last executing test programs: 6m6.620992138s ago: executing program 1 (id=5040): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x1, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x3, 0x4, 0x0, 0x3}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000ec7da3d1fa70e9223955bbf631a52b12f775b69698d8d6d70f87a7677e0c99"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}], 0x4, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) close(0xffffffffffffffff) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) 6m5.690709848s ago: executing program 1 (id=5046): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001040)={@broadcast, @link_local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="3650c62098aa400100ae1fe1"}}}}}, 0x0) 6m5.5355461s ago: executing program 1 (id=5047): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f0000000700)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53", 0x0, 0xde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc}, 0x50) r0 = syz_open_dev$sg(0x0, 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 6m5.378136378s ago: executing program 1 (id=5049): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) 6m4.942942254s ago: executing program 1 (id=5055): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000002c0)) 6m3.878272107s ago: executing program 1 (id=5062): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 5m48.821601877s ago: executing program 32 (id=5062): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 5.918583664s ago: executing program 0 (id=7161): io_setup(0x8, 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000080)="01000000", 0x4, 0x2a25}]) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x400000000}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x5, 0x0, 0x0, 0x2000000}}, 0xe4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x102, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050300000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="ef1c2bbd4b1b077e7858"], 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000100)="f2a3caf12c99b46e9ed0cce71dc77a0004", 0x11}, {&(0x7f00000016c0)="5ffc3ad4abe503f06ce1a25984bb25d259670508d36959f4a65d6cd757fac9efaebdb08d54a99c7acca51382e8593143e8f8a994ea7038f79294e86ff9091af35fa653e21e06a9dc090065eba100000000e2bf719a3e87458ba1dfb310f29f479d15f660d1dce325852755fa2114398ff50dbf18c5d7fbc2938057472624b76d77946546fa0c6967d5fe87210dd639070cd9e8f46a34919cf9886abb672e8b746898a621a814e6f507f347ab55a005e9275651bf", 0xb4}], 0x2}}, {{0x0, 0x32, &(0x7f0000004e80)=[{&(0x7f0000001600)="078e120cf166edf952d33b581d6f13d4a00b86a4de3b3d0fdbf1815d7da0bc56175df84627561d5db874097a0edfebde26b4dea1a9c3c73b86778ce63eadedf0ff3463a00dd75616e94810b7325be6912dcd838e8f5f9defc38b04267f69d8e7e62d6960eefe7662bb41253aa8c24440393a694f63daa153b247f15432d73bd38bdf2ebdc56b58bbd969e6b2859e83fa45004baf86a40e2b9bd41afaa0d8cfb623bae18407349b121293ae5f33f5d4df7f9cdf", 0xb3}], 0x1}}], 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xbc, 0x20000005, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40500000000000071"], 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1fd}, 0x94) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000140)='G:', 0x2}], 0x1, 0x9, 0x26d0d5f1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 5.305453862s ago: executing program 5 (id=7166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYRES32=r2, @ANYBLOB="01000000000000000c001a800800048004"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.190022667s ago: executing program 2 (id=7167): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x5, 0xffffffff}, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x9) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f3", 0xb7}], 0x1, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x47}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x9e, [@private=0xa010101, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @lsrr={0x83, 0xb, 0x91, [@remote, @dev={0xac, 0x14, 0x14, 0x1e}]}, @noop]}}}], 0xb0}, 0x40800) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, 0x0}, 0x0) 5.156202435s ago: executing program 5 (id=7168): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 4.969934678s ago: executing program 5 (id=7170): syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$HDIO_GETGEO(r5, 0x301, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000400)={[0x5, 0x0, 0x3797464b, 0xf, 0x1000, 0x1fe, 0x1002, 0x2000000002, 0x10000fffb, 0x201, 0x4, 0x2, 0x8bd8, 0xa, 0x6, 0x20], 0x26000, 0x216156}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.036599625s ago: executing program 0 (id=7173): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002f86dd", 0xe}], 0x1}, 0x0) 3.97624425s ago: executing program 2 (id=7174): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200000000000000014001a80100004800c0009"], 0x34}}, 0x0) 3.777086037s ago: executing program 2 (id=7176): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) syz_open_dev$audion(0x0, 0x8, 0xa8c20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a000006"], 0xbc}}, 0x40) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000000)={0x0, 0xbc3, 0x83}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r7, 0x0, &(0x7f0000000880)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81], 0x5}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) 3.631913139s ago: executing program 0 (id=7178): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.404173822s ago: executing program 0 (id=7180): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 3.175363955s ago: executing program 5 (id=7183): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0xa001, 0x6011, 0x0, 0x0}], 0x2}) 3.080286372s ago: executing program 0 (id=7184): io_setup(0x8, 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000080)="01000000", 0x4, 0x2a25}]) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x400000000}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x5, 0x0, 0x0, 0x2000000}}, 0xe4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x102, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050300000000000000006b00000008000300", @ANYBLOB="ef1c2bbd4b1b077e785801"], 0x1c}, 0x1, 0x0, 0x0, 0x24040005}, 0x800) sendmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000100)="f2a3caf12c99b46e9ed0cce71dc77a0004", 0x11}, {&(0x7f00000016c0)="5ffc3ad4abe503f06ce1a25984bb25d259670508d36959f4a65d6cd757fac9efaebdb08d54a99c7acca51382e8593143e8f8a994ea7038f79294e86ff9091af35fa653e21e06a9dc090065eba100000000e2bf719a3e87458ba1dfb310f29f479d15f660d1dce325852755fa2114398ff50dbf18c5d7fbc2938057472624b76d77946546fa0c6967d5fe87210dd639070cd9e8f46a34919cf9886abb672e8b746898a621a814e6f507f347ab55a005e9275651bf", 0xb4}], 0x2}}, {{0x0, 0x32, &(0x7f0000004e80)=[{&(0x7f0000001600)="078e120cf166edf952d33b581d6f13d4a00b86a4de3b3d0fdbf1815d7da0bc56175df84627561d5db874097a0edfebde26b4dea1a9c3c73b86778ce63eadedf0ff3463a00dd75616e94810b7325be6912dcd838e8f5f9defc38b04267f69d8e7e62d6960eefe7662bb41253aa8c24440393a694f63daa153b247f15432d73bd38bdf2ebdc56b58bbd969e6b2859e83fa45004baf86a40e2b9bd41afaa0d8cfb623bae18407349b121293ae5f33f5d4df7f9cdf", 0xb3}], 0x1}}], 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xbc, 0x20000005, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40500000000000071"], 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1fd}, 0x94) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000140)='G:', 0x2}], 0x1, 0x9, 0x26d0d5f1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 3.054615406s ago: executing program 3 (id=7186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 2.808620507s ago: executing program 3 (id=7187): r0 = memfd_create(0x0, 0x2) r1 = syz_io_uring_setup(0x1081, &(0x7f0000000340)={0x0, 0x7af9, 0x80, 0x3, 0x3da}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index, 0x400000080001001, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) 2.581995013s ago: executing program 4 (id=7190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r1, 0x5, 0x20000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x24}}, 0x0) 2.437053245s ago: executing program 4 (id=7191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2.331091993s ago: executing program 2 (id=7192): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYBLOB="01000000000000000c001a800800048004"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.156892928s ago: executing program 4 (id=7193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001500)}, 0x22140) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.154698172s ago: executing program 2 (id=7194): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 2.132820448s ago: executing program 3 (id=7195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x3f01) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) syz_open_procfs(0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, 0x0, 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 2.075357234s ago: executing program 4 (id=7196): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0xa001, 0x6011, 0x0, 0x0}], 0x2}) 1.857558833s ago: executing program 3 (id=7197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 1.837201865s ago: executing program 2 (id=7198): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000100)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0xa001, 0x6011, 0x29, &(0x7f0000000040)="8e2c41b43212cb75465013caac933f99b497b9c4983f3d16bc9a9265eff69baadcc5a79bc6a20fee9f"}], 0x2}) 1.801389233s ago: executing program 4 (id=7199): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x2c, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0xfd}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x8, "e80ec8b633e304ec"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x60, 0x29, 0x36, {0x5e, 0x8, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0x7]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x70, 0x0, [@mcast2]}}}], 0x1b0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.671463584s ago: executing program 3 (id=7200): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) shutdown(r0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_ifreq(0xffffffffffffffff, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=&(0x7f00000000c0)="5be1516340b6c50c8d34bce688f164ad8c090c852d23d74f40e486eccc4fe972"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r4, 0x0, 0x20000001) openat$kvm(0xffffffffffffff9c, 0x0, 0x448000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) 1.335668977s ago: executing program 0 (id=7201): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f051066054802000301090212000104957081"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 1.334288326s ago: executing program 4 (id=7202): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) syz_open_dev$audion(0x0, 0x8, 0xa8c20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a000006"], 0xbc}}, 0x40) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000000)={0x0, 0xbc3, 0x83}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r7, 0x0, &(0x7f0000000880)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81], 0x5}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) 874.179062ms ago: executing program 5 (id=7203): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff62"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 471.057709ms ago: executing program 5 (id=7204): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) shutdown(r0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=&(0x7f00000000c0)="5be1516340b6c50c8d34bce688f164ad8c090c852d23d74f40e486eccc4fe972"}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20000001) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=7205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000011000500000000000003000007000000", @ANYBLOB="01000000000000000c001a800800048004"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): code=0x7ffc0000 [ 786.565593][ T5902] usb 5-1: SerialNumber: syz [ 786.574185][ T5921] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 786.632248][ T30] audit: type=1326 audit(1771011057.336:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22748 comm="syz.0.6064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 786.774217][ T5921] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 786.789557][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.800748][ T5921] usb 3-1: Product: syz [ 786.808955][ T5921] usb 3-1: Manufacturer: syz [ 786.825598][ T5921] usb 3-1: SerialNumber: syz [ 786.839218][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 786.856869][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6068'. [ 786.890895][ T5921] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 786.907722][T22747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.926032][ T1216] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 786.959514][ T5902] ath6kl: Failed to submit usb control message: -71 [ 786.966592][ T5902] ath6kl: unable to send the bmi data to the device: -71 [ 786.973717][ T5902] ath6kl: Unable to send get target info: -71 [ 787.001406][ T5902] ath6kl: Failed to init ath6kl core: -71 [ 787.041687][ T5902] ath6kl_usb 5-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 787.093152][ T5902] usb 5-1: USB disconnect, device number 68 [ 787.188456][ T5921] usb 3-1: USB disconnect, device number 60 [ 787.996895][ T1216] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 788.018466][ T1216] ath9k_htc: Failed to initialize the device [ 788.034736][ T5921] usb 3-1: ath9k_htc: USB layer deinitialized [ 788.318962][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6081'. [ 788.330324][T22789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6081'. [ 788.349066][T16398] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.349394][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6081'. [ 788.358672][T16398] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.369458][T22789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6081'. [ 788.376458][T16398] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.394136][T16398] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.799593][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6084'. [ 788.827459][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6084'. [ 790.463564][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'. [ 790.495346][T22848] netlink: 'syz.3.6104': attribute type 1 has an invalid length. [ 790.503139][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'. [ 790.566573][T16398] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.566886][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'. [ 790.643237][T22848] netlink: 'syz.3.6104': attribute type 1 has an invalid length. [ 790.652873][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.667136][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.683150][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'. [ 790.695247][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.151938][T22858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6109'. [ 791.187453][T22858] bond0: entered promiscuous mode [ 791.205762][T22858] bond_slave_0: entered promiscuous mode [ 791.217785][T22858] bond_slave_1: entered promiscuous mode [ 791.238930][T22858] gretap0: entered promiscuous mode [ 791.253137][T22858] hsr1: entered promiscuous mode [ 791.523270][T22867] IPv6: Can't replace route, no match found [ 791.546337][T22867] IPv6: Can't replace route, no match found [ 791.880652][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 791.880667][ T30] audit: type=1326 audit(1771011063.156:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22870 comm="syz.3.6114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48b39bf79 code=0x0 [ 791.933318][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6115'. [ 791.945378][T22874] netlink: 'syz.4.6115': attribute type 20 has an invalid length. [ 791.953468][T22874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6115'. [ 791.974596][ T30] audit: type=1326 audit(1771011063.246:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.002233][ T1101] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.002605][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6115'. [ 792.056585][ T30] audit: type=1326 audit(1771011063.246:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.057173][ T1101] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.098051][T22874] netlink: 'syz.4.6115': attribute type 20 has an invalid length. [ 792.106544][T22874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6115'. [ 792.136600][T16396] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.173742][ T30] audit: type=1326 audit(1771011063.246:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.197129][T16396] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.233182][ T30] audit: type=1326 audit(1771011063.246:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.296647][ T30] audit: type=1326 audit(1771011063.246:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.351230][ T30] audit: type=1326 audit(1771011063.246:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.444157][ T30] audit: type=1326 audit(1771011063.246:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.557218][ T30] audit: type=1326 audit(1771011063.276:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 792.561162][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6119'. [ 792.779811][ T30] audit: type=1326 audit(1771011063.276:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.0.