][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 1269.689103][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1269.689132][ C0] ? read_tsc+0x9/0x20 [ 1269.689154][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1269.689195][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1269.689223][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1269.689245][ C0] [ 1269.689253][ C0] [ 1269.689260][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1269.689282][ C0] RIP: 0010:sched_core_balance+0x156/0xf00 [ 1269.689310][ C0] Code: 4c 6a 8b e8 1c 43 0b 00 4c 89 74 24 68 4c 89 7c 24 48 e9 3b 0d 00 00 4c 89 f7 e8 65 94 c5 09 e8 30 47 34 00 fb 48 8b 5c 24 70 <83> fb 08 0f 83 06 0d 00 00 4c 8d 34 dd 10 ec 96 8d 4c 89 f0 48 c1 [ 1269.689329][ C0] RSP: 0018:ffffffff8dc07980 EFLAGS: 00000282 [ 1269.689349][ C0] RAX: ca64324e121b4100 RBX: 0000000000000000 RCX: ca64324e121b4100 [ 1269.689363][ C0] RDX: 0000000000000000 RSI: ffffffff8d74b4c4 RDI: ffffffff8bc1d2e0 [ 1269.689377][ C0] RBP: ffffffff8dc07ae8 R08: ffffffff8f7ef677 R09: 1ffffffff1efdece [ 1269.689393][ C0] R10: dffffc0000000000 R11: fffffbfff1efdecf R12: ffff8880b8839b40 [ 1269.689409][ C0] R13: dffffc0000000000 R14: ffff8880b8839b40 R15: 0000000000000000 [ 1269.689435][ C0] ? __lock_acquire+0xaac/0xd20 [ 1269.689464][ C0] ? sched_core_balance+0xc9/0xf00 [ 1269.689489][ C0] ? finish_task_switch+0x18b/0x950 [ 1269.689515][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 1269.689546][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 1269.689571][ C0] finish_task_switch+0x3a4/0x950 [ 1269.689600][ C0] __schedule+0x16ea/0x4cd0 [ 1269.689629][ C0] ? schedule_idle+0x52/0x90 [ 1269.689652][ C0] ? __pfx___schedule+0x10/0x10 [ 1269.689675][ C0] ? flush_smp_call_function_queue+0x116/0x250 [ 1269.689707][ C0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 1269.689731][ C0] schedule_idle+0x52/0x90 [ 1269.689752][ C0] do_idle+0x4ad/0x510 [ 1269.689772][ C0] ? __pfx_do_idle+0x10/0x10 [ 1269.689789][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1269.689819][ C0] cpu_startup_entry+0x44/0x60 [ 1269.689837][ C0] rest_init+0x2de/0x300 [ 1269.689865][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1269.689903][ C0] start_kernel+0x470/0x4f0 [ 1269.689927][ C0] x86_64_start_reservations+0x2a/0x30 [ 1269.689955][ C0] x86_64_start_kernel+0x66/0x70 [ 1269.689982][ C0] common_startup_64+0x13e/0x147 [ 1269.690018][ C0] [ 1270.128297][T24595] CPU: 1 UID: 0 PID: 24595 Comm: syz.4.5967 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 1270.128332][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1270.128346][T24595] Call Trace: [ 1270.128354][T24595] [ 1270.128363][T24595] dump_stack_lvl+0x189/0x250 [ 1270.128404][T24595] ? __lock_acquire+0xaac/0xd20 [ 1270.128434][T24595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1270.128462][T24595] ? __pfx__printk+0x10/0x10 [ 1270.128481][T24595] ? __might_fault+0xb0/0x130 [ 1270.128512][T24595] should_fail_ex+0x414/0x560 [ 1270.128534][T24595] _copy_from_user+0x2d/0xb0 [ 1270.128570][T24595] get_compat_msghdr+0xad/0x4a0 [ 1270.128597][T24595] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1270.128627][T24595] ___sys_sendmsg+0x193/0x2a0 [ 1270.128655][T24595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.128698][T24595] ? __fget_files+0x2a/0x420 [ 1270.128724][T24595] ? __fget_files+0x3a0/0x420 [ 1270.128755][T24595] __sys_sendmsg+0x164/0x220 [ 1270.128782][T24595] ? __pfx___sys_sendmsg+0x10/0x10 [ 1270.128815][T24595] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1270.128842][T24595] ? lockdep_hardirqs_on+0x9c/0x150 [ 1270.128866][T24595] __do_fast_syscall_32+0xb4/0x110 [ 1270.128892][T24595] ? lockdep_hardirqs_on+0x9c/0x150 [ 1270.128917][T24595] do_fast_syscall_32+0x34/0x80 [ 1270.128943][T24595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1270.128967][T24595] RIP: 0023:0xf70de539 [ 1270.128983][T24595] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1270.129001][T24595] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1270.129023][T24595] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 1270.129038][T24595] RDX: 0000000024000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 1270.129050][T24595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1270.129063][T24595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1270.129075][T24595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1270.129096][T24595] [ 1271.029254][T24580] syz_tun (unregistering): left