last executing test programs: 1m47.879253894s ago: executing program 4 (id=1742): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x9}], 0x2c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c"], 0xfc}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d105012000020000000109021200"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0x9, 0x1, 'd'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) r10 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r0) 1m44.31492572s ago: executing program 4 (id=1747): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x4b, 0x3, 0x8, 0x5, 0x0, 0x29, 0x3ff, 0x2, 0xfa11, 0x4146}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2141}, {r2, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1001, @empty, 0x0, 0x3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800038004008a"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x20008881) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x3e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x200, 0x240, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x440) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x1, 0xf0, 0x200, 0x9, 0x6, 0x208d, 0x5, 0x80000001, 0x5, 0x4, 0x9, 0x5, 0x1, 0x1, 0x9, 0xa5, 0x5, 0x8000dff, 0xfb, 0x452, 0x1000, 0xb, 0x4}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000040) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000580)="48e2d3471398ef321d689c1798856872f3f1b35ed0ee8a45f46f9e7e2b242fffa342bfc2a1db4f32b111649e81978dcb85aba497104591f16048c522517a814a355f8cfb80777005113b312db6ca01b684c45626dcc87e97536893844f1bc0d11eba1882ef146288891616da40b24be83479781db5adbcbdb1f5124c7b25fe090b1235b742", 0x85}], 0x1, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 1m35.803978951s ago: executing program 4 (id=1763): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/77, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r3}) 1m35.476857537s ago: executing program 4 (id=1766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "8adb03a0b1bb7605", "5922ac9ff30d68ee7692e458bf837c51", "07f94b6b", "763f062c5f2edff2"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4004050}, 0x80) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x5, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, 0x0, 0x25a) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0x7, 0x8, 0x3d54, 0x494e4f4b, [0x0, 0x4], [0x3, 0x5], 0x2023c860d0553049}}) socket(0x11, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001000010025bd7000fedbdf250000", @ANYRES32=r3, @ANYBLOB="14080400030200000c002b8008000100", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 1m34.017562744s ago: executing program 4 (id=1768): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x0) readv(r0, &(0x7f0000002880)=[{0x0}], 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r1, 0xfffff000) 1m33.722308807s ago: executing program 4 (id=1771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(r0, &(0x7f0000000380)='net/udp\x00') getdents(r1, 0xffffffffffffffff, 0x5a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) 1m18.45013263s ago: executing program 32 (id=1771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(r0, &(0x7f0000000380)='net/udp\x00') getdents(r1, 0xffffffffffffffff, 0x5a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) 16.876733848s ago: executing program 0 (id=1950): syz_open_dev$usbfs(0x0, 0x204, 0x2) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x5be5, 0x2, 0x400, 0x5, 0x2d2, 0x94}, 0x9c) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000140)=@secondary) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x87a2f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000390425bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="81b800000000440012800b000100697036856e6c0000340002801400030020010000000000000000000000000000050009deff00000000000100"/67], 0x64}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) lseek(r4, 0x1, 0x0) 12.258763841s ago: executing program 3 (id=1963): socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x10000, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) 11.01379823s ago: executing program 3 (id=1966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) 10.494313719s ago: executing program 3 (id=1968): syz_open_dev$loop(0x0, 0x2, 0x180862) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x4}], 0x1, 0x40000121, 0x0) socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 8.08246961s ago: executing program 2 (id=1972): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x2a, &(0x7f00000037c0)=ANY=[@ANYBLOB], &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 7.696465796s ago: executing program 0 (id=1974): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x200a}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000c40)={0x2000000b}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002640), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000002780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)={0xb4, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff9e}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147f40, 0x0) preadv2(r11, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x1f) read$FUSE(r10, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000019a30a000000000000f8ffffffffffffff00000000000000000000000000000000000000005c9732135b294c2b00000000000000000000000000000000000000000b000000000000000000"], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r2}, &(0x7f0000000440)=0x8) bind$alg(r6, &(0x7f00000027c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) 6.523218508s ago: executing program 0 (id=1976): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x9, 0x80, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000080)={0x3ff, 0x30e3, 0x3, 0x400003, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffc01}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.41820129s ago: executing program 1 (id=1977): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)=ANY=[@ANYBLOB="0300006768696a8100000000000000737475767778797a30313233"], 0x29, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0xa0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) 5.315711676s ago: executing program 0 (id=1978): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc865237"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e", 0x82}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.035621467s ago: executing program 1 (id=1979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 4.873938248s ago: executing program 2 (id=1980): syz_open_dev$usbfs(0x0, 0x204, 0x2) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x5be5, 0x2, 0x400, 0x5, 0x2d2, 0x94}, 0x9c) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000140)=@secondary) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x87a2f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000002940)={0x0, 0x0}) 2.650667425s ago: executing program 2 (id=1981): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) fchdir(r1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) 2.498354557s ago: executing program 1 (id=1982): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="24002f8008000100000000000c00"], 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 2.28769527s ago: executing program 1 (id=1983): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) bind$802154_raw(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec7, 0x8, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x3, 0xfffffffb, 0x0, 0x3, 0x4, 0xf252, 0x4, 0x3, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x80000001, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x7, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x22, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x68, 0xfffffffc, 0x4, 0x7, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x5, 0x8001, 0x1, 0x1, 0x297, 0x5, 0x0, 0x981, 0x0, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x800, 0x200, 0x3], [0x401, 0x7ff, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x3000000, 0x4, 0x8, 0x10, 0x7, 0x9, 0x2e8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x4, 0x1, 0xfffffff9, 0xe55, 0x10, 0x81, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x100b, 0x2, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x5, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x23d8, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x800007f, 0x5, 0x0, 0x4, 0x8e8, 0x5, 0x9, 0x38eb, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0xbb, 0xb7, 0x5, 0x800, 0x3c7, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x5, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x81]}, 0x45c) pipe2(&(0x7f0000000340), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0x81204101, &(0x7f0000000440)) keyctl$join(0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) io_uring_enter(0xffffffffffffffff, 0x2219, 0xda6f, 0x16, 0x0, 0x0) 2.21179818s ago: executing program 0 (id=1984): socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) 2.205836645s ago: executing program 3 (id=1985): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd0911809", 0x78}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.063482941s ago: executing program 2 (id=1986): socket$inet(0x2, 0x80001, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x10000, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) 1.247016165s ago: executing program 2 (id=1987): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x9, 0x80, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000080)={0x3ff, 0x30e3, 0x3, 0x400003, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffc01}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.243732861s ago: executing program 1 (id=1988): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)=ANY=[@ANYBLOB="0300006768696a8100000000000000737475767778797a30313233"], 0x29, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0xa0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) 56.94713ms ago: executing program 1 (id=1989): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x5be5, 0x2, 0x400, 0x5, 0x2d2, 0x94}, 0x9c) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x87a2f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000002940)={0x0, 0x0}) r7 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x40003, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x800000, 0x48000000, 0x6, 0x3, 0x0}) 34.592217ms ago: executing program 2 (id=1990): syz_open_dev$usbfs(0x0, 0x204, 0x2) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x5be5, 0x2, 0x400, 0x5, 0x2d2, 0x94}, 0x9c) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000140)=@secondary) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x87a2f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000002940)={0x0, 0x0}) 0s ago: executing program 3 (id=1991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) kernel console output (not intermixed with test programs): ptor read/64, error -71 [ 511.098173][ T31] usb 5-1: usb_control_msg returned -32 [ 511.098222][ T31] usbtmc 5-1:16.0: can't read capabilities [ 511.186564][ T5861] usb usb3-port1: attempt power cycle [ 511.980293][ T5861] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 512.075208][ T5861] usb 3-1: device descriptor read/8, error -71 [ 512.306001][ T5861] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 512.326795][ T5861] usb 3-1: device descriptor read/8, error -71 [ 512.436366][ T5861] usb usb3-port1: unable to enumerate USB device [ 512.445626][ T9871] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 512.682188][ T9873] fuse: Bad value for 'rootmode' [ 513.145039][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 513.145065][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'. [ 513.939060][ T5861] usb 5-1: USB disconnect, device number 37 [ 514.140428][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 514.141081][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1186'. [ 514.596842][ T5935] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 515.336387][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 515.445691][ T5935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.445740][ T5935] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 515.445765][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.698795][ T5935] usb 5-1: config 0 descriptor?? [ 516.457756][ T9910] fuse: Bad value for 'rootmode' [ 516.644918][ T9915] program syz.4.1189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.856065][ T5935] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 517.006429][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 517.008159][ T5935] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 517.008194][ T5935] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.008216][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 517.008230][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 517.008243][ T5935] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.008269][ T5935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 517.008281][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.259112][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 517.259263][ T9918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1196'. [ 517.436424][ T5935] usb 3-1: usb_control_msg returned -32 [ 517.436868][ T5935] usbtmc 3-1:16.0: can't read capabilities [ 518.176643][ T5935] usb 5-1: USB disconnect, device number 38 [ 518.178104][ T9921] tipc: Enabled bearer , priority 0 [ 518.179148][ T9921] syzkaller0: entered promiscuous mode [ 518.179176][ T9921] syzkaller0: entered allmulticast mode [ 518.188744][ T9921] tipc: Resetting bearer [ 518.220690][ T9920] tipc: Resetting bearer [ 518.409500][ T9920] tipc: Disabling bearer [ 518.411028][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 518.461894][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1200'. [ 519.728947][ T5861] usb 3-1: USB disconnect, device number 39 [ 519.894148][ T9941] fuse: Bad value for 'rootmode' [ 520.346478][ T5861] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 520.508666][ T5861] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 520.508711][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.533590][ T36] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 520.642225][ T5861] usb 1-1: config 0 descriptor?? [ 520.657285][ T5861] cp210x 1-1:0.0: cp210x converter detected [ 520.726149][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 520.729117][ T36] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.729148][ T36] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 520.729162][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.774499][ T36] usb 5-1: config 0 descriptor?? [ 520.893363][ T5861] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 520.893389][ T5861] cp210x 1-1:0.0: querying part number failed [ 520.935068][ T5861] usb 1-1: cp210x converter now attached to ttyUSB0 [ 521.350616][ T9959] program syz.4.1208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.961545][ T9965] tipc: Enabled bearer , priority 0 [ 521.962369][ T9965] syzkaller0: entered promiscuous mode [ 521.962395][ T9965] syzkaller0: entered allmulticast mode [ 521.996985][ T9965] tipc: Resetting bearer [ 522.026328][ T9964] tipc: Resetting bearer [ 523.131716][ T5935] usb 1-1: USB disconnect, device number 34 [ 523.147787][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 523.164566][ T5935] cp210x 1-1:0.0: device disconnected [ 523.232047][ T9964] tipc: Disabling bearer [ 523.287588][ T5861] usb 5-1: USB disconnect, device number 39 [ 524.271157][ T9979] fuse: Unknown parameter 'use00000000000000000000' [ 525.149150][ T5861] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 525.206069][ T5935] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 525.296058][ T5861] usb 4-1: device descriptor read/64, error -71 [ 525.375111][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 525.377572][ T5935] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 525.377626][ T5935] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.377649][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.377672][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 525.377693][ T5935] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.377736][ T5935] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 525.377759][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.406352][ T5327] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 525.556013][ T5327] usb 5-1: Using ep0 maxpacket: 8 [ 525.563914][ T5327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.564023][ T5327] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 525.564038][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.595473][ T5327] usb 5-1: config 0 descriptor?? [ 525.606180][ T5861] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 525.691629][ T5935] usb 1-1: usb_control_msg returned -32 [ 525.691661][ T5935] usbtmc 1-1:16.0: can't read capabilities [ 525.716845][ T5327] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 525.746068][ T5861] usb 4-1: device descriptor read/64, error -71 [ 525.801128][ T7491] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 525.856437][ T5861] usb usb4-port1: attempt power cycle [ 526.206334][ T5861] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 526.271656][ T5327] gspca_vc032x: reg_w err -71 [ 526.271762][ T5327] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 527.057489][ T7491] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.057588][ T7491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.192984][ T5327] usb 5-1: USB disconnect, device number 40 [ 527.219710][ T5861] usb 4-1: device descriptor read/8, error -71 [ 527.246069][ T7491] usb 3-1: config 0 descriptor?? [ 527.321119][ T7491] cp210x 3-1:0.0: cp210x converter detected [ 527.322802][ T5607] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 527.322889][ T5607] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 527.378122][ T31] usb 1-1: USB disconnect, device number 35 [ 527.425824][ T5607] usb 2-1: USB disconnect, device number 33 [ 527.459643][ T7491] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 527.459673][ T7491] cp210x 3-1:0.0: querying part number failed [ 527.476046][ T5861] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 527.515574][ T7491] usb 3-1: cp210x converter now attached to ttyUSB0 [ 527.553490][ T5861] usb 4-1: device descriptor read/8, error -71 [ 527.654437][T10007] fuse: Unknown parameter 'use00000000000000000000' [ 527.666960][ T5861] usb usb4-port1: unable to enumerate USB device [ 527.946008][ T5607] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 528.120533][ T5607] usb 2-1: Using ep0 maxpacket: 32 [ 528.760774][ T5607] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.760825][ T5607] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 528.760850][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.815380][ T5607] usb 2-1: config 0 descriptor?? [ 528.840596][ T31] usb 3-1: USB disconnect, device number 40 [ 528.882886][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 528.940722][ T31] cp210x 3-1:0.0: device disconnected [ 529.661943][T10025] program syz.1.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.692215][T10024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1234'. [ 531.297878][ T31] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 531.369577][ T5327] usb 2-1: USB disconnect, device number 34 [ 531.390844][T10041] fuse: Unknown parameter 'use00000000000000000000' [ 531.455972][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 531.460739][ T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 531.460801][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.460822][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.461080][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.461114][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.461155][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 531.461178][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.596082][ T7491] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 531.736068][ T7491] usb 3-1: device descriptor read/64, error -71 [ 531.746652][ T7490] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 531.755677][ T31] usb 5-1: usb_control_msg returned -32 [ 531.755707][ T31] usbtmc 5-1:16.0: can't read capabilities [ 532.924684][ T7490] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 532.924718][ T7490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.953270][ T7490] usb 4-1: config 0 descriptor?? [ 532.956021][ T7491] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 532.966112][ T7490] cp210x 4-1:0.0: cp210x converter detected [ 533.086103][ T7491] usb 3-1: device descriptor read/64, error -71 [ 533.164238][ T7490] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 533.164270][ T7490] cp210x 4-1:0.0: querying part number failed [ 533.184337][ T5935] usb 5-1: USB disconnect, device number 41 [ 533.195359][ T7490] usb 4-1: cp210x converter now attached to ttyUSB0 [ 533.196377][ T7491] usb usb3-port1: attempt power cycle [ 533.639428][ T7491] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 534.299159][ T7491] usb 3-1: device descriptor read/8, error -71 [ 534.536135][ T7491] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 534.559933][ T5607] usb 4-1: USB disconnect, device number 42 [ 534.573224][ T5607] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.619521][ T5607] cp210x 4-1:0.0: device disconnected [ 534.664457][T10075] fuse: Unknown parameter 'user_i00000000000000000000' [ 534.767632][ T7491] usb 3-1: device not accepting address 44, error -71 [ 535.289166][ T7491] usb usb3-port1: unable to enumerate USB device [ 535.895977][ T5861] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 535.930703][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 536.174844][T10085] tipc: Enabled bearer , priority 0 [ 536.175503][T10088] syzkaller0: entered promiscuous mode [ 536.175530][T10088] syzkaller0: entered allmulticast mode [ 536.176387][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 536.183579][ T5861] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 536.183623][ T5861] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 536.183645][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.202480][ T5861] usb 5-1: config 0 descriptor?? [ 536.878559][T10088] tipc: Resetting bearer [ 537.052361][T10098] program syz.4.1251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.174410][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 537.197108][T10084] tipc: Resetting bearer [ 537.371241][ T5861] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 537.398098][T10084] tipc: Disabling bearer [ 537.536045][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 537.539188][ T5861] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 537.539599][ T5861] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 537.539627][ T5861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 537.539653][ T5861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 537.539677][ T5861] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.539722][ T5861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 537.539747][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.638200][ T5935] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 537.786008][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 537.787087][ T5935] usb 1-1: no configurations [ 537.787103][ T5935] usb 1-1: can't read configurations, error -22 [ 537.834665][ T5861] usb 3-1: usb_control_msg returned -32 [ 537.834719][ T5861] usbtmc 3-1:16.0: can't read capabilities [ 537.926081][ T5935] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 537.936586][ T5607] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 538.095975][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 538.097545][ T5935] usb 1-1: no configurations [ 538.097627][ T5935] usb 1-1: can't read configurations, error -22 [ 538.098297][ T5935] usb usb1-port1: attempt power cycle [ 538.116595][ T5607] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 538.116616][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.164300][ T5607] usb 2-1: config 0 descriptor?? [ 538.176638][ T5607] cp210x 2-1:0.0: cp210x converter detected [ 538.282721][ T5861] usb 5-1: USB disconnect, device number 42 [ 538.285227][T10112] fuse: Unknown parameter 'user_i00000000000000000000' [ 538.387628][ T5607] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 538.387661][ T5607] cp210x 2-1:0.0: querying part number failed [ 538.446077][ T5935] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 538.466959][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 538.468561][ T5935] usb 1-1: no configurations [ 538.468580][ T5935] usb 1-1: can't read configurations, error -22 [ 538.595996][ T5935] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 538.618232][T10115] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 538.618418][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 538.619993][ T5935] usb 1-1: no configurations [ 538.620010][ T5935] usb 1-1: can't read configurations, error -22 [ 538.620569][ T5935] usb usb1-port1: unable to enumerate USB device [ 538.624847][ T5607] usb 2-1: cp210x converter now attached to ttyUSB0 [ 541.260993][ T31] usb 3-1: USB disconnect, device number 45 [ 541.556008][ T7491] usb 2-1: USB disconnect, device number 35 [ 542.612553][T10137] trusted_key: encrypted_key: insufficient parameters specified [ 543.166318][ T36] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 543.211745][ T7491] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 543.226731][T10138] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 543.226747][T10138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1271'. [ 543.240307][T10138] team0: Port device geneve1 added [ 543.266998][ T6623] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.277850][ T6623] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.277897][ T6623] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.277929][ T6623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.331499][T10149] loop5: detected capacity change from 0 to 6 [ 543.355238][ T7491] cp210x 2-1:0.0: device disconnected [ 543.358588][T10149] Dev loop5: unable to read RDB block 6 [ 543.358630][T10149] loop5: unable to read partition table [ 543.358834][T10149] loop5: partition table beyond EOD, truncated [ 543.358852][T10149] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 543.402666][ T36] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 543.402700][ T36] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 543.402720][ T36] usb 1-1: Product: syz [ 543.402736][ T36] usb 1-1: Manufacturer: syz [ 543.402751][ T36] usb 1-1: SerialNumber: syz [ 543.531943][ T36] usb 1-1: config 0 descriptor?? [ 543.747732][ T36] usb 1-1: USB disconnect, device number 40 [ 543.766010][ T7490] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 543.827971][ T7491] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 543.837567][ T31] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 543.881861][ T5694] udevd[5694]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.934516][ T7490] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 543.934537][ T7490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.934549][ T7490] usb 4-1: Product: syz [ 543.934557][ T7490] usb 4-1: Manufacturer: syz [ 543.934571][ T7490] usb 4-1: SerialNumber: syz [ 543.941736][ T7490] usb 4-1: config 0 descriptor?? [ 543.966128][ T31] usb 3-1: device descriptor read/64, error -71 [ 543.976064][ T7491] usb 2-1: Using ep0 maxpacket: 16 [ 543.987274][ T7491] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.987300][ T7491] usb 2-1: config 0 has no interfaces? [ 543.987333][ T7491] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 543.987355][ T7491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.003995][ T7490] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 544.016091][ T7491] usb 2-1: config 0 descriptor?? [ 544.119512][ T7490] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 544.120759][ T7490] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 544.120867][ T7490] usb 4-1: media controller created [ 544.164977][ T7490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.206012][ T31] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 544.336035][ T31] usb 3-1: device descriptor read/64, error -71 [ 544.400348][ T7490] DVB: Unable to find symbol mt352_attach() [ 544.441389][ T7490] DVB: Unable to find symbol nxt6000_attach() [ 544.441401][ T7490] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 544.444373][ T7490] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 544.446328][ T31] usb usb3-port1: attempt power cycle [ 544.463099][ T7490] dvb-usb: schedule remote query interval to 1000 msecs. [ 544.463120][ T7490] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 544.463423][ T7490] dvb-usb: bulk message failed: -22 (7/0) [ 544.463441][ T7490] dvb-usb: bulk message failed: -22 (7/0) [ 544.472716][ T7490] usb 4-1: USB disconnect, device number 43 [ 544.617870][ T5935] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 544.667230][T10159] fuse: Unknown parameter 'user_i00000000000000000000' [ 544.793671][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 544.796967][ T5935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.797008][ T5935] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 544.797029][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.806611][ T31] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 544.812198][ T5935] usb 1-1: config 0 descriptor?? [ 545.055070][ T31] usb 3-1: device not accepting address 48, error -71 [ 545.152038][ T7490] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 545.356045][ T5935] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 545.372663][T10168] program syz.0.