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fddf759bf79 code=0x7ffc0000 [ 793.005417][ T1216] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 793.180042][ T1216] usb 1-1: config 0 has no interfaces? [ 793.217717][ T1216] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 793.227917][T22895] ipvlan2: entered promiscuous mode [ 793.236917][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.251307][ T1216] usb 1-1: Product: syz [ 793.257281][ T1216] usb 1-1: Manufacturer: syz [ 793.262032][ T1216] usb 1-1: SerialNumber: syz [ 793.286304][ T1216] usb 1-1: config 0 descriptor?? [ 793.299239][T22899] netlink: 'syz.2.6125': attribute type 1 has an invalid length. [ 793.440613][T22903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 793.590837][T22901] bond5: (slave bridge2): making interface the new active one [ 793.626588][T22901] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 793.751002][T22886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.852302][T22941] netlink: 'syz.5.6140': attribute type 1 has an invalid length. [ 795.060312][T22941] bond3: entered promiscuous mode [ 795.095699][T22941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 795.192592][T22943] bond3: (slave bridge4): making interface the new active one [ 795.236696][T22943] bridge4: entered promiscuous mode [ 795.274914][T22943] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 795.369686][T22941] macvlan3: entered promiscuous mode [ 795.393321][T22941] macvlan3: entered allmulticast mode [ 795.418754][T22941] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 795.995271][ T5888] usb 1-1: USB disconnect, device number 61 [ 796.242038][T22960] syzkaller0: entered promiscuous mode [ 796.248962][T22960] syzkaller0: entered allmulticast mode [ 796.643050][T22964] __nla_validate_parse: 9 callbacks suppressed [ 796.643074][T22964] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6148'. [ 796.699187][T22964] ..0{X功: renamed from gretap0 (while UP) [ 796.718629][T22966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6149'. [ 796.752504][T22964] ..0{X功: entered allmulticast mode [ 796.780403][T22964] A link change request failed with some changes committed already. Interface ..0{X功 may have been left with an inconsistent configuration, please check. [ 796.943674][T22974] loop2: detected capacity change from 0 to 7 [ 796.984800][T22974] Dev loop2: unable to read RDB block 7 [ 797.022111][T22964] syzkaller0: entered promiscuous mode [ 797.036580][T22964] syzkaller0: entered allmulticast mode [ 797.046514][T22974] loop2: unable to read partition table [ 797.084460][T22974] loop2: partition table beyond EOD, truncated [ 797.120328][T22974] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5) [ 797.572988][T22983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.608848][T22983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.653367][T22983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.661750][T22983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.781740][T22985] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.816927][T22989] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.824152][T22989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.989718][T22997] syzkaller0: entered promiscuous mode [ 798.032819][T22997] syzkaller0: entered allmulticast mode [ 798.212823][ T9] IPVS: starting estimator thread 0... [ 798.217934][T23004] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.327331][T23007] IPVS: using max 39 ests per chain, 93600 per kthread [ 798.826147][T23028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6165'. [ 801.298612][T23072] IPv6: Can't replace route, no match found [ 801.384327][T23072] IPv6: Can't replace route, no match found [ 802.805379][T23096] ..0{X功: left allmulticast mode [ 802.850849][T23096] macsec1: left allmulticast mode [ 802.878256][T23096] team0: left allmulticast mode [ 802.954556][T23096] team_slave_0: left allmulticast mode [ 803.003139][T23096] team_slave_1: left allmulticast mode [ 803.009076][T23096] bridge1: left allmulticast mode [ 803.078631][T23096] vlan2: left allmulticast mode [ 803.135430][T23096] macsec0: left allmulticast mode [ 803.160236][T23096] veth1_macvtap: left allmulticast mode [ 803.340306][T23106] fuse: Bad value for 'fd' [ 803.823360][T23113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6197'. [ 803.955253][ T5921] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 804.127679][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 804.148894][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.168499][ T5921] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.186149][ T5921] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.215223][ T5921] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 804.258059][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 804.266200][ T5921] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 804.331631][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.357890][ T5921] usb 1-1: config 0 descriptor?? [ 804.367541][ T1216] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 804.401290][T23123] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6201'. [ 804.437450][T23123] ..0{X功: renamed from ..1{X功 (while UP) [ 804.460769][T23123] ..0{X功: entered allmulticast mode [ 804.507731][T23123] A link change request failed with some changes committed already. Interface ..0{X功 may have been left with an inconsistent configuration, please check. [ 804.569416][T23123] syzkaller0: entered promiscuous mode [ 804.576929][T23123] syzkaller0: entered allmulticast mode [ 804.582641][ T1216] usb 3-1: Using ep0 maxpacket: 8 [ 804.602898][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 804.621720][ T1216] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 804.636292][ T1216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.674664][ T1216] usb 3-1: config 0 descriptor?? [ 804.821913][T23129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6202'. [ 804.950850][ T1216] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 805.003334][T23109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.015743][T23109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.032418][T23109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.066056][T23109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.083241][ T5921] usbhid 1-1:0.0: can't add hid device: -71 [ 805.089719][ T5921] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 805.134521][ T5921] usb 1-1: USB disconnect, device number 62 [ 805.435550][ T1216] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 805.597749][ T1216] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.608395][ T1216] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 805.656613][ T1216] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 805.691113][ T1216] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 805.702618][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.711114][ T1216] usb 6-1: Product: syz [ 805.715880][ T1216] usb 6-1: Manufacturer: syz [ 805.720805][ T1216] usb 6-1: SerialNumber: syz [ 805.788020][ T1216] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 805.814914][ T5921] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 806.026843][ T5881] usb 6-1: USB disconnect, device number 11 [ 806.085407][ T5888] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 806.251067][ T5888] usb 1-1: config 201 has an invalid interface number: 249 but max is 0 [ 806.261167][ T5888] usb 1-1: config 201 has no interface number 0 [ 806.271465][ T5888] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 806.298850][ T5888] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 806.333219][ T5888] usb 1-1: config 201 interface 249 has no altsetting 0 [ 806.356821][ T5888] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 806.382266][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.395027][ T5888] usb 1-1: Product: syz [ 806.401718][ T5888] usb 1-1: Manufacturer: syz [ 806.412679][ T5888] usb 1-1: SerialNumber: syz [ 806.492276][T23141] syzkaller0: entered promiscuous mode [ 806.498508][T23141] syzkaller0: entered allmulticast mode [ 806.641579][T23136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.669782][T23143] IPv6: Can't replace route, no match found [ 806.693639][ T5888] ath6kl: Failed to submit usb control message: -71 [ 806.703794][T23143] IPv6: Can't replace route, no match found [ 806.714766][ T5888] ath6kl: unable to send the bmi data to the device: -71 [ 806.733522][ T5888] ath6kl: Unable to send get target info: -71 [ 806.769534][ T5888] ath6kl: Failed to init ath6kl core: -71 [ 806.806817][ T5888] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 806.841403][ T5888] usb 1-1: USB disconnect, device number 63 [ 806.875258][ T5921] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 806.890951][ T5921] ath9k_htc: Failed to initialize the device [ 806.927761][ T5881] usb 6-1: ath9k_htc: USB layer deinitialized [ 806.980733][T23149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6209'. [ 807.137942][ T1216] usb 3-1: USB disconnect, device number 61 [ 807.408755][T23160] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6213'. [ 807.570702][T23166] ..1{X功: left allmulticast mode [ 807.610214][T23166] vlan2: left allmulticast mode [ 807.615603][T23166] macsec0: left allmulticast mode [ 807.620706][T23166] veth1_macvtap: left allmulticast mode [ 809.425280][ T1216] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 809.893002][ T1216] usb 6-1: config 0 has no interfaces? [ 809.903861][ T1216] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 809.915789][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.925667][ T1216] usb 6-1: Product: syz [ 809.929851][ T1216] usb 6-1: Manufacturer: syz [ 809.936058][ T1216] usb 6-1: SerialNumber: syz [ 809.943226][ T1216] usb 6-1: config 0 descriptor?? [ 809.978420][T23196] syzkaller0: entered promiscuous mode [ 809.984321][T23196] syzkaller0: entered allmulticast mode [ 810.206089][ T5881] IPVS: starting estimator thread 0... [ 810.211881][T23201] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.325503][T23203] IPVS: using max 40 ests per chain, 96000 per kthread [ 810.517727][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6228'. [ 811.276085][ T5902] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 811.314989][T23226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6237'. [ 811.439217][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 811.478366][ T5902] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 811.510606][ T5902] usb 3-1: config 179 has no interface number 0 [ 811.528960][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 811.556357][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 811.592121][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 811.614484][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 811.634195][ T5902] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 811.687791][ T5902] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 811.735313][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.764783][T23219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 812.020484][ T5881] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input32 [ 812.331189][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 812.331195][ T1216] usb 3-1: USB disconnect, device number 62 [ 812.331280][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 812.623232][ T9] usb 6-1: USB disconnect, device number 12 [ 813.215501][ T5902] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 813.368661][ T5902] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 813.478934][ T5902] usb 6-1: config 201 has no interface number 0 [ 813.489855][ T5902] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 813.545243][ T5902] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 813.570576][ T5902] usb 6-1: config 201 interface 249 has no altsetting 0 [ 813.590713][ T5902] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 813.605824][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.636596][ T5902] usb 6-1: Product: syz [ 813.665299][ T5902] usb 6-1: Manufacturer: syz [ 813.669966][ T5902] usb 6-1: SerialNumber: syz [ 813.729913][T23260] netlink: 'syz.3.6252': attribute type 29 has an invalid length. [ 813.752537][T23260] netlink: 'syz.3.6252': attribute type 29 has an invalid length. [ 813.765065][T23260] netlink: 372 bytes leftover after parsing attributes in process `syz.3.6252'. [ 813.855897][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.862343][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.913765][T23244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.938465][ T5902] ath6kl: Failed to submit usb control message: -71 [ 814.176090][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 814.194116][ T5902] ath6kl: unable to send the bmi data to the device: -71 [ 814.235809][ T5902] ath6kl: Unable to send get target info: -71 [ 814.259262][ T5902] ath6kl: Failed to init ath6kl core: -71 [ 814.292913][ T5902] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 814.438330][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 814.448679][ T1216] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 814.470101][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 814.485972][ T5902] usb 6-1: USB disconnect, device number 13 [ 814.504075][ T9] usb 4-1: config 179 has no interface number 0 [ 814.520201][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 814.564848][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 814.598373][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 814.635503][ T1216] usb 1-1: Using ep0 maxpacket: 8 [ 814.682632][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 814.720993][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 814.735321][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 814.745949][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.755792][ T1216] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 814.764877][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.774629][ T1216] usb 1-1: Product: syz [ 814.779240][ T1216] usb 1-1: Manufacturer: syz [ 814.787477][ T1216] usb 1-1: SerialNumber: syz [ 814.792502][T23270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 814.828612][ T1216] usb 1-1: config 0 descriptor?? [ 814.967848][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6259'. [ 815.016982][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input33 [ 815.046858][ T1216] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 815.570440][ T5881] usb 4-1: USB disconnect, device number 52 [ 815.570477][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 815.585100][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 815.700471][T23291] netlink: 'syz.4.6260': attribute