last executing test programs: 13.053957775s ago: executing program 4 (id=6777): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 12.89171383s ago: executing program 4 (id=6780): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x0, 0xf, 0x2, "c7a1"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40fa04"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000039c0)={0x44, &(0x7f0000000280)={0x40, 0x7, 0x4, "ca3bca96"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x83, 0x1, "f1"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.33288387s ago: executing program 4 (id=6793): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) fsopen(0x0, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x94600, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040)) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 7.755174054s ago: executing program 0 (id=6797): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 7.405252185s ago: executing program 4 (id=6798): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0xc001102a, 0x0, 0xfffffffffffffffc}]}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000040)={0x24, 0x2, 0x3, "47091e00000000bf0b0008ae31b13e4d83e20f00000000000000000000000002", 0x34325842}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800010600000000000000001c00000bfc000001002100000c0009000200040e", @ANYRES32=r4, @ANYBLOB="f5e5010000461200"], 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000040000100fcff0700fedbdf25010000000400478008000180040010800a000200b95d6d47ddad95b082dec6ae", @ANYRESDEC=r0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000000)=0x8, 0x4) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) unshare(0x22020400) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x16c, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@loopback, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast2, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x4000}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x16c}}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) 7.280307563s ago: executing program 2 (id=6799): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0xed) socket$l2tp(0x2, 0x2, 0x73) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESDEC], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="1c706572665f6576656e7420ad"], 0xc) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r3, &(0x7f00000003c0)=""/183, 0xb7, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r7, 0x0, 0x7ffd, 0xe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, 0x0) 6.871934902s ago: executing program 0 (id=6800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xbe4e602dc9e6c1d3) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="f30fc7727866baf80cb892035c88ef66bafc0c66baf80cb880b14b8cef66bafc0cec0f019bde32f050c2c272192fb09e00c0fefe0f3803e2c744240000800000c744240200000100c7442406000000000f091424655066ed650fc7907cd7b8010000000f01c1b835018ed80f2243", 0x6e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.381064645s ago: executing program 1 (id=6802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.190359474s ago: executing program 1 (id=6804): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet_sctp(r0, 0x0, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) 5.789679044s ago: executing program 2 (id=6805): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x15, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0xa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8, '\x00', r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e6576"], 0x74}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x7b3a}, &(0x7f00000002c0), &(0x7f0000000000)) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.065637933s ago: executing program 0 (id=6806): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x4, {}, [{0x74, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0xf423f, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 4.815308143s ago: executing program 1 (id=6808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x22020400) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x5, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001840)={0x10000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0xed6, 0x4, 0x10, 0xfffffff7, 0x13, "4ca86f9c3bc93e60e0a255076b5e266d108b42"}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r7, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000001240)=ANY=[@ANYBLOB="e895b0e1473d0ed1009c5942b2add9b5027f8d7d6fdbb9d2b34623be85bd7e2d36e1fc0f951c6c9fc562b2b6f344765a7db3e0761d702e31135e413570d796dc30e2cbe6850b44c2f9b0c10e734e8f9e6ce11921fc278bcf78c6227d", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.568680709s ago: executing program 4 (id=6809): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201303000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.388607301s ago: executing program 2 (id=6813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.14436185s ago: executing program 1 (id=6814): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x80000000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.060568311s ago: executing program 1 (id=6815): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x40c6}, 0x984e45ff733bc95) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r7, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getpgrp(0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.921390072s ago: executing program 3 (id=6817): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0xa8) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) accept4(r1, &(0x7f0000000200)=@un=@abs, &(0x7f0000000180)=0x80, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001a0000000000060300960042181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) msgget(0x0, 0x604) 2.458445372s ago: executing program 0 (id=6818): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.696539412s ago: executing program 1 (id=6819): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f00000002c0)={0x40, 0x17, 0x2, "e907"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}}], 0x18}}], 0x1, 0x44008004) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x10) 1.559262815s ago: executing program 3 (id=6820): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.505532476s ago: executing program 3 (id=6821): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4640, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 1.13566172s ago: executing program 3 (id=6822): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, 0x0, 0x0) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 1.03212731s ago: executing program 3 (id=6823): socket(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0xd, @remote, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40080) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 989.948863ms ago: executing program 3 (id=6824): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0xa8) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) accept4(r1, &(0x7f0000000200)=@un=@abs, &(0x7f0000000180)=0x80, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001a0000000000060300960042181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) msgget(0x0, 0x604) 834.036428ms ago: executing program 0 (id=6825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 797.724801ms ago: executing program 0 (id=6826): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 250.773892ms ago: executing program 2 (id=6827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000000700)="a27f83b3c87343f4da6f7df6001d38d2d4e7c43f8ce4dd4ff5c8d30f411d4a3b35a1aa8f36f12a518b9baabc6fb69cd41943661cd632e22457c06d08141ffc6a08842d227b9281f89dfbbe8ba02446f837a85524e8136a3d14e037f7d09643b5cd4a6af22d08adb93fd03db23c358a", 0x6f}, {&(0x7f0000000480)="f56195e3f573c880e60ac86db4b643700f3db94abbb5129bbe80", 0x1a}, {&(0x7f0000003700)="d422f2b80b1bcefe0bc1fb045f3a153e84f5d67bba9b3c7f2da2875ee4a468dd0b88bcf7ca0c3c9f0ea1f8514b5ed5c4ace069617d71e84dfb9e7c825ba2e6c8b2945eb474f77640c3a43b57fd97a28adeaf9239a07bc5ab0741ac0fdabea5a39f40db7fe0fcc2f42d045203011300b3a9068b906f91b497a4f3b17124ebe1fab6430023c4f8bfd0f84280499fa811e93b3746d334b4b0369b31b4504f0e08f5790289befeca88f02fa02f5f1de0b0ffabab594e696b6d592dfe04", 0xbb}, {&(0x7f0000000540)="9934e99df8658df0cff33c622286d1361d07df0a5dce44bc26843649c132c4a090447df1175794f35747ff", 0x2b}, {&(0x7f00000037c0)="ef464beea007362703e9973f8fd43990da1e0c560aedf8d30b70bc5026009be4897c3be2d40414558f15af38dd2c6512f19bac86ea24ebb78935da36b4feaceeaddab27c90ee12e102c854aa31c51e87207bb16da5614811cc197aa63b893679f7f4eb28797971d2aa6e", 0x6a}], 0x5}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000004a00)="50271b49125c5b37127a1ba8004f9286dec63f21f1df7e58a55adc3f67598b8bb9ffc059281b2a177ef10e1ee51bb526c008fbe50aa48d15fa7f842cc1cd4c6a8ce2581429387ee6a9a431c15a14f1d3a492780a967a2881440ed24ba123c10bb9a33324660541612278", 0x6a}], 0x1}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004c40)="0b3b9ba8e6a6dacf554c44518b3b099543ee23897e0d9aceae2620cb9be475b52ff36ae7f5d16a3745c4f17c34e7c46a3106b3b090573eba5b68c9e69dadd296bd39d4cabbca976a6c09290644a14212c24caf4832c3c96f08bbadf4085e79eb46a5cc2d2a49a9b4e124", 0x6a}, {&(0x7f0000004cc0)="0c558476210103249fc5f6476d0d35874353f3063c8f10e291ee178ff6983e6c208d676733fb75a21784f0c3ae81fd7b8ed6ecbf6c3cc0fe30099e276e39baf8adcb1afadd13fa5ffa7e0c646e753136791552155affceb974945f65a47c8f95c093a063d951325a50de01ac48bd05c5b3d727a38929584679de0a88ce791139dd6378f3281c0e29a3fae586d492db1bcafea55e5a556335053cf884c2fcd11968f960d101bfd0db8ee8286541120dac440d2a37b385e8fa1e051b341be100e9d2d72f01f55946a098afd44956a11d67837d59e70bf74877599bbb0a02f32c73e4049c12d5e43e4da6f87dbfba3130", 0xef}, {&(0x7f0000004dc0)="868ff7d4fba07e6c3056358c3f07e1fecfd75c0848780d60a2b5ddfe3f4bb4a51b42546a84f9963e76376fe162f9ff6f7f987782d6dd59fd03806994ece0fde896187dc14f46163c7fe5d6a4afe3a5eb9be370b6a40f33a2007bf041ac3037a1f4fe0fa788e30c2b837b31aab94833ac21cd417cade9ddfe9240d3b1c0db79f0410ec4b140f555c40e24f9763e3c9298d796d57b26a387ac7a968ca2ec5029d3b87b662a4091b15dc1aa4afa2eae95894f81535221710ea2d96e", 0xba}, {&(0x7f0000004e80)="c3d22ea6ac4fc8ff1bea184fda08f6aeab2d02c16c2796f66097979169ea92e6b11ab34a8eff2cfe2cc467ca238adc240e3c018230c1ba24b81be3d3785a483a84f24e10d7ae7dcbe527754dca030bbd6ba032fd75b28053083b4d1a56770128247c972dc24143fd19e344a566a7", 0x6e}, {&(0x7f0000004f80)="68e158740a3a5457794587bca6f6f1cc137e5744d2967957ad26d3e8cf", 0x1d}], 0x5}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000053c0)="a985cc1124623bb428ffa36895e23c9755b8e5a5a5bdda52ec31907cd01bdfdf180520ed8e67ebada0e1e1e147af2e0ed136d6d4dac15f073476", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f00000054c0)="efd1d7380d9ad06901b210926f", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006640)="7d94f704f1845b4db489dd7fbc", 0xd}, {&(0x7f0000006680)="02e18d33392575787e760eb5e6c97548b167aa43cf904fd1f1cf1fdbac2df5722236a3a2ce01f8c12962606c01a9faee84f2a90e98b1ac6f447c560f79a87cab1cb74cf8ad2435b9ea40f33bfcb8df85b833468c4105f0ee7c9dd5b50997713da4fa01a6e9413af550971a246e9b9f04dd729685fbf6d442bed48c7e3f1e", 0x7e}, {&(0x7f00000067c0)="f93fb2d69cc85fa7b17d1778b8d3e184e5f45b7f2085b9db9a6a3887b5e8ff80e8ecea3e18af06fd2f9e700a2eb082b47b9f1d200c14d0e7f93e01a81ece23a4620af7e2c5dbdb724bbff914a5d9927506f57c74e35c6d09745449b27ff36b06b287e4fb674c3d679d6400b92539eba1309a54f345c39903481bae8aa3c9ada596886c9b725b6516f1cb8ed5fbb90d7485f4fa13e65d79c64d11247e5dfb9924c1e56958a2c9aa4ab707ce", 0xab}, {&(0x7f0000006880)="75269e4f88d09d1dea20894a2eb0911d44b2ca7d6fd455b9cb74f18e2dc4969d072a51057263cc6407daef3b75f04d2a842b86383c1c15de06baa2eeabb63f9f798af9cfd35f39498271053504d970aa10ade5f0732e8f651bf289fa7c618d9bf837a1122fa24359a29aba8218b6272bbb996716fb8b4271661b7ff57aaa75bcdd0c8259543e9a46d59f543642300f617dbbc0258dd0b7cb5ccdca92075c28cd7b5af72ec306835148061adde6a76ec8b779e349a450fbc012c3d13600c11023e8115f2d9610863059bbfc9569f13e8186a02b0d1a107f914e9be4d54fe8", 0xde}, {&(0x7f0000006980)="2c1ca53d5364e7a3167e9b0f5e654b8afe43a4d0a741", 0x16}, {&(0x7f0000006a00)="8c343f83a7371b6eca878c83c827bb7bfa3ea2acd5f1e25e328820d5c2a05caab7b5e3e42d3973a7ad14e1375f854d127e6ce875c1607def10b42e74192891bb506e16387a8319629b3b16d063c06ed3e3fa367bf3022df80b9c6058a1ba66907b4311096444278324f162", 0x6b}], 0x6}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000006b40)="d1354241a2c053337cfae48ce1ebf3f6787599a9055fcee3f9fa8332569e7b4f4c9d6d3fc8c5d5b49bad2e0abeb5a910a4d1fe496cafc08c2d885a6da097a2c1350240482e26254f7947dae57d6db6d3bda4361487022f405aefd677afb437f8c090f4bf19b304aee544f046a233e6eb5c6f4a6b1db9b63f0455933d1a3b9fa19e7e54f6e8a3c5121d10218660e7a6826c6eb85f582cc7f24b304f360d1627d7fb1178c23ba1d97405f0bdfa6f405accade1ba2cf8ff7361ff9aecfb3dc385223b8087e756eb2f688d71c0ef100e0d5567f9f288fde6", 0xd6}, {&(0x7f0000006c40)="07c7a747b0ffa26568d6d6233b38ead425b668f37b228fc8e791ded67b6f82feb4f710fb66229e7b5c3eeb5c9c344bab215aef3058e3e784b725b57032266e2605f461ee6f86", 0x46}, {&(0x7f0000006d40)="96168f34030c97fa9b2b903dfb0262f2c0d3dcdd76e5e9d005f86f644704cce5d5e48459b6acf4891bb49f8a3fe21611378c262e8f91521d7adb97aa1699c7260343648a87ee888d3052662bed6bb7a97b04d6dae28bfeda091cc06c81d8df410d125c9de0b770c0a03ca7a0880ec389aa9dbc91d9f69b2f43efec71b7aa94f41a2a8f8b6e19fa464f4845355fca2bd924d4f535238d3d524111bb17daa6d67585ca54be37ca8e6c1a6e7b01d0bbcc369bb3a8c75fd959e8ef4e72c9a7235a9b6ec98cdfe3a25fe5c90fc4a0c138a7b2c3fca0fb0509903d2f1798556d8b93d119f2298212bb952cb7ae5b88e763de", 0xef}, {&(0x7f0000006e40)="8de59d9bf8e2fd6e5ade417b13cc6b2242cafecffc6d2b62ec014983a6d3daf386daa020c64e3aa081237a153e02935f5131d45f89afe3230990eba8eb726741523cb90fd8bb7c67e4eec04df93ee9329d9ef0ca332b917fcb55a486d921f3b0241fb780edfcef30ec52272a2f3ccbb6845dc239762e43968e815c92e6ed96740b4e25dd9ee5dc82446f48d0bec32b10059367fd31d41a1715a2daab25b783e2112169459569c84dfd3d455b304e77a03134207f29719ded3215070afe", 0xbd}, {&(0x7f0000006f00)="827a73a8fc", 0x5}, {&(0x7f0000007f40)="c75daac44bd1c6144e96af38a41612294cbe5534a6a85244803036081f95c9ae9d85805276e538656aa5830a765c165c0c435ee880e6c9020474bf", 0x3b}], 0x6}}], 0x7, 0x4000c8d1) sendto$inet6(r1, &(0x7f0000000ec0)="990242d4", 0x4, 0x4044001, 0x0, 0x0) 164.270883ms ago: executing program 2 (id=6828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 78.71156ms ago: executing program 4 (id=6829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x45) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = getpgid(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x21, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2b, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f73112"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xa8}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x63, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0500fdffffff000000000600000008000300", @ANYRES32, @ANYBLOB="080005000a000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x12, r7, 0x0, &(0x7f0000000fc0)) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x1) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640011000006020202020202010882848b960c121824"], 0x36) prctl$PR_GET_DUMPABLE(0x3) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000006a851100000010000000df570000"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c121824c7337820ed31fcea6bbd79d73e1cf486d549"], 0x28) 0s ago: executing program 2 (id=6830): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000a35a810e5a4ffc9bfb58e4e096f0f1210f9b286152f36783c50b5d2b7c79e6cabc81ffbbb68be4894724"], 0x30}}, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x20, 0x0, @mcast1, @private0, 0x700, 0x20, 0xfffffffc}}) gettid() socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r7, @ANYRESHEX=0x0, @ANYRES32=r6], 