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.406080][ T31] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 545.426977][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 545.429110][ T31] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 545.429173][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.429197][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 545.429223][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 545.429245][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.429285][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 545.429308][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.508418][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 545.520754][ T5935] usb 5-1: no configurations [ 545.520775][ T5935] usb 5-1: can't read configurations, error -22 [ 545.658364][ T5935] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 546.389046][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 546.694389][ T5935] usb 5-1: no configurations [ 546.694411][ T5935] usb 5-1: can't read configurations, error -22 [ 546.749362][ T5935] usb usb5-port1: attempt power cycle [ 546.858391][ T31] usb 3-1: usb_control_msg returned -32 [ 546.858443][ T31] usbtmc 3-1:16.0: can't read capabilities [ 546.886707][ T36] usb 2-1: USB disconnect, device number 36 [ 547.082649][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'. [ 547.276217][ T5935] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 547.298108][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 547.298965][ T5935] usb 5-1: no configurations [ 547.298982][ T5935] usb 5-1: can't read configurations, error -22 [ 547.509047][ T5935] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 547.590469][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 548.018933][ T31] usb 1-1: USB disconnect, device number 41 [ 548.088777][ T5935] usb 5-1: no configurations [ 548.088793][ T5935] usb 5-1: can't read configurations, error -22 [ 548.089553][ T5935] usb usb5-port1: unable to enumerate USB device [ 548.179181][ T5935] usb 3-1: USB disconnect, device number 49 [ 548.656577][ T7490] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 548.733745][T10194] fuse: Unknown parameter 'user_id00000000000000000000' [ 548.788831][ T7490] usb 1-1: device descriptor read/64, error -71 [ 549.036119][ T7490] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 549.514488][ T7490] usb 1-1: device descriptor read/64, error -71 [ 549.617623][ T7490] usb usb1-port1: attempt power cycle [ 549.924604][T10204] loop5: detected capacity change from 0 to 6 [ 549.933520][T10204] Dev loop5: unable to read RDB block 6 [ 549.933566][T10204] loop5: unable to read partition table [ 549.933787][T10204] loop5: partition table beyond EOD, truncated [ 549.933805][T10204] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 549.996046][ T7490] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 550.018936][ T7490] usb 1-1: device descriptor read/8, error -71 [ 550.105963][ T31] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 550.248529][ T7483] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 550.256013][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 550.283456][ T31] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 550.283475][ T31] usb 5-1: config 0 has no interface number 0 [ 550.283514][ T31] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.283528][ T31] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 550.285414][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 550.285432][ T31] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 550.285444][ T31] usb 5-1: Product: syz [ 550.285455][ T31] usb 5-1: SerialNumber: syz [ 550.286009][ T7490] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 550.306800][ T7490] usb 1-1: device descriptor read/8, error -71 [ 550.381186][ T31] usb 5-1: config 0 descriptor?? [ 550.399315][ T31] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 550.406237][ T7483] usb 3-1: Using ep0 maxpacket: 16 [ 550.414320][ T7483] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.414345][ T7483] usb 3-1: config 0 has no interfaces? [ 550.414374][ T7483] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 550.414396][ T7483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.419763][ T7490] usb usb1-port1: unable to enumerate USB device [ 550.490347][ T31] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 550.583164][ T7483] usb 3-1: config 0 descriptor?? [ 550.594990][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 550.826002][ T7482] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 550.975986][ T7482] usb 4-1: Using ep0 maxpacket: 32 [ 550.979177][ T7482] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.979221][ T7482] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 550.979244][ T7482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.995653][ T7482] usb 4-1: config 0 descriptor?? [ 551.556285][T10216] program syz.3.1295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.857517][ C1] cm109_urb_ctl_callback: 1509 callbacks suppressed [ 551.857551][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.857822][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.858082][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.858342][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.858600][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.858855][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.859111][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.859173][ T7482] usb 5-1: USB disconnect, device number 47 [ 551.859368][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 551.859390][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 551.959095][ T7482] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 552.183261][T10223] fuse: Unknown parameter 'user_id00000000000000000000' [ 552.316157][ T5861] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 552.466080][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 552.468575][ T5861] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 552.468636][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.468659][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 552.468682][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.468707][ T5861] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.468750][ T5861] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 552.468773][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.101194][ T36] usb 3-1: USB disconnect, device number 50 [ 553.231358][ T5861] usb 1-1: usb_control_msg returned -32 [ 553.231390][ T5861] usbtmc 1-1:16.0: can't read capabilities [ 553.596378][ T5861] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 553.730766][ T7491] usb 4-1: USB disconnect, device number 44 [ 553.898833][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 553.948897][ T5861] usb 5-1: no configurations [ 553.948998][ T5861] usb 5-1: can't read configurations, error -22 [ 554.236590][ T5861] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 554.326777][T10242] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 554.406021][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 554.406966][ T5861] usb 5-1: no configurations [ 554.407062][ T5861] usb 5-1: can't read configurations, error -22 [ 554.407372][ T5861] usb usb5-port1: attempt power cycle [ 554.463653][ T36] usb 1-1: USB disconnect, device number 46 [ 554.618024][T10252] fuse: Unknown parameter 'user_id00000000000000000000' [ 554.746024][ T5861] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 554.768407][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 554.769788][ T5861] usb 5-1: no configurations [ 554.769806][ T5861] usb 5-1: can't read configurations, error -22 [ 554.897029][ T5861] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 555.030060][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 555.193519][ T5861] usb 5-1: no configurations [ 555.193600][ T5861] usb 5-1: can't read configurations, error -22 [ 555.408125][ T5861] usb usb5-port1: unable to enumerate USB device [ 555.778225][ T36] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 555.956054][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 555.958973][ T36] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 555.959002][ T36] usb 2-1: config 0 has no interface number 0 [ 555.959046][ T36] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 555.959072][ T36] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 555.962212][ T36] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 555.962241][ T36] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 555.962261][ T36] usb 2-1: Product: syz [ 555.962274][ T36] usb 2-1: SerialNumber: syz [ 556.045408][ T36] usb 2-1: config 0 descriptor?? [ 556.073739][ T36] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 556.101706][ T36] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input11 [ 556.263587][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 557.246404][ T5861] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 557.395938][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 557.400329][ T5861] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 557.400374][ T5861] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 557.400399][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.467976][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 557.468285][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 557.468490][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 557.468684][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 557.468825][ T7491] usb 2-1: USB disconnect, device number 37 [ 557.468879][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 557.468890][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 557.537947][ T5861] usb 5-1: config 0 descriptor?? [ 557.554688][ T7491] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 558.488728][T10284] program syz.4.1316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.691075][T10289] fuse: Bad value for 'fd' [ 558.878220][T10291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 560.166289][ T7491] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 560.184032][ T7483] usb 5-1: USB disconnect, device number 52 [ 560.345923][ T7491] usb 1-1: Using ep0 maxpacket: 8 [ 560.349165][ T7491] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 560.349227][ T7491] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.349251][ T7491] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.349276][ T7491] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.349300][ T7491] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.349344][ T7491] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.349368][ T7491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.961984][ T7491] usb 1-1: usb_control_msg returned -32 [ 560.962024][ T7491] usbtmc 1-1:16.0: can't read capabilities [ 563.008195][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.008276][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.421537][ T7491] usb 1-1: USB disconnect, device number 47 [ 564.560284][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 565.564723][T10326] fuse: Bad value for 'fd' [ 565.739156][ T7491] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 566.175998][ T7491] usb 4-1: Using ep0 maxpacket: 16 [ 566.179516][ T7491] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 566.179546][ T7491] usb 4-1: config 0 has no interface number 0 [ 566.179597][ T7491] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 566.179625][ T7491] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 566.181961][ T7491] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 566.181989][ T7491] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 566.182008][ T7491] usb 4-1: Product: syz [ 566.182022][ T7491] usb 4-1: SerialNumber: syz [ 566.198450][ T7491] usb 4-1: config 0 descriptor?? [ 566.410234][ T7491] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 566.439229][ T7491] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 566.440041][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 567.552520][ T7491] usb 4-1: USB disconnect, device number 45 [ 567.559008][ T5861] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 567.572999][T10337] afs: Bad value for 'source' [ 567.667204][ T7491] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 567.716010][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 567.719457][ T5861] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.719510][ T5861] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 567.719543][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.827595][ T5861] usb 2-1: config 0 descriptor?? [ 567.955973][ T7482] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 568.118457][ T7482] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.118500][ T7482] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 568.125225][ T7482] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.125256][ T7482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.125275][ T7482] usb 1-1: Product: syz [ 568.125282][ T7482] usb 1-1: Manufacturer: syz [ 568.125290][ T7482] usb 1-1: SerialNumber: syz [ 568.491860][T10350] program syz.1.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.768038][T10342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.800073][T10342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.394071][ T7482] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 569.434687][ T7482] usb 1-1: USB disconnect, device number 48 [ 570.098053][ T5861] usb 2-1: USB disconnect, device number 38 [ 570.319290][T10363] fuse: Bad value for 'fd' [ 570.386064][ T7482] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 570.546044][ T7482] usb 1-1: Using ep0 maxpacket: 8 [ 570.548722][ T7482] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 570.548864][ T7482] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 570.548918][ T7482] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.548942][ T7482] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 570.548966][ T7482] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 570.548990][ T7482] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.549017][ T7482] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.549062][ T7482] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 570.549084][ T7482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.034978][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 572.950704][ T7482] usb 1-1: can't set config #16, error -71 [ 572.987732][ T7482] usb 1-1: USB disconnect, device number 49 [ 573.966834][ T5861] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 574.505989][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 574.518530][ T5861] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.518577][ T5861] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 574.518598][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.549809][ T5861] usb 3-1: config 0 descriptor?? [ 575.107600][T10411] program syz.2.1354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.781404][T10418] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 575.784089][T10418] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.787259][T10418] bond0: (slave team0): Enslaving as an active interface with an up link [ 575.791425][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'. [ 576.274503][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 576.699237][ T5861] usb 3-1: USB disconnect, device number 51 [ 577.168344][ T5861] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 577.669337][ T5861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.669845][ T5861] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 577.887934][ T5861] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.888306][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.888765][ T5861] usb 3-1: Product: syz [ 577.889173][ T5861] usb 3-1: Manufacturer: syz [ 577.889541][ T5861] usb 3-1: SerialNumber: syz [ 578.318415][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.319133][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.360862][ T5861] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 578.402043][ T5861] usb 3-1: USB disconnect, device number 52 [ 579.043806][ T5861] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 579.815958][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 579.844162][ T5861] usb 3-1: device descriptor read/all, error -71 [ 580.630357][ T7491] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 580.718172][T10455] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1373'. [ 580.920834][ T7491] usb 2-1: Using ep0 maxpacket: 32 [ 581.003584][ T7491] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 581.003690][ T7491] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 581.003793][ T7491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.190237][ T7491] usb 2-1: config 0 descriptor?? [ 581.797087][T10458] program syz.1.1372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.184595][T10466] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 583.246004][ T31] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 583.405788][ T31] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 583.405921][ T31] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 583.405946][ T31] usb 4-1: Product: syz [ 583.405960][ T31] usb 4-1: Manufacturer: syz [ 583.405975][ T31] usb 4-1: SerialNumber: syz [ 583.465145][ T31] usb 4-1: config 0 descriptor?? [ 583.694001][ T7482] usb 2-1: USB disconnect, device number 39 [ 584.013302][ T31] usb 4-1: USB disconnect, device number 46 [ 585.636871][ T5694] udevd[5694]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.816283][T10490] tipc: Enabled bearer , priority 0 [ 585.818781][T10490] syzkaller0: entered promiscuous mode [ 