type 1 has an invalid length. [ 815.752420][T23292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6260'. [ 815.860169][T23294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6260'. [ 816.026685][T23294] bond1: (slave bridge3): making interface the new active one [ 816.046696][T23291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6260'. [ 816.067705][T23294] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 816.127572][T23291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.811603][ T1216] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 816.983975][T23311] syzkaller0: entered promiscuous mode [ 816.989653][T23311] syzkaller0: entered allmulticast mode [ 817.408891][ T1216] usb 1-1: USB disconnect, device number 64 [ 820.011476][T23349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 820.035248][ T1216] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 820.195413][ T1216] usb 3-1: Using ep0 maxpacket: 8 [ 820.230589][ T1216] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 820.241292][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.255248][ T1216] usb 3-1: Product: syz [ 820.270260][ T1216] usb 3-1: Manufacturer: syz [ 820.289830][ T1216] usb 3-1: SerialNumber: syz [ 820.345767][ T1216] usb 3-1: config 0 descriptor?? [ 820.579777][ T1216] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 820.702900][T23361] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6286'. [ 820.986235][T23365] netlink: 'syz.5.6288': attribute type 1 has an invalid length. [ 821.129172][T23365] bond4: entered promiscuous mode [ 821.170031][T23368] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6288'. [ 821.209568][T23365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 821.334608][T23367] bond4: (slave bridge5): making interface the new active one [ 821.372123][T23367] bridge5: entered promiscuous mode [ 821.404931][T23367] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 821.480061][T23365] macvlan3: entered promiscuous mode [ 821.521530][T23365] macvlan3: entered allmulticast mode [ 821.547901][T23365] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 821.973045][T23374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6291'. [ 822.076530][ T1216] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 822.271527][T23382] syzkaller0: entered promiscuous mode [ 822.278738][T23382] syzkaller0: entered allmulticast mode [ 822.616904][T23391] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6298'. [ 823.393679][ T5881] usb 3-1: USB disconnect, device number 63 [ 823.440411][T23412] syzkaller0: entered promiscuous mode [ 823.446450][T23412] syzkaller0: entered allmulticast mode [ 823.519174][T23417] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6309'. [ 823.820221][T23425] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6313'. [ 824.115246][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 824.540341][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 824.562431][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.621373][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.645924][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 824.900045][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 824.914214][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.925777][ T9] usb 3-1: config 0 descriptor?? [ 825.290389][T23452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.919208][T23455] syzkaller0: entered promiscuous mode [ 825.940408][T23455] syzkaller0: entered allmulticast mode [ 826.732783][T23464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 826.968354][T23464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 826.984353][T23464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 827.021970][T23464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 827.109532][T23464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 827.223453][T23464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 827.273452][T23464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 827.937102][T23484] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6329'. [ 828.779199][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 828.786341][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 828.814715][ T9] usb 3-1: USB disconnect, device number 64 [ 829.449775][T23513] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6340'. [ 829.955250][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 830.101847][T22006] IPVS: starting estimator thread 0... [ 830.254327][T23526] IPVS: using max 28 ests per chain, 67200 per kthread [ 830.275236][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 830.286053][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.305208][ T29] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.337145][ T29] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.386708][ T29] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 830.486710][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 830.573717][ T29] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 830.586379][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.786045][ T29] usb 6-1: config 0 descriptor?? [ 831.427533][T23520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.483442][T23520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.518467][T23520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.531338][T23520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.577079][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 831.583241][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 831.595445][ T29] usb 6-1: USB disconnect, device number 14 [ 831.964079][T23546] syzkaller0: entered promiscuous mode [ 831.998273][T23546] syzkaller0: entered allmulticast mode [ 832.078270][T23550] loop2: detected capacity change from 0 to 7 [ 832.119175][T23550] Dev loop2: unable to read RDB block 7 [ 832.204895][T23550] loop2: unable to read partition table [ 832.223062][T23550] loop2: partition table beyond EOD, truncated [ 832.248728][T23550] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5) [ 834.021810][T23584] ..0{X功: left allmulticast mode [ 834.767061][T23592] syzkaller0: entered promiscuous mode [ 834.772646][T23592] syzkaller0: entered allmulticast mode [ 835.544440][T23609] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6373'. [ 835.709060][T23609] syzkaller1: entered promiscuous mode [ 835.740011][T23609] syzkaller1: entered allmulticast mode [ 835.915533][ T5902] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 835.924097][ T9] IPVS: starting estimator thread 0... [ 835.940368][T23622] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.016221][T23624] IPVS: using max 26 ests per chain, 62400 per kthread [ 836.082756][ T5902] usb 3-1: config 0 has no interfaces? [ 836.092279][ T5902] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 836.104180][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.413610][ T5902] usb 3-1: Product: syz [ 836.425508][ T5902] usb 3-1: Manufacturer: syz [ 836.438480][ T5902] usb 3-1: SerialNumber: syz [ 836.448436][ T5902] usb 3-1: config 0 descriptor?? [ 836.570530][T23641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6380'. [ 836.973606][T23610] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.689127][ T9] usb 3-1: USB disconnect, device number 65 [ 838.890495][T23668] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6390'. [ 839.006683][ T5881] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 839.235366][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 839.248128][ T5881] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 839.258684][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.273490][T23668] ..1{X功: renamed from ..0{X功 (while UP) [ 839.295960][ T5881] usb 5-1: Product: syz [ 839.309310][T23668] ..1{X功: entered allmulticast mode [ 839.316050][ T5881] usb 5-1: Manufacturer: syz [ 839.328405][ T5881] usb 5-1: SerialNumber: syz [ 839.353740][T23668] A link change request failed with some changes committed already. Interface ..1{X功 may have been left with an inconsistent configuration, please check. [ 839.391765][ T5881] usb 5-1: config 0 descriptor?? [ 839.480557][T23675] syzkaller0: entered promiscuous mode [ 839.545288][T23675] syzkaller0: entered allmulticast mode [ 840.025881][ T5881] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 840.082680][T23697] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6397'. [ 840.150361][T23687] syzkaller0: entered promiscuous mode [ 840.159162][T23687] syzkaller0: entered allmulticast mode [ 840.618184][T23703] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6398'. [ 841.371785][T23711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6400'. [ 841.516902][ T5881] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 842.119799][ T9] usb 5-1: USB disconnect, device number 69 [ 842.538155][ T5881] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 842.720447][ T5881] usb 5-1: config 0 has no interfaces? [ 842.755523][ T5881] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 842.773017][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.781275][ T5881] usb 5-1: Product: syz [ 842.794547][ T5881] usb 5-1: Manufacturer: syz [ 842.808741][ T5881] usb 5-1: SerialNumber: syz [ 842.824858][ T5881] usb 5-1: config 0 descriptor?? [ 843.587287][T23697] ..0{X功: renamed from gretap0 (while UP) [ 843.595344][T23697] ..0{X功: entered allmulticast mode [ 843.601394][T23697] A link change request failed with some changes committed already. Interface ..0{X功 may have been left with an inconsistent configuration, please check. [ 844.213443][T23723] syzkaller0: entered promiscuous mode [ 844.233595][T23723] syzkaller0: entered allmulticast mode [ 844.710640][T23730] syzkaller0: entered promiscuous mode [ 844.755480][T23730] syzkaller0: entered allmulticast mode [ 845.080966][T16396] syzkaller0: tun_net_xmit 48 [ 845.104719][T16396] syzkaller0: tun_net_xmit 48 [ 845.310272][T23753] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 849.691088][T23770] ..0{X功: left allmulticast mode [ 849.763742][ T5921] usb 5-1: USB disconnect, device number 70 [ 850.293686][T17880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 850.304186][T17880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 850.313332][T17880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 850.322357][T17880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 850.331853][T17880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 851.927405][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.247222][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.261783][T23827] loop2: detected capacity change from 0 to 7 [ 852.270289][T23827] Dev loop2: unable to read RDB block 7 [ 852.281744][T23827] loop2: AHDI p1 p2 p3 [ 852.289944][T23827] loop2: partition table partially beyond EOD, truncated [ 852.298192][T23827] loop2: p1 start 1601398130 is beyond EOD, truncated [ 852.305048][T23827] loop2: p2 start 1702059890 is beyond EOD, truncated [ 852.334014][T23799] chnl_net:caif_netlink_parms(): no params data found [ 852.400920][ T5832] Bluetooth: hci4: command tx timeout [ 852.507971][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.811411][T23799] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.818759][T23799] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.826506][T23799] bridge_slave_0: entered allmulticast mode [ 852.834347][T23799] bridge_slave_0: entered promiscuous mode [ 852.851824][T23799] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.859410][T23799] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.867152][T23799] bridge_slave_1: entered allmulticast mode [ 852.968127][T23799] bridge_slave_1: entered promiscuous mode [ 853.619938][T23863] ..1{X功: left allmulticast mode [ 854.127946][T23799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.398369][T23799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.488965][ T5832] Bluetooth: hci4: command tx timeout [ 854.713578][T23799] team0: Port device team_slave_0 added [ 854.782133][T23799] team0: Port device team_slave_1 added [ 855.205450][T23891] fuse: Unknown parameter '0x0000000000000004' [ 855.572124][ T49] dvmrp1 (unregistering): left allmulticast mode [ 855.730918][ T49] bond4 (unregistering): (slave bridge1): Releasing active interface [ 855.801513][ T49] bond5 (unregistering): (slave bridge2): Releasing active interface [ 855.947920][ T49] bond0 (unregistering): Released all slaves [ 855.965062][ T49] bond1 (unregistering): Released all slaves [ 856.003028][ T49] bond2 (unregistering): Released all slaves [ 856.571249][ T5832] Bluetooth: hci4: command tx timeout [ 856.578878][ T49] bond3 (unregistering): Released all slaves [ 856.603660][ T49] bond4 (unregistering): Released all slaves [ 856.664196][ T49] bond5 (unregistering): Released all slaves [ 856.719164][T23799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.749606][T23799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.864317][T23799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.134085][ T49] tipc: Left network mode [ 857.140629][T23799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.171980][T23799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.248551][T23799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.356112][T23922] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6452'. [ 857.409102][T23799] hsr_slave_0: entered promiscuous mode [ 857.416564][T23799] hsr_slave_1: entered promiscuous mode [ 857.423045][T23799] debugfs: 'hsr0' already exists in 'hsr' [ 857.432799][T23799] Cannot create hsr debugfs directory [ 858.105840][T23945] netlink: 'syz.5.6456': attribute type 4 has an invalid length. [ 858.644582][ T5832] Bluetooth: hci4: command tx timeout [ 858.870937][ T49] hsr_slave_0: left promiscuous mode [ 858.883907][ T49] hsr_slave_1: left promiscuous mode [ 858.912729][ T49] veth1_macvtap: left promiscuous mode [ 858.918588][ T49] veth0_macvtap: left promiscuous mode [ 858.924317][ T49] veth1_vlan: left promiscuous mode [ 858.930839][ T49] veth0_vlan: left promiscuous mode [ 859.013452][T23959] netlink: 'syz.5.6458': attribute type 4 has an invalid length. [ 861.726379][ T49] IPVS: stop unused estimator thread 0... [ 862.496777][T23799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 862.518987][T23799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 862.567194][T23799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 862.723383][T23799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 863.399865][T23799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.461623][T23799] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.524320][T24032] netlink: 'syz.0.6475': attribute type 39 has an invalid length. [ 863.548108][T16393] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.555417][T16393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.576870][T16393] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.584131][T16393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.063103][T23799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.413928][T23799] veth0_vlan: entered promiscuous mode [ 864.498165][T23799] veth1_vlan: entered promiscuous mode [ 864.648807][T23799] veth0_macvtap: entered promiscuous mode [ 864.690975][T23799] veth1_macvtap: entered promiscuous mode [ 864.769090][T23799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.824591][T23799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.897367][T16393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.914007][T16479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.948277][T16479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.988285][T16479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.360746][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.398472][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.614586][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.627466][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.660122][T24073] loop2: detected capacity change from 0 to 7 [ 865.814180][T24073] Dev loop2: unable to read RDB block 7 [ 865.864295][T24073] loop2: AHDI p1 p2 p3 [ 865.893534][T24073] loop2: partition