0x164}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) kernel console output (not intermixed with test programs): 22][T10463] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1171.111240][T10463] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1171.158244][T16967] usb 5-1: Using ep0 maxpacket: 16 [ 1171.166318][T16967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.177372][T16967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1171.194046][T16967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1171.206584][T16967] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1171.217409][T16967] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1171.242610][T16967] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1171.260478][T16967] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1171.285202][T16967] usb 5-1: Manufacturer: syz [ 1171.306662][T16967] usb 5-1: config 0 descriptor?? [ 1171.662050][T16967] rc_core: IR keymap rc-hauppauge not found [ 1171.668093][T16967] Registered IR keymap rc-empty [ 1171.699351][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.730351][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.779524][T16967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1171.818699][T16967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input101 [ 1171.855499][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.880697][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.898489][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.948391][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.968365][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1171.998523][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.018398][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.048518][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.082937][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.100395][T16967] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1172.131415][T16967] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1172.131442][T16967] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1172.143497][T16967] usb 5-1: USB disconnect, device number 68 [ 1172.370100][T23924] usb 3-1: USB disconnect, device number 100 [ 1173.210235][T24677] i2c i2c-0: Invalid block write size 34 [ 1173.330153][T24685] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1173.355846][T24685] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1173.397798][T24685] syz_tun: entered allmulticast mode [ 1173.460783][T24684] syz_tun: left allmulticast mode [ 1173.858336][T16967] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1174.253077][T16967] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1174.278264][T16967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.286817][T16967] usb 1-1: Product: syz [ 1174.292450][T16967] usb 1-1: Manufacturer: syz [ 1174.297254][T16967] usb 1-1: SerialNumber: syz [ 1174.656282][T24711] tipc: Started in network mode [ 1174.668307][T24711] tipc: Node identity ee45aa34ea38, cluster identity 4711 [ 1174.686896][T24711] tipc: Enabled bearer , priority 0 [ 1174.712936][T24714] syzkaller0: entered promiscuous mode [ 1174.713114][T16967] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1174.728257][T24714] syzkaller0: entered allmulticast mode [ 1174.732051][T16967] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1174.781649][T24710] tipc: Resetting bearer [ 1174.817071][T24710] tipc: Disabling bearer [ 1174.906686][T24717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6234'. [ 1175.564409][T16967] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1175.590735][T16967] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1175.613564][T16967] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1175.638809][T16967] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1175.726761][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1175.748727][T24731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1176.008614][T23924] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1176.192701][T23924] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1176.215495][T23924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.233881][T23924] usb 3-1: Product: syz [ 1176.243091][T23924] usb 3-1: Manufacturer: syz [ 1176.263995][T23924] usb 3-1: SerialNumber: syz [ 1176.284772][T23924] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1176.299053][T23924] r8152-cfgselector 3-1: config 0 descriptor?? [ 1176.643811][ T5831] usb 1-1: USB disconnect, device number 97 [ 1176.743639][T16967] r8152-cfgselector 3-1: USB disconnect, device number 101 [ 1176.850902][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6243'. [ 1176.898549][T24743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1177.371667][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.378127][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.738306][T16967] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1177.946621][T16967] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.981997][T16967] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1178.010349][T16967] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1178.031991][T16967] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1178.053505][T16967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.074996][T16967] usb 1-1: Product: syz [ 1178.085398][T16967] usb 1-1: Manufacturer: syz [ 1178.105189][T16967] usb 1-1: SerialNumber: syz [ 1178.349111][T16967] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1178.374648][T16967] uvcvideo 1-1:220.0: No valid video chain found. [ 1178.411301][T16967] usb 1-1: USB disconnect, device number 98 [ 1179.032562][T24777] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1179.068317][T24777] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1179.109012][T24777] syz_tun: entered allmulticast mode [ 1179.138723][T24775] syz_tun: left allmulticast mode [ 1179.177311][T24779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1179.216147][T24779] ip6gretap0: entered promiscuous mode [ 1179.233868][T24779] macvtap1: entered promiscuous mode [ 1179.244039][T24779] macvtap1: entered allmulticast mode [ 1179.258242][T24779] ip6gretap0: entered allmulticast mode [ 1179.299762][T24782] ip6gretap0: left allmulticast mode [ 1179.313037][T24782] ip6gretap0: left promiscuous mode [ 1179.462162][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1179.482366][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1179.782992][ T6940] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1179.976100][ T6940] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1180.005859][ T6940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.036389][ T6940] usb 5-1: Product: syz [ 1180.040864][ T6940] usb 5-1: Manufacturer: syz [ 1180.045471][ T6940] usb 5-1: SerialNumber: syz [ 1180.078682][ T6940] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1180.088302][ T6940] r8152-cfgselector 5-1: config 0 descriptor?? [ 1180.534685][T16967] r8152-cfgselector 5-1: USB disconnect, device number 69 [ 1180.728332][ T5831] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1180.898399][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 1180.919776][ T5831] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1180.938547][ T5831] usb 3-1: config 0 has no interface number 0 [ 1180.944721][ T5831] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1180.971087][ T5831] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1180.982297][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.001204][ T5831] usb 3-1: Product: syz [ 1181.005419][ T5831] usb 3-1: Manufacturer: syz [ 1181.010698][ T5831] usb 3-1: SerialNumber: syz [ 1181.030328][ T5831] usb 3-1: config 0 descriptor?? [ 1181.036295][T24798] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1181.130377][T16967] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1181.269609][T24798] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1181.293701][T16967] usb 1-1: Using ep0 maxpacket: 16 [ 1181.310358][T16967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.342624][T16967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.368298][T16967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1181.398373][T16967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1181.418290][T16967] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.443120][T16967] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1181.462645][T16967] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1181.482880][T16967] usb 1-1: Manufacturer: syz [ 1181.500131][ T5831] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1181.510661][T16967] usb 1-1: config 0 descriptor?? [ 1181.544613][ T5831] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1181.818275][T16967] rc_core: IR keymap rc-hauppauge not found [ 1181.828490][T16967] Registered IR keymap rc-empty [ 1181.839458][T24824] tipc: Started in network mode [ 1181.840946][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1181.845819][T24824] tipc: Node identity ae1861048e0f, cluster identity 4711 [ 1181.861687][T24824] tipc: Enabled bearer , priority 0 [ 1181.875044][T24824] syzkaller0: entered promiscuous mode [ 1181.881348][T24824] syzkaller0: entered allmulticast mode [ 1181.895082][T24824] tipc: Resetting bearer [ 1181.898505][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1181.908675][T24823] tipc: Resetting bearer [ 1181.929482][T16967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1181.931250][T24823] tipc: Disabling bearer [ 1181.954315][T16967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input102 [ 1181.986273][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.028457][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.048379][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.068837][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.088427][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.128403][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.148417][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.168335][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.188508][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.208340][T16967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1182.237698][T16967] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1182.260159][T16967] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1182.280714][T16967] usb 1-1: USB disconnect, device number 99 [ 1182.510469][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1182.529422][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1182.723114][T24845] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1182.879840][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6280'. [ 1182.891826][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6280'. [ 1183.138534][ T6940] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1183.196891][T24858] tipc: Enabled bearer , priority 0 [ 1183.205460][T24858] syzkaller0: entered promiscuous mode [ 1183.211434][T24858] syzkaller0: entered allmulticast mode [ 1183.223570][T24858] tipc: Resetting bearer [ 1183.230874][T24857] tipc: Resetting bearer [ 1183.249715][T24857] tipc: Disabling bearer [ 1183.312846][ T6940] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1183.322107][ T6940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.330667][ T6940] usb 1-1: Product: syz [ 1183.335038][ T6940] usb 1-1: Manufacturer: syz [ 1183.339952][ T6940] usb 1-1: SerialNumber: syz [ 1183.348081][ T6940] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1183.356548][ T6940] r8152-cfgselector 1-1: config 0 descriptor?? [ 1183.505997][T16967] usb 3-1: USB disconnect, device number 102 [ 1183.777493][ T30] audit: type=1326 audit(1764846347.950:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1183.808819][ T5899] r8152-cfgselector 1-1: USB disconnect, device number 100 [ 1183.848357][ T30] audit: type=1326 audit(1764846347.980:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1183.938020][ T30] audit: type=1326 audit(1764846347.980:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1183.954729][T24880] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6293'. [ 1184.006443][T24880] syz_tun: entered allmulticast mode [ 1184.012184][ T30] audit: type=1326 audit(1764846347.980:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1184.021164][T24879] syz_tun: left allmulticast mode [ 1184.052587][ T30] audit: type=1326 audit(1764846347.980:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1184.082708][ T30] audit: type=1326 audit(1764846347.980:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1184.089007][T24883] __nla_validate_parse: 1 callbacks suppressed [ 1184.089025][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1184.108065][ T30] audit: type=1326 audit(1764846347.980:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1184.160828][ T30] audit: type=1326 audit(1764846347.980:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1184.195078][ T30] audit: type=1326 audit(1764846347.990:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1184.218658][ T30] audit: type=1326 audit(1764846347.990:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24873 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1184.240892][ C1] vkms_vblank_simulate: vblank timer overrun [ 1185.910702][T24926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6312'. [ 1185.960604][T24926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6312'. [ 1187.558328][ T5899] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1187.730974][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 1187.739575][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1187.750858][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1187.762514][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.779926][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1187.790252][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1187.799104][ T5899] usb 5-1: Product: syz [ 1187.803361][ T5899] usb 5-1: Manufacturer: syz [ 1187.808032][ T5899] usb 5-1: SerialNumber: syz [ 1187.823169][ T5899] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input103 [ 1188.480185][ T5899] usb 5-1: USB disconnect, device number 70 [ 1188.519719][ T5899] appletouch 5-1:1.0: input: appletouch disconnected [ 1189.513105][T24979] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1189.522385][T24979] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1190.840625][T25003] fuse: Bad value for 'fd' [ 1191.061871][T25009] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6341'. [ 1191.089182][T25009] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6341'. [ 1191.122039][T25013] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6342'. [ 1191.131907][T25009] syz_tun: entered allmulticast mode [ 1191.137949][T25013] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6342'. [ 1191.148685][ T5899] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1191.160776][T25008] syz_tun: left allmulticast mode [ 1191.313928][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.338779][ T6940] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1191.352275][ T5899] usb 1-1: config 0 has no interfaces? [ 1191.368999][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1191.378098][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.404604][ T5899] usb 1-1: config 0 descriptor?? [ 1191.500065][ T6940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1191.521989][ T6940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1191.548399][ T6940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1191.578265][ T6940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1191.597575][ T6940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.615039][ T6940] usb 4-1: config 0 descriptor?? [ 1191.637965][T25011] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1191.659121][ T5831] usb 1-1: USB disconnect, device number 101 [ 1192.075781][ T6940] usbhid 4-1:0.0: can't add hid device: -71 [ 1192.090190][ T6940] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1192.113003][ T6940] usb 4-1: USB disconnect, device number 86 [ 1192.227567][T25039] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6354'. [ 1192.253059][T25039] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6354'. [ 1192.271029][T25039] syz_tun: entered allmulticast mode [ 1192.279690][T25038] syz_tun: left allmulticast mode [ 1192.762327][T25057] tipc: Enabled bearer , priority 0 [ 1192.780074][T25057] syzkaller0: entered promiscuous mode [ 1192.785598][T25057] syzkaller0: entered allmulticast mode [ 1192.816310][T25057] tipc: Resetting bearer [ 1192.837959][T25056] tipc: Resetting bearer [ 1192.896428][T25056] tipc: Disabling bearer [ 1192.956253][T25063] tipc: Started in network mode [ 1192.977638][T25063] tipc: Node identity aad483a4c363, cluster identity 4711 [ 1193.001081][T25063] tipc: Enabled bearer , priority 0 [ 1193.024723][T25065] syzkaller0: entered promiscuous mode [ 1193.048688][T25065] syzkaller0: entered allmulticast mode [ 1193.084466][T25063] tipc: Resetting bearer [ 1193.101308][T25062] tipc: Resetting bearer [ 1193.148681][T25062] tipc: Disabling bearer [ 1193.400745][T25074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1193.914598][T25091] fuse: Bad value for 'fd' [ 1194.120838][T25104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1194.163871][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1194.163889][ T30] audit: type=1326 audit(1764846358.340:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.3.6383" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x0 [ 1194.268551][ T5899] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1194.460545][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.474179][ T5899] usb 5-1: config 0 has no interfaces? [ 1194.480748][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1194.492132][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.523999][ T5899] usb 5-1: config 0 descriptor?? [ 1194.781118][T16967] usb 5-1: USB disconnect, device number 71 [ 1194.818461][T25131] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1194.825031][T25131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1194.869919][T25131] vhci_hcd vhci_hcd.0: Device attached [ 1195.035586][T25140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6396'. [ 1195.118323][T23924] usb 33-1: new low-speed USB device number 11 using vhci_hcd [ 1195.126082][ T5899] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1195.276871][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1195.288479][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 1195.305708][ T5899] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 1195.312884][T25144] ip6gretap0: entered promiscuous mode [ 1195.328396][T25144] macvtap1: entered promiscuous mode [ 1195.333932][T25144] macvtap1: entered allmulticast mode [ 1195.348589][T25144] ip6gretap0: entered allmulticast mode [ 1195.361382][T25146] ip6gretap0: left allmulticast mode [ 1195.367926][T25146] ip6gretap0: left promiscuous mode [ 1195.382011][ T5899] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1195.399215][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1195.414473][ T5899] usb 1-1: Product: syz [ 1195.418838][ T5899] usb 1-1: Manufacturer: syz [ 1195.423559][ T5899] usb 1-1: SerialNumber: syz [ 1195.434412][ T5899] usb 1-1: config 0 descriptor?? [ 1195.446990][ T5899] pwc: Philips SPC 880NC USB webcam detected. [ 1195.573189][T25153] tipc: Enabled bearer , priority 0 [ 1195.584086][T25153] syzkaller0: entered promiscuous mode [ 1195.590782][T25153] syzkaller0: entered allmulticast mode [ 1195.603401][T25153] tipc: Resetting bearer [ 1195.616682][T25152] tipc: Resetting bearer [ 1195.652838][T25152] tipc: Disabling bearer [ 1195.654974][T25131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.675279][T25131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.711747][T25133] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 9 [ 1195.726404][ T5899] pwc: Warning: more than 1 configuration available. [ 1195.741272][T24309] vhci_hcd: stop threads [ 1195.751576][ T5899] pwc: Failed to set LED on/off time (-71) [ 1195.767809][T24309] vhci_hcd: release socket [ 1195.773811][T24309] vhci_hcd: disconnect device [ 1195.778908][ T5899] pwc: send_video_command error -71 [ 1195.784125][ T5899] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1195.809786][ T5899] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1195.840827][ T5899] usb 1-1: USB disconnect, device number 102 [ 1196.068300][ T6940] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1196.230859][ T6940] usb 3-1: Using ep0 maxpacket: 8 [ 1196.270777][ T6940] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1196.318405][ T6940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.331494][T25168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6404'. [ 1196.360364][ T6940] usb 3-1: Product: syz [ 1196.380954][ T6940] usb 3-1: Manufacturer: syz [ 1196.405684][ T6940] usb 3-1: SerialNumber: syz [ 1196.462266][ T6940] usb 3-1: config 0 descriptor?? [ 1196.493869][ T6940] gspca_main: se401-2.14.0 probing 047d:5003 [ 1196.511550][T25168] bridge_slave_1: left allmulticast mode [ 1196.538144][T25168] bridge_slave_1: left promiscuous mode [ 1196.553022][T25168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.592385][T25168] bridge_slave_0: left allmulticast mode [ 1196.601291][T25168] bridge_slave_0: left promiscuous mode [ 1196.615420][T25168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.136641][ T6940] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input104 [ 1197.888565][ T5831] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1198.074133][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.098891][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.130410][ T5831] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1198.151917][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.180854][ T5831] usb 1-1: config 0 descriptor?? [ 1198.448411][T16967] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1198.609502][T16967] usb 5-1: Using ep0 maxpacket: 16 [ 1198.618688][ T5831] usbhid 1-1:0.0: can't add hid device: -71 [ 1198.626539][ T5831] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1198.639511][T16967] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 1198.661583][T16967] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1198.671913][ T5831] usb 1-1: USB disconnect, device number 103 [ 1198.688095][T16967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.715562][T16967] usb 5-1: config 0 has no interface number 0 [ 1198.729201][ T10] usb 3-1: USB disconnect, device number 103 [ 1198.757655][T16967] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1198.775238][T16967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.802752][T16967] usb 5-1: Product: syz [ 1198.809583][T16967] usb 5-1: Manufacturer: syz [ 1198.820177][T16967] usb 5-1: SerialNumber: syz [ 1198.836986][T16967] usb 5-1: config 0 descriptor?? [ 1199.286355][T16967] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1199.298650][T25201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6413'. [ 1199.308023][T16967] uvcvideo 5-1:0.105: No valid video chain found. [ 1199.324193][T16967] usb 5-1: USB disconnect, device number 72 [ 1199.466583][T25201] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6413'. [ 1199.476083][T25201] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6413'. [ 1199.486486][T25201] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1200.239689][T23924] vhci_hcd: vhci_device speed not set [ 1200.318378][ T6940] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1200.499754][ T6940] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1200.538301][ T6940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.546342][ T6940] usb 3-1: Product: syz [ 1200.578263][ T6940] usb 3-1: Manufacturer: syz [ 1200.582931][ T6940] usb 3-1: SerialNumber: syz [ 1200.612157][ T6940] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1200.638299][ T6940] r8152-cfgselector 3-1: config 0 descriptor?? [ 1201.068141][ T5831] r8152-cfgselector 3-1: USB disconnect, device number 104 [ 1201.668324][ T10] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1201.712254][T25245] syz_tun: entered allmulticast mode [ 1201.742360][T25244] syz_tun: left allmulticast mode [ 1201.848616][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1201.871054][ T10] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1201.893157][T25251] netlink: 'syz.4.6428': attribute type 72 has an invalid length. [ 1201.911138][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.947175][ T10] usb 4-1: Product: syz [ 1201.955928][ T10] usb 4-1: Manufacturer: syz [ 1201.983129][ T10] usb 4-1: SerialNumber: syz [ 1201.989165][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1202.030936][ T10] usb 4-1: config 0 descriptor?? [ 1202.073595][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 1202.094564][T25252] bridge_slave_1: left allmulticast mode [ 1202.100844][T25252] bridge_slave_1: left promiscuous mode [ 1202.124840][T25252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.151219][T25252] bridge_slave_0: left allmulticast mode [ 1202.157042][T25252] bridge_slave_0: left promiscuous mode [ 1202.197540][T25252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.308351][ T5831] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1202.461814][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 1202.472814][ T5831] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 1202.481757][ T5831] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1202.492608][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.504268][ T5831] usb 3-1: config 0 has no interface number 0 [ 1202.515821][ T5831] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1202.525534][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.534821][ T5831] usb 3-1: Product: syz [ 1202.540323][ T5831] usb 3-1: Manufacturer: syz [ 1202.546108][ T5831] usb 3-1: SerialNumber: syz [ 1202.559043][ T5831] usb 3-1: config 0 descriptor?? [ 1202.709467][ T10] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input105 [ 1202.932466][ T5831] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1202.946478][ T5831] uvcvideo 3-1:0.105: No valid video chain found. [ 1202.960825][ T5831] usb 3-1: USB disconnect, device number 105 [ 1203.638115][T25275] netlink: 'syz.4.6435': attribute type 10 has an invalid length. [ 1203.659275][T25275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.666845][T25275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.707623][T25275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.714855][T25275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.722569][T25275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.729767][T25275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.747290][T25275] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1204.019053][T25288] netlink: 'syz.0.6438': attribute type 10 has an invalid length. [ 1204.077105][T25288] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1204.077259][T25289] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6438'. [ 1204.108614][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1204.136713][T25287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.278270][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1204.296946][ T6940] usb 4-1: USB disconnect, device number 87 [ 1204.310483][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1204.341638][ T10] usb 5-1: config 0 has no interface number 0 [ 1204.367168][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1204.407673][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.435524][ T10] usb 5-1: Product: syz [ 1204.454698][ T10] usb 5-1: Manufacturer: syz [ 1204.475622][ T10] usb 5-1: SerialNumber: syz [ 1204.502552][ T10] usb 5-1: config 0 descriptor?? [ 1204.524853][ T10] smsc95xx v2.0.0 [ 1204.695762][T25296] netlink: 'syz.3.6440': attribute type 72 has an invalid length. [ 1204.951677][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1204.985208][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1205.128584][T25307] fuse: Unknown parameter 'è•°áG' [ 1205.158319][T16967] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1205.177145][T25303] pimreg: entered allmulticast mode [ 1205.335505][T16967] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1205.346772][T16967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.355271][T16967] usb 4-1: Product: syz [ 1205.360718][T16967] usb 4-1: Manufacturer: syz [ 1205.365586][T16967] usb 4-1: SerialNumber: syz [ 1205.794718][T25297] pimreg: left allmulticast mode [ 1205.808639][T16967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1205.845527][T16967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1205.856657][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1205.869527][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1206.738373][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1206.743527][T25332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6454'. [ 1206.763660][T25332] ip6gretap0: entered promiscuous mode [ 1206.769487][T25332] macvtap2: entered promiscuous mode [ 1206.775079][T25332] macvtap2: entered allmulticast mode [ 1206.780519][T25332] ip6gretap0: entered allmulticast mode [ 1206.793453][T25332] ip6gretap0: left allmulticast mode [ 1206.800210][T25332] ip6gretap0: left promiscuous mode [ 1206.878840][T25336] tipc: Started in network mode [ 1206.883764][T25336] tipc: Node identity 52cd069a2022, cluster identity 4711 [ 1206.893188][T25336] tipc: Enabled bearer , priority 0 [ 1206.902528][T25336] syzkaller0: entered promiscuous mode [ 1206.903367][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1206.908033][T25336] syzkaller0: entered allmulticast mode [ 1206.924072][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.925057][T25336] tipc: Resetting bearer [ 1206.933534][ T10] usb 3-1: Product: syz [ 1206.942777][ T10] usb 3-1: Manufacturer: syz [ 1206.947576][ T10] usb 3-1: SerialNumber: syz [ 1206.947788][T25335] tipc: Resetting bearer [ 1206.960389][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1206.967192][T16967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1206.979810][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 1206.986103][T16967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1206.996800][T16967] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1207.006652][T25335] tipc: Disabling bearer [ 1207.015445][T16967] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1207.076270][T16967] usb 5-1: USB disconnect, device number 73 [ 1207.335919][T25344] pimreg: entered allmulticast mode [ 1207.351356][T25344] fuse: Unknown parameter 'è•°áG' [ 1207.422971][T16967] r8152-cfgselector 3-1: USB disconnect, device number 106 [ 1208.003584][T25339] pimreg: left allmulticast mode [ 1208.048107][T23924] usb 4-1: USB disconnect, device number 88 [ 1208.556319][T25369] tipc: Enabled bearer , priority 0 [ 1208.565752][T25369] syzkaller0: entered promiscuous mode [ 1208.572290][T25369] syzkaller0: entered