585.842057][T10492] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1385'. [ 585.857668][T10490] syzkaller0: entered allmulticast mode [ 585.902420][T10490] tipc: Resetting bearer [ 585.936922][T10488] tipc: Resetting bearer [ 586.158564][T10488] tipc: Disabling bearer [ 586.516635][ T7482] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 586.886001][ T7482] usb 4-1: Using ep0 maxpacket: 32 [ 586.889886][ T7482] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.889944][ T7482] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 586.889967][ T7482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.900692][ T7482] usb 4-1: config 0 descriptor?? [ 587.824200][T10517] program syz.3.1388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.395973][ T5861] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 588.551770][ T5861] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 588.551803][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 588.551824][ T5861] usb 3-1: Product: syz [ 588.551839][ T5861] usb 3-1: Manufacturer: syz [ 588.551854][ T5861] usb 3-1: SerialNumber: syz [ 588.595111][ T5861] usb 3-1: config 0 descriptor?? [ 588.646013][ T31] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 588.809581][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.809628][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 588.813659][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.813790][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.813812][ T31] usb 5-1: Product: syz [ 588.813826][ T31] usb 5-1: Manufacturer: syz [ 588.813841][ T31] usb 5-1: SerialNumber: syz [ 588.879508][ T7491] usb 3-1: USB disconnect, device number 55 [ 589.357432][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.358248][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.370206][ T7482] usb 4-1: USB disconnect, device number 47 [ 590.289724][ T31] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 590.355072][ T31] usb 5-1: USB disconnect, device number 54 [ 590.665972][ T31] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 590.815927][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 590.819695][ T31] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 590.819726][ T31] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 590.819946][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.819972][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.819998][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 590.820022][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.820050][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.820097][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.820122][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.152914][ T31] usb 5-1: GET_CAPABILITIES returned 0 [ 591.152969][ T31] usbtmc 5-1:16.0: can't read capabilities [ 591.367741][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.367991][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.368261][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.368498][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.368739][ C1] usbtmc 5-1:16.0: invalid notification: 11 [ 591.368976][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.369461][ C1] usbtmc 5-1:16.0: invalid notification: 2 [ 591.369710][ C1] usbtmc 5-1:16.0: invalid notification: 5 [ 591.369947][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.370182][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.370425][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.370657][ C1] usbtmc 5-1:16.0: invalid notification: 40 [ 591.371110][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.371345][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.371577][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.371810][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.372041][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.372276][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.372523][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.372755][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.372987][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.373221][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.373463][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.373697][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.373936][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.374167][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.374408][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.374653][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.374881][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.375113][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.375343][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.375580][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.375858][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.376110][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.376362][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.376619][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.376856][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.377090][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.377330][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.377561][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.377791][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.378023][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.378253][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.378485][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.378714][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.378947][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.379196][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.379464][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.379699][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.379931][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.380170][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.380414][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.380651][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.381486][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.381721][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.381956][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.382263][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.382531][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.382794][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.383049][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.383306][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.383564][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.383805][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.384050][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.384284][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.384523][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.384760][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.384994][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.385258][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.385496][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.385766][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.386027][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.386268][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.386506][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.386769][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.387006][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.387247][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.387486][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.387734][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.387970][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.388209][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.388449][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.388690][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.388934][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.389175][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.389424][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.389670][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.389928][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.390172][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.390407][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.390647][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.390890][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.391121][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.391359][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.391592][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.391830][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.392070][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.392308][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.392541][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.392775][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.393016][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.393250][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.393500][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.393752][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.393990][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.394223][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.394489][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.394725][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.394961][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.395204][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.395440][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.395686][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.395923][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.396163][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.396407][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.396638][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.396877][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.397106][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.397339][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.397573][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.397806][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.398040][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.398287][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.398524][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.398764][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.398997][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.399230][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.399466][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.399711][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.399949][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.400203][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.400436][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.400688][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.400928][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.401160][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.401399][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.401629][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.401863][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.402095][ C1] usbtmc 5-1:16.0: invalid notification: 44 [ 591.402336][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.402575][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.402808][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.403042][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.403277][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.403511][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.403749][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.403976][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.404205][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.404442][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.404673][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.404913][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.405148][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.405374][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.405604][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.406581][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.406843][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.407084][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.407332][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.407580][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.407813][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.408045][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.408282][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.408517][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.408754][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.409005][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.409246][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.409485][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.409720][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.409950][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.410183][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.410434][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.410662][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.410901][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.412137][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.412390][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.412624][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.412871][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.413116][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.413352][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.413584][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.413816][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.414051][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.414282][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.414516][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.414749][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.414984][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.415225][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.415459][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.415697][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.415934][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.416179][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.416421][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.416653][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.416922][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 591.446742][ T7482] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 591.595978][ T7482] usb 2-1: Using ep0 maxpacket: 8 [ 591.681188][ T7491] usb 5-1: USB disconnect, device number 55 [ 591.708560][ T7482] usb 2-1: unable to get BOS descriptor or descriptor too short [ 591.726553][ T7482] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 591.726583][ T7482] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 591.726604][ T7482] usb 2-1: config 4 has no interface number 0 [ 591.729326][ T7482] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 591.729351][ T7482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.729369][ T7482] usb 2-1: Product: syz [ 591.729382][ T7482] usb 2-1: Manufacturer: syz [ 591.729395][ T7482] usb 2-1: SerialNumber: syz [ 592.065622][ T7482] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 592.111470][ T7482] usb 2-1: USB disconnect, device number 40 [ 592.983553][ T7482] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 593.332723][ T7482] usb 5-1: Using ep0 maxpacket: 32 [ 593.827392][ T7482] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.827443][ T7482] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 593.827466][ T7482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.839860][ T7482] usb 5-1: config 0 descriptor?? [ 594.356289][T10604] tipc: Enabled bearer , priority 0 [ 594.357290][T10604] syzkaller0: entered promiscuous mode [ 594.357316][T10604] syzkaller0: entered allmulticast mode [ 594.361049][T10604] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 594.451325][T10607] program syz.4.