table partially beyond EOD, truncated [ 865.901563][T24073] loop2: p1 start 1601398130 is beyond EOD, truncated [ 865.942807][T24073] loop2: p2 start 1702059890 is beyond EOD, truncated [ 867.067821][T24103] netlink: 'syz.3.6490': attribute type 4 has an invalid length. [ 867.116132][T17880] Bluetooth: hci0: command 0x0406 tx timeout [ 867.629210][T24118] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6493'. [ 867.679046][T24118] ..1{X功: renamed from ..0{X功 (while UP) [ 867.731564][T24118] ..1{X功: entered allmulticast mode [ 867.770060][T24118] A link change request failed with some changes committed already. Interface ..1{X功 may have been left with an inconsistent configuration, please check. [ 867.921531][T24118] syzkaller0: entered promiscuous mode [ 867.937933][T24118] syzkaller0: entered allmulticast mode [ 868.130394][T24128] netlink: 'syz.2.6495': attribute type 10 has an invalid length. [ 868.232533][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6495'. [ 868.272693][T24128] team0: Port device dummy0 added [ 868.390586][T24133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.653444][T24133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.132312][T24153] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6499'. [ 870.038513][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6503'. [ 870.085456][ T5902] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 870.262630][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.279171][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.304202][ T5902] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 870.324712][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.365573][ T5902] usb 4-1: config 0 descriptor?? [ 870.481384][T24178] netlink: 'syz.5.6507': attribute type 1 has an invalid length. [ 870.573169][T24181] netlink: 'syz.0.6508': attribute type 10 has an invalid length. [ 870.599890][T24182] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 870.626914][T24183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6508'. [ 870.687897][T24178] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6507'. [ 870.699190][T24182] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 870.733878][T24181] team0: Port device dummy0 added [ 870.743627][T24178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 870.826594][ T5902] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 870.833897][ T5902] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 870.876312][ T5902] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 870.883628][ T5902] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 870.912815][ T5902] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 870.952783][T24188] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6511'. [ 870.956027][ T5902] cm6533_jd 0003:0D8C:0022.0025: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 870.984781][T24190] loop2: detected capacity change from 0 to 7 [ 870.991359][T24188] ..1{X功: renamed from ..0{X功 (while UP) [ 871.001690][T24190] Dev loop2: unable to read RDB block 7 [ 871.025819][ T5902] usb 4-1: USB disconnect, device number 53 [ 871.057146][T24190] loop2: AHDI p1 p2 p3 [ 871.089944][T24190] loop2: partition table partially beyond EOD, truncated [ 871.113981][T24190] loop2: p1 start 1601398130 is beyond EOD, truncated [ 871.143790][T24188] ..1{X功: entered allmulticast mode [ 871.165293][T24190] loop2: p2 start 1702059890 is beyond EOD, truncated [ 871.181279][T24191] fido_id[24191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 871.197843][T24188] A link change request failed with some changes committed already. Interface ..1{X功 may have been left with an inconsistent configuration, please check. [ 871.229104][ T5189] Dev loop2: unable to read RDB block 7 [ 871.282211][ T5189] loop2: AHDI p1 p2 p3 [ 871.292102][ T5189] loop2: partition table partially beyond EOD, truncated [ 871.314840][ T5189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 871.322327][ T5189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 871.334027][T24197] syzkaller0: entered promiscuous mode [ 871.350560][T24197] syzkaller0: entered allmulticast mode [ 872.368565][T24219] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6519'. [ 872.464967][T24223] netlink: 'syz.5.6520': attribute type 1 has an invalid length. [ 872.582243][T24227] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 872.613395][T24223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6520'. [ 872.659621][T24227] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 872.754217][T24223] 8021q: adding VLAN 0 to HW filter on device bond6 [ 872.911111][T24237] netlink: 'syz.2.6521': attribute type 10 has an invalid length. [ 872.940953][T24237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6521'. [ 874.317937][T24287] netlink: 'syz.0.6535': attribute type 10 has an invalid length. [ 874.354608][T24287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6535'. [ 874.880117][T24296] ..1{X功: left allmulticast mode [ 875.367781][T24304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.376158][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.382480][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.401156][T24304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.478881][T24304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.697299][T24304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.352066][T24321] netlink: 'syz.3.6546': attribute type 10 has an invalid length. [ 876.370383][T24321] dummy0: entered promiscuous mode [ 876.379265][T24321] team0: Port device dummy0 added [ 876.397230][T24321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6546'. [ 876.626809][T24325] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6547'. [ 876.648374][T24325] ..0{X功: renamed from ..1{X功 (while UP) [ 876.685031][T24325] A link change request failed with some changes committed already. Interface ..0{X功 may have been left with an inconsistent configuration, please check. [ 877.085403][ T5881] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 877.238665][ T5881] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 877.253515][ T5881] usb 6-1: config 201 has no interface number 0 [ 877.264622][ T5881] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 877.290249][ T5881] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 877.313329][ T5881] usb 6-1: config 201 interface 249 has no altsetting 0 [ 877.329496][ T5881] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 877.339356][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.377357][ T5881] usb 6-1: Product: syz [ 877.393324][ T5881] usb 6-1: Manufacturer: syz [ 877.402509][ T5881] usb 6-1: SerialNumber: syz [ 877.743833][T24324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.823309][ T5881] ath6kl: Failed to submit usb control message: -71 [ 877.851751][ T5881] ath6kl: unable to send the bmi data to the device: -71 [ 877.871206][ T5881] ath6kl: Unable to send get target info: -71 [ 877.911906][ T5881] ath6kl: Failed to init ath6kl core: -71 [ 877.935346][ T5881] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 878.011932][ T5881] usb 6-1: USB disconnect, device number 15 [ 878.455240][ T5881] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 878.605398][T24362] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6562'. [ 878.633816][T24362] ..1{X功: renamed from ..0{X功 (while UP) [ 878.681040][ T5881] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 878.701318][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.722340][ T5881] usb 1-1: Product: syz [ 878.734668][ T5881] usb 1-1: Manufacturer: syz [ 878.754825][T24362] A link change request failed with some changes committed already. Interface ..1{X功 may have been left with an inconsistent configuration, please check. [ 878.775592][ T5881] usb 1-1: SerialNumber: syz [ 878.807300][ T5881] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 878.895418][ T5888] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 879.362201][T24377] netlink: 'syz.3.6568': attribute type 10 has an invalid length. [ 879.379750][T24377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6568'. [ 879.996912][ T5888] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 880.005785][ T5888] ath9k_htc: Failed to initialize the device [ 880.184878][ T5888] usb 1-1: ath9k_htc: USB layer deinitialized [ 880.277494][T24396] syzkaller0: entered promiscuous mode [ 880.288326][T24396] syzkaller0: entered allmulticast mode [ 880.298677][ T12] syzkaller0: tun_net_xmit 48 [ 881.449698][ T29] usb 1-1: USB disconnect, device number 65 [ 881.810726][T24416] netlink: 'syz.0.6581': attribute type 10 has an invalid length. [ 881.872153][T24420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6581'. [ 882.475283][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 884.205214][ T5909] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 884.419785][ T5909] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 884.434615][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.461650][ T5909] usb 1-1: Product: syz [ 884.469620][ T5909] usb 1-1: Manufacturer: syz [ 884.483299][ T5909] usb 1-1: SerialNumber: syz [ 884.510937][ T5909] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 884.535638][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 884.674940][T24466] netlink: 'syz.3.6601': attribute type 10 has an invalid length. [ 884.716299][T24466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6601'. [ 885.603595][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 885.625406][ T9] ath9k_htc: Failed to initialize the device [ 885.664538][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 886.259368][T24499] netlink: 'syz.3.6617': attribute type 10 has an invalid length. [ 886.272014][T24499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6617'. [ 886.537597][T24508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6621'. [ 886.837916][ T5909] usb 1-1: USB disconnect, device number 66 [ 887.239805][T24527] netlink: 'syz.0.6631': attribute type 10 has an invalid length. [ 887.260404][T24527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6631'. [ 887.598659][T24542] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6637'. [ 887.866012][T24553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6643'. [ 888.124941][T24566] netlink: 'syz.0.6648': attribute type 10 has an invalid length. [ 888.139943][T24566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6648'. [ 888.170334][T24568] program syz.4.6649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.346907][T24572] loop2: detected capacity change from 0 to 7 [ 888.362241][T24572] Dev loop2: unable to read RDB block 7 [ 888.379671][T24572] loop2: unable to read partition table [ 888.394494][T24572] loop2: partition table beyond EOD, truncated [ 888.413550][T24572] loop_reread_partitions: partition scan of loop2 (x鼦熝鄸 ) failed (rc=-5) [ 888.971460][T24597] program syz.5.6661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 889.576491][T24614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6668'. [ 889.668616][T24615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.773731][T24615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.815516][T24615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.845275][ T5909] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 890.911826][T24647] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 890.918415][T24647] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 890.945350][T24647] vhci_hcd vhci_hcd.0: Device attached [ 891.015682][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 891.017376][T24650] vhci_hcd: connection closed [ 891.023944][ T36] vhci_hcd vhci_hcd.4: stop threads [ 891.035931][ T36] vhci_hcd vhci_hcd.4: release socket [ 891.041638][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 891.048872][ T5909] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 891.058008][ T5909] usb 4-1: config 162 has no interface number 0 [ 891.064478][ T5909] usb 4-1: config 162 interface 166 has no altsetting 0 [ 891.075999][ T5909] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 891.085912][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.094371][T24655] syzkaller0: entered promiscuous mode [ 891.101594][ T5909] usb 4-1: Product: syz [ 891.107875][ T5909] usb 4-1: Manufacturer: syz [ 891.113091][ T5909] usb 4-1: SerialNumber: syz [ 891.122813][T24655] syzkaller0: entered allmulticast mode [ 891.333153][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6687'. [ 891.414764][ T5909] appledisplay 4-1:162.166: Could not find int-in endpoint [ 891.434598][ T5909] usbhid 4-1:162.166: couldn't find an input interrupt endpoint [ 891.467266][ T5909] usb 4-1: USB disconnect, device number 54 [ 891.621406][T24676] program syz.0.6693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 891.751142][T24683] syzkaller0: entered promiscuous mode [ 891.758050][T24683] syzkaller0: entered allmulticast mode [ 891.871410][T24690] netlink: 'syz.5.6699': attribute type 10 has an invalid length. [ 891.892814][T24690] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 891.936239][T24692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6700'. [ 892.238664][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6706'. [ 892.450039][T24718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 892.456640][T24718] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 892.498448][T24718] vhci_hcd vhci_hcd.0: Device attached [ 892.519301][T24722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.534147][T24719] vhci_hcd: connection closed [ 892.534489][T16398] vhci_hcd vhci_hcd.0: stop threads [ 892.545277][T16398] vhci_hcd vhci_hcd.0: release socket [ 892.550710][T16398] vhci_hcd vhci_hcd.0: disconnect device [ 892.589315][T24722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.602803][T24722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.619077][ T49] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 892.633935][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.643104][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.548174][T24742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6718'. [ 893.972108][T24753] syzkaller0: entered promiscuous mode [ 893.985202][T24753] syzkaller0: entered allmulticast mode [ 894.944975][T24772] netlink: 'syz.3.6728': attribute type 1 has an invalid length. [ 895.200598][T24772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6728'. [ 895.246754][T24774] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 895.268071][T24774] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 895.373829][T24772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 895.398965][T24776] ip6gre1: entered allmulticast mode [ 895.406889][T24776] team0: Device ip6gre1 is of different type [ 896.765494][ T5888] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 897.005219][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 897.017506][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 897.028190][ T5888] usb 4-1: config 4 interface 0 has no altsetting 0 [ 897.041848][ T5888] usb 4-1: string descriptor 0 read error: -22 [ 897.051626][T24802] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6741'. [ 897.066684][ T5888] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 897.095453][ T5888] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 897.147283][ T5888] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 897.193085][ T5888] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 897.235580][ T5888] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 897.242837][ T5888] usb 4-1: media controller created [ 897.282354][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.360361][T24810] netlink: 'syz.0.6745': attribute type 1 has an invalid length. [ 897.424330][T24810] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 897.436667][T24810] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 897.463218][T24814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6745'. [ 897.476254][T24814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6745'. [ 897.491526][T24814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 