allmulticast mode [ 1208.586216][T25369] tipc: Resetting bearer [ 1208.594017][T25368] tipc: Resetting bearer [ 1208.651786][T25368] tipc: Disabling bearer [ 1209.428418][ T5831] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1209.608670][ T5831] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1209.628271][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.636314][ T5831] usb 4-1: Product: syz [ 1209.648257][ T5831] usb 4-1: Manufacturer: syz [ 1209.652922][ T5831] usb 4-1: SerialNumber: syz [ 1210.020043][T25387] syz_tun: entered allmulticast mode [ 1210.037717][T25386] syz_tun: left allmulticast mode [ 1210.073276][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1210.098343][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1210.457467][ T30] audit: type=1326 audit(1764846374.630:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.479601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.503423][ T30] audit: type=1326 audit(1764846374.670:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.549240][ T30] audit: type=1326 audit(1764846374.670:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.583944][ T30] audit: type=1326 audit(1764846374.670:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.606613][ T30] audit: type=1326 audit(1764846374.670:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.630662][ T30] audit: type=1326 audit(1764846374.670:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.677731][ T30] audit: type=1326 audit(1764846374.670:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.700031][T25396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.729979][ T30] audit: type=1326 audit(1764846374.670:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.756806][ T30] audit: type=1326 audit(1764846374.670:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.781421][ T30] audit: type=1326 audit(1764846374.670:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25395 comm="syz.4.6478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1210.785225][T25396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.857277][T25403] tipc: Enabled bearer , priority 0 [ 1210.873537][T25403] syzkaller0: entered promiscuous mode [ 1210.883696][T25403] syzkaller0: entered allmulticast mode [ 1210.935294][T25402] tipc: Resetting bearer [ 1210.985940][T25402] tipc: Disabling bearer [ 1211.156588][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1211.176841][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1211.204930][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1211.319169][ T5831] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1212.038743][ T5831] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1212.209973][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.253070][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1212.269548][T16967] usb 4-1: USB disconnect, device number 89 [ 1212.321665][ T5831] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1212.343281][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.367204][ T5831] usb 3-1: config 0 descriptor?? [ 1212.378998][T25422] syz_tun: entered allmulticast mode [ 1212.395437][T25421] syz_tun: left allmulticast mode [ 1212.410261][ T5831] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1212.452451][T25423] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6484'. [ 1213.227455][T25446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.308589][T25450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.365493][T25446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1214.358822][ T5831] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1214.418349][ T6940] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1214.484473][T25463] tipc: Enabled bearer , priority 0 [ 1214.502994][T25463] syzkaller0: entered promiscuous mode [ 1214.516752][T25463] syzkaller0: entered allmulticast mode [ 1214.528320][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 1214.537474][ T5831] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1214.554872][ T5831] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1214.575337][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.586007][ T5831] usb 5-1: Product: syz [ 1214.586515][T25463] tipc: Resetting bearer [ 1214.598502][ T5831] usb 5-1: Manufacturer: syz [ 1214.603580][ T5831] usb 5-1: SerialNumber: syz [ 1214.605939][ T6940] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1214.613604][ T5831] usb 5-1: config 0 descriptor?? [ 1214.635851][ T5831] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1214.645833][ T5831] usb 5-1: setting power ON [ 1214.654180][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 1214.658260][ T6940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.664620][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1214.668135][T25462] tipc: Resetting bearer [ 1214.692725][ T6940] usb 1-1: Product: syz [ 1214.694164][ T5831] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1214.705783][ T6940] usb 1-1: Manufacturer: syz [ 1214.707239][ T5831] usb 5-1: media controller created [ 1214.710591][ T6940] usb 1-1: SerialNumber: syz [ 1214.774949][T25462] tipc: Disabling bearer [ 1214.810078][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1214.814660][ T5899] usb 3-1: USB disconnect, device number 107 [ 1214.892098][ T5831] usb 5-1: selecting invalid altsetting 6 [ 1214.924121][ T5831] usb 5-1: digital interface selection failed (-22) [ 1214.934235][ T5831] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1214.947693][ T5831] usb 5-1: setting power OFF [ 1214.953571][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 1214.960674][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1214.971423][ T5831] (NULL device *): no alternate interface [ 1215.043134][ T5831] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1215.156149][T25469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6499'. [ 1215.178668][ T6940] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1215.195412][T25469] ip6gretap0: entered promiscuous mode [ 1215.202214][T25469] macvtap6: entered promiscuous mode [ 1215.207732][T25469] macvtap6: entered allmulticast mode [ 1215.213534][ T6940] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1215.225520][T25469] ip6gretap0: entered allmulticast mode [ 1215.236821][T25476] ip6gretap0: left allmulticast mode [ 1215.246108][T25476] ip6gretap0: left promiscuous mode [ 1215.437446][ T5899] usb 5-1: USB disconnect, device number 74 [ 1215.488286][ T5831] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1215.571206][T25484] tipc: Enabled bearer , priority 0 [ 1215.580506][T25484] syzkaller0: entered promiscuous mode [ 1215.586311][T25484] syzkaller0: entered allmulticast mode [ 1215.635173][T25483] tipc: Resetting bearer [ 1215.687012][ T5831] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1215.698643][T25483] tipc: Disabling bearer [ 1215.712711][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.732712][ T5831] usb 4-1: Product: syz [ 1215.743679][ T5831] usb 4-1: Manufacturer: syz [ 1215.753564][ T5831] usb 4-1: SerialNumber: syz [ 1215.797596][ T5831] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1215.824153][ T5831] r8152-cfgselector 4-1: config 0 descriptor?? [ 1216.239606][ T6940] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1216.267572][ T5831] r8152-cfgselector 4-1: USB disconnect, device number 90 [ 1216.297940][ T6940] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1216.328878][ T6940] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1216.552196][ T6940] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1216.938294][ T5831] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1217.027553][T25501] tipc: Enabled bearer , priority 0 [ 1217.047168][T25501] syzkaller0: entered promiscuous mode [ 1217.057334][T25501] syzkaller0: entered allmulticast mode [ 1217.120018][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.148560][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1217.163026][ T5831] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1217.173572][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.190070][T16661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1217.201093][T16661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1217.210938][T16661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1217.219952][ T5831] usb 5-1: config 0 descriptor?? [ 1217.225265][T16661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1217.233638][T16661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1217.244773][ T5831] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1217.273453][T25502] tipc: Resetting bearer [ 1217.290462][T25500] tipc: Resetting bearer [ 1217.322996][ T5899] usb 1-1: USB disconnect, device number 104 [ 1217.372314][T25500] tipc: Disabling bearer [ 1217.455127][T23194] syz_tun (unregistering): left allmulticast mode [ 1217.718104][T24314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.759023][T25517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6513'. [ 1217.791452][T25517] ip6gretap0: entered promiscuous mode [ 1217.797367][T25517] macvtap1: entered promiscuous mode [ 1217.808731][T25517] macvtap1: entered allmulticast mode [ 1217.815285][T25517] ip6gretap0: entered allmulticast mode [ 1217.829052][T25519] ip6gretap0: left allmulticast mode [ 1217.839916][T25519] ip6gretap0: left promiscuous mode [ 1217.892616][T24314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.004570][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 1218.004582][ T30] audit: type=1326 audit(1764846382.180:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.3.6514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 1218.041853][T24314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.108346][ T30] audit: type=1326 audit(1764846382.210:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.3.6514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 1218.212482][ T30] audit: type=1326 audit(1764846382.240:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.3.6514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 1218.243168][T24314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.286867][ T30] audit: type=1326 audit(1764846382.240:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.3.6514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 1218.360736][ T30] audit: type=1326 audit(1764846382.240:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.3.6514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 1218.668143][T25504] chnl_net:caif_netlink_parms(): no params data found [ 1218.822659][T24314] bridge_slave_1: left allmulticast mode [ 1218.845445][T24314] bridge_slave_1: left promiscuous mode [ 1218.865839][T24314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.903580][T24314] bridge_slave_0: left allmulticast mode [ 1218.928295][T24314] bridge_slave_0: left promiscuous mode [ 1218.954454][T24314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.292606][T16661] Bluetooth: hci2: command tx timeout [ 1219.705513][ T10] usb 5-1: USB disconnect, device number 75 [ 1219.952689][T24314] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1220.062493][T24314] dvmrp8 (unregistering): left allmulticast mode [ 1220.296241][ T5899] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1220.360636][T24314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.372151][T24314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.392110][T24314] bond0 (unregistering): Released all slaves [ 1220.423665][T24314] bond1 (unregistering): Released all slaves [ 1220.468282][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 1220.478590][ T5899] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1220.487767][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.499906][ T5899] usb 5-1: Product: syz [ 1220.504127][ T5899] usb 5-1: Manufacturer: syz [ 1220.509022][ T5899] usb 5-1: SerialNumber: syz [ 1220.517228][ T5899] usb 5-1: config 0 descriptor?? [ 1220.557244][ T5899] option 5-1:0.0: GSM modem (1-port) converter detected [ 1220.702188][T25504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.708340][T24314] tipc: Left network mode [ 1220.727629][T25504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.746534][T25504] bridge_slave_0: entered allmulticast mode [ 1220.758297][T25504] bridge_slave_0: entered promiscuous mode [ 1220.794508][T25546] netlink: 'syz.4.6517': attribute type 32 has an invalid length. [ 1220.817843][T25546] netlink: 'syz.4.6517': attribute type 32 has an invalid length. [ 1220.845192][T25504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.856678][T25504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.867187][T25504] bridge_slave_1: entered allmulticast mode [ 1220.875292][T25504] bridge_slave_1: entered promiscuous mode [ 1221.020320][T25504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.123726][T24314] hsr_slave_0: left promiscuous mode [ 1221.141705][T24314] hsr_slave_1: left promiscuous mode [ 1221.147843][T24314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.189501][T24314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.217969][T24314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.235692][T24314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.327917][T24314] veth1_macvtap: left promiscuous mode [ 1221.359062][T24314] veth0_macvtap: left promiscuous mode [ 1221.364779][T24314] veth1_vlan: left promiscuous mode [ 1221.368399][T16661] Bluetooth: hci2: command tx timeout [ 1221.416652][T24314] veth0_vlan: left promiscuous mode [ 1222.086308][ T10] usb 5-1: USB disconnect, device number 76 [ 1222.105632][ T10] option 5-1:0.0: device disconnected [ 1222.258775][ T30] audit: type=1326 audit(1764846386.440:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.4.6527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1222.281603][ T30] audit: type=1326 audit(1764846386.470:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.4.6527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1222.306416][ T30] audit: type=1326 audit(1764846386.490:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.4.6527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1222.330702][ T30] audit: type=1326 audit(1764846386.490:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.4.6527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1222.354962][ T30] audit: type=1326 audit(1764846386.490:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.4.6527" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1222.470963][T25603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.518393][ T6940] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1222.543810][T25603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.569091][T25603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.680419][ T6940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.701293][ T6940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1222.740932][ T6940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.768275][ T6940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.779887][ T6940] usb 4-1: config 0 descriptor?? [ 1222.795579][ T6940] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1222.859815][T24314] team0 (unregistering): Port device team_slave_1 removed [ 1222.931763][T24314] team0 (unregistering): Port device team_slave_0 removed [ 1223.458402][T16661] Bluetooth: hci2: command tx timeout [ 1223.795086][T25504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.872659][T25504] team0: Port device team_slave_0 added [ 1223.886899][T25504] team0: Port device team_slave_1 added [ 