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.646765][T10606] tipc: Resetting bearer [ 596.478616][ T7491] usb 5-1: USB disconnect, device number 56 [ 596.877602][T10603] tipc: Resetting bearer [ 597.136858][T10603] tipc: Disabling bearer [ 598.661031][T10643] loop5: detected capacity change from 0 to 6 [ 598.674033][T10643] Dev loop5: unable to read RDB block 6 [ 598.674075][T10643] loop5: unable to read partition table [ 598.674278][T10643] loop5: partition table beyond EOD, truncated [ 598.674296][T10643] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 598.910450][ T5861] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 598.926851][ T5607] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 598.979647][T10660] syzkaller0: entered promiscuous mode [ 598.979672][T10660] syzkaller0: entered allmulticast mode [ 598.981284][T10660] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 599.066818][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 599.072070][ T5861] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.072101][ T5861] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 599.072114][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.084821][ T5861] usb 2-1: config 0 descriptor?? [ 599.086760][ T5607] usb 3-1: Using ep0 maxpacket: 16 [ 599.095049][ T5607] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 599.095077][ T5607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.112737][ T5607] usb 3-1: config 0 descriptor?? [ 599.123212][ T5607] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 599.316954][ T5607] usb 3-1: Detected FT232B [ 599.521269][ T5607] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 599.521811][ T5607] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 599.534430][ T5607] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 599.562765][ T5607] usb 3-1: USB disconnect, device number 56 [ 599.616394][ T5607] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 599.619633][ T5607] ftdi_sio 3-1:0.0: device disconnected [ 599.646927][T10653] program syz.1.1440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.668149][T10671] tipc: Enabled bearer , priority 0 [ 599.668978][T10671] syzkaller0: entered promiscuous mode [ 599.669003][T10671] syzkaller0: entered allmulticast mode [ 599.735109][T10671] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 599.894807][T10671] tipc: Resetting bearer [ 599.990986][T10670] tipc: Resetting bearer [ 600.190426][T10670] tipc: Disabling bearer [ 600.496491][ T5607] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 601.125757][ T5607] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 601.125791][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.126090][ T5607] usb 5-1: Product: syz [ 601.126107][ T5607] usb 5-1: Manufacturer: syz [ 601.126121][ T5607] usb 5-1: SerialNumber: syz [ 601.140489][ T5607] usb 5-1: config 0 descriptor?? [ 601.159444][ T5607] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 601.804829][ T5607] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.012852][ T5607] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 602.012919][ T5607] usb 5-1: media controller created [ 602.064718][ T7491] usb 2-1: USB disconnect, device number 41 [ 602.244648][T10693] trusted_key: encrypted_key: insufficient parameters specified [ 602.250989][ T5607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 603.497872][T10703] syzkaller0: entered promiscuous mode [ 603.497902][T10703] syzkaller0: entered allmulticast mode [ 603.642204][ T5607] DVB: Unable to find symbol mt352_attach() [ 603.679336][T10698] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 603.679352][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1455'. [ 603.763824][ T5607] DVB: Unable to find symbol nxt6000_attach() [ 603.763836][ T5607] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 603.797041][ T5607] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 603.799639][ T5607] dvb-usb: schedule remote query interval to 1000 msecs. [ 603.799661][ T5607] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 603.799678][ T5607] dvb-usb: bulk message failed: -22 (7/0) [ 603.799695][ T5607] dvb-usb: bulk message failed: -22 (7/0) [ 603.856434][T10698] team0: Port device geneve1 added [ 603.861906][ T5607] usb 5-1: USB disconnect, device number 57 [ 603.997402][ T5935] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 604.031312][ T5607] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 604.165515][ T5935] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 604.165547][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.165566][ T5935] usb 2-1: Product: syz [ 604.165579][ T5935] usb 2-1: Manufacturer: syz [ 604.165594][ T5935] usb 2-1: SerialNumber: syz [ 604.237745][ T5935] usb 2-1: config 0 descriptor?? [ 604.254301][ T5935] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 604.334117][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.338234][ T5935] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 604.338289][ T5935] usb 2-1: media controller created [ 604.365113][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.378199][T10724] tipc: Enabled bearer , priority 0 [ 604.379236][T10724] syzkaller0: entered promiscuous mode [ 604.379258][T10724] syzkaller0: entered allmulticast mode [ 604.391501][T10724] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 604.476303][ T7491] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 604.480300][ T5935] DVB: Unable to find symbol mt352_attach() [ 604.542511][T10724] tipc: Resetting bearer [ 604.578676][ T5935] DVB: Unable to find symbol nxt6000_attach() [ 604.578693][ T5935] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 604.587151][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 604.618781][ T5935] dvb-usb: schedule remote query interval to 1000 msecs. [ 604.618805][ T5935] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 604.618823][ T5935] dvb-usb: bulk message failed: -22 (7/0) [ 604.618840][ T5935] dvb-usb: bulk message failed: -22 (7/0) [ 604.626034][ T7491] usb 3-1: Using ep0 maxpacket: 8 [ 604.663306][T10723] tipc: Resetting bearer [ 604.672499][ T7491] usb 3-1: unable to get BOS descriptor or descriptor too short [ 604.684976][ T7491] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 604.684995][ T7491] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 604.685005][ T7491] usb 3-1: config 4 has no interface number 0 [ 604.689465][ T5935] usb 2-1: USB disconnect, device number 42 [ 604.721485][ T7491] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 604.721516][ T7491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.721534][ T7491] usb 3-1: Product: syz [ 604.721547][ T7491] usb 3-1: Manufacturer: syz [ 604.721560][ T7491] usb 3-1: SerialNumber: syz [ 604.870380][T10723] tipc: Disabling bearer [ 604.923759][ T5935] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 604.996161][ T7482] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 605.066138][ T7491] uvcvideo 3-1:4.147: probe with driver uvcvideo failed with error -22 [ 605.141921][ T7491] usb 3-1: USB disconnect, device number 57 [ 605.177854][ T7482] usb 4-1: Using ep0 maxpacket: 32 [ 605.185291][ T7482] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 605.185337][ T7482] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 605.185362][ T7482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.205348][ T7482] usb 4-1: config 0 descriptor?? [ 605.553183][T10733] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1466'. [ 605.882108][T10747] program syz.3.1465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 608.037867][ T5607] usb 4-1: USB disconnect, device number 48 [ 608.599330][T10761] syzkaller0: entered promiscuous mode [ 608.599357][T10761] syzkaller0: entered allmulticast mode [ 609.106159][ T7482] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 609.269287][ T7482] usb 2-1: Using ep0 maxpacket: 8 [ 609.272569][ T7482] usb 2-1: unable to get BOS descriptor or descriptor too short [ 609.276932][ T7482] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 609.276962][ T7482] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 609.276982][ T7482] usb 2-1: config 4 has no interface number 0 [ 609.309084][ T7482] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 609.309114][ T7482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.309133][ T7482] usb 2-1: Product: syz [ 609.309146][ T7482] usb 2-1: Manufacturer: syz [ 609.309158][ T7482] usb 2-1: SerialNumber: syz [ 609.466011][ T5935] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 609.554728][ T7482] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 609.558313][ T7482] usb 2-1: USB disconnect, device number 43 [ 609.615973][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 609.619487][ T5935] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 609.619530][ T5935] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 609.619553][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.630070][ T5935] usb 5-1: config 0 descriptor?? [ 609.715949][ T5327] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 609.970545][ T5327] usb 4-1: Using ep0 maxpacket: 32 [ 610.450116][ T5327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.450149][ T5327] usb 4-1: config 0 has no interfaces? [ 610.450182][ T5327] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 610.450206][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.476420][ T5327] usb 4-1: config 0 descriptor?? [ 610.613254][T10794] program syz.4.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.788470][T10801] kAFS: No cell specified [ 611.547642][T10807] syzkaller0: entered promiscuous mode [ 611.547954][T10807] syzkaller0: entered allmulticast mode [ 612.155965][ T7482] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 612.256292][ T5327] usb 5-1: USB disconnect, device number 58 [ 612.305986][ T7482] usb 3-1: Using ep0 maxpacket: 32 [ 612.313636][ T7482] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.313695][ T7482] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.313716][ T7482] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.333616][ T7482] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 612.333647][ T7482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.333665][ T7482] usb 3-1: Product: syz [ 612.333677][ T7482] usb 3-1: Manufacturer: syz [ 612.333689][ T7482] usb 3-1: SerialNumber: syz [ 612.372649][ T7482] usb 3-1: config 0 descriptor?? [ 612.436336][ T7482] usb 3-1: no audio or video endpoints found [ 612.561596][ T5935] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 612.766012][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 612.769337][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 612.771166][ T5935] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 612.771194][ T5935] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 612.771214][ T5935] usb 2-1: config 4 has no interface number 0 [ 612.774546][ T5935] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 612.774596][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.774617][ T5935] usb 2-1: Product: syz [ 612.774633][ T5935] usb 2-1: Manufacturer: syz [ 612.774647][ T5935] usb 2-1: SerialNumber: syz [ 612.905201][ T5607] usb 3-1: USB disconnect, device number 58 [ 613.900889][ T7482] usb 4-1: USB disconnect, device number 49 [ 614.928090][ T5935] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 614.961764][ T5935] usb 2-1: USB disconnect, device number 44 [ 615.986308][T10852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1508'. [ 616.653733][T10857] syzkaller0: entered promiscuous mode [ 616.653761][T10857] syzkaller0: entered allmulticast mode [ 616.855145][ T7491] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 617.006146][ T7491] usb 2-1: Using ep0 maxpacket: 32 [ 617.008617][ T7491] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 617.008663][ T7491] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 617.008687][ T7491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.053835][ T7491] usb 2-1: config 0 descriptor?? [ 617.889049][T10870] ceph: No mds server is up or the cluster is laggy [ 617.892646][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 617.892868][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 618.172056][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 618.172270][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 618.233421][T10881] program syz.1.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.136167][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 619.137826][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 619.498972][ T5861] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 619.615336][ T5935] usb 2-1: USB disconnect, device number 45 [ 619.736030][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 619.737555][ T5861] usb 3-1: no configurations [ 619.737573][ T5861] usb 3-1: can't read configurations, error -22 [ 619.886028][ T5861] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 620.036027][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 620.037974][ T5861] usb 3-1: no configurations [ 620.037992][ T5861] usb 3-1: can't read configurations, error -22 [ 620.040865][ T5861] usb usb3-port1: attempt power cycle [ 620.686058][ T5861] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 620.706926][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 620.707774][ T5861] usb 3-1: no configurations [ 620.707791][ T5861] usb 3-1: can't read configurations, error -22 [ 620.814398][T10902] syzkaller0: entered promiscuous mode [ 620.814426][T10902] syzkaller0: entered allmulticast mode [ 620.836317][ T5861] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 620.860048][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 620.861996][ T5861] usb 3-1: no configurations [ 620.862015][ T5861] usb 3-1: can't read configurations, error -22 [ 620.891452][ T5861] usb usb3-port1: unable to enumerate USB device [ 621.035996][ T5935] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 621.106096][ T7491] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 621.348758][ T5935] usb 5-1: unable to get BOS descriptor or descriptor too short [ 621.349949][ T5935] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.350066][ T5935] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 621.350098][ T5935] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 621.350126][ T5935] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 621.350149][ T5935] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 621.350164][ T5935] usb 5-1: config 1 interface 1 has no altsetting 0 [ 621.353418][ T5935] usb 5-1: string descriptor 0 read error: -22 [ 621.353540][ T5935] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 621.353556][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.417774][ T7491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.417830][ T7491] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 622.417854][ T7491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.423717][ T7491] usb 2-1: config 0 descriptor?? [ 623.362937][ T7491] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 623.507109][T10927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1534'. [ 624.453316][ T7491] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input15 [ 624.534734][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.534809][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.156784][ T5935] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 626.156805][ T5935] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 626.156815][ T5935] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 626.518368][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1539'. [ 626.537666][T10947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1537'. [ 626.661132][ T5935] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 626.706389][ T5935] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 626.734345][ T5935] usb 5-1: USB disconnect, device number 59 [ 631.267477][ T7491] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 631.303889][ T7491] usb 2-1: USB disconnect, device number 46 [ 631.535233][ T7482] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 633.375915][ T7482] usb 4-1: Using ep0 maxpacket: 32 [ 633.482415][ T7482] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.484970][ T7482] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 633.485001][ T7482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.648863][ T7482] usb 4-1: config 0 descriptor?? [ 634.100427][T11000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 635.197193][T11005] program syz.3.1548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.266786][T10986] fido_id[10986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 635.278177][T11001] syz.1.1552 (11001): drop_caches: 2 [ 637.086192][ T31] usb 4-1: USB disconnect, device number 50 [ 640.038761][T11048] syz.0.1567 (11048): drop_caches: 2 [ 640.859309][ T31] IPVS: starting estimator thread 0... [ 641.166897][T11050] IPVS: using max 6 ests per chain, 14400 per kthread [ 641.536022][ T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 641.687950][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 641.691782][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.691829][ T31] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 641.691853][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.779002][ T31] usb 1-1: config 0 descriptor?? [ 642.349068][T11081] program syz.0.