last executing test programs: 11m30.62231917s ago: executing program 2 (id=604): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x8b6233a1f1d05acf, 0x0, 0x0, 0x0, 0xe, 0xffffffffffffffe0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4302420}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x280, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x37e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9e}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff7}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x80000001}}, {0x8}, {0x6, 0x16, 0xfff9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb459}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffbff}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x5d}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xfffffffd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7dc3}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xe8c0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xf}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xb81}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000000000ab1bec3bcbfcd52f4f8b58f2ef3070afddb5d725350f174050156d9bf693975381ff2a35ecb1e7bd9d5eda43204c7a4bb37c9fefd49a0c05a014c48b281c098e906d9e0c4a58a042af45827e46baac20b6feae4bb758b556738d89e8b53a945638f6eb1ce0f7faa9b00118a94ffc214b82d921de3583d0d41a6994d7fa0bf7037aca4ef3804953a7079ff9f2795592afe529dab0045bcc3e6ed42d7b92e3e2385ba2e13f1a07a055a52cd7713444aba60711565a0d7ae3225cb6fbeba5b2b3923cdc4e488be04779d26f5b541220e31c422"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r6 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 11m30.359211059s ago: executing program 2 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11m30.113703066s ago: executing program 2 (id=612): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e65", 0x6}], 0x1, 0x0, 0x0, 0x806}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000004c0)=""/220, 0xdc}], 0x1}, 0x3af4c583}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002540)=""/178, 0xb2}], 0x1}, 0x656}], 0x2, 0x2101, 0x0) 11m29.935729143s ago: executing program 2 (id=615): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000004) setpgid(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 11m29.730863305s ago: executing program 2 (id=617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0xfdef}], 0x1) 11m19.317978074s ago: executing program 2 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004000) 11m18.977890253s ago: executing program 32 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004000) 7.654197455s ago: executing program 5 (id=4404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.414688264s ago: executing program 5 (id=4409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {0x0}], 0x2}}], 0x2, 0x44051) 7.223429633s ago: executing program 5 (id=4413): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.093109243s ago: executing program 5 (id=4416): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x40, 0x1, 0x4, "4d69f4ae"}, 0x0, 0x0}) 4.651788916s ago: executing program 3 (id=4425): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000040)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 4.467516901s ago: executing program 3 (id=4426): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.272753977s ago: executing program 3 (id=4427): r0 = socket(0x26, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x67}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x8000002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x40, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0x9, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x48, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x22, 0x0, 0x8, 0x3, 0x100, 0x2, 0x208, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x40000001, 0x6, 0x3, 0x4, 0x10001, 0xe3, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0x100000ff, 0x11, 0x6, 0xa, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x85, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x7, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000040)={0xffffffec, 0x11, 0x0, 0x100, 0x8}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/mnt\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x25, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @exit, @jmp={0x5, 0x1, 0x4, 0x0, 0xa, 0xfffffffffffffff0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x85, &(0x7f0000000b00)=""/133, 0x41100, 0x22, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x2, 0x7, 0x4, 0xf}, 0x10, 0x14d34, r4, 0x7, &(0x7f0000000c00)=[r4, r4, r4], &(0x7f0000000c40)=[{0x3, 0x3, 0x2, 0x1}, {0x3, 0x5, 0x0, 0x6}, {0x4, 0x3, 0x3, 0x6}, {0x0, 0x1, 0x4}, {0x5, 0x4, 0xd, 0x2}, {0x0, 0x5, 0xd, 0x9}, {0x5, 0x2, 0x4, 0xc}], 0x10, 0x1694}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xd8, &(0x7f0000000000), 0x40000016, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 4.195103951s ago: executing program 3 (id=4429): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1, 0x1800}], 0x1, 0x0) 3.993174448s ago: executing program 3 (id=4433): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080), 0x20) 3.837053837s ago: executing program 5 (id=4435): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000100), 0x12) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.678815682s ago: executing program 1 (id=4437): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba5", 0xc2}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.595709481s ago: executing program 5 (id=4438): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000740)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.492975685s ago: executing program 1 (id=4440): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.322381417s ago: executing program 1 (id=4444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) fcntl$dupfd(r0, 0x406, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 3.221079864s ago: executing program 0 (id=4445): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xb0000009}) r4 = syz_open_pts(0xffffffffffffffff, 0x80) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) dup3(r4, 0xffffffffffffffff, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@index_off}, {@volatile}, {@xino_auto}, {@metacopy_on}, {@xino_auto}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x2c, 0x0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x0) 3.20843172s ago: executing program 4 (id=4446): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.130410411s ago: executing program 4 (id=4447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)}], 0x2}}], 0x2, 0x44051) 3.075852254s ago: executing program 1 (id=4448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x80) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) dup3(r5, 0xffffffffffffffff, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@index_off}, {@volatile}, {@xino_auto}, {@metacopy_on}, {@xino_auto}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x2c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x0) 942.076154ms ago: executing program 0 (id=4449): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) 941.391862ms ago: executing program 4 (id=4450): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x16556000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ef3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) preadv(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) 814.867259ms ago: executing program 4 (id=4451): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{}, 0x4, 0x7, 0x8}) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394", 0x23}], 0x3}], 0x1, 0x40800) recvmsg$qrtr(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/217, 0xd9}], 0x1, 0x0, 0x0, 0x40004002}, 0x38, 0x12001) r4 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) socket(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x40009, 0x9) eventfd2(0x0, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x8, 0x3) 549.261729ms ago: executing program 0 (id=4452): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) 534.708209ms ago: executing program 0 (id=4453): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfd58, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 488.802484ms ago: executing program 4 (id=4454): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) 398.338009ms ago: executing program 0 (id=4455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40088d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 397.964138ms ago: executing program 4 (id=4456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 396.190837ms ago: executing program 3 (id=4457): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 353.277463ms ago: executing program 1 (id=4458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) fcntl$dupfd(r0, 0x406, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 336.296µs ago: executing program 0 (id=4459): socket$netlink(0x10, 0x3, 0x8000000004) rmdir(0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x10c89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xfff2}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004061}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=4460): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) kernel console output (not intermixed with test programs): cd.5: release socket [ 723.739145][T16685] vhci_hcd: connection closed [ 723.748767][T16680] vhci_hcd: connection closed [ 723.775321][T16681] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 723.834254][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 723.860707][ T69] vhci_hcd vhci_hcd.5: stop threads [ 723.860732][ T69] vhci_hcd vhci_hcd.5: release socket [ 723.860795][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 723.890000][ T69] vhci_hcd vhci_hcd.5: stop threads [ 723.890023][ T69] vhci_hcd vhci_hcd.5: release socket [ 723.890086][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 723.890141][ T69] vhci_hcd vhci_hcd.5: stop threads [ 723.890153][ T69] vhci_hcd vhci_hcd.5: release socket [ 723.890204][ T69] vhci_hcd vhci_hcd.5: disconnect device [ 724.343208][T16310] veth0_vlan: entered promiscuous mode [ 724.410632][T16310] veth1_vlan: entered promiscuous mode [ 724.606069][T16310] veth0_macvtap: entered promiscuous mode [ 724.612387][T16310] veth1_macvtap: entered promiscuous mode [ 724.762055][T16310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.791077][T16310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.827334][ T1442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.838632][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.859436][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.892168][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.965810][T16709] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3599'. [ 725.693776][ T6015] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 725.781125][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.781143][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.889134][ T6015] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 725.889166][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.889186][ T6015] usb 1-1: Product: syz [ 725.889200][ T6015] usb 1-1: Manufacturer: syz [ 725.889215][ T6015] usb 1-1: SerialNumber: syz [ 725.941449][ T6015] usb 1-1: config 0 descriptor?? [ 726.039917][ T1446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.039939][ T1446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.958583][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3617'. [ 726.978494][T16753] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 726.978522][T16753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 727.051297][T16753] vhci_hcd vhci_hcd.0: Device attached [ 727.066660][T16762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 727.066682][T16762] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 727.066811][T16762] vhci_hcd vhci_hcd.0: Device attached [ 727.082936][T16753] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 727.083002][T16753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 727.083118][T16753] vhci_hcd vhci_hcd.0: Device attached [ 727.125834][T16753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 727.129318][T16753] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 727.163698][T16753] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 727.163725][T16753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 727.231577][T16753] vhci_hcd vhci_hcd.0: Device attached [ 727.280157][T16768] vhci_hcd: connection closed [ 727.285148][T16765] vhci_hcd: connection closed [ 727.285410][T16763] vhci_hcd: connection closed [ 727.287784][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 727.287826][ T1142] vhci_hcd vhci_hcd.3: release socket [ 727.287904][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 727.289227][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 727.289244][ T1142] vhci_hcd vhci_hcd.3: release socket [ 727.305035][T16758] vhci_hcd: connection closed [ 727.344570][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 727.366792][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 727.366813][ T1142] vhci_hcd vhci_hcd.3: release socket [ 727.366871][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 727.367456][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 727.367470][ T1142] vhci_hcd vhci_hcd.3: release socket [ 727.367522][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 727.433730][ T820] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 727.433793][ T820] usb 39-1: enqueue for inactive port 0 [ 727.529301][ T820] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 728.478990][ T5904] usb 1-1: USB disconnect, device number 16 [ 728.822713][T16804] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3632'. [ 728.822736][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3632'. [ 728.824732][ T36] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 728.965993][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'. [ 729.124301][ T6023] usb usb40-port1: attempt power cycle [ 729.149467][T16818] netlink: 'syz.1.3637': attribute type 1 has an invalid length. [ 729.290853][T16822] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 729.695109][ T6023] usb usb40-port1: unable to enumerate USB device [ 730.140092][T15114] usb usb44-port1: attempt power cycle [ 