allmulticast mode [ 1271.784810][ T13] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1272.418282][ T5832] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1272.424644][T24589] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 1272.730807][ T13] bond0 (unregistering): (slave 4): Releasing backup interface [ 1272.743444][ T13] bond0 (unregistering): Released all slaves [ 1272.849706][ T13] bond1 (unregistering): Released all slaves [ 1272.859595][ T13] bond2 (unregistering): Released all slaves [ 1272.869092][ T13] bond3 (unregistering): Released all slaves [ 1272.976836][ T13] bond4 (unregistering): Released all slaves [ 1273.065141][ T13] tipc: Disabling bearer [ 1273.081945][ T13] tipc: Left network mode [ 1273.325975][ T13] hsr_slave_0: left promiscuous mode [ 1273.332737][ T13] hsr_slave_1: left promiscuous mode [ 1273.342058][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.351263][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.373975][ T13] pimreg3 (unregistering): left allmulticast mode [ 1273.679983][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1273.715394][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1274.301024][ T13] IPVS: stop unused estimator thread 0... [ 1275.094864][ T13] bridge_slave_1: left allmulticast mode [ 1275.102134][ T13] bridge_slave_1: left promiscuous mode [ 1275.107872][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.116249][ T13] bridge_slave_0: left allmulticast mode [ 1275.123254][ T13] bridge_slave_0: left promiscuous mode [ 1275.129412][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.144786][ T13] bridge_slave_1: left allmulticast mode [ 1275.150732][ T13] bridge_slave_1: left promiscuous mode [ 1275.156411][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.164715][ T13] bridge_slave_0: left allmulticast mode [ 1275.170627][ T13] bridge_slave_0: left promiscuous mode [ 1275.176275][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.224370][ T13] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 1275.262950][ T13] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 1275.613592][ T13] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1277.002982][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.012553][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.021954][ T13] bond0 (unregistering): Released all slaves [ 1277.122989][ T13] bond1 (unregistering): Released all slaves [ 1277.223824][ T13] bond2 (unregistering): Released all slaves [ 1277.324197][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.334194][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.343443][ T13] bond0 (unregistering): Released all slaves [ 1277.353177][ T13] bond1 (unregistering): Released all slaves [ 1277.362614][ T13] bond2 (unregistering): Released all slaves [ 1277.471180][ T13] bond3 (unregistering): Released all slaves [ 1277.572371][ T13] bond4 (unregistering): Released all slaves [ 1277.677383][ T13] bond5 (unregistering): Released all slaves [ 1277.780239][ T13] bond6 (unregistering): Released all slaves [ 1277.880619][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.890140][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.899390][ T13] bond0 (unregistering): Released all slaves [ 1277.995466][ T13] tipc: Disabling bearer [ 1278.001288][ T13] tipc: Disabling bearer [ 1278.015078][ T13] tipc: Disabling bearer [ 1278.020693][ T13] tipc: Left network mode [ 1278.034698][ T13] tipc: Disabling bearer [ 1278.047696][ T13] tipc: Left network mode [ 1278.070646][ T13] tipc: Disabling bearer [ 1278.075788][ T13] tipc: Left network mode [ 1279.107206][ T13] hsr_slave_0: left promiscuous mode [ 1279.113624][ T13] hsr_slave_1: left promiscuous mode [ 1279.120060][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.127713][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.145684][ T13] hsr_slave_0: left promiscuous mode [ 1279.151586][ T13] hsr_slave_1: left promiscuous mode [ 1279.157564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.167542][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.181177][ T13] hsr_slave_0: left promiscuous mode [ 1279.187124][ T13] hsr_slave_1: left promiscuous mode [ 1279.193219][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 1279.202199][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.210389][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.561240][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1279.597049][ T13] team0 (unregistering): Port device team_slave_0 removed