1223.963626][T25504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.973511][T25504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.999722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.007041][T25504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.042126][T25504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.061334][T25504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.087447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.104986][T25504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.250789][T25504] hsr_slave_0: entered promiscuous mode [ 1224.257561][T25504] hsr_slave_1: entered promiscuous mode [ 1224.286784][T24314] IPVS: stop unused estimator thread 0... [ 1224.910133][T25504] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1224.925536][T25504] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1224.942295][T25504] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1224.970783][T25504] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1225.161024][T25504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.209348][T25504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.245419][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.252679][ T3086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.296320][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.303581][ T3086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.311242][ T6940] usb 4-1: USB disconnect, device number 91 [ 1225.496898][T25660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6533'. [ 1225.538512][T16661] Bluetooth: hci2: command tx timeout [ 1225.576195][T25660] ip6gretap0: entered promiscuous mode [ 1225.588691][T25660] macvtap1: entered promiscuous mode [ 1225.600527][T25660] macvtap1: entered allmulticast mode [ 1225.606035][T25660] ip6gretap0: entered allmulticast mode [ 1225.622659][T25661] ip6gretap0: left allmulticast mode [ 1225.628990][T25661] ip6gretap0: left promiscuous mode [ 1225.705665][T25504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.866971][T25504] veth0_vlan: entered promiscuous mode [ 1225.927073][T25677] syz_tun: entered allmulticast mode [ 1225.952756][T25504] veth1_vlan: entered promiscuous mode [ 1225.981643][T25676] syz_tun: left allmulticast mode [ 1226.121196][T25504] veth0_macvtap: entered promiscuous mode [ 1226.184853][T25504] veth1_macvtap: entered promiscuous mode [ 1226.240092][T25683] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1226.273507][T25504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.347553][T25504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.444109][ T2974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.469210][ T2974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.500271][ T2974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.538019][ T2974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.706307][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.733736][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.872402][T24309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.908687][T24309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.449084][T23924] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1227.638685][T23924] usb 4-1: Using ep0 maxpacket: 32 [ 1227.657888][T23924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.690633][T23924] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.725904][T23924] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1227.754364][T23924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.806354][T23924] usb 4-1: config 0 descriptor?? [ 1227.836746][T23924] hub 4-1:0.0: bad descriptor, ignoring hub [ 1227.860552][T23924] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1227.876163][T23924] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1228.438326][T23925] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1228.588289][T23925] usb 5-1: device descriptor read/64, error -71 [ 1228.838318][T23925] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1228.988530][T23925] usb 5-1: device descriptor read/64, error -71 [ 1229.118554][T23925] usb usb5-port1: attempt power cycle [ 1229.338259][T23924] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1229.468250][T23925] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1229.498878][T23925] usb 5-1: device descriptor read/8, error -71 [ 1229.512677][T23924] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1229.528286][T23924] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1229.559838][T23924] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.592062][T23924] usb 1-1: config 220 has no interface number 2 [ 1229.607657][T23924] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1229.638254][T23924] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1229.655509][T23924] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1229.666412][T23924] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1229.702502][T23924] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1229.718292][T23924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.736677][T23924] usb 1-1: Product: syz [ 1229.746851][T23924] usb 1-1: Manufacturer: syz [ 1229.752366][T23924] usb 1-1: SerialNumber: syz [ 1229.758390][T23925] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1229.799006][T23925] usb 5-1: device descriptor read/8, error -71 [ 1229.908895][T23925] usb usb5-port1: unable to enumerate USB device [ 1230.007086][T23924] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1230.026197][T23924] uvcvideo 1-1:220.0: No valid video chain found. [ 1230.052862][T23924] usb 1-1: USB disconnect, device number 105 [ 1230.147302][T25758] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1230.171384][T25759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1230.182085][T25759] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1230.191506][T25759] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6549'. [ 1230.202364][T25759] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1230.319225][T25763] bridge_slave_0: left allmulticast mode [ 1230.333753][T25763] bridge_slave_0: left promiscuous mode [ 1230.347685][T25763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.369920][T23925] usb 4-1: USB disconnect, device number 92 [ 1230.377518][T25763] bridge_slave_1: left allmulticast mode [ 1230.394945][T25763] bridge_slave_1: left promiscuous mode [ 1230.409396][T25763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.451739][T25763] bond0: (slave bond_slave_0): Releasing backup interface [ 1230.480866][T25763] bond0: (slave bond_slave_1): Releasing backup interface [ 1230.548109][T25763] team0: Port device team_slave_0 removed [ 1230.586418][T25763] team0: Port device team_slave_1 removed [ 1230.598725][T25763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.606819][T25763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.622445][T25763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.630209][T25763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.655460][T25763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1232.128314][T23924] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1232.438269][T23924] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1232.499567][T23924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.508337][T23924] usb 3-1: Product: syz [ 1232.512876][T23924] usb 3-1: Manufacturer: syz [ 1232.518268][T23924] usb 3-1: SerialNumber: syz [ 1232.970838][T25803] bond_slave_0: entered promiscuous mode [ 1232.976929][T25803] bond_slave_1: entered promiscuous mode [ 1232.982750][T25803] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 1233.013851][T25806] netlink: 'syz.1.6561': attribute type 10 has an invalid length. [ 1233.024304][T25803] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1233.039816][T25803] bond1: (slave macvlan2): making interface the new active one [ 1233.053763][T25803] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1233.063701][T23924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1233.078442][T23924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1234.312465][T23924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1234.345109][T23924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1234.780740][T25823] netlink: 'syz.3.6566': attribute type 10 has an invalid length. [ 1234.865822][T25826] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1234.908851][T25823] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1234.931786][T25822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.058280][ T6940] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1235.198297][ T6940] usb 5-1: device descriptor read/64, error -71 [ 1235.221202][T23924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1235.240472][T23924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1235.261304][T23924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1235.280654][T23924] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1235.439915][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1235.439934][ T30] audit: type=1326 audit(1764846399.620:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.448558][ T6940] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1235.469833][ T30] audit: type=1326 audit(1764846399.620:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.542036][ T30] audit: type=1326 audit(1764846399.660:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.583429][T25832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.596905][ T30] audit: type=1326 audit(1764846399.660:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.620158][ T6940] usb 5-1: device descriptor read/64, error -71 [ 1235.624218][ T30] audit: type=1326 audit(1764846399.660:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.666418][T25839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.681659][T25832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.687283][ T30] audit: type=1326 audit(1764846399.680:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.722470][ T30] audit: type=1326 audit(1764846399.680:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.728731][ T6940] usb usb5-port1: attempt power cycle [ 1235.745208][ T30] audit: type=1326 audit(1764846399.680:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.774489][ T30] audit: type=1326 audit(1764846399.680:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.797144][ T30] audit: type=1326 audit(1764846399.680:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.0.6569" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1235.825877][T25840] syz_tun: entered allmulticast mode [ 1235.838852][T25837] syz_tun: left allmulticast mode [ 1236.109423][ T6940] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1236.139049][ T6940] usb 5-1: device descriptor read/8, error -71 [ 1236.218289][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1236.250920][T23924] usb 3-1: USB disconnect, device number 108 [ 1236.346991][T25847] tipc: Enabled bearer , priority 0 [ 1236.372705][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1236.404960][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.438479][ T6940] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1236.447394][ T10] usb 4-1: Product: syz [ 1236.459101][ T10] usb 4-1: Manufacturer: syz [ 1236.463747][ T10] usb 4-1: SerialNumber: syz [ 1236.482942][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1236.490898][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 1236.499230][ T6940] usb 5-1: device descriptor read/8, error -71 [ 1236.629856][ T6940] usb usb5-port1: unable to enumerate USB device [ 1236.705818][T25854] syzkaller0: entered promiscuous mode [ 1236.723654][T25854] syzkaller0: entered allmulticast mode [ 1236.916767][ T5831] r8152-cfgselector 4-1: USB disconnect, device number 93 [ 1236.990951][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1237.148290][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1237.155500][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.166573][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1237.180214][T23924] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1237.181913][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1237.197135][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.205619][ T10] usb 3-1: Product: syz [ 1237.210317][ T10] usb 3-1: Manufacturer: syz [ 1237.214930][ T10] usb 3-1: SerialNumber: syz [ 1237.226238][ T10] usb 3-1: config 0 descriptor?? [ 1237.348346][T23924] usb 1-1: Using ep0 maxpacket: 32 [ 1237.360746][T23924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1237.385780][T23924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1237.407767][T23924] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1237.429341][T23924] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1237.447751][T23924] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1237.458246][T23924] usb 1-1: Product: syz [ 1237.461351][ T10] tipc: Node number set to 1928267418 [ 1237.462453][T23924] usb 1-1: Manufacturer: syz [ 1237.462473][T23924] usb 1-1: SerialNumber: syz [ 1237.483226][T23924] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input107 [ 1237.718950][T23924] usb 1-1: USB disconnect, device number 106 [ 1237.749101][T23924] appletouch 1-1:1.0: input: appletouch disconnected [ 1237.868572][ T6940] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1237.950741][T25878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6586'. [ 1237.972704][T25878] ip6gretap0: entered promiscuous mode [ 1237.979231][T25878] macvtap2: entered promiscuous mode [ 1237.985957][T25878] macvtap2: entered allmulticast mode [ 1237.992436][T25878] ip6gretap0: entered allmulticast mode [ 1238.009985][T25880] ip6gretap0: left allmulticast mode [ 1238.015472][T25880] ip6gretap0: left promiscuous mode [ 1238.042448][ T6940] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1238.057395][ T6940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.076530][ T6940] usb 4-1: Product: syz [ 1238.086388][ T6940] usb 4-1: Manufacturer: syz [ 1238.110499][ T6940] usb 4-1: SerialNumber: syz [ 1238.524477][T25894] syzkaller0: entered promiscuous mode [ 1238.530247][T25894] syzkaller0: entered allmulticast mode [ 1238.554513][ T6940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1238.580813][ T6940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1238.812723][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.819361][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.881983][T25898] tipc: Enabled bearer , priority 0 [ 1238.891602][T25898] syzkaller0: entered promiscuous mode [ 1238.897102][T25898] syzkaller0: entered allmulticast mode [ 1238.925334][T25897] tipc: Resetting bearer [ 1238.945269][T25897] tipc: Disabling bearer [ 1239.103290][T25904] syz_tun: entered allmulticast mode [ 1239.113429][T25903] syz_tun: left allmulticast mode [ 1239.784511][ T10] usb 3-1: USB disconnect, device number 109 [ 1239.818518][ T6940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1239.884785][ T6940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1240.027676][T25924] netlink: 'syz.2.6603': attribute type 10 has an invalid length. [ 1240.059327][T25924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.066809][T25924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.117030][T25924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.124228][T25924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.131677][T25924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.139069][T25924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.163034][T25924] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1240.564971][T25931] tipc: Enabled bearer , priority 0 [ 1240.577771][T25931] syzkaller0: entered promiscuous mode [ 1240.589668][T25931] syzkaller0: entered allmulticast mode [ 1240.604558][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1240.604575][ T30] audit: type=1326 audit(1764846404.780:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1240.633186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1240.668753][T25935] netlink: 'syz.1.6608': attribute type 10 has an invalid length. [ 1240.685440][T25929] tipc: Resetting bearer [ 1240.724194][ T30] audit: type=1326 audit(1764846404.780:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1240.735701][T25933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.768789][ T6940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1240.784566][T25929] tipc: Disabling bearer [ 1240.789902][T25941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6608'. [ 1240.810805][ T6940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1240.849666][ T6940] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1240.851263][T25934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.871976][ T30] audit: type=1326 audit(1764846404.780:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1240.907630][ T30] audit: type=1326 audit(1764846404.780:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1240.930341][T25933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.945142][T25933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1240.948345][ T6940] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1240.957224][ T30] audit: type=1326 audit(1764846404.780:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1240.985667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.017159][ T30] audit: type=1326 audit(1764846404.780:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1241.042850][ T30] audit: type=1326 audit(1764846404.780:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1241.065219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.073252][ T30] audit: type=1326 audit(1764846404.780:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1241.097140][ T30] audit: type=1326 audit(1764846404.780:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1241.128525][T23924] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1241.178752][ T30] audit: type=1326 audit(1764846404.780:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6539 code=0x7ffc0000 [ 1241.201128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.350675][T23924] usb 3-1: Using ep0 maxpacket: 8 [ 1241.371287][T23924] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1241.392505][T23924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.406979][T23924] usb 3-1: Product: syz [ 1241.411480][T23924] usb 3-1: Manufacturer: syz [ 1241.416242][T23924] usb 3-1: SerialNumber: syz [ 1241.432745][T23924] usb 3-1: config 0 descriptor?? [ 1241.449529][T23924] gspca_main: se401-2.14.0 probing 047d:5003 [ 1241.630654][T25956] vlan2: entered promiscuous mode [ 1241.650618][T25956] team0: entered promiscuous mode [ 1241.662397][T25956] team_slave_0: entered promiscuous mode [ 1241.675581][T25956] team_slave_1: entered promiscuous mode [ 1241.689367][T25956] vlan2: entered allmulticast mode [ 1241.694976][T25956] team0: entered allmulticast mode [ 1241.706064][T25956] team_slave_0: entered allmulticast mode [ 1241.720112][T25956] team_slave_1: entered allmulticast mode [ 1241.755338][T25958] bond0: (slave bond_slave_0): Releasing backup interface [ 1241.765786][T25958] bond_slave_0: left promiscuous mode [ 1241.801171][T17252] usb 4-1: USB disconnect, device number 94 [ 1241.816835][T25958] bond0: (slave bond_slave_1): Releasing backup interface [ 1241.843622][T25958] bond_slave_1: left promiscuous mode [ 1241.860532][T25958] team_slave_0: left promiscuous mode [ 1241.866239][T25958] team_slave_0: left allmulticast mode [ 1241.882491][T25958] team0: Port device team_slave_0 removed [ 1241.893692][T25958] team_slave_1: left promiscuous mode [ 1241.900119][T25958] team_slave_1: left allmulticast mode [ 1241.911337][T25958] team0: Port device team_slave_1 removed [ 1241.920490][T25958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.928031][T25958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.947908][T25958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.967129][T25958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.980390][T25958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1242.061640][T23924] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input108 [ 1242.134751][T25961] netlink: 'syz.3.6615': attribute type 10 has an invalid length. [ 1242.191177][T25961] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1242.668589][T17252] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1242.868283][T17252] usb 5-1: Using ep0 maxpacket: 16 [ 1242.895161][T17252] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 1242.929939][T17252] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1242.954020][T25981] syzkaller0: entered promiscuous mode [ 1242.974455][T17252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.986362][T25981] syzkaller0: entered allmulticast mode [ 1243.025905][T17252] usb 5-1: config 0 has no interface number 0 [ 1243.061774][T17252] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1243.091381][T17252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.119149][T17252] usb 5-1: Product: syz [ 1243.133690][T17252] usb 5-1: Manufacturer: syz [ 1243.141193][T17252] usb 5-1: SerialNumber: syz [ 1243.155261][T17252] usb 5-1: config 0 descriptor?? [ 1243.390567][T25987] netlink: 'syz.0.6623': attribute type 10 has an invalid length. [ 1243.447034][T25989] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1243.483699][T25985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.553221][T17252] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1243.572246][T17252] uvcvideo 5-1:0.105: No valid video chain found. [ 1243.585409][T17252] usb 5-1: USB disconnect, device number 85 [ 1243.821091][ T6940] usb 3-1: USB disconnect, device number 110 [ 1244.212148][T26002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.219961][T26002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.268323][ T6940] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1244.485608][ T6940] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1244.509300][ T6940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.540723][ T6940] usb 3-1: Product: syz [ 1244.559014][T26009] netlink: 'syz.4.6629': attribute type 10 has an invalid length. [ 1244.568348][ T6940] usb 3-1: Manufacturer: syz [ 1244.574616][ T6940] usb 3-1: SerialNumber: syz [ 1244.788343][T26013] macvlan2: entered promiscuous mode [ 1244.796089][T26013] macvlan2: entered allmulticast mode [ 1245.006869][ T6940] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1245.043006][ T6940] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1245.109970][T26019] syzkaller0: entered promiscuous mode [ 1245.122786][T26019] syzkaller0: entered allmulticast mode [ 1245.337282][T26025] netlink: 'syz.0.6636': attribute type 10 has an invalid length. [ 1245.351375][T26025] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6636'. [ 1245.366931][T26024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.387311][T26027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6635'. [ 1245.397143][T26027] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6635'. [ 1245.407318][T26027] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6635'. [ 1245.417682][T26027] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1245.608496][T23924] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1245.768509][T23924] usb 4-1: device descriptor read/64, error -71 [ 1245.973971][T26043] lo: entered allmulticast mode [ 1245.981652][T26040] lo: left allmulticast mode [ 1246.021240][T23924] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1246.158447][T23924] usb 4-1: device descriptor read/64, error -71 [ 1246.278678][T23924] usb usb4-port1: attempt power cycle [ 1246.285035][ T6940] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1246.305398][ T6940] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1246.628455][T23924] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1246.649159][T23924] usb 4-1: device descriptor read/8, error -71 [ 1246.908462][T23924] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1246.939597][T23924] usb 4-1: device descriptor read/8, error -71 [ 1247.052282][T23924] usb usb4-port1: unable to enumerate USB device [ 1247.127643][ T6940] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1247.140138][ T6940] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1247.151057][ T5899] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1247.161895][ T6940] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1247.172304][ T6940] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1247.308362][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 1247.315710][ T5899] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1247.324090][ T5899] usb 5-1: config 0 has no interface number 0 [ 1247.330282][ T5899] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1247.342462][ T5899] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1247.351810][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.359938][ T5899] usb 5-1: Product: syz [ 1247.364112][ T5899] usb 5-1: Manufacturer: syz [ 1247.368904][ T5899] usb 5-1: SerialNumber: syz [ 1247.375256][ T5899] usb 5-1: config 0 descriptor?? [ 1247.381904][T26054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1247.596110][T26054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1247.896052][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1247.896071][ T30] audit: type=1804 audit(1764846412.070:4425): pid=26061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6646" name="/newroot/126/file1" dev="fuse" ino=1 res=1 errno=0 [ 1248.010265][ T5899] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1248.020833][ T5899] asix 5-1:0.188: probe with driver asix failed with error -61 [ 1248.158558][ T6940] usb 3-1: USB disconnect, device number 111 [ 1248.208287][ T5899] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1248.358296][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 1248.371092][ T5899] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1248.408691][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.416729][ T5899] usb 1-1: Product: syz [ 1248.437389][ T5899] usb 1-1: Manufacturer: syz [ 1248.442548][ T5899] usb 1-1: SerialNumber: syz [ 1248.469430][ T5899] usb 1-1: config 0 descriptor?? [ 1248.486644][T26071] netlink: 'syz.3.6651': attribute type 10 has an invalid length. [ 1248.503009][T26071] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6651'. [ 1248.516998][T26070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1248.531507][T26069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1248.541604][T26069] hsr_slave_1: entered allmulticast mode [ 1249.070833][T26078] syz_tun: entered allmulticast mode [ 1249.082828][T26078] dvmrp8: entered allmulticast mode [ 1249.094030][T26077] syz_tun: left allmulticast mode [ 1249.418374][ T5899] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1249.458275][T10462] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1249.571662][ T5899] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1249.583877][ T5899] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1249.593657][ T5899] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1249.604679][ T5899] usb 4-1: Product: syz [ 1249.609676][ T5899] usb 4-1: Manufacturer: syz [ 1249.614487][ T5899] usb 4-1: SerialNumber: syz [ 1249.622297][ T5899] usb 4-1: config 0 descriptor?? [ 1249.628361][T10462] usb 3-1: Using ep0 maxpacket: 16 [ 1249.637308][T10462] usb 3-1: no configurations [ 1249.642473][T10462] usb 3-1: can't read configurations, error -22 [ 1249.662341][T26088] bond1: option mode: unable to set because the bond device has slaves [ 1249.674469][T26088] netlink: 'syz.1.6656': attribute type 10 has an invalid length. [ 1249.780559][T10462] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1249.816655][T26094] syzkaller0: entered promiscuous mode [ 1249.823809][T26094] syzkaller0: entered allmulticast mode [ 1249.914917][ T5899] usb 5-1: USB disconnect, device number 86 [ 1249.940017][T10462] usb 3-1: Using ep0 maxpacket: 16 [ 1249.959869][T10462] usb 3-1: no configurations [ 1249.966811][T10462] usb 3-1: can't read configurations, error -22 [ 1249.986852][T10462] usb usb3-port1: attempt power cycle [ 1250.269652][T26104] pimreg: entered allmulticast mode [ 1250.296600][T26104] fuse: Unknown parameter 'è•°áG' [ 1250.328436][T10462] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1250.369072][T10462] usb 3-1: Using ep0 maxpacket: 16 [ 1250.379337][T10462] usb 3-1: no configurations [ 1250.389993][T10462] usb 3-1: can't read configurations, error -22 [ 1250.548366][T10462] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1250.581976][T10462] usb 3-1: Using ep0 maxpacket: 16 [ 1250.596480][T10462] usb 3-1: no configurations [ 1250.606350][T10462] usb 3-1: can't read configurations, error -22 [ 1250.623286][T10462] usb usb3-port1: unable to enumerate USB device [ 1250.981917][T26100] pimreg: left allmulticast mode [ 1250.991937][ T5899] usb 1-1: USB disconnect, device number 107 [ 1252.338812][T16967] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1252.512904][T16967] usb 1-1: Using ep0 maxpacket: 32 [ 1252.520992][T16967] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1252.534630][T16967] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1252.552252][T16967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.573069][T16967] usb 1-1: config 0 descriptor?? [ 1252.609837][T16967] hub 1-1:0.0: bad descriptor, ignoring hub [ 1252.627257][T16967] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1252.645526][T16967] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1252.715730][ T5899] usb 4-1: USB disconnect, device number 99 [ 1253.099899][T26133] syzkaller0: entered promiscuous mode [ 1253.105691][T26133] syzkaller0: entered allmulticast mode [ 1253.130059][ T5899] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1253.288449][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 1253.297802][ T5899] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1253.317042][ T5899] usb 4-1: config 0 has no interface number 0 [ 1253.333233][ T5899] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1253.349106][ T5899] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1253.358438][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.366454][ T5899] usb 4-1: Product: syz [ 1253.372034][ T5899] usb 4-1: Manufacturer: syz [ 1253.376653][ T5899] usb 4-1: SerialNumber: syz [ 1253.385888][ T5899] usb 4-1: config 0 descriptor?? [ 1253.393297][T26131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1253.613941][T26131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1254.038449][ T5899] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1254.049016][ T5899] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1254.990754][T26157] bond1: option mode: unable to set because the bond device has slaves [ 1255.004799][T26157] netlink: 'syz.1.6678': attribute type 10 has an invalid length. [ 1255.218818][ T5899] usb 1-1: USB disconnect, device number 108 [ 1255.847781][ T6940] usb 4-1: USB disconnect, device number 100 [ 1256.169245][T26186] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1256.175911][T26186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1256.203630][T26186] vhci_hcd