730.705755][T12370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.772011][T12370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.820139][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.823282][T15114] usb usb44-port1: unable to enumerate USB device [ 730.862240][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.870957][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 730.994657][T16854] tipc: Enabling of bearer rejected, failed to enable media [ 731.232055][T16872] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 731.232073][T16872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.258290][T16872] vhci_hcd vhci_hcd.0: Device attached [ 731.260545][T16872] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 731.260561][T16872] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 731.261612][T16872] vhci_hcd vhci_hcd.0: Device attached [ 731.263511][T16872] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 731.263528][T16872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.266099][T16872] vhci_hcd vhci_hcd.0: Device attached [ 731.278477][T16872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 731.283179][T16872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 731.337605][T16872] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 731.337693][T16872] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 731.338347][T16872] vhci_hcd vhci_hcd.0: Device attached [ 731.503747][ T36] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 731.892061][T16887] dvmrp1: entered allmulticast mode [ 732.019939][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3660'. [ 732.019955][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3660'. [ 732.062233][T16880] vhci_hcd: connection closed [ 732.062620][ T13] vhci_hcd vhci_hcd.1: stop threads [ 732.062638][ T13] vhci_hcd vhci_hcd.1: release socket [ 732.074031][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 732.078772][T16878] vhci_hcd: connection closed [ 732.087122][T16874] vhci_hcd: connection reset by peer [ 732.090629][T16876] vhci_hcd: connection closed [ 732.149390][ T13] vhci_hcd vhci_hcd.1: stop threads [ 732.149415][ T13] vhci_hcd vhci_hcd.1: release socket [ 732.149476][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 732.149744][ T13] vhci_hcd vhci_hcd.1: stop threads [ 732.149758][ T13] vhci_hcd vhci_hcd.1: release socket [ 732.149788][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 732.197609][ T13] vhci_hcd vhci_hcd.1: stop threads [ 732.197627][ T13] vhci_hcd vhci_hcd.1: release socket [ 732.197669][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 732.592872][T16872] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 732.938567][ T1025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.153993][ T5904] IPVS: starting estimator thread 0... [ 733.243745][T16924] IPVS: using max 9 ests per chain, 21600 per kthread [ 733.418600][ T1025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.498137][T16861] chnl_net:caif_netlink_parms(): no params data found [ 733.858284][T16940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3678'. [ 734.177639][ T1025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.282881][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3679'. [ 734.282903][T16942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3679'. [ 734.861161][ T1025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.364464][T16954] tipc: Started in network mode [ 735.364493][T16954] tipc: Node identity d2a9375e8452, cluster identity 4711 [ 735.364656][T16954] tipc: Enabled bearer , priority 0 [ 735.366074][T16955] syzkaller0: entered promiscuous mode [ 735.366096][T16955] syzkaller0: entered allmulticast mode [ 735.416436][T16961] tipc: Resetting bearer [ 735.534680][T16953] tipc: Resetting bearer [ 735.665985][T16953] tipc: Disabling bearer [ 735.785141][T16861] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.785362][T16861] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.785594][T16861] bridge_slave_0: entered allmulticast mode [ 735.788186][T16861] bridge_slave_0: entered promiscuous mode [ 735.822017][T16861] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.822241][T16861] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.822423][T16861] bridge_slave_1: entered allmulticast mode [ 735.830818][T16861] bridge_slave_1: entered promiscuous mode [ 735.903912][T16861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.907990][T16861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.020327][T16861] team0: Port device team_slave_0 added [ 736.030664][T16861] team0: Port device team_slave_1 added [ 736.075234][T16861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.075251][T16861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.075277][T16861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.077706][T16861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.077720][T16861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.077745][T16861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.313932][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 736.583822][ T36] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 736.626328][T16973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 736.627014][ T1442] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.651517][T16861] hsr_slave_0: entered promiscuous mode [ 736.654984][T16861] hsr_slave_1: entered promiscuous mode [ 736.657579][T16861] debugfs: 'hsr0' already exists in 'hsr' [ 736.657601][T16861] Cannot create hsr debugfs directory [ 736.812283][ T1442] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.905545][T16991] netlink: 'syz.0.3696': attribute type 1 has an invalid length. [ 737.191210][T16998] tipc: Started in network mode [ 737.191243][T16998] tipc: Node identity 5a5f517f3f4b, cluster identity 4711 [ 737.191706][T16998] tipc: Enabled bearer , priority 0 [ 737.191775][ T1442] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.206055][T16993] syzkaller0: entered promiscuous mode [ 737.206125][T16993] syzkaller0: entered allmulticast mode [ 737.287683][T16993] tipc: Resetting bearer [ 737.466794][ T69] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.005328][ T820] usb usb36-port1: attempt power cycle [ 738.345775][T17019] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3703'. [ 738.353944][T16861] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.585218][ T820] usb usb36-port1: unable to enumerate USB device [ 738.923982][ T1025] bridge_slave_1: left allmulticast mode [ 738.924004][ T1025] bridge_slave_1: left promiscuous mode [ 738.924231][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.984773][ T1025] bridge_slave_0: left allmulticast mode [ 738.984802][ T1025] bridge_slave_0: left promiscuous mode [ 738.984996][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.174459][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.194506][ T1025] bond_slave_0: left allmulticast mode [ 740.234361][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.254158][ T1025] bond_slave_1: left allmulticast mode [ 740.256070][ T1025] bond0 (unregistering): Released all slaves [ 740.263291][ T1025] bond1 (unregistering): Released all slaves [ 740.290357][ T1025] bond2 (unregistering): Released all slaves [ 740.309351][ T1025] bond3 (unregistering): Released all slaves [ 740.474032][T16992] tipc: Resetting bearer [ 740.625212][T16992] tipc: Disabling bearer [ 740.764057][ T5922] tipc: Node number set to 1695830399 [ 740.773208][ T5477] 8021q: adding VLAN 0 to HW filter on device eth5 [ 740.823918][ T1025] tipc: Left network mode [ 740.880355][T16861] netdevsim netdevsim5 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.085085][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 741.459968][T16861] netdevsim netdevsim5 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.566061][ T5904] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 741.715250][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 741.723008][ T5904] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.723033][ T5904] usb 5-1: config 0 has no interface number 0 [ 741.723072][ T5904] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 741.723086][ T5904] usb 5-1: config 0 interface 1 has no altsetting 0 [ 741.748817][ T5904] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 741.748904][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.748984][ T5904] usb 5-1: Product: syz [ 741.749023][ T5904] usb 5-1: Manufacturer: syz [ 741.749294][ T5904] usb 5-1: SerialNumber: syz [ 741.804002][ T5904] usb 5-1: config 0 descriptor?? [ 741.907535][T16861] netdevsim netdevsim5 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.052796][ T5904] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 742.171898][ T5904] cx231xx 5-1:0.1: Failed to read PCB config [ 742.172095][ T5904] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 742.227787][ T5904] usb 5-1: USB disconnect, device number 17 [ 742.281579][T17049] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3714'. [ 742.573750][ T5904] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 742.708924][ T1025] hsr_slave_0: left promiscuous mode [ 742.723978][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 742.726583][ T5904] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 742.726607][ T5904] usb 5-1: config 0 has no interface number 0 [ 742.726647][ T5904] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 742.726667][ T5904] usb 5-1: config 0 interface 1 has no altsetting 0 [ 742.729632][ T5904] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 742.729659][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.729678][ T5904] usb 5-1: Product: syz [ 742.729691][ T5904] usb 5-1: Manufacturer: syz [ 742.729705][ T5904] usb 5-1: SerialNumber: syz [ 742.804067][ T5904] usb 5-1: config 0 descriptor?? [ 742.804494][ T1025] hsr_slave_1: left promiscuous mode [ 742.828742][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.828773][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.866035][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.866062][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.002784][ T1025] veth1_macvtap: left promiscuous mode [ 743.002878][ T1025] veth0_macvtap: left promiscuous mode [ 743.003106][ T1025] veth1_vlan: left promiscuous mode [ 743.003387][ T1025] veth0_vlan: left promiscuous mode [ 743.044170][ T5904] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 743.046809][ T5904] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 743.160653][ T5904] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 743.161292][ T5904] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 743.162799][ T5904] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 743.163255][ T5904] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 743.195954][ T5904] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 743.195977][ T5904] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 743.312559][ T5904] i2c i2c-2: Added multiplexed i2c bus 4 [ 743.331097][ T5904] i2c i2c-2: Added multiplexed i2c bus 5 [ 743.332311][ T5904] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 743.332332][ T5904] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 743.454998][ T5904] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 743.460316][ T5904] usb 5-1: USB disconnect, device number 18 [ 744.004530][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 744.064557][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 744.918731][T17075] tipc: Enabled bearer , priority 0 [ 744.919473][T17076] syzkaller0: entered promiscuous mode [ 744.919496][T17076] syzkaller0: entered allmulticast mode [ 744.958360][T17079] tipc: Resetting bearer [ 745.004775][T17072] tipc: Resetting bearer [ 745.134901][T17072] tipc: Disabling bearer [ 745.155045][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3719'. [ 745.272736][T17089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3722'. [ 745.693015][T17101] dvmrp1: entered allmulticast mode [ 746.105790][T16861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 746.138310][T16861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.139219][T16861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 746.222737][T16861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.227591][T16861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 746.309847][T16861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.315163][T16861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 746.402628][T16861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.459881][ T1025] IPVS: stop unused estimator thread 0... [ 746.675092][T17111] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3728'. [ 746.763991][T16861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.817434][T16861] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.845821][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.846030][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.848602][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.848738][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.159295][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3730'. [ 747.259035][T16861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.321546][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.332431][ T1335] lec:lec_start_xmit: lec0:No lecd attached [ 747.677606][T16861] veth0_vlan: entered promiscuous mode [ 747.678368][T17131] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.679199][T17131] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.717940][T16861] veth1_vlan: entered promiscuous mode [ 747.786942][T16861] veth0_macvtap: entered promiscuous mode [ 747.791893][T16861] veth1_macvtap: entered promiscuous mode [ 747.831126][T16861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.958649][T17134] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 747.958678][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 747.960702][T17134] vhci_hcd vhci_hcd.0: Device attached [ 747.968877][T17134] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 747.968903][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 747.998835][T17134] vhci_hcd vhci_hcd.0: Device attached [ 748.016222][T17134] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 748.016248][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.016303][T17134] vhci_hcd vhci_hcd.0: Device attached [ 