897.771510][T24824] netlink: 'syz.5.6749': attribute type 1 has an invalid length. [ 897.837833][T17880] Bluetooth: hci5: command 0x0406 tx timeout [ 897.960366][T24830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6749'. [ 897.999473][T24824] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 898.011445][T24824] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 898.143676][T24830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 898.397220][ T5888] zl10353_read_register: readreg error (reg=127, ret==0) [ 898.900617][ T5888] usb 4-1: USB disconnect, device number 55 [ 899.045227][ T29] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 899.206591][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 899.245254][ T29] usb 3-1: config 0 has no interfaces? [ 899.263307][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.291550][ T29] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.312450][ T29] usb 3-1: Manufacturer: syz [ 899.323529][T24852] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6755'. [ 899.379234][ T29] usb 3-1: config 0 descriptor?? [ 900.157921][T24865] ip6gre1: entered allmulticast mode [ 900.184166][T24865] ip6gre1: entered promiscuous mode [ 900.198364][T24865] team0: Device ip6gre1 is of different type [ 900.639627][T24874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6764'. [ 900.759402][T24876] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6765'. [ 900.770325][T24876] ..0{X功: renamed from ..1{X功 (while UP) [ 900.779554][T24876] ..0{X功: entered allmulticast mode [ 900.785374][T24876] A link change request failed with some changes committed already. Interface ..0{X功 may have been left with an inconsistent configuration, please check. [ 900.848722][T24876] syzkaller0: entered promiscuous mode [ 900.865430][T24876] syzkaller0: entered allmulticast mode [ 901.445461][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 901.521600][ T5909] usb 3-1: USB disconnect, device number 66 [ 901.701909][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 901.715150][ T29] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 901.744599][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 901.765240][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 901.787589][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 901.826547][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 901.841473][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 901.882748][ T29] usb 6-1: Product: syz [ 901.893952][ T29] usb 6-1: Manufacturer: syz [ 901.945044][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 901.950456][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 901.979088][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 902.008368][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 902.282089][ T29] usb 6-1: USB disconnect, device number 16 [ 903.615324][T24929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.865278][ T29] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 904.135913][ T29] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 904.149299][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.216039][ T29] usb 6-1: config 0 has no interface number 0 [ 904.270014][ T29] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 904.345911][ T29] usb 6-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.375799][ T29] usb 6-1: config 0 interface 113 has no altsetting 0 [ 904.571964][ T29] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 904.602281][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.649850][ T29] usb 6-1: Product: syz [ 904.663172][ T29] usb 6-1: Manufacturer: syz [ 904.681594][ T29] usb 6-1: SerialNumber: syz [ 904.708588][ T29] usb 6-1: config 0 descriptor?? [ 904.725417][ T29] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 906.301900][T24958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6795'. [ 906.896163][T24963] fuse: Bad value for 'user_id' [ 906.944506][T24963] fuse: Bad value for 'user_id' [ 907.163272][T24972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6800'. [ 907.763294][ T5888] usb 6-1: USB disconnect, device number 17 [ 910.106852][ T5909] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 910.275344][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 910.283760][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.300945][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.339703][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 910.379381][ T5909] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 910.409106][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.453258][ T5909] usb 5-1: config 0 descriptor?? [ 911.666349][ T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 911.979861][ T9] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 912.008745][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.254093][ T9] usb 6-1: config 0 has no interface number 0 [ 912.262594][ T9] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 912.274872][ T9] usb 6-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.385491][ T9] usb 6-1: config 0 interface 113 has no altsetting 0 [ 912.623590][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 912.663072][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.697435][ T9] usb 6-1: Product: syz [ 912.719918][ T9] usb 6-1: Manufacturer: syz [ 912.733308][ T9] usb 6-1: SerialNumber: syz [ 912.757878][ T9] usb 6-1: config 0 descriptor?? [ 912.829686][ T9] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 914.470089][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 914.488185][ T9] usb 6-1: USB disconnect, device number 18 [ 914.498059][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 914.538848][ T5909] usb 5-1: USB disconnect, device number 71 [ 914.691600][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 914.691619][ T30] audit: type=1804 audit(1771011185.966:1807): pid=25056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6824" name="/newroot/176/file1" dev="tmpfs" ino=919 res=1 errno=0 [ 916.127955][T25072] netlink: 'syz.3.6829': attribute type 10 has an invalid length. [ 916.999322][ T5909] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 917.165319][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 917.172915][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.184977][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.201369][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 917.221998][ T5909] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 917.239551][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.257250][ T5909] usb 4-1: config 0 descriptor?? [ 919.237224][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 919.478581][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 919.518008][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 919.559447][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 919.569760][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 919.584914][ T9] usb 5-1: Product: syz [ 919.593993][ T9] usb 5-1: Manufacturer: syz [ 919.681950][ T9] usb 5-1: SerialNumber: syz [ 919.697982][ T9] usb 5-1: config 0 descriptor?? [ 919.718939][T25117] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 919.746366][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 919.757784][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 919.992569][ T9] usb 5-1: USB disconnect, device number 72 [ 920.014467][T25128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6851'. [ 920.768522][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 920.792688][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 920.841234][ T5909] usb 4-1: USB disconnect, device number 56 [ 922.061593][T25182] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6860'. [ 924.157791][ T29] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 924.339882][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 924.365951][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.379691][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.401349][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 924.465208][ T29] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 924.552433][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.574634][ T29] usb 3-1: config 0 descriptor?? [ 924.845751][ T5902] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 925.382302][ T5902] usb 4-1: config 201 has an invalid interface number: 249 but max is 0 [ 925.399167][ T5902] usb 4-1: config 201 has no interface number 0 [ 925.413974][ T5902] usb 4-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 925.422054][T25221] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6871'. [ 925.429288][ T5902] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 925.481245][ T5902] usb 4-1: config 201 interface 249 has no altsetting 0 [ 925.498126][ T5902] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 925.509153][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.520182][ T5902] usb 4-1: Product: syz [ 925.524646][ T5902] usb 4-1: Manufacturer: syz [ 925.532228][ T5902] usb 4-1: SerialNumber: syz [ 925.765240][T25217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.811652][ T5902] ath6kl: Failed to submit usb control message: -71 [ 925.821754][ T5902] ath6kl: unable to send the bmi data to the device: -71 [ 925.836352][ T5902] ath6kl: Unable to send get target info: -71 [ 925.872087][ T5902] ath6kl: Failed to init ath6kl core: -71 [ 925.990059][ T5902] ath6kl_usb 4-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 926.030542][ T5902] usb 4-1: USB disconnect, device number 57 [ 926.045532][ T5909] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 926.207358][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.221120][ T5909] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 926.235473][ T5909] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 926.262206][ T5909] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 926.272984][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.286814][ T5909] usb 5-1: Product: syz [ 926.291892][ T5909] usb 5-1: Manufacturer: syz [ 926.298371][ T5909] usb 5-1: SerialNumber: syz [ 926.347125][ T5909] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 926.367934][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 926.650607][ T5909] usb 5-1: USB disconnect, device number 73 [ 926.849677][T25246] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 926.856267][T25246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 926.934481][T25246] vhci_hcd vhci_hcd.0: Device attached [ 927.002413][T25248] vhci_hcd: connection closed [ 927.006153][ T12] vhci_hcd vhci_hcd.0: stop threads [ 927.034778][ T12] vhci_hcd vhci_hcd.0: release socket [ 927.085340][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 927.139609][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 927.146076][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 927.170507][ T29] usb 3-1: USB disconnect, device number 67 [ 927.511735][T25260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6883'. [ 927.533717][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 927.561622][ T9] ath9k_htc: Failed to initialize the device [ 927.585983][ T5909] usb 5-1: ath9k_htc: USB layer deinitialized [ 927.677971][T25262] netlink: 'syz.4.6884': attribute type 72 has an invalid length. [ 927.702512][T25262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.762931][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6886'. [ 927.787208][T25262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.814904][T25264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.835384][T25262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.889033][T25270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.926755][T25264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.961644][ T12] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 928.004040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.012363][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.117467][T25274] ..0{X功: left allmulticast mode [ 929.054131][T25296] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 929.060821][T25296] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 929.135487][T25296] vhci_hcd vhci_hcd.0: Device attached [ 929.157087][T25297] vhci_hcd: connection closed [ 929.157365][ T12] vhci_hcd vhci_hcd.2: stop threads [ 929.176418][ T12] vhci_hcd vhci_hcd.2: release socket [ 929.182068][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 929.379063][T25307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6898'. [ 930.756367][T25335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6912'. [ 931.546843][T25356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6924'. [ 931.617850][T25360] netlink: 'syz.0.6923': attribute type 1 has an invalid length. [ 931.758372][T25360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6923'. [ 931.792125][T25363] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 931.842024][T25369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6923'. [ 931.852524][T25363] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 931.893669][T25369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.331482][T25378] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 932.338033][T25378] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 932.416242][T25378] vhci_hcd vhci_hcd.0: Device attached [ 932.446544][T25379] vhci_hcd: connection closed [ 932.447103][T25166] vhci_hcd vhci_hcd.0: stop threads [ 932.459741][T25166] vhci_hcd vhci_hcd.0: release socket [ 932.496656][T25166] vhci_hcd vhci_hcd.0: disconnect device [ 933.353514][T25395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6933'. [ 933.921058][T25406] netlink: 'syz.2.6939': attribute type 1 has an invalid length. [ 933.940065][T25404] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6938'. [ 933.967347][T25406] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 933.978514][T25406] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 934.018256][T25408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6939'. [ 934.055225][ T5881] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 934.102653][T25406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6939'. [ 934.125573][T25406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 934.239898][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 934.268888][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 934.298581][ T5881] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 934.328344][ T5881] usb 6-1: can't read configurations, error -71 [ 934.445437][T22006] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 934.555666][T25419] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 934.562249][T25419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 934.574813][T25419] vhci_hcd vhci_hcd.0: Device attached [ 934.614190][T25420] vhci_hcd: connection closed [ 934.615721][T25166] vhci_hcd vhci_hcd.3: stop threads [ 934.635697][T22006] usb 5-1: Using ep0 maxpacket: 32 [ 934.655486][T25166] vhci_hcd vhci_hcd.3: release socket [ 934.666846][T25166] vhci_hcd vhci_hcd.3: disconnect device [ 934.672726][T22006] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 934.695714][T22006] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 934.705254][T22006] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 934.713463][T22006] usb 5-1: Product: syz [ 934.718082][T22006] usb 5-1: Manufacturer: syz [ 934.722717][T22006] usb 5-1: SerialNumber: syz [ 934.748117][T22006] usb 5-1: config 0 descriptor?? [ 934.759609][T25411] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 934.993223][T22006] hub 5-1:0.0: bad descriptor, ignoring hub [ 935.019618][T22006] hub 5-1:0.0: probe with driver hub failed with error -5 [ 935.743113][T25442] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6950'. [ 935.822158][T25446] netlink: 'syz.5.6952': attribute type 1 has an invalid length. [ 935.981663][T25446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6952'. [ 936.047864][T22006] usb 5-1: USB disconnect, device number 74 [ 936.059751][T25454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6952'. [ 