last executing test programs: 13m24.329951309s ago: executing program 1 (id=1748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51fa3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 13m23.420098492s ago: executing program 1 (id=1749): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000000c0)={[{@errors_remount}, {@jqfmt_vfsv1}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") r0 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x8a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 13m22.89636701s ago: executing program 1 (id=1752): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2b53, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0xfb, 0x40, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x3, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xc, 0x19, 0xe5}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x4, 0xb, 0x6, 0x3}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x1, 0x3, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x7, 0x6, {0x8, 0x25, 0x1, 0x80, 0xf, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x3b, 0x9, {0x8, 0x25, 0x1, 0xc0, 0x0, 0x6, 0x4}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x0, 0x7f, 0x8, 0x7}, 0x0, 0x0}) 13m18.425377438s ago: executing program 1 (id=1756): socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, 0x0, 0x0) 13m17.155826737s ago: executing program 1 (id=1759): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'macvlan0\x00'}) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f00000068c0)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=cp949,shortname=winnt,codepage=864,nonumtail=0,iocharset=cp85xlate=0,nonumtail=0,shortname=lower,uni_xlate=1,shortname=win95,shortname=win95,iocharset=iso8859-14,\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x29b, &(0x7f0000000580)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x60001, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x24040801) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)={0x258, 0x1e, 0x305, 0x70bd26, 0x25dfdbfe, {0xfe}, [@nested={0x1a8, 0x61, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic, @typed={0x74, 0x115, 0x0, 0x0, @binary="11a3db2fe0f797b30fcc1694157bc98ef610f87fca5aff7a2c23dff8c6438538cc4f2fb22edbe7decb4a2a8b25267b735119e349e2173701c0a705f99f406882fb2c89a6c60be3c67363c2e2b121e3ee9868cf4be8b9cf64d0f6c8ccca67cdc3be620708440a9000af34abc688dc5de8"}, @nested={0x127, 0xeb, 0x0, 0x1, [@generic="dabf7e865ad9811599684ac21a997832724a6759d35372fbbde28070bbc05df68ff29df1de8a9222a10cd444d8f73c57bf034c60653d244529881b0a557141f53fa3af4654db9e8ee7e72e05eaaa0f8a187c6d5ff9624ad17f79609f1fcd426d1a", @typed={0x9, 0x80, 0x0, 0x0, @str='ext4\x00'}, @nested={0x4, 0x86}, @generic="cf2f5293f8ec468f3101c95485f30c65ba96613448b6fbe5d088ce1c30c98e27df9a249e747c0f3a35a13ab48ad3378e0847e28120ed1e0c3b90aa6bca50a4381cf45e2b08ed42c325c00a8cd032bbd84b2190b25a6cca43d8f39ed6aba40f1fdc222de5951f15c5a24657e26f4160b7b96ec4b13dd5e7a7c91c7102a40019fe3ef46586f3fe6e45e7b2916c318632f6827f2689710557b6e9aed0811445f8f3dc34753dc757f532846bec947bfaf6d2cc6b"]}]}, @typed={0x9b, 0x9, 0x0, 0x0, @binary="9b68c023ca128cd2a8f140fb68a73c50f7dd1def909726089a84ca92499b3ad027832b34cf97eab470eb42382e4d9241f4ed8ab802e8ed9b234fde4f4d2db3b735eac47e6a7e51ba45a8aacd10c1b194a97cf5060d32e2324a87fc4803d41dfdd10558f3dc3a888a8e742177f76e46c8c9cfa7c65d93f8418d71912b04c92717f478b80048f1e72c8b7da3a2629d9b6f24e09cbf62f290"}]}, 0x258}, 0x1, 0x8000000, 0x0, 0x800}, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2004cfe9, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000fc0)={[{@nogrpid}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@lazytime}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x569, &(0x7f0000000a40)="$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") mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 13m15.972123285s ago: executing program 1 (id=1765): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r10, 0x400454a4, &(0x7f0000000200)=0x1) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[], [], 0x2c}) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty, 0x100}, 0x1, {[0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x20]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @local}, {0xa, 0x6e23, 0x0, @empty, 0x6}, 0x1, {[0x0, 0x0, 0x0, 0x80000004, 0x0, 0x1, 0xfffffffe, 0x40]}}, 0x5c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000180)) 12m58.37037104s ago: executing program 32 (id=1765): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r10, 0x400454a4, &(0x7f0000000200)=0x1) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[], [], 0x2c}) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty, 0x100}, 0x1, {[0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x20]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @local}, {0xa, 0x6e23, 0x0, @empty, 0x6}, 0x1, {[0x0, 0x0, 0x0, 0x80000004, 0x0, 0x1, 0xfffffffe, 0x40]}}, 0x5c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000180)) 4.835012896s ago: executing program 2 (id=4997): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) 3.505033616s ago: executing program 2 (id=4998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.484652277s ago: executing program 0 (id=4999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.392046438s ago: executing program 2 (id=5002): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000001a80)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @remote, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 3.27927067s ago: executing program 2 (id=5003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="04d96f885e8a7be83ea8af7be273f3226bb2fc1924c7148d2be3cbea30c541c81b8379f4e146d24e2a4486e302a919fcc294ada767a07799f8f14fa7ae3746383157fe5e0c1a01f24c649ea5c15edb44"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 3.199241341s ago: executing program 0 (id=5005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6ae", 0x3c}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e", 0x1d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.917784365s ago: executing program 2 (id=5007): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket(0x29, 0x5, 0xff) connect$netlink(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r2, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) 2.728839268s ago: executing program 2 (id=5008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$midi(0x6, 0xa3, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x1, 0x1, 0x9, 0xf0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x2, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0x40, 0x7, [{0xa}, {0x2, 0x3}, {0x4, 0x37}, {0x1, 0x93}, {0x7f, 0x4}, {0x88, 0x45}, {0xc, 0x7}], 0x1}, @midi_out_jack={0x11, 0x24, 0x3, 0x2, 0x3, 0x5, [{0x6, 0x7}, {0x3, 0x9}, {0x9, 0x4}, {0xff, 0xf}, {0x0, 0x1}], 0x3}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0xc, 0x6, [{0x1, 0x40}, {0x5, 0xf8}, {0x73, 0x7}, {0x8}, {0x2c, 0x7}, {0x5, 0x8}], 0x2}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x8, 0x7, [{0x0, 0xa4}, {0x5, 0x9}, {0xfd, 0x1}, {0x9, 0xff}, {0xe0, 0x3}, {0x19, 0x7}, {0x14, 0x4}], 0x5}], [{{0x9, 0x5, 0xe, 0x4, 0x200, 0x7f, 0x1f, 0x2, {0xe, 0x25, 0x1, 0xa, "e378c9cdd6b1e4d56b0a"}}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xe0, 0x6, 0x3, {0x4}}}, {{0x9, 0x5, 0xf, 0x4, 0x3d7, 0x3, 0xf, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd8, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x2, 0x1, 0xc, 0x90, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xb, 0xfff7, 0x81}, {0x6, 0x24, 0x1a, 0x10, 0x34}, [@mdlm_detail={0x6a, 0x24, 0x13, 0x1, "2a461e3d73706b23380f7c0e7db3025efd745963b570bdf9afe18b64b4e274f7233e70081e3e8918cc85e8f8f71f7d9b7a0f7b48cc91097cf2a60119bad38f7abbc6a7a717b6ef8336b73d0c75ac380799c1676d8dac0f67abbea286835fa7b5563d2f3e8cbb"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6d, 0xfb, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x14, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.114953947s ago: executing program 0 (id=5011): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000001a80)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @remote, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 2.000118579s ago: executing program 0 (id=5013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.739490383s ago: executing program 0 (id=5015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="04d96f885e8a7be83ea8af7be273f3226bb2fc1924c7148d2be3cbea30c541c81b8379f4e146d24e2a4486e302a919fcc294ada767a07799f8f14fa7ae3746383157fe5e0c1a01f24c649ea5c15edb44"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 1.501066287s ago: executing program 4 (id=5017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.487810247s ago: executing program 0 (id=5018): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.387791049s ago: executing program 4 (id=5019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x44090) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c5}, 0x8000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f00000011c0)) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) 1.30481036s ago: executing program 4 (id=5020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148", 0x88}, {&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 587.339451ms ago: executing program 3 (id=5021): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000001a80)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @remote, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 484.855682ms ago: executing program 3 (id=5022): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce", 0x70}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5", 0x4d}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e", 0x32}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 346.116934ms ago: executing program 3 (id=5023): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="f49a97019eb9", 0x6}], 0x1, &(0x7f00000004c0)=[@prinfo={0x38, 0x84, 0x5, {0x0, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0xf, 0x200, 0x0, 0x2}}], 0x38}, 0x20000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 265.899766ms ago: executing program 3 (id=5024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x40, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xf8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 250.979576ms ago: executing program 4 (id=5025): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket(0x29, 0x5, 0xff) connect$netlink(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='vegas', 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r2, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) 179.505747ms ago: executing program 4 (id=5026): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x1, 0x7}}) 89.050138ms ago: executing program 3 (id=5027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 88.779818ms ago: executing program 4 (id=5028): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000980)={0xe8, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x56}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x558}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "55bf"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x193}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9b, 0xac, "5bf202b759157460504a8b3db19e2abccbda8f9e8700acfe59094e4c383080b2c5fa9eacc90baefd14bf5ce59852bc4ec52147c8291b713146adf78836b4a5e558cc74a80a78f4988ea674ea776107012ae0a9e7d9bb3224abc84236dbbdc04f9d1c174b72c007273f5597c32fd5032119a34b89998b334721205c6794225561df3d473b3965898e2aebccd86db15a5306a1fa701aa150"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 0s ago: executing program 3 (id=5029): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$midi(0x6, 0x2b, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x9, 0xf0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0xc3, 0x7}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x8, 0x9, 0x10, 0x20, 0xfb}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 1382.546866][ T9] usb 1-1: USB disconnect, device number 56 [ 1382.571050][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1382.673963][ T7333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.803001][ T7333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.902066][ T7333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.095074][ T5817] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1383.157745][T20858] chnl_net:caif_netlink_parms(): no params data found [ 1383.330835][ T5817] usb 4-1: config 0 has no interfaces? [ 1383.344377][ T5817] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1383.353775][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.361849][ T5817] usb 4-1: Product: syz [ 1383.372905][ T5817] usb 4-1: Manufacturer: syz [ 1383.377606][ T5817] usb 4-1: SerialNumber: syz [ 1383.395908][ T5817] usb 4-1: config 0 descriptor?? [ 1383.493813][ T7333] tipc: Disabling bearer [ 1383.499525][ T7333] tipc: Left network mode [ 1383.639308][T15387] usb 4-1: USB disconnect, device number 115 [ 1383.646106][T20858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.670442][T20858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.678824][T20858] bridge_slave_0: entered allmulticast mode [ 1383.686810][T20858] bridge_slave_0: entered promiscuous mode [ 1383.697989][T20858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.716732][T20858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.724139][T20858] bridge_slave_1: entered allmulticast mode [ 1383.738818][T20858] bridge_slave_1: entered promiscuous mode [ 1383.822108][ T967] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1383.846239][T20858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.881283][T20858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.966527][T20858] team0: Port device team_slave_0 added [ 1384.032361][T20858] team0: Port device team_slave_1 added [ 1384.038828][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 1384.051438][ T967] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1384.075899][ T967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1384.102880][ T967] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1384.137467][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.151901][ T967] usb 1-1: Product: syz [ 1384.164705][ T967] usb 1-1: Manufacturer: syz [ 1384.169565][ T967] usb 1-1: SerialNumber: syz [ 1384.183141][ T967] usb 1-1: config 0 descriptor?? [ 1384.201492][T20858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.222971][ T967] gs_usb 1-1:0.0: Required endpoints not found [ 1384.229277][T20858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.229311][T20858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.345417][T20858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.366597][T20858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.413308][T20858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.436880][ T7333] batman_adv: batadv0: Interface deactivated: gretap1 [ 1384.452985][ T7333] batadv0: mtu less than device minimum [ 1384.461369][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.474967][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.487832][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.500880][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.513797][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.526765][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.539837][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.552830][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.565787][ T7333] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1384.609049][T11378] Bluetooth: hci0: command tx timeout [ 1384.675341][ T7333] batman_adv: batadv0: Removing interface: gretap1 [ 1384.914180][T20858] hsr_slave_0: entered promiscuous mode [ 1384.930323][T20858] hsr_slave_1: entered promiscuous mode [ 1385.249497][ T7333] hsr_slave_0: left promiscuous mode [ 1385.259350][ T7333] hsr_slave_1: left promiscuous mode [ 1385.271229][ T7333] batman_adv: batadv0: Interface deactivated: dummy0 [ 1385.280140][ T7333] batman_adv: batadv0: Removing interface: dummy0 [ 1385.289326][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.296801][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.306479][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.314474][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.327067][ T7333] bridge_slave_1: left allmulticast mode [ 1385.335594][ T7333] bridge_slave_1: left promiscuous mode [ 1385.343343][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.365316][ T7333] bridge_slave_0: left allmulticast mode [ 1385.371077][ T7333] bridge_slave_0: left promiscuous mode [ 1385.380585][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.489988][ T7333] veth1_macvtap: left promiscuous mode [ 1385.495741][ T7333] veth0_macvtap: left promiscuous mode [ 1385.510788][ T7333] veth1_vlan: left promiscuous mode [ 1385.517378][ T7333] veth0_vlan: left promiscuous mode [ 1386.618000][ T7333] team0 (unregistering): Port device team_slave_1 removed [ 1386.705757][ T7333] team0 (unregistering): Port device team_slave_0 removed [ 1386.769277][T11378] Bluetooth: hci0: command tx timeout [ 1386.779951][T15388] usb 1-1: USB disconnect, device number 57 [ 1386.808933][ T7333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.972753][ T7333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.447554][T15388] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1387.530871][T20944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input59 [ 1387.605347][ T7333] bond0 (unregistering): Released all slaves [ 1387.662723][T15388] usb 1-1: Using ep0 maxpacket: 8 [ 1387.670470][T15388] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.680930][T15388] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1387.690014][T15388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.705133][T15388] usb 1-1: config 0 descriptor?? [ 1387.715016][T15388] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1388.602905][T20858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1388.642504][T20858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1388.662268][T20858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1388.692086][T20858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1388.805552][T15388] gspca_vc032x: reg_r err -32 [ 1388.810461][T15388] vc032x: probe of 1-1:0.0 failed with error -32 [ 1388.907526][T20858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.948737][T20858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.970189][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.977418][T12680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.984879][T11378] Bluetooth: hci0: command tx timeout [ 1389.009260][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.016490][T12680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.225483][ T5818] usb 3-1: USB disconnect, device number 6 [ 1389.245751][ T5818] usblp0: removed [ 1389.695882][T20858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.923459][T20987] syzkaller0: entered promiscuous mode [ 1389.933326][T20987] syzkaller0: entered allmulticast mode [ 1390.283262][ T5818] usb 1-1: USB disconnect, device number 58 [ 1390.899487][T20858] veth0_vlan: entered promiscuous mode [ 1390.936575][T20858] veth1_vlan: entered promiscuous mode [ 1390.973094][T13548] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1391.051622][T20858] veth0_macvtap: entered promiscuous mode [ 1391.095678][T20858] veth1_macvtap: entered promiscuous mode [ 1391.134387][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.151008][T13548] usb 3-1: device descriptor read/64, error -71 [ 1391.157711][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.172789][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.183960][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.205606][T20858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.211522][T11378] Bluetooth: hci0: command tx timeout [ 1391.224736][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.262100][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.282127][T20858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.311796][T20858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.342766][T20858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.387308][T20858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.417830][T20858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.440902][T20858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.457179][T20858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.474613][T13548] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1391.605040][T15890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.612939][T15890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.675775][T13548] usb 3-1: device descriptor read/64, error -71 [ 1391.709795][T15879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.728801][T15879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.767283][T21018] syzkaller0: entered promiscuous mode [ 1391.772827][T21018] syzkaller0: entered allmulticast mode [ 1391.821821][T13548] usb usb3-port1: attempt power cycle [ 1392.288260][T13548] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1392.361798][T13548] usb 3-1: device descriptor read/8, error -71 [ 1392.663414][T13548] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1392.707851][T13548] usb 3-1: device descriptor read/8, error -71 [ 1392.854681][T13548] usb usb3-port1: unable to enumerate USB device [ 1393.156526][T21035] syzkaller0: entered promiscuous mode [ 1393.162151][T21035] syzkaller0: entered allmulticast mode [ 1393.284363][ T5817] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1393.463837][ T5817] usb 1-1: device descriptor read/64, error -71 [ 1393.565351][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4406'. [ 1393.752413][ T5817] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1393.917599][ T5817] usb 1-1: device descriptor read/64, error -71 [ 1394.053363][ T5817] usb usb1-port1: attempt power cycle [ 1394.361675][ T5818] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1394.489948][ T5817] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1394.536623][ T5817] usb 1-1: device descriptor read/8, error -71 [ 1394.566888][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.586167][ T5818] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1394.597346][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.608612][ T5818] usb 3-1: config 0 descriptor?? [ 1394.772425][T21054] syzkaller0: entered promiscuous mode [ 1394.777984][T21054] syzkaller0: entered allmulticast mode [ 1394.840465][ T5818] usbhid 3-1:0.0: can't add hid device: -71 [ 1394.853356][ T5817] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1394.870829][ T5818] usbhid: probe of 3-1:0.0 failed with error -71 [ 1394.892218][ T5818] usb 3-1: USB disconnect, device number 11 [ 1394.919322][ T5817] usb 1-1: device descriptor read/8, error -71 [ 1395.056844][ T5817] usb usb1-port1: unable to enumerate USB device [ 1395.494638][ T5818] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1395.701805][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.724911][ T5818] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1395.747955][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.770030][ T5818] usb 3-1: config 0 descriptor?? [ 1396.391525][T21072] bridge_slave_0: left allmulticast mode [ 1396.401527][T21072] bridge_slave_0: left promiscuous mode [ 1396.408851][T21072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.423660][T21072] bridge_slave_1: left allmulticast mode [ 1396.429579][T21072] bridge_slave_1: left promiscuous mode [ 1396.435670][T21072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.456499][T21072] bond0: (slave bond_slave_0): Releasing backup interface [ 1396.524321][T21072] bond0: (slave bond_slave_1): Releasing backup interface [ 1396.601289][T21072] team0: Port device team_slave_0 removed [ 1396.608712][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1396.640399][T21072] team0: Port device team_slave_1 removed [ 1396.649671][T21072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.660129][T21072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.668147][ T5818] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1396.682241][T21072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.705298][ T5818] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input60 [ 1396.722908][T21072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.820166][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1396.852887][ T9] usb 4-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 1396.904553][ T967] usb 3-1: USB disconnect, device number 12 [ 1396.904768][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1396.911308][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1396.965269][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping [ 1397.000374][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1397.026028][T21080] team0: Mode changed to "loadbalance" [ 1397.059845][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1397.083110][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1397.103010][ T9] usb 4-1: Manufacturer: syz [ 1397.123521][ T9] usb 4-1: config 0 descriptor?? [ 1397.179130][T21075] syzkaller0: entered promiscuous mode [ 1397.185739][T21075] syzkaller0: entered allmulticast mode [ 1399.471471][ T9] usb 4-1: USB disconnect, device number 116 [ 1400.390646][T13155] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1400.601222][T13155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.636562][T13155] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1400.657586][T13155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.678667][T13155] usb 4-1: config 0 descriptor?? [ 1400.925666][T13155] usbhid 4-1:0.0: can't add hid device: -71 [ 1400.931740][T13155] usbhid: probe of 4-1:0.0 failed with error -71 [ 1400.964680][T13155] usb 4-1: USB disconnect, device number 117 [ 1401.524347][T13155] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1401.739576][T13155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.768832][T13155] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1401.778036][T13155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.802859][T13155] usb 4-1: config 0 descriptor?? [ 1402.247135][ T23] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1402.464271][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1402.475970][ T23] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1402.488784][ T23] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1402.500473][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1402.517800][ T23] usb 5-1: config 1 has no interface number 0 [ 1402.535049][ T23] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1402.567817][ T23] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1402.588267][ T23] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1402.597539][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.621336][ T23] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1402.714229][T13155] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1402.734142][T13155] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 1402.846670][ T23] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1402.945797][T13155] usb 4-1: USB disconnect, device number 118 [ 1402.945886][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1403.309332][T13155] usb 5-1: USB disconnect, device number 108 [ 1403.324853][T13155] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1404.324135][T13155] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1404.449970][T21212] bridge1: entered promiscuous mode [ 1404.455461][T21212] bridge1: entered allmulticast mode [ 1404.470131][T21212] team0: Port device bridge1 added [ 1404.495655][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1404.549374][T13155] usb 5-1: Using ep0 maxpacket: 16 [ 1404.556779][T13155] usb 5-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1404.569070][T13155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1404.592737][T13155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1404.605191][T13155] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1404.616211][T13155] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1404.631162][T13155] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1404.651655][T13155] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1404.666101][T13155] usb 5-1: Manufacturer: syz [ 1404.688238][T13155] usb 5-1: config 0 descriptor?? [ 1404.708989][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1404.725809][T21219] net_ratelimit: 10 callbacks suppressed [ 1404.725827][T21219] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1404.757261][ T23] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1404.770767][ T23] usb 3-1: config 0 has no interface number 0 [ 1404.785228][ T23] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1404.799425][ T23] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1404.822506][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1404.833247][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.846775][ T23] usb 3-1: Product: syz [ 1404.851419][ T23] usb 3-1: Manufacturer: syz [ 1404.856118][ T23] usb 3-1: SerialNumber: syz [ 1404.879027][ T23] usb 3-1: config 0 descriptor?? [ 1404.899951][ T23] asix: probe of 3-1:0.188 failed with error -22 [ 1405.018995][T13155] rc_core: IR keymap rc-hauppauge not found [ 1405.025001][T13155] Registered IR keymap rc-empty [ 1405.039050][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.072757][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.115286][T13155] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1405.137315][T13155] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 1405.170268][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.201397][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.234623][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.254194][ T23] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1405.277837][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.322911][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.361958][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.404662][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.445901][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.467892][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1405.481085][ T23] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1405.491146][ T23] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1405.503684][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.510395][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1405.520534][ T23] usb 1-1: config 1 has no interface number 0 [ 1405.531175][ T23] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1405.542528][ T23] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1405.542857][T13155] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1405.566059][ T23] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1405.576913][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.599427][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1405.620016][T13155] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1405.639062][T13155] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1405.672474][T13155] usb 5-1: USB disconnect, device number 109 [ 1405.835955][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1406.278221][ T9] usb 1-1: USB disconnect, device number 63 [ 1406.292596][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1407.051136][T21248] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1407.231607][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4476'. [ 1407.483457][T13155] usb 3-1: USB disconnect, device number 13 [ 1408.664189][ T23] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1408.881569][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1408.898792][ T23] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1408.910289][T13155] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1408.922983][ T23] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1408.935900][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1408.948617][ T23] usb 5-1: config 1 has no interface number 0 [ 1408.963441][ T23] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1408.987843][ T23] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1409.003522][ T23] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1409.012985][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.033345][ T23] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1409.158261][T13155] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1409.176456][T13155] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1409.205111][T13155] usb 3-1: can't read configurations, error -71 [ 1409.271051][ T23] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1409.722871][ T967] usb 5-1: USB disconnect, device number 110 [ 1409.740555][T21294] tipc: Started