748.018880][T17134] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 748.054766][T16861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.098070][T17134] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 748.098101][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 748.098196][T17134] vhci_hcd vhci_hcd.0: Device attached [ 748.140316][ T1442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.140875][ T1442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.143084][ T1442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.172287][ T1442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.193830][ T10] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 748.591632][ T5806] IPVS: starting estimator thread 0... [ 748.685122][T17147] IPVS: using max 11 ests per chain, 26400 per kthread [ 748.785416][T17141] vhci_hcd: connection closed [ 748.789925][T17139] vhci_hcd: connection closed [ 748.790169][T17135] vhci_hcd: connection reset by peer [ 748.790364][T17137] vhci_hcd: connection closed [ 748.824932][ T44] vhci_hcd vhci_hcd.3: stop threads [ 748.824954][ T44] vhci_hcd vhci_hcd.3: release socket [ 748.825009][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 748.841311][ T44] vhci_hcd vhci_hcd.3: stop threads [ 748.841327][ T44] vhci_hcd vhci_hcd.3: release socket [ 748.841377][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 748.889116][ T44] vhci_hcd vhci_hcd.3: stop threads [ 748.889137][ T44] vhci_hcd vhci_hcd.3: release socket [ 748.889186][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 748.962186][ T44] vhci_hcd vhci_hcd.3: stop threads [ 748.962207][ T44] vhci_hcd vhci_hcd.3: release socket [ 748.962266][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 749.277082][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.277104][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.336279][T17142] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 749.464059][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.464082][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.700569][T17155] usb usb8: usbfs: process 17155 (syz.3.3737) did not claim interface 0 before use [ 750.403786][ T6015] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 750.554614][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 750.556938][ T6015] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 750.557040][ T6015] usb 6-1: config 0 has no interface number 0 [ 750.560669][ T6015] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 750.560697][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.560719][ T6015] usb 6-1: Product: syz [ 750.560733][ T6015] usb 6-1: Manufacturer: syz [ 750.560748][ T6015] usb 6-1: SerialNumber: syz [ 750.620719][ T6015] usb 6-1: config 0 descriptor?? [ 751.048674][ T6015] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 751.048711][ T6015] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 751.856162][ T6015] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 751.856708][ T6015] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 751.935934][ T6015] usb 6-1: USB disconnect, device number 14 [ 752.993656][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 752.993687][ C0] lec:lec_tx_timeout: lec0 [ 753.303812][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 753.433806][T17202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3757'. [ 753.534142][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 753.553261][T17205] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3758'. [ 753.905149][T15114] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 753.907080][T17209] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 753.907104][T17209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 753.955394][T17209] vhci_hcd vhci_hcd.0: Device attached [ 753.963114][T17214] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 753.963138][T17214] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 753.963221][T17214] vhci_hcd vhci_hcd.0: Device attached [ 753.989748][T17209] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 753.989772][T17209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 753.989818][T17209] vhci_hcd vhci_hcd.0: Device attached [ 753.990786][T17209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 754.036852][T17209] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 754.036878][T17209] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 754.036925][T17209] vhci_hcd vhci_hcd.0: Device attached [ 754.041294][T17215] vhci_hcd: connection closed [ 754.046757][T17217] vhci_hcd: connection closed [ 754.048789][T17212] vhci_hcd: connection closed [ 754.079104][ T13] vhci_hcd vhci_hcd.0: stop threads [ 754.079129][ T13] vhci_hcd vhci_hcd.0: release socket [ 754.079162][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 754.080826][ T13] vhci_hcd vhci_hcd.0: stop threads [ 754.080841][ T13] vhci_hcd vhci_hcd.0: release socket [ 754.114163][T15114] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 754.114193][T15114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.114214][T15114] usb 4-1: Product: syz [ 754.114229][T15114] usb 4-1: Manufacturer: syz [ 754.114243][T15114] usb 4-1: SerialNumber: syz [ 754.152168][T17219] vhci_hcd: connection closed [ 754.157715][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 754.161384][ T13] vhci_hcd vhci_hcd.0: stop threads [ 754.161404][ T13] vhci_hcd vhci_hcd.0: release socket [ 754.162759][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 754.191144][ T13] vhci_hcd vhci_hcd.0: stop threads [ 754.191163][ T13] vhci_hcd vhci_hcd.0: release socket [ 754.191219][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 754.348525][ T36] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 754.348597][ T36] usb 33-1: enqueue for inactive port 0 [ 754.423706][ T36] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 754.516271][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 754.622337][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 754.622396][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 754.788736][ T5904] usb usb40-port1: attempt power cycle [ 755.095228][T16235] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 755.247673][T16235] usb 1-1: Using ep0 maxpacket: 32 [ 755.251573][T16235] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 755.251596][T16235] usb 1-1: config 0 has no interface number 0 [ 755.279145][T16235] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 755.279175][T16235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.279194][T16235] usb 1-1: Product: syz [ 755.279207][T16235] usb 1-1: Manufacturer: syz [ 755.279220][T16235] usb 1-1: SerialNumber: syz [ 755.332311][T16235] usb 1-1: config 0 descriptor?? [ 755.408947][ T5904] usb usb40-port1: unable to enumerate USB device [ 756.263711][ T820] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 756.455831][ T820] usb 6-1: Using ep0 maxpacket: 32 [ 756.477912][ T820] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 756.477942][ T820] usb 6-1: config 0 has no interface number 0 [ 756.478051][ T820] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 756.478183][ T820] usb 6-1: config 0 interface 1 has no altsetting 0 [ 756.486553][ T820] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 756.486580][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.486599][ T820] usb 6-1: Product: syz [ 756.486668][ T820] usb 6-1: Manufacturer: syz [ 756.486684][ T820] usb 6-1: SerialNumber: syz [ 756.610591][ T820] usb 6-1: config 0 descriptor?? [ 756.721127][T17267] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 756.721153][T17267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 756.744356][T17267] vhci_hcd vhci_hcd.0: Device attached [ 756.748024][T17267] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 756.748122][T17267] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 756.765745][T17267] vhci_hcd vhci_hcd.0: Device attached [ 756.786806][T17267] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 756.786829][T17267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 756.786872][T17267] vhci_hcd vhci_hcd.0: Device attached [ 756.834292][T16235] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 756.834323][T16235] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 756.841177][T16235] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 756.841941][T16235] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 756.911275][T17274] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 756.927250][ T820] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 756.927802][ T820] cx231xx 6-1:0.1: Failed to read PCB config [ 756.927874][ T820] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 756.956873][T16235] usb 1-1: USB disconnect, device number 17 [ 756.980126][T17267] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 756.980156][T17267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 757.043533][T17267] vhci_hcd vhci_hcd.0: Device attached [ 757.044798][ T820] usb 6-1: USB disconnect, device number 15 [ 757.052860][T17272] vhci_hcd: connection closed [ 757.054258][ T44] vhci_hcd vhci_hcd.4: stop threads [ 757.054278][ T44] vhci_hcd vhci_hcd.4: release socket [ 757.086135][T17270] vhci_hcd: connection closed [ 757.099934][T17268] vhci_hcd: connection closed [ 757.143008][T17275] vhci_hcd: connection closed [ 757.176472][ T44] vhci_hcd vhci_hcd.4: disconnect device [ 757.180473][ T44] vhci_hcd vhci_hcd.4: stop threads [ 757.180501][ T44] vhci_hcd vhci_hcd.4: release socket [ 757.180539][ T44] vhci_hcd vhci_hcd.4: disconnect device [ 757.182024][ T44] vhci_hcd vhci_hcd.4: stop threads [ 757.182040][ T44] vhci_hcd vhci_hcd.4: release socket [ 757.182183][ T44] vhci_hcd vhci_hcd.4: disconnect device [ 757.182476][ T44] vhci_hcd vhci_hcd.4: stop threads [ 757.182490][ T44] vhci_hcd vhci_hcd.4: release socket [ 757.182522][ T44] vhci_hcd vhci_hcd.4: disconnect device [ 757.317262][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 757.317300][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 757.317313][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 757.318615][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 757.365964][T15114] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 757.385512][T15114] usb 4-1: USB disconnect, device number 15 [ 757.605500][ T820] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 757.632181][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3777'. [ 757.805442][ T820] usb 6-1: Using ep0 maxpacket: 32 [ 757.822820][ T820] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 757.822845][ T820] usb 6-1: config 0 has no interface number 0 [ 757.822881][ T820] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 757.822902][ T820] usb 6-1: config 0 interface 1 has no altsetting 0 [ 757.865580][ T820] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 757.865609][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.865629][ T820] usb 6-1: Product: syz [ 757.865642][ T820] usb 6-1: Manufacturer: syz [ 757.865656][ T820] usb 6-1: SerialNumber: syz [ 757.906226][ T820] usb 6-1: config 0 descriptor?? [ 758.134469][ T820] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 758.136407][ T820] cx231xx 6-1:0.1: Failed to read PCB config [ 758.136471][ T820] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 758.185608][ T820] usb 6-1: USB disconnect, device number 16 [ 758.759295][T17289] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3782'. [ 759.384722][T17261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.457241][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 766.945092][T17333] geneve3: entered promiscuous mode [ 767.323731][ T5922] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 767.484708][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 767.486566][ T5922] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 767.486590][ T5922] usb 4-1: config 0 has no interface number 0 [ 767.490105][ T5922] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 767.490130][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.490149][ T5922] usb 4-1: Product: syz [ 767.490163][ T5922] usb 4-1: Manufacturer: syz [ 767.490177][ T5922] usb 4-1: SerialNumber: syz [ 767.559486][ T5922] usb 4-1: config 0 descriptor?? [ 767.788872][T10782] lec:lec_start_xmit: lec0:No lecd attached [ 768.533776][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 768.683947][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 768.686137][ T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 768.686164][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 768.686197][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 768.686215][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 768.686234][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 768.686252][ T9] usb 1-1: config 0 has no interface number 0 [ 768.686294][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 768.686312][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 768.686326][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 768.686382][ T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 768.686409][ T9] usb 1-1: config 0 interface 125 has no altsetting 0 [ 768.686425][ T9] usb 1-1: config 0 interface 125 has no altsetting 2 [ 768.692603][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 768.692631][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.692652][ T9] usb 1-1: Product: syz [ 768.692666][ T9] usb 1-1: Manufacturer: syz [ 768.692681][ T9] usb 1-1: SerialNumber: syz [ 768.802045][ T5922] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 768.802073][ T5922] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 768.822806][ T5922] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 768.823086][ T5922] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 768.885574][ T9] usb 1-1: config 0 descriptor?? [ 768.907926][ T9] usb 1-1: selecting invalid altsetting 2 [ 768.909982][ T5922] usb 4-1: USB disconnect, device number 16 [ 769.200621][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3817'. [ 769.708493][T17360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.710503][T17360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.936738][T17360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.937366][T17360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.942721][ C0] usb 1-1: async_complete: urb error -71 [ 769.942826][ C0] usb 1-1: async_complete: urb error -71 [ 769.942909][ C0] usb 1-1: async_complete: urb error -71 [ 769.951856][ T9] get_1284_register: usb error -71 [ 770.001027][ T9] usb 1-1: USB disconnect, device number 18 [ 770.173722][ T5922] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 770.303671][ T5922] usb 5-1: device descriptor read/64, error -71 [ 770.553911][ T5922] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 770.656723][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 770.693737][ T5922] usb 5-1: device descriptor read/64, error -71 [ 770.803677][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 770.812514][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 770.812591][ T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 770.812631][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 770.812658][ T9] usb 4-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 770.812680][ T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 770.812706][ T9] usb 4-1: config 168 interface 0 has no altsetting 0 [ 770.855669][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 770.855766][ T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 770.855860][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 770.855907][ T9] usb 4-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 770.855956][ T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 770.856028][ T9] usb 4-1: config 168 interface 0 has no altsetting 0 [ 770.876705][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 770.876821][ T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 770.876948][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 770.877042][ T9] usb 4-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 770.877091][ T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 770.877151][ T9] usb 4-1: config 168 interface 0 has no altsetting 0 [ 771.009690][ T5922] usb usb5-port1: attempt power cycle [ 771.019569][ T9] usb 4-1: string descriptor 0 read error: -22 [ 771.019698][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 771.019719][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.108975][ T9] adutux 4-1:168.0: interrupt endpoints not found [ 771.326390][T17403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.327017][T17403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.373790][ T5922] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 771.395116][ T5922] usb 5-1: device descriptor read/8, error -71 [ 771.535145][T17403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.535699][T17403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.643661][ T5922] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 771.664208][ T5922] usb 5-1: device descriptor read/8, error -71 [ 771.746034][T17403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.746587][T17403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.782740][ T5922] usb usb5-port1: unable to enumerate USB device [ 771.791305][ T36] usb 4-1: USB disconnect, device number 17 [ 772.623320][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3838'. [ 772.777360][T17440] futex_wake_op: syz.3.3840 tries to shift op by 144; fix this program [ 773.670752][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5880 ms [ 773.670789][ C0] lec:lec_tx_timeout: lec0 [ 775.082781][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 778.090122][ T2389] pvrusb2: request_firmware fatal error with code=-110 [ 778.090141][ T2389] pvrusb2: Failure uploading firmware1 [ 778.090147][ T2389] pvrusb2: Device initialization was not successful. [ 778.090152][ T2389] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 778.090159][ T2389] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 778.090460][ T5822] pvrusb2: Device being rendered inoperable [ 785.103682][ T36] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 785.263751][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 785.268355][ T36] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 785.268399][ T36] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 785.268443][ T36] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 785.268473][ T36] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 785.268498][ T36] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 785.268528][ T36] usb 1-1: config 168 interface 0 has no altsetting 0 [ 785.271700][ T36] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 785.271737][ T36] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 785.271777][ T36] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 785.271805][ T36] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 785.271826][ T36] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 785.271906][ T36] usb 1-1: config 168 interface 0 has no altsetting 0 [ 785.277528][ T36] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 785.277567][ T36] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 785.277607][ T36] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 785.277635][ T36] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 785.277656][ T36] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 785.277684][ T36] usb 1-1: config 168 interface 0 has no altsetting 0 [ 785.427011][ T36] usb 1-1: string descriptor 0 read error: -22 [ 785.427152][ T36] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 785.427175][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.520619][ T36] adutux 1-1:168.0: interrupt endpoints not found [ 785.759334][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.759978][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.851250][T17502] futex_wake_op: syz.5.3860 tries to shift op by 144; fix this program [ 786.886710][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.887345][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.128821][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.129394][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.131354][ T5822] usb 1-1: USB disconnect, device number 19 [ 793.063653][ T5822] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 793.282348][ T5822] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 793.282380][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.282400][ T5822] usb 4-1: Product: syz [ 793.282414][ T5822] usb 4-1: Manufacturer: syz [ 793.282428][ T5822] usb 4-1: SerialNumber: syz [ 793.329631][ T5822] usb 4-1: config 0 descriptor?? [ 794.080862][ T5822] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 794.080890][ T5822] usb 4-1: Firmware version (0.0) predates our first public release. [ 794.080907][ T5822] usb 4-1: Please update to version 0.2 or newer [ 794.280850][ T5822] usb 4-1: Firmware: build [ 794.705460][ T5822] usb 4-1: USB disconnect, device number 18 [ 794.971551][T17570] netlink: 'syz.4.3883': attribute type 5 has an invalid length. [ 794.971653][T17570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3883'. [ 795.086566][T17574] futex_wake_op: syz.5.3882 tries to shift op by 144; fix this program [ 796.443168][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3888'. [ 803.200589][T17613] block nbd0: server does not support multiple connections per device. [ 803.200921][T17613] block nbd0: shutting down sockets [ 805.049114][T17623] block nbd0: shutting down sockets [ 805.283797][ T6023] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 805.428505][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3903'. [ 805.434595][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 805.451859][ T6023] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.451907][ T6023] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 805.482161][ T6023] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 805.482188][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.482206][ T6023] usb 4-1: Product: syz [ 805.482218][ T6023] usb 4-1: Manufacturer: syz [ 805.482231][ T6023] usb 4-1: SerialNumber: syz [ 805.539720][ T6023] usb 4-1: config 0 descriptor?? [ 805.903787][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 806.055181][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 806.060078][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 806.060111][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 806.063115][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 806.063143][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.063164][ T9] usb 1-1: Product: syz [ 806.063179][ T9] usb 1-1: Manufacturer: syz [ 806.063193][ T9] usb 1-1: SerialNumber: syz [ 806.147195][ T9] usb 1-1: config 0 descriptor?? [ 806.231660][ T9] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 808.440838][ T5904] usb 4-1: USB disconnect, device number 19 [ 808.873780][ T5904] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 809.023671][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 809.026080][ T5904] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 809.026104][ T5904] usb 4-1: config 0 has no interface number 0 [ 809.026144][ T5904] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 809.026164][ T5904] usb 4-1: config 0 interface 1 has no altsetting 0 [ 809.029371][ T5904] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 809.029400][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.029422][ T5904] usb 4-1: Product: syz [ 809.029444][ T5904] usb 4-1: Manufacturer: syz [ 809.029460][ T5904] usb 4-1: SerialNumber: syz [ 809.116560][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.130831][ T5904] usb 4-1: config 0 descriptor?? [ 809.160219][ T1335] lec:lec_start_xmit: lec0:No lecd attached [ 809.387739][ T5904] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 809.392508][ T5904] cx231xx 4-1:0.1: Failed to read PCB config [ 809.392569][ T5904] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 809.443252][T16235] usb 1-1: USB disconnect, device number 20 [ 809.470981][ T5904] usb 4-1: USB disconnect, device number 20 [ 809.621416][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3914'. [ 811.091096][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3918'. [ 811.571316][T17699] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3922'. [ 817.521288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 8360 ms [ 817.522570][ C0] lec:lec_tx_timeout: lec0 [ 819.576619][T17716] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 819.576647][T17716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 819.576733][T17716] vhci_hcd vhci_hcd.0: Device attached [ 819.667776][T17716] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 819.667806][T17716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 819.667960][T17716] vhci_hcd vhci_hcd.0: Device attached [ 819.793828][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 819.843651][ T5904] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 819.943713][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 819.946822][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 819.946853][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 819.950797][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 819.950823][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.950844][ T9] usb 1-1: Product: syz [ 819.950858][ T9] usb 1-1: Manufacturer: syz [ 819.950922][ T9] usb 1-1: SerialNumber: syz [ 820.018204][ T9] usb 1-1: config 0 descriptor?? [ 820.037394][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 820.037446][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 820.383024][T17721] vhci_hcd: connection closed [ 820.385000][T17719] vhci_hcd: connection reset by peer [ 820.385275][ T12] vhci_hcd vhci_hcd.1: stop threads [ 820.385297][ T12] vhci_hcd vhci_hcd.1: release socket [ 820.386395][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 820.387544][ T12] vhci_hcd vhci_hcd.1: stop threads [ 820.387559][ T12] vhci_hcd vhci_hcd.1: release socket [ 820.387627][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 820.672675][ T9] em28xx 1-1:0.0: chip ID is em2874 [ 820.881342][ T5822] usb 1-1: USB disconnect, device number 21 [ 820.920653][ T5822] em28xx 1-1:0.0: Disconnecting em28xx [ 820.945759][T17723] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 821.111370][ T5822] em28xx 1-1:0.0: Freeing device [ 821.173760][ T5922] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 821.314013][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 821.353679][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 821.356592][ T5922] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 821.356632][ T5922] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 821.356673][ T5922] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 821.356700][ T5922] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 821.356722][ T5922] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 821.356749][ T5922] usb 5-1: config 168 interface 0 has no altsetting 0 [ 821.357854][ T5922] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 821.357893][ T5922] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 821.357937][ T5922] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 821.358181][ T5922] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 821.358208][ T5922] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 821.358239][ T5922] usb 5-1: config 168 interface 0 has no altsetting 0 [ 821.359437][ T5922] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 821.359471][ T5922] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 821.359507][ T5922] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 821.359533][ T5922] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 821.359554][ T5922] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 821.359579][ T5922] usb 5-1: config 168 interface 0 has no altsetting 0 [ 821.386886][ T5922] usb 5-1: string descriptor 0 read error: -22 [ 821.387454][ T5922] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 821.387487][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.613390][ T5922] adutux 5-1:168.0: interrupt endpoints not found [ 821.874448][T17735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.874909][T17735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.033580][T17735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.047695][T17735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.689531][ T36] usb 5-1: USB disconnect, device number 23 [ 825.704217][ T5904] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 826.273653][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 