936.111355][T25456] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6955'. [ 936.124167][T25449] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 936.137904][T25449] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 936.166775][T25454] 8021q: adding VLAN 0 to HW filter on device bond8 [ 936.684441][T25470] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 936.691107][T25470] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 936.721795][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.728370][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.785526][T25470] vhci_hcd vhci_hcd.0: Device attached [ 936.831262][T25471] vhci_hcd: connection closed [ 936.831615][ T12] vhci_hcd vhci_hcd.5: stop threads [ 936.849870][ T12] vhci_hcd vhci_hcd.5: release socket [ 936.863240][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 937.436613][T25485] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6966'. [ 937.537755][T25492] ..1{X功: left allmulticast mode [ 937.825328][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 938.399687][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 938.428612][ T9] usb 1-1: config 0 has no interface number 0 [ 938.471588][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 938.504963][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.551158][ T9] usb 1-1: Product: syz [ 938.564744][ T9] usb 1-1: Manufacturer: syz [ 938.590909][ T9] usb 1-1: SerialNumber: syz [ 938.610695][ T9] usb 1-1: config 0 descriptor?? [ 938.969813][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 939.032842][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 939.077386][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 939.104789][ T9] usb 1-1: media controller created [ 939.140073][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 939.343093][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6975'. [ 939.588412][T25519] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 939.594998][T25519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 939.604221][T25519] vhci_hcd vhci_hcd.0: Device attached [ 939.623805][T25520] vhci_hcd: connection closed [ 939.624107][ T1101] vhci_hcd vhci_hcd.3: stop threads [ 939.634663][ T1101] vhci_hcd vhci_hcd.3: release socket [ 939.652890][T25507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 939.653657][ T1101] vhci_hcd vhci_hcd.3: disconnect device [ 939.667034][T25507] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 939.775688][T25507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 939.781694][T25507] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 940.034507][T25507] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 940.045593][T25507] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 940.103702][T25507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 940.127913][T25507] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 940.275606][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 940.396246][ T9] usb 1-1: USB disconnect, device number 67 [ 940.768857][T25541] netlink: 'syz.4.6987': attribute type 10 has an invalid length. [ 940.785248][ T1216] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 940.817896][T25541] team0: Port device dummy0 added [ 940.875515][T25541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6987'. [ 940.958412][ T1216] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 940.970231][ T1216] usb 6-1: config 201 has no interface number 0 [ 940.987810][ T1216] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 941.004634][ T1216] usb 6-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 941.016227][ T1216] usb 6-1: config 201 interface 249 has no altsetting 0 [ 941.027258][ T1216] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 941.046471][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.054937][ T1216] usb 6-1: Product: syz [ 941.064326][ T1216] usb 6-1: Manufacturer: syz [ 941.075737][ T1216] usb 6-1: SerialNumber: syz [ 941.301844][T25534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.386586][ T1216] ath6kl: Failed to submit usb control message: -71 [ 941.459411][ T1216] ath6kl: unable to send the bmi data to the device: -71 [ 941.482951][ T1216] ath6kl: Unable to send get target info: -71 [ 941.521193][ T1216] ath6kl: Failed to init ath6kl core: -71 [ 941.559153][ T1216] ath6kl_usb 6-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 941.602557][ T1216] usb 6-1: USB disconnect, device number 21 [ 941.710692][T25563] netlink: 'syz.4.6995': attribute type 1 has an invalid length. [ 941.757777][T25565] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 941.764368][T25565] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 941.859120][T25565] vhci_hcd vhci_hcd.0: Device attached [ 941.872212][T25563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6995'. [ 941.950871][T25573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6995'. [ 941.955051][T25570] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 941.978080][T25567] vhci_hcd: connection closed [ 941.978377][ T12] vhci_hcd vhci_hcd.3: stop threads [ 941.989027][ T12] vhci_hcd vhci_hcd.3: release socket [ 941.994660][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 942.006974][T25570] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 942.045253][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 942.065316][ T5881] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 942.106581][T25573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 942.257988][ T5881] usb 1-1: device descriptor read/64, error -71 [ 942.505869][ T5881] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 942.573908][T25582] netlink: 'syz.4.7000': attribute type 10 has an invalid length. [ 942.589721][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7000'. [ 942.646306][ T5881] usb 1-1: device descriptor read/64, error -71 [ 942.755633][ T5881] usb usb1-port1: attempt power cycle [ 942.812199][T25586] netlink: 'syz.4.7002': attribute type 72 has an invalid length. [ 942.823490][T25586] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7002'. [ 943.105374][ T5888] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 943.165845][T25588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7004'. [ 943.268894][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.287659][ T5888] usb 4-1: config 0 has no interface number 0 [ 943.311921][ T5888] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 943.325231][ T5881] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 943.330111][T25592] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7005'. [ 943.335008][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.350200][ T5888] usb 4-1: Product: syz [ 943.363719][ T5881] usb 1-1: device descriptor read/8, error -71 [ 943.370567][ T5888] usb 4-1: Manufacturer: syz [ 943.394801][ T5888] usb 4-1: SerialNumber: syz [ 943.406178][ T5888] usb 4-1: config 0 descriptor?? [ 943.568733][T25596] fuse: Bad value for 'group_id' [ 943.584709][T25596] fuse: Bad value for 'group_id' [ 943.623649][ T5888] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 943.632622][ T5881] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 943.656485][ T5888] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 943.666958][ T5881] usb 1-1: device descriptor read/8, error -71 [ 943.688514][ T5888] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 943.705322][ T5888] usb 4-1: media controller created [ 943.747955][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.776817][ T5881] usb usb1-port1: unable to enumerate USB device [ 944.054391][ T5881] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 944.195218][ T5881] usb 3-1: device descriptor read/64, error -71 [ 944.445316][ T5881] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 944.585186][ T5881] usb 3-1: device descriptor read/64, error -71 [ 944.695981][ T5881] usb usb3-port1: attempt power cycle [ 944.738053][T25617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7014'. [ 944.943266][ T5888] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 945.013461][T25619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7015'. [ 945.036394][ T5888] usb 4-1: USB disconnect, device number 58 [ 945.205385][ T5881] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 945.241472][ T5881] usb 3-1: device descriptor read/8, error -71 [ 945.495261][ T5881] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 945.516410][ T5881] usb 3-1: device descriptor read/8, error -71 [ 945.625753][ T5881] usb usb3-port1: unable to enumerate USB device [ 946.034537][T25649] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7026'. [ 946.057104][T25651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7027'. [ 946.108724][T25651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 947.061663][ T5888] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 947.243429][T25674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7032'. [ 947.355786][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 947.366735][ T5888] usb 4-1: config 0 has no interface number 0 [ 947.417399][ T5888] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 947.445348][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.465166][ T5888] usb 4-1: Product: syz [ 947.469527][ T5888] usb 4-1: Manufacturer: syz [ 947.474178][ T5888] usb 4-1: SerialNumber: syz [ 947.556139][ T5888] usb 4-1: config 0 descriptor?? [ 947.811218][ T5888] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 947.898123][ T5888] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 947.941974][ T5888] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 947.960389][ T5888] usb 4-1: media controller created [ 948.039956][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.015239][ T5895] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 949.065630][ T5888] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 949.359596][ T5895] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 949.371813][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.382910][ T5895] usb 3-1: Product: syz [ 949.405974][ T5895] usb 3-1: Manufacturer: syz [ 949.423118][ T5895] usb 3-1: SerialNumber: syz [ 949.584166][ T5895] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 949.605946][ T5888] usb 4-1: USB disconnect, device number 59 [ 949.628401][T25620] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 949.918594][ T5895] usb 3-1: USB disconnect, device number 72 [ 950.385407][T25695] program syz.5.7042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 950.719274][T25620] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 950.738119][T25702] syzkaller0: entered promiscuous mode [ 950.750618][T25620] ath9k_htc: Failed to initialize the device [ 950.769261][T25702] syzkaller0: entered allmulticast mode [ 950.778481][ T5895] usb 3-1: ath9k_htc: USB layer deinitialized [ 950.857804][T25711] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7049'. [ 951.106508][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 951.284357][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 951.320010][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 951.345445][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.358552][ T9] usb 6-1: Product: syz [ 951.362821][ T9] usb 6-1: Manufacturer: syz [ 951.375599][ T9] usb 6-1: SerialNumber: syz [ 951.403902][T25716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7051'. [ 951.414637][T25716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7051'. [ 951.424852][ T9] usb 6-1: config 0 descriptor?? [ 951.507490][T25718] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7052'. [ 951.853002][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 951.882594][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 951.893123][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 951.902885][ T9] usb 6-1: media controller created [ 951.921265][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.057534][T25709] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7048'. [ 952.130601][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 952.138780][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 953.137439][T25711] ..0{X功: renamed from ..1{X功 (while UP) [ 953.146879][T25711] ..0{X功: entered allmulticast mode [ 953.152728][T25711] A link change request failed with some changes committed already. Interface ..0{X功 may have been left with an inconsistent configuration, please check. [ 953.172066][T25620] usb 6-1: USB disconnect, device number 22 [ 953.297908][T25620] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 953.613826][T25739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7054'. [ 954.123705][ T5902] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 954.392628][ T5902] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 954.402340][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.416079][ T5902] usb 4-1: Product: syz [ 954.420295][ T5902] usb 4-1: Manufacturer: syz [ 954.461341][ T5902] usb 4-1: SerialNumber: syz [ 954.530318][ T5902] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 954.587141][ T5895] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 955.145362][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 955.305217][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 955.935426][ T5895] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 955.955413][ T5895] ath9k_htc: Failed to initialize the device [ 955.997856][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 956.010729][ T5895] usb 4-1: ath9k_htc: USB layer deinitialized [ 956.031029][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 956.089914][ T9] usb 6-1: can't read configurations, error -61 [ 956.266116][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 956.427691][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 956.436758][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 956.476358][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 956.484089][ T9] usb 6-1: can't read configurations, error -61 [ 956.494368][ T9] usb usb6-port1: attempt power cycle [ 956.505376][ T5895] usb 4-1: USB disconnect, device number 60 [ 956.915927][T25763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 956.922487][T25763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 956.930300][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 957.065256][ T5895] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 957.080376][T25763] vhci_hcd vhci_hcd.0: Device attached [ 957.087039][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 957.094583][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 957.107884][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 957.132160][T25771] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7065'. [ 957.141254][ T9] usb 6-1: can't read configurations, error -61 [ 957.150542][T25765] vhci_hcd: connection closed [ 957.150892][ T1101] vhci_hcd vhci_hcd.3: stop threads [ 957.164209][ T1101] vhci_hcd vhci_hcd.3: release socket [ 957.176994][ T1101] vhci_hcd vhci_hcd.3: disconnect device [ 957.193202][T25771] ..1{X功: renamed from ..0{X功 (while UP) [ 957.214548][T25771] A link change request failed with some changes committed already. Interface ..1{X功 may have been left with an inconsistent configuration, please check. [ 957.245287][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 957.252996][ T5895] usb 3-1: config 0 has no interfaces? [ 957.260611][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 957.270085][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 957.286098][ T5895] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 957.296042][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 957.303775][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 957.311601][ T5895] usb 3-1: Manufacturer: syz [ 957.327192][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 957.345417][ T9] usb 6-1: can't read configurations, error -61 [ 957.352493][ T9] usb usb6-port1: unable to enumerate USB device [ 957.370187][ T5895] usb 3-1: config 0 descriptor?? [ 957.765196][ T5895] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 958.015198][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 