in network mode [ 1409.746915][ T967] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1409.755428][T21294] tipc: Node identity 766673e9ce97, cluster identity 4711 [ 1409.762847][T21294] tipc: Enabled bearer , priority 0 [ 1409.789200][T21293] tipc: Disabling bearer [ 1411.421865][ T5818] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1411.631617][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1411.647383][ T5818] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1411.655626][ T5818] usb 5-1: can't read configurations, error -71 [ 1411.701607][T13155] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1411.924280][T13155] usb 3-1: Using ep0 maxpacket: 16 [ 1411.932315][T13155] usb 3-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1411.948382][T13155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1411.963267][T13155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24926, setting to 1024 [ 1411.982644][T13155] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1412.002008][T13155] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1412.014899][T13155] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1412.024308][T13155] usb 3-1: Manufacturer: syz [ 1412.036021][T13155] usb 3-1: config 0 descriptor?? [ 1412.063567][T17672] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1412.265802][T17672] usb 4-1: Using ep0 maxpacket: 32 [ 1412.286072][T17672] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1412.310439][T17672] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1412.323845][T17672] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1412.333386][T17672] usb 4-1: config 1 has no interface number 0 [ 1412.340749][T17672] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1412.359631][T17672] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1412.388735][T17672] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1412.402036][T17672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.429241][T17672] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1412.660733][T17672] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1413.127807][ T5818] usb 4-1: USB disconnect, device number 119 [ 1413.140545][ T5818] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1414.640247][ T9] usb 3-1: USB disconnect, device number 16 [ 1414.705454][T21364] team0: Port device xfrm0 added [ 1414.794300][T21364] tipc: Started in network mode [ 1414.799269][T21364] tipc: Node identity 265c4c771e47, cluster identity 4711 [ 1414.815413][T21364] tipc: Enabled bearer , priority 0 [ 1414.911128][ T5818] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1415.134733][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1415.154670][T21376] team0: Port device xfrm0 removed [ 1415.169480][ T5818] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1415.188166][ T5818] usb 1-1: can't read configurations, error -71 [ 1415.218643][T15891] tipc: Resetting bearer [ 1415.248180][T21378] team0: Unable to change to the same mode the team is in [ 1415.597241][T21385] syzkaller0: entered promiscuous mode [ 1415.603202][T21385] syzkaller0: entered allmulticast mode [ 1415.986263][ T967] tipc: Node number set to 941313143 [ 1417.388482][T21418] tipc: Enabled bearer , priority 0 [ 1417.479247][T21417] tipc: Disabling bearer [ 1418.506188][T21448] tipc: Enabled bearer , priority 0 [ 1418.547247][T21447] tipc: Disabling bearer [ 1419.581143][T21474] tipc: Enabled bearer , priority 0 [ 1419.637643][T21472] tipc: Disabling bearer [ 1420.060089][T21484] team0: Device xfrm0 is of different type [ 1420.604205][ T5818] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1420.808344][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 1420.818526][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1420.829024][ T5818] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1420.838910][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1420.862111][ T5818] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1420.882122][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.897799][ T5818] usb 3-1: Product: syz [ 1420.907166][ T5818] usb 3-1: Manufacturer: syz [ 1420.916595][ T5818] usb 3-1: SerialNumber: syz [ 1420.932879][ T5818] usb 3-1: config 0 descriptor?? [ 1421.397461][ T5818] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1421.405301][ T5818] gs_usb: probe of 3-1:0.0 failed with error -121 [ 1421.667395][T17672] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1421.865480][T17672] usb 5-1: Using ep0 maxpacket: 16 [ 1421.883982][T17672] usb 5-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1421.905459][T17672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1421.930838][T17672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1421.966885][T17672] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1421.996602][T17672] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1422.025162][T17672] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1422.045353][T17672] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1422.057972][T17672] usb 5-1: Manufacturer: syz [ 1422.072658][T17672] usb 5-1: config 0 descriptor?? [ 1422.432012][T17672] rc_core: IR keymap rc-hauppauge not found [ 1422.432980][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1422.448984][T17672] Registered IR keymap rc-empty [ 1422.460012][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.509678][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.556767][T17672] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1422.583257][T17672] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input63 [ 1422.627875][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.668788][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.673415][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.705650][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1422.728927][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.734016][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1422.758407][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.774393][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.790655][ T9] usb 1-1: config 0 descriptor?? [ 1422.809810][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1422.817621][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.860271][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.913277][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.945381][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1422.980732][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1423.015156][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1423.034660][ T9] usb 1-1: USB disconnect, device number 66 [ 1423.065756][T17672] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1423.094692][T17672] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1423.120012][T17672] usb 5-1: USB disconnect, device number 113 [ 1423.592712][T17672] usb 3-1: USB disconnect, device number 17 [ 1423.650501][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1423.899238][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.917763][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1423.949110][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1423.975248][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.996875][ T9] usb 1-1: config 0 descriptor?? [ 1424.019981][ T9] aiptek 1-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1424.043311][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1424.120904][T17672] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1424.334679][T17672] usb 3-1: Using ep0 maxpacket: 32 [ 1424.347799][T17672] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1424.377464][T17672] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1424.394384][T17672] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1424.416473][T17672] usb 3-1: config 1 has no interface number 0 [ 1424.431009][T17672] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1424.452238][T17672] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1424.485086][T17672] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1424.513036][T17672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.555114][T17672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1424.768545][T17672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1425.235403][T17672] usb 3-1: USB disconnect, device number 18 [ 1425.263437][T17672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1425.382712][ T9] usb 1-1: USB disconnect, device number 67 [ 1426.027537][T21631] team0: Device xfrm0 is of different type [ 1426.333656][ T5818] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1426.536741][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 1426.557070][ T5818] usb 4-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 1426.574810][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1426.589405][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1426.617955][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x25, skipping [ 1426.650598][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1426.680508][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1426.697148][ T5818] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1426.716098][ T5818] usb 4-1: Manufacturer: syz [ 1426.728238][ T5818] usb 4-1: config 0 descriptor?? [ 1428.034891][T21682] tipc: Resetting bearer [ 1429.181717][T21704] bridge_slave_0: left allmulticast mode [ 1429.188388][T21704] bridge_slave_0: left promiscuous mode [ 1429.194360][T21704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.241731][T21704] bridge_slave_1: left allmulticast mode [ 1429.267028][ T9] usb 4-1: USB disconnect, device number 120 [ 1429.280579][T21704] bridge_slave_1: left promiscuous mode [ 1429.317334][T21704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.373070][T21704] bond0: (slave bond_slave_0): Releasing backup interface [ 1429.405581][T21704] bond0: (slave bond_slave_1): Releasing backup interface [ 1429.458759][T21704] team0: Port device team_slave_0 removed [ 1429.495156][T21704] team0: Port device team_slave_1 removed [ 1429.520122][T21704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.527649][T21704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.537013][T21704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.544740][T21704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.585344][T21704] team0: Port device bridge1 removed [ 1430.384859][ T5818] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1430.611784][ T5818] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1430.645352][ T5818] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1430.659521][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1430.675987][ T5818] usb 1-1: Product: syz [ 1430.684209][ T5818] usb 1-1: Manufacturer: syz [ 1430.693611][ T5818] usb 1-1: SerialNumber: syz [ 1430.945473][ T5818] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1431.553551][ T967] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1431.570508][T21743] bridge_slave_0: left allmulticast mode [ 1431.578009][T21743] bridge_slave_0: left promiscuous mode [ 1431.584930][T21743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.606318][T21743] bridge_slave_1: left allmulticast mode [ 1431.621380][T21743] bridge_slave_1: left promiscuous mode [ 1431.630526][T21743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.661449][T21743] bond0: (slave bond_slave_0): Releasing backup interface [ 1431.695392][T21743] bond0: (slave bond_slave_1): Releasing backup interface [ 1431.753375][T21743] team0: Port device team_slave_0 removed [ 1431.788804][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 1431.801269][T21743] team0: Port device team_slave_1 removed [ 1431.810987][ T967] usb 4-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 1431.822778][T21743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.834807][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1431.855073][T21743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.857128][ T967] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x25, skipping [ 1431.878414][T21743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.887904][T21743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.898836][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1431.927883][ T967] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1431.941183][T21743] batman_adv: batadv0: Interface deactivated: gretap1 [ 1431.947564][ T967] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1431.962974][T21743] batman_adv: batadv0: Removing interface: gretap1 [ 1431.982753][ T967] usb 4-1: Manufacturer: syz [ 1432.000353][ T967] usb 4-1: config 0 descriptor?? [ 1432.458828][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1432.661787][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1432.670665][ T23] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1432.683162][ T23] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1432.691861][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1432.709723][ T23] usb 3-1: config 1 has no interface number 0 [ 1432.718795][ T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1432.735561][ T23] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1432.756168][ T23] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1432.766442][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.798289][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1433.029842][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1433.473852][ T23] usb 3-1: USB disconnect, device number 19 [ 1433.481960][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1434.409376][ T967] usb 4-1: USB disconnect, device number 121 [ 1434.949532][ T5818] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1435.169252][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.183687][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1435.204240][ T5818] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1435.227236][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.250943][ T5818] usb 5-1: config 0 descriptor?? [ 1435.272201][ T5818] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1435.501798][ T9] usb 5-1: USB disconnect, device number 114 [ 1436.125116][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1436.336153][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.354249][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1436.368111][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1436.377738][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.402291][ T9] usb 5-1: config 0 descriptor?? [ 1436.425527][ T9] aiptek 5-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1436.436468][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1436.830847][T13155] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1437.055090][T13155] usb 3-1: Using ep0 maxpacket: 16 [ 1437.063556][T13155] usb 3-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1437.083134][T13155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1437.099292][T13155] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 1437.118189][T13155] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1437.145475][T13155] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1437.160335][T13155] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1437.168527][T13155] usb 3-1: Manufacturer: syz [ 1437.184213][T13155] usb 3-1: config 0 descriptor?? [ 1437.423624][T21795] syzkaller0: entered promiscuous mode [ 1437.429304][T21795] syzkaller0: entered allmulticast mode [ 1438.300292][T13155] usb 1-1: USB disconnect, device number 68 [ 1438.321739][T13155] usblp0: removed [ 1438.931102][ T9] usb 5-1: USB disconnect, device number 115 [ 1439.055880][T21812] tipc: Resetting bearer [ 1439.769410][ T9] usb 3-1: USB disconnect, device number 20 [ 1440.212749][T21832] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 1440.700308][T17672] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1440.924693][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1440.940050][T17672] usb 5-1: Using ep0 maxpacket: 32 [ 1440.947883][T17672] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1440.956067][T17672] usb 5-1: config 0 has no interface number 0 [ 1440.985887][T17672] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1441.011681][T17672] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1441.026311][T17672] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1441.037048][T17672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.045240][T17672] usb 