829.663323][T17812] futex_wake_op: syz.4.3958 tries to shift op by 144; fix this program [ 830.764731][T17817] futex_wake_op: syz.5.3960 tries to shift op by 144; fix this program [ 831.150430][T10782] lec:lec_start_xmit: lec0:No lecd attached [ 831.759458][ T6015] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 831.924515][ T6015] usb 2-1: Using ep0 maxpacket: 32 [ 831.929485][ T6015] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 831.929509][ T6015] usb 2-1: config 0 has no interface number 0 [ 831.929550][ T6015] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 831.929571][ T6015] usb 2-1: config 0 interface 1 has no altsetting 0 [ 831.936477][ T6015] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 831.936545][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.936594][ T6015] usb 2-1: Product: syz [ 831.936631][ T6015] usb 2-1: Manufacturer: syz [ 831.936669][ T6015] usb 2-1: SerialNumber: syz [ 832.071413][ T6015] usb 2-1: config 0 descriptor?? [ 832.321310][ T6015] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 832.353210][ T6015] cx231xx 2-1:0.1: Failed to read PCB config [ 832.353267][ T6015] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 832.393871][ T6015] usb 2-1: USB disconnect, device number 20 [ 832.793502][T17854] futex_wake_op: syz.4.3973 tries to shift op by 144; fix this program [ 832.813904][ T6015] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 834.173631][ T6015] usb 2-1: Using ep0 maxpacket: 32 [ 834.537670][ T6015] usb 2-1: device descriptor read/all, error -71 [ 835.725921][T17868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3976'. [ 836.135646][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3976'. [ 836.153755][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 836.153788][ C0] lec:lec_tx_timeout: lec0 [ 838.209250][ T5834] block nbd0: Receive control failed (result -22) [ 838.944963][T17909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3990'. [ 841.556364][T17895] nbd0: detected capacity change from 0 to 32 [ 841.612107][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3990'. [ 841.660670][T17722] block nbd0: Dead connection, failed to find a fallback [ 841.660699][T17722] block nbd0: shutting down sockets [ 841.660784][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.660848][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.661056][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.661072][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.661173][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.661188][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.661342][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.661357][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.661459][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.661474][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.661590][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.661605][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.661710][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.661725][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.670683][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.670747][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.671050][T17722] ldm_validate_partition_table(): Disk read failed. [ 841.671283][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.671367][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.671749][T17722] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 841.671803][T17722] Buffer I/O error on dev nbd0, logical block 0, async page read [ 841.918047][T17722] Dev nbd0: unable to read RDB block 0 [ 841.918770][T17722] nbd0: unable to read partition table [ 842.198654][T17722] ldm_validate_partition_table(): Disk read failed. [ 842.248108][T17722] Dev nbd0: unable to read RDB block 0 [ 842.303851][T17722] nbd0: unable to read partition table [ 845.915215][T15114] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 846.136161][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 848.939894][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4011'. [ 849.191480][T15114] usb 5-1: device descriptor read/64, error -71 [ 849.263745][ T5922] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 849.443671][T15114] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 849.453701][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 849.460348][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 849.460432][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 849.491410][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 849.491442][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.491456][ T5922] usb 1-1: Product: syz [ 849.491466][ T5922] usb 1-1: Manufacturer: syz [ 849.491475][ T5922] usb 1-1: SerialNumber: syz [ 849.506727][ T5922] usb 1-1: config 0 descriptor?? [ 849.542191][ T5922] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 849.542224][ T5922] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 849.621247][T15114] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 849.621278][T15114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.621297][T15114] usb 5-1: Product: syz [ 849.621311][T15114] usb 5-1: Manufacturer: syz [ 849.621389][T15114] usb 5-1: SerialNumber: syz [ 849.664954][T15114] usb 5-1: config 0 descriptor?? [ 850.627453][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 850.637870][ T5922] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 850.638229][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 850.638388][ T5922] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 850.638690][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 850.638847][ T5922] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 850.638865][ T5922] em28xx 1-1:0.0: No AC97 audio processor [ 850.890212][ T5922] usb 1-1: USB disconnect, device number 22 [ 850.905683][ T5922] em28xx 1-1:0.0: Disconnecting em28xx [ 851.132557][ T5922] em28xx 1-1:0.0: Freeing device [ 851.226759][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 851.566720][ T37] audit: type=1326 audit(1776773560.174:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.566778][ T37] audit: type=1326 audit(1776773560.204:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.566823][ T37] audit: type=1326 audit(1776773560.204:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.566866][ T37] audit: type=1326 audit(1776773560.204:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.566909][ T37] audit: type=1326 audit(1776773560.204:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.566953][ T37] audit: type=1326 audit(1776773560.204:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.566996][ T37] audit: type=1326 audit(1776773560.204:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.567039][ T37] audit: type=1326 audit(1776773560.204:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.567079][ T37] audit: type=1326 audit(1776773560.204:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 851.687170][ T37] audit: type=1326 audit(1776773560.274:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.5.4024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e81e6c819 code=0x7ffc0000 [ 852.038574][T15114] usb 5-1: Firmware version (0.0) predates our first public release. [ 852.038605][T15114] usb 5-1: Please update to version 0.2 or newer [ 852.443348][ T5922] usb 5-1: USB disconnect, device number 25 [ 853.385024][T18045] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4036'. [ 853.419639][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4040'. [ 853.723707][ T5922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 853.918656][ T5922] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 853.918692][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.918715][ T5922] usb 2-1: Product: syz [ 853.918731][ T5922] usb 2-1: Manufacturer: syz [ 853.918747][ T5922] usb 2-1: SerialNumber: syz [ 853.925867][ T5922] usb 2-1: config 0 descriptor?? [ 854.025936][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'. [ 854.279217][T18079] futex_wake_op: syz.5.4050 tries to shift op by 144; fix this program [ 863.095615][ T5922] usb 2-1: Firmware version (0.0) predates our first public release. [ 863.095644][ T5922] usb 2-1: Please update to version 0.2 or newer [ 863.288404][ T5922] usb 2-1: USB disconnect, device number 23 [ 863.654431][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4059'. [ 864.217369][T18117] futex_wake_op: syz.0.4061 tries to shift op by 144; fix this program [ 865.006273][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 865.006293][ T37] audit: type=1326 audit(1776773573.654:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.006343][ T37] audit: type=1326 audit(1776773573.654:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.006393][ T37] audit: type=1326 audit(1776773573.654:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.007155][ T37] audit: type=1326 audit(1776773573.654:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.007514][ T37] audit: type=1326 audit(1776773573.654:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.009063][ T37] audit: type=1326 audit(1776773573.654:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.009133][ T37] audit: type=1326 audit(1776773573.654:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.009176][ T37] audit: type=1326 audit(1776773573.654:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.009219][ T37] audit: type=1326 audit(1776773573.654:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.009262][ T37] audit: type=1326 audit(1776773573.654:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18126 comm="syz.4.4068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 865.013692][ T5922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 865.262772][ T5922] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 865.262806][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.262820][ T5922] usb 2-1: Product: syz [ 865.262829][ T5922] usb 2-1: Manufacturer: syz [ 865.262839][ T5922] usb 2-1: SerialNumber: syz [ 865.309529][ T5922] usb 2-1: config 0 descriptor?? [ 865.505452][T18133] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4070'. [ 866.093824][T15114] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 866.141012][ T5922] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 866.141044][ T5922] usb 2-1: Firmware version (0.0) predates our first public release. [ 866.141064][ T5922] usb 2-1: Please update to version 0.2 or newer [ 866.243691][T15114] usb 5-1: Using ep0 maxpacket: 8 [ 866.245949][T15114] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 866.245988][T15114] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 866.246028][T15114] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 866.246057][T15114] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 866.246079][T15114] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 866.246107][T15114] usb 5-1: config 168 interface 0 has no altsetting 0 [ 866.248720][T15114] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 866.248763][T15114] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 866.248854][T15114] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 866.248887][T15114] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 866.248910][T15114] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 866.248940][T15114] usb 5-1: config 168 interface 0 has no altsetting 0 [ 866.261823][T15114] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 866.261863][T15114] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 866.261908][T15114] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 866.261938][T15114] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 866.261960][T15114] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 866.261988][T15114] usb 5-1: config 168 interface 0 has no altsetting 0 [ 866.341634][ T5922] usb 2-1: Firmware: build [ 866.393820][T15114] usb 5-1: string descriptor 0 read error: -22 [ 866.393970][T15114] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 866.393999][T15114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.494458][T15114] adutux 5-1:168.0: interrupt endpoints not found [ 866.700611][ T5922] usb 2-1: USB disconnect, device number 24 [ 866.701012][T18143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.702047][T18143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.729246][T15114] usb 5-1: USB disconnect, device number 26 [ 867.083927][ T5806] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 867.233679][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 867.237838][ T5806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.237882][ T5806] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 867.243118][ T5806] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 867.243146][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.243166][ T5806] usb 4-1: Product: syz [ 867.243179][ T5806] usb 4-1: Manufacturer: syz [ 867.243193][ T5806] usb 4-1: SerialNumber: syz [ 867.325476][ T5806] usb 4-1: config 0 descriptor?? [ 867.513757][ T5922] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 867.598822][T18166] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4084'. [ 867.680599][ T5922] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 867.680633][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.680653][ T5922] usb 2-1: Product: syz [ 867.680667][ T5922] usb 2-1: Manufacturer: syz [ 867.680682][ T5922] usb 2-1: SerialNumber: syz [ 868.129274][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 868.129336][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 868.883662][ T5806] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 869.012953][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'. [ 869.033692][ T5806] usb 5-1: Using ep0 maxpacket: 8 [ 869.035846][ T5806] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 869.035880][ T5806] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 869.035926][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 869.035953][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.035984][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 869.036009][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.036036][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 869.036062][ T5806] usb 5-1: config 168 interface 0 has no altsetting 0 [ 