958.022641][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 958.040316][ T5895] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 958.061470][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 958.101579][ T5895] usb 1-1: Product: syz [ 958.109192][ T5895] usb 1-1: Manufacturer: syz [ 958.122144][ T5895] usb 1-1: SerialNumber: syz [ 958.151387][ T5895] usb 1-1: config 0 descriptor?? [ 958.164119][T25773] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 958.174686][ T5895] hub 1-1:0.0: bad descriptor, ignoring hub [ 958.188434][ T5895] hub 1-1:0.0: probe with driver hub failed with error -5 [ 958.431086][T25785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.439850][T25785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.229238][T16393] raw-gadget.2 gadget.0: failed to queue suspend event [ 959.305235][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 959.330542][T16393] raw-gadget.2 gadget.0: failed to queue suspend event [ 959.425572][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 959.576677][ T1101] raw-gadget.2 gadget.0: failed to queue suspend event [ 959.645238][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 959.671252][ T1101] raw-gadget.2 gadget.0: failed to queue suspend event [ 959.745952][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 959.797579][ T1101] raw-gadget.2 gadget.0: failed to queue suspend event [ 959.866175][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 959.894161][T16393] raw-gadget.2 gadget.0: failed to queue suspend event [ 959.968599][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 960.015911][ T1101] raw-gadget.2 gadget.0: failed to queue suspend event [ 960.025209][ T5902] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 960.095936][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 960.296364][ T1101] raw-gadget.2 gadget.0: failed to queue suspend event [ 960.296847][ T5902] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 960.313690][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.323320][ T5902] usb 4-1: Product: syz [ 960.328240][ T5902] usb 4-1: Manufacturer: syz [ 960.332936][ T5902] usb 4-1: SerialNumber: syz [ 960.370891][ T5902] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 960.395664][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 960.409624][ T5888] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 960.427287][ T1101] raw-gadget.2 gadget.0: failed to queue suspend event [ 960.503434][ T5909] usb 3-1: USB disconnect, device number 73 [ 960.565345][T25773] raw-gadget.2 gadget.0: failed to queue resume event [ 960.631307][T16393] raw-gadget.2 gadget.0: failed to queue suspend event [ 960.688167][ T5902] usb 4-1: USB disconnect, device number 61 [ 960.712884][T25773] raw-gadget.2 gadget.0: failed to queue disconnect event [ 960.817095][ T5909] usb 1-1: USB disconnect, device number 72 [ 961.235709][ T5909] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 961.436196][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 961.457323][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 961.476749][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 961.484403][ T5909] usb 5-1: can't read configurations, error -61 [ 961.595896][ T5888] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 961.616345][ T5888] ath9k_htc: Failed to initialize the device [ 961.625161][ T5909] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 961.633740][ T5902] usb 4-1: ath9k_htc: USB layer deinitialized [ 961.806914][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 961.817803][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 961.839395][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 961.862967][ T5909] usb 5-1: can't read configurations, error -61 [ 961.925351][ T5909] usb usb5-port1: attempt power cycle [ 961.967345][ T5902] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 962.172851][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 962.203684][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 962.222547][ T5902] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 962.232016][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 962.248041][ T5902] usb 4-1: Product: syz [ 962.256637][ T5902] usb 4-1: Manufacturer: syz [ 962.265264][ T5902] usb 4-1: SerialNumber: syz [ 962.292977][ T5909] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 962.302563][ T5902] usb 4-1: config 0 descriptor?? [ 962.309379][T25830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 962.320077][ T5902] hub 4-1:0.0: bad descriptor, ignoring hub [ 962.330774][ T5902] hub 4-1:0.0: probe with driver hub failed with error -5 [ 962.343047][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 962.362000][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 962.378978][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 962.390534][ T5909] usb 5-1: can't read configurations, error -61 [ 962.561331][ T5909] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 962.589491][T25857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.605742][T25857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.625191][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 962.634700][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 962.653784][ T1216] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 962.673710][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 962.687596][ T5909] usb 5-1: can't read configurations, error -61 [ 962.709021][ T5909] usb usb5-port1: unable to enumerate USB device [ 962.818918][ T1216] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 962.832754][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.851435][ T1216] usb 6-1: Product: syz [ 962.859965][ T1216] usb 6-1: Manufacturer: syz [ 962.864770][ T1216] usb 6-1: SerialNumber: syz [ 962.883370][ T1216] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 962.904364][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 963.132725][ T1216] usb 6-1: USB disconnect, device number 27 [ 963.263357][T25859] syzkaller0: entered promiscuous mode [ 963.275269][T25859] syzkaller0: entered allmulticast mode [ 963.288775][ T1101] raw-gadget.1 gadget.3: failed to queue suspend event [ 963.385409][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 963.417143][ T12] raw-gadget.1 gadget.3: failed to queue suspend event [ 963.478004][T25865] fuse: Unknown parameter 'grou00000000000000000000' [ 963.485393][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 963.520224][ T12] raw-gadget.1 gadget.3: failed to queue suspend event [ 963.605208][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 963.628961][ T12] raw-gadget.1 gadget.3: failed to queue suspend event [ 963.683641][T25874] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 963.690234][T25874] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 963.700658][T25874] vhci_hcd vhci_hcd.0: Device attached [ 963.715272][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 963.729768][T25876] vhci_hcd: connection closed [ 963.730491][T16393] vhci_hcd vhci_hcd.2: stop threads [ 963.746892][ T1146] raw-gadget.1 gadget.3: failed to queue suspend event [ 963.753918][T16393] vhci_hcd vhci_hcd.2: release socket [ 963.763810][T16393] vhci_hcd vhci_hcd.2: disconnect device [ 963.845480][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 963.878439][ T1146] raw-gadget.1 gadget.3: failed to queue suspend event [ 963.965523][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 963.999613][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 964.015638][ T9] ath9k_htc: Failed to initialize the device [ 964.021419][ T1146] raw-gadget.1 gadget.3: failed to queue suspend event [ 964.036080][ T1216] usb 6-1: ath9k_htc: USB layer deinitialized [ 964.096110][ T5902] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 964.102534][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 964.137836][ T1146] raw-gadget.1 gadget.3: failed to queue suspend event [ 964.218255][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 964.247458][T16393] raw-gadget.1 gadget.3: failed to queue suspend event [ 964.265313][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 964.278794][ T5902] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 964.297507][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.333511][ T5902] usb 1-1: Product: syz [ 964.338492][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 964.354594][ T5902] usb 1-1: Manufacturer: syz [ 964.360944][T25894] fuse: Unknown parameter 'group_i00000000000000000000' [ 964.368629][ T5902] usb 1-1: SerialNumber: syz [ 964.374715][T16393] raw-gadget.1 gadget.3: failed to queue suspend event [ 964.399643][ T5902] usb 1-1: config 0 descriptor?? [ 964.457727][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 964.509535][ T1146] raw-gadget.1 gadget.3: failed to queue suspend event [ 964.605231][T25830] raw-gadget.1 gadget.3: failed to queue resume event [ 964.633355][T16393] raw-gadget.1 gadget.3: failed to queue suspend event [ 964.703518][T25830] raw-gadget.1 gadget.3: failed to queue disconnect event [ 964.711965][ T9] usb 4-1: USB disconnect, device number 62 [ 964.837875][ T5902] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 964.863333][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 964.878365][ T5902] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 964.904108][ T5902] usb 1-1: media controller created [ 964.963161][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 965.135303][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 965.255263][ T5888] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 965.303376][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.322357][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 965.335365][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 965.363032][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 965.373496][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.385644][ T9] usb 3-1: Product: syz [ 965.394728][ T9] usb 3-1: Manufacturer: syz [ 965.401178][ T9] usb 3-1: SerialNumber: syz [ 965.433552][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 965.447421][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 965.463788][ T1216] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 965.475706][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 965.508429][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 965.539655][ T5888] usb 4-1: can't read configurations, error -61 [ 965.594993][ T5902] zl10353_read_register: readreg error (reg=127, ret==0) [ 965.610617][ T5902] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 965.634141][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 965.651065][ T5902] usb 1-1: USB disconnect, device number 73 [ 965.697071][ T5888] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 965.739252][ T9] usb 3-1: USB disconnect, device number 74 [ 965.826400][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 965.865550][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 965.894620][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 965.906711][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 965.914317][ T5888] usb 4-1: can't read configurations, error -61 [ 965.929024][ T5888] usb usb4-port1: attempt power cycle [ 966.092714][T25924] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 966.099306][T25924] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.108200][T25924] vhci_hcd vhci_hcd.0: Device attached [ 966.133796][T25926] vhci_hcd: connection closed [ 966.134135][ T13] vhci_hcd vhci_hcd.5: stop threads [ 966.155527][ T13] vhci_hcd vhci_hcd.5: release socket [ 966.160992][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 966.285470][ T5888] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 966.323959][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 966.343854][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 966.356888][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 966.374779][ T5888] usb 4-1: can't read configurations, error -61 [ 966.466641][ T5895] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 966.525275][ T5888] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 966.557554][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 966.563721][ T1216] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 966.569082][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 966.571752][ T1216] ath9k_htc: Failed to initialize the device [ 966.588061][ T5888] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 966.588401][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 966.604067][ T5888] usb 4-1: can't read configurations, error -61 [ 966.614285][ T5888] usb usb4-port1: unable to enumerate USB device [ 966.625134][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 966.636419][ T5895] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 966.651893][ T5895] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 966.671840][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 966.680466][ T5895] usb 5-1: Product: syz [ 966.697500][ T5895] usb 5-1: Manufacturer: syz [ 966.717613][ T5895] usb 5-1: SerialNumber: syz [ 966.743898][ T5895] usb 5-1: config 0 descriptor?? [ 966.896549][T25930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 966.916645][ T5895] hub 5-1:0.0: bad descriptor, ignoring hub [ 966.940484][ T5895] hub 5-1:0.0: probe with driver hub failed with error -5 [ 966.981741][T25944] syzkaller0: entered promiscuous mode [ 966.987487][T25944] syzkaller0: entered allmulticast mode [ 967.255457][ T1216] usb 5-1: USB disconnect, device number 79 [ 967.785264][ T5895] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 967.959188][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 968.024988][ T5895] usb 5-1: language id specifier not provided by device, defaulting to English [ 968.036340][ T5895] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 968.051970][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 968.070931][ T5895] usb 5-1: Product: syz [ 968.090342][ T5895] usb 5-1: Manufacturer: syz [ 968.100708][ T5895] usb 5-1: SerialNumber: syz [ 968.122250][ T5895] usb 5-1: config 0 descriptor?? [ 968.140283][T25930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 968.166018][ T5895] hub 5-1:0.0: bad descriptor, ignoring hub [ 968.178006][ T5895] hub 5-1:0.0: probe with driver hub failed with error -5 [ 968.415724][T25969] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 968.422288][T25969] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 968.432764][T25971] ..1{X功: left allmulticast mode [ 968.553869][T25969] vhci_hcd vhci_hcd.0: Device attached [ 968.560865][ T5895] usb 5-1: USB disconnect, device number 80 [ 968.612465][T25972] vhci_hcd: connection closed [ 968.613160][ T12] vhci_hcd vhci_hcd.5: stop threads [ 968.735444][ T12] vhci_hcd vhci_hcd.5: release socket [ 968.741041][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 969.028300][ T5921] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 969.197092][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.207808][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 969.226192][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 969.353977][T25984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7149'. [ 969.385193][ T5888] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 969.407733][ T5921] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 969.489851][T25984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 969.498365][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.518664][ T5921] usb 4-1: Product: syz [ 969.523067][T25986] bond3: entered allmulticast mode [ 969.546991][ T5921] usb 4-1: Manufacturer: syz [ 969.562945][ T5921] usb 4-1: SerialNumber: syz [ 969.586936][ T5888] usb 3-1: config 0 has no interfaces? [ 969.603566][ T5888] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 969.617375][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.635220][ T5888] usb 3-1: Product: syz [ 969.639939][ T5888] usb 3-1: Manufacturer: syz [ 969.644579][ T5888] usb 3-1: SerialNumber: syz [ 969.646749][ T5921] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 969.677693][ T5888] usb 3-1: config 