5-1: Product: syz [ 1441.049528][T17672] usb 5-1: Manufacturer: syz [ 1441.057239][T17672] usb 5-1: SerialNumber: syz [ 1441.075314][T17672] usb 5-1: config 0 descriptor?? [ 1441.127799][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1441.148389][ T9] usb 1-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1441.170471][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1441.196343][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1441.231560][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1441.263470][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1441.291432][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1441.309358][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1441.311122][T17672] appletouch 5-1:0.85: Failed to read mode from device. [ 1441.337812][ T9] usb 1-1: Manufacturer: syz [ 1441.347260][T17672] appletouch: probe of 5-1:0.85 failed with error -5 [ 1441.361768][ T9] usb 1-1: config 0 descriptor?? [ 1441.619604][T13155] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1441.674141][ T9] rc_core: IR keymap rc-hauppauge not found [ 1441.680128][ T9] Registered IR keymap rc-empty [ 1441.686244][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1441.726801][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1441.754280][T17672] usb 5-1: USB disconnect, device number 116 [ 1441.766510][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1441.791222][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input67 [ 1441.816783][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1441.844203][T13155] usb 3-1: Using ep0 maxpacket: 16 [ 1441.855259][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1441.863911][T13155] usb 3-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 1441.885402][T13155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1441.891876][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1441.898742][T13155] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 1441.917420][T13155] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1441.940304][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1441.952737][T13155] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1441.962287][T13155] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1441.971977][T13155] usb 3-1: Manufacturer: syz [ 1441.976986][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1441.983980][T13155] usb 3-1: config 0 descriptor?? [ 1442.028695][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1442.068952][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1442.100828][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1442.134331][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1442.167527][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1442.211453][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1442.220939][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1442.235905][ T9] usb 1-1: USB disconnect, device number 69 [ 1442.441507][T21859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4659'. [ 1442.519587][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4659'. [ 1442.569978][T21862] x_tables: duplicate underflow at hook 1 [ 1443.158725][ T5783] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1443.364002][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.391330][ T5783] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1443.411308][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.434570][ T5783] usb 4-1: config 0 descriptor?? [ 1443.677768][ T5783] usbhid 4-1:0.0: can't add hid device: -71 [ 1443.703193][ T5783] usbhid: probe of 4-1:0.0 failed with error -71 [ 1443.721004][ T5783] usb 4-1: USB disconnect, device number 122 [ 1444.324095][ T5783] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1444.516543][ T9] usb 3-1: USB disconnect, device number 21 [ 1444.537073][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.559468][ T5783] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1444.568693][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.591118][ T5783] usb 4-1: config 0 descriptor?? [ 1445.382383][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1445.481548][ T5783] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1445.497556][ T5783] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input68 [ 1445.586651][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1445.618804][ T9] usb 5-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1445.649577][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1445.681706][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1445.702780][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1445.734536][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1445.753148][T17672] usb 4-1: USB disconnect, device number 123 [ 1445.753147][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1445.759865][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1445.807114][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1445.827566][ T9] usb 5-1: Manufacturer: syz [ 1445.853866][ T9] usb 5-1: config 0 descriptor?? [ 1446.237743][ T9] rc_core: IR keymap rc-hauppauge not found [ 1446.243743][ T9] Registered IR keymap rc-empty [ 1446.260447][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.302508][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.356917][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1446.371537][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input69 [ 1446.428402][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.473382][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.526082][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.579633][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.611716][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.639211][T21908] syzkaller0: entered promiscuous mode [ 1446.644995][T21908] syzkaller0: entered allmulticast mode [ 1446.652622][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.686579][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.739903][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.771989][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.819146][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1446.869912][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1446.890423][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1446.921721][ T9] usb 5-1: USB disconnect, device number 117 [ 1447.755112][T13155] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1447.987692][T13155] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1447.999638][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.999699][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.034718][T13155] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.067898][T13155] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1448.087496][T13155] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1448.106797][T13155] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1448.129221][T13155] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1448.150277][T13155] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1448.166858][T13155] usb 5-1: string descriptor 0 read error: -22 [ 1448.177180][T13155] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1448.198417][T13155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.204377][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1448.417930][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1448.436214][ T9] usb 1-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 1448.461291][T13155] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 1448.464728][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1448.486196][ T9] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1448.497452][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1448.516817][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1448.532276][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1448.550909][ T9] usb 1-1: Manufacturer: syz [ 1448.566835][ T9] usb 1-1: config 0 descriptor?? [ 1448.901404][T13155] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1449.512496][T21937] syzkaller0: entered promiscuous mode [ 1449.518076][T21937] syzkaller0: entered allmulticast mode [ 1450.684402][T13548] usb 5-1: USB disconnect, device number 118 [ 1451.161892][T17672] usb 1-1: USB disconnect, device number 70 [ 1451.293481][T13548] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1451.475245][T13548] usb 5-1: device descriptor read/64, error -71 [ 1451.763649][T13548] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1451.945386][T13548] usb 5-1: device descriptor read/64, error -71 [ 1452.063144][ T5818] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1452.084386][T13548] usb usb5-port1: attempt power cycle [ 1452.276874][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 1452.286746][ T5818] usb 4-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1452.297504][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1452.311895][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1452.323753][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1452.336870][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.351154][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1452.360516][ T5818] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1452.368684][ T5818] usb 4-1: Manufacturer: syz [ 1452.377068][ T5818] usb 4-1: config 0 descriptor?? [ 1452.523990][T13548] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1452.566297][T13548] usb 5-1: device descriptor read/8, error -71 [ 1452.647624][ T967] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1452.704466][ T5818] rc_core: IR keymap rc-hauppauge not found [ 1452.715374][ T5818] Registered IR keymap rc-empty [ 1452.725753][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1452.769958][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1452.817960][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1452.833349][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 1452.851953][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1452.854425][T13548] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1452.877999][ T967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1452.887670][ T967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.898094][ T967] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1452.908730][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1452.916180][T13548] usb 5-1: device descriptor read/8, error -71 [ 1452.928909][ T967] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1452.950164][ T967] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1452.959086][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1452.971514][ T967] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1452.992902][ T967] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1453.003908][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1453.011071][ T967] usb 1-1: string descriptor 0 read error: -22 [ 1453.019257][ T967] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1453.030745][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.046771][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1453.068002][T13548] usb usb5-port1: unable to enumerate USB device [ 1453.100064][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1453.132863][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1453.169055][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1453.218274][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1453.252311][ T5818] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1453.281403][ T967] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1453.316568][ T5818] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1453.327430][ T5818] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1453.346949][ T5818] usb 4-1: USB disconnect, device number 124 [ 1453.726467][ T967] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1454.083268][ T5818] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1454.158930][ T967] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1454.275959][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 1454.293714][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1454.303600][ T5818] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1454.313500][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1454.325076][ T5818] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1454.338492][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.346733][ T5818] usb 3-1: Product: syz [ 1454.355490][ T5818] usb 3-1: Manufacturer: syz [ 1454.360580][ T5818] usb 3-1: SerialNumber: syz [ 1454.370071][ T5818] usb 3-1: config 0 descriptor?? [ 1454.382988][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 1454.397020][ T967] usb 4-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 1454.419713][ T967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1454.441409][ T967] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1454.452853][ T967] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.473332][ T967] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1454.493559][ T967] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1454.506029][ T967] usb 4-1: Manufacturer: syz [ 1454.523220][ T967] usb 4-1: config 0 descriptor?? [ 1454.823965][ T5818] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1454.831403][ T5818] gs_usb: probe of 3-1:0.0 failed with error -121 [ 1455.509906][T13548] usb 1-1: USB disconnect, device number 71 [ 1455.804931][T22004] team0: Unable to change to the same mode the team is in [ 1457.012247][ T5818] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1457.033189][ T967] usb 3-1: USB disconnect, device number 22 [ 1457.098319][T17672] usb 4-1: USB disconnect, device number 125 [ 1457.112562][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4711'. [ 1457.228365][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1457.261944][ T5818] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1457.273345][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.315613][ T5818] usb 1-1: config 0 descriptor?? [ 1457.348186][ T5818] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1457.543494][T22028] team0: Mode changed to "loadbalance" [ 1457.591876][ T967] usb 1-1: USB disconnect, device number 72 [ 1458.220257][ T967] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1458.294973][ T5818] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1458.449426][ T967] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1458.466029][ T967] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1458.486077][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.498265][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 1458.507064][ T967] usb 1-1: config 0 descriptor?? [ 1458.525384][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1458.529232][ T967] aiptek 1-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1458.554778][ T5818] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1458.564758][ T967] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1458.597176][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1458.610764][ T5818] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1458.620372][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.636994][ T5818] usb 3-1: Product: syz [ 1458.641210][ T5818] usb 3-1: Manufacturer: syz [ 1458.645890][ T5818] usb 3-1: SerialNumber: syz [ 1458.664046][ T5818] usb 3-1: config 0 descriptor?? [ 1458.930015][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1459.064875][T17672] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1459.106066][ T5818] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1459.113457][ T5818] gs_usb: probe of 3-1:0.0 failed with error -121 [ 1459.261119][T17672] usb 5-1: Using ep0 maxpacket: 16 [ 1459.269966][T17672] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.286135][T17672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1459.299011][T17672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 238, changing to 11 [ 1459.321023][T17672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 51010, setting to 1024 [ 1459.341040][T17672] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1459.358954][T17672] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1459.368781][T17672] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1459.376882][T17672] usb 5-1: Manufacturer: syz [ 1459.384387][T17672] usb 5-1: config 0 descriptor?? [ 1459.426944][T22063] team0: Mode changed to "loadbalance" [ 1459.695579][T17672] rc_core: IR keymap rc-hauppauge not found [ 1459.702341][T17672] Registered IR keymap rc-empty [ 1459.717553][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1459.748930][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1459.781946][T17672] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1459.797261][T17672] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input72 [ 1459.820723][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1459.856140][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1459.889478][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1459.932172][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1459.963990][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1459.997322][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1460.040810][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1460.086031][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1460.123226][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1460.169907][T17672] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1460.215209][T17672] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1460.226209][T17672] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1460.249857][T17672] usb 5-1: USB disconnect, device number 123 [ 1460.799959][T22078] syzkaller0: entered promiscuous mode [ 1460.805946][T22078] syzkaller0: entered allmulticast mode [ 1461.035139][ T967] usb 1-1: USB disconnect, device number 73 [ 1461.255316][ T5818] usb 3-1: USB disconnect, device number 23 [ 1461.436914][T22089] team0: Unable to change to the same mode the team is in [ 1461.851028][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4740'. [ 1462.132770][ T5783] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1462.354798][ T5783] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1462.366744][ T5783] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1462.380491][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.396533][ T5783] usb 3-1: config 0 descriptor?? [ 1462.408068][ T5783] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1462.463765][ T967] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1462.628176][ T5783] usb 3-1: USB disconnect, device number 24 [ 1462.656290][ T967] usb 4-1: Using ep0 maxpacket: 32 [ 1462.668237][ T967] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1462.678241][ T967] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1462.688034][ T967] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1462.698693][ T967] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1462.723411][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.741800][ T967] usb 4-1: Product: syz [ 1462.748300][ T967] usb 4-1: Manufacturer: syz [ 1462.753815][ T967] usb 4-1: SerialNumber: syz [ 1462.761796][ T967] usb 4-1: config 0 descriptor?? [ 1463.220535][ T967] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1463.239319][T22126] syzkaller0: entered promiscuous mode [ 1463.245140][T22126] syzkaller0: entered allmulticast mode [ 1463.286857][ T5783] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1463.441893][ T967] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1463.461198][ T967] gs_usb: probe of 4-1:0.0 failed with error -32 [ 1463.519422][ T5783] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1463.530488][ T5783] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1463.539752][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.551702][ T5783] usb 3-1: config 0 descriptor?? [ 1463.563746][ T5783] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1463.586808][ T5783] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1465.261130][T22157] syzkaller0: entered promiscuous mode [ 1465.267144][T22157] syzkaller0: entered allmulticast mode [ 1465.418168][ T5783] usb 4-1: USB disconnect, device number 126 [ 1466.046967][T17672] usb 3-1: USB disconnect, device number 25 [ 1466.532931][T22190] syzkaller0: entered promiscuous mode [ 1466.547951][T22190] syzkaller0: entered allmulticast mode [ 1466.921374][ T23] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1467.135068][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1467.142409][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.168549][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1467.199638][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 238, changing to 11 [ 1467.221907][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 51010, setting to 1024 [ 1467.246923][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1467.283191][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1467.306065][ T23] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1467.334452][ T23] usb 4-1: Manufacturer: syz [ 1467.357264][ T23] usb 4-1: config 0 descriptor?? [ 1467.684149][ T23] rc_core: IR keymap rc-hauppauge not found [ 1467.705382][ T23] Registered IR keymap rc-empty [ 1467.712492][ T5818] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1467.731059][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.766031][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.810093][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1467.835893][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 1467.880890][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.902682][T22220] syzkaller0: entered promiscuous mode [ 1467.910114][T22220] syzkaller0: entered allmulticast mode [ 1467.928720][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.937311][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.956418][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.977155][ T5818] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1467.990180][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.996891][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.013797][ T5818] usb 5-1: config 0 descriptor?? [ 1468.043485][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1468.076080][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1468.108320][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1468.144855][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1468.207703][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1468.247108][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1468.268182][ T5818] usbhid 5-1:0.0: can't add hid device: -71 [ 1468.274316][ T5818] usbhid: probe of 5-1:0.0 failed with error -71 [ 1468.294324][ T23] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1468.318296][ T5818] usb 5-1: USB disconnect, device number 124 [ 1468.356072][ T23] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1468.387191][ T23] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1468.412855][ T23] usb 4-1: USB disconnect, device number 127 [ 1468.898795][ T5818] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1469.117914][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.155694][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.186202][ T5818] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1469.213436][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.275197][ T5818] usb 5-1: config 0 descriptor?? [ 1469.512972][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1469.523476][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1469.534274][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1469.557710][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1469.565614][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1469.576741][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1469.721155][T15879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.876421][T15879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.887117][T22246] tipc: Failed to remove unknown binding: 66,0,0/0:137737223/137737225 [ 1469.887276][T22246] tipc: Failed to remove unknown binding: 66,0,0/0:137737223/137737224 [ 1469.888856][T22246] tipc: Failed to remove unknown binding: 66,0,0/0:137737223/137737225 [ 1469.918551][T22246] tipc: Failed to remove unknown binding: 66,0,0/0:137737223/137737224 [ 1470.047773][T15879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.164243][T15879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.206328][ T5818] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1470.232149][T22239] chnl_net:caif_netlink_parms(): no params data found [ 1470.240479][ T5818] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input75 [ 1470.278364][ T5818] input: failed to attach handler kbd to device input75, error: -5 [ 1470.367519][ T5818] usb 5-1: USB disconnect, device number 125 [ 1470.456795][T22255] syzkaller0: entered promiscuous mode [ 1470.483463][T22255] syzkaller0: entered allmulticast mode [ 1470.595444][T22239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.602873][T22239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.610731][T22239] bridge_slave_0: entered allmulticast mode [ 1470.618318][T22239] bridge_slave_0: entered promiscuous mode [ 1470.628744][T22239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.636153][T22239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.643472][T22239] bridge_slave_1: entered allmulticast mode [ 1470.650992][T22239] bridge_slave_1: entered promiscuous mode [ 1470.821761][T22239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.859827][T22239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.016181][T22239] team0: Port device team_slave_0 added [ 1471.052252][T22239] team0: Port device team_slave_1 added [ 1471.308440][T22239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.325344][T22239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.387103][T22239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.518466][T22239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.525484][T22239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.622121][T22239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.763672][T11378] Bluetooth: hci2: command tx timeout [ 1471.946261][T22239] hsr_slave_0: entered promiscuous mode [ 1471.954949][T22239] hsr_slave_1: entered promiscuous mode [ 1471.973607][T22239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1471.981703][T22239] Cannot create hsr debugfs directory [ 1472.928848][ T5818] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1473.164191][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1473.197572][ T5818] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1473.217505][T15879] hsr_slave_0: left promiscuous mode [ 1473.221846][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.266419][T15879] hsr_slave_1: left promiscuous mode [ 1473.268263][ T5818] usb 3-1: config 0 descriptor?? [ 1473.319745][ T5818] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1473.376001][T15879] veth1_macvtap: left promiscuous mode [ 1473.389377][T15879] veth0_macvtap: left promiscuous mode [ 1473.396499][T15879] veth1_vlan: left promiscuous mode [ 1473.420692][T15879] veth0_vlan: left promiscuous mode [ 1473.550764][ T5818] usb 3-1: USB disconnect, device number 26 [ 1473.987123][T11378] Bluetooth: hci2: command tx timeout [ 1474.164551][ T5818] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1474.388613][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1474.405499][ T5818] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1474.419512][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.440853][ T5818] usb 3-1: config 0 descriptor?? [ 1474.464477][ T5818] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1474.477538][ T5818] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1475.224685][T15879] bond0 (unregistering): Released all slaves [ 1475.973522][T22239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1475.994336][T22239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1476.014954][T22239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1476.038739][T22239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1476.210427][T11378] Bluetooth: hci2: command tx timeout [ 1476.242750][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1476.267123][T22239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.293837][T22239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.312525][T15891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.319706][T15891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.345407][T15890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.352633][T15890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.467407][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1476.480436][ T9] usb 1-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1476.505771][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1476.538573][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1476.572327][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1476.594353][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1476.619362][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1476.639977][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1476.658953][ T9] usb 1-1: Manufacturer: syz [ 1476.675457][ T9] usb 1-1: config 0 descriptor?? [ 1476.946122][T22239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.033963][T13548] usb 3-1: USB disconnect, device number 27 [ 1477.092868][ T9] rc_core: IR keymap rc-hauppauge not found [ 1477.106980][ T9] Registered IR keymap rc-empty [ 1477.121762][T22239] veth0_vlan: entered promiscuous mode [ 1477.123080][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.152225][T22239] veth1_vlan: entered promiscuous mode [ 1477.197392][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.241607][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1477.266240][T22239] veth0_macvtap: entered promiscuous mode [ 1477.289456][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input77 [ 1477.306247][T22239] veth1_macvtap: entered promiscuous mode [ 1477.354351][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.402749][T22239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1477.410460][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.446500][T22239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1477.451490][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.482990][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.498247][T22239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.527008][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.531370][T22239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.568354][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.569152][T22239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.613118][T22239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.640181][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.687562][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.752756][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.818391][ T9] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1477.869112][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1477.886248][T15891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.907875][T15891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.915950][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1477.987745][ T9] usb 1-1: USB disconnect, device number 74 [ 1478.098311][T12680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.122080][T12680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.433875][T11378] Bluetooth: hci2: command tx timeout [ 1480.247935][ T23] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1480.454289][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1480.463503][ T23] usb 5-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1480.476012][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1480.489392][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1480.503731][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1480.514373][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1480.535546][ T23] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1480.545288][ T23] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1480.554033][ T23] usb 5-1: Manufacturer: syz [ 1480.563205][ T23] usb 5-1: config 0 descriptor?? [ 1480.604582][T22413] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.613514][T22413] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.626478][T22413] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.635399][T22413] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.775594][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1480.807819][T22455] syzkaller0: entered promiscuous mode [ 1480.813371][T22455] syzkaller0: entered