869.037515][ T5806] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 869.037552][ T5806] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 869.037591][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 869.037619][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.037644][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 869.037669][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.037696][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 869.037724][ T5806] usb 5-1: config 168 interface 0 has no altsetting 0 [ 869.039250][ T5806] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 869.039285][ T5806] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 869.039324][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 869.039352][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.039378][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 869.039422][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.039450][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 869.039478][ T5806] usb 5-1: config 168 interface 0 has no altsetting 0 [ 869.043281][ T5806] usb 5-1: string descriptor 0 read error: -22 [ 869.043414][ T5806] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 869.043438][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.353260][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 869.353322][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 869.410540][T18189] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 870.383108][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.389121][ T1335] lec:lec_start_xmit: lec0:No lecd attached [ 870.472877][T18184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.487669][T18184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.568088][ T5806] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 870.719225][ T5806] usb 4-1: USB disconnect, device number 21 [ 870.740928][ T5922] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 870.776569][ T5922] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 870.792539][T18184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.793135][T18184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.914425][T18198] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 870.914457][T18198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 871.017765][T18198] vhci_hcd vhci_hcd.0: Device attached [ 871.065599][ T5806] usb 5-1: USB disconnect, device number 27 [ 871.137469][T18201] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 871.137499][T18201] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 871.137822][T18201] vhci_hcd vhci_hcd.0: Device attached [ 871.169967][T18201] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 871.169996][T18201] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 871.198961][T18201] vhci_hcd vhci_hcd.0: Device attached [ 871.253725][T15114] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 871.351908][T18203] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 871.436946][T18198] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 871.436974][T18198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 871.437073][T18198] vhci_hcd vhci_hcd.0: Device attached [ 871.713869][T18206] vhci_hcd: connection closed [ 871.719405][ T1424] vhci_hcd vhci_hcd.1: stop threads [ 871.719429][ T1424] vhci_hcd vhci_hcd.1: release socket [ 871.719499][ T1424] vhci_hcd vhci_hcd.1: disconnect device [ 871.720192][T18204] vhci_hcd: connection closed [ 871.720686][ T1424] vhci_hcd vhci_hcd.1: stop threads [ 871.720702][ T1424] vhci_hcd vhci_hcd.1: release socket [ 871.720767][ T1424] vhci_hcd vhci_hcd.1: disconnect device [ 871.720915][T18202] vhci_hcd: connection closed [ 871.722791][T18199] vhci_hcd: connection reset by peer [ 871.723436][ T1424] vhci_hcd vhci_hcd.1: stop threads [ 871.723451][ T1424] vhci_hcd vhci_hcd.1: release socket [ 871.723863][ T1424] vhci_hcd vhci_hcd.1: disconnect device [ 871.724155][ T1424] vhci_hcd vhci_hcd.1: stop threads [ 871.724170][ T1424] vhci_hcd vhci_hcd.1: release socket [ 871.724227][ T1424] vhci_hcd vhci_hcd.1: disconnect device [ 871.774263][ T5922] usb 2-1: USB disconnect, device number 25 [ 871.992646][ T37] kauditd_printk_skb: 81 callbacks suppressed [ 871.992663][ T37] audit: type=1326 audit(1776773580.634:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca69c819 code=0x7ffc0000 [ 871.992711][ T37] audit: type=1326 audit(1776773580.634:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca69c819 code=0x7ffc0000 [ 871.992754][ T37] audit: type=1326 audit(1776773580.634:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca69c819 code=0x7ffc0000 [ 872.021670][ T37] audit: type=1326 audit(1776773580.634:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa1ca69c819 code=0x7ffc0000 [ 872.090743][ T37] audit: type=1326 audit(1776773580.704:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca69c819 code=0x7ffc0000 [ 872.090799][ T37] audit: type=1326 audit(1776773580.704:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa1ca69c582 code=0x7ffc0000 [ 872.090840][ T37] audit: type=1326 audit(1776773580.704:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa1ca69c617 code=0x7ffc0000 [ 872.090880][ T37] audit: type=1326 audit(1776773580.704:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa1ca659511 code=0x7ffc0000 [ 872.090918][ T37] audit: type=1326 audit(1776773580.704:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa1ca69d609 code=0x7ffc0000 [ 872.208318][ T37] audit: type=1326 audit(1776773580.844:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18214 comm="syz.0.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ca69c819 code=0x7ffc0000 [ 872.386775][T18201] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 872.863716][ T5922] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 873.013742][ T5922] usb 1-1: device descriptor read/64, error -71 [ 873.193693][ T5806] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 873.283725][ T5922] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 873.314014][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 873.343758][ T5806] usb 5-1: Using ep0 maxpacket: 8 [ 873.346020][ T5806] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 873.346060][ T5806] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 873.346100][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 873.346127][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.346154][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 873.346180][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 873.346220][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 873.346245][ T5806] usb 5-1: config 168 interface 0 has no altsetting 0 [ 873.347606][ T5806] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 873.347642][ T5806] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 873.347681][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 873.347709][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.347735][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 873.347762][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 873.347789][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 873.347823][ T5806] usb 5-1: config 168 interface 0 has no altsetting 0 [ 873.349331][ T5806] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 873.349365][ T5806] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 873.349457][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 873.349483][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 873.349507][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 873.349530][ T5806] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 873.349554][ T5806] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 873.349578][ T5806] usb 5-1: config 168 interface 0 has no altsetting 0 [ 873.353161][ T5806] usb 5-1: string descriptor 0 read error: -22 [ 873.353293][ T5806] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 873.353316][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.473641][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 873.490910][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 873.490979][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.491025][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.502799][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.502884][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.502913][ T10] usb 4-1: Product: syz [ 873.502943][ T10] usb 4-1: Manufacturer: syz [ 873.502966][ T10] usb 4-1: SerialNumber: syz [ 873.533634][ T5922] usb 1-1: device descriptor read/64, error -71 [ 873.644639][ T5922] usb usb1-port1: attempt power cycle [ 873.783432][ T5806] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 873.814537][ T10] usb 4-1: 0:2 : does not exist [ 873.963831][T18243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.964815][T18243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.085492][ T5922] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 874.151531][ T5922] usb 1-1: device descriptor read/8, error -71 [ 874.235301][T18254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.235845][T18254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.297372][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4115'. [ 874.390768][ T10] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 874.403657][ T5922] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 874.435675][ T5922] usb 1-1: device descriptor read/8, error -71 [ 874.464905][ T36] usb 5-1: USB disconnect, device number 28 [ 874.555556][ T5922] usb usb1-port1: unable to enumerate USB device [ 874.776608][ T10] usb 4-1: USB disconnect, device number 22 [ 875.297366][T17722] udevd[17722]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.584245][T18281] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 875.584402][T18281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 875.589990][T18281] vhci_hcd vhci_hcd.0: Device attached [ 875.593336][T18281] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 875.593361][T18281] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 875.705296][T18281] vhci_hcd vhci_hcd.0: Device attached [ 876.761222][T18290] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 876.771124][T18287] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 876.771152][T18287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 876.771260][T18287] vhci_hcd vhci_hcd.0: Device attached [ 876.775623][T18281] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 876.775649][T18281] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 876.775723][T18281] vhci_hcd vhci_hcd.0: Device attached [ 877.093647][ T5922] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 877.233697][ T5922] usb 1-1: device descriptor read/64, error -71 [ 877.273443][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6880 ms [ 877.273488][ C0] lec:lec_tx_timeout: lec0 [ 877.376440][T18292] vhci_hcd: connection closed [ 877.377102][ T67] vhci_hcd vhci_hcd.1: stop threads [ 877.377124][ T67] vhci_hcd vhci_hcd.1: release socket [ 877.377192][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 877.378911][T18289] vhci_hcd: connection closed [ 877.379478][ T67] vhci_hcd vhci_hcd.1: stop threads [ 877.379495][ T67] vhci_hcd vhci_hcd.1: release socket [ 877.379563][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 877.379896][T18284] vhci_hcd: connection closed [ 877.380363][ T67] vhci_hcd vhci_hcd.1: stop threads [ 877.380378][ T67] vhci_hcd vhci_hcd.1: release socket [ 877.380439][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 877.449524][T18282] vhci_hcd: connection reset by peer [ 877.450040][ T67] vhci_hcd vhci_hcd.1: stop threads [ 877.450061][ T67] vhci_hcd vhci_hcd.1: release socket [ 877.486516][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 877.555503][T15114] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 878.024662][T18281] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 878.098817][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4128'. [ 878.123894][ T5922] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 878.253666][ T5922] usb 1-1: device descriptor read/64, error -71 [ 878.368925][ T5922] usb usb1-port1: attempt power cycle [ 878.713659][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 878.734380][ T5922] usb 1-1: device descriptor read/8, error -71 [ 878.876540][ T9] usb usb36-port1: attempt power cycle [ 878.974078][ T5922] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 879.003087][ T5922] usb 1-1: device descriptor read/8, error -71 [ 879.017191][T18336] futex_wake_op: syz.4.4139 tries to shift op by 144; fix this program [ 880.028897][ T5922] usb usb1-port1: unable to enumerate USB device [ 880.223824][T18348] futex_wake_op: syz.1.4142 tries to shift op by 144; fix this program [ 880.398106][ T9] usb usb36-port1: unable to enumerate USB device [ 880.841792][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4149'. [ 887.153691][T15114] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 887.309487][T15114] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 887.309518][T15114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.309537][T15114] usb 4-1: Product: syz [ 887.309551][T15114] usb 4-1: Manufacturer: syz [ 887.309565][T15114] usb 4-1: SerialNumber: syz [ 887.459884][ T5822] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 887.637534][ T5822] usb 6-1: device descriptor read/64, error -71 [ 887.803058][T18393] futex_wake_op: syz.1.4161 tries to shift op by 144; fix this program [ 887.838173][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 887.838239][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 887.873726][ T5822] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 888.003710][ T5822] usb 6-1: device descriptor read/64, error -71 [ 888.134993][ T5822] usb usb6-port1: attempt power cycle [ 888.483824][ T5822] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 888.504790][ T5822] usb 6-1: device descriptor read/8, error -71 [ 888.755294][ T5822] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 888.776255][ T5822] usb 6-1: device descriptor read/8, error -71 [ 889.002410][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 889.003012][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 889.201607][ T5822] usb usb6-port1: unable to enumerate USB device [ 889.928350][T15114] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 