last executing test programs: 4m58.46570176s ago: executing program 3 (id=584): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010027bd70000000000001000000080007000a0101024e00010003dfe4dd9e6efa9e7204065e1dd0ab4c3f17568492fa019225f4f55724dbd9d7264880ef7cef4da08a74e947a31ce6750f9a05e44bd95d7a6eda083bb40ea3d63e0c0000ddd4a0c6f5e40000080002000700000008000800ffffffff08"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 4m56.242726146s ago: executing program 3 (id=593): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000140), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 4m54.5852935s ago: executing program 3 (id=597): syz_usb_connect(0x2, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f9000905030000000000000905042d75"], 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) readv(r0, &(0x7f0000001800)=[{&(0x7f0000000280)=""/197, 0xc5}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000019000100000000000000000080200000001100050000000008000100ac1e000108"], 0x2c}}, 0x0) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180), 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40180, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x208, 0x0, 0x9}]}) readv(r0, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x6b}], 0x1) 4m50.47270041s ago: executing program 3 (id=608): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000942000/0x2000)=nil) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000b1a000/0x2000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x1000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) 4m49.162780687s ago: executing program 3 (id=611): r0 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_matches\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r4, 0x5, 0x0, @val=@tcx}, 0x1c) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) syz_emit_ethernet(0x3f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0xe, 0x0, 0x0, 0xb, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000280)=""/107, 0x6b}], 0x1, 0xe, 0xf) syz_open_procfs(r0, &(0x7f0000000040)='net/rfcomm\x00') 4m47.559281561s ago: executing program 3 (id=616): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x9}, 0xfffe}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4m31.511693052s ago: executing program 32 (id=616): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x9}, 0xfffe}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 24.741797751s ago: executing program 1 (id=1342): socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 24.179756659s ago: executing program 1 (id=1344): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x6, 0xd}, {0x8215, 0xaaff}]}, 0x18, 0x3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000021020000c1000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38) 23.641378338s ago: executing program 1 (id=1346): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000003, {0x1, 0x1fffffffe, 0x40000a, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0xffff, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, 0x0, 0x0, 0x200003d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000021020000c1000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38) 23.213382153s ago: executing program 1 (id=1348): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2a00040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14.431526049s ago: executing program 4 (id=1385): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), 0x0, 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, 0x0, 0x0, 0x4, r1}, 0x38) 13.099354325s ago: executing program 4 (id=1389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1000, 0x106, 0xfa11, 0x65}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) r4 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x8) sendmsg(r5, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x5}, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x10d502) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r6, 0x1000000, 0x0) 9.850785429s ago: executing program 0 (id=1397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x20040004}, 0x880) 9.822463962s ago: executing program 5 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c6104262506f"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcdb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900020073797a32000000001400078008001340ffffffff080012400000e54a050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000002040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x1fc, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x100, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_EXPRESSIONS={0xc4, 0x12, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_DYNSET_EXPR={0x28, 0x7, 0x0, 0x1, {{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, @NFTA_DYNSET_OP={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_TIMEOUT={0xc}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x8d8, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2a8, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xc0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "dd0bd4d9a9a8e1f38bd0cbadeb1ad78fc47252636ca0b31cd98b81447e8fb0ce0b32ccf7cc0342d4519d53f8c232e32000ff041581ab5ba696e3e4aa56007830df65dc3e6be21ceff19b2bdac7cf8a532f3870a4c854fb394e2e49424a34e6df51e098d7e4387e36edac54d1e7a8a76ed0212d69822c25fd93f2e1c200767a64f7a26acddb22bee75ba57aca4c5b9c95f0bfdb39682bee21a27d2a922d4b5399525cee1549d5dfe766d811bb"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0xb8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "53e35b7b7c03587f14c071acd58ad7ac171fc749240df6d86a50e48a8d8dc5adb136612ce57c654ea852b95586fe5eda60582e4398e00204ce66bad2ff6d3ac1dbfeaabe00dbe5d084e0ee3bf83a7e91539708d57205be5ae5ec9157c76837895c157ef1cd3b8317efbdf3bc7feaa76fe8bca7ef962a1035a35ec90b81cb1029846d647a47be247e205d548d7ec76cb16e052741b442a338843f3d09423092e49a52"}]}, @NFTA_SET_ELEM_USERDATA={0x53, 0x6, 0x1, 0x0, "05879ac281e16726b33e8a84aa87db925902ac5c0e48680f60adbc09336db2d370b85bab195809ccb9a6c393f2b65a45b4636eee23277de79ca65d2a9f58823e03fa52a78091795f2526edc045f0a8"}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x88, 0x6, 0x1, 0x0, "8996128f38c9eeeea55c5acaa2a6e22911d5a82ef94b41005b7430051e2b970600ac8c5eb1ba40e3c59ae3fa552a1d727972fd6dc32d569ad2c563ce3e1fe03a84c7535fb1b4b660896496d96e935f1582b71183e0c7f91f9feb5fe6bd8cac64171671b9902e74905956edd68677ed3559470d2328b1b04eec0a40a855573124c16993e1"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5d8, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x17, 0x1, "f1239f1c449576ae9d8de92e6f4cd9f5715e45"}]}, @NFTA_SET_ELEM_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x358}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x484, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "212e8f80f58d4d5723cecdeb37b8b82f92de6aa6dcf7527ee80fe6a80a6ebddb5c34e4b08389b063ea0fa26c3b71054e49023e26d38f0aeeda45bc36e948a8ef41eac5a7d24bed1f7f9fa482ee26d772294afe1247b31a96f9652be8eb59dbe42e294c09e4199462642602d4e58d08cda56fe10862278978bda6a9f5486a1558cffd0ab4ac3218e5c01967f1469354c592ccf494a8f87c7bfce5b9"}, @NFTA_SET_ELEM_DATA={0x1b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6b, 0x1, "ae4b538322b8350595c27f63e24b5340ebee0f67cf0e8d55ec120bab9c382191ea84c462f52002ea31680cb3e4850e5f77fccc445a0a7824184b88dc40867f183b2138243fe23381c4246b2c41962c8d2b151b7ef04e2e0c991a54a3032f88c14edd4b4e5a769d"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "d4fdeea8bfa33326bfa3159ccc7c8a92428add1a1a51f8b16df3458bd2734aaee38bed6246a1b1c4be1f4961a0b2e229b3e79c4606883fb4e2eeed434fedb106876f9ac9"}, @NFTA_DATA_VALUE={0xb0, 0x1, "1ce67c92ddd7c4ebcb7a1eac90676a491513875b5e4527786f577a5985284a8297284665ea3665a9c36ef19ba7e6087f5b2703b1a2cbd08331919d37599f0c8e9030c107c054d9581a5430286a9e0df1568d8bcc00e8902ba497910e48f40c3c986eb56461a44c7a742599059f91273b1a49d6b862004b15518147ef772e8dca310156bf34a761ee361291667f0cee4b649978ea944bd7f6ad2c961d76ce3c365d5a5150c75e6794ebb302e4"}]}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "f5c9297a8ac138306f6d50aa0a5ec0a08ed081776859a9489895e0a18634e588927eaf4cf8ad76c5236677bd9faf3581d4160d85c1fe83c48aea00ac6fccbf5d6dbcf681557b72076ebe48d55b4be49292f00539c1f4648632a902a0826d950fda2a8ee1cdf7e4eb8c024b181d1ddea809c4c2986648958f1990247d3277f5e202e1e400dc206c49fda05d11351aae7fb50940f1143325e467980955da5348301adf9a6d6b49a3c34cd3890f4ff16b15d2c2d124bd236473fd8ac77b4f7eb6484faafce7e7e3eadf82b1b8d0c748fd2c1c1c747dc2d1c246fa2899e316cf0b7c5eb33f9f999a4533b116269fd1f0e3"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "ca344663f8414e99b21d63d4b48f258c042625d22ad76a7ea04f36"}, @NFTA_DATA_VALUE={0x46, 0x1, "80e910d24903aa01f5d73298d42ccf229f36a7b49ee749b6d2479c229fe46e98cb60b87545b86f24678aca0c45172feff50000a8464a2c2f1be595da19573efeb9e6"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb38}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x28000600) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24004015) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000000480)=""/166, 0xa6}], 0x3) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='/'], 0x20) 9.505139418s ago: executing program 4 (id=1400): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 9.414943491s ago: executing program 0 (id=1401): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000040)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.23827768s ago: executing program 4 (id=1403): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040880}, 0x24040084) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.630290508s ago: executing program 5 (id=1405): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, &(0x7f0000019280)=ANY=[@ANYRES64]) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000019080), &(0x7f00000190c0)=0xc) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r5, &(0x7f0000019680)=[{&(0x7f0000019480)="b1329129ccf4e8f05761cf50f76b31cbbe8f8b116fabb78d79b090aa2a5f79d7caec908d7bf510342e8a0a4ad439c8e0db3e8798b98ca1d347b8c5d20c41ddd2fd35a53570a1e66832de05b1fc9883903203396fffcb03e7e4159638dcbae8cb78d019621cc9e41c25abc93acbcea842393e6c0e7e784fe849a8a65e5b394c508a91f52045063d2e", 0x88}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 8.289278964s ago: executing program 4 (id=1407): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x880) 6.791658903s ago: executing program 4 (id=1409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1000, 0x106, 0xfa11, 0x65}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) r4 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x8) sendmsg(r5, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x5}, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x10d502) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') lseek(r6, 0x1000000, 0x0) 6.661308321s ago: executing program 5 (id=1411): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x20040004}, 0x880) 6.400130813s ago: executing program 5 (id=1413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000e00000085"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, &(0x7f0000019280)=ANY=[@ANYRES64]) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000019080), &(0x7f00000190c0)=0xc) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r5, &(0x7f0000019680)=[{&(0x7f0000019480)="b1329129ccf4e8f05761cf50f76b31cbbe8f8b116fabb78d79b090aa2a5f79d7caec908d7bf510342e8a0a4ad439c8e0db3e8798b98ca1d347b8c5d20c41ddd2fd35a53570a1e66832de05b1fc9883903203396fffcb03e7e4159638dcbae8cb78d019621cc9e41c25abc93acbcea842393e6c0e7e784fe849a8a65e5b394c508a91f52045063d2e", 0x88}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 5.409253631s ago: executing program 2 (id=1414): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = getpid() memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\a\x00\x00\x00SP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea/\x9d\x0f0KR\xc8\xe3,<$P\x91\x1fj_\xa35\x86\xe5\xechCGz\'\xa9\xb3\x86\r&\"\xff\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96\x00\xfc\x00\x00\x00\x00\x00', 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) unshare(0x100000) 4.867753669s ago: executing program 0 (id=1415): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x80000000, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) syz_open_dev$dri(&(0x7f0000000280), 0x33f, 0x801) 4.669454201s ago: executing program 2 (id=1416): socket$packet(0x11, 0x3, 0x300) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x6000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xf0, 0xc0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x9ba}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x17, 0x3}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x4) write$char_usb(0xffffffffffffffff, &(0x7f0000008200), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') writev(r4, &(0x7f0000003740), 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) 3.005888263s ago: executing program 0 (id=1417): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "521299a432289bea522b3228b534de379d0418"}, 0x27) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7ac1492b5762fce6c5d960001000000000000000000000000000080ffffff00e9ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.81197342s ago: executing program 5 (id=1418): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000a13000/0x1000)=nil) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)) dup(r4) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) setreuid(r5, 0xffffffffffffffff) fchown(r3, r5, 0x0) 2.713358149s ago: executing program 2 (id=1419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x880) 1.037155236s ago: executing program 5 (id=1420): socket$kcm(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x15, 0x1, 0x8, &(0x7f0000002ec0)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000005c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x14400, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x2, 0x1, {0x2, @pix_mp={0xffff6909, 0x80000000, 0x33565348, 0x5, 0x8, [{0x9, 0x9}, {0x2008, 0xf5}, {0x802, 0x80007b}, {0x5, 0x6}, {0xf66, 0x9f2}, {0x100008, 0x10000}, {0x55, 0x2}, {0x7}], 0x4, 0x4, 0x7, 0x2}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x9, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xb00}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x6, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x1, 0x3}, {0x8000, 0x3, 0x4, 0x3542, 0x4, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x21, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf6, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x870, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x7, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x4, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xa, 0x3}, {0x5, 0x657a0ecc, 0x1, 0x8000a4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x1, 0x3, 0x7, 0x7, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0xffff0}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000, 0xff}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd4, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x3, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x40}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda5f, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x800009, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0xfffff294, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0xffffffff}, {0x9, 0x4, 0x1, 0x72f, 0xae, 0x9}, {0xe4, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1fd, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1fd, 0x6, 0x3}, {0x7bf65382, 0x8, 0x1000e87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x7, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x5}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x4, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0xb, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x7, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xde7, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x6, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x8, 0x7f, 0x4, 0x1}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x6}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x4, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0xc7fb, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x84000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xffffffff, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x5}, {0x4}, {0x5}, {0x2}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x3}, {}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 813.04311ms ago: executing program 2 (id=1421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 618.948827ms ago: executing program 0 (id=1422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x20040004}, 0x880) 404.95817ms ago: executing program 2 (id=1423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x2, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0x100, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x6, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xe7, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x5, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x2, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x4, 0x9, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0x0, 0x80000000, 0x0, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 404.138073ms ago: executing program 1 (id=1351): close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000300000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 99.585623ms ago: executing program 0 (id=1424): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 51.930547ms ago: executing program 2 (id=1425): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2a00040, &(0x7f0000000540)) 0s ago: executing program 1 (id=1426): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0401000604"], 0x7) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x80000000, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) syz_open_dev$dri(&(0x7f0000000280), 0x33f, 0x801) kernel console output (not intermixed with test programs): 281.063343][ T820] usb 3-1: USB disconnect, device number 29 [ 281.333193][ T31] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32 [ 281.697027][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 281.697064][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 281.906185][ T7223] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 281.980405][ T7223] netlink: 'syz.4.460': attribute type 10 has an invalid length. [ 281.980422][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.460'. [ 281.980616][ T7223] dummy0: entered promiscuous mode [ 281.984736][ T820] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 282.135462][ T820] usb 3-1: Using ep0 maxpacket: 8 [ 282.142262][ T820] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.164467][ T820] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 282.164497][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.164518][ T820] usb 3-1: Product: syz [ 282.171259][ T820] usb 3-1: Manufacturer: syz [ 282.171277][ T820] usb 3-1: SerialNumber: syz [ 282.214422][ T820] usb 3-1: config 0 descriptor?? [ 282.253401][ T820] usb 1-1: USB disconnect, device number 25 [ 285.228050][ T9] usb 3-1: USB disconnect, device number 30 [ 285.764776][ T5741] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 285.815095][ T820] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 285.894801][ T5741] usb 3-1: device descriptor read/64, error -71 [ 285.964673][ T820] usb 4-1: Using ep0 maxpacket: 8 [ 286.470282][ T820] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 286.470314][ T820] usb 4-1: config 0 has no interface number 0 [ 286.470361][ T820] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.470387][ T820] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 286.470416][ T820] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.470443][ T820] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.470488][ T820] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 286.470513][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.674663][ T5741] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 286.804682][ T5741] usb 3-1: device descriptor read/64, error -71 [ 286.915201][ T5741] usb usb3-port1: attempt power cycle [ 287.274673][ T5741] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 287.295528][ T5741] usb 3-1: device descriptor read/8, error -71 [ 287.544770][ T5741] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 287.566982][ T5741] usb 3-1: device descriptor read/8, error -71 [ 287.677974][ T5741] usb usb3-port1: unable to enumerate USB device [ 287.840402][ T820] usb 4-1: config 0 descriptor?? [ 287.861741][ T820] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 287.995919][ T7263] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 288.074855][ T7266] dummy0: left promiscuous mode [ 288.133755][ T7263] netlink: 'syz.4.473': attribute type 10 has an invalid length. [ 288.133780][ T7263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.473'. [ 288.242059][ T5727] usb 4-1: USB disconnect, device number 21 [ 288.242183][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 289.022474][ T7263] dummy0: entered promiscuous mode [ 289.668496][ T5727] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 289.755638][ T7280] netlink: 'syz.4.478': attribute type 1 has an invalid length. [ 290.076532][ T7282] bond3: (slave veth3): Enslaving as an active interface with a down link [ 290.076899][ T7283] dummy0: left promiscuous mode [ 290.157513][ T7283] bond3: (slave dummy0): making interface the new active one [ 290.223304][ T7283] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 291.580276][ T7316] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 291.692515][ T7316] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 291.692532][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.489'. [ 291.713334][ T7318] bond3: (slave dummy0): Releasing active interface [ 291.751258][ T7316] dummy0: entered promiscuous mode [ 291.768914][ T7320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.490'. [ 291.784061][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 291.784653][ T5741] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 291.826431][ T7320] hsr_slave_0: left promiscuous mode [ 291.871981][ T7320] hsr_slave_1: left promiscuous mode [ 291.914754][ T5741] usb 3-1: device descriptor read/64, error -71 [ 292.165051][ T5741] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 292.304738][ T5741] usb 3-1: device descriptor read/64, error -71 [ 292.384714][ T820] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 292.416115][ T5741] usb usb3-port1: attempt power cycle [ 292.558707][ T820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 292.561620][ T820] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 292.561648][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.561672][ T820] usb 5-1: Product: syz [ 292.561682][ T820] usb 5-1: Manufacturer: syz [ 292.561693][ T820] usb 5-1: SerialNumber: syz [ 292.785010][ T5741] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 294.672566][ T820] usbhid 5-1:1.0: can't add hid device: -71 [ 294.672697][ T820] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 294.824531][ T820] usb 5-1: USB disconnect, device number 20 [ 294.854198][ T5741] usb 3-1: device descriptor read/8, error -71 [ 295.358303][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 295.358329][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 295.594858][ T5741] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 295.618316][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.618351][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.618392][ T5741] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 295.618418][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.673034][ T5741] usb 3-1: config 0 descriptor?? [ 295.744218][ T7350] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 296.611572][ T7352] bond3: (slave veth7): Enslaving as an active interface with a down link [ 297.083060][ T5741] usb 3-1: string descriptor 0 read error: -22 [ 297.284391][ T5741] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 297.311733][ T5741] usb 3-1: USB disconnect, device number 38 [ 299.144669][ T5616] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 299.340218][ T5616] usb 4-1: device descriptor read/64, error -71 [ 299.774656][ T5616] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 299.794211][ T820] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 299.905649][ T5616] usb 4-1: device descriptor read/64, error -71 [ 299.948107][ T820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.948135][ T820] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 299.948174][ T820] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 299.948197][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.952661][ T820] usb 3-1: config 0 descriptor?? [ 300.016107][ T5616] usb usb4-port1: attempt power cycle [ 300.894779][ T5616] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 300.915628][ T5616] usb 4-1: device descriptor read/8, error -71 [ 301.594654][ T5616] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 301.683794][ T10] usb 3-1: USB disconnect, device number 39 [ 301.717892][ T5616] usb 4-1: device descriptor read/8, error -71 [ 301.835059][ T5616] usb usb4-port1: unable to enumerate USB device [ 303.506726][ T820] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 303.655444][ T820] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 303.657218][ T820] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 303.657254][ T820] usb 4-1: can't read configurations, error -61 [ 303.786342][ T820] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 303.935535][ T820] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 303.939518][ T820] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 303.939555][ T820] usb 4-1: can't read configurations, error -61 [ 303.939998][ T820] usb usb4-port1: attempt power cycle [ 304.065753][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 304.244823][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 304.246773][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.246804][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.251398][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.251418][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.251433][ T10] usb 3-1: Product: syz [ 304.251444][ T10] usb 3-1: Manufacturer: syz [ 304.251454][ T10] usb 3-1: SerialNumber: syz [ 304.272368][ T10] usb 3-1: config 0 descriptor?? [ 304.338699][ T820] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 304.367349][ T820] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 304.369124][ T820] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 304.369159][ T820] usb 4-1: can't read configurations, error -61 [ 304.429990][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.430040][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 304.524737][ T820] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 304.546809][ T820] usb 4-1: too many configurations: 185, using maximum allowed: 8 [ 304.549824][ T820] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 304.549861][ T820] usb 4-1: can't read configurations, error -61 [ 304.553148][ T820] usb usb4-port1: unable to enumerate USB device [ 304.866375][ T820] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 305.027540][ T820] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 305.027570][ T820] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 305.027592][ T820] usb 5-1: config 0 has no interface number 0 [ 305.027664][ T820] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 305.027695][ T820] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.027724][ T820] usb 5-1: config 0 interface 52 has no altsetting 0 [ 305.042819][ T820] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 305.042856][ T820] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 305.042879][ T820] usb 5-1: Manufacturer: syz [ 305.051544][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 305.059354][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 305.167808][ T820] usb 5-1: config 0 descriptor?? [ 305.192401][ T820] hub 5-1:0.52: bad descriptor, ignoring hub [ 305.192441][ T820] hub 5-1:0.52: probe with driver hub failed with error -5 [ 306.609012][ T10] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 306.609478][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 306.610022][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 306.610467][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 306.610937][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 306.611381][ T10] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 306.619881][ T10] usb 3-1: USB disconnect, device number 40 [ 307.296653][ T820] usb 5-1: Can not set alternate setting to 1, error: -71 [ 307.296703][ T820] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 307.361734][ T820] usb 5-1: USB disconnect, device number 21 [ 308.104626][ T820] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 308.137375][ T5727] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 308.257356][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.257393][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.257434][ T820] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 308.257466][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.308273][ T820] usb 4-1: config 0 descriptor?? [ 308.324206][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.324242][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.324282][ T5727] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 308.324307][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.398097][ T5727] usb 1-1: config 0 descriptor?? [ 310.004053][ T820] usb 4-1: string descriptor 0 read error: -22 [ 310.011611][ T5727] usb 1-1: string descriptor 0 read error: -22 [ 310.075524][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 310.210714][ T5727] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #100: -71 [ 310.210843][ T5727] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 310.210863][ T5727] uclogic 0003:256C:006D.000D: failed probing pen v1 parameters: -71 [ 310.211186][ T820] uclogic 0003:256C:006D.000C: interface is invalid, ignoring [ 310.212959][ T5727] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 310.213071][ T5727] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 310.259126][ T43] usb 5-1: too many configurations: 185, using maximum allowed: 8 [ 310.275643][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.275680][ T43] usb 5-1: can't read configurations, error -61 [ 310.341987][ T5727] usb 1-1: USB disconnect, device number 26 [ 310.404669][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 310.435585][ T10] usb 4-1: USB disconnect, device number 30 [ 310.555542][ T43] usb 5-1: too many configurations: 185, using maximum allowed: 8 [ 310.557306][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.557342][ T43] usb 5-1: can't read configurations, error -61 [ 310.559380][ T43] usb usb5-port1: attempt power cycle [ 310.895394][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 310.919734][ T43] usb 5-1: too many configurations: 185, using maximum allowed: 8 [ 310.921485][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.921539][ T43] usb 5-1: can't read configurations, error -61 [ 311.054669][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 311.075920][ T43] usb 5-1: too many configurations: 185, using maximum allowed: 8 [ 311.078863][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 311.078901][ T43] usb 5-1: can't read configurations, error -61 [ 311.082093][ T43] usb usb5-port1: unable to enumerate USB device [ 311.591253][ T5621] Bluetooth: hci4: link tx timeout [ 311.596420][ T5621] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 315.175255][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 317.455502][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.455577][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.524654][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 318.793512][ T5728] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 318.806906][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 318.812590][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 318.812612][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.812627][ T9] usb 5-1: Product: syz [ 318.812638][ T9] usb 5-1: Manufacturer: syz [ 318.812655][ T9] usb 5-1: SerialNumber: syz [ 318.868665][ T9] usb 5-1: config 0 descriptor?? [ 318.950331][ T5728] usb 3-1: too many configurations: 185, using maximum allowed: 8 [ 318.956320][ T5728] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 318.956399][ T5728] usb 3-1: can't read configurations, error -61 [ 319.091484][ T9] usb read operation failed. (-32) [ 319.104855][ T5728] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 319.275852][ T5728] usb 3-1: too many configurations: 185, using maximum allowed: 8 [ 319.282912][ T5728] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 319.282952][ T5728] usb 3-1: can't read configurations, error -61 [ 319.283610][ T5728] usb usb3-port1: attempt power cycle [ 319.315522][ T9] usb write operation failed. (-71) [ 319.315921][ T9] usb write operation failed. (-71) [ 319.315940][ T9] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 319.346672][ T9] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 319.346701][ T9] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 319.686075][ T5728] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 319.710962][ T5728] usb 3-1: too many configurations: 185, using maximum allowed: 8 [ 319.712684][ T5728] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 319.712721][ T5728] usb 3-1: can't read configurations, error -61 [ 319.775566][ T7529] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 319.847853][ T5728] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 319.866335][ T5728] usb 3-1: too many configurations: 185, using maximum allowed: 8 [ 319.869493][ T5728] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 319.869543][ T5728] usb 3-1: can't read configurations, error -61 [ 319.869941][ T5728] usb usb3-port1: unable to enumerate USB device [ 320.102910][ T7532] bond3: (slave veth7): Enslaving as an active interface with a down link [ 320.268234][ T7529] bond2: (slave dummy0): Releasing active interface [ 320.516942][ T7529] bond3: (slave dummy0): making interface the new active one [ 320.517959][ T7529] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 323.624804][ T5616] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 323.786689][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 323.786759][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 323.786791][ T5616] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 323.786809][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.856196][ T5616] usb 3-1: config 0 descriptor?? [ 324.137946][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 324.709071][ T5616] ath6kl: Failed to submit usb control message: -71 [ 324.709108][ T5616] ath6kl: unable to send the bmi data to the device: -71 [ 324.709119][ T5616] ath6kl: Unable to send get target info: -71 [ 324.749440][ T5616] ath6kl: Failed to init ath6kl core: -71 [ 324.752223][ T5616] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 324.781563][ T5616] usb 3-1: USB disconnect, device number 45 [ 326.395842][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 326.547312][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.547341][ T43] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.581453][ T43] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 326.581475][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.581491][ T43] usb 1-1: Product: syz [ 326.581501][ T43] usb 1-1: Manufacturer: syz [ 326.581512][ T43] usb 1-1: SerialNumber: syz [ 326.642443][ T43] usb 1-1: config 0 descriptor?? [ 327.207576][ T5616] usb 1-1: USB disconnect, device number 27 [ 327.391124][ T7603] netlink: 'syz.4.587': attribute type 10 has an invalid length. [ 327.391142][ T7603] netlink: 156 bytes leftover after parsing attributes in process `syz.4.587'. [ 331.902093][ T5621] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 331.994597][ T5621] Bluetooth: hci4: Injecting HCI hardware error event [ 331.996563][ T5623] Bluetooth: hci4: hardware error 0x00 [ 332.424705][ T5616] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 332.567930][ T7636] netlink: 'syz.2.599': attribute type 10 has an invalid length. [ 332.567947][ T7636] netlink: 156 bytes leftover after parsing attributes in process `syz.2.599'. [ 332.589000][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 332.589100][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 332.589225][ T5616] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 332.589287][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.658927][ T5616] usb 4-1: config 0 descriptor?? [ 332.896899][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 333.054656][ T5727] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 333.209223][ T5727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.209255][ T5727] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.209296][ T5727] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 333.209324][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.285853][ T5727] usb 1-1: config 0 descriptor?? [ 333.415802][ T5616] ath6kl: Failed to submit usb control message: -71 [ 333.415846][ T5616] ath6kl: unable to send the bmi data to the device: -71 [ 333.415860][ T5616] ath6kl: Unable to send get target info: -71 [ 333.459807][ T5616] ath6kl: Failed to init ath6kl core: -71 [ 333.461263][ T5616] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 333.517461][ T5616] usb 4-1: USB disconnect, device number 31 [ 333.984630][ T5727] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 334.140310][ T5727] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.140342][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.140363][ T5727] usb 3-1: Product: syz [ 334.140383][ T5727] usb 3-1: Manufacturer: syz [ 334.140393][ T5727] usb 3-1: SerialNumber: syz [ 334.186079][ T5727] usb 3-1: config 0 descriptor?? [ 334.227511][ T5623] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 334.593489][ T5727] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.366676][ T10] usb 1-1: USB disconnect, device number 28 [ 336.681589][ T5727] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 336.736558][ T5727] usb 3-1: USB disconnect, device number 46 [ 341.138819][ T7714] syzkaller0: entered promiscuous mode [ 341.138846][ T7714] syzkaller0: entered allmulticast mode [ 345.365689][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 346.194654][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 346.388876][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.388907][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.297438][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 347.297472][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.297500][ T10] usb 3-1: Product: syz [ 347.297516][ T10] usb 3-1: Manufacturer: syz [ 347.297531][ T10] usb 3-1: SerialNumber: syz [ 347.378583][ T10] usb 3-1: config 0 descriptor?? [ 347.934126][ T820] usb 3-1: USB disconnect, device number 47 [ 348.887885][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.646'. [ 349.726733][ T5595] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 349.876449][ T5595] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.876471][ T5595] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 349.876492][ T5595] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.876526][ T5595] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 349.876545][ T5595] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 349.878826][ T5595] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.878847][ T5595] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.878862][ T5595] usb 1-1: Product: syz [ 349.878872][ T5595] usb 1-1: Manufacturer: syz [ 350.004689][ T5595] cdc_wdm 1-1:1.0: skipping garbage [ 350.004704][ T5595] cdc_wdm 1-1:1.0: skipping garbage [ 350.038544][ T5595] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 350.038684][ T5595] cdc_wdm 1-1:1.0: Unknown control protocol [ 350.818775][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 352.967473][ T5595] usb 1-1: USB disconnect, device number 29 [ 353.487667][ T5616] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 353.665855][ T5616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.665913][ T5616] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 353.674003][ T5616] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.674044][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.674067][ T5616] usb 3-1: Product: syz [ 353.674091][ T5616] usb 3-1: Manufacturer: syz [ 353.674106][ T5616] usb 3-1: SerialNumber: syz [ 353.730554][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.766058][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.768335][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.801066][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.810123][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.036216][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.065067][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.102553][ T5616] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 354.118012][ T5616] usb 3-1: USB disconnect, device number 48 [ 355.695758][ T5727] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 355.844618][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 355.852031][ T5727] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 355.852059][ T5727] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 355.852107][ T5727] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.852129][ T5727] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.852153][ T5727] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 355.852177][ T5727] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.852203][ T5727] usb 3-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.852247][ T5727] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.852272][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.138716][ T5623] Bluetooth: hci5: command tx timeout [ 356.288712][ T5727] usb 3-1: usb_control_msg returned -71 [ 356.288764][ T5727] usbtmc 3-1:16.0: can't read capabilities [ 356.341126][ T5727] usb 3-1: USB disconnect, device number 49 [ 357.597262][ T7803] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.598414][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.599385][ T7803] bridge_slave_0: entered allmulticast mode [ 357.603568][ T7803] bridge_slave_0: entered promiscuous mode [ 357.678748][ T7803] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.678851][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.679005][ T7803] bridge_slave_1: entered allmulticast mode [ 357.692188][ T7803] bridge_slave_1: entered promiscuous mode [ 357.903726][ T7803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.933645][ T7803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.105261][ T7803] team0: Port device team_slave_0 added [ 358.139036][ T7803] team0: Port device team_slave_1 added [ 358.217002][ T5623] Bluetooth: hci5: command tx timeout [ 358.673533][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.673552][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.673582][ T7803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.710003][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.710046][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.710135][ T7803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.070107][ T7803] hsr_slave_0: entered promiscuous mode [ 359.086001][ T7803] hsr_slave_1: entered promiscuous mode [ 359.092114][ T7803] debugfs: 'hsr0' already exists in 'hsr' [ 359.092142][ T7803] Cannot create hsr debugfs directory [ 359.334747][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 359.499120][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.499176][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.499220][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 359.499244][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.519270][ T10] usb 3-1: config 0 descriptor?? [ 359.620006][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 359.897024][ T7803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 360.044946][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.046490][ T7803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.202893][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.212447][ T7803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.286680][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.287712][ T7803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.294624][ T5623] Bluetooth: hci5: command tx timeout [ 360.384920][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.464753][ T820] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 360.605791][ T7803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.657215][ T7803] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.728077][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.729888][ T3293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.751951][ T820] usb 1-1: Using ep0 maxpacket: 16 [ 360.754027][ T820] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 360.754057][ T820] usb 1-1: config 0 has no interface number 0 [ 360.754110][ T820] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 360.754143][ T820] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 361.768678][ T820] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 361.768714][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.768730][ T820] usb 1-1: Product: syz [ 361.768740][ T820] usb 1-1: Manufacturer: syz [ 361.768752][ T820] usb 1-1: SerialNumber: syz [ 361.810028][ T820] usb 1-1: config 0 descriptor?? [ 361.811867][ T7876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 361.812024][ T7876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 361.978217][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.983289][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.021428][ T7876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.021574][ T7876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.163485][ T5616] usb 3-1: USB disconnect, device number 50 [ 362.225990][ T820] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 362.384757][ T5623] Bluetooth: hci5: command tx timeout [ 362.432607][ T820] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 362.432641][ T820] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 362.432923][ T820] asix 1-1:0.34: probe with driver asix failed with error -32 [ 363.336477][ T7803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.488889][ T6207] usb 1-1: USB disconnect, device number 30 [ 364.360112][ T7803] veth0_vlan: entered promiscuous mode [ 364.406133][ T7803] veth1_vlan: entered promiscuous mode [ 364.514234][ T7803] veth0_macvtap: entered promiscuous mode [ 364.529156][ T7803] veth1_macvtap: entered promiscuous mode [ 364.629344][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.662074][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.810219][ T1028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.810272][ T1028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.810305][ T1028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.810332][ T1028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.947468][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.947489][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.330102][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.330125][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.904614][ T6207] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 371.960367][ T7983] netlink: zone id is out of range [ 371.960485][ T7983] netlink: zone id is out of range [ 371.960495][ T7983] netlink: zone id is out of range [ 371.960504][ T7983] netlink: del zone limit has 8 unknown bytes [ 372.064743][ T6207] usb 1-1: Using ep0 maxpacket: 32 [ 372.068852][ T6207] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 372.068881][ T6207] usb 1-1: config 0 has no interface number 0 [ 372.068969][ T6207] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 372.068999][ T6207] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 372.069024][ T6207] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 372.069052][ T6207] usb 1-1: config 0 interface 196 has no altsetting 0 [ 372.102851][ T6207] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 372.102887][ T6207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.102910][ T6207] usb 1-1: Product: syz [ 372.102927][ T6207] usb 1-1: Manufacturer: syz [ 372.102942][ T6207] usb 1-1: SerialNumber: syz [ 372.173512][ T6207] usb 1-1: config 0 descriptor?? [ 372.180549][ T7977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.254598][ T5728] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 372.406973][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 372.423770][ T5728] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 372.423801][ T5728] usb 3-1: config 0 has no interface number 0 [ 372.423913][ T5728] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.423940][ T5728] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.423968][ T5728] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 372.423998][ T5728] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 372.424027][ T5728] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.516251][ T5728] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 372.516283][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.516303][ T5728] usb 3-1: Product: syz [ 372.516318][ T5728] usb 3-1: Manufacturer: syz [ 372.516334][ T5728] usb 3-1: SerialNumber: syz [ 372.543719][ T5728] usb 3-1: config 0 descriptor?? [ 372.594215][ T6207] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 2 bytes [ 372.594687][ T6207] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 372.845528][ T5728] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 373.129607][ T7981] netlink: 312 bytes leftover after parsing attributes in process `syz.2.710'. [ 373.129645][ T7981] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 373.699418][ T5727] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 373.926010][ T5727] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 374.812946][ T6207] usb 1-1: USB disconnect, device number 31 [ 374.958927][ C1] iowarrior 3-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 375.004442][ T5727] usb 3-1: USB disconnect, device number 51 [ 375.625535][ T5727] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 375.759862][ T8019] program syz.0.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.760285][ T8019] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 375.782659][ T5727] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.782715][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.782761][ T5727] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 375.782788][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.820605][ T5727] usb 3-1: config 0 descriptor?? [ 375.893661][ T5727] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 378.404859][ T6207] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 378.565953][ T6207] usb 6-1: Using ep0 maxpacket: 32 [ 378.568865][ T6207] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 378.568891][ T6207] usb 6-1: config 0 has no interface number 0 [ 378.568957][ T6207] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 378.568976][ T6207] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 378.568993][ T6207] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 378.569011][ T6207] usb 6-1: config 0 interface 196 has no altsetting 0 [ 378.571562][ T6207] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 378.571590][ T6207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.571610][ T6207] usb 6-1: Product: syz [ 378.571721][ T6207] usb 6-1: Manufacturer: syz [ 378.571740][ T6207] usb 6-1: SerialNumber: syz [ 378.670707][ T6207] usb 6-1: config 0 descriptor?? [ 378.670718][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.670789][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.687223][ T8041] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 379.160290][ T5616] usb 3-1: USB disconnect, device number 52 [ 379.427390][ T6207] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 379.427699][ T6207] ipheth 6-1:0.196: probe with driver ipheth failed with error -110 [ 381.647720][ T5728] usb 6-1: USB disconnect, device number 2 [ 383.867978][ T8098] netlink: 'syz.4.749': attribute type 10 has an invalid length. [ 383.868005][ T8098] netlink: 156 bytes leftover after parsing attributes in process `syz.4.749'. [ 383.916307][ T9] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 383.916430][ T9] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 384.154670][ T9] usb 5-1: USB disconnect, device number 26 [ 387.678610][ T8146] netlink: 'syz.5.763': attribute type 10 has an invalid length. [ 387.678628][ T8146] netlink: 156 bytes leftover after parsing attributes in process `syz.5.763'. [ 389.896419][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 390.049383][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.049421][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.049448][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 390.049465][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.126245][ T10] usb 1-1: config 0 descriptor?? [ 390.608206][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 390.608590][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 391.153100][ T10] usb 1-1: USB disconnect, device number 32 [ 393.993246][ T8188] netlink: 'syz.5.777': attribute type 10 has an invalid length. [ 393.993266][ T8188] netlink: 156 bytes leftover after parsing attributes in process `syz.5.777'. [ 399.460306][ T8234] netlink: 'syz.2.792': attribute type 10 has an invalid length. [ 399.460325][ T8234] netlink: 156 bytes leftover after parsing attributes in process `syz.2.792'. [ 404.621256][ T8282] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 405.087090][ T8285] dummy0: left promiscuous mode [ 407.384568][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 407.534606][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 407.542851][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.542906][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 407.542924][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.629163][ T10] usb 1-1: config 0 descriptor?? [ 407.676232][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 409.256658][ T10] gspca_vc032x: reg_w err -71 [ 409.256726][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 409.321899][ T10] usb 1-1: USB disconnect, device number 33 [ 410.674959][ T5623] Bluetooth: hci5: link tx timeout [ 410.675220][ T5623] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 412.339220][ T5727] IPVS: starting estimator thread 0... [ 412.446187][ T8330] IPVS: using max 8 ests per chain, 19200 per kthread [ 412.781818][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 413.685281][ T8344] fuse: Unknown parameter 'user_id00000000000000000000' [ 414.292987][ T8340] syz.5.826 (8340) used greatest stack depth: 18912 bytes left [ 415.334680][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 415.507973][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 415.517517][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.517647][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 415.517720][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 415.517783][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 415.583325][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 415.583356][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.583371][ T10] usb 5-1: Product: syz [ 415.583382][ T10] usb 5-1: Manufacturer: syz [ 415.583394][ T10] usb 5-1: SerialNumber: syz [ 415.637663][ T10] usb 5-1: config 0 descriptor?? [ 415.639538][ T8367] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.730957][ C0] usb 5-1: NFC: Urb failure (status -71) [ 415.760445][ T10] usb 5-1: NFC: Unable to get FW version [ 415.785485][ T10] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 416.350276][ T8385] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 416.393999][ T8383] netlink: 'syz.5.838': attribute type 10 has an invalid length. [ 416.394029][ T8383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.838'. [ 416.419150][ T8383] dummy0: entered promiscuous mode [ 416.457051][ T8383] bond1: (slave dummy0): Releasing backup interface [ 417.884875][ T8397] fuse: Unknown parameter 'user_id00000000000000000000' [ 418.084697][ T10] usb 5-1: USB disconnect, device number 27 [ 420.254585][ T820] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 422.775660][ T820] usb 1-1: Using ep0 maxpacket: 8 [ 422.778181][ T820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.778237][ T820] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 422.778271][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.827146][ T820] usb 1-1: config 0 descriptor?? [ 422.843979][ T820] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 422.844192][ T43] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 423.021944][ T43] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 423.022499][ T43] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 423.022516][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 423.022957][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 423.022989][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 423.060834][ T43] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 423.060858][ T43] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 423.060872][ T43] usb 3-1: Product: syz [ 