last executing test programs: 6.055061626s ago: executing program 1 (id=8555): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x7ff, 0x10, 0x8, 0x4, 0xe, 0x7, 0x0, 0x1010, 0x12, 0x5, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.6367314s ago: executing program 2 (id=8574): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f", 0x76}, {&(0x7f0000000380)="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", 0x399}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.606984007s ago: executing program 1 (id=8575): openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f7", 0xcd, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 3.42402878s ago: executing program 2 (id=8577): syz_usb_connect(0x0, 0x10e, &(0x7f0000000000)=ANY=[], 0x0) 2.546670958s ago: executing program 3 (id=8580): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2.483367038s ago: executing program 3 (id=8581): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c9"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.238220922s ago: executing program 3 (id=8586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x40, 0x19, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000), 0xfffffcef, 0x0, 0x4800) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800030509000300800006006d00204801e12f012001000000000000000000000000000200000000000000000000000000000001320202fb00000000ff0100000000000000000000000000018406040302080000ff01000000000000000000000000000100000000000000000000ffff64010100fe8800000000000000000000000001010008040400502000fc020000000000000000000000000001fe8000000000000000000000000000aa20010000000000000000000000000001000000000000000000000000000000010c01000000000000010100c204fffffffa000000000000005c07009bba17d8000738000000030c0801000104000000000000fd000000000000000e000000000000000600000000000000feffffffffffffff000000000000000000000000000000000ad9660000001d02007400000000ff01000000000000"], 0x217) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x7, {0x7, 0x22, "59a1b95388"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.145840916s ago: executing program 4 (id=8589): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000002c0)={0x11, &(0x7f0000000300)=[{0x15, '\x00', @st={0x4, [{0x2, @svalue=0x4}, {0x2, @uvalue=0x4}, {0x3, @uvalue=0x40}, {0x2, @svalue=0x4}]}, 0x7}, {0x13, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x1, @svalue=0x4b2}, {0x1, @uvalue=0x4}, {0x2, @uvalue=0x80000000}]}, 0x8}, {0x4, '\x00', @data=0x9, 0x708}, {0x3, '\x00', @buffer={"8f5d7ee0417418d0033744677ea29b490a526eb77c6a47a798574b8ad6c76c7e", 0x20}, 0x5}]}) 2.118466968s ago: executing program 4 (id=8590): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @pix_mp={0xfff, 0x6, 0x31424752, 0x3, 0xc, [{0x1, 0x8}, {0x8, 0xe99a}, {0x1, 0x7}, {0xffffffff, 0xe}, {0x2, 0x6}, {0x37fc}, {0x8}, {0x7}], 0x2, 0x5, 0x0, 0x2}}) 2.051332202s ago: executing program 4 (id=8591): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a", 0xd6}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.048940382s ago: executing program 1 (id=8592): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 1.998785621s ago: executing program 1 (id=8593): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="01002cbd70100400000008000000080009000200000008000c00a80a000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 1.955837592s ago: executing program 1 (id=8594): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f", 0x76}, {&(0x7f0000000380)="0efb18e617048dae506fb6119eb0536e7984081783e7584cd5d8d27033ed437c6246b2b94a22bd62d589a8e3886d9977523fd3e8fd174d51cd86a159d2ef88ab0632d7eb46c792f365df9d56fdd2299f44da364e2ef035705a084bbf2d3fdbeea8f05b35502c909a69f9be0405607e6eed6bcfb3acbf182ba4a2016e207bdacb6f240adf181a764f79d7dd3c93fc3e74f5c0985587deb47eec917dab82f4a194a186cb5515e0133dbdea3633abe499b978e798c2a5a64913d677d3b99927638735b214566ae0f4ca2ec80d1dd27f3249f9f6dd0b7a5ba70c0e7ad0be90ef56c6dc2ef3f445cae39675ff73fffb3aaccbb5f823bd80d94e112b970b266f9e380432314c39fe589e3174bc10b87f3e8f221d46ee42a2544e4b0c26e947fe2667555001e5beefe950450ee8d41080e6fbba3effec8484de4a6f1314e5aaf19d40296a986bc0500f0d731d8bd1f6fa147ba791d1eff8a5d68ece936cc6336ede0e8686c34d3e9f8d12249ef52a61171be50635d5aaf7bc6140128b65220f88aac07fce9ce944f875b7255cbfd1e401a32217573adf2304c47e7c8c9bacfdc2b3ba7b9450c8bb8b44c4b39292f09240d6d3d47f7d421286c1e0e78cde078f74f3c2b53544ca683aa1a8ef31342d09a85e09687dd043df25f595c6a4b941c6f7166654c013be7b347702e2a27d50b2ef78212defab03bb82e1260063a39551f72eab61477f3e8bc673abdd41b5692066dec8d26a4cc6a6f821bcb2f2239972e753fb526e7f33ee49d6cbfcd2b669afbe099cf50d2798f1dd6e8104d05cc4357d742daaa9e333060c59a47fe9335a46b9289f3da0d5ec1ce19597f02ca09442714e2989a3a9b707fc3284de3d4a7d65e3c24c880b8fdad025f7dae7fd70655e4f5b98484de78ff51a7ac3159c3449aa7d222113bea285e75c46c784abfd19a4d4894f284a2e2625eb97b8e35b2af2a9d0eb53fe55ca9ef7acc1b51fbcdd521ed21bc57bc4dbb3923e175c49e04ae30df0f361af2105f7772753cd4d9233a24e858229798d88af5bfa9b450e9d81f5d4c2358a5c1559684659e8f6ef741f29d2a7910cc2b3ba01189c951ee3eb9ad7403590e82448e041e4310f878255156e0247c966fd857fa23086ecebeb7bff416bf21a9df5494c8bae4af0e3da77a274f99e15d07924011cddbbc004f704445cbf6f2940e2a2cca1b3e05b6bcf16f459cae5f12cd26eed0eea757fc60bac3d591380017046d091ec5a5b4b7d910527927b8b4b179c89f04ecab9753de8d0d280e5444b15d647396c13d365e9d7", 0x398}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.923166083s ago: executing program 4 (id=8595): syz_usb_connect(0x0, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600", @ANYBLOB="144110b7a1cc91102a41c8d0d4775bb9"], 0x0) 1.904190072s ago: executing program 1 (id=8596): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1b4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x9f, 0x1, 0x3, 0x1, 0x2, 0xd6, {0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x67, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 976.51823ms ago: executing program 0 (id=8598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/200, 0xc8, 0x0, 0x0}, &(0x7f0000001380)=0x40) 888.226063ms ago: executing program 0 (id=8599): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f", 0x76}, {&(0x7f0000000380)="0efb18e617048dae506fb6119eb0536e7984081783e7584cd5d8d27033ed437c6246b2b94a22bd62d589a8e3886d9977523fd3e8fd174d51cd86a159d2ef88ab0632d7eb46c792f365df9d56fdd2299f44da364e2ef035705a084bbf2d3fdbeea8f05b35502c909a69f9be0405607e6eed6bcfb3acbf182ba4a2016e207bdacb6f240adf181a764f79d7dd3c93fc3e74f5c0985587deb47eec917dab82f4a194a186cb5515e0133dbdea3633abe499b978e798c2a5a64913d677d3b99927638735b214566ae0f4ca2ec80d1dd27f3249f9f6dd0b7a5ba70c0e7ad0be90ef56c6dc2ef3f445cae39675ff73fffb3aaccbb5f823bd80d94e112b970b266f9e380432314c39fe589e3174bc10b87f3e8f221d46ee42a2544e4b0c26e947fe2667555001e5beefe950450ee8d41080e6fbba3effec8484de4a6f1314e5aaf19d40296a986bc0500f0d731d8bd1f6fa147ba791d1eff8a5d68ece936cc6336ede0e8686c34d3e9f8d12249ef52a61171be50635d5aaf7bc6140128b65220f88aac07fce9ce944f875b7255cbfd1e401a32217573adf2304c47e7c8c9bacfdc2b3ba7b9450c8bb8b44c4b39292f09240d6d3d47f7d421286c1e0e78cde078f74f3c2b53544ca683aa1a8ef31342d09a85e09687dd043df25f595c6a4b941c6f7166654c013be7b347702e2a27d50b2ef78212defab03bb82e1260063a39551f72eab61477f3e8bc673abdd41b5692066dec8d26a4cc6a6f821bcb2f2239972e753fb526e7f33ee49d6cbfcd2b669afbe099cf50d2798f1dd6e8104d05cc4357d742daaa9e333060c59a47fe9335a46b9289f3da0d5ec1ce19597f02ca09442714e2989a3a9b707fc3284de3d4a7d65e3c24c880b8fdad025f7dae7fd70655e4f5b98484de78ff51a7ac3159c3449aa7d222113bea285e75c46c784abfd19a4d4894f284a2e2625eb97b8e35b2af2a9d0eb53fe55ca9ef7acc1b51fbcdd521ed21bc57bc4dbb3923e175c49e04ae30df0f361af2105f7772753cd4d9233a24e858229798d88af5bfa9b450e9d81f5d4c2358a5c1559684659e8f6ef741f29d2a7910cc2b3ba01189c951ee3eb9ad7403590e82448e041e4310f878255156e0247c966fd857fa23086ecebeb7bff416bf21a9df5494c8bae4af0e3da77a274f99e15d07924011cddbbc004f704445cbf6f2940e2a2cca1b3e05b6bcf16f459cae5f12cd26eed0eea757fc60bac3d591380017046d091ec5a5b4b7d910527927b8b4b179c89f04ecab9753de8d0d280e5444b15d647396c13d365e9d72a", 0x399}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 887.816731ms ago: executing program 0 (id=8600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x407f, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 875.686619ms ago: executing program 0 (id=8601): ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000340)={0x0, 0x74, 0x5c0000, 0x3, 0x4, 0x0, 0x6, 0x5}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000540)=0xfff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e695", 0x70}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d6", 0x51}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 836.569991ms ago: executing program 0 (id=8602): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000340)='1', 0x1) 768.417114ms ago: executing program 0 (id=8603): openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f7", 0xcd, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 650.646691ms ago: executing program 4 (id=8604): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="01002cbd70100400000008000000080009000200000008000c00a80a000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 626.00193ms ago: executing program 4 (id=8605): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x66, &(0x7f0000000940)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x20, 0x15, 0x1, "1c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 576.503352ms ago: executing program 3 (id=8606): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76", 0x8e}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2d", 0x28}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 453.988846ms ago: executing program 3 (id=8607): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000f40109010200000000000000080800064000000001"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008051) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000340)={0x0, 0x74, 0x5c0000, 0x3, 0x4, 0x0, 0x6, 0x5}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000540)=0xfff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811", 0x5a}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d6", 0x51}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 359.831097ms ago: executing program 3 (id=8608): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 316.845042ms ago: executing program 2 (id=8609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) shutdown(r0, 0x1) 227.253071ms ago: executing program 2 (id=8610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x11}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) 109.240858ms ago: executing program 2 (id=8611): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f", 0x76}, {&(0x7f0000000380)="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", 0x399}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=8612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = syz_open_dev$I2C(0x0, 0x6, 0x204600) ioctl$I2C_SLAVE(r2, 0x703, 0x291) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') fsmount(0xffffffffffffffff, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000200)={@remote, @rand_addr=0x64010102}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3, 0x0, 0x0) openat$tcp_congestion(0xffffff9c, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) kernel console output (not intermixed with test programs): ave_1: left promiscuous mode [ 1727.362996][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.372691][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.536748][T23273] usb 2-1: USB disconnect, device number 43 [ 1727.576979][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1727.598861][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1727.610724][T14649] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1727.630867][T14649] usb 5-1: device descriptor read/8, error -71 [ 1727.713442][T32203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.734184][T32203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.755097][T32203] bridge_slave_0: entered allmulticast mode [ 1727.777450][T32203] bridge_slave_0: entered promiscuous mode [ 1727.792518][T32203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.807688][T32203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.825689][T32203] bridge_slave_1: entered allmulticast mode [ 1727.846785][T32283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1727.855510][T32203] bridge_slave_1: entered promiscuous mode [ 1727.889974][T14649] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1727.928015][T14649] usb 5-1: device descriptor read/8, error -71 [ 1727.943107][T32203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.955667][T32203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.054462][T14649] usb usb5-port1: unable to enumerate USB device [ 1728.080643][T32203] team0: Port device team_slave_0 added [ 1728.117750][T32203] team0: Port device team_slave_1 added [ 1728.129436][T32293] netlink: 774 bytes leftover after parsing attributes in process `syz.2.7460'. [ 1728.186025][ T13] IPVS: stop unused estimator thread 0... [ 1728.189470][T24296] Bluetooth: hci4: ISO packet for unknown connection handle 201 [ 1728.280175][T24296] Bluetooth: hci3: command tx timeout [ 1728.304074][T32203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.333442][T32203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1728.401779][T32203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1728.444527][T32203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1728.465918][T32203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1728.493311][T32203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.593734][T32203] hsr_slave_0: entered promiscuous mode [ 1728.602322][T32203] hsr_slave_1: entered promiscuous mode [ 1729.129856][T14649] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1729.300197][T14649] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1729.329250][T14649] usb 2-1: config index 0 descriptor too short (expected 137, got 18) [ 1729.348160][T14649] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1729.361321][T14649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1729.370055][T14649] usb 2-1: SerialNumber: syz [ 1729.600170][T14649] usb 2-1: USB disconnect, device number 44 [ 1729.755350][T32203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1729.779569][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1729.788329][T32203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1729.803249][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1729.811804][T32203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1729.822991][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1729.835290][T32203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1729.851400][T32203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1729.972465][T32203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.996220][T32203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.009363][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.016661][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.025819][ T5705] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1730.038446][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.045626][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.171514][T32203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1730.184991][T32370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7490'. [ 1730.201804][ T5705] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1730.223110][ T5705] usb 3-1: no configurations [ 1730.232375][ T5705] usb 3-1: can't read configurations, error -22 [ 1730.244068][T32203] veth0_vlan: entered promiscuous mode [ 1730.285620][T32203] veth1_vlan: entered promiscuous mode [ 1730.291950][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.298394][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.319859][T23135] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1730.343574][T32203] veth0_macvtap: entered promiscuous mode [ 1730.361903][T24296] Bluetooth: hci3: command tx timeout [ 1730.380788][T32203] veth1_macvtap: entered promiscuous mode [ 1730.387257][ T5705] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1730.432630][T32203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1730.467501][T32203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.469951][T23135] usb 4-1: device descriptor read/64, error -71 [ 1730.509816][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.526084][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.559961][T12418] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.568862][T12418] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.578232][ T5705] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1730.588163][ T5705] usb 3-1: no configurations [ 1730.600929][ T5705] usb 3-1: can't read configurations, error -22 [ 1730.617097][ T5705] usb usb3-port1: attempt power cycle [ 1730.724276][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.732874][T23135] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1730.741820][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.778082][T12418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.786684][T12418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.803712][T32393] netlink: 774 bytes leftover after parsing attributes in process `syz.4.7502'. [ 1730.880203][T23135] usb 4-1: device descriptor read/64, error -71 [ 1730.969924][ T5705] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1731.001179][T23135] usb usb4-port1: attempt power cycle [ 1731.002582][ T5705] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1731.020817][ T5705] usb 3-1: no configurations [ 1731.027901][ T5705] usb 3-1: can't read configurations, error -22 [ 1731.181674][ T5705] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1731.233028][ T5705] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1731.251530][T32418] netlink: 774 bytes leftover after parsing attributes in process `syz.0.7512'. [ 1731.253747][ T5705] usb 3-1: no configurations [ 1731.275833][ T5705] usb 3-1: can't read configurations, error -22 [ 1731.293003][ T5705] usb usb3-port1: unable to enumerate USB device [ 1731.349861][T23135] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1731.387611][T23135] usb 4-1: device descriptor read/8, error -71 [ 1731.636132][T32444] netlink: 774 bytes leftover after parsing attributes in process `syz.4.7524'. [ 1731.647310][T23135] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1731.680428][T23135] usb 4-1: device descriptor read/8, error -71 [ 1731.791564][T23135] usb usb4-port1: unable to enumerate USB device [ 1731.851288][ T5705] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1732.020710][ T5705] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1732.036028][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.047348][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1732.060088][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1732.071971][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1732.083375][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1732.101393][T32472] netlink: 774 bytes leftover after parsing attributes in process `syz.0.7538'. [ 1732.102450][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1732.119393][ T5705] usb 2-1: Product: syz [ 1732.124084][T23273] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1732.136941][ T5705] usb 2-1: Manufacturer: syz [ 1732.142820][ T5705] usb 2-1: SerialNumber: syz [ 1732.150564][ T5705] usb 2-1: config 0 descriptor?? [ 1732.301960][T23273] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1732.313988][T23273] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1732.328934][T23273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1732.337874][T23273] usb 5-1: SerialNumber: syz [ 1732.364057][ T5705] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1732.373203][ T5705] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1732.395191][T32483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7543'. [ 1732.397384][ T5705] usb 2-1: USB disconnect, device number 45 [ 1732.565178][T23273] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1732.585779][T23273] usb 5-1: USB disconnect, device number 66 [ 1732.969151][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7557'. [ 1733.758112][T32557] syzkaller0: entered promiscuous mode [ 1733.771311][T32557] syzkaller0: entered allmulticast mode [ 1733.819830][ T5614] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1733.960179][ T5614] usb 4-1: device descriptor read/64, error -71 [ 1734.209968][ T5614] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1734.349831][ T5614] usb 4-1: device descriptor read/64, error -71 [ 1734.460779][ T5614] usb usb4-port1: attempt power cycle [ 1734.544030][T32571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7580'. [ 1734.819829][ T5614] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1734.840518][ T5614] usb 4-1: device descriptor read/8, error -71 [ 1734.979847][T24971] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1735.091250][ T5614] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1735.121417][ T5614] usb 4-1: device descriptor read/8, error -71 [ 1735.132190][T24971] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1735.150765][T24971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.178977][T24971] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1735.206739][T24971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.217005][T24971] usb 1-1: Product: syz [ 1735.226789][T24971] usb 1-1: Manufacturer: syz [ 1735.237948][T24971] usb 1-1: SerialNumber: syz [ 1735.250296][ T5614] usb usb4-port1: unable to enumerate USB device [ 1735.263043][T24971] usbtmc 1-1:1.0: bulk endpoints not found [ 1735.286035][T24971] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input72 [ 1735.468789][T24971] usb 1-1: USB disconnect, device number 39 [ 1735.512642][ T5619] udevd[5619]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1735.524056][ T5619] udevd[5619]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1735.721768][T32590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1735.728620][T32590] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1735.775223][T32590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1735.815410][T32590] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1736.005328][T24971] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1736.093934][T32590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1736.133871][T32590] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1736.163593][T24971] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1736.177157][T24971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1736.189368][T24971] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1736.208606][T24971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.219032][T24971] usb 1-1: Product: syz [ 1736.228322][T24971] usb 1-1: Manufacturer: syz [ 1736.237884][T24971] usb 1-1: SerialNumber: syz [ 1736.255333][T24971] usbtmc 1-1:1.0: bulk endpoints not found [ 1736.283430][T24971] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input73 [ 1736.511359][T32590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1736.526184][T32590] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1737.296943][T32669] netlink: 'syz.4.7606': attribute type 1 has an invalid length. [ 1738.124801][T32707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7616'. [ 1738.285143][T32700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.294424][T32700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.598351][T24971] usb 1-1: USB disconnect, device number 40 [ 1738.711456][T14649] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1738.759388][T32700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1738.791861][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1738.812386][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1738.821695][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1738.833777][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1738.843484][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1738.859028][T32700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1738.886010][T24296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1738.900900][T24296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1738.901665][T14649] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1738.921332][T24296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1738.932037][T24296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1738.945518][T24296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1739.001541][T14649] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.038122][T14649] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1739.073322][T14649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1739.115966][T14649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1739.127188][T14649] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1739.177287][T14649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1739.186842][T14649] usb 4-1: Product: syz [ 1739.208702][T14649] usb 4-1: Manufacturer: syz [ 1739.215998][T14649] usb 4-1: SerialNumber: syz [ 1739.231214][T14649] usb 4-1: config 0 descriptor?? [ 1739.446744][T14649] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1739.474530][T14649] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1739.500097][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.650207][T14649] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1739.665755][T14649] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1739.679352][T14649] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1739.701855][T14649] usb 4-1: USB disconnect, device number 39 [ 1739.788402][T32740] syzkaller0: entered promiscuous mode [ 1739.805577][T32740] syzkaller0: entered allmulticast mode [ 1740.180397][ T3378] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.197380][ T3378] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.228184][ T3378] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.000520][ T5615] Bluetooth: hci1: command tx timeout [ 1741.189307][ T35] bridge_slave_1: left allmulticast mode [ 1741.226418][ T35] bridge_slave_1: left promiscuous mode [ 1741.254896][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.342156][ T35] bridge_slave_0: left allmulticast mode [ 1741.359909][ T35] bridge_slave_0: left promiscuous mode [ 1741.383016][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.686029][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.702431][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1741.715198][ T35] bond0 (unregistering): Released all slaves [ 1741.730193][ T35] bond1 (unregistering): Released all slaves [ 1741.767862][ T35] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1741.778879][ T35] bond2 (unregistering): Released all slaves [ 1741.816021][ T35] bond3 (unregistering): Released all slaves [ 1741.844341][T32725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.854267][T32725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.874620][T32725] bridge_slave_0: entered allmulticast mode [ 1741.906277][T32725] bridge_slave_0: entered promiscuous mode [ 1741.951720][T32725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.959276][T32725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.970340][ T338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7635'. [ 1741.970446][T32725] bridge_slave_1: entered allmulticast mode [ 1742.011358][T32725] bridge_slave_1: entered promiscuous mode [ 1742.224459][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.232365][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.553657][ T325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.591174][ T325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.675408][ T325] vlan0: left allmulticast mode [ 1742.682661][ T325] veth0_vlan: left allmulticast mode [ 1742.688346][ T325] vlan0: left promiscuous mode [ 1742.747210][T32725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.859595][T32725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.891744][T12418] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.083040][ T5615] Bluetooth: hci1: command tx timeout [ 1743.172162][ T35] hsr_slave_0: left promiscuous mode [ 1743.211705][ T35] hsr_slave_1: left promiscuous mode [ 1743.227132][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.240079][T23273] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1743.261728][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.412645][T23273] usb 1-1: Using ep0 maxpacket: 32 [ 1743.427557][T23273] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1743.456994][T23273] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.486888][T23273] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1743.524394][T23273] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1743.571959][T23273] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1743.624048][T23273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.646484][T23273] usb 1-1: Product: syz [ 1743.674267][T23273] usb 1-1: Manufacturer: syz [ 1743.689596][T23273] usb 1-1: SerialNumber: syz [ 1743.717578][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1743.760991][T23273] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input74 [ 1743.831849][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1743.934020][T23273] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1743.967852][T23273] (id 0x00) [ 1744.121722][T23273] rc_core: IR keymap rc-imon-pad not found [ 1744.132639][T23273] Registered IR keymap rc-empty [ 1744.144045][T23273] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1744.190138][T23273] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1744.215710][T32725] team0: Port device team_slave_0 added [ 1744.224343][T23273] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1744.236917][T32725] team0: Port device team_slave_1 added [ 1744.268024][T23273] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input75 [ 1744.322124][T23273] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:41> initialized [ 1744.333698][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1744.386100][T32725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.397793][T32725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1744.444168][ T356] imon:vfd_write: invalid payload size [ 1744.450067][T32725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.487648][T32725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.529567][T32725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1744.557373][T23135] usb 1-1: USB disconnect, device number 41 [ 1744.632865][T32725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.661309][ T3378] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.694271][T23273] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1744.841580][T32725] hsr_slave_0: entered promiscuous mode [ 1744.870828][T23273] usb 5-1: device descriptor read/64, error -71 [ 1744.881548][T32725] hsr_slave_1: entered promiscuous mode [ 1744.892766][T32725] debugfs: 'hsr0' already exists in 'hsr' [ 1744.916856][T32725] Cannot create hsr debugfs directory [ 1745.002163][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.007028][ T35] IPVS: stop unused estimator thread 0... [ 1745.022488][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.067923][ T415] netlink: 754 bytes leftover after parsing attributes in process `syz.3.7658'. [ 1745.132480][T23273] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1745.160617][ T5615] Bluetooth: hci1: command tx timeout [ 1745.289913][T23273] usb 5-1: device descriptor read/64, error -71 [ 1745.422236][T23273] usb usb5-port1: attempt power cycle [ 1745.522197][ T434] syzkaller0: entered promiscuous mode [ 1745.539587][ T434] syzkaller0: entered allmulticast mode [ 1745.779945][T23273] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1745.842414][T23273] usb 5-1: device descriptor read/8, error -71 [ 1746.109814][T23273] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1746.147789][T23273] usb 5-1: device descriptor read/8, error -71 [ 1746.271882][T23273] usb usb5-port1: unable to enumerate USB device [ 1746.679870][T28200] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1746.820757][T28200] usb 4-1: Using ep0 maxpacket: 32 [ 1746.826671][T28200] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1746.837526][T28200] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.848169][T28200] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1746.860077][T28200] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1746.872214][T28200] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1746.887868][T28200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.896504][T28200] usb 4-1: Product: syz [ 1746.900869][T28200] usb 4-1: Manufacturer: syz [ 1746.905597][T28200] usb 4-1: SerialNumber: syz [ 1746.929355][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1746.938969][T28200] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input76 [ 1747.169897][T28200] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1747.179683][T28200] (id 0x00) [ 1747.240472][ T5615] Bluetooth: hci1: command tx timeout [ 1747.250111][T28200] rc_core: IR keymap rc-imon-pad not found [ 1747.257737][T28200] Registered IR keymap rc-empty [ 1747.264139][T28200] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1747.277686][T28200] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1747.383588][T28200] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1747.412662][T28200] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input77 [ 1747.460325][T28200] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:40> initialized [ 1747.583077][ T456] imon:vfd_write: invalid payload size [ 1747.608085][T23273] usb 4-1: USB disconnect, device number 40 [ 1748.396555][ T463] fuse: Unknown parameter 'user_id00000000000000000000' [ 1748.410633][ T463] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1748.420008][ T463] xt_recent: Unsupported userspace flags (000000c5) [ 1749.955741][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1750.266501][ T492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7684'. [ 1750.350017][T23135] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1750.509793][T23135] usb 5-1: Using ep0 maxpacket: 32 [ 1750.524535][T23135] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1750.554418][T23135] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.582730][T23135] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1750.597633][T23135] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1750.609002][T23135] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1750.646383][T23135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.663236][T23135] usb 5-1: Product: syz [ 1750.693794][T23135] usb 5-1: Manufacturer: syz [ 1750.711302][T23135] usb 5-1: SerialNumber: syz [ 1750.744148][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1750.767464][T23135] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input78 [ 1750.980576][T23135] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1751.017760][T23135] (id 0x00) [ 1751.184502][T23135] rc_core: IR keymap rc-imon-pad not found [ 1751.213004][T23135] Registered IR keymap rc-empty [ 1751.229064][T23135] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1751.259792][T23135] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1751.287520][T32725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1751.326351][T23135] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1751.345899][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1751.385128][T32725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1751.392339][T23135] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input79 [ 1751.439607][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1751.458355][T23135] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:71> initialized [ 1751.473932][T32725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1751.517026][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1751.565771][T32725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1751.577577][T28200] usb 5-1: USB disconnect, device number 71 [ 1751.651513][T32725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1751.675498][ T545] xt_hashlimit: size too large, truncated to 1048576 [ 1751.927411][T32725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.999559][T32725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.048614][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.055883][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.122583][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.129819][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1752.240404][ T567] fuse: Bad value for 'user_id' [ 1752.257068][ T567] fuse: Bad value for 'user_id' [ 1752.277408][ T567] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1752.303622][ T567] xt_recent: Unsupported userspace flags (000000c5) [ 1752.426534][T32725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.587264][T32725] veth0_vlan: entered promiscuous mode [ 1752.636536][T32725] veth1_vlan: entered promiscuous mode [ 1752.759116][T32725] veth0_macvtap: entered promiscuous mode [ 1752.816778][T32725] veth1_macvtap: entered promiscuous mode [ 1752.892346][T32725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.946958][T32725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.006473][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.028922][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.326814][ T608] fuse: Bad value for 'user_id' [ 1753.334238][ T608] fuse: Bad value for 'user_id' [ 1753.340504][ T608] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1753.349593][ T608] xt_recent: Unsupported userspace flags (000000c5) [ 1753.391571][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.481055][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.515570][ T606] macvtap1: left promiscuous mode [ 1753.633879][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.688421][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.832015][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.852405][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.256563][ T636] fuse: Bad value for 'user_id' [ 1754.274619][ T636] fuse: Bad value for 'user_id' [ 1754.287300][ T636] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1754.310737][ T636] xt_recent: Unsupported userspace flags (000000c5) [ 1754.801181][T23273] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1754.848966][ T670] fuse: Bad value for 'fd' [ 1754.860833][ T670] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1754.880648][ T670] xt_recent: Unsupported userspace flags (000000c5) [ 1754.971430][T23273] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1754.994167][T23273] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1755.013677][T23273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.036218][T23273] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1755.057192][T23273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.072661][T23273] usb 2-1: Product: syz [ 1755.087374][T23273] usb 2-1: Manufacturer: syz [ 1755.098921][T23273] usb 2-1: SerialNumber: syz [ 1755.112305][T23273] usb 2-1: config 0 descriptor?? [ 1756.614319][ T716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1756.690850][T24296] Bluetooth: hci1: command 0x2016 tx timeout [ 1757.609053][ T5614] usb 2-1: USB disconnect, device number 46 [ 1758.179813][T28200] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1758.354033][T28200] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1758.374802][T28200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.398546][T28200] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1758.438397][T28200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.460246][T28200] usb 3-1: Product: syz [ 1758.470457][T28200] usb 3-1: Manufacturer: syz [ 1758.481736][T28200] usb 3-1: SerialNumber: syz [ 1758.519205][T28200] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1758.542889][T28200] gspca_mr97310a: reg write [21] error -22 [ 1758.567056][T28200] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -22 [ 1758.731714][T28200] usb 3-1: USB disconnect, device number 57 [ 1758.760299][ T5615] Bluetooth: hci1: command 0x2016 tx timeout [ 1758.826416][ T790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7783'. [ 1758.859830][T23135] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1759.030068][T23135] usb 1-1: Using ep0 maxpacket: 16 [ 1759.041742][T23135] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1759.067481][T23135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.085332][T23135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1759.105296][T23135] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 97 [ 1759.125803][T23135] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1759.152571][T23135] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1759.166937][T23135] usb 1-1: Manufacturer: syz [ 1759.180251][T23135] usb 1-1: config 0 descriptor?? [ 1759.489919][T23135] rc_core: IR keymap rc-hauppauge not found [ 1759.508375][T23135] Registered IR keymap rc-empty [ 1759.527479][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.572101][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.601078][T23135] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1759.612899][ T5614] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1759.651370][T23135] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input80 [ 1759.697279][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.750520][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.780008][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 1759.795661][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.814279][ T5614] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1759.831261][ T5614] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1759.851105][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.863087][ T5614] usb 4-1: config 179 has no interface number 0 [ 1759.880420][ T5614] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1759.892912][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.930098][ T5614] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1759.941723][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1759.980305][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1760.014346][ T5614] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1760.041279][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1760.055741][ T5614] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1760.076366][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.090445][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1760.120651][T23135] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1760.134443][ T803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1760.156390][ T5614] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 1760.179083][T23135] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1760.226268][T23135] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1760.310723][T23135] usb 1-1: USB disconnect, device number 42 [ 1760.398355][T14649] usb 4-1: USB disconnect, device number 41 [ 1760.470837][ T5614] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1760.653800][ T5614] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1760.694256][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.714446][ T5614] usb 5-1: Product: syz [ 1760.728333][ T5614] usb 5-1: Manufacturer: syz [ 1760.747530][ T5614] usb 5-1: SerialNumber: syz [ 1760.782460][ T5614] usb 5-1: config 0 descriptor?? [ 1761.038406][ T836] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7801'. [ 1761.398052][ T5614] usb 5-1: USB disconnect, device number 72 [ 1762.374818][T24296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1762.393469][T24296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1762.404370][T24296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1762.417079][T24296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1762.429176][T24296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1763.235290][ T881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.269959][ T881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.285147][ T881] bridge_slave_0: entered allmulticast mode [ 1763.302662][ T881] bridge_slave_0: entered promiscuous mode [ 1763.319572][ T881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.335238][ T881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.350723][ T881] bridge_slave_1: entered allmulticast mode [ 1763.366904][ T881] bridge_slave_1: entered promiscuous mode [ 1763.478657][ T881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.525712][ T881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.636742][ T881] team0: Port device team_slave_0 added [ 1763.668159][ T881] team0: Port device team_slave_1 added [ 1763.770633][ T881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1763.787988][ T881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.844429][ T881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.882948][ T881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.896927][ T881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.951107][ T881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.005070][ T939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7838'. [ 1764.103196][ T881] hsr_slave_0: entered promiscuous mode [ 1764.117302][ T881] hsr_slave_1: entered promiscuous mode [ 1764.125498][ T881] debugfs: 'hsr0' already exists in 'hsr' [ 1764.138384][ T881] Cannot create hsr debugfs directory [ 1764.450541][T14649] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1764.520026][ T5615] Bluetooth: hci5: command tx timeout [ 1764.630640][T14649] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1764.652915][T14649] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.674694][T14649] usb 3-1: config 0 has no interfaces? [ 1764.688495][T14649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.711313][T14649] usb 3-1: Product: syz [ 1764.716367][T14649] usb 3-1: Manufacturer: syz [ 1764.722963][T14649] usb 3-1: SerialNumber: syz [ 1764.756894][T14649] usb 3-1: config 0 descriptor?? [ 1764.900189][ T972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1765.309398][ T881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1765.323133][ T881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1765.331713][ T881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1765.345632][ T881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1765.356009][ T881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1765.368209][ T881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1765.377750][ T881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1765.402087][ T881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1765.502740][T28200] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1765.512083][ T881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.536523][ T881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.556975][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.565755][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.585201][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.592438][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.661006][T28200] usb 4-1: Using ep0 maxpacket: 32 [ 1765.674183][T28200] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1765.696535][T28200] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1765.710369][T28200] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.732784][ T881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1765.739990][T28200] usb 4-1: config 0 has no interface number 0 [ 1765.747243][T28200] usb 4-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1765.780544][T28200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.798183][T28200] usb 4-1: Product: syz [ 1765.812314][T28200] usb 4-1: Manufacturer: syz [ 1765.822415][T28200] usb 4-1: SerialNumber: syz [ 1765.830720][ T881] veth0_vlan: entered promiscuous mode [ 1765.843731][T28200] usb 4-1: config 0 descriptor?? [ 1765.860978][T28200] usb 4-1: expecting 3 got 0 endpoints! Bailing out. [ 1765.870604][ T881] veth1_vlan: entered promiscuous mode [ 1765.923195][ T881] veth0_macvtap: entered promiscuous mode [ 1765.936044][ T881] veth1_macvtap: entered promiscuous mode [ 1765.964430][ T881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1765.988626][ T881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.020522][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.032735][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.077458][T28200] usb 4-1: USB disconnect, device number 42 [ 1766.091924][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.127287][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.289331][ T1032] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7872'. [ 1766.296626][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.319014][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.357868][ T3378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.367958][ T3378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.599888][ T5615] Bluetooth: hci5: command tx timeout [ 1766.699957][T14649] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1766.819806][T28200] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1766.859801][T14649] usb 2-1: Using ep0 