0 descriptor?? [ 969.686943][T22006] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 969.893403][T25620] usb 4-1: USB disconnect, device number 67 [ 970.061416][T25980] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.282401][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7155'. [ 970.684136][ T5895] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 970.812812][T22006] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 970.828954][T22006] ath9k_htc: Failed to initialize the device [ 970.859899][T25620] usb 4-1: ath9k_htc: USB layer deinitialized [ 971.055492][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 971.074103][ T5895] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 971.083975][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.097715][ T5895] usb 5-1: Product: syz [ 971.102049][ T5895] usb 5-1: Manufacturer: syz [ 971.129317][ T5895] usb 5-1: SerialNumber: syz [ 971.151567][ T5895] usb 5-1: config 0 descriptor?? [ 971.827175][ T5895] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 971.846084][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 971.864751][ T5895] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 971.884482][ T5895] usb 5-1: media controller created [ 971.933448][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.961389][T22006] usb 3-1: USB disconnect, device number 75 [ 972.016098][ T5921] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 972.179616][ T5921] usb 1-1: config 201 has an invalid interface number: 249 but max is 0 [ 972.191213][ T5921] usb 1-1: config 201 has no interface number 0 [ 972.210288][ T5921] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 972.232717][ T5921] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 972.248514][ T5921] usb 1-1: config 201 interface 249 has no altsetting 0 [ 972.259179][ T5921] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 972.289188][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.332015][ T5921] usb 1-1: Product: syz [ 972.347246][ T5921] usb 1-1: Manufacturer: syz [ 972.362569][ T5921] usb 1-1: SerialNumber: syz [ 972.406619][T26032] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7168'. [ 972.535448][ T5895] zl10353_read_register: readreg error (reg=127, ret==0) [ 972.548226][ T5895] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 972.567653][ T5895] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 972.593187][ T5895] usb 5-1: USB disconnect, device number 81 [ 972.595306][T26017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.692131][ T5921] ath6kl: Failed to submit usb control message: -71 [ 972.718565][ T5921] ath6kl: unable to send the bmi data to the device: -71 [ 972.726336][ T5921] ath6kl: Unable to send get target info: -71 [ 972.733422][ T5921] ath6kl: Failed to init ath6kl core: -71 [ 972.749193][ T5895] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 972.780885][ T5921] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 972.814551][ T5921] usb 1-1: USB disconnect, device number 74 [ 972.938623][ T5888] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 973.107159][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.135509][ T5888] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 973.155482][ T5888] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 973.183673][ T5888] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 973.193295][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.204536][ T5888] usb 6-1: Product: syz [ 973.211546][ T5888] usb 6-1: Manufacturer: syz [ 973.218830][ T5888] usb 6-1: SerialNumber: syz [ 973.244506][ T5888] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 973.300283][T25620] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 973.522474][ T5921] usb 6-1: USB disconnect, device number 28 [ 973.614778][T26064] syzkaller0: entered promiscuous mode [ 973.633994][T26064] syzkaller0: entered allmulticast mode [ 973.927090][T26073] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7176'. [ 974.265828][T26081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7180'. [ 974.398136][T25620] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 974.486404][T25620] ath9k_htc: Failed to initialize the device [ 974.504201][ T5921] usb 6-1: ath9k_htc: USB layer deinitialized [ 974.765185][ T5895] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 974.915214][ T5921] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 974.935851][ T5895] usb 1-1: config 201 has an invalid interface number: 249 but max is 0 [ 974.944226][ T5895] usb 1-1: config 201 has no interface number 0 [ 974.957923][ T5895] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 974.989037][ T5895] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 975.012727][ T5895] usb 1-1: config 201 interface 249 has no altsetting 0 [ 975.048715][ T5895] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 975.060637][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.075158][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 975.083959][ T5895] usb 1-1: Product: syz [ 975.092054][ T5921] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 975.095222][ T5895] usb 1-1: Manufacturer: syz [ 975.118719][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.125279][ T5895] usb 1-1: SerialNumber: syz [ 975.144509][ T5921] usb 6-1: Product: syz [ 975.161600][ T5921] usb 6-1: Manufacturer: syz [ 975.171249][ T5921] usb 6-1: SerialNumber: syz [ 975.183280][ T5921] usb 6-1: config 0 descriptor?? [ 975.349082][T26091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.413080][ T5895] ath6kl: Failed to submit usb control message: -71 [ 975.430741][ T5895] ath6kl: unable to send the bmi data to the device: -71 [ 975.440828][ T5895] ath6kl: Unable to send get target info: -71 [ 975.463657][T26108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7194'. [ 975.484038][ T5895] ath6kl: Failed to init ath6kl core: -71 [ 975.503398][ T5895] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 975.572090][ T5895] usb 1-1: USB disconnect, device number 75 [ 975.602556][ T5921] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 975.679767][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 975.734614][ T5921] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 975.782220][ T5921] usb 6-1: media controller created [ 975.842562][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.925603][ T5921] zl10353_read_register: readreg error (reg=127, ret==0) [ 975.934098][ T5921] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 975.962777][ T5921] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 975.976041][ T1216] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 976.055726][ T5921] usb 6-1: USB disconnect, device number 29 [ 976.200585][ T1216] usb 3-1: Using ep0 maxpacket: 16 [ 976.219673][ T1216] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 976.233076][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.241728][ T1216] usb 3-1: Product: syz [ 976.250908][ T5921] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 976.265880][ T1216] usb 3-1: Manufacturer: syz [ 976.270700][ T1216] usb 3-1: SerialNumber: syz [ 976.510607][ T1216] usb 3-1: config 0 descriptor?? [ 976.729207][T26133] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7202'. [ 976.815219][ T5888] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 976.956431][ T1216] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 976.974808][ T1216] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 976.988971][ T1216] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 977.009687][ T1216] usb 3-1: media controller created [ 977.053964][ T1216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.069650][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 977.080139][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 977.094266][ T5888] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 977.106806][ T5888] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 977.137144][ T5888] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 977.220847][ T5888] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 977.348124][ T5888] usb 1-1: Manufacturer: syz [ 977.360597][ T5888] usb 1-1: SerialNumber: syz [ 977.745624][ T1216] zl10353_read_register: readreg error (reg=127, ret==0) [ 977.753048][ T1216] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 977.765463][T26126] ------------[ cut here ]------------ [ 977.771035][T26126] usb 3-1: BOGUS control dir, pipe 80004c80 doesn't match bRequestType c0 [ 977.780134][T26126] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.0.7201/26126 [ 977.791107][T26126] Modules linked in: [ 977.795570][T26126] CPU: 0 UID: 0 PID: 26126 Comm: syz.0.7201 Not tainted syzkaller #0 PREEMPT(full) [ 977.806089][T26126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 977.816394][T26126] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 977.822087][T26126] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 977.841975][T26126] RSP: 0018:ffffc90003ebf6e8 EFLAGS: 00010246 [ 977.848401][T26126] RAX: 0000000000000000 RBX: ffff8880691d3f00 RCX: 0000000080004c80 [ 977.856687][T26126] RDX: ffff88803df4f8a0 RSI: ffffffff8c7ed420 RDI: ffffffff901e2a50 [ 977.864790][T26126] RBP: 1ffff11006568a70 R08: 00000000000000c0 R09: 0000000000000000 [ 977.872843][T26126] R10: ffffc90003ebf7e0 R11: fffff520007d7f08 R12: ffff888059518100 [ 977.880893][T26126] R13: ffff888032b45380 R14: 0000000080004c80 R15: ffff88803df4f8a0 [ 977.888982][T26126] FS: 00007fddf83d06c0(0000) GS:ffff8881254a0000(0000) knlGS:0000000000000000 [ 977.898150][T26126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 977.904767][T26126] CR2: 00002000003a7030 CR3: 00000000294f8000 CR4: 00000000003526f0 [ 977.912877][T26126] Call Trace: [ 977.916323][T26126] [ 977.919297][T26126] ? __init_swait_queue_head+0xa9/0x150 [ 977.924895][T26126] usb_start_wait_urb+0x12b/0x510 [ 977.930043][T26126] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 977.935688][T26126] usb_control_msg+0x232/0x3e0 [ 977.940498][T26126] dtv5100_i2c_msg+0x231/0x2f0 [ 977.945359][T26126] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 977.950263][T26126] __i2c_transfer+0x79a/0x1ee0 [ 977.955136][T26126] ? i2c_transfer+0xc8/0x2d0 [ 977.959774][T26126] i2c_transfer+0x1cc/0x2d0 [ 977.964320][T26126] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 977.970055][T26126] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 977.976332][T26126] ? _copy_from_user+0x94/0xb0 [ 977.981157][T26126] i2cdev_write+0x113/0x1e0 [ 977.985912][T26126] vfs_writev+0x4bd/0x990 [ 977.990288][T26126] ? __pfx_i2cdev_write+0x10/0x10 [ 977.995442][T26126] ? __pfx_vfs_writev+0x10/0x10 [ 978.000421][T26126] ? __fget_files+0x2a/0x420 [ 978.005129][T26126] ? __fget_files+0x3a0/0x420 [ 978.009849][T26126] ? __fget_files+0x2a/0x420 [ 978.014493][T26126] do_writev+0x154/0x2e0 [ 978.018875][T26126] ? __pfx_do_writev+0x10/0x10 [ 978.023687][T26126] do_syscall_64+0x14d/0xf80 [ 978.028428][T26126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.034542][T26126] ? trace_irq_disable+0x37/0x100 [ 978.039713][T26126] ? clear_bhb_loop+0x40/0x90 [ 978.044443][T26126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.050420][T26126] RIP: 0033:0x7fddf759bf79 [ 978.054932][T26126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.074687][T26126] RSP: 002b:00007fddf83d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 978.083315][T26126] RAX: ffffffffffffffda RBX: 00007fddf7815fa0 RCX: 00007fddf759bf79 [ 978.091388][T26126] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 978.099492][T26126] RBP: 00007fddf76327e0 R08: 0000000000000000 R09: 0000000000000000 [ 978.107635][T26126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.115716][T26126] R13: 00007fddf7816038 R14: 00007fddf7815fa0 R15: 00007fddf793fa48 [ 978.123742][T26126] [ 978.126934][T26126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 978.134243][T26126] CPU: 0 UID: 0 PID: 26126 Comm: syz.0.7201 Not tainted syzkaller #0 PREEMPT(full) [ 978.143667][T26126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 978.153763][T26126] Call Trace: [ 978.157084][T26126] [ 978.160060][T26126] vpanic+0x56c/0xa60 [ 978.164098][T26126] ? __pfx__printk+0x10/0x10 [ 978.168715][T26126] ? __pfx_vpanic+0x10/0x10 [ 978.173246][T26126] ? is_bpf_text_address+0x292/0x2b0 [ 978.178582][T26126] ? is_bpf_text_address+0x26/0x2b0 [ 978.183822][T26126] panic+0xc5/0xd0 [ 978.187679][T26126] ? __pfx_panic+0x10/0x10 [ 978.192155][T26126] __warn+0x315/0x4a0 [ 978.196188][T26126] ? usb_submit_urb+0x1052/0x18b0 [ 978.201247][T26126] ? usb_submit_urb+0x1052/0x18b0 [ 978.206321][T26126] __report_bug+0x29a/0x540 [ 978.210867][T26126] ? usb_submit_urb+0x1052/0x18b0 [ 978.215922][T26126] ? __pfx___report_bug+0x10/0x10 [ 978.220995][T26126] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 978.226841][T26126] ? lockdep_hardirqs_on+0x7a/0x110 [ 978.232091][T26126] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 978.237969][T26126] ? stack_depot_save_flags+0x3f3/0x810 [ 978.243565][T26126] report_bug_entry+0x19a/0x290 [ 978.248474][T26126] ? usb_submit_urb+0x1114/0x18b0 [ 978.253550][T26126] ? usb_submit_urb+0x1119/0x18b0 [ 978.258610][T26126] handle_bug+0xca/0x200 [ 978.262895][T26126] exc_invalid_op+0x1a/0x50 [ 978.267546][T26126] asm_exc_invalid_op+0x1a/0x20 [ 978.272433][T26126] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 978.278120][T26126] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 978.297770][T26126] RSP: 0018:ffffc90003ebf6e8 EFLAGS: 00010246 [ 978.303889][T26126] RAX: 0000000000000000 RBX: ffff8880691d3f00 RCX: 0000000080004c80 [ 978.311927][T26126] RDX: ffff88803df4f8a0 RSI: ffffffff8c7ed420 RDI: ffffffff901e2a50 [ 978.319942][T26126] RBP: 1ffff11006568a70 R08: 00000000000000c0 R09: 0000000000000000 [ 978.328029][T26126] R10: ffffc90003ebf7e0 R11: fffff520007d7f08 R12: ffff888059518100 [ 978.336042][T26126] R13: ffff888032b45380 R14: 0000000080004c80 R15: ffff88803df4f8a0 [ 978.344064][T26126] ? usb_submit_urb+0x10a3/0x18b0 [ 978.349145][T26126] ? __init_swait_queue_head+0xa9/0x150 [ 978.354741][T26126] usb_start_wait_urb+0x12b/0x510 [ 978.359837][T26126] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 978.365454][T26126] usb_control_msg+0x232/0x3e0 [ 978.370342][T26126] dtv5100_i2c_msg+0x231/0x2f0 [ 978.375170][T26126] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 978.380155][T26126] __i2c_transfer+0x79a/0x1ee0 [ 978.384965][T26126] ? i2c_transfer+0xc8/0x2d0 [ 978.389583][T26126] i2c_transfer+0x1cc/0x2d0 [ 978.394160][T26126] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 978.399852][T26126] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 978.406268][T26126] ? _copy_from_user+0x94/0xb0 [ 978.411113][T26126] i2cdev_write+0x113/0x1e0 [ 978.415667][T26126] vfs_writev+0x4bd/0x990 [ 978.420051][T26126] ? __pfx_i2cdev_write+0x10/0x10 [ 978.425115][T26126] ? __pfx_vfs_writev+0x10/0x10 [ 978.430045][T26126] ? __fget_files+0x2a/0x420 [ 978.434671][T26126] ? __fget_files+0x3a0/0x420 [ 978.439497][T26126] ? __fget_files+0x2a/0x420 [ 978.444153][T26126] do_writev+0x154/0x2e0 [ 978.448432][T26126] ? __pfx_do_writev+0x10/0x10 [ 978.453252][T26126] do_syscall_64+0x14d/0xf80 [ 978.457913][T26126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.464027][T26126] ? trace_irq_disable+0x37/0x100 [ 978.469079][T26126] ? clear_bhb_loop+0x40/0x90 [ 978.473803][T26126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.479719][T26126] RIP: 0033:0x7fddf759bf79 [ 978.484173][T26126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.503812][T26126] RSP: 002b:00007fddf83d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 978.512277][T26126] RAX: ffffffffffffffda RBX: 00007fddf7815fa0 RCX: 00007fddf759bf79 [ 978.520285][T26126] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 978.528312][T26126] RBP: 00007fddf76327e0 R08: 0000000000000000 R09: 0000000000000000 [ 978.536323][T26126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.544335][T26126] R13: 00007fddf7816038 R14: 00007fddf7815fa0 R15: 00007fddf793fa48 [ 978.552367][T26126] [ 978.556035][T26126] Kernel Offset: disabled [ 978.560375][T26126] Rebooting in 86400 seconds..