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.934126][ T7491] usb 1-1: USB disconnect, device number 50 [ 646.978478][T11093] syz.2.1583 (11093): drop_caches: 2 [ 652.671989][ T5861] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 652.815969][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 652.818774][ T5861] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.818820][ T5861] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 652.818845][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.862328][ T5861] usb 2-1: config 0 descriptor?? [ 653.424134][T11151] program syz.1.1598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.816876][ T7491] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 654.094647][T11166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1610'. [ 654.363576][ T5861] IPVS: starting estimator thread 0... [ 654.446652][T11174] IPVS: using max 7 ests per chain, 16800 per kthread [ 655.262801][ T5935] usb 2-1: USB disconnect, device number 47 [ 656.017967][T11192] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 656.022238][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 657.384101][ T7491] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 659.384355][ T7491] usb 5-1: device descriptor read/all, error -71 [ 659.796803][ T5607] IPVS: starting estimator thread 0... [ 659.837665][ T5861] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 659.886142][T11211] IPVS: using max 7 ests per chain, 16800 per kthread [ 659.936081][ T31] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 659.985976][ T5935] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 659.999427][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.999467][ T5861] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 660.002506][ T5861] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.002531][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.002550][ T5861] usb 2-1: Product: syz [ 660.002562][ T5861] usb 2-1: Manufacturer: syz [ 660.002575][ T5861] usb 2-1: SerialNumber: syz [ 660.106097][ T5607] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 660.109238][ T31] usb 3-1: config 0 has no interfaces? [ 660.109285][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 660.109299][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.118068][ T31] usb 3-1: config 0 descriptor?? [ 660.155916][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 660.159381][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.159408][ T5935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 660.159447][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 660.159470][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.209671][ T5935] usb 1-1: config 0 descriptor?? [ 660.238031][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.238597][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.253057][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.257578][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.279275][ T5607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.279545][ T5607] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 660.279568][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.341601][ T5607] usb 4-1: config 0 descriptor?? [ 660.356960][ T5861] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 660.366024][ T7491] usb 3-1: USB disconnect, device number 63 [ 660.416650][ T5861] usb 2-1: USB disconnect, device number 48 [ 661.534719][T11229] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 661.593617][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 661.597214][T11229] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.600707][T11229] bond0: (slave team0): Enslaving as an active interface with an up link [ 662.934783][ T5861] usb 1-1: USB disconnect, device number 51 [ 663.684179][ T5861] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 663.690558][ T5607] usbhid 4-1:0.0: can't add hid device: -71 [ 663.690696][ T5607] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 663.721149][ T5607] usb 4-1: USB disconnect, device number 51 [ 663.851830][ T5861] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 663.851864][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.879959][ T5861] usb 1-1: config 0 descriptor?? [ 663.894996][ T5861] cp210x 1-1:0.0: cp210x converter detected [ 664.352347][ T5861] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 664.354649][ T5861] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 664.354717][ T5861] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 664.556495][ T5861] usb 1-1: cp210x converter now attached to ttyUSB0 [ 664.593929][ T5861] usb 1-1: USB disconnect, device number 52 [ 664.647419][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 664.650137][ T5861] cp210x 1-1:0.0: device disconnected [ 665.427344][T11258] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1639'. [ 665.535947][ T7491] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 665.616184][ T5935] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 665.689510][ T7491] usb 1-1: config 0 has no interfaces? [ 665.689582][ T7491] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 665.689597][ T7491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.720966][ T7491] usb 1-1: config 0 descriptor?? [ 665.765996][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 665.768654][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.768681][ T5935] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.768718][ T5935] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 665.768743][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.820712][ T5935] usb 3-1: config 0 descriptor?? [ 665.930424][ T5935] usb 1-1: USB disconnect, device number 53 [ 666.277671][T11268] netlink: 'syz.4.1646': attribute type 10 has an invalid length. [ 666.306240][T11268] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.337211][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 666.337801][T11268] bond0: (slave team0): Enslaving as an active interface with an up link [ 669.446156][ T5935] usb 3-1: USB disconnect, device number 64 [ 669.796650][ T5861] IPVS: starting estimator thread 0... [ 669.886099][T11285] IPVS: using max 9 ests per chain, 21600 per kthread [ 670.725974][ T5935] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 670.845995][ T7491] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 670.880242][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.880271][ T5935] usb 5-1: config 0 has no interfaces? [ 670.883388][ T5935] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 670.883419][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 670.883440][ T5935] usb 5-1: Product: syz [ 670.883453][ T5935] usb 5-1: Manufacturer: syz [ 670.883469][ T5935] usb 5-1: SerialNumber: syz [ 670.947672][ T5935] usb 5-1: config 0 descriptor?? [ 671.912994][ T5935] usb 5-1: USB disconnect, device number 63 [ 672.929535][ T7491] usb 2-1: config 0 has no interfaces? [ 672.929579][ T7491] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 672.929604][ T7491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.968265][ T7491] usb 2-1: config 0 descriptor?? [ 673.182946][ T5935] usb 2-1: USB disconnect, device number 49 [ 673.226533][ T7491] libceph: connect (1)[c::]:6789 error -101 [ 673.226735][ T7491] libceph: mon0 (1)[c::]:6789 connect error [ 673.492882][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 673.493102][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 674.306746][ T5607] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 674.798334][ T5607] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.798363][ T5607] usb 1-1: config 0 has no interfaces? [ 674.801372][ T5607] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 674.801400][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 674.801422][ T5607] usb 1-1: Product: syz [ 674.801436][ T5607] usb 1-1: Manufacturer: syz [ 674.801450][ T5607] usb 1-1: SerialNumber: syz [ 674.868477][ T5607] usb 1-1: config 0 descriptor?? [ 675.015936][T11321] ceph: No mds server is up or the cluster is laggy [ 675.124441][ T5607] usb 1-1: USB disconnect, device number 54 [ 676.725926][ T5607] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 676.888773][ T5607] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.888819][ T5607] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 676.892079][ T5607] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 676.892110][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.892130][ T5607] usb 1-1: Product: syz [ 676.892145][ T5607] usb 1-1: Manufacturer: syz [ 676.892156][ T5607] usb 1-1: SerialNumber: syz [ 677.279590][ T5607] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 677.313212][ T5607] usb 1-1: USB disconnect, device number 55 [ 678.065919][ T5607] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 678.515943][ T5935] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 678.698480][ T5935] usb 3-1: config 0 has no interfaces? [ 678.698521][ T5935] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 678.698544][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.718762][ T5607] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.718808][ T5607] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 678.721626][ T5935] usb 3-1: config 0 descriptor?? [ 678.748741][ T5607] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.748762][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.748773][ T5607] usb 1-1: Product: syz [ 678.748781][ T5607] usb 1-1: Manufacturer: syz [ 678.748789][ T5607] usb 1-1: SerialNumber: syz [ 679.786993][ T7491] usb 3-1: USB disconnect, device number 65 [ 680.484044][ T5607] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 680.544961][ T5607] usb 1-1: USB disconnect, device number 56 [ 681.995594][T11419] loop5: detected capacity change from 0 to 6 [ 682.040298][T11419] Dev loop5: unable to read RDB block 6 [ 682.040372][T11419] loop5: unable to read partition table [ 682.040602][T11419] loop5: partition table beyond EOD, truncated [ 682.040641][T11419] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 684.584059][T11441] kernel read not supported for file /file0 (pid: 11441 comm: syz.0.1700) [ 684.584396][ T37] audit: type=1800 audit(1782524283.881:19): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1700" name="file0" dev="mqueue" ino=39231 res=0 errno=0 [ 685.890783][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.890862][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.933724][T11470] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1707'. [ 692.089617][T11530] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1721'. [ 692.384809][T11524] loop5: detected capacity change from 0 to 6 [ 692.410911][T11524] Dev loop5: unable to read RDB block 6 [ 692.410946][T11524] loop5: unable to read partition table [ 692.411082][T11524] loop5: partition table beyond EOD, truncated [ 692.411094][T11524] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 693.156104][ T5607] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 694.648353][ T5607] usb 2-1: Using ep0 maxpacket: 16 [ 694.650736][ T5607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.650761][ T5607] usb 2-1: config 0 has no interfaces? [ 694.650793][ T5607] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 694.650817][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.684116][ T5607] usb 2-1: config 0 descriptor?? [ 695.692508][ T5607] usb 2-1: can't set config #0, error -71 [ 695.719671][ T5607] usb 2-1: USB disconnect, device number 50 [ 697.751798][T11566] tipc: Enabled bearer , priority 0 [ 697.752224][T11570] syzkaller0: entered promiscuous mode [ 697.752249][T11570] syzkaller0: entered allmulticast mode [ 697.778028][T11566] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 698.062307][T11583] overlayfs: missing 'lowerdir' [ 698.716447][ T7482] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 699.085652][T11600] loop5: detected capacity change from 0 to 6 [ 699.093727][T11600] Dev loop5: unable to read RDB block 6 [ 699.093772][T11600] loop5: unable to read partition table [ 699.094027][T11600] loop5: partition table beyond EOD, truncated [ 699.094052][T11600] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 699.145930][ T7482] usb 4-1: Using ep0 maxpacket: 32 [ 699.203468][ T7482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.203497][ T7482] usb 4-1: config 0 has no interfaces? [ 699.203541][ T7482] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 699.203566][ T7482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.246423][T11564] tipc: Resetting bearer [ 700.437577][ T7482] usb 4-1: config 0 descriptor?? [ 700.866062][ T7491] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 701.015902][ T7491] usb 5-1: Using ep0 maxpacket: 16 [ 701.022603][ T7491] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.022631][ T7491] usb 5-1: config 0 has no interfaces? [ 701.022663][ T7491] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 701.022688][ T7491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.084775][ T7491] usb 5-1: config 0 descriptor?? [ 701.216769][ T7491] usb 5-1: USB disconnect, device number 64 [ 701.710305][T11564] tipc: Disabling bearer [ 702.670362][ T31] usb 4-1: USB disconnect, device number 52 [ 703.326494][T11644] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1752'. [ 703.414856][T11650] overlayfs: missing 'lowerdir' [ 703.974109][T11660] netlink: 'syz.3.1754': attribute type 10 has an invalid length. [ 703.976151][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1754'. [ 707.895938][ T7482] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 708.045950][ T7482] usb 1-1: Using ep0 maxpacket: 16 [ 708.048994][ T7482] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 708.049025][ T7482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.158398][ T7482] usb 1-1: config 0 descriptor?? [ 709.643935][ T7482] usb 1-1: can't set config #0, error -71 [ 709.686976][ T7482] usb 1-1: USB disconnect, device number 57 [ 709.803083][T11691] overlayfs: overlapping lowerdir path [ 709.901663][ T7491] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 710.046005][ T7491] usb 3-1: Using ep0 maxpacket: 32 [ 710.112737][ T7491] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.112767][ T7491] usb 3-1: config 0 has no interfaces? [ 710.112799][ T7491] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 710.112823][ T7491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.328797][ T7491] usb 3-1: config 0 descriptor?? [ 710.434442][T11707] overlayfs: missing 'lowerdir' [ 710.716851][T11713] netlink: 'syz.4.1766': attribute type 10 has an invalid length. [ 710.764133][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1766'. [ 711.862519][T11718] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1765'. [ 713.458905][ T7491] usb 3-1: USB disconnect, device number 66 [ 715.225961][ T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 715.346940][T11760] overlayfs: missing 'workdir' [ 715.416811][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 715.418929][ T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 715.418960][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.448520][ T31] usb 2-1: config 0 descriptor?? [ 715.467517][ T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 715.845452][ T31] usb 2-1: Detected FT232B [ 716.764841][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 716.765344][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 716.783017][ T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 716.831749][ T31] usb 2-1: USB disconnect, device number 51 [ 717.107369][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 717.112347][ T31] ftdi_sio 2-1:0.0: device disconnected [ 718.420341][ T7491] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 718.576034][ T7491] usb 1-1: Using ep0 maxpacket: 16 [ 718.580472][ T7491] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 718.580501][ T7491] usb 1-1: config 0 has no interface number 0 [ 718.580550][ T7491] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 718.580578][ T7491] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 718.621140][ T7491] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 718.621170][ T7491] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 718.621189][ T7491] usb 1-1: Product: syz [ 718.621202][ T7491] usb 1-1: SerialNumber: syz [ 718.631337][ T7491] usb 1-1: config 0 descriptor?? [ 718.756970][ T7491] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 718.778685][ T7491] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input16 [ 718.835353][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 719.033094][T11774] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1782'. [ 719.409003][T11778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.966081][T11781] syz.1.1783 (11781): drop_caches: 2 [ 723.455867][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.456147][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.456402][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.456658][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.456913][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.457168][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.457421][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.457679][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.457971][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.458229][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 723.726473][ T31] usb 1-1: USB disconnect, device number 58 [ 723.726563][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 724.880539][ T31] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 725.445930][ T5861] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 725.598549][ T5861] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 725.598584][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.605007][ T5861] usb 2-1: config 0 descriptor?? [ 725.695342][ T5861] cp210x 2-1:0.0: cp210x converter detected [ 726.025387][ T5861] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 726.033890][ T5861] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 726.048847][ T5861] usb 2-1: cp210x converter now attached to ttyUSB0 [ 726.229847][ T5327] usb 2-1: USB disconnect, device number 52 [ 726.256843][ T5327] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 726.260354][ T5327] cp210x 2-1:0.0: device disconnected [ 726.908556][ T5327] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 727.056975][ T5327] usb 1-1: Using ep0 maxpacket: 16 [ 727.059382][ T5327] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 727.059413][ T5327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.080907][ T5327] usb 1-1: config 0 descriptor?? [ 727.114216][ T5327] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 727.296980][ T5327] usb 1-1: Detected FT232B [ 727.515906][ T5327] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 727.517439][ T5327] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 727.543837][ T5327] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 727.575552][ T5327] usb 1-1: USB disconnect, device number 59 [ 727.637624][T11822] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1793'. [ 727.648045][ T5327] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 727.670506][ T5327] ftdi_sio 1-1:0.0: device disconnected [ 728.718941][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 728.767883][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 728.772626][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 728.784062][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 728.872756][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 729.509767][T11836] syz.0.1798 (11836): drop_caches: 2 [ 731.006145][ T5608] Bluetooth: hci5: command tx timeout [ 732.214190][T11840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1799'. [ 732.314195][ T5608] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 733.095914][ T5608] Bluetooth: hci5: command tx timeout [ 733.221256][T11875] Bluetooth: MGMT ver 1.23 [ 733.221365][T11875] Bluetooth: hci0: invalid len left 7, exp >= 243 [ 735.166108][ T5608] Bluetooth: hci5: command tx timeout [ 737.296151][ T5608] Bluetooth: hci5: command tx timeout [ 738.127048][T11933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1824'. [ 741.800599][T11954] Falling back ldisc for ttyS3. [ 744.875915][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 745.038643][ T31] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 745.038678][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.086203][ T31] usb 4-1: config 0 descriptor?? [ 745.107688][ T31] cp210x 4-1:0.0: cp210x converter detected [ 745.516424][ T31] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 745.518535][ T31] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 745.560547][ T31] usb 4-1: cp210x converter now attached to ttyUSB0 [ 745.722433][ T7491] usb 4-1: USB disconnect, device number 53 [ 745.733407][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.733528][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.733755][T11825] bridge_slave_0: entered allmulticast mode [ 745.748170][T11825] bridge_slave_0: entered promiscuous mode [ 745.810281][ T7491] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 745.822392][ T7491] cp210x 4-1:0.0: device disconnected [ 746.160905][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.161105][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.161322][T11825] bridge_slave_1: entered allmulticast mode [ 746.173814][T11825] bridge_slave_1: entered promiscuous mode [ 746.766816][T12022] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1851'. [ 747.856501][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.856576][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.101294][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.134642][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.867308][ T37] audit: type=1800 audit(1782524348.341:20): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1861" name="file0" dev="overlay" ino=2039 res=0 errno=0 [ 749.998853][T11825] team0: Port device team_slave_0 added [ 750.314981][T11825] team0: Port device team_slave_1 added [ 750.908101][T12054] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 750.908130][T12054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 751.946163][T12054] vhci_hcd vhci_hcd.0: Device attached [ 751.969965][T12060] vhci_hcd: connection closed [ 752.010810][ T6990] vhci_hcd vhci_hcd.3: stop threads [ 752.011944][ T6990] vhci_hcd vhci_hcd.3: release socket [ 752.031260][ T6990] vhci_hcd vhci_hcd.3: disconnect device [ 752.036069][ T5861] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 752.060334][ T6933] bridge_slave_1: left allmulticast mode [ 752.060520][ T6933] bridge_slave_1: left promiscuous mode [ 752.128803][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.185906][ T7482] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 752.298015][ T6933] bridge_slave_0: left allmulticast mode [ 752.298043][ T6933] bridge_slave_0: left promiscuous mode [ 752.298246][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.315951][ T7482] usb 1-1: device descriptor read/64, error -71 [ 752.566980][ T7482] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 752.772003][ T7482] usb 1-1: device descriptor read/64, error -71 [ 752.853645][ T5608] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 752.929722][ T7482] usb usb1-port1: attempt power cycle [ 753.466924][ T7482] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 753.577770][ T7482] usb 1-1: device descriptor read/8, error -71 [ 753.836012][ T7482] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 753.861579][ T7482] usb 1-1: device descriptor read/8, error -71 [ 753.982070][ T7482] usb usb1-port1: unable to enumerate USB device [ 754.046256][ T5607] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 754.202863][ T5607] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 754.202902][ T5607] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.202925][ T5607] usb 4-1: config 0 interface 0 has no altsetting 0 [ 754.202959][ T5607] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 754.202981][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.274653][ T5607] usb 4-1: config 0 descriptor?? [ 754.708190][ T5607] hid_parser_main: 19 callbacks suppressed [ 754.708217][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708247][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708273][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708296][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708320][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708344][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708367][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708391][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708414][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.708438][ T5607] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 754.716539][ T5607] hid-rmi 0003:06CB:81A7.0003: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 754.903525][ T7491] usb 4-1: USB disconnect, device number 54 [ 755.444570][ T6933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.440928][ T6933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.516869][ T6933] bond0 (unregistering): (slave team0): Releasing backup interface [ 756.561164][ T6933] bond0 (unregistering): Released all slaves [ 756.706641][ T6933] bond1 (unregistering): (slave bond2): Releasing backup interface [ 756.747538][ T6933] bond1 (unregistering): Released all slaves [ 756.911020][ T6933] bond2 (unregistering): Released all slaves [ 756.966536][ T6933] bond3 (unregistering): (slave bond4): Releasing backup interface [ 757.658486][ T6933] bond3 (unregistering): Released all slaves [ 757.811186][ T6933] bond4 (unregistering): Released all slaves [ 758.096475][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.096495][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.096523][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.108444][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.108460][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.108484][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.639934][T11825] hsr_slave_0: entered promiscuous mode [ 758.642567][T11825] hsr_slave_1: entered promiscuous mode [ 758.655381][T11825] debugfs: 'hsr0' already exists in 'hsr' [ 758.655408][T11825] Cannot create hsr debugfs directory [ 758.705971][ T7491] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 758.839350][ T7491] usb 2-1: device descriptor read/64, error -71 [ 758.845156][ T31] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 758.994567][ T6933] tipc: Left network mode [ 759.063087][ T31] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 759.063122][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.063143][ T31] usb 4-1: Product: syz [ 759.063157][ T31] usb 4-1: Manufacturer: syz [ 759.063171][ T31] usb 4-1: SerialNumber: syz [ 759.087201][ T7491] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 759.182260][ T31] usb 4-1: 1:1 : bogus bTerminalLink 4 [ 759.226483][ T7491] usb 2-1: device descriptor read/64, error -71 [ 759.339699][ T7491] usb usb2-port1: attempt power cycle [ 759.381271][ T31] usb 4-1: unit 4 not found! [ 759.381300][ T31] usb 4-1: unit 197 not found! [ 759.697400][ T31] usb 4-1: USB disconnect, device number 55 [ 759.739819][ T7491] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 759.756644][ T7491] usb 2-1: device descriptor read/8, error -71 [ 759.825879][ T36] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 759.978693][ T36] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 759.978728][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.985716][ T36] usb 1-1: config 0 descriptor?? [ 760.019441][ T36] cp210x 1-1:0.0: cp210x converter detected [ 760.215363][ T7491] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 760.236820][ T7491] usb 2-1: device descriptor read/8, error -71 [ 760.272158][T10239] udevd[10239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.352393][ T7491] usb usb2-port1: unable to enumerate USB device [ 760.874917][ T36] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 760.891453][ T36] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 760.908653][ T36] usb 1-1: cp210x converter now attached to ttyUSB0 [ 761.225995][ T36] usb 1-1: USB disconnect, device number 64 [ 761.323397][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 761.338181][ T36] cp210x 1-1:0.0: device disconnected [ 762.783237][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 763.275302][T12174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 763.275331][T12174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 763.430806][T12174] vhci_hcd vhci_hcd.0: Device attached [ 763.452346][T12175] vhci_hcd: connection closed [ 763.473543][ T13] vhci_hcd vhci_hcd.3: stop threads [ 763.473574][ T13] vhci_hcd vhci_hcd.3: release socket [ 763.473656][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 763.495898][ T36] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 763.516068][ T7491] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 763.710001][ T36] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 763.710036][ T36] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.710055][ T36] usb 3-1: config 0 interface 0 has no altsetting 0 [ 763.710077][ T36] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 763.710091][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.820115][ T36] usb 3-1: config 0 descriptor?? [ 764.359076][ T36] hid_parser_main: 28 callbacks suppressed [ 