maxpacket: 16 [ 1766.867393][T14649] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1766.876037][T14649] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1766.889541][T14649] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.901509][T14649] usb 2-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1766.916550][T14649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.925506][T14649] usb 2-1: Product: syz [ 1766.936015][T14649] usb 2-1: Manufacturer: syz [ 1766.941032][T14649] usb 2-1: SerialNumber: syz [ 1766.969820][ T1214] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1766.980537][T28200] usb 5-1: Using ep0 maxpacket: 8 [ 1766.988365][T28200] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1767.002314][T28200] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1767.019285][T28200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1767.030799][T28200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1767.041391][T28200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1767.054449][T28200] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1767.065394][T28200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1767.075811][T28200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1767.096839][T28200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.113419][T28200] usb 5-1: Product: syz [ 1767.117904][T28200] usb 5-1: Manufacturer: syz [ 1767.125467][T28200] usb 5-1: SerialNumber: syz [ 1767.130441][ T1214] usb 4-1: Using ep0 maxpacket: 32 [ 1767.138495][ T1214] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1767.150311][T28200] usb 5-1: config 0 descriptor?? [ 1767.162344][ T1051] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1767.175586][ T1214] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1767.188765][T14649] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1767.200852][ T1214] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1767.211447][T14649] snd-usb-audio 2-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 1767.221176][T28200] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1767.235107][ T1214] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1767.258569][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.273282][ T1214] usb 4-1: Product: syz [ 1767.276657][T24973] usb 3-1: USB disconnect, device number 58 [ 1767.281689][ T1214] usb 4-1: Manufacturer: syz [ 1767.302954][ T1214] usb 4-1: SerialNumber: syz [ 1767.327392][ T1214] usb 4-1: config 0 descriptor?? [ 1767.442605][T28200] usb 5-1: USB disconnect, device number 73 [ 1767.479481][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1767.693389][T14649] usb 2-1: USB disconnect, device number 47 [ 1767.742077][ T7118] udevd[7118]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1767.768987][ T1214] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1767.909874][T24973] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1768.061547][T24973] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1768.095928][T24973] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.128663][T24973] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1768.154866][T24973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.207314][T24973] usb 4-1: USB disconnect, device number 43 [ 1768.429013][ T1074] fuse: Unknown parameter 'use00000000000000000000' [ 1768.472825][ T5614] usb 3-1: USB disconnect, device number 59 [ 1768.510093][T24971] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1768.682438][ T5615] Bluetooth: hci5: command tx timeout [ 1768.703384][T24971] usb 2-1: Using ep0 maxpacket: 32 [ 1768.714279][T24971] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1768.734611][T24971] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1768.770244][T24971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.805850][T24971] usb 2-1: config 0 has no interface number 0 [ 1768.834685][T24971] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1768.862833][T24971] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1768.872820][T24971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.887840][T24971] usb 2-1: Product: syz [ 1768.901650][T24971] usb 2-1: Manufacturer: syz [ 1768.916744][T24971] usb 2-1: SerialNumber: syz [ 1768.943191][T24971] usb 2-1: config 0 descriptor?? [ 1768.965815][T24971] f81534 2-1:0.12: required endpoints missing [ 1769.202947][ T1146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1769.398465][ T1159] netlink: 'syz.2.7911': attribute type 2 has an invalid length. [ 1769.452205][T24971] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1769.630501][T24971] usb 4-1: Using ep0 maxpacket: 32 [ 1769.645035][T24971] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1769.682697][T24971] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1769.700459][T24971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.726595][T24971] usb 4-1: config 0 has no interface number 0 [ 1769.741392][T24971] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1769.760727][T24971] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1769.785537][T24971] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1769.798915][T24971] usb 4-1: config 0 interface 146 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1769.828123][T24971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.841952][T24971] usb 4-1: Product: syz [ 1769.846196][T24971] usb 4-1: Manufacturer: syz [ 1769.852078][T24971] usb 4-1: SerialNumber: syz [ 1769.860594][T24971] usb 4-1: config 0 descriptor?? [ 1769.875329][T24971] usb 4-1: expecting 3 got 1 endpoints! Bailing out. [ 1769.889303][ T1184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1770.086338][T24971] usb 4-1: USB disconnect, device number 44 [ 1770.099996][T14649] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1770.269781][T14649] usb 3-1: Using ep0 maxpacket: 32 [ 1770.276212][T14649] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1770.291451][T14649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.304809][T14649] usb 3-1: config 0 descriptor?? [ 1770.324806][T14649] as10x_usb: device has been detected [ 1770.335804][T14649] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1770.353819][T14649] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1770.364557][ T1214] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1770.398824][T14649] as10x_usb: error during firmware upload part1 [ 1770.406606][T14649] Registered device nBox DVB-T Dongle [ 1770.550689][ T1214] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1770.576975][ T1181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1770.584748][ T1214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.584920][ T1181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1770.600802][ T1214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1770.619523][ T1181] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1770.619570][ T1214] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1770.657223][ T1181] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1770.660810][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.671442][ T1214] usb 1-1: Product: syz [ 1770.675770][ T1214] usb 1-1: Manufacturer: syz [ 1770.680875][ T1214] usb 1-1: SerialNumber: syz [ 1770.684016][ T1181] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1770.698561][ T1214] usbtmc 1-1:1.0: bulk endpoints not found [ 1770.698912][ T1216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7933'. [ 1770.708500][ T1214] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input81 [ 1770.729194][ T1181] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1770.841214][T24971] usb 3-1: USB disconnect, device number 60 [ 1770.890114][T24971] Unregistered device nBox DVB-T Dongle [ 1770.893664][T24971] as10x_usb: device has been disconnected [ 1770.930118][ T1214] usb 1-1: USB disconnect, device number 43 [ 1771.265745][T14649] usb 2-1: USB disconnect, device number 48 [ 1771.381173][ T1214] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1771.551850][ T1214] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1771.572485][ T1214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.600567][ T1214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1771.619791][ T1214] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1771.652059][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.669864][ T1214] usb 1-1: Product: syz [ 1771.674097][ T1214] usb 1-1: Manufacturer: syz [ 1771.678841][ T1214] usb 1-1: SerialNumber: syz [ 1771.706904][ T1214] usbtmc 1-1:1.0: bulk endpoints not found [ 1771.735706][ T1214] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input82 [ 1772.029942][ T1214] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1772.180493][ T1214] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1772.190768][ T1214] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1772.199561][ T1214] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1772.211879][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.220230][ T1214] usb 5-1: Product: syz [ 1772.224497][ T1214] usb 5-1: Manufacturer: syz [ 1772.230084][ T1214] usb 5-1: SerialNumber: syz [ 1772.236903][ T1214] usb 5-1: config 0 descriptor?? [ 1772.364992][ T1242] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7941'. [ 1772.599880][ T5615] Bluetooth: hci1: command 0x2016 tx timeout [ 1772.681749][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 1773.049895][ T1214] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1773.199957][ T1214] usb 2-1: Using ep0 maxpacket: 32 [ 1773.205909][ T1214] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1773.216238][ T1214] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1773.226257][ T1214] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1773.236128][ T1214] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1773.245395][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.254317][ T1214] usb 2-1: Product: syz [ 1773.258582][ T1214] usb 2-1: Manufacturer: syz [ 1773.263440][ T1214] usb 2-1: SerialNumber: syz [ 1773.271342][ T1214] usb 2-1: config 0 descriptor?? [ 1773.701200][ T1214] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1773.902207][ T1214] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1773.913736][ T1214] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1773.925759][ T1214] usb 2-1: USB disconnect, device number 49 [ 1773.996552][T24971] usb 1-1: USB disconnect, device number 44 [ 1774.132193][ T1275] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7952'. [ 1774.581762][T24971] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1774.689820][T23132] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1774.689917][ T5615] Bluetooth: hci1: command 0x2016 tx timeout [ 1774.740510][T24971] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1774.750815][T24971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.761161][T24971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1774.770906][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 1774.780499][T24971] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1774.800508][ T1214] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1774.810520][ T5614] usb 5-1: USB disconnect, device number 74 [ 1774.820047][T24971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.829467][T24971] usb 1-1: Product: syz [ 1774.834515][T24971] usb 1-1: Manufacturer: syz [ 1774.847434][T24971] usb 1-1: SerialNumber: syz [ 1774.858626][T24971] usbtmc 1-1:1.0: bulk endpoints not found [ 1774.874097][T24971] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input83 [ 1774.884028][ T5615] Bluetooth: hci5: unexpected cc 0x1407 length: 11 > 9 [ 1774.891231][T23132] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1774.901094][ T5615] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 1774.909183][T23132] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1774.926177][T23132] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1774.940973][T23132] usb 2-1: can't read configurations, error -71 [ 1774.982951][ T1214] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1775.010530][ T1214] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x79, changing to 0x9 [ 1775.048593][ T1214] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1775.076487][T23273] usb 1-1: USB disconnect, device number 45 [ 1775.097037][ T1214] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1775.135463][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1775.160922][ T1214] usb 3-1: Product: syz [ 1775.169263][ T1214] usb 3-1: Manufacturer: syz [ 1775.174522][ T1214] usb 3-1: SerialNumber: syz [ 1775.184514][ T1214] usb 3-1: config 0 descriptor?? [ 1775.198649][ T1214] usb 3-1: selecting invalid altsetting 0 [ 1775.407988][T24973] usb 3-1: USB disconnect, device number 61 [ 1775.600108][T24971] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1775.609854][T23273] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1775.629889][ T5614] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1775.749796][T24971] usb 4-1: Using ep0 maxpacket: 32 [ 1775.755872][T24971] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1775.767109][T24971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1775.777659][T24971] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1775.780621][T23273] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1775.788390][T24971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1775.798826][T23273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.803821][ T5614] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1775.814954][T23273] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1775.826312][ T5614] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1775.837739][T23273] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1775.842580][ T5614] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1775.858481][T23273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.870447][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.873532][T23273] usb 1-1: Product: syz [ 1775.880007][T24971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.892955][T23273] usb 1-1: Manufacturer: syz [ 1775.893668][T24971] usb 4-1: Product: syz [ 1775.898263][T23273] usb 1-1: SerialNumber: syz [ 1775.905140][T24971] usb 4-1: Manufacturer: syz [ 1775.915201][T23273] usbtmc 1-1:1.0: bulk endpoints not found [ 1775.919841][ T5614] usb 5-1: Product: syz [ 1775.929615][T23273] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input84 [ 1775.932449][T24971] usb 4-1: SerialNumber: syz [ 1775.943672][ T5614] usb 5-1: Manufacturer: syz [ 1775.948312][ T5614] usb 5-1: SerialNumber: syz [ 1775.963888][ T5614] usb 5-1: config 0 descriptor?? [ 1775.973585][T24971] usb 4-1: config 0 descriptor?? [ 1776.334436][ T1362] input: syz1 as /devices/virtual/input/input85 [ 1776.393322][T24971] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1776.606815][T24971] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1776.617946][T24971] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1776.657407][T24971] usb 4-1: USB disconnect, device number 45 [ 1776.759819][ T5615] Bluetooth: hci1: command 0x2016 tx timeout [ 1777.016087][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7997'. [ 1777.522365][T24971] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1777.544537][ T1423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1777.680595][T24971] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1777.694259][T24971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.706566][T24971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1777.716761][T24971] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1777.727993][T24971] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1777.741294][T24971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.899901][ T5614] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1777.915487][ T1434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1778.059797][ T5614] usb 3-1: Using ep0 maxpacket: 32 [ 1778.066466][ T5614] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1778.078184][ T5614] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1778.089048][ T5614] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1778.099539][ T5614] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1778.111831][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.122185][ T5614] usb 3-1: Product: syz [ 1778.126532][ T5614] usb 3-1: Manufacturer: syz [ 1778.132566][ T5614] usb 3-1: SerialNumber: syz [ 1778.144644][ T5614] usb 3-1: config 0 descriptor?? [ 1778.265332][T23132] usb 1-1: USB disconnect, device number 46 [ 1778.368764][T24971] gud 4-1:1.0: Unexpected status OK for failed transfer [ 1778.376700][T24971] gud 4-1:1.0: Failed to add properties (error=-32) [ 1778.384052][T24971] gud 4-1:1.0: probe with driver gud failed with error -32 [ 1778.455266][T24971] usb 5-1: USB disconnect, device number 75 [ 1778.565112][ T5614] gs_usb 3-1:0.0: Configuring for 6 interfaces [ 1778.595350][T23273] usb 4-1: USB disconnect, device number 46 [ 1778.775119][ T5614] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1778.796055][ T5614] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1778.826409][ T5614] usb 3-1: USB disconnect, device number 62 [ 1779.060632][T23273] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1779.210604][T23273] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1779.221338][T23273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.233478][T23273] usb 1-1: config 0 descriptor?? [ 1779.263994][ T1458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1779.449256][T23273] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1779.522465][T23273] [drm:udl_init] *ERROR* Selecting channel failed [ 1779.619625][T23273] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1779.636939][T28200] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1779.645230][T23273] [drm] Initialized udl on minor 1 [ 1779.677744][T23273] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1779.743873][T23273] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1779.792518][T23273] usb 1-1: USB disconnect, device number 47 [ 1779.810991][T28200] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1779.824818][ T1214] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1779.841196][T28200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.858541][ T1214] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1779.866645][T28200] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1779.893282][T28200] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1779.912084][T28200] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1779.941452][T28200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.960683][T28200] usb 3-1: Product: syz [ 1779.964988][T28200] usb 3-1: Manufacturer: syz [ 1779.972139][T28200] usb 3-1: SerialNumber: syz [ 1780.187724][T28200] usb 3-1: usb_control_msg returned -71 [ 1780.207989][T28200] usbtmc 3-1:1.0: can't read capabilities [ 1780.233118][T28200] usb 3-1: USB disconnect, device number 63 [ 1780.277727][ T1487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8036'. [ 1780.344439][ T1489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8037'. [ 1780.355359][ T1489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8037'. [ 1781.244664][ T1510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8047'. [ 1781.621345][ T1518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8049'. [ 1781.795448][ T1523] fuse: Bad value for 'fd' [ 1781.807135][ T1523] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1781.819865][ T1523] xt_recent: Unsupported userspace flags (000000c5) [ 1782.262675][ T1541] netlink: 'syz.1.8059': attribute type 1 has an invalid length. [ 1782.307746][ T1541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1782.336273][ T1541] macvlan2: entered promiscuous mode [ 1782.343286][ T1541] macvlan2: entered allmulticast mode [ 1782.349238][ T1541] bond1: entered allmulticast mode [ 1782.355458][ T1541] bond1: entered promiscuous mode [ 1782.362691][ T1541] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1782.373953][ T1541] team0: Port device macvlan2 added [ 1782.403624][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8062'. [ 1782.413400][ T1541] bond1: (slave ip6gretap1): making interface the new active one [ 1782.413427][ T1541] ip6gretap1: entered promiscuous mode [ 1782.413570][ T1541] ip6gretap1: entered allmulticast mode [ 1782.423153][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8062'. [ 1782.432745][ T1541] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1782.479977][T28200] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1782.480195][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8062'. [ 1782.585752][ T1554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8064'. [ 1782.591300][ T1552] fuse: Bad value for 'fd' [ 1782.611915][ T1554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8064'. [ 1782.626670][ T1552] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1782.651048][ T1552] xt_recent: Unsupported userspace flags (000000c5) [ 1782.661057][T28200] usb 1-1: New USB device found, idVendor=041e, idProduct=a411, bcdDevice= 0.40 [ 1782.678870][T28200] usb 1-1: config index 0 descriptor too short (expected 137, got 18) [ 1782.706637][T28200] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1782.730122][T28200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.748510][T28200] usb 1-1: Product: syz [ 1782.752940][T28200] usb 1-1: Manufacturer: syz [ 1782.757581][T28200] usb 1-1: SerialNumber: syz [ 1782.991584][T28200] usb 1-1: USB disconnect, device number 48 [ 1783.069874][T24971] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1783.108531][ T1583] fuse: Bad value for 'fd' [ 1783.118288][ T1583] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1783.128619][ T1583] xt_recent: Unsupported userspace flags (000000c5) [ 1783.230373][T24971] usb 4-1: Using ep0 maxpacket: 32 [ 1783.238831][T24971] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1783.256734][T24971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1783.268259][T24971] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1783.281291][T24971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1783.292080][T24971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.301421][T24971] usb 4-1: Product: syz [ 1783.305654][T24971] usb 4-1: Manufacturer: syz [ 1783.310389][T24971] usb 4-1: SerialNumber: syz [ 1783.320872][T24971] usb 4-1: config 0 descriptor?? [ 1783.412931][ T1214] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1783.581627][ T1214] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1783.595533][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.609074][ T1214] usb 2-1: Product: syz [ 1783.616763][ T1214] usb 2-1: Manufacturer: syz [ 1783.626744][ T1214] usb 2-1: SerialNumber: syz [ 1783.740339][T24971] gs_usb 4-1:0.0: Configuring for 6 interfaces [ 1783.866461][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8100'. [ 1783.878119][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8100'. [ 1783.889432][ T1630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8100'. [ 1783.947454][T24971] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1783.957766][T24971] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1783.976604][T24971] usb 4-1: USB disconnect, device number 47 [ 1784.044913][ T1214] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1784.058125][ T1214] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1784.159906][T28200] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1784.179833][T23132] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1784.329806][T28200] usb 3-1: Using ep0 maxpacket: 16 [ 1784.330542][T23132] usb 1-1: New USB device found, idVendor=041e, idProduct=a411, bcdDevice= 0.40 [ 1784.335847][T28200] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1784.345929][T23132] usb 1-1: config index 0 descriptor too short (expected 137, got 18) [ 1784.355442][T28200] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1784.373333][T23132] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1784.384581][T23132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.385495][T28200] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1784.392968][T23132] usb 1-1: Product: syz [ 1784.406603][T28200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.416423][T23132] usb 1-1: Manufacturer: syz [ 1784.416871][T28200] usb 3-1: Product: syz [ 1784.421640][T23132] usb 1-1: SerialNumber: syz [ 1784.426144][T28200] usb 3-1: Manufacturer: syz [ 1784.436703][T28200] usb 3-1: SerialNumber: syz [ 1784.445958][T28200] usb 3-1: config 0 descriptor?? [ 1784.456197][T28200] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1784.465818][T28200] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1784.656174][T23132] usb 1-1: USB disconnect, device number 49 [ 1785.064131][T28200] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1785.084255][T28200] em28xx 3-1:0.0: Config register raw data: 0xaf [ 1785.098132][T28200] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 1785.106425][T28200] em28xx 3-1:0.0: No AC97 audio processor [ 1785.236827][ T5705] IPVS: starting estimator thread 0... [ 1785.291249][T28200] usb 3-1: USB disconnect, device number 64 [ 1785.331082][ T1662] IPVS: using max 35 ests per chain, 84000 per kthread [ 1785.488223][ T1214] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1785.505786][ T1214] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1785.519904][ T1214] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1785.565820][ T1214] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1785.622783][ T1214] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1785.656428][ T1214] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1785.701772][ T1214] usb 2-1: USB disconnect, device number 52 [ 1786.419789][ T1214] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1786.529858][T28200] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1786.607202][ T1214] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1786.624819][ T1214] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1786.647304][ T1214] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1786.666810][ T1214] usb 5-1: can't read configurations, error -71 [ 1786.692990][T28200] usb 2-1: New USB device found, idVendor=041e, idProduct=a411, bcdDevice= 0.40 [ 1786.713047][T28200] usb 2-1: config index 0 descriptor too short (expected 137, got 18) [ 1786.730216][T28200] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1786.757719][T28200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.768679][T28200] usb 2-1: Product: syz [ 1786.779731][T28200] usb 2-1: Manufacturer: syz [ 1786.787538][T28200] usb 2-1: SerialNumber: syz [ 1786.797505][ T1706] program syz.3.8132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1786.880160][ T5615] Bluetooth: hci1: ISO packet too small [ 1787.038934][T28200] usb 2-1: USB disconnect, device number 53 [ 1787.512562][ T1735] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8143'. [ 1787.839929][T23132] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1788.001357][T23132] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1788.021172][T23132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.037523][T23132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1788.048077][T23132] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1788.058603][T23132] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1788.075630][T23132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.091299][T23132] usb 3-1: Product: syz [ 1788.099772][T23132] usb 3-1: Manufacturer: syz [ 1788.109883][T23132] usb 3-1: SerialNumber: syz [ 1788.129820][ T5614] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1788.280715][ T5614] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1788.299668][ T5614] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1788.316964][ T5614] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1788.333912][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.342565][T23132] usb 3-1: usb_control_msg returned -71 [ 1788.352185][ T5614] usb 4-1: Product: syz [ 1788.361346][T23132] usbtmc 3-1:1.0: can't read capabilities [ 1788.368839][ T5614] usb 4-1: Manufacturer: syz [ 1788.377330][ T5614] usb 4-1: SerialNumber: syz [ 1788.404642][T23132] usb 3-1: USB disconnect, device number 65 [ 1788.413558][ T5614] usb 4-1: config 0 descriptor?? [ 1788.585084][ T5614] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1788.658472][ T5614] usb 4-1: USB disconnect, device number 48 [ 1788.899835][T23132] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1789.062808][T23132] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1789.083149][T23132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.100161][T23132] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1789.110816][T23132] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1789.121605][T23132] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1789.137819][T23132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.147258][T23132] usb 3-1: Product: syz [ 1789.151581][T23132] usb 3-1: Manufacturer: syz [ 1789.156251][T23132] usb 3-1: SerialNumber: syz [ 1789.320527][ T1214] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1789.374163][T23132] usb 3-1: usb_control_msg returned -32 [ 1789.384283][T23132] usbtmc 3-1:1.0: can't read capabilities [ 1789.459804][ T5705] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1789.482796][ T1214] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1789.497736][ T1214] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1789.506978][ T1214] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 253 [ 1789.520049][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.528287][ T1214] usb 5-1: Product: syz [ 1789.533465][ T1214] usb 5-1: Manufacturer: syz [ 1789.538126][ T1214] usb 5-1: SerialNumber: syz [ 1789.545854][ T1214] usb 5-1: config 0 descriptor?? [ 1789.621340][ T5705] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1789.631922][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.643139][ T5705] usb 4-1: config 0 has no interfaces? [ 1789.651852][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.660148][ T5705] usb 4-1: Product: syz [ 1789.664346][ T5705] usb 4-1: Manufacturer: syz [ 1789.668936][ T5705] usb 4-1: SerialNumber: syz [ 1789.677721][ T5705] usb 4-1: config 0 descriptor?? [ 1789.925572][ T1818] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8181'. [ 1790.090199][ T1822] usbtmc 3-1:1.0: usb_control_msg returned -32 [ 1790.979826][T23132] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 1791.138307][T24971] usb 3-1: USB disconnect, device number 66 [ 1791.151996][T23132] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 1791.178817][T23132] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1791.202277][T23132] usb 2-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1791.225681][T23132] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1791.234093][T23132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.251107][T23132] usb 2-1: config 0 descriptor?? [ 1791.257522][ T1847] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1791.362666][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8204'. [ 1791.371809][ T1873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8204'. [ 1791.459941][T23135] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1791.623702][T23135] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1791.639306][T23135] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1791.652181][T23135] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1791.661884][T23135] usb 1-1: can't read configurations, error -71 [ 1791.678341][T23132] hid_parser_main: 467 callbacks suppressed [ 1791.678363][T23132] chicony 0003:04F2:0418.007B: unknown main item tag 0x0 [ 1791.692472][T23132] chicony 0003:04F2:0418.007B: unknown main item tag 0x0 [ 1791.701188][T23132] chicony 0003:04F2:0418.007B: unknown main item tag 0x0 [ 1791.708952][T23132] chicony 0003:04F2:0418.007B: unknown main item tag 0x0 [ 1791.716595][T23132] chicony 0003:04F2:0418.007B: unknown main item tag 0x0 [ 1791.725073][T23132] chicony 0003:04F2:0418.007B: unknown main item tag 0x0 [ 1791.733461][T23132] chicony 0003:04F2:0418.007B: unknown main item tag 0x0 [ 1791.735504][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.741912][T23132] chicony 0003:04F2:0418.007B: collection stack underflow [ 1791.747121][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.754865][T23132] chicony 0003:04F2:0418.007B: item 0 0 0 12 parsing failed [ 1791.772637][T23132] chicony 0003:04F2:0418.007B: Chicony hid parse failed: -22 [ 1791.780434][T23132] chicony 0003:04F2:0418.007B: probe with driver chicony failed with error -22 [ 1791.893843][T23132] usb 2-1: USB disconnect, device number 54 [ 1792.098197][ T5705] usb 5-1: USB disconnect, device