vhci_hcd.0: Device attached [ 1256.261389][ T9867] Bluetooth: hci0: command 0x0406 tx timeout [ 1256.268331][T26191] netlink: 'syz.3.6685': attribute type 10 has an invalid length. [ 1256.468485][T16967] usb 36-1: SetAddress Request (22) to port 0 [ 1256.484956][T16967] usb 36-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1256.665721][ T30] audit: type=1804 audit(1764846420.840:4426): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6688" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 1257.014085][T26187] vhci_hcd: connection reset by peer [ 1257.028500][ T50] vhci_hcd: stop threads [ 1257.042905][ T50] vhci_hcd: release socket [ 1257.054118][ T50] vhci_hcd: disconnect device [ 1257.728327][ T5899] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1257.801184][T26217] ip6gre0: entered promiscuous mode [ 1257.909180][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 1257.940323][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1257.981356][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1258.016661][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.056469][ T5899] usb 1-1: config 0 descriptor?? [ 1258.097723][ T5899] hub 1-1:0.0: bad descriptor, ignoring hub [ 1258.120688][ T5899] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1258.140846][ T5899] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1258.325324][T26216] fuse: Bad value for 'fd' [ 1259.099526][ T5899] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1259.267071][T26250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6705'. [ 1259.277654][ T5899] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1259.285898][T26250] ip6gretap0: entered promiscuous mode [ 1259.300000][T26250] macvtap2: entered promiscuous mode [ 1259.300252][ T5899] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1259.306744][T26250] macvtap2: entered allmulticast mode [ 1259.334585][T26250] ip6gretap0: entered allmulticast mode [ 1259.343592][T26251] ip6gretap0: left allmulticast mode [ 1259.349454][T26251] ip6gretap0: left promiscuous mode [ 1259.349640][ T5899] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1259.366848][ T5899] usb 3-1: Product: syz [ 1259.372296][ T5899] usb 3-1: Manufacturer: syz [ 1259.377120][ T5899] usb 3-1: SerialNumber: syz [ 1259.393150][ T5899] usb 3-1: config 0 descriptor?? [ 1259.428277][ T6940] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1259.578273][ T6940] usb 4-1: Using ep0 maxpacket: 16 [ 1259.590120][ T6940] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 1259.598719][ T6940] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1259.607011][ T6940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.619085][ T6940] usb 4-1: config 0 has no interface number 0 [ 1259.648540][ T6940] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1259.658010][ T6940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.666351][ T6940] usb 4-1: Product: syz [ 1259.671983][ T6940] usb 4-1: Manufacturer: syz [ 1259.676687][ T6940] usb 4-1: SerialNumber: syz [ 1259.685315][ T6940] usb 4-1: config 0 descriptor?? [ 1259.843085][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6709'. [ 1260.030371][ T6940] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1260.039183][ T6940] uvcvideo 4-1:0.105: No valid video chain found. [ 1260.052539][ T6940] usb 4-1: USB disconnect, device number 101 [ 1260.298378][ T5899] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1260.448284][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 1260.457790][ T5899] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1260.467265][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.478262][ T5899] usb 5-1: Product: syz [ 1260.483040][ T5899] usb 5-1: Manufacturer: syz [ 1260.487644][ T5899] usb 5-1: SerialNumber: syz [ 1260.509884][ T5899] usb 5-1: config 0 descriptor?? [ 1260.522590][ T5899] option 5-1:0.0: GSM modem (1-port) converter detected [ 1260.608904][ T5899] usb 1-1: USB disconnect, device number 109 [ 1260.723457][T26260] netlink: 'syz.4.6709': attribute type 32 has an invalid length. [ 1260.731565][T26260] netlink: 'syz.4.6709': attribute type 32 has an invalid length. [ 1260.838344][T17252] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1260.908298][ T5899] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1261.022602][T17252] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1261.031935][T17252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.040050][T17252] usb 4-1: Product: syz [ 1261.044349][T17252] usb 4-1: Manufacturer: syz [ 1261.049380][T17252] usb 4-1: SerialNumber: syz [ 1261.058289][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 1261.069230][ T5899] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1261.078670][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.086709][ T5899] usb 1-1: Product: syz [ 1261.091164][ T5899] usb 1-1: Manufacturer: syz [ 1261.095870][ T5899] usb 1-1: SerialNumber: syz [ 1261.104439][ T5899] usb 1-1: config 0 descriptor?? [ 1261.113562][ T5899] gspca_main: se401-2.14.0 probing 047d:5003 [ 1261.425175][ T5831] usb 5-1: USB disconnect, device number 87 [ 1261.444078][ T5831] option 5-1:0.0: device disconnected [ 1261.462258][T17252] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1261.486574][T17252] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1261.534233][T26284] wg1: entered promiscuous mode [ 1261.540483][T26284] wg1: entered allmulticast mode [ 1261.608512][T16967] usb 36-1: device descriptor read/8, error -110 [ 1261.721844][ T5899] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input109 [ 1262.023613][T16967] usb usb36-port1: attempt power cycle [ 1262.466007][ T6940] usb 3-1: USB disconnect, device number 116 [ 1262.590879][T16967] usb usb36-port1: unable to enumerate USB device [ 1262.711370][T17252] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1262.744205][T17252] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1263.008283][ T6940] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1263.168270][ T6940] usb 5-1: Using ep0 maxpacket: 16 [ 1263.183625][ T6940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.204021][ T6940] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1263.228417][ T6940] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1263.247843][ T6940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.267213][ T6940] usb 5-1: Product: syz [ 1263.277349][ T6940] usb 5-1: Manufacturer: syz [ 1263.282482][ T6940] usb 5-1: SerialNumber: syz [ 1263.300342][ T6940] usb 5-1: config 0 descriptor?? [ 1263.490132][ T30] audit: type=1804 audit(1764846427.670:4427): pid=26301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6720" name="/newroot/166/file1" dev="fuse" ino=1 res=1 errno=0 [ 1263.595513][ T6940] usb 1-1: USB disconnect, device number 110 [ 1263.600315][T17252] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1263.633316][ T5831] usb 5-1: USB disconnect, device number 88 [ 1263.672291][T17252] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1263.729352][T17252] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1263.788703][T17252] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1263.852727][T26310] tipc: Enabled bearer , priority 0 [ 1263.881415][T26310] tipc: Resetting bearer [ 1263.970745][T26308] tipc: Disabling bearer [ 1264.167192][T26323] bond0: (slave bridge0): Releasing backup interface [ 1264.182386][T26323] bridge_slave_0: left allmulticast mode [ 1264.198307][T26323] bridge_slave_0: left promiscuous mode [ 1264.204377][T26323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.232070][T26323] bridge_slave_1: left allmulticast mode [ 1264.238314][T26321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6728'. [ 1264.247515][T26323] bridge_slave_1: left promiscuous mode [ 1264.253618][T26323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.309111][T26323] bond0: (slave bond_slave_0): Releasing backup interface [ 1264.340057][T26323] bond0: (slave bond_slave_1): Releasing backup interface [ 1264.387331][T26323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.395263][T26323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.405837][T26323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.436405][T26323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.455826][T26323] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1264.542692][T26321] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6728'. [ 1264.586927][T26321] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6728'. [ 1264.652719][ T6940] usb 4-1: USB disconnect, device number 102 [ 1264.916216][T26321] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1265.198040][T26336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1266.279708][ T6940] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1266.408425][ T5899] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1266.468265][ T6940] usb 3-1: Using ep0 maxpacket: 8 [ 1266.477052][ T6940] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1266.490039][ T6940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.494946][T16661] Bluetooth: hci5: command 0x0406 tx timeout [ 1266.498964][ T6940] usb 3-1: Product: syz [ 1266.528000][ T6940] usb 3-1: Manufacturer: syz [ 1266.538520][ T6940] usb 3-1: SerialNumber: syz [ 1266.561118][ T6940] usb 3-1: config 0 descriptor?? [ 1266.580669][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1266.590184][ T6940] gspca_main: se401-2.14.0 probing 047d:5003 [ 1266.599005][ T5899] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 1266.619470][ T5899] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1266.631656][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.643747][ T5899] usb 5-1: config 0 has no interface number 0 [ 1266.663420][ T5899] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1266.673326][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.681878][ T5899] usb 5-1: Product: syz [ 1266.686382][ T5899] usb 5-1: Manufacturer: syz [ 1266.691579][ T5899] usb 5-1: SerialNumber: syz [ 1266.710094][ T5899] usb 5-1: config 0 descriptor?? [ 1266.889833][ T7453] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1267.074331][ T7453] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1267.088328][ T7453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.096638][ T7453] usb 4-1: Product: syz [ 1267.102294][ T7453] usb 4-1: Manufacturer: syz [ 1267.107212][ T5899] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1267.119935][ T7453] usb 4-1: SerialNumber: syz [ 1267.129204][ T5899] uvcvideo 5-1:0.105: No valid video chain found. [ 1267.158693][ T5899] usb 5-1: USB disconnect, device number 89 [ 1267.191321][ T6940] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input111 [ 1267.557174][ T7453] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1267.569525][ T7453] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1267.611606][T26371] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1267.618202][T26371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1267.628392][T26371] vhci_hcd vhci_hcd.0: Device attached [ 1267.908351][T23925] usb 34-1: SetAddress Request (18) to port 0 [ 1267.920734][T23925] usb 34-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1268.280144][T26372] vhci_hcd: connection reset by peer [ 1268.296274][T15818] vhci_hcd: stop threads [ 1268.306382][T15818] vhci_hcd: release socket [ 1268.313420][T15818] vhci_hcd: disconnect device [ 1268.790668][ T7453] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1268.848995][ T7453] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1268.992866][ T6940] usb 3-1: USB disconnect, device number 117 [ 1269.736593][ T7453] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1269.774399][ T7453] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1269.811637][ T7453] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1269.841995][ T7453] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1270.367826][T26400] syzkaller0: entered promiscuous mode [ 1270.387146][T26400] syzkaller0: entered allmulticast mode [ 1270.408014][T26402] bond0: (slave bridge0): Releasing backup interface [ 1270.432773][T26402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.440134][T26402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.483343][T26402] bridge_slave_0: left allmulticast mode [ 1270.491306][T26402] bridge_slave_0: left promiscuous mode [ 1270.500743][T26402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.536583][T26402] bridge_slave_1: left allmulticast mode [ 1270.545296][T26402] bridge_slave_1: left promiscuous mode [ 1270.555283][T26402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.577147][T26402] bond0: (slave bond_slave_0): Releasing backup interface [ 1270.613173][T26402] bond0: (slave bond_slave_1): Releasing backup interface [ 1270.666873][T26402] team0: Port device team_slave_0 removed [ 1270.687111][T26402] team0: Port device team_slave_1 removed [ 1270.695056][T26402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.704117][T26402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.739887][T26402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.763748][T26402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.783192][T26402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1270.805825][ T7453] usb 4-1: USB disconnect, device number 103 [ 1270.813205][T26404] ip6gre0: entered promiscuous mode [ 1270.867053][T26404] team0: Port device ip6gre0 added [ 1270.914180][T26416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1271.308633][ T7453] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1271.335349][T26422] syz.2.6756 (26422): drop_caches: 2 [ 1271.358112][T26426] fuse: Unknown parameter 'è•°áG' [ 1271.509262][ T7453] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1271.519122][ T7453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.527228][ T7453] usb 4-1: Product: syz [ 1271.531700][ T7453] usb 4-1: Manufacturer: syz [ 1271.537698][ T7453] usb 4-1: SerialNumber: syz [ 1271.569382][ T7453] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1271.581257][ T7453] r8152-cfgselector 4-1: config 0 descriptor?? [ 1272.044299][ T7453] r8152-cfgselector 4-1: USB disconnect, device number 104 [ 1272.812992][T26437] netlink: 'syz.2.6759': attribute type 10 has an invalid length. [ 1272.883356][T26438] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6759'. [ 1272.980145][T23925] usb 34-1: device descriptor read/8, error -110 [ 1273.374474][T23925] usb usb34-port1: attempt power cycle [ 1273.507519][T26431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.945129][T26437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1273.949510][T23925] usb usb34-port1: unable to enumerate USB device [ 1274.288315][T23925] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1274.318630][ T7453] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1274.490099][T23925] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1274.508318][ T7453] usb 5-1: Using ep0 maxpacket: 32 [ 1274.520328][T23925] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1274.548912][ T7453] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.589281][T23925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1274.598636][ T7453] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.662785][T23925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.673276][ T7453] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1274.705235][ T7453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.736818][T23925] usb 4-1: config 0 descriptor?? [ 