423.060901][ T43] usb 3-1: Manufacturer: syz [ 423.158580][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 423.158602][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 423.210428][ T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 423.210581][ T43] cdc_wdm 3-1:1.0: Unknown control protocol [ 423.265561][ T820] gspca_vc032x: reg_r err -71 [ 423.265654][ T820] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 423.298768][ T820] usb 1-1: USB disconnect, device number 34 [ 423.369406][ T10] usb 3-1: USB disconnect, device number 53 [ 428.426353][ T8451] fuse: Bad value for 'fd' [ 430.207862][ T6207] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 430.364670][ T6207] usb 5-1: Using ep0 maxpacket: 16 [ 430.367238][ T6207] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 430.367264][ T6207] usb 5-1: config 0 has no interface number 0 [ 430.367310][ T6207] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 430.367341][ T6207] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 430.370740][ T6207] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 430.370771][ T6207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.370793][ T6207] usb 5-1: Product: syz [ 430.370814][ T6207] usb 5-1: Manufacturer: syz [ 430.370824][ T6207] usb 5-1: SerialNumber: syz [ 430.382059][ T6207] usb 5-1: config 0 descriptor?? [ 430.414663][ T8466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.414801][ T8466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.594596][ T5728] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 430.643754][ T8466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.644388][ T8466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 430.753712][ T5728] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.753748][ T5728] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 430.753772][ T5728] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.753833][ T5728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 430.753865][ T5728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 430.775135][ T5728] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.775172][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.775196][ T5728] usb 3-1: Product: syz [ 430.775214][ T5728] usb 3-1: Manufacturer: syz [ 430.855015][ T5728] cdc_wdm 3-1:1.0: skipping garbage [ 430.855037][ T5728] cdc_wdm 3-1:1.0: skipping garbage [ 430.875514][ T5728] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 430.875537][ T5728] cdc_wdm 3-1:1.0: Unknown control protocol [ 430.885864][ T6207] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 431.086850][ T8466] netlink: 9 bytes leftover after parsing attributes in process `syz.4.864'. [ 431.151017][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.864'. [ 431.169165][ T8466] netlink: 9 bytes leftover after parsing attributes in process `syz.4.864'. [ 432.419064][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 432.434653][ T5728] usb 3-1: USB disconnect, device number 54 [ 432.793744][ T8501] dummy0: left promiscuous mode [ 432.834775][ T8501] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 432.838314][ T8501] netlink: 'syz.5.876': attribute type 10 has an invalid length. [ 432.838337][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.5.876'. [ 432.838507][ T8501] dummy0: entered promiscuous mode [ 432.906513][ T8501] bond2: (slave dummy0): Releasing backup interface [ 433.572758][ T6207] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 433.572781][ T6207] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 433.573053][ T6207] asix 5-1:0.34: probe with driver asix failed with error -71 [ 433.574592][ T5728] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 433.624361][ T6207] usb 5-1: USB disconnect, device number 28 [ 433.724708][ T5728] usb 3-1: Using ep0 maxpacket: 16 [ 433.727481][ T5728] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 433.727508][ T5728] usb 3-1: config 0 has no interface number 0 [ 433.727557][ T5728] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 433.727586][ T5728] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 433.732534][ T5728] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 433.732554][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.732567][ T5728] usb 3-1: Product: syz [ 433.732577][ T5728] usb 3-1: Manufacturer: syz [ 433.732587][ T5728] usb 3-1: SerialNumber: syz [ 433.784090][ T5728] usb 3-1: config 0 descriptor?? [ 433.801184][ T8509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 433.830273][ T8509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 434.061984][ T8509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 434.062199][ T8509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 434.263500][ T5728] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 435.686709][ T5728] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 435.686734][ T5728] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 435.686928][ T5728] asix 3-1:0.34: probe with driver asix failed with error -71 [ 435.731736][ T5728] usb 3-1: USB disconnect, device number 55 [ 439.715126][ T5728] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 440.784961][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.785026][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.862487][ T8579] overlayfs: overlapping lowerdir path [ 440.875551][ T5728] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 440.875581][ T5728] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 440.875603][ T5728] usb 1-1: config 0 has no interface number 0 [ 440.875651][ T5728] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 440.875682][ T5728] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.875720][ T5728] usb 1-1: config 0 interface 52 has no altsetting 0 [ 440.877889][ T5728] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 440.877919][ T5728] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 440.877942][ T5728] usb 1-1: Manufacturer: syz [ 440.978106][ T5728] usb 1-1: config 0 descriptor?? [ 440.983896][ T5728] hub 1-1:0.52: bad descriptor, ignoring hub [ 440.983937][ T5728] hub 1-1:0.52: probe with driver hub failed with error -5 [ 441.369841][ T5728] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input11 [ 442.199987][ T5595] usb 1-1: USB disconnect, device number 35 [ 442.534576][ T5741] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 442.544429][ T1503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.689981][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 442.692578][ T5741] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 442.692605][ T5741] usb 3-1: config 0 has no interface number 0 [ 442.692671][ T5741] usb 3-1: config 0 interface 66 has no altsetting 0 [ 442.752909][ T5741] usb 3-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 442.752942][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.752965][ T5741] usb 3-1: Product: syz [ 442.752981][ T5741] usb 3-1: Manufacturer: syz [ 442.752997][ T5741] usb 3-1: SerialNumber: syz [ 442.880231][ T5741] usb 3-1: config 0 descriptor?? [ 443.928454][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 444.094762][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 444.125611][ T9] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 444.125632][ T9] usb 1-1: config 0 has no interface number 0 [ 444.125655][ T9] usb 1-1: config 0 interface 66 has no altsetting 0 [ 444.134087][ T9] usb 1-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 444.134108][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.134123][ T9] usb 1-1: Product: syz [ 444.134133][ T9] usb 1-1: Manufacturer: syz [ 444.134144][ T9] usb 1-1: SerialNumber: syz [ 444.200795][ T9] usb 1-1: config 0 descriptor?? [ 444.326409][ T1503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.054084][ T9] usb 1-1: selecting invalid altsetting 3 [ 446.054147][ T9] comedi comedi6: could not set alternate setting 3 in high speed [ 446.054217][ T9] usbduxsigma 1-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 446.153680][ T5741] usb 3-1: selecting invalid altsetting 3 [ 446.153706][ T5741] comedi comedi5: could not set alternate setting 3 in high speed [ 446.153736][ T5741] usbduxsigma 3-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 446.338744][ T9] usbduxsigma 1-1:0.66: probe with driver usbduxsigma failed with error -22 [ 446.350457][ T9] usb 1-1: USB disconnect, device number 36 [ 446.427512][ T5741] usbduxsigma 3-1:0.66: probe with driver usbduxsigma failed with error -22 [ 446.434360][ T5741] usb 3-1: USB disconnect, device number 56 [ 446.719712][ T1503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.184659][ T5741] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 448.316854][ T8622] overlayfs: overlapping lowerdir path [ 448.370059][ T5741] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 448.370093][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.370115][ T5741] usb 6-1: Product: syz [ 448.370132][ T5741] usb 6-1: Manufacturer: syz [ 448.370148][ T5741] usb 6-1: SerialNumber: syz [ 448.445886][ T5741] usb 6-1: config 0 descriptor?? [ 448.683997][ T5741] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 448.970469][ T1503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.702433][ T5741] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 450.185048][ T5595] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 450.971053][ T5616] usb 6-1: USB disconnect, device number 3 [ 451.144539][ T5595] usb 1-1: Using ep0 maxpacket: 8 [ 451.148744][ T5595] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 451.148772][ T5595] usb 1-1: config 0 has no interface number 0 [ 451.148837][ T5595] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 451.148862][ T5595] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 451.148904][ T5595] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 451.148932][ T5595] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 451.148961][ T5595] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.229911][ T5595] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 451.229982][ T5595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.230040][ T5595] usb 1-1: Product: syz [ 451.230093][ T5595] usb 1-1: Manufacturer: syz [ 451.230164][ T5595] usb 1-1: SerialNumber: syz [ 451.330990][ T5595] usb 1-1: config 0 descriptor?? [ 451.633912][ T5595] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 451.856039][ T8639] netlink: 312 bytes leftover after parsing attributes in process `syz.0.922'. [ 451.856067][ T8639] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 452.568039][ T1503] bridge_slave_1: left allmulticast mode [ 452.568262][ T1503] bridge_slave_1: left promiscuous mode [ 452.651820][ T1503] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.087074][ T8642] syz.0.922 (8642) used greatest stack depth: 17912 bytes left [ 454.286138][ T1503] bridge_slave_0: left allmulticast mode [ 454.286601][ T1503] bridge_slave_0: left promiscuous mode [ 454.410902][ T1503] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.516987][ T5728] usb 1-1: USB disconnect, device number 37 [ 455.223972][ T5728] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 455.764951][ T5728] usb 6-1: Using ep0 maxpacket: 16 [ 455.766868][ T5728] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 455.766895][ T5728] usb 6-1: config 0 has no interface number 0 [ 455.766926][ T5728] usb 6-1: config 0 interface 66 has no altsetting 0 [ 455.770427][ T5728] usb 6-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 455.770464][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.770484][ T5728] usb 6-1: Product: syz [ 455.770515][ T5728] usb 6-1: Manufacturer: syz [ 455.770525][ T5728] usb 6-1: SerialNumber: syz [ 455.880863][ T5728] usb 6-1: config 0 descriptor?? [ 456.838330][ T5728] usb 6-1: selecting invalid altsetting 3 [ 456.838352][ T5728] comedi comedi5: could not set alternate setting 3 in high speed [ 456.838366][ T5728] usbduxsigma 6-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 456.981319][ T5728] usbduxsigma 6-1:0.66: probe with driver usbduxsigma failed with error -22 [ 457.035239][ T5728] usb 6-1: USB disconnect, device number 4 [ 458.733771][ T8730] fuse: Unknown parameter 'fd0x0000000000000005' [ 458.901597][ T8735] fuse: Bad value for 'group_id' [ 458.901618][ T8735] fuse: Bad value for 'group_id' [ 459.284625][ T5728] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 459.434701][ T5728] usb 5-1: Using ep0 maxpacket: 8 [ 459.442071][ T5728] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 459.442092][ T5728] usb 5-1: config 0 has no interface number 0 [ 459.442139][ T5728] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.442157][ T5728] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 459.442174][ T5728] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 459.442193][ T5728] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 459.442213][ T5728] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.503602][ T5728] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 459.503635][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.503657][ T5728] usb 5-1: Product: syz [ 459.503673][ T5728] usb 5-1: Manufacturer: syz [ 459.503688][ T5728] usb 5-1: SerialNumber: syz [ 459.572208][ T5728] usb 5-1: config 0 descriptor?? [ 459.832183][ T5728] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 460.127031][ T8739] netlink: 312 bytes leftover after parsing attributes in process `syz.4.949'. [ 460.127607][ T8739] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 460.278826][ C1] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 460.289379][ T5741] usb 5-1: USB disconnect, device number 29 [ 462.105888][ T1503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.177001][ T1503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.204218][ T1503] bond0 (unregistering): Released all slaves [ 462.245488][ T1503] bond1 (unregistering): (slave veth3): Releasing active interface [ 462.336527][ T1503] bond1 (unregistering): Released all slaves [ 462.385607][ T1503] bond2 (unregistering): (slave veth5): Releasing active interface [ 462.468123][ T1503] bond2 (unregistering): Released all slaves [ 462.513899][ T1503] bond3 (unregistering): (slave veth7): Releasing active interface [ 462.616912][ T1503] bond3 (unregistering): (slave dummy0): Releasing active interface [ 462.642830][ T1503] bond3 (unregistering): Released all slaves [ 463.952083][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 464.996488][ T8784] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 464.996508][ T8784] netlink: 156 bytes leftover after parsing attributes in process `syz.2.962'. [ 465.530900][ T1503] rxrpc: Call ffff888038724ec0 still in use (1,Complete,1409,0)! [ 466.055498][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 469.124550][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 469.248130][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 469.307543][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 469.361434][ T9] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 469.361457][ T9] usb 1-1: config 0 has no interface number 0 [ 469.361487][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.361504][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 469.361521][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 469.361540][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 469.361560][ T9] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.450040][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 469.450063][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.450077][ T9] usb 1-1: Product: syz [ 469.450087][ T9] usb 1-1: Manufacturer: syz [ 469.450098][ T9] usb 1-1: SerialNumber: syz [ 469.507436][ T9] usb 1-1: config 0 descriptor?? [ 469.841823][ T9] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 470.570670][ T8825] netlink: 312 bytes leftover after parsing attributes in process `syz.0.969'. [ 470.570690][ T8825] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 472.442203][ T6207] usb 1-1: USB disconnect, device number 38 [ 472.474642][ T5595] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 472.658378][ T5595] usb 5-1: Using ep0 maxpacket: 8 [ 473.066463][ T5595] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.066522][ T5595] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 473.066549][ T5595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.111681][ T5595] usb 5-1: config 0 descriptor?? [ 473.125996][ T5595] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 474.172151][ T5595] gspca_vc032x: reg_r err -32 [ 474.172268][ T5595] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 474.204668][ T5595] usb 5-1: USB disconnect, device number 30 [ 474.206237][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 477.084808][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 477.237281][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.237330][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.237390][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 477.237416][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.309107][ T43] usb 3-1: config 0 descriptor?? [ 477.637762][ T5595] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 478.818571][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 479.938378][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 479.938418][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 479.938447][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 479.938476][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 479.938505][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 479.938532][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 479.938560][ T43] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 480.024933][ T5595] usb 6-1: Using ep0 maxpacket: 16 [ 480.042689][ T5595] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 480.042716][ T5595] usb 6-1: config 0 has no interface number 0 [ 480.042758][ T5595] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 480.042783][ T5595] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 480.100844][ T5595] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 480.100877][ T5595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.100898][ T5595] usb 6-1: Product: syz [ 480.100913][ T5595] usb 6-1: Manufacturer: syz [ 480.100928][ T5595] usb 6-1: SerialNumber: syz [ 480.185286][ T43] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 480.189748][ T5595] usb 6-1: config 0 descriptor?? [ 480.191285][ T8911] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.191422][ T8911] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.268314][ T43] cp2112 0003:10C4:EA90.000F: error requesting version [ 480.369791][ T43] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -32 [ 480.558431][ T5595] asix 6-1:0.34: probe with driver asix failed with error -71 [ 480.612294][ T5595] usb 6-1: USB disconnect, device number 5 [ 481.745782][ T5595] usb 3-1: USB disconnect, device number 57 [ 483.675141][ T6207] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 484.617528][ T6207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.617570][ T6207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.617611][ T6207] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 484.617638][ T6207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.714123][ T6207] usb 1-1: config 0 descriptor?? [ 485.155531][ T6207] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 485.155573][ T6207] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 485.155603][ T6207] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 485.155631][ T6207] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 485.155660][ T6207] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 485.155688][ T6207] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 485.155717][ T6207] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 485.229241][ T6207] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 485.340685][ T6207] cp2112 0003:10C4:EA90.0010: error requesting version [ 485.390330][ T6207] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71 [ 485.436967][ T6207] usb 1-1: USB disconnect, device number 39 [ 489.104607][ T5727] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 489.205777][ T6207] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 491.704559][ T6207] usb 6-1: Using ep0 maxpacket: 16 [ 491.731463][ T6207] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 491.731493][ T6207] usb 6-1: config 0 has no interface number 0 [ 491.731539][ T6207] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 491.731565][ T6207] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 491.776471][ T6207] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 491.776505][ T6207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.776527][ T6207] usb 6-1: Product: syz [ 491.776544][ T6207] usb 6-1: Manufacturer: syz [ 491.776558][ T6207] usb 6-1: SerialNumber: syz [ 491.826113][ T6207] usb 6-1: config 0 descriptor?? [ 491.832852][ T9013] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 491.845547][ T9013] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 492.236327][ T5727] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 492.236357][ T5727] usb 3-1: can't read configurations, error -71 [ 492.242382][ T6207] asix 6-1:0.34: probe with driver asix failed with error -71 [ 492.320542][ T6207] usb 6-1: USB disconnect, device number 6 [ 492.517847][ T9029] loop8: detected capacity change from 0 to 7 [ 493.863277][ T9029] Dev loop8: unable to read RDB block 7 [ 493.863339][ T9029] loop8: unable to read partition table [ 493.863595][ T9029] loop8: partition table beyond EOD, truncated [ 493.863650][ T9029] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 494.684618][ T5728] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 495.971901][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.971939][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.971982][ T5728] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 495.972008][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.072934][ T5728] usb 1-1: config 0 descriptor?? [ 496.649372][ T5728] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 496.649410][ T5728] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 496.649452][ T5728] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 496.649480][ T5728] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 496.649508][ T5728] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 496.649535][ T5728] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 496.649563][ T5728] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 496.738624][ T5728] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 496.795079][ T5728] cp2112 0003:10C4:EA90.0011: error requesting version [ 496.857683][ T5728] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 496.942510][ T5728] usb 1-1: USB disconnect, device number 40 [ 497.161896][ T9062] fido_id[9062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 498.014712][ T5728] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 498.168766][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 