764.359115][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359186][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359218][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359248][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359271][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359296][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359321][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359345][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359370][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.359394][ T36] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 764.512298][ T36] hid-rmi 0003:06CB:81A7.0004: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 764.530689][ T36] usb 3-1: USB disconnect, device number 67 [ 765.008444][ T5607] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 765.346018][ T5607] usb 2-1: device descriptor read/64, error -71 [ 765.638950][ T5607] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 765.659024][T12192] fido_id[12192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 765.775868][ T5607] usb 2-1: device descriptor read/64, error -71 [ 765.886485][ T5607] usb usb2-port1: attempt power cycle [ 765.894406][T11825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 767.198585][ T5607] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 767.229716][ T5607] usb 2-1: device descriptor read/8, error -71 [ 767.465896][ T5607] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 767.486658][ T5607] usb 2-1: device descriptor read/8, error -71 [ 767.554353][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.615275][ T5608] block nbd0: Receive control failed (result -32) [ 767.703820][ T5607] usb usb2-port1: unable to enumerate USB device [ 767.865624][T11825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 767.944691][T10239] block nbd0: shutting down sockets [ 767.995908][ T7491] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 768.036416][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.048858][T11825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 768.149706][ T7491] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.149761][ T7491] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 768.149806][ T7491] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 768.149829][ T7491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.268961][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.309161][ T7491] usb 4-1: config 0 descriptor?? [ 768.331966][ T7491] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 768.657648][ T6933] hsr_slave_0: left promiscuous mode [ 768.677754][T12229] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 768.677785][T12229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 768.677907][T12229] vhci_hcd vhci_hcd.0: Device attached [ 768.683584][T12230] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 768.691527][ T159] vhci_hcd vhci_hcd.1: stop threads [ 768.691547][ T159] vhci_hcd vhci_hcd.1: release socket [ 768.733534][ T6933] hsr_slave_1: left promiscuous mode [ 768.734388][ T159] vhci_hcd vhci_hcd.1: disconnect device [ 768.738410][ T6933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.799355][ T6933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.961565][ T7491] usb 4-1: USB disconnect, device number 56 [ 773.075995][ T5935] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 773.237795][ T5935] usb 2-1: device descriptor read/64, error -71 [ 773.366753][ T6933] team0 (unregistering): Port device team_slave_1 removed [ 773.426631][ T6933] team0 (unregistering): Port device team_slave_0 removed [ 773.475903][ T5935] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 773.585932][ T7491] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 773.606039][ T5935] usb 2-1: device descriptor read/64, error -71 [ 773.670094][T11825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 773.720458][ T5935] usb usb2-port1: attempt power cycle [ 773.728090][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.743289][ T7491] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 773.743329][ T7491] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 773.745117][ T7491] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 773.745146][ T7491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 773.745166][ T7491] usb 4-1: SerialNumber: syz [ 773.775265][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 773.802262][ T7491] cdc_ether 4-1:1.0: missing cdc header descriptor [ 773.805311][ T7491] usb-storage 4-1:1.0: USB Mass Storage device detected [ 774.027416][ T7491] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 774.028732][ T7491] scsi host1: usb-storage 4-1:1.0 [ 774.055940][ T5935] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 774.076946][ T5935] usb 2-1: device descriptor read/8, error -71 [ 774.358105][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.380879][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.386023][ T5935] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 774.406779][ T5935] usb 2-1: device descriptor read/8, error -71 [ 774.430580][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.458518][T11825] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.489909][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.490048][ T6627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.516599][ T5935] usb usb2-port1: unable to enumerate USB device [ 774.586461][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.586614][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.650163][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.650959][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.664952][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.665557][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.852995][T12293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.854191][T12293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.118753][T12293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.119423][T12293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.370664][ T7482] usb 4-1: USB disconnect, device number 57 [ 781.228819][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 781.247960][ T6933] IPVS: stop unused estimator thread 0... [ 782.046119][ T7483] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 782.308102][ T7483] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.308138][ T7483] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.308164][ T7483] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 782.308177][ T7483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.330866][ T7483] usb 2-1: config 0 descriptor?? [ 782.442391][ T7483] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 782.586510][T11825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.755425][T11825] veth0_vlan: entered promiscuous mode [ 784.870000][T11825] veth1_vlan: entered promiscuous mode [ 785.125227][ T9332] usb 2-1: USB disconnect, device number 65 [ 785.181519][T11825] veth0_macvtap: entered promiscuous mode [ 785.281966][T11825] veth1_macvtap: entered promiscuous mode [ 785.398931][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 787.546888][T11825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.184847][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 792.467742][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 792.473165][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 792.474566][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 792.524306][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 794.193434][T12491] openvswitch: netlink: Key type 30 is not supported [ 794.437752][T12490] usb usb8: usbfs: process 12490 (syz.1.1965) did not claim interface 0 before use [ 794.626864][ T4910] Bluetooth: hci1: command tx timeout [ 796.686046][ T4910] Bluetooth: hci1: command tx timeout [ 798.156046][ T5861] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 798.337527][ T5861] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 798.337568][ T5861] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 798.341427][ T5861] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 798.341458][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 798.341478][ T5861] usb 3-1: SerialNumber: syz [ 798.531890][ T5861] cdc_ether 3-1:1.0: missing cdc header descriptor [ 798.549968][ T5861] usb-storage 3-1:1.0: USB Mass Storage device detected [ 798.594129][ T5861] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 798.607032][T12508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1968'. [ 798.612653][ T5861] scsi host1: usb-storage 3-1:1.0 [ 798.766051][ T4910] Bluetooth: hci1: command tx timeout [ 799.096061][T12522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.100793][T12522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.302451][T12522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.302823][T12522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.314746][T12522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.315335][T12522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.664053][T12533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1977'. [ 800.845875][ T4910] Bluetooth: hci1: command tx timeout [ 802.439516][ T7483] usb 3-1: USB disconnect, device number 68 [ 804.838944][T12579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1988'. [ 806.210942][T12596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.366018][ T36] ------------[ cut here ]------------ [ 808.366035][ T36] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 808.366051][ T36] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:1/36 [ 808.366240][ T36] Modules linked in: [ 808.366261][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 808.366284][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.366299][ T36] Workqueue: events drm_fb_helper_damage_work [ 808.366369][ T36] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 808.366399][ T36] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 65 f2 cc fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 808.366418][ T36] RSP: 0018:ffffc90000ab78e0 EFLAGS: 00010246 [ 808.366436][ T36] RAX: 1ffff11004aa1800 RBX: 0000000000000000 RCX: 0000000000000000 [ 808.366451][ T36] RDX: ffffffff8bc11c40 RSI: ffffffff8bc2ef00 RDI: ffffffff8f962c70 [ 808.366467][ T36] RBP: ffffc90000ab79c8 R08: 0000000000000000 R09: 0000000000000000 [ 808.366481][ T36] R10: dffffc0000000000 R11: fffffbfff1f15b9f R12: ffffffff8bc2ef00 [ 808.366496][ T36] R13: ffff88802550c000 R14: ffffffff8f962c70 R15: ffffffff8bc11c40 [ 808.366512][ T36] FS: 0000000000000000(0000) GS:ffff888126217000(0000) knlGS:0000000000000000 [ 808.366529][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.366544][ T36] CR2: 00007f606a4eb560 CR3: 0000000043b4c000 CR4: 00000000003526f0 [ 808.366565][ T36] Call Trace: [ 808.366573][ T36] [ 808.366587][ T36] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 808.366615][ T36] ? rt_spin_unlock+0x157/0x200 [ 808.366736][ T36] ? __pfx_autoremove_wake_function+0x10/0x10 [ 808.366853][ T36] ? rt_spin_unlock+0x163/0x200 [ 808.366886][ T36] ? drm_vblank_get+0x147/0x280 [ 808.366916][ T36] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 808.366965][ T36] drm_fb_helper_damage_work+0x125/0x700 [ 808.366997][ T36] ? process_scheduled_works+0xa20/0x14e0 [ 808.367082][ T36] ? process_scheduled_works+0xa20/0x14e0 [ 808.367113][ T36] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 808.367147][ T36] ? rcu_is_watching+0x15/0xb0 [ 808.367212][ T36] ? process_scheduled_works+0xa20/0x14e0 [ 808.367242][ T36] process_scheduled_works+0xa8e/0x14e0 [ 808.367303][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 808.367342][ T36] ? assign_work+0x3cf/0x5d0 [ 808.367376][ T36] worker_thread+0xa47/0xfb0 [ 808.367460][ T36] ? __kthread_parkme+0x71/0x1f0 [ 808.367519][ T36] kthread+0x388/0x470 [ 808.367544][ T36] ? __pfx_worker_thread+0x10/0x10 [ 808.367572][ T36] ? __pfx_kthread+0x10/0x10 [ 808.367599][ T36] ret_from_fork+0x514/0xb70 [ 808.367672][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 808.367698][ T36] ? __switch_to+0xc89/0x1420 [ 808.367742][ T36] ? __pfx_kthread+0x10/0x10 [ 808.367778][ T36] ret_from_fork_asm+0x1a/0x30 [ 808.367845][ T36] [ 808.367856][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 808.367871][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 808.367894][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 808.367907][ T36] Workqueue: events drm_fb_helper_damage_work [ 808.367936][ T36] Call Trace: [ 808.367945][ T36] [ 808.367953][ T36] vpanic+0x56c/0xa60 [ 808.367988][ T36] ? __pfx__printk+0x10/0x10 [ 808.368018][ T36] ? __pfx_vpanic+0x10/0x10 [ 808.368042][ T36] ? is_bpf_text_address+0x292/0x2b0 [ 808.368116][ T36] ? is_bpf_text_address+0x26/0x2b0 [ 808.368156][ T36] panic+0xc5/0xd0 [ 808.368182][ T36] ? __pfx_panic+0x10/0x10 [ 808.368220][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 808.368253][ T36] __warn+0x315/0x4c0 [ 808.368277][ T36] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 808.368309][ T36] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 808.368338][ T36] __report_bug+0x331/0x530 [ 808.368406][ T36] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 808.368437][ T36] ? __pfx___report_bug+0x10/0x10 [ 808.368471][ T36] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 808.368493][ T36] ? lockdep_hardirqs_on+0x7a/0x110 [ 808.368526][ T36] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 808.368553][ T36] report_bug_entry+0x19a/0x290 [ 808.368577][ T36] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 808.368613][ T36] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 808.368653][ T36] handle_bug+0xce/0x200 [ 808.368712][ T36] exc_invalid_op+0x1a/0x50 [ 808.368745][ T36] asm_exc_invalid_op+0x1a/0x20 [ 808.368790][ T36] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 808.368820][ T36] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 65 f2 cc fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 808.368838][ T36] RSP: 0018:ffffc90000ab78e0 EFLAGS: 00010246 [ 808.368856][ T36] RAX: 1ffff11004aa1800 RBX: 0000000000000000 RCX: 0000000000000000 [ 808.368870][ T36] RDX: ffffffff8bc11c40 RSI: ffffffff8bc2ef00 RDI: ffffffff8f962c70 [ 808.368886][ T36] RBP: ffffc90000ab79c8 R08: 0000000000000000 R09: 0000000000000000 [ 808.368899][ T36] R10: dffffc0000000000 R11: fffffbfff1f15b9f R12: ffffffff8bc2ef00 [ 808.368915][ T36] R13: ffff88802550c000 R14: ffffffff8f962c70 R15: ffffffff8bc11c40 [ 808.368956][ T36] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 808.368982][ T36] ? rt_spin_unlock+0x157/0x200 [ 808.369010][ T36] ? __pfx_autoremove_wake_function+0x10/0x10 [ 808.369038][ T36] ? rt_spin_unlock+0x163/0x200 [ 808.369070][ T36] ? drm_vblank_get+0x147/0x280 [ 808.369100][ T36] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 808.369128][ T36] drm_fb_helper_damage_work+0x125/0x700 [ 808.369160][ T36] ? process_scheduled_works+0xa20/0x14e0 [ 808.369192][ T36] ? process_scheduled_works+0xa20/0x14e0 [ 808.369223][ T36] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 808.369256][ T36] ? rcu_is_watching+0x15/0xb0 [ 808.369290][ T36] ? process_scheduled_works+0xa20/0x14e0 [ 808.369320][ T36] process_scheduled_works+0xa8e/0x14e0 [ 808.369382][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 808.369421][ T36] ? assign_work+0x3cf/0x5d0 [ 808.369457][ T36] worker_thread+0xa47/0xfb0 [ 808.369506][ T36] ? __kthread_parkme+0x71/0x1f0 [ 808.369539][ T36] kthread+0x388/0x470 [ 808.369564][ T36] ? __pfx_worker_thread+0x10/0x10 [ 808.369593][ T36] ? __pfx_kthread+0x10/0x10 [ 808.369624][ T36] ret_from_fork+0x514/0xb70 [ 808.369652][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 808.369677][ T36] ? __switch_to+0xc89/0x1420 [ 808.369701][ T36] ? __pfx_kthread+0x10/0x10 [ 808.369726][ T36] ret_from_fork_asm+0x1a/0x30 [ 808.369781][ T36] [ 808.370081][ T36] Kernel Offset: disabled