number 78 [ 1792.135455][ T1894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8214'. [ 1792.252748][T24971] usb 4-1: USB disconnect, device number 49 [ 1792.634630][ T1920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8224'. [ 1792.869848][ T5705] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1792.919892][T23135] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1793.003621][ T1927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8228'. [ 1793.052384][ T5615] Bluetooth: hci5: unexpected cc 0x1407 length: 11 > 9 [ 1793.060136][ T5615] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 1793.069082][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1793.085286][T23135] usb 1-1: Using ep0 maxpacket: 32 [ 1793.086224][ T5705] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1793.101049][T23135] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1793.101364][ T5705] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1793.118368][ T5705] usb 2-1: can't read configurations, error -71 [ 1793.134580][T23135] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1793.157230][T23135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.177684][T23135] usb 1-1: config 0 has no interface number 0 [ 1793.197395][T23135] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1793.218813][T23135] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1793.233563][T23135] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1793.252606][T23135] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1793.263752][T23135] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1793.289830][T23135] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1793.309803][T23135] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1793.325943][T23135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.334968][T23135] usb 1-1: Product: syz [ 1793.347615][T23135] usb 1-1: Manufacturer: syz [ 1793.354231][T23135] usb 1-1: SerialNumber: syz [ 1793.366719][T23135] usb 1-1: config 0 descriptor?? [ 1793.377082][ T1923] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1793.392105][T23135] usb 1-1: expecting 3 got 2 endpoints! Bailing out. [ 1793.600711][T23135] usb 1-1: USB disconnect, device number 52 [ 1793.609800][T28200] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1793.784607][T28200] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1793.801235][T28200] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1793.819737][T28200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1793.843635][T28200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.859740][T28200] usb 3-1: Product: syz [ 1793.871363][T28200] usb 3-1: Manufacturer: syz [ 1793.889898][T28200] usb 3-1: SerialNumber: syz [ 1793.902229][T28200] usb 3-1: config 0 descriptor?? [ 1793.923184][T28200] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1794.135284][T28200] gspca_sunplus: reg_r err -32 [ 1794.149871][T28200] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1794.323068][ T1954] qrtr: Invalid version 0 [ 1794.799926][ T5705] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1794.985507][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1795.005647][ T5705] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1795.019250][ T5705] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1795.027382][ T5705] usb 1-1: can't read configurations, error -71 [ 1795.619980][T24971] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1795.779929][T24971] usb 4-1: Using ep0 maxpacket: 32 [ 1795.788456][T24971] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1795.805835][T24971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.818853][T24971] usb 4-1: Product: syz [ 1795.823526][T24971] usb 4-1: Manufacturer: syz [ 1795.828269][T24971] usb 4-1: SerialNumber: syz [ 1795.837171][T24971] usb 4-1: config 0 descriptor?? [ 1795.858351][T28200] IPVS: starting estimator thread 0... [ 1795.860849][T24971] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1795.960069][ T2037] IPVS: using max 33 ests per chain, 79200 per kthread [ 1796.427755][ T5705] usb 3-1: USB disconnect, device number 67 [ 1796.662854][ T5705] IPVS: starting estimator thread 0... [ 1796.671098][ T2063] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1796.780194][ T2064] IPVS: using max 31 ests per chain, 74400 per kthread [ 1796.883818][T24971] gspca_ov534_9: reg_w failed -71 [ 1797.170069][T24971] gspca_ov534_9: Unknown sensor 0000 [ 1797.170132][T24971] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1797.189159][T24971] usb 4-1: USB disconnect, device number 50 [ 1797.240246][T23132] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1797.401775][T23132] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1797.421033][T23132] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1797.431682][T23132] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1797.444953][T23132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.453485][T23132] usb 1-1: Product: syz [ 1797.458003][T23132] usb 1-1: Manufacturer: syz [ 1797.464129][T23132] usb 1-1: SerialNumber: syz [ 1797.471990][T23132] usb 1-1: config 0 descriptor?? [ 1797.485764][T23132] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1797.696938][T23132] gspca_sunplus: reg_r err -32 [ 1797.707205][T23132] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1798.570211][ T2120] syz.3.8309 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1798.855254][ T2137] netlink: 'syz.1.8315': attribute type 1 has an invalid length. [ 1798.878886][ T2137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8315'. [ 1799.129785][T23273] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1799.290755][T23273] usb 5-1: Using ep0 maxpacket: 32 [ 1799.304300][T23273] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1799.326620][T23273] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1799.339840][T23273] usb 5-1: config 0 has no interface number 0 [ 1799.353733][T23273] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1799.375426][T23273] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1799.395712][T23273] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1799.413516][T23273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.423553][T23273] usb 5-1: Product: syz [ 1799.432208][T23273] usb 5-1: Manufacturer: syz [ 1799.442339][T23273] usb 5-1: SerialNumber: syz [ 1799.456185][T23273] usb 5-1: config 0 descriptor?? [ 1799.465638][T23273] f81534 5-1:0.12: unsupported endpoint max packet size [ 1799.582711][ T2166] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1799.646122][ T2168] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1800.076571][T24971] usb 1-1: USB disconnect, device number 55 [ 1800.309834][T28200] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1800.461350][ T2197] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8339'. [ 1800.470625][T28200] usb 2-1: Using ep0 maxpacket: 32 [ 1800.477019][T28200] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1800.488311][T28200] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1800.496903][T28200] usb 2-1: config 0 has no interface number 0 [ 1800.503205][T28200] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1800.515375][T28200] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1800.520104][T24971] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1800.541257][T28200] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1800.560193][T28200] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1800.575075][T28200] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1800.588738][T28200] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1800.599042][T28200] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1800.613634][T28200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.622595][T28200] usb 2-1: Product: syz [ 1800.626815][T28200] usb 2-1: Manufacturer: syz [ 1800.643171][T28200] usb 2-1: SerialNumber: syz [ 1800.657941][T28200] usb 2-1: config 0 descriptor?? [ 1800.676496][ T2187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1800.683720][T24971] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 1800.696270][T24971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1800.696629][T28200] usb 2-1: expecting 3 got 2 endpoints! Bailing out. [ 1800.718051][T24971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.871170][T24296] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 1800.878886][T24296] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1800.940460][T28200] usb 2-1: USB disconnect, device number 57 [ 1800.990239][ T1214] usb 1-1: USB disconnect, device number 56 [ 1800.996380][ T5615] Bluetooth: hci4: Reading Intel version command failed (-71) [ 1801.507404][ T2214] syzkaller0: entered promiscuous mode [ 1801.514403][ T2214] syzkaller0: entered allmulticast mode [ 1801.903370][T23132] usb 5-1: USB disconnect, device number 79 [ 1802.947396][ T2244] fuse: Unknown parameter '0x000000000000000a' [ 1802.955172][ T2244] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1802.964677][ T2244] xt_recent: Unsupported userspace flags (000000c5) [ 1805.912144][ T2230] tipc: Enabling of bearer rejected, failed to enable media [ 1805.933867][ T2252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8359'. [ 1805.979960][ T2272] netlink: 'syz.0.8368': attribute type 1 has an invalid length. [ 1805.987959][ T2272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8368'. [ 1806.051383][T24971] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1806.087456][ T2276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8370'. [ 1806.141039][ T2279] netlink: 'syz.1.8372': attribute type 39 has an invalid length. [ 1806.242634][T24971] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1806.265293][T24971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.280294][T24971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1806.299831][T24971] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1806.310694][T24971] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1806.337793][T24971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.370850][T28200] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1806.515922][ T2291] bond0: entered promiscuous mode [ 1806.529843][ T2291] bond_slave_0: entered promiscuous mode [ 1806.538453][ T2291] bond_slave_1: entered promiscuous mode [ 1806.550544][T28200] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1806.569006][T28200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.585035][ T2291] batadv0: entered promiscuous mode [ 1806.589851][T28200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1806.614695][T28200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.627408][ T2291] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1806.647333][T28200] usb 1-1: config 0 descriptor?? [ 1806.973397][T24971] gud 5-1:1.0: Failed to add properties (error=-71) [ 1806.994663][T24971] gud 5-1:1.0: probe with driver gud failed with error -71 [ 1807.015489][T24971] usb 5-1: USB disconnect, device number 80 [ 1807.128044][T28200] pyra 0003:1E7D:2CF6.007C: item fetching failed at offset 5/7 [ 1807.151673][T28200] pyra 0003:1E7D:2CF6.007C: parse failed [ 1807.169888][T28200] pyra 0003:1E7D:2CF6.007C: probe with driver pyra failed with error -22 [ 1807.384132][ T2304] netlink: 'syz.2.8380': attribute type 1 has an invalid length. [ 1807.393082][ T2304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8380'. [ 1807.887592][T24971] usb 1-1: USB disconnect, device number 57 [ 1808.115916][ T2329] netlink: 'syz.2.8391': attribute type 1 has an invalid length. [ 1808.139744][ T2329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8391'. [ 1808.387758][ T2344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1808.459846][T23273] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1808.642068][T23273] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1808.692397][T23273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.731811][T23273] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1808.781977][T23273] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1808.816261][T23273] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1808.824034][ T2362] ip_tables: iptables: counters copy to user failed while replacing table [ 1808.873157][T23273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.582423][T23273] gud 2-1:1.0: Failed to add properties (error=-71) [ 1809.615991][T23273] gud 2-1:1.0: probe with driver gud failed with error -71 [ 1809.619828][T23132] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1809.679436][T23273] usb 2-1: USB disconnect, device number 58 [ 1809.792626][T23132] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1809.816511][T23132] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1809.846682][T23132] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1809.867872][T23132] usb 5-1: can't read configurations, error -71 [ 1810.189655][ T2405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8425'. [ 1810.246131][ T2405] hsr_slave_1 (unregistering): left promiscuous mode [ 1810.260709][T24971] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1810.421352][T24971] usb 4-1: Using ep0 maxpacket: 32 [ 1810.511203][T24971] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1810.541031][T24971] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1810.562812][T24971] usb 4-1: config 0 has no interface number 0 [ 1810.581344][T24971] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1810.608488][T24971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.638468][T24971] usb 4-1: Product: syz [ 1810.651734][T24971] usb 4-1: Manufacturer: syz [ 1810.668368][T24971] usb 4-1: SerialNumber: syz [ 1810.692061][T24971] usb 4-1: config 0 descriptor?? [ 1811.119545][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1811.138199][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1811.152651][T24971] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1811.162103][T24971] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1811.179114][T24971] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1811.195374][T24971] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1811.218145][ T2438] netlink: 'syz.2.8437': attribute type 1 has an invalid length. [ 1811.226223][ T2438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8437'. [ 1811.242787][T24971] usb 4-1: USB disconnect, device number 51 [ 1811.709777][T24971] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1811.825183][ T2465] netlink: 'syz.2.8443': attribute type 10 has an invalid length. [ 1811.870564][T24971] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1811.916240][T24971] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 1811.938621][T24971] usb 2-1: config index 0 descriptor too short (expected 137, got 18) [ 1811.949830][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1811.959361][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1811.979041][T24971] usb 2-1: config index 1 descriptor too short (expected 137, got 18) [ 1811.989973][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1811.993319][ T2465] team0: Port device dummy0 added [ 1811.999376][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.001054][T24971] usb 2-1: config index 2 descriptor too short (expected 137, got 18) [ 1812.026343][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1812.035885][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.078514][T24971] usb 2-1: config index 3 descriptor too short (expected 137, got 18) [ 1812.087031][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1812.097503][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.140522][T24971] usb 2-1: config index 4 descriptor too short (expected 137, got 18) [ 1812.153605][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1812.170917][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.192108][T24971] usb 2-1: config index 5 descriptor too short (expected 137, got 18) [ 1812.201460][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1812.213599][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.239495][T24971] usb 2-1: config index 6 descriptor too short (expected 137, got 18) [ 1812.256424][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1812.286462][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.339622][T24971] usb 2-1: config index 7 descriptor too short (expected 137, got 18) [ 