allmulticast mode [ 1480.946647][ T23] rc_core: IR keymap rc-hauppauge not found [ 1480.961958][ T23] Registered IR keymap rc-empty [ 1480.971617][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1480.988080][T22468] team0: Mode changed to "loadbalance" [ 1481.020925][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.064311][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1481.100905][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input78 [ 1481.127117][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.171414][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.213624][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.245598][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.277870][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.309551][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.352738][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.395147][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.442801][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.482735][ T23] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1481.539728][ T23] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1481.563388][ T23] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1481.602069][ T23] usb 5-1: USB disconnect, device number 126 [ 1482.381719][ T967] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1482.581429][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 1482.589497][ T967] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1482.603302][T15388] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1482.611074][ T967] usb 3-1: config 0 has no interface number 0 [ 1482.619843][ T967] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1482.647366][ T967] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1482.666580][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.686131][ T967] usb 3-1: Product: syz [ 1482.693655][ T967] usb 3-1: Manufacturer: syz [ 1482.709302][ T967] usb 3-1: SerialNumber: syz [ 1482.721590][ T967] usb 3-1: config 0 descriptor?? [ 1482.733916][T22488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1482.819615][T15388] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.837373][T15388] usb 1-1: config 0 has no interfaces? [ 1482.860212][T15388] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1482.878359][T15388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1482.894655][T15388] usb 1-1: Product: syz [ 1482.899450][T15388] usb 1-1: Manufacturer: syz [ 1482.909138][T15388] usb 1-1: SerialNumber: syz [ 1482.927857][T15388] usb 1-1: config 0 descriptor?? [ 1482.968205][T22488] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1483.117095][T22496] tipc: Resetting bearer [ 1483.191141][T17672] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1483.202450][ T967] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1483.216598][ T967] asix: probe of 3-1:0.188 failed with error -61 [ 1483.385270][T17672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.399118][T17672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.410714][T17672] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1483.424901][T17672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.435804][T17672] usb 4-1: config 0 descriptor?? [ 1483.679077][T17672] usbhid 4-1:0.0: can't add hid device: -71 [ 1483.689799][T17672] usbhid: probe of 4-1:0.0 failed with error -71 [ 1483.702151][T17672] usb 4-1: USB disconnect, device number 2 [ 1484.132225][T22496] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.141175][T22496] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.151253][T22496] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.160427][T22496] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.313318][T17672] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1484.330980][T22509] syzkaller0: entered promiscuous mode [ 1484.337949][T22509] syzkaller0: entered allmulticast mode [ 1484.517862][T17672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.528921][T17672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.539469][T17672] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1484.548880][T17672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.563502][T17672] usb 4-1: config 0 descriptor?? [ 1485.276176][ T23] usb 3-1: USB disconnect, device number 28 [ 1485.455494][T17672] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1485.482166][T17672] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input79 [ 1485.491316][ T9] usb 1-1: USB disconnect, device number 75 [ 1485.525671][T17672] input: failed to attach handler kbd to device input79, error: -5 [ 1485.563782][T17672] usb 4-1: USB disconnect, device number 3 [ 1486.975140][ T23] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1487.092173][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1487.180590][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1487.187549][ T23] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1487.196000][ T23] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1487.204875][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1487.213945][ T23] usb 3-1: config 1 has no interface number 0 [ 1487.220105][ T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1487.231234][ T23] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1487.244301][ T23] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1487.253437][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.275388][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1487.295368][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1487.302696][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.313150][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1487.327528][T13548] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1487.335569][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1487.354557][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.363645][ T9] usb 4-1: Product: syz [ 1487.368380][ T9] usb 4-1: Manufacturer: syz [ 1487.373323][ T9] usb 4-1: SerialNumber: syz [ 1487.489292][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1487.551819][T13548] usb 5-1: Using ep0 maxpacket: 32 [ 1487.561770][T13548] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1487.570071][T13548] usb 5-1: config 0 has no interface number 0 [ 1487.577101][T13548] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1487.592890][T13548] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1487.609705][ T9] usb 4-1: 0:2 : does not exist [ 1487.615899][T13548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.623938][T13548] usb 5-1: Product: syz [ 1487.635046][T13548] usb 5-1: Manufacturer: syz [ 1487.643061][T13548] usb 5-1: SerialNumber: syz [ 1487.644538][ T9] usb 4-1: USB disconnect, device number 4 [ 1487.661020][T13548] usb 5-1: config 0 descriptor?? [ 1487.670329][T22537] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1487.718009][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1487.734116][T17672] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1487.898496][T22537] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1487.932348][T17672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.942759][T17672] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1487.959232][T17672] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1487.962071][ T9] usb 3-1: USB disconnect, device number 29 [ 1487.968487][T17672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1487.968514][T17672] usb 1-1: Product: syz [ 1487.968531][T17672] usb 1-1: Manufacturer: syz [ 1487.968548][T17672] usb 1-1: SerialNumber: syz [ 1487.997829][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1488.122881][T13548] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1488.134286][T13548] asix: probe of 5-1:0.188 failed with error -61 [ 1488.277238][T22541] syzkaller0: entered promiscuous mode [ 1488.282948][T22541] syzkaller0: entered allmulticast mode [ 1488.691680][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4846'. [ 1489.734086][T13548] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1489.954612][T13548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.966596][T13548] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1489.980104][T13548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.994647][T13548] usb 4-1: config 0 descriptor?? [ 1490.241319][T13548] usbhid 4-1:0.0: can't add hid device: -71 [ 1490.262433][T13548] usbhid: probe of 4-1:0.0 failed with error -71 [ 1490.275397][T13548] usb 4-1: USB disconnect, device number 5 [ 1490.303609][T17672] usb 5-1: USB disconnect, device number 127 [ 1490.646053][ T9] usb 1-1: USB disconnect, device number 76 [ 1490.919173][T13548] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1490.943592][T22570] syzkaller0: entered promiscuous mode [ 1490.949477][T22570] syzkaller0: entered allmulticast mode [ 1491.125656][T13548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.152792][T13548] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1491.169609][T13548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.185395][T22578] team0: Unable to change to the same mode the team is in [ 1491.201584][T13548] usb 4-1: config 0 descriptor?? [ 1491.613824][T17672] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1491.848937][T17672] usb 3-1: Using ep0 maxpacket: 32 [ 1491.878591][T17672] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1491.893099][T17672] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1491.931276][T17672] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1491.951888][T17672] usb 3-1: config 1 has no interface number 0 [ 1491.958637][T17672] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1491.988052][T17672] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1492.008593][T17672] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1492.029182][T17672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.058868][T17672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1492.102348][T13548] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1492.121139][T13548] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input80 [ 1492.286716][T17672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1492.501074][T13548] usb 4-1: USB disconnect, device number 6 [ 1492.507103][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1492.776555][T17672] usb 3-1: USB disconnect, device number 30 [ 1492.795038][T17672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1493.257285][T22616] team0: No ports can be present during mode change [ 1494.457359][ T23] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1494.649764][T22462] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1494.671013][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1494.696328][ T23] usb 1-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1494.716408][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1494.741585][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1494.764742][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1494.783957][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1494.819968][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1494.831260][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1494.840384][ T23] usb 1-1: Manufacturer: syz [ 1494.874314][ T23] usb 1-1: config 0 descriptor?? [ 1494.879589][T22462] usb 4-1: Using ep0 maxpacket: 32 [ 1494.898472][T22462] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1494.910976][T22462] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1494.945437][T22462] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1494.982519][T22462] usb 4-1: config 1 has no interface number 0 [ 1494.997026][T22462] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1495.011915][T22462] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1495.026475][T22462] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1495.039911][T22462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.065623][T22462] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1495.259176][ T23] rc_core: IR keymap rc-hauppauge not found [ 1495.283879][ T23] Registered IR keymap rc-empty [ 1495.311040][T22462] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1495.318059][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.355562][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.399179][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1495.444382][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input81 [ 1495.498664][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.568999][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.611918][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.652306][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.698037][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.715678][T22665] ip6gre1: entered promiscuous mode [ 1495.721555][T22665] ip6gre1: entered allmulticast mode [ 1495.730785][T13925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1495.740630][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.745764][T22665] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1495.760269][T13925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1495.772880][T13548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1495.785035][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.800659][T13548] usb 4-1: USB disconnect, device number 7 [ 1495.817338][T13548] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1495.825883][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.868874][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.919470][ T23] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1495.965859][ T23] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1495.977971][ T23] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1496.000557][ T23] usb 1-1: USB disconnect, device number 77 [ 1496.200018][T13548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1496.477596][ T5783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1496.819621][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1497.025116][ T23] usb 4-1: config 0 has no interfaces? [ 1497.036559][ T23] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1497.056969][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.065040][ T23] usb 4-1: Product: syz [ 1497.085758][ T23] usb 4-1: Manufacturer: syz [ 1497.098812][ T23] usb 4-1: SerialNumber: syz [ 1497.116905][ T23] usb 4-1: config 0 descriptor?? [ 1497.413224][T17672] usb 4-1: USB disconnect, device number 8 [ 1497.728167][ T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1497.933502][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.944534][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1497.953723][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.964416][ T23] usb 3-1: config 0 descriptor?? [ 1498.091676][ T5818] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1498.199403][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 1498.208058][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 1498.222909][ T23] usb 3-1: USB disconnect, device number 31 [ 1498.294698][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 1498.307250][ T5818] usb 1-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 1498.326833][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1498.338113][T17672] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1498.345775][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 20120, setting to 1024 [ 1498.358990][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1498.369022][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1498.383808][ T5818] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1498.399611][ T5818] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1498.407806][ T5818] usb 1-1: Manufacturer: syz [ 1498.419430][ T5818] usb 1-1: config 0 descriptor?? [ 1498.542885][T17672] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.572700][T17672] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1498.597120][T17672] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1498.616067][T17672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1498.624224][T17672] usb 4-1: Product: syz [ 1498.636744][T17672] usb 4-1: Manufacturer: syz [ 1498.641430][T17672] usb 4-1: SerialNumber: syz [ 1498.766403][ T5818] rc_core: IR keymap rc-hauppauge not found [ 1498.772340][ T5818] Registered IR keymap rc-empty [ 1498.786739][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1498.818774][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1498.839842][ T23] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1498.862199][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1498.884495][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input82 [ 1498.918559][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1498.968389][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.001122][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.035597][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.053335][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.079326][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1499.093839][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.107391][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.115621][ T23] usb 3-1: config 0 descriptor?? [ 1499.140204][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.173530][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.225094][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.257147][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.289491][ T5818] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1499.330425][ T5818] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1499.352684][ T5818] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1499.373975][ T5818] usb 1-1: USB disconnect, device number 78 [ 1499.898337][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1500.016390][ T23] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1500.025231][ T23] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input83 [ 1500.165414][ T5818] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1500.374326][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 1500.388052][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.400538][ T5818] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1500.423492][ T5783] usb 3-1: USB disconnect, device number 32 [ 1500.423645][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1500.441559][ T5818] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1500.453436][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.453465][ T5818] usb 1-1: Product: syz [ 1500.453484][ T5818] usb 1-1: Manufacturer: syz [ 1500.453501][ T5818] usb 1-1: SerialNumber: syz [ 1500.702527][ T5818] usb 1-1: 0:2 : does not exist [ 1500.720324][ T5818] usb 1-1: unit 17 not found! [ 1500.743032][ T5818] usb 1-1: USB disconnect, device number 79 [ 1500.788038][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.247248][ T9] usb 4-1: USB disconnect, device number 9 [ 1502.891215][T13548] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1502.897320][T22748] syzkaller0: entered promiscuous mode [ 1502.904649][T22748] syzkaller0: entered allmulticast mode [ 1503.076202][ T5818] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1503.143873][T13548] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1503.173422][T13548] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1503.186608][T13548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1503.201275][T13548] usb 4-1: Product: syz [ 1503.205489][T13548] usb 4-1: Manufacturer: syz [ 1503.229589][T13548] usb 4-1: SerialNumber: syz [ 1503.280343][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 1503.299739][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.318950][ T5818] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1503.338263][ T5818] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1503.362326][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.370392][ T5818] usb 1-1: Product: syz [ 1503.379233][ T5818] usb 1-1: Manufacturer: syz [ 1503.383954][ T5818] usb 1-1: SerialNumber: syz [ 1503.650308][ T5818] usb 1-1: 0:2 : does not exist [ 1503.655900][ T5818] usb 1-1: unit 17 not found! [ 1503.682454][ T5818] usb 1-1: USB disconnect, device number 80 [ 1503.740064][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1504.354599][T22768] syzkaller0: entered promiscuous mode [ 1504.360833][T22768] syzkaller0: entered allmulticast mode [ 1504.633510][T13548] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1504.748861][T22772] syzkaller0: entered promiscuous mode [ 1504.754635][T22772] syzkaller0: entered allmulticast mode [ 1504.847467][T13548] usb 1-1: Using ep0 maxpacket: 32 [ 1504.866020][T13548] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1504.889514][T13548] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1504.911427][T13548] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1504.920533][T13548] usb 1-1: config 1 has no interface number 0 [ 1504.933103][T13548] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.951394][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 1504.986439][T13548] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1505.018461][T13548] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1505.039717][T13548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.062649][T13548] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1505.284774][T13548] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1505.749252][T13548] usb 1-1: USB disconnect, device number 81 [ 1505.766960][T13548] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1505.806742][ T5783] usb 4-1: USB disconnect, device number 10 [ 1506.019277][T22789] syzkaller0: entered promiscuous mode [ 1506.025538][T22789] syzkaller0: entered allmulticast mode [ 1506.322418][ T5783] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1506.477800][T22798] syzkaller0: entered promiscuous mode [ 1506.492370][T22798] syzkaller0: entered allmulticast mode [ 1506.536466][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 1506.545707][ T5783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.567811][ T5783] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1506.586116][ T5783] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1506.595615][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.610175][ T5783] usb 4-1: Product: syz [ 1506.630373][ T5783] usb 4-1: Manufacturer: syz [ 1506.639836][ T5783] usb 4-1: SerialNumber: syz [ 1506.766489][T22803] syzkaller0: entered promiscuous mode [ 1506.774805][T22803] syzkaller0: entered allmulticast mode [ 1506.880621][ T5783] usb 4-1: 0:2 : does not exist [ 1506.895587][ T5783] usb 4-1: unit 17 not found! [ 1506.944164][ T5783] usb 4-1: USB disconnect, device number 11 [ 1507.036469][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.368850][T22814] syzkaller0: entered promiscuous mode [ 1507.385973][T22814] syzkaller0: entered allmulticast mode [ 1507.616237][ T5783] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1507.704136][T22820] syzkaller0: entered promiscuous mode [ 1507.709940][T22820] syzkaller0: entered allmulticast mode [ 1507.842539][ T5783] usb 5-1: Using ep0 maxpacket: 32 [ 1507.855002][ T5783] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1507.872490][ T5783] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1507.896417][ T5783] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1507.916327][ T5783] usb 5-1: config 1 has no interface number 0 [ 1507.923933][ T5783] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1507.951055][ T5783] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1507.975809][ T5783] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1508.006796][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.038573][ T5783] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1508.194696][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1508.259343][ T5783] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1508.715140][ T5783] usb 5-1: USB disconnect, device number 2 [ 1508.735083][ T5783] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1509.786100][T15387] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1509.918227][T17672] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1509.990286][T15387] usb 5-1: Using ep0 maxpacket: 16 [ 1510.002379][T15387] usb 5-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 1510.021081][T15387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1510.032662][T15387] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x36, skipping [ 1510.043829][T15387] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1510.059177][T15387] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1510.068841][T15387] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1510.077408][T15387] usb 5-1: Manufacturer: syz [ 1510.084862][T15387] usb 5-1: config 0 descriptor?? [ 1510.127586][T17672] usb 3-1: config 0 has no interfaces? [ 1510.145273][T17672] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1510.166602][T17672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.186322][T17672] usb 3-1: Product: syz [ 1510.195455][T17672] usb 3-1: Manufacturer: syz [ 1510.202725][T17672] usb 3-1: SerialNumber: syz [ 1510.228069][T17672] usb 3-1: config 0 descriptor?? [ 1510.454086][ T5818] usb 3-1: USB disconnect, device number 33 [ 1512.668469][T17672] usb 5-1: USB disconnect, device number 3 [ 1512.822062][ T5783] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1513.025486][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 1513.057832][ T5783] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1513.085257][ T5783] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1513.112522][ T5783] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1513.129632][ T5783] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1513.139956][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.148119][ T5783] usb 4-1: Product: syz [ 1513.152555][ T5783] usb 4-1: Manufacturer: syz [ 1513.157424][ T5783] usb 4-1: SerialNumber: syz [ 1513.182223][ T5783] usb 4-1: config 0 descriptor?? [ 1513.192516][T22893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4965'. [ 1513.650863][ T5783] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1513.671367][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1513.680313][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1513.872190][ T5783] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1513.900462][ T5783] gs_usb: probe of 4-1:0.0 failed with error -121 [ 1515.034570][ T5818] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1515.248081][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 1515.262102][ T5818] usb 3-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 1515.289612][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1515.312458][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x36, skipping [ 1515.334868][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1515.363780][ T5818] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1515.373096][ T5818] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1515.390574][ T5818] usb 3-1: Manufacturer: syz [ 1515.405594][ T5818] usb 3-1: config 0 descriptor?? [ 1515.787946][T13548] usb 4-1: USB disconnect, device number 12 [ 1515.948149][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4975'. [ 1517.072398][T22938] syzkaller0: entered promiscuous mode [ 1517.078110][T22938] syzkaller0: entered allmulticast mode [ 1517.923816][ T5818] usb 3-1: USB disconnect, device number 34 [ 1518.444379][ T5818] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1518.653184][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 1518.673723][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1518.692621][ T5818] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1518.712900][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1518.739881][ T5818] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1518.758199][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.778265][ T5818] usb 3-1: Product: syz [ 1518.782628][ T5818] usb 3-1: Manufacturer: syz [ 1518.803556][ T5818] usb 3-1: SerialNumber: syz [ 1518.826042][ T5818] usb 3-1: config 0 descriptor?? [ 1519.298823][ T5818] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1519.516965][ T5818] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1519.527899][ T5818] gs_usb: probe of 3-1:0.0 failed with error -121 [ 1520.312202][T22978] macvtap1: entered promiscuous mode [ 1520.317714][T22978] vlan0: entered promiscuous mode [ 1520.326515][T22978] vlan0: left promiscuous mode [ 1520.464764][ T5818] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1520.670529][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.689210][ T5818] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1520.706686][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.730790][ T5818] usb 1-1: config 0 descriptor?? [ 1520.854973][T22987] syzkaller0: entered promiscuous mode [ 1520.860821][T22987] syzkaller0: entered allmulticast mode [ 1520.977734][ T5818] usbhid 1-1:0.0: can't add hid device: -71 [ 1520.983891][ T5818] usbhid: probe of 1-1:0.0 failed with error -71 [ 1521.025499][ T5818] usb 1-1: USB disconnect, device number 82 [ 1521.263106][T13548] usb 3-1: USB disconnect, device number 35 [ 1521.593459][ T5818] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1521.801410][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.813076][ T5818] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1521.832584][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.862053][ T5818] usb 1-1: config 0 descriptor?? [ 1522.742481][ T5818] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1522.754095][ T5818] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input84 [ 1523.121117][ T23] usb 1-1: USB disconnect, device number 83 [ 1523.127269][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1523.805806][T23006] syzkaller0: entered promiscuous mode [ 1523.812198][T23006] syzkaller0: entered allmulticast mode [ 1523.911692][T23004] syzkaller0: entered promiscuous mode [ 1523.922117][T23004] syzkaller0: entered allmulticast mode [ 1524.073494][T23013] macvtap1: entered promiscuous mode [ 1524.079027][T23013] vlan0: entered promiscuous mode [ 1524.090711][T23013] vlan0: left promiscuous mode [ 1524.584224][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5009'. [ 1524.847331][T13548] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1525.050606][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1525.074206][T13548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.092018][T13548] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1525.121203][T13548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.151916][T13548] usb 3-1: config 0 descriptor?? [ 1525.252285][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1525.264961][ T23] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1525.278781][ T23] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1525.293608][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1525.306900][ T23] usb 4-1: config 1 has no interface number 0 [ 1525.313103][ T23] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1525.325618][ T23] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1525.339199][ T23] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1525.348287][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.364549][ T23] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1525.400133][T13548] usbhid 3-1:0.0: can't add hid device: -71 [ 1525.406438][T13548] usbhid: probe of 3-1:0.0 failed with error -71 [ 1525.423245][T13548] usb 3-1: USB disconnect, device number 36 [ 1525.557724][T23040] macvtap1: entered promiscuous mode [ 1525.563829][T23040] vlan0: entered promiscuous mode [ 1525.584396][T23040] vlan0: left promiscuous mode [ 1525.590603][ T23] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1526.042782][ T23] usb 4-1: USB disconnect, device number 13 [ 1526.057602][ T23] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1526.065844][T15387] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1526.087360][T13548] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1526.271637][T15387] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1526.286247][T15387] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1526.298391][T15387] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1526.319016][T13548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.333253][T13548] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1526.342649][T13548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.352611][T15387] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1526.361895][T15387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1526.371389][T15387] usb 1-1: Product: syz [ 1526.375611][T15387] usb 1-1: Manufacturer: syz [ 1526.381437][T13548] usb 3-1: config 0 descriptor?? [ 1526.387548][T15387] usb 1-1: SerialNumber: syz [ 1526.638181][T15387] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1526.862828][ T5818] usb 1-1: USB disconnect, device number 84 [ 1526.877689][ T5818] usblp0: removed [ 1527.278425][T13548] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1527.287009][T13548] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input85 [ 1527.322064][ C0] ================================================================================ [ 1527.331428][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 1527.340140][ C0] index 1026 is out of range for type 'const int[34]' [ 1527.346938][ C0] CPU: 0 PID: 13548 Comm: kworker/0:5 Not tainted syzkaller #0 [ 1527.354522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1527.364626][ C0] Workqueue: usb_hub_wq hub_event [ 1527.369779][ C0] Call Trace: [ 1527.373155][ C0] [ 1527.376085][ C0] dump_stack_lvl+0x18c/0x250 [ 1527.380906][ C0] ? show_regs_print_info+0x20/0x20 [ 1527.386195][ C0] ? load_image+0x420/0x420 [ 1527.390787][ C0] ubsan_epilogue+0xa/0x30 [ 1527.395306][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1527.401127][ C0] aiptek_irq+0x1eb8/0x2920 [ 1527.405721][ C0] ? kcov_remote_start+0x8a/0x7e0 [ 1527.410816][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 1527.416625][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 1527.422072][ C0] dummy_timer+0xa40/0x3420 [ 1527.426715][ C0] ? dummy_free_streams+0x520/0x520 [ 1527.431974][ C0] ? dummy_free_streams+0x520/0x520 [ 1527.437255][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1527.442513][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1527.447668][ C0] ? read_tsc+0x9/0x20 [ 1527.451823][ C0] hrtimer_run_softirq+0x177/0x290 [ 1527.457002][ C0] handle_softirqs+0x27d/0x820 [ 1527.461809][ C0] ? read_tsc+0x9/0x20 [ 1527.465923][ C0] ? ktime_get+0x24b/0x280 [ 1527.470408][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1527.475283][ C0] ? do_softirq+0x1a0/0x1a0 [ 1527.479879][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1527.485171][ C0] __irq_exit_rcu+0xd3/0x190 [ 1527.489826][ C0] ? irq_exit_rcu+0x20/0x20 [ 1527.494404][ C0] irq_exit_rcu+0x9/0x20 [ 1527.498705][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1527.504419][ C0] [ 1527.507447][ C0] [ 1527.510467][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1527.516616][ C0] RIP: 0010:unwind_next_frame+0x4ac/0x2990 [ 1527.522488][ C0] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4d 8d 7c 45 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 34 4d 63 27 4d 01 fc 4c 89 e7 4c 89 f6 e8 cf be 4b 00 49 [ 1527.542231][ C0] RSP: 0018:ffffc9000cef6778 EFLAGS: 00000a02 [ 1527.548424][ C0] RAX: 0000000000000000 RBX: ffffffff8ea5d194 RCX: dffffc0000000000 [ 1527.556469][ C0] RDX: ffff888058085a00 RSI: 0000000000039be3 RDI: 0000000000039be9 [ 1527.564494][ C0] RBP: ffffffff8ea5d180 R08: ffffc9000cef6910 R09: 0000000000000007 [ 1527.572522][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000039be3 [ 1527.580556][ C0] R13: ffffffff8ea5d180 R14: ffffffff8215e6c6 R15: ffffffff8ea5d188 [ 1527.588586][ C0] ? sysfs_add_file_mode_ns+0x236/0x2f0 [ 1527.594259][ C0] ? unwind_next_frame+0x2b6/0x2990 [ 1527.599523][ C0] ? sysfs_add_file_mode_ns+0x236/0x2f0 [ 1527.605141][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1527.610765][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1527.616362][ C0] ? stack_trace_save+0x100/0x100 [ 1527.621542][ C0] arch_stack_walk+0x144/0x190 [ 1527.626362][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1527.631969][ C0] stack_trace_save+0xaa/0x100 [ 1527.636803][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1527.641995][ C0] kasan_set_track+0x4e/0x70 [ 1527.646699][ C0] ? kasan_set_track+0x4e/0x70 [ 1527.651511][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1527.656581][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 1527.661924][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 1527.667016][ C0] ? __kernfs_new_node+0xe5/0x7f0 [ 1527.672094][ C0] ? kernfs_new_node+0x14c/0x260 [ 1527.677086][ C0] ? __kernfs_create_file+0x4b/0x2e0 [ 1527.682421][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1527.688077][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1527.692983][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 1527.698169][ C0] kmem_cache_alloc+0x17e/0x2c0 [ 1527.703082][ C0] ? __kernfs_new_node+0xe5/0x7f0 [ 1527.708173][ C0] __kernfs_new_node+0xe5/0x7f0 [ 1527.713095][ C0] ? kernfs_new_node+0x260/0x260 [ 1527.718095][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1527.723881][ C0] ? mutex_unlock+0x10/0x10 [ 1527.728450][ C0] kernfs_new_node+0x14c/0x260 [ 1527.733310][ C0] __kernfs_create_file+0x4b/0x2e0 [ 1527.738483][ C0] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1527.743932][ C0] internal_create_group+0x431/0xd10 [ 1527.749273][ C0] ? rcu_is_watching+0x15/0xb0 [ 1527.754127][ C0] ? sysfs_create_group+0x20/0x20 [ 1527.759212][ C0] ? usb_probe_interface+0x7d2/0xaf0 [ 1527.764675][ C0] sysfs_create_groups+0x59/0x120 [ 1527.769723][ C0] really_probe+0x54c/0xae0 [ 1527.774287][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 1527.779556][ C0] __driver_probe_device+0x1f5/0x390 [ 1527.784901][ C0] driver_probe_device+0x4f/0x420 [ 1527.789978][ C0] __device_attach_driver+0x2ca/0x510 [ 1527.795395][ C0] bus_for_each_drv+0x252/0x2e0 [ 1527.800271][ C0] ? coredump_store+0x90/0x90 [ 1527.805011][ C0] ? bus_find_device+0x300/0x300 [ 1527.810039][ C0] __device_attach+0x2c1/0x420 [ 1527.814870][ C0] ? device_attach+0x20/0x20 [ 1527.819513][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1527.824751][ C0] bus_probe_device+0x180/0x260 [ 1527.829632][ C0] device_add+0x87c/0xc40 [ 1527.834038][ C0] usb_set_configuration+0x1ad0/0x2150 [ 1527.839594][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1527.845100][ C0] usb_probe_device+0x12a/0x260 [ 1527.849997][ C0] ? usb_register_device_driver+0x230/0x230 [ 1527.855910][ C0] really_probe+0x247/0xae0 [ 1527.860456][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 1527.865691][ C0] __driver_probe_device+0x1f5/0x390 [ 1527.871018][ C0] driver_probe_device+0x4f/0x420 [ 1527.876156][ C0] __device_attach_driver+0x2ca/0x510 [ 1527.881585][ C0] bus_for_each_drv+0x252/0x2e0 [ 1527.886484][ C0] ? coredump_store+0x90/0x90 [ 1527.891174][ C0] ? bus_find_device+0x300/0x300 [ 1527.896141][ C0] __device_attach+0x2c1/0x420 [ 1527.900947][ C0] ? device_attach+0x20/0x20 [ 1527.905579][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 1527.910646][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1527.915882][ C0] bus_probe_device+0x180/0x260 [ 1527.920783][ C0] device_add+0x87c/0xc40 [ 1527.925172][ C0] usb_new_device+0x995/0x1550 [ 1527.930016][ C0] ? lock_chain_count+0x20/0x20 [ 1527.934924][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1527.939838][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1527.945084][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1527.950317][ C0] hub_event+0x29d5/0x4a80 [ 1527.954806][ C0] ? hub_post_resume+0x120/0x120 [ 1527.959770][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1527.965211][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1527.970444][ C0] ? process_scheduled_works+0x975/0x1600 [ 1527.976201][ C0] ? process_scheduled_works+0x975/0x1600 [ 1527.981951][ C0] process_scheduled_works+0xa60/0x1600 [ 1527.987553][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1527.993044][ C0] ? assign_work+0x3cc/0x5d0 [ 1527.997671][ C0] worker_thread+0xa5e/0xfe0 [ 1528.001070][ T23] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1528.002276][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1528.014727][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1528.019734][ C0] kthread+0x2fa/0x390 [ 1528.023855][ C0] ? pr_cont_work+0x550/0x550 [ 1528.028594][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1528.033239][ C0] ret_from_fork+0x48/0x80 [ 1528.037709][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1528.042353][ C0] ret_from_fork_asm+0x11/0x20 [ 1528.047227][ C0] [ 1528.050283][ C0] ================================================================================ [ 1528.059619][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1528.066846][ C0] CPU: 0 PID: 13548 Comm: kworker/0:5 Not tainted syzkaller #0 [ 1528.074439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1528.084539][ C0] Workqueue: usb_hub_wq hub_event [ 1528.089713][ C0] Call Trace: [ 1528.093039][ C0] [ 1528.095907][ C0] dump_stack_lvl+0x18c/0x250 [ 1528.100616][ C0] ? show_regs_print_info+0x20/0x20 [ 1528.105872][ C0] ? load_image+0x420/0x420 [ 1528.110404][ C0] panic+0x2ca/0x720 [ 1528.114379][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1528.118971][ C0] check_panic_on_warn+0x84/0xa0 [ 1528.123969][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1528.129754][ C0] aiptek_irq+0x1eb8/0x2920 [ 1528.134321][ C0] ? kcov_remote_start+0x8a/0x7e0 [ 1528.139384][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 1528.145138][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 1528.150544][ C0] dummy_timer+0xa40/0x3420 [ 1528.155148][ C0] ? dummy_free_streams+0x520/0x520 [ 1528.160400][ C0] ? dummy_free_streams+0x520/0x520 [ 1528.165633][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1528.170856][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1528.175998][ C0] ? read_tsc+0x9/0x20 [ 1528.180134][ C0] hrtimer_run_softirq+0x177/0x290 [ 1528.185287][ C0] handle_softirqs+0x27d/0x820 [ 1528.190100][ C0] ? read_tsc+0x9/0x20 [ 1528.194197][ C0] ? ktime_get+0x24b/0x280 [ 1528.198655][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1528.203431][ C0] ? do_softirq+0x1a0/0x1a0 [ 1528.204422][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1528.212329][ T23] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1528.212392][ T23] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1528.212440][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1528.212496][ T23] usb 1-1: config 1 has no interface number 0 [ 1528.212606][ T23] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1528.212671][ T23] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1528.212773][ T23] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1528.214225][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.285739][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1528.292238][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1528.297492][ C0] __irq_exit_rcu+0xd3/0x190 [ 1528.302137][ C0] ? irq_exit_rcu+0x20/0x20 [ 1528.306706][ C0] irq_exit_rcu+0x9/0x20 [ 1528.311017][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1528.316710][ C0] [ 1528.319670][ C0] [ 1528.322635][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1528.328681][ C0] RIP: 0010:unwind_next_frame+0x4ac/0x2990 [ 1528.334533][ C0] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4d 8d 7c 45 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 34 4d 63 27 4d 01 fc 4c 89 e7 4c 89 f6 e8 cf be 4b 00 49 [ 1528.354187][ C0] RSP: 0018:ffffc9000cef6778 EFLAGS: 00000a02 [ 1528.360300][ C0] RAX: 0000000000000000 RBX: ffffffff8ea5d194 RCX: dffffc0000000000 [ 1528.368310][ C0] RDX: ffff888058085a00 RSI: 0000000000039be3 RDI: 0000000000039be9 [ 1528.376314][ C0] RBP: ffffffff8ea5d180 R08: ffffc9000cef6910 R09: 0000000000000007 [ 1528.384320][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: 0000000000039be3 [ 1528.392326][ C0] R13: ffffffff8ea5d180 R14: ffffffff8215e6c6 R15: ffffffff8ea5d188 [ 1528.400596][ C0] ? sysfs_add_file_mode_ns+0x236/0x2f0 [ 1528.406213][ C0] ? unwind_next_frame+0x2b6/0x2990 [ 1528.411462][ C0] ? sysfs_add_file_mode_ns+0x236/0x2f0 [ 1528.417076][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1528.422675][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1528.428271][ C0] ? stack_trace_save+0x100/0x100 [ 1528.433339][ C0] arch_stack_walk+0x144/0x190 [ 1528.438160][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1528.443768][ C0] stack_trace_save+0xaa/0x100 [ 1528.448581][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1528.453741][ C0] kasan_set_track+0x4e/0x70 [ 1528.458391][ C0] ? kasan_set_track+0x4e/0x70 [ 1528.463203][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1528.468272][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 1528.473611][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 1528.478686][ C0] ? __kernfs_new_node+0xe5/0x7f0 [ 1528.483750][ C0] ? kernfs_new_node+0x14c/0x260 [ 1528.488745][ C0] ? __kernfs_create_file+0x4b/0x2e0 [ 1528.494107][ C0] ? sysfs_add_file_mode_ns+0x237/0x2f0 [ 1528.499770][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1528.504687][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 1528.509881][ C0] kmem_cache_alloc+0x17e/0x2c0 [ 1528.514800][ C0] ? __kernfs_new_node+0xe5/0x7f0 [ 1528.519886][ C0] __kernfs_new_node+0xe5/0x7f0 [ 1528.524799][ C0] ? kernfs_new_node+0x260/0x260 [ 1528.529805][ C0] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1528.535491][ C0] ? mutex_unlock+0x10/0x10 [ 1528.540060][ C0] kernfs_new_node+0x14c/0x260 [ 1528.544906][ C0] __kernfs_create_file+0x4b/0x2e0 [ 1528.547245][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1528.556850][ C0] sysfs_add_file_mode_ns+0x237/0x2f0 [ 1528.562295][ C0] internal_create_group+0x431/0xd10 [ 1528.567644][ C0] ? rcu_is_watching+0x15/0xb0 [ 1528.572467][ C0] ? sysfs_create_group+0x20/0x20 [ 1528.577539][ C0] ? usb_probe_interface+0x7d2/0xaf0 [ 1528.582871][ C0] sysfs_create_groups+0x59/0x120 [ 1528.587968][ C0] really_probe+0x54c/0xae0 [ 1528.592521][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 1528.597773][ C0] __driver_probe_device+0x1f5/0x390 [ 1528.603104][ C0] driver_probe_device+0x4f/0x420 [ 1528.608179][ C0] __device_attach_driver+0x2ca/0x510 [ 1528.613603][ C0] bus_for_each_drv+0x252/0x2e0 [ 1528.618500][ C0] ? coredump_store+0x90/0x90 [ 1528.623244][ C0] ? bus_find_device+0x300/0x300 [ 1528.628258][ C0] __device_attach+0x2c1/0x420 [ 1528.633077][ C0] ? device_attach+0x20/0x20 [ 1528.637709][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1528.642969][ C0] bus_probe_device+0x180/0x260 [ 1528.647883][ C0] device_add+0x87c/0xc40 [ 1528.652274][ C0] usb_set_configuration+0x1ad0/0x2150 [ 1528.657828][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1528.663359][ C0] usb_probe_device+0x12a/0x260 [ 1528.668253][ C0] ? usb_register_device_driver+0x230/0x230 [ 1528.674199][ C0] really_probe+0x247/0xae0 [ 1528.678761][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 1528.684007][ C0] __driver_probe_device+0x1f5/0x390 [ 1528.689360][ C0] driver_probe_device+0x4f/0x420 [ 1528.694451][ C0] __device_attach_driver+0x2ca/0x510 [ 1528.699877][ C0] bus_for_each_drv+0x252/0x2e0 [ 1528.704780][ C0] ? coredump_store+0x90/0x90 [ 1528.709512][ C0] ? bus_find_device+0x300/0x300 [ 1528.714508][ C0] __device_attach+0x2c1/0x420 [ 1528.719346][ C0] ? device_attach+0x20/0x20 [ 1528.723988][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 1528.729068][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1528.734327][ C0] bus_probe_device+0x180/0x260 [ 1528.739232][ C0] device_add+0x87c/0xc40 [ 1528.743620][ C0] usb_new_device+0x995/0x1550 [ 1528.748438][ C0] ? lock_chain_count+0x20/0x20 [ 1528.753329][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 1528.758221][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1528.763472][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1528.768728][ C0] hub_event+0x29d5/0x4a80 [ 1528.773243][ C0] ? hub_post_resume+0x120/0x120 [ 1528.778228][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1528.783655][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1528.788918][ C0] ? process_scheduled_works+0x975/0x1600 [ 1528.794697][ C0] ? process_scheduled_works+0x975/0x1600 [ 1528.800471][ C0] process_scheduled_works+0xa60/0x1600 [ 1528.806106][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1528.811632][ C0] ? assign_work+0x3cc/0x5d0 [ 1528.816287][ C0] worker_thread+0xa5e/0xfe0 [ 1528.820951][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1528.825950][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1528.830964][ C0] kthread+0x2fa/0x390 [ 1528.835079][ C0] ? pr_cont_work+0x550/0x550 [ 1528.839825][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1528.844491][ C0] ret_from_fork+0x48/0x80 [ 1528.848961][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1528.853596][ C0] ret_from_fork_asm+0x11/0x20 [ 1528.858432][ C0] [ 1528.862048][ C0] Kernel Offset: disabled [ 1528.866383][ C0] Rebooting in 86400 seconds..