890.366671][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4166'. [ 890.369696][T15114] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 892.445668][T15114] usb 4-1: USB disconnect, device number 23 [ 894.938981][T10782] lec:lec_start_xmit: lec0:No lecd attached [ 895.361297][ T820] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 895.375438][T17702] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 895.535966][T17702] usb 1-1: device descriptor read/64, error -71 [ 895.587248][ T820] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 895.587277][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.587296][ T820] usb 4-1: Product: syz [ 895.587309][ T820] usb 4-1: Manufacturer: syz [ 895.587322][ T820] usb 4-1: SerialNumber: syz [ 895.784400][T17702] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 895.924173][T17702] usb 1-1: device descriptor read/64, error -71 [ 896.034235][ T820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 896.034293][ T820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 896.034718][T17702] usb usb1-port1: attempt power cycle [ 896.242348][T18450] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4180'. [ 896.445291][T17702] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 896.817713][T17702] usb 1-1: device descriptor read/8, error -71 [ 897.413934][ T820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 897.413988][ T820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 897.421922][ T820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 897.453707][T17702] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 897.474317][T17702] usb 1-1: device descriptor read/8, error -71 [ 897.475125][ T820] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 897.514856][ T820] usb 4-1: USB disconnect, device number 24 [ 897.563626][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 897.583977][T17702] usb usb1-port1: unable to enumerate USB device [ 897.733709][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 897.738332][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 897.738357][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.738379][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.783810][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.783839][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.783857][ T31] usb 6-1: Product: syz [ 897.783870][ T31] usb 6-1: Manufacturer: syz [ 897.783883][ T31] usb 6-1: SerialNumber: syz [ 897.855547][ T31] usb 6-1: 0:2 : does not exist [ 899.076986][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4190'. [ 899.339598][T18486] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4192'. [ 899.402142][ T31] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 899.761233][ T31] usb 6-1: USB disconnect, device number 21 [ 899.783669][T15114] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 899.933843][T17722] udevd[17722]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.953881][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 899.953962][ C0] lec:lec_tx_timeout: lec0 [ 900.027160][T15114] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 900.027190][T15114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.027210][T15114] usb 2-1: Product: syz [ 900.027223][T15114] usb 2-1: Manufacturer: syz [ 900.027237][T15114] usb 2-1: SerialNumber: syz [ 901.530605][T15114] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 901.530663][T15114] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 901.532659][T15114] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 901.532709][T15114] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 901.580318][T15114] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 901.635472][T18518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4206'. [ 901.638968][T15114] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 901.643793][ T5922] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 901.780138][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 901.813610][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 901.816174][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.816197][ T5922] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 901.818689][ T5922] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 901.818721][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.818743][ T5922] usb 4-1: Product: syz [ 901.818760][ T5922] usb 4-1: Manufacturer: syz [ 901.818777][ T5922] usb 4-1: SerialNumber: syz [ 901.895559][ T5922] usb 4-1: config 0 descriptor?? [ 902.588514][T15114] usb 2-1: USB disconnect, device number 26 [ 902.970514][T18546] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4216'. [ 903.309528][T18552] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4219'. [ 903.317173][ T5822] usb 4-1: USB disconnect, device number 25 [ 903.546554][T18556] futex_wake_op: syz.0.4220 tries to shift op by 144; fix this program [ 904.591888][T18570] futex_wake_op: syz.5.4221 tries to shift op by 144; fix this program [ 904.618645][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 904.659749][T18572] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 904.676233][T18572] syzkaller0: entered promiscuous mode [ 904.676258][T18572] syzkaller0: entered allmulticast mode [ 905.103467][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 905.103484][ T37] audit: type=1326 audit(1776773613.744:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.103778][ T37] audit: type=1326 audit(1776773613.744:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.125194][ T37] audit: type=1326 audit(1776773613.774:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.125361][ T37] audit: type=1326 audit(1776773613.774:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.132079][ T37] audit: type=1326 audit(1776773613.774:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.143388][ T37] audit: type=1326 audit(1776773613.784:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.151523][ T37] audit: type=1326 audit(1776773613.794:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.178810][ T37] audit: type=1326 audit(1776773613.824:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.182319][ T37] audit: type=1326 audit(1776773613.824:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.188463][ T37] audit: type=1326 audit(1776773613.834:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18583 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 905.661667][T18597] futex_wake_op: syz.0.4237 tries to shift op by 144; fix this program [ 906.642118][T18601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4238'. [ 906.913437][T18612] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 906.917561][T18612] syzkaller0: entered promiscuous mode [ 906.917579][T18612] syzkaller0: entered allmulticast mode [ 907.462736][T18635] futex_wake_op: syz.1.4251 tries to shift op by 144; fix this program [ 910.840784][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4260'. [ 911.064441][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 911.064460][ T37] audit: type=1326 audit(1776773619.704:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064515][ T37] audit: type=1326 audit(1776773619.704:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064559][ T37] audit: type=1326 audit(1776773619.704:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064600][ T37] audit: type=1326 audit(1776773619.714:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064639][ T37] audit: type=1326 audit(1776773619.714:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064682][ T37] audit: type=1326 audit(1776773619.714:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064725][ T37] audit: type=1326 audit(1776773619.714:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064772][ T37] audit: type=1326 audit(1776773619.714:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.064940][ T37] audit: type=1326 audit(1776773619.714:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.065367][ T37] audit: type=1326 audit(1776773619.714:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18661 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84776ec819 code=0x7ffc0000 [ 911.655112][ T5922] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 912.080682][ T5922] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 912.080713][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.080734][ T5922] usb 5-1: Product: syz [ 912.080748][ T5922] usb 5-1: Manufacturer: syz [ 912.080762][ T5922] usb 5-1: SerialNumber: syz [ 912.150630][ T5922] usb 5-1: config 0 descriptor?? [ 912.702952][T18700] vlan4: entered allmulticast mode [ 912.702973][T18700] macvtap0: entered allmulticast mode [ 912.702987][T18700] veth0_macvtap: entered allmulticast mode [ 913.052703][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'. [ 914.282739][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'. [ 914.455943][ T5922] usb 5-1: Firmware: major: 39, minor: 91, hardware type: UNKNOWN (39) [ 915.592189][ T5922] usb 5-1: failed to fetch extended address, random address set [ 915.694473][ T5922] usb 5-1: atusb_probe: initialization failed, error = -524 [ 915.732478][ T5922] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 916.954341][ T5922] usb 5-1: USB disconnect, device number 29 [ 917.499149][T18722] vlan2: entered allmulticast mode [ 917.499172][T18722] bond0: entered allmulticast mode [ 917.499186][T18722] bond_slave_0: entered allmulticast mode [ 917.499205][T18722] bond_slave_1: entered allmulticast mode [ 918.230844][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4293'. [ 918.233851][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 918.353084][T18753] 9p: Bad value for 'wfdno' [ 918.394514][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 918.394546][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.394567][ T9] usb 1-1: Product: syz [ 918.394581][ T9] usb 1-1: Manufacturer: syz [ 918.394596][ T9] usb 1-1: SerialNumber: syz [ 918.481523][ T9] usb 1-1: config 0 descriptor?? [ 918.624025][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 919.595007][ T9] usb 1-1: Firmware: major: 39, minor: 91, hardware type: UNKNOWN (39) [ 919.945997][T18738] usb usb8: usbfs: process 18738 (syz.0.4289) did not claim interface 0 before use [ 920.229249][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4310'. [ 920.244806][ T9] usb 1-1: failed to fetch extended address, random address set [ 920.244835][ T9] usb 1-1: atusb_probe: initialization failed, error = -524 [ 920.245045][ T9] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 920.300312][ T9] usb 1-1: USB disconnect, device number 35 [ 920.333727][T17722] udevd[17722]: setting owner of /dev/bus/usb/001/035 to uid=0, gid=0 failed: No such file or directory [ 920.712593][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'. [ 921.530705][ T5922] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 921.693657][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 921.695979][ T5922] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 921.696002][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.696020][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.698668][ T5922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 921.698699][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.698721][ T5922] usb 5-1: Product: syz [ 921.698736][ T5922] usb 5-1: Manufacturer: syz [ 921.698752][ T5922] usb 5-1: SerialNumber: syz [ 921.824329][ T5922] usb 5-1: 0:2 : does not exist [ 922.174253][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 922.332256][ T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 922.332287][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.332307][ T10] usb 1-1: Product: syz [ 922.332322][ T10] usb 1-1: Manufacturer: syz [ 922.332337][ T10] usb 1-1: SerialNumber: syz [ 922.368582][ T10] usb 1-1: config 0 descriptor?? [ 922.445478][ T5922] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 922.798639][ T5922] usb 5-1: USB disconnect, device number 30 [ 922.991076][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4335'. [ 922.991123][T18846] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 923.235984][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 923.236004][ T37] audit: type=1326 audit(1776773631.884:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.236051][ T37] audit: type=1326 audit(1776773631.884:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.241296][ T37] audit: type=1326 audit(1776773631.884:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.265220][ T37] audit: type=1326 audit(1776773631.884:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.265715][ T37] audit: type=1326 audit(1776773631.884:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.379304][ T37] audit: type=1326 audit(1776773632.014:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.379422][ T37] audit: type=1326 audit(1776773632.014:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.379483][ T37] audit: type=1326 audit(1776773632.014:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18852 comm="syz.3.