1274.752262][T23925] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1274.772856][ T7453] usb 5-1: config 0 descriptor?? [ 1274.807911][ T7453] hub 5-1:0.0: bad descriptor, ignoring hub [ 1274.833998][ T7453] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1274.862534][ T7453] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1276.377672][T26487] syzkaller0: entered promiscuous mode [ 1276.388748][T26487] syzkaller0: entered allmulticast mode [ 1276.579289][T26494] netlink: 'syz.0.6775': attribute type 10 has an invalid length. [ 1276.648278][T23925] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1276.670462][T26495] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6775'. [ 1276.741281][T16661] Bluetooth: hci1: command 0x0406 tx timeout [ 1276.867567][T23925] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1276.876996][T23925] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1276.885547][T23925] usb 3-1: Product: syz [ 1276.890447][T23925] usb 3-1: Manufacturer: syz [ 1276.895086][T23925] usb 3-1: SerialNumber: syz [ 1276.908913][T23925] usb 3-1: config 0 descriptor?? [ 1276.925503][T23925] ch341 3-1:0.0: ch341-uart converter detected [ 1277.053472][ T7453] usb 4-1: USB disconnect, device number 105 [ 1277.136047][T23925] usb 3-1: failed to receive control message: -32 [ 1277.168655][T23925] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1277.231919][T23925] usb 5-1: USB disconnect, device number 90 [ 1277.291675][T26491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.588335][ T7453] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1277.754814][ T7453] usb 5-1: Using ep0 maxpacket: 32 [ 1277.766245][ T7453] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1277.782781][ T7453] usb 5-1: config 0 has no interface number 0 [ 1277.800673][ T7453] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1277.810173][ T7453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.818331][ T7453] usb 5-1: Product: syz [ 1277.822721][ T7453] usb 5-1: Manufacturer: syz [ 1277.827611][ T7453] usb 5-1: SerialNumber: syz [ 1277.850147][ T7453] usb 5-1: config 0 descriptor?? [ 1277.866334][ T7453] smsc95xx v2.0.0 [ 1278.267205][ T7453] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1278.280515][ T7453] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1279.537659][ T7453] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1279.566980][ T7453] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1279.679965][ T7453] usb 3-1: USB disconnect, device number 118 [ 1279.724448][ T7453] ch341 3-1:0.0: device disconnected [ 1280.148295][ T7453] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1280.394564][ T7453] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1280.428270][ T7453] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1280.451627][ T7453] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1280.478318][ T7453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.537579][ T7453] usb 3-1: config 0 descriptor?? [ 1280.558989][ T7453] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1280.827209][ T7453] usb 5-1: USB disconnect, device number 91 [ 1282.815009][T26570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6798'. [ 1282.838440][T10462] usb 3-1: USB disconnect, device number 119 [ 1283.308800][T23925] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1283.478333][T23925] usb 5-1: Using ep0 maxpacket: 8 [ 1283.498676][T23925] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1283.526520][T23925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.552251][T23925] usb 5-1: Product: syz [ 1283.557885][T23925] usb 5-1: Manufacturer: syz [ 1283.564633][T23925] usb 5-1: SerialNumber: syz [ 1283.579603][T23925] usb 5-1: config 0 descriptor?? [ 1283.604923][T23925] option 5-1:0.0: GSM modem (1-port) converter detected [ 1283.822256][T26570] netlink: 'syz.4.6798': attribute type 32 has an invalid length. [ 1283.867575][T26570] netlink: 'syz.4.6798': attribute type 32 has an invalid length. [ 1285.300712][ T3086] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.320930][ T3086] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.339330][T26609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6807'. [ 1285.374990][T26609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6807'. [ 1285.449919][T26611] netlink: 'syz.2.6805': attribute type 4 has an invalid length. [ 1285.487470][ T3086] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.527834][ T3086] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.569248][T17252] usb 5-1: USB disconnect, device number 92 [ 1285.596724][T17252] option 5-1:0.0: device disconnected [ 1285.650416][T26609] ip6gretap0: entered promiscuous mode [ 1285.695715][T26609] ip6gretap0: left promiscuous mode [ 1285.898523][T26621] fuse: Unknown parameter 'è•°áG' [ 1286.091368][T17252] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1286.129533][T26624] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1286.136118][T26624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1286.261560][T26624] vhci_hcd vhci_hcd.0: Device attached [ 1286.345177][T17252] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1286.354827][T17252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.382785][T17252] usb 5-1: Product: syz [ 1286.395784][T17252] usb 5-1: Manufacturer: syz [ 1286.407848][T17252] usb 5-1: SerialNumber: syz [ 1286.548316][T10462] usb 34-1: SetAddress Request (22) to port 0 [ 1286.562680][T10462] usb 34-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1286.698757][T26625] vhci_hcd: connection reset by peer [ 1286.705749][ T3086] vhci_hcd: stop threads [ 1286.715454][ T3086] vhci_hcd: release socket [ 1286.727616][ T3086] vhci_hcd: disconnect device [ 1286.844914][T17252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1286.874470][T17252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1287.084676][T26639] tipc: Enabling of bearer rejected, failed to enable media [ 1287.138343][ T5899] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1287.310372][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1287.335035][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.386356][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1287.399773][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1287.469488][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.522540][ T5899] usb 3-1: config 0 descriptor?? [ 1287.581961][ T5899] hub 3-1:0.0: bad descriptor, ignoring hub [ 1287.587915][ T5899] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1287.669693][ T5899] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1288.049936][ T5899] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1288.147753][T17252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1288.182557][T17252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1288.209196][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 1288.217069][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1288.228296][ T5899] usb 1-1: config 0 has no interface number 0 [ 1288.249003][ T5899] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1288.275777][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.304274][ T5899] usb 1-1: Product: syz [ 1288.314505][ T5899] usb 1-1: Manufacturer: syz [ 1288.326776][ T5899] usb 1-1: SerialNumber: syz [ 1288.367880][ T5899] usb 1-1: config 0 descriptor?? [ 1288.382607][ T5899] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1288.801606][ T5899] gspca_spca1528: reg_w err -71 [ 1288.819308][ T5899] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 1288.839775][ T5899] usb 1-1: USB disconnect, device number 111 [ 1289.013871][T17252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1289.027281][T17252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1289.053044][T17252] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1289.080560][T17252] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1289.648367][T17252] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1289.818265][T17252] usb 1-1: Using ep0 maxpacket: 32 [ 1289.825083][T17252] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1289.836782][T17252] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1289.848086][T17252] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1289.863515][T17252] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1289.872991][T17252] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1289.881873][T17252] usb 1-1: Product: syz [ 1289.886478][T17252] usb 1-1: Manufacturer: syz [ 1289.891262][T17252] usb 1-1: SerialNumber: syz [ 1289.907485][T17252] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input112 [ 1290.030442][ T7453] usb 3-1: USB disconnect, device number 120 [ 1290.084214][T23925] usb 5-1: USB disconnect, device number 93 [ 1290.154623][T17252] usb 1-1: USB disconnect, device number 112 [ 1290.201248][ T30] audit: type=1326 audit(1764846454.380:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.225256][ T30] audit: type=1326 audit(1764846454.400:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.251188][ T30] audit: type=1326 audit(1764846454.420:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.284748][ T30] audit: type=1326 audit(1764846454.420:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.308264][ T30] audit: type=1326 audit(1764846454.420:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.341237][T17252] appletouch 1-1:1.0: input: appletouch disconnected [ 1290.369278][ T30] audit: type=1326 audit(1764846454.430:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.377279][T26684] team0: Port device ip6gre0 removed [ 1290.398263][ T30] audit: type=1326 audit(1764846454.430:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.411522][T26682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.442103][T26684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1290.445349][ T30] audit: type=1326 audit(1764846454.430:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1290.461679][ T5899] skbuff: skb_under_panic: text:ffffffff8a180258 len:136 put:40 head:ffff888078672000 data:ffff888078671fe8 tail:0x70 end:0x6c0 dev:team0 [ 1290.501404][ T5899] ------------[ cut here ]------------ [ 1290.507028][ T5899] kernel BUG at net/core/skbuff.c:213! [ 1290.513103][ T5899] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1290.519347][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1290.528709][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1290.538757][ T5899] Workqueue: mld mld_ifc_work [ 1290.543435][ T5899] RIP: 0010:skb_panic+0x157/0x160 [ 1290.548537][ T5899] Code: c7 20 6b 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1290.568130][ T5899] RSP: 0018:ffffc9000454f2c0 EFLAGS: 00010286 [ 1290.574197][ T5899] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: b73ada0a0257ad00 [ 1290.582160][ T5899] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1290.590120][ T5899] RBP: 00000000000006c0 R08: ffffc9000454efc7 R09: 1ffff920008a9df8 [ 1290.598086][ T5899] R10: dffffc0000000000 R11: fffff520008a9df9 R12: ffff888032238510 [ 1290.606082][ T5899] R13: ffff888078672000 R14: ffff888078671fe8 R15: 0000000000000070 [ 1290.614042][ T5899] FS: 0000000000000000(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 1290.622957][ T5899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1290.629525][ T5899] CR2: 00000000f5421f36 CR3: 0000000074566000 CR4: 00000000003526f0 [ 1290.637481][ T5899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1290.645443][ T5899] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1290.653401][ T5899] Call Trace: [ 1290.656665][ T5899] [ 1290.659578][ T5899] ? ip6gre_header+0xc8/0x790 [ 1290.664254][ T5899] ? ip6gre_header+0xc8/0x790 [ 1290.668920][ T5899] skb_push+0xc3/0xe0 [ 1290.672892][ T5899] ip6gre_header+0xc8/0x790 [ 1290.677383][ T5899] ? __pfx_ip6gre_header+0x10/0x10 [ 1290.682478][ T5899] ? read_seqbegin+0x1ac/0x250 [ 1290.687223][ T5899] ? __pfx_read_seqbegin+0x10/0x10 [ 1290.692317][ T5899] ? ___neigh_create+0x1c5f/0x2230 [ 1290.697444][ T5899] ? __pfx_ip6gre_header+0x10/0x10 [ 1290.702547][ T5899] neigh_connected_output+0x286/0x460 [ 1290.707916][ T5899] ip6_finish_output2+0xfb3/0x1480 [ 1290.713121][ T5899] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1290.718714][ T5899] ? ip6_mtu+0x7d/0x490 [ 1290.722866][ T5899] ? ip6_mtu+0x38c/0x490 [ 1290.727094][ T5899] ? ip6_finish_output+0x2ef/0x4e0 [ 1290.732237][ T5899] ? ip6_output+0x126/0x550 [ 1290.736729][ T5899] ip6_output+0x340/0x550 [ 1290.741054][ T5899] NF_HOOK+0x9e/0x380 [ 1290.745034][ T5899] ? NF_HOOK+0x101/0x380 [ 1290.749264][ T5899] ? __pfx_NF_HOOK+0x10/0x10 [ 1290.753865][ T5899] ? __pfx_dst_output+0x10/0x10 [ 1290.758701][ T5899] ? icmp6_dst_alloc+0x3a5/0x420 [ 1290.763628][ T5899] ? icmp6_dst_alloc+0x3a5/0x420 [ 1290.768556][ T5899] mld_sendpack+0x8d4/0xe60 [ 1290.773055][ T5899] ? mld_sendpack+0x1e7/0xe60 [ 1290.777735][ T5899] ? __pfx_mld_sendpack+0x10/0x10 [ 1290.782773][ T5899] mld_ifc_work+0x83e/0xd60 [ 1290.787294][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 1290.792673][ T5899] ? process_scheduled_works+0x9ef/0x1770 [ 1290.798392][ T5899] process_scheduled_works+0xad1/0x1770 [ 1290.803943][ T5899] ? __pfx_process_scheduled_works+0x10/0x10 [ 1290.809920][ T5899] worker_thread+0x8a0/0xda0 [ 1290.814513][ T5899] kthread+0x711/0x8a0 [ 1290.818573][ T5899] ? __pfx_worker_thread+0x10/0x10 [ 1290.823666][ T5899] ? __pfx_kthread+0x10/0x10 [ 1290.828249][ T5899] ? _raw_spin_unlock_irq+0x23/0x50 [ 1290.833445][ T5899] ? lockdep_hardirqs_on+0x98/0x140 [ 1290.838642][ T5899] ? __pfx_kthread+0x10/0x10 [ 1290.843222][ T5899] ret_from_fork+0x599/0xb30 [ 1290.847816][ T5899] ? __pfx_ret_from_fork+0x10/0x10 [ 1290.852923][ T5899] ? __switch_to_asm+0x39/0x70 [ 1290.857684][ T5899] ? __switch_to_asm+0x33/0x70 [ 1290.862446][ T5899] ? __pfx_kthread+0x10/0x10 [ 1290.867025][ T5899] ret_from_fork_asm+0x1a/0x30 [ 1290.871783][ T5899] [ 1290.874887][ T5899] Modules linked in: [ 1290.879965][ T5899] ---[ end trace 0000000000000000 ]--- [ 1290.889024][ T30] audit: type=1326 audit(1764846454.430:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd5539 code=0x7ffc0000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1290.917648][ T30] audit: type=1326 audit(1764846454.430:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26681 comm="syz.4.6829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 1291.189128][ T5899] RIP: 0010:skb_panic+0x157/0x160 [ 1291.194226][ T5899] Code: c7 20 6b 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1291.214856][ T5899] RSP: 0018:ffffc9000454f2c0 EFLAGS: 00010286 [ 1291.221580][ T5899] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: b73ada0a0257ad00 [ 1291.230425][ T5899] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1291.238528][ T5899] RBP: 00000000000006c0 R08: ffffc9000454efc7 R09: 1ffff920008a9df8 [ 1291.246505][ T5899] R10: dffffc0000000000 R11: fffff520008a9df9 R12: ffff888032238510 [ 1291.254616][ T5899] R13: ffff888078672000 R14: ffff888078671fe8 R15: 0000000000000070 [ 1291.262658][ T5899] FS: 0000000000000000(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 1291.271757][ T5899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1291.278442][ T5899] CR2: 000055b285684f40 CR3: 00000000323b2000 CR4: 00000000003526f0 [ 1291.286448][ T5899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1291.298594][ T5899] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1291.308271][ T5899] Kernel panic - not syncing: Fatal exception [ 1291.315138][ T5899] Kernel Offset: disabled [ 1291.319473][ T5899] Rebooting in 86400 seconds..