1812.355092][T24971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1812.374793][T24971] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.402967][T24971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.710970][T24971] usb 2-1: string descriptor 0 read error: -71 [ 1812.723292][T24971] pwc: Creative Labs Webcam Pro Ex detected. [ 1812.729453][T24971] pwc: Warning: more than 1 configuration available. [ 1812.753687][T24971] pwc: Failed to set LED on/off time (-71) [ 1812.760533][T24971] pwc: send_video_command error -71 [ 1812.766264][T24971] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1812.774482][T24971] Philips webcam 2-1:1.0: probe with driver Philips webcam failed with error -71 [ 1812.787935][T24971] usb 2-1: USB disconnect, device number 59 [ 1813.289772][T23135] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1813.457261][T23135] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1813.489096][T23135] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1813.506832][T23135] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1813.530422][T23135] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1813.571968][T23135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1813.598965][T23135] usb 4-1: Product: syz [ 1813.614547][T23135] usb 4-1: Manufacturer: syz [ 1813.625042][T23135] usb 4-1: SerialNumber: syz [ 1813.845842][T23135] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1813.890242][T23132] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1813.969939][ T5705] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1814.048441][T23273] usb 4-1: USB disconnect, device number 52 [ 1814.050472][T23132] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1814.076394][T23273] usblp0: removed [ 1814.085155][T23132] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.096659][T23132] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1814.110026][ T5705] usb 1-1: device descriptor read/64, error -71 [ 1814.116847][ T1214] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1814.133227][T23132] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1814.157553][T23132] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1814.182199][T23132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.312047][ T1214] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1814.326416][ T1214] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1814.341156][ T1214] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1814.362550][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.375058][ T1214] usb 5-1: Product: syz [ 1814.379918][ T5705] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1814.388756][ T1214] usb 5-1: Manufacturer: syz [ 1814.398078][ T1214] usb 5-1: SerialNumber: syz [ 1814.413398][ T1214] usb 5-1: config 0 descriptor?? [ 1814.428303][ T1214] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1814.529929][ T5705] usb 1-1: device descriptor read/64, error -71 [ 1814.640863][ T5705] usb usb1-port1: attempt power cycle [ 1814.828291][T23132] gud 2-1:1.0: Failed to add properties (error=-71) [ 1814.843841][T23132] gud 2-1:1.0: probe with driver gud failed with error -71 [ 1814.881669][T23132] usb 2-1: USB disconnect, device number 60 [ 1814.990061][ T5705] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1815.021300][ T5705] usb 1-1: device descriptor read/8, error -71 [ 1815.272150][ T5705] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1815.300949][ T5705] usb 1-1: device descriptor read/8, error -71 [ 1815.389971][T23135] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1815.412611][ T5705] usb usb1-port1: unable to enumerate USB device [ 1815.550510][T23135] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1815.571104][T23135] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1815.589833][T23135] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1815.612157][T23135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.629792][T23135] usb 3-1: Product: syz [ 1815.634020][T23135] usb 3-1: Manufacturer: syz [ 1815.638723][T23135] usb 3-1: SerialNumber: syz [ 1815.653956][T23135] usb 3-1: config 0 descriptor?? [ 1815.673072][T23135] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1815.885555][T23135] gspca_sunplus: reg_r err -32 [ 1815.894065][T23135] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1816.519863][T23135] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1816.669826][T23135] usb 4-1: Using ep0 maxpacket: 32 [ 1816.675496][T23135] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1816.686534][T23135] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1816.694798][T23135] usb 4-1: config 0 has no interface number 0 [ 1816.701073][T23135] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1816.710625][T23135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.718897][T23135] usb 4-1: Product: syz [ 1816.723203][T23135] usb 4-1: Manufacturer: syz [ 1816.727823][T23135] usb 4-1: SerialNumber: syz [ 1816.736031][T23135] usb 4-1: config 0 descriptor?? [ 1816.908837][T23132] usb 5-1: USB disconnect, device number 83 [ 1817.156455][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1817.165642][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1817.181001][T23135] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1817.199864][T23135] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1817.214148][T23135] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1817.231221][T24971] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1817.240846][T23135] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1817.255288][T23135] usb 4-1: USB disconnect, device number 53 [ 1817.401190][T24971] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1817.418692][T24971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.428297][T24971] usb 1-1: Product: syz [ 1817.436829][T24971] usb 1-1: Manufacturer: syz [ 1817.446378][T24971] usb 1-1: SerialNumber: syz [ 1817.869374][T24971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1817.894108][T24971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1818.029877][T23273] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1818.191389][T23273] usb 4-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice=4a.bd [ 1818.205204][T23273] usb 4-1: config 109 has an invalid interface number: 127 but max is 0 [ 1818.212893][T23132] usb 3-1: USB disconnect, device number 68 [ 1818.234848][T23273] usb 4-1: config 109 has no interface number 0 [ 1818.251533][T23273] usb 4-1: config 109 interface 127 has no altsetting 0 [ 1818.275978][T23273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.289785][T23273] usb 4-1: Product: syz [ 1818.294021][T23273] usb 4-1: Manufacturer: syz [ 1818.298720][T23273] usb 4-1: SerialNumber: syz [ 1818.518372][T23273] appletouch 4-1:109.127: Could not find int-in endpoint [ 1818.559891][T23273] appletouch 4-1:109.127: probe with driver appletouch failed with error -5 [ 1818.569595][T23273] usbhid 4-1:109.127: couldn't find an input interrupt endpoint [ 1818.583903][T23273] usb 4-1: USB disconnect, device number 54 [ 1819.116285][ T2687] tipc: Enabling of bearer rejected, failed to enable media [ 1819.146707][T24971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1819.176411][T24971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1819.394357][T24971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 1819.407863][T24971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1819.424987][T24971] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1819.436177][T24971] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1819.450994][T24971] usb 1-1: USB disconnect, device number 62 [ 1819.459783][T24973] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1819.529871][ T5705] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1819.620602][T24973] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1819.632038][T24973] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.642720][T24973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1819.652532][T24973] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1819.662559][T24973] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1819.675927][T24973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.693251][ T5705] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1819.712789][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1819.736974][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1819.755417][ T5705] usb 2-1: Product: syz [ 1819.759939][ T5705] usb 2-1: Manufacturer: syz [ 1819.781515][ T5705] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input87 [ 1819.814434][T24971] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1819.851713][T24971] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1820.062437][ T5705] usb 2-1: USB disconnect, device number 61 [ 1820.095540][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1820.108385][T24973] gud 4-1:1.0: probe with driver gud failed with error -32 [ 1820.191803][T24973] usb 4-1: USB disconnect, device number 55 [ 1820.559819][ T5705] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1820.712505][ T5705] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1820.729232][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1820.749644][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1820.757980][ T5705] usb 2-1: Product: syz [ 1820.759975][T24973] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1820.767846][ T5705] usb 2-1: Manufacturer: syz [ 1820.780099][ T1214] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1820.803412][ T5705] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input88 [ 1820.909817][T24973] usb 1-1: device descriptor read/64, error -71 [ 1820.960632][ T1214] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1820.979097][ T1214] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 1820.989636][ T1214] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1821.003148][ T1214] usb 3-1: can't read configurations, error -61 [ 1821.034637][ T5705] usb 2-1: USB disconnect, device number 62 [ 1821.150008][ T1214] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1821.160650][T24973] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1821.299778][T24973] usb 1-1: device descriptor read/64, error -71 [ 1821.320535][ T1214] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1821.340063][ T1214] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 1821.360696][ T1214] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1821.378792][ T1214] usb 3-1: can't read configurations, error -61 [ 1821.385739][ T1214] usb usb3-port1: attempt power cycle [ 1821.410404][T24973] usb usb1-port1: attempt power cycle [ 1821.749964][ T1214] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1821.762105][T24973] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1821.791179][ T1214] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1821.800922][T24973] usb 1-1: device descriptor read/8, error -71 [ 1821.815796][ T1214] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 1821.841529][ T1214] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1821.859427][ T1214] usb 3-1: can't read configurations, error -61 [ 1822.001869][ T1214] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1822.030985][ T1214] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1822.049746][ T1214] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 1822.050459][T24973] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1822.067420][ T1214] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1822.082930][ T1214] usb 3-1: can't read configurations, error -61 [ 1822.092560][ T1214] usb usb3-port1: unable to enumerate USB device [ 1822.103181][T24973] usb 1-1: device descriptor read/8, error -71 [ 1822.220164][T24973] usb usb1-port1: unable to enumerate USB device [ 1822.229935][T23135] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1822.400354][T23135] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1822.412446][T23135] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1822.432759][T23135] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1822.456813][T23135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.468569][T23135] usb 2-1: Product: syz [ 1822.477100][T23135] usb 2-1: Manufacturer: syz [ 1822.485681][T23135] usb 2-1: SerialNumber: syz [ 1822.717995][ T2797] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1823.354300][ T2797] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1823.568112][T23135] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1823.588320][T23135] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 1823.614173][T23135] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1823.815386][T23135] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1823.854719][T23135] usb 2-1: USB disconnect, device number 63 [ 1823.887549][T23135] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1824.240032][T24973] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1824.390108][T24973] usb 1-1: device descriptor read/64, error -71 [ 1824.650649][T24973] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1824.721967][T23135] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1824.799860][T24973] usb 1-1: device descriptor read/64, error -71 [ 1824.894083][T23135] usb 2-1: Using ep0 maxpacket: 32 [ 1824.899755][ T1214] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1824.920386][T24973] usb usb1-port1: attempt power cycle [ 1824.926549][T23135] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1824.947899][T23135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.968485][T23135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.987158][T23135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.997990][T23135] usb 2-1: config 0 descriptor?? [ 1825.028440][T23135] hub 2-1:0.0: USB hub found [ 1825.052021][ T1214] usb 3-1: device descriptor read/64, error -71 [ 1825.228261][T23135] hub 2-1:0.0: 1 port detected [ 1825.280519][T24973] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1825.299779][ T1214] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1825.312507][T24973] usb 1-1: device descriptor read/8, error -71 [ 1825.439956][ T1214] usb 3-1: device descriptor read/64, error -71 [ 1825.446941][T23135] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1825.464962][T23135] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1825.484732][T23135] usbhid 2-1:0.0: can't add hid device: -71 [ 1825.499951][T23135] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1825.540368][T23135] usb 2-1: USB disconnect, device number 64 [ 1825.560162][T24973] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1825.560686][ T1214] usb usb3-port1: attempt power cycle [ 1825.581418][T24973] usb 1-1: device descriptor read/8, error -71 [ 1825.700162][T24973] usb usb1-port1: unable to enumerate USB device [ 1825.808080][ T2921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8586'. [ 1825.930342][ T1214] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1825.961757][ T1214] usb 3-1: device descriptor read/8, error -71 [ 1826.070092][T28200] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1826.230732][ T1214] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1826.250860][T28200] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1826.260389][ T1214] usb 3-1: device descriptor read/8, error -71 [ 1826.267727][T28200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.278956][T28200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.289345][T28200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.299514][T28200] usb 4-1: config 0 descriptor?? [ 1826.359866][T24973] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1826.380040][ T1214] usb usb3-port1: unable to enumerate USB device [ 1826.399847][ T5705] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1826.509759][T24973] usb 5-1: Using ep0 maxpacket: 8 [ 1826.515952][T24973] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1826.526889][T24973] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 1826.535441][T24973] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.546377][T24973] usb 5-1: config 135 has no interface number 0 [ 1826.552993][T24973] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1826.568407][T24973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.570470][ T5705] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1826.576997][T24973] usb 5-1: Product: syz [ 1826.588415][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1826.590530][T24973] usb 5-1: Manufacturer: syz [ 1826.604931][T24973] usb 5-1: SerialNumber: syz [ 1826.612066][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1826.617611][T24973] uvcvideo 5-1:135.230: probe with driver uvcvideo failed with error -22 [ 1826.621180][ T5705] usb 2-1: Product: syz [ 1826.633591][ T5705] usb 2-1: Manufacturer: syz [ 1826.656281][ T5705] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input89 [ 1826.715128][T28200] pyra 0003:1E7D:2CF6.007E: item fetching failed at offset 5/7 [ 1826.723980][T28200] pyra 0003:1E7D:2CF6.007E: parse failed [ 1826.729975][T28200] pyra 0003:1E7D:2CF6.007E: probe with driver pyra failed with error -22 [ 1826.848206][T28200] usb 5-1: USB disconnect, device number 84 [ 1826.888206][ T5705] usb 2-1: USB disconnect, device number 65 [ 1827.400136][ T5705] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1827.433143][T23273] usb 4-1: USB disconnect, device number 56 [ 1827.470044][ T1214] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1827.570406][ T5705] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1827.588456][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1827.602134][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1827.611276][ T5705] usb 2-1: Product: syz [ 1827.615488][ T5705] usb 2-1: Manufacturer: syz [ 1827.629741][ T1214] usb 1-1: Using ep0 maxpacket: 32 [ 1827.641950][ T5705] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input90 [ 1827.650096][T24973] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1827.666668][ T1214] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1827.678057][ T1214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.692266][ T1214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.710366][ T1214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.729377][ T1214] usb 1-1: config 0 descriptor?? [ 1827.745175][ T1214] hub 1-1:0.0: USB hub found [ 1827.831416][T24973] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1827.851151][T24973] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1827.868429][T24973] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1827.892111][T24973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.906868][T24973] usb 5-1: Product: syz [ 1827.914996][T24973] usb 5-1: Manufacturer: syz [ 1827.920198][T24973] usb 5-1: SerialNumber: syz [ 1827.932168][T24973] usb 5-1: config 0 descriptor?? [ 1827.945065][ T1214] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1827.948805][T24973] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1827.974403][ T1214] usbhid 1-1:0.0: can't add hid device: -71 [ 1827.992393][ T1214] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1828.047816][ T1214] usb 1-1: USB disconnect, device number 71 [ 1828.245554][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1828.253129][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1828.276930][ T5705] videodev: could not get a free minor [ 1828.291078][ T5705] sur40 2-1:1.0: Unable to register video subdevice. [ 1828.307587][ T5705] sur40 2-1:1.0: probe with driver sur40 failed with error -23 [ 1828.342799][ T5705] usb 2-1: USB disconnect, device number 66 [ 1828.397973][ T5619] ================================================================== [ 1828.406073][ T5619] BUG: KASAN: slab-use-after-free in sur40_open+0xa1/0x470 [ 1828.413428][ T5619] Read of size 8 at addr ffff88807b8b0000 by task udevd/5619 [ 1828.420803][ T5619] [ 1828.423230][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1828.423256][ T5619] Tainted: [L]=SOFTLOCKUP [ 1828.423263][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1828.423280][ T5619] Call Trace: [ 1828.423303][ T5619] [ 1828.423380][ T5619] dump_stack_lvl+0xe8/0x150 [ 1828.423480][ T5619] print_address_description+0x55/0x1e0 [ 1828.423512][ T5619] ? sur40_open+0xa1/0x470 [ 1828.423559][ T5619] print_report+0x58/0x70 [ 1828.423577][ T5619] kasan_report+0x117/0x150 [ 1828.423628][ T5619] ? sur40_open+0xa1/0x470 [ 1828.423646][ T5619] sur40_open+0xa1/0x470 [ 1828.423663][ T5619] input_open_device+0x1f9/0x3b0 [ 1828.423720][ T5619] evdev_open+0x4a1/0x5d0 [ 1828.423768][ T5619] chrdev_open+0x4d9/0x600 [ 1828.423800][ T5619] ? __pfx_chrdev_open+0x10/0x10 [ 1828.423817][ T5619] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1828.423848][ T5619] ? __pfx_chrdev_open+0x10/0x10 [ 1828.423862][ T5619] do_dentry_open+0x816/0x1380 [ 1828.423885][ T5619] vfs_open+0x3b/0x340 [ 1828.423902][ T5619] ? path_openat+0x2e2d/0x3830 [ 1828.423924][ T5619] path_openat+0x2e44/0x3830 [ 1828.423947][ T5619] ? kasan_save_track+0x3e/0x80 [ 1828.423965][ T5619] ? do_sys_openat2+0xcc/0x200 [ 1828.423983][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.424028][ T5619] do_file_open+0x23e/0x4a0 [ 1828.424052][ T5619] ? __pfx_do_file_open+0x10/0x10 [ 1828.424081][ T5619] ? _raw_spin_unlock+0x28/0x50 [ 1828.424182][ T5619] ? alloc_fd+0x651/0x6c0 [ 1828.424204][ T5619] do_sys_openat2+0x115/0x200 [ 1828.424232][ T5619] ? __pfx_do_sys_openat2+0x10/0x10 [ 1828.424257][ T5619] __x64_sys_openat+0x138/0x170 [ 1828.424277][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.424294][ T5619] do_syscall_64+0x174/0x580 [ 1828.424341][ T5619] ? trace_irq_disable+0x3b/0x140 [ 1828.424368][ T5619] ? clear_bhb_loop+0x70/0xc0 [ 1828.424386][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.424403][ T5619] RIP: 0033:0x7fb26d8a7407 [ 1828.424450][ T5619] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1828.424466][ T5619] RSP: 002b:00007fff9c9c94d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1828.424518][ T5619] RAX: ffffffffffffffda RBX: 00007fb26df81880 RCX: 00007fb26d8a7407 [ 1828.424531][ T5619] RDX: 0000000000080000 RSI: 0000558a025d3040 RDI: ffffffffffffff9c [ 1828.424542][ T5619] RBP: 0000558a025d4440 R08: 0000000000000000 R09: 0000000000000000 [ 1828.424554][ T5619] R10: 0000000000000000 R11: 0000000000000202 R12: 00005589fe8020c8 [ 1828.424564][ T5619] R13: 00005589fe8020ce R14: 00007fff9c9c9ad0 R15: 00005589fe808bcc [ 1828.424584][ T5619] [ 1828.424590][ T5619] [ 1828.689254][ T5619] Allocated by task 5705: [ 1828.693627][ T5619] kasan_save_track+0x3e/0x80 [ 1828.698333][ T5619] __kasan_kmalloc+0x93/0xb0 [ 1828.702938][ T5619] __kmalloc_cache_noprof+0x32d/0x660 [ 1828.708334][ T5619] sur40_probe+0x16d/0xfa0 [ 1828.712733][ T5619] usb_probe_interface+0x653/0xc60 [ 1828.717929][ T5619] really_probe+0x254/0xae0 [ 1828.722469][ T5619] __driver_probe_device+0x1e8/0x360 [ 1828.727737][ T5619] driver_probe_device+0x4f/0x240 [ 1828.732765][ T5619] __device_attach_driver+0x270/0x410 [ 1828.738118][ T5619] bus_for_each_drv+0x258/0x2f0 [ 1828.743014][ T5619] __device_attach+0x2c4/0x450 [ 1828.747782][ T5619] device_initial_probe+0xa1/0xd0 [ 1828.752788][ T5619] bus_probe_device+0x12a/0x220 [ 1828.757629][ T5619] device_add+0x7d7/0xb80 [ 1828.761939][ T5619] usb_set_configuration+0x1ad8/0x2180 [ 1828.767384][ T5619] usb_generic_driver_probe+0x8d/0x150 [ 1828.772913][ T5619] usb_probe_device+0x1c3/0x3b0 [ 1828.777754][ T5619] really_probe+0x254/0xae0 [ 1828.782272][ T5619] __driver_probe_device+0x1e8/0x360 [ 1828.787597][ T5619] driver_probe_device+0x4f/0x240 [ 1828.792629][ T5619] __device_attach_driver+0x270/0x410 [ 1828.798071][ T5619] bus_for_each_drv+0x258/0x2f0 [ 1828.802908][ T5619] __device_attach+0x2c4/0x450 [ 1828.807662][ T5619] device_initial_probe+0xa1/0xd0 [ 1828.812673][ T5619] bus_probe_device+0x12a/0x220 [ 1828.817515][ T5619] device_add+0x7d7/0xb80 [ 1828.821927][ T5619] usb_new_device+0x9aa/0x1690 [ 1828.826678][ T5619] hub_event+0x28e8/0x4d30 [ 1828.831091][ T5619] process_scheduled_works+0xa8e/0x14e0 [ 1828.836651][ T5619] worker_thread+0xa47/0xfb0 [ 1828.841250][ T5619] kthread+0x388/0x470 [ 1828.845340][ T5619] ret_from_fork+0x514/0xb70 [ 1828.849940][ T5619] ret_from_fork_asm+0x1a/0x30 [ 1828.854701][ T5619] [ 1828.857006][ T5619] Freed by task 5705: [ 1828.861053][ T5619] kasan_save_track+0x3e/0x80 [ 1828.865745][ T5619] kasan_save_free_info+0x40/0x50 [ 1828.870865][ T5619] __kasan_slab_free+0x5c/0x80 [ 1828.875635][ T5619] kfree+0x1c5/0x640 [ 1828.879509][ T5619] sur40_probe+0x918/0xfa0 [ 1828.884263][ T5619] usb_probe_interface+0x653/0xc60 [ 1828.889358][ T5619] really_probe+0x254/0xae0 [ 1828.893847][ T5619] __driver_probe_device+0x1e8/0x360 [ 1828.899118][ T5619] driver_probe_device+0x4f/0x240 [ 1828.904137][ T5619] __device_attach_driver+0x270/0x410 [ 1828.909491][ T5619] bus_for_each_drv+0x258/0x2f0 [ 1828.914415][ T5619] __device_attach+0x2c4/0x450 [ 1828.919161][ T5619] device_initial_probe+0xa1/0xd0 [ 1828.924444][ T5619] bus_probe_device+0x12a/0x220 [ 1828.929453][ T5619] device_add+0x7d7/0xb80 [ 1828.933785][ T5619] usb_set_configuration+0x1ad8/0x2180 [ 1828.939320][ T5619] usb_generic_driver_probe+0x8d/0x150 [ 1828.944875][ T5619] usb_probe_device+0x1c3/0x3b0 [ 1828.949878][ T5619] really_probe+0x254/0xae0 [ 1828.954372][ T5619] __driver_probe_device+0x1e8/0x360 [ 1828.960790][ T5619] driver_probe_device+0x4f/0x240 [ 1828.966324][ T5619] __device_attach_driver+0x270/0x410 [ 1828.971850][ T5619] bus_for_each_drv+0x258/0x2f0 [ 1828.976869][ T5619] __device_attach+0x2c4/0x450 [ 1828.981879][ T5619] device_initial_probe+0xa1/0xd0 [ 1828.986884][ T5619] bus_probe_device+0x12a/0x220 [ 1828.991727][ T5619] device_add+0x7d7/0xb80 [ 1828.996037][ T5619] usb_new_device+0x9aa/0x1690 [ 1829.000796][ T5619] hub_event+0x28e8/0x4d30 [ 1829.005202][ T5619] process_scheduled_works+0xa8e/0x14e0 [ 1829.010737][ T5619] worker_thread+0xa47/0xfb0 [ 1829.015312][ T5619] kthread+0x388/0x470 [ 1829.019364][ T5619] ret_from_fork+0x514/0xb70 [ 1829.023943][ T5619] ret_from_fork_asm+0x1a/0x30 [ 1829.028784][ T5619] [ 1829.031089][ T5619] The buggy address belongs to the object at ffff88807b8b0000 [ 1829.031089][ T5619] which belongs to the cache kmalloc-4k of size 4096 [ 1829.045210][ T5619] The buggy address is located 0 bytes inside of [ 1829.045210][ T5619] freed 4096-byte region [ffff88807b8b0000, ffff88807b8b1000) [ 1829.059172][ T5619] [ 1829.061531][ T5619] The buggy address belongs to the physical page: [ 1829.068005][ T5619] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b8b0 [ 1829.076767][ T5619] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1829.085341][ T5619] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1829.092890][ T5619] page_type: f5(slab) [ 1829.096853][ T5619] raw: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 1829.105426][ T5619] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1829.114356][ T5619] head: 00fff00000000040 ffff88801b005140 dead000000000100 dead000000000122 [ 1829.123111][ T5619] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1829.131777][ T5619] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1829.140436][ T5619] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1829.149176][ T5619] page dumped because: kasan: bad access detected [ 1829.155583][ T5619] page_owner tracks the page as allocated [ 1829.161378][ T5619] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4978, tgid 4978 (udevd), ts 114458659070, free_ts 114434123798 [ 1829.181685][ T5619] post_alloc_hook+0x1f9/0x250 [ 1829.186485][ T5619] get_page_from_freelist+0x21fa/0x2270 [ 1829.192193][ T5619] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1829.197987][ T5619] allocate_slab+0x79/0x5e0 [ 1829.202473][ T5619] refill_objects+0x2d5/0x350 [ 1829.207218][ T5619] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1829.212854][ T5619] __kmalloc_noprof+0x485/0x720 [ 1829.217872][ T5619] tomoyo_realpath_from_path+0xef/0x640 [ 1829.223488][ T5619] tomoyo_check_open_permission+0x229/0x470 [ 1829.229402][ T5619] security_file_open+0xa9/0x240 [ 1829.234378][ T5619] do_dentry_open+0x4a0/0x1380 [ 1829.239649][ T5619] vfs_open+0x3b/0x340 [ 1829.243710][ T5619] path_openat+0x2e44/0x3830 [ 1829.248296][ T5619] do_file_open+0x23e/0x4a0 [ 1829.252790][ T5619] do_sys_openat2+0x115/0x200 [ 1829.257544][ T5619] __x64_sys_openat+0x138/0x170 [ 1829.262464][ T5619] page last free pid 4978 tgid 4978 stack trace: [ 1829.268780][ T5619] __free_frozen_pages+0xc1e/0xd10 [ 1829.273875][ T5619] __slab_free+0x274/0x2c0 [ 1829.278277][ T5619] qlist_free_all+0x99/0x100 [ 1829.282852][ T5619] kasan_quarantine_reduce+0x148/0x160 [ 1829.288296][ T5619] __kasan_slab_alloc+0x22/0x80 [ 1829.293133][ T5619] __kmalloc_noprof+0x311/0x720 [ 1829.297970][ T5619] tomoyo_realpath_from_path+0xef/0x640 [ 1829.303552][ T5619] tomoyo_check_open_permission+0x229/0x470 [ 1829.309527][ T5619] security_file_open+0xa9/0x240 [ 1829.314539][ T5619] do_dentry_open+0x4a0/0x1380 [ 1829.319324][ T5619] vfs_open+0x3b/0x340 [ 1829.323384][ T5619] path_openat+0x2e44/0x3830 [ 1829.328051][ T5619] do_file_open+0x23e/0x4a0 [ 1829.332541][ T5619] do_sys_openat2+0x115/0x200 [ 1829.337203][ T5619] __x64_sys_openat+0x138/0x170 [ 1829.342123][ T5619] do_syscall_64+0x174/0x580 [ 1829.346815][ T5619] [ 1829.349120][ T5619] Memory state around the buggy address: [ 1829.354730][ T5619] ffff88807b8aff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1829.362799][ T5619] ffff88807b8aff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1829.371014][ T5619] >ffff88807b8b0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1829.379225][ T5619] ^ [ 1829.383277][ T5619] ffff88807b8b0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1829.392191][ T5619] ffff88807b8b0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1829.400238][ T5619] ================================================================== [ 1829.439794][ T5619] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1829.447049][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1829.457472][ T5619] Tainted: [L]=SOFTLOCKUP [ 1829.462088][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1829.472419][ T5619] Call Trace: [ 1829.475794][ T5619] [ 1829.478729][ T5619] vpanic+0x56c/0xa60 [ 1829.483260][ T5619] ? __pfx_vpanic+0x10/0x10 [ 1829.487970][ T5619] panic+0xc5/0xd0 [ 1829.491706][ T5619] ? __pfx_panic+0x10/0x10 [ 1829.496157][ T5619] ? preempt_schedule_thunk+0x16/0x40 [ 1829.501547][ T5619] ? preempt_schedule_thunk+0x16/0x40 [ 1829.506942][ T5619] ? sur40_open+0xa1/0x470 [ 1829.511382][ T5619] check_panic_on_warn+0x89/0xb0 [ 1829.516599][ T5619] ? sur40_open+0xa1/0x470 [ 1829.521035][ T5619] end_report+0x73/0x170 [ 1829.525320][ T5619] ? sur40_open+0xa1/0x470 [ 1829.529748][ T5619] kasan_report+0x128/0x150 [ 1829.534253][ T5619] ? sur40_open+0xa1/0x470 [ 1829.538655][ T5619] sur40_open+0xa1/0x470 [ 1829.542880][ T5619] input_open_device+0x1f9/0x3b0 [ 1829.547798][ T5619] evdev_open+0x4a1/0x5d0 [ 1829.552117][ T5619] chrdev_open+0x4d9/0x600 [ 1829.556522][ T5619] ? __pfx_chrdev_open+0x10/0x10 [ 1829.561442][ T5619] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1829.567767][ T5619] ? __pfx_chrdev_open+0x10/0x10 [ 1829.572687][ T5619] do_dentry_open+0x816/0x1380 [ 1829.577456][ T5619] vfs_open+0x3b/0x340 [ 1829.581536][ T5619] ? path_openat+0x2e2d/0x3830 [ 1829.586320][ T5619] path_openat+0x2e44/0x3830 [ 1829.591072][ T5619] ? kasan_save_track+0x3e/0x80 [ 1829.596042][ T5619] ? do_sys_openat2+0xcc/0x200 [ 1829.600938][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.607011][ T5619] do_file_open+0x23e/0x4a0 [ 1829.611513][ T5619] ? __pfx_do_file_open+0x10/0x10 [ 1829.616628][ T5619] ? _raw_spin_unlock+0x28/0x50 [ 1829.621463][ T5619] ? alloc_fd+0x651/0x6c0 [ 1829.625780][ T5619] do_sys_openat2+0x115/0x200 [ 1829.630445][ T5619] ? __pfx_do_sys_openat2+0x10/0x10 [ 1829.635675][ T5619] __x64_sys_openat+0x138/0x170 [ 1829.640513][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.646564][ T5619] do_syscall_64+0x174/0x580 [ 1829.651324][ T5619] ? trace_irq_disable+0x3b/0x140 [ 1829.656353][ T5619] ? clear_bhb_loop+0x70/0xc0 [ 1829.661022][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.666904][ T5619] RIP: 0033:0x7fb26d8a7407 [ 1829.671336][ T5619] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1829.690936][ T5619] RSP: 002b:00007fff9c9c94d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1829.699341][ T5619] RAX: ffffffffffffffda RBX: 00007fb26df81880 RCX: 00007fb26d8a7407 [ 1829.707297][ T5619] RDX: 0000000000080000 RSI: 0000558a025d3040 RDI: ffffffffffffff9c [ 1829.715263][ T5619] RBP: 0000558a025d4440 R08: 0000000000000000 R09: 0000000000000000 [ 1829.723237][ T5619] R10: 0000000000000000 R11: 0000000000000202 R12: 00005589fe8020c8 [ 1829.731200][ T5619] R13: 00005589fe8020ce R14: 00007fff9c9c9ad0 R15: 00005589fe808bcc [ 1829.739167][ T5619] [ 1829.742436][ T5619] Kernel Offset: disabled [ 1829.746749][ T5619] Rebooting in 86400 seconds..