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9069f1c819 code=0x7ffc0000 [ 923.469678][ T10] usb 1-1: Firmware: major: 39, minor: 91, hardware type: UNKNOWN (39) [ 923.514836][T18857] mmap: syz.1.4337 (18857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 923.746404][T18829] usb usb8: usbfs: process 18829 (syz.0.4328) did not claim interface 0 before use [ 923.957489][ T10] usb 1-1: failed to fetch extended address, random address set [ 923.957531][ T10] usb 1-1: atusb_probe: initialization failed, error = -524 [ 923.957743][ T10] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 923.996257][ T10] usb 1-1: USB disconnect, device number 36 [ 924.285121][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4349'. [ 925.580637][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4362'. [ 925.580680][T18915] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 925.928839][T18922] vlan2: entered allmulticast mode [ 925.928861][T18922] bond0: entered allmulticast mode [ 925.928876][T18922] bond_slave_0: entered allmulticast mode [ 925.929283][T18922] bond_slave_1: entered allmulticast mode [ 926.257237][T18942] 9p: Bad value for 'wfdno' [ 926.263642][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 926.417184][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 926.417214][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.455074][ T9] usb 5-1: config 0 descriptor?? [ 926.548994][ T9] cp210x 5-1:0.0: cp210x converter detected [ 926.681407][ T9] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 926.681446][ T9] cp210x 5-1:0.0: querying part number failed [ 926.958521][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 926.981721][ T9] usb 5-1: USB disconnect, device number 31 [ 927.085546][ T5922] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 927.107840][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 927.108788][ T9] cp210x 5-1:0.0: device disconnected [ 927.263713][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 927.285042][ T5922] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 927.285072][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.285093][ T5922] usb 1-1: config 0 has no interface number 0 [ 927.292789][ T5922] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 927.292821][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.292844][ T5922] usb 1-1: Product: syz [ 927.292859][ T5922] usb 1-1: Manufacturer: syz [ 927.292875][ T5922] usb 1-1: SerialNumber: syz [ 927.384294][ T5922] usb 1-1: config 0 descriptor?? [ 927.391107][ T5922] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 927.391143][ T5922] cx231xx 1-1:0.1: Not found matching IAD interface [ 927.452076][T18967] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4384'. [ 927.522067][T18962] vlan2: entered allmulticast mode [ 927.522089][T18962] bond0: entered allmulticast mode [ 927.522102][T18962] bond_slave_0: entered allmulticast mode [ 927.522119][T18962] bond_slave_1: entered allmulticast mode [ 927.603298][ T10] usb 1-1: USB disconnect, device number 37 [ 927.703629][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 927.821354][T18975] 9p: Bad value for 'wfdno' [ 927.853680][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 927.858217][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.858253][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.860169][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 927.860197][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 927.860218][ T9] usb 4-1: Product: syz [ 927.860233][ T9] usb 4-1: Manufacturer: syz [ 927.922219][ T9] hub 4-1:4.0: USB hub found [ 928.311642][ T9] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 928.333646][T17702] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 929.343776][T17702] usb 1-1: Using ep0 maxpacket: 32 [ 929.346020][T17702] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 929.346043][T17702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.346061][T17702] usb 1-1: config 0 has no interface number 0 [ 929.350045][T17702] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 929.350071][T17702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.350092][T17702] usb 1-1: Product: syz [ 929.350106][T17702] usb 1-1: Manufacturer: syz [ 929.350120][T17702] usb 1-1: SerialNumber: syz [ 929.659204][T17702] usb 1-1: config 0 descriptor?? [ 930.351966][ T9] usb 4-1: USB disconnect, device number 26 [ 930.377797][T18985] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 931.202585][T17702] usb 1-1: can't set config #0, error -71 [ 931.474238][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 931.474266][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 931.474282][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 931.741575][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.779452][ T1335] lec:lec_start_xmit: lec0:No lecd attached [ 931.796269][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 931.796294][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 931.799270][T17702] usb 1-1: USB disconnect, device number 38 [ 932.159590][T19003] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4398'. [ 932.297190][T19006] 9p: Bad value for 'wfdno' [ 932.791280][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4405'. [ 932.968189][T19031] 9p: Bad value for 'wfdno' [ 932.994035][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 933.123691][ T5822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 933.131272][T19038] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 933.132528][T19038] syzkaller0: entered promiscuous mode [ 933.132551][T19038] syzkaller0: entered allmulticast mode [ 933.148496][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 933.170216][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 933.170240][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.170259][ T9] usb 1-1: config 0 has no interface number 0 [ 933.198015][T19035] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4414'. [ 933.202665][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 933.202694][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.202714][ T9] usb 1-1: Product: syz [ 933.202732][ T9] usb 1-1: Manufacturer: syz [ 933.202741][ T9] usb 1-1: SerialNumber: syz [ 933.258601][ T9] usb 1-1: config 0 descriptor?? [ 933.300578][ T9] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 933.300609][ T9] cx231xx 1-1:0.1: Not found matching IAD interface [ 933.333637][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 933.335981][ T5822] usb 5-1: config 0 has no interfaces? [ 933.343409][ T5822] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 933.343437][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.343457][ T5822] usb 5-1: Product: syz [ 933.343472][ T5822] usb 5-1: Manufacturer: syz [ 933.355215][ T5822] usb 5-1: SerialNumber: syz [ 933.405493][ T5822] usb 5-1: config 0 descriptor?? [ 933.466080][T17702] usb 1-1: USB disconnect, device number 39 [ 933.483997][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 933.638802][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 933.661484][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 933.661513][ T10] usb 6-1: config 0 has no interface number 0 [ 933.668263][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 933.668355][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.668418][ T10] usb 6-1: Product: syz [ 933.668461][ T10] usb 6-1: Manufacturer: syz [ 933.668505][ T10] usb 6-1: SerialNumber: syz [ 933.702155][ T10] usb 6-1: config 0 descriptor?? [ 933.833933][ T5822] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 933.908942][T19051] futex_wake_op: syz.3.4421 tries to shift op by 144; fix this program [ 934.375070][ T5922] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 934.943580][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 934.946123][ T5822] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 934.946164][ T5822] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 934.946205][ T5822] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 934.946294][ T5822] usb 2-1: config 168 interface 0 has no altsetting 0 [ 934.947945][ T5822] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 934.947986][ T5822] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 934.948040][ T5822] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 934.948069][ T5822] usb 2-1: config 168 interface 0 has no altsetting 0 [ 934.949637][ T5822] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 934.949673][ T5822] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 934.949710][ T5822] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 934.949737][ T5822] usb 2-1: config 168 interface 0 has no altsetting 0 [ 934.988548][ T5822] usb 2-1: string descriptor 0 read error: -22 [ 934.988717][ T5822] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 934.988744][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.117438][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 935.117485][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 935.147025][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 935.157788][ T5922] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 935.157813][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.157831][ T5922] usb 1-1: config 0 has no interface number 0 [ 935.161555][ T5922] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 935.161584][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.161605][ T5922] usb 1-1: Product: syz [ 935.161619][ T5922] usb 1-1: Manufacturer: syz [ 935.161634][ T5922] usb 1-1: SerialNumber: syz [ 935.227332][ T5822] adutux 2-1:168.0: interrupt endpoints not found [ 935.262297][ T5922] usb 1-1: config 0 descriptor?? [ 935.283419][ T5922] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 935.283453][ T5922] cx231xx 1-1:0.1: Not found matching IAD interface [ 935.371282][ T9] usb 2-1: USB disconnect, device number 27 [ 935.488794][T19060] 9p: Bad value for 'wfdno' [ 935.738108][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 935.738426][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 935.781053][ T10] usb 6-1: USB disconnect, device number 22 [ 935.883075][T19068] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4427'. [ 935.920043][ T9] usb 5-1: USB disconnect, device number 32 [ 936.116885][T19076] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 936.117807][T19076] syzkaller0: entered promiscuous mode [ 936.117824][T19076] syzkaller0: entered allmulticast mode [ 936.586247][ T5822] usb 1-1: USB disconnect, device number 40 [ 936.711110][T19097] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4439'. [ 936.772335][T19099] 9p: Bad value for 'wfdno' [ 936.853766][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 936.993578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 936.993608][ C0] lec:lec_tx_timeout: lec0 [ 937.053927][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 937.061257][ T10] usb 6-1: config 0 has no interfaces? [ 937.081987][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 937.082017][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.082037][ T10] usb 6-1: Product: syz [ 937.082051][ T10] usb 6-1: Manufacturer: syz [ 937.082064][ T10] usb 6-1: SerialNumber: syz [ 937.153076][T19115] futex_wake_op: syz.0.4445 tries to shift op by 144; fix this program [ 937.705113][T19118] futex_wake_op: syz.1.4448 tries to shift op by 144; fix this program [ 939.228562][ T10] usb 6-1: config 0 descriptor?? [ 940.388558][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.492971][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 940.541498][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 940.542872][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 940.586539][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 940.597333][ T5822] usb 6-1: USB disconnect, device number 23 [ 940.618381][ T5825] BUG: unable to handle page fault for address: fffff520034a0001 [ 940.618399][ T5825] #PF: supervisor read access in kernel mode [ 940.618411][ T5825] #PF: error_code(0x0000) - not-present page [ 940.618423][ T5825] PGD 23fff5067 P4D 23fff5067 PUD 1b295067 PMD 5aa78067 PTE 0 [ 940.618472][ T5825] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 940.618502][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.618528][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 940.618543][ T5825] Workqueue: hci1 hci_rx_work [ 940.618733][ T5825] RIP: 0010:__list_del_entry_valid_or_report+0xa6/0x190 [ 940.618841][ T5825] Code: 4d 89 fc 49 c1 ec 03 43 80 3c 2c 00 74 08 4c 89 ff e8 0e 20 80 fd 49 39 1f 0f 85 92 00 00 00 4d 8d 7e 08 4d 89 fc 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 ff e8 eb 1f 80 fd 49 39 1f 0f 85 9e 00 [ 940.618860][ T5825] RSP: 0018:ffffc900046579e0 EFLAGS: 00010a02 [ 940.618879][ T5825] RAX: 1ffff920038a0800 RBX: ffffc9001c504000 RCX: 0000000000000000 [ 940.618894][ T5825] RDX: 000000001ec7f800 RSI: 0000000000000001 RDI: ffffc9001c504008 [ 940.618909][ T5825] RBP: 0000000000100000 R08: ffffffff8b2ee740 R09: ffffffff8dfc80c0 [ 940.618924][ T5825] R10: dffffc0000000000 R11: fffffbfff1f178bf R12: 1ffff920034a0001 [ 940.618940][ T5825] R13: dffffc0000000000 R14: ffffc9001a500000 R15: ffffc9001a500008 [ 940.618957][ T5825] FS: 0000000000000000(0000) GS:ffff8881260fe000(0000) knlGS:0000000000000000 [ 940.618974][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.618987][ T5825] CR2: fffff520034a0001 CR3: 0000000061088000 CR4: 00000000003526f0 [ 940.619007][ T5825] Call Trace: [ 940.619015][ T5825] [ 940.619025][ T5825] kcov_remote_start+0x2af/0x710 [ 940.619170][ T5825] hci_rx_work+0x10f/0x1040 [ 940.619198][ T5825] ? process_scheduled_works+0xa70/0x1860 [ 940.619298][ T5825] process_scheduled_works+0xb5d/0x1860 [ 940.619347][ T5825] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.619384][ T5825] ? assign_work+0x3d5/0x5e0 [ 940.619418][ T5825] worker_thread+0xa53/0xfc0 [ 940.619450][ T5825] kthread+0x388/0x470 [ 940.619505][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 940.619523][ T5825] ? __pfx_kthread+0x10/0x10 [ 940.619552][ T5825] ret_from_fork+0x514/0xb70 [ 940.619620][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 940.619640][ T5825] ? __switch_to+0xc79/0x1410 [ 940.619716][ T5825] ? __pfx_kthread+0x10/0x10 [ 940.619740][ T5825] ret_from_fork_asm+0x1a/0x30 [ 940.619783][ T5825] [ 940.619795][ T5825] Modules linked in: [ 940.619820][ T5825] CR2: fffff520034a0001 [ 940.619840][ T5825] ---[ end trace 0000000000000000 ]--- [ 940.619851][ T5825] RIP: 0010:__list_del_entry_valid_or_report+0xa6/0x190 [ 940.619881][ T5825] Code: 4d 89 fc 49 c1 ec 03 43 80 3c 2c 00 74 08 4c 89 ff e8 0e 20 80 fd 49 39 1f 0f 85 92 00 00 00 4d 8d 7e 08 4d 89 fc 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 ff e8 eb 1f 80 fd 49 39 1f 0f 85 9e 00 [ 940.619899][ T5825] RSP: 0018:ffffc900046579e0 EFLAGS: 00010a02 [ 940.619917][ T5825] RAX: 1ffff920038a0800 RBX: ffffc9001c504000 RCX: 0000000000000000 [ 940.619932][ T5825] RDX: 000000001ec7f800 RSI: 0000000000000001 RDI: ffffc9001c504008 [ 940.619946][ T5825] RBP: 0000000000100000 R08: ffffffff8b2ee740 R09: ffffffff8dfc80c0 [ 940.619961][ T5825] R10: dffffc0000000000 R11: fffffbfff1f178bf R12: 1ffff920034a0001 [ 940.619977][ T5825] R13: dffffc0000000000 R14: ffffc9001a500000 R15: ffffc9001a500008 [ 940.619993][ T5825] FS: 0000000000000000(0000) GS:ffff8881260fe000(0000) knlGS:0000000000000000 [ 940.620010][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.620024][ T5825] CR2: fffff520034a0001 CR3: 0000000061088000 CR4: 00000000003526f0 [ 940.620044][ T5825] Kernel panic - not syncing: Fatal exception [ 940.620640][ T5825] Kernel Offset: disabled