498.171511][ T5728] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 498.171539][ T5728] usb 1-1: config 0 has no interface number 0 [ 498.171588][ T5728] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 498.171617][ T5728] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 498.226262][ T5728] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 498.226296][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.226318][ T5728] usb 1-1: Product: syz [ 498.226335][ T5728] usb 1-1: Manufacturer: syz [ 498.226351][ T5728] usb 1-1: SerialNumber: syz [ 498.269842][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1037'. [ 498.294111][ T5728] usb 1-1: config 0 descriptor?? [ 498.295794][ T9072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.296014][ T9072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.519128][ T9072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.520256][ T9072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.724175][ T5728] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 498.924144][ T9090] fuse: Bad value for 'fd' [ 499.141037][ T5728] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 499.141325][ T5728] asix 1-1:0.34: probe with driver asix failed with error -32 [ 500.175481][ T6207] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 500.335889][ T6207] usb 6-1: Using ep0 maxpacket: 16 [ 500.344273][ T6207] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 500.344302][ T6207] usb 6-1: config 0 has no interface number 0 [ 500.344334][ T6207] usb 6-1: config 0 interface 66 has no altsetting 0 [ 500.393012][ T6207] usb 6-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 500.393036][ T6207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.393051][ T6207] usb 6-1: Product: syz [ 500.393061][ T6207] usb 6-1: Manufacturer: syz [ 500.393071][ T6207] usb 6-1: SerialNumber: syz [ 500.438923][ T6207] usb 6-1: config 0 descriptor?? [ 500.714818][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 500.891912][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.891975][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.912146][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 500.912239][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.912264][ T10] usb 5-1: Product: syz [ 500.912281][ T10] usb 5-1: Manufacturer: syz [ 500.912296][ T10] usb 5-1: SerialNumber: syz [ 500.997746][ T10] usb 5-1: config 0 descriptor?? [ 501.613716][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.623713][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.698551][ T6207] usb 6-1: selecting invalid altsetting 3 [ 501.698570][ T6207] comedi comedi5: could not set alternate setting 3 in high speed [ 501.698582][ T6207] usbduxsigma 6-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 501.700961][ T10] usb 1-1: USB disconnect, device number 41 [ 501.843684][ T6207] usbduxsigma 6-1:0.66: probe with driver usbduxsigma failed with error -22 [ 501.902533][ T6207] usb 6-1: USB disconnect, device number 7 [ 502.356540][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1050'. [ 502.531581][ T5728] usb 5-1: USB disconnect, device number 31 [ 502.695052][ T6207] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 503.321722][ T6207] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 503.321753][ T6207] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 503.321774][ T6207] usb 3-1: config 0 has no interface number 0 [ 503.321822][ T6207] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 503.321860][ T6207] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.321891][ T6207] usb 3-1: config 0 interface 52 has no altsetting 0 [ 503.440940][ T6207] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 503.440971][ T6207] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 503.440999][ T6207] usb 3-1: Manufacturer: syz [ 503.481672][ T6207] usb 3-1: config 0 descriptor?? [ 503.540107][ T6207] hub 3-1:0.52: bad descriptor, ignoring hub [ 503.540135][ T6207] hub 3-1:0.52: probe with driver hub failed with error -5 [ 503.866042][ T6207] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input12 [ 504.627158][ T5728] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 504.634052][ T5728] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 504.968834][ T5728] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 505.134577][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 505.137402][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.137459][ T5728] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 505.137486][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.183705][ T5728] usb 1-1: config 0 descriptor?? [ 505.210215][ T5728] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 505.635070][ T6207] usb 3-1: USB disconnect, device number 60 [ 505.744717][ T5741] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 505.832821][ T5728] gspca_vc032x: reg_r err -32 [ 505.832916][ T5728] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 505.954575][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 505.959718][ T5741] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 505.959748][ T5741] usb 5-1: config 0 has no interface number 0 [ 505.959796][ T5741] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 505.959824][ T5741] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 505.963931][ T5741] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 505.963962][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.963984][ T5741] usb 5-1: Product: syz [ 505.963999][ T5741] usb 5-1: Manufacturer: syz [ 505.964014][ T5741] usb 5-1: SerialNumber: syz [ 506.045667][ T5741] usb 5-1: config 0 descriptor?? [ 506.046488][ T9178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 506.046606][ T9178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 506.118747][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 506.253794][ T9178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 506.262770][ T9178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 506.464100][ T5741] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 506.872664][ T5741] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 506.872956][ T5741] asix 5-1:0.34: probe with driver asix failed with error -32 [ 507.404104][ T9192] syz.2.1064 (9192) used greatest stack depth: 17064 bytes left [ 507.724107][ T5728] usb 1-1: USB disconnect, device number 42 [ 510.126007][ T5727] usb 5-1: USB disconnect, device number 32 [ 510.885291][ T5616] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 511.764950][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 511.766796][ T5616] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 511.766815][ T5616] usb 5-1: config 0 has no interface number 0 [ 511.766836][ T5616] usb 5-1: config 0 interface 66 has no altsetting 0 [ 511.768879][ T5616] usb 5-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 511.768897][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.768911][ T5616] usb 5-1: Product: syz [ 511.768921][ T5616] usb 5-1: Manufacturer: syz [ 511.768931][ T5616] usb 5-1: SerialNumber: syz [ 511.842959][ T5616] usb 5-1: config 0 descriptor?? [ 513.138428][ T5616] usb 5-1: selecting invalid altsetting 3 [ 513.138454][ T5616] comedi comedi5: could not set alternate setting 3 in high speed [ 513.138473][ T5616] usbduxsigma 5-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 513.211226][ T5616] usbduxsigma 5-1:0.66: probe with driver usbduxsigma failed with error -22 [ 513.242959][ T5616] usb 5-1: USB disconnect, device number 33 [ 517.364867][ T5616] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 517.524677][ T5616] usb 6-1: Using ep0 maxpacket: 16 [ 517.527313][ T5616] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 517.527341][ T5616] usb 6-1: config 0 has no interface number 0 [ 517.527389][ T5616] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 517.527418][ T5616] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 517.530809][ T5616] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 517.530840][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.530863][ T5616] usb 6-1: Product: syz [ 517.530878][ T5616] usb 6-1: Manufacturer: syz [ 517.530893][ T5616] usb 6-1: SerialNumber: syz [ 517.637374][ T5616] usb 6-1: config 0 descriptor?? [ 517.670369][ T9269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 517.670571][ T9269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 517.894002][ T9269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 517.894145][ T9269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.114699][ T5616] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 518.320484][ T9269] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1088'. [ 518.405912][ T9269] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1088'. [ 518.510307][ T9274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1088'. [ 521.046799][ T5616] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 521.046834][ T5616] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 521.047112][ T5616] asix 6-1:0.34: probe with driver asix failed with error -71 [ 521.108361][ T5616] usb 6-1: USB disconnect, device number 8 [ 524.191865][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 524.974585][ T5741] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 525.297299][ T5741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.297337][ T5741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.297381][ T5741] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 525.297407][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.309646][ T5741] usb 1-1: config 0 descriptor?? [ 525.769883][ T5741] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 525.769923][ T5741] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 525.769952][ T5741] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 525.769981][ T5741] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 525.770018][ T5741] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 525.770047][ T5741] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 525.770076][ T5741] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 525.837799][ T5741] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 526.534999][ T5741] cp2112 0003:10C4:EA90.0013: error requesting version [ 526.575310][ T5741] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -32 [ 528.611658][ T5741] usb 1-1: USB disconnect, device number 43 [ 530.038885][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1112'. [ 533.820210][ T9390] blktrace: Concurrent blktraces are not allowed on loop0 [ 536.834961][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 541.624754][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 541.774970][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 541.776842][ T10] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 541.776862][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.776876][ T10] usb 6-1: config 0 has no interface number 0 [ 541.824130][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 541.824154][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.824169][ T10] usb 6-1: Product: syz [ 541.824180][ T10] usb 6-1: Manufacturer: syz [ 541.824190][ T10] usb 6-1: SerialNumber: syz [ 541.866818][ T10] usb 6-1: config 0 descriptor?? [ 541.890292][ T10] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 542.156992][ T31] usb 6-1: USB disconnect, device number 9 [ 543.732058][ T5623] Bluetooth: hci5: link tx timeout [ 543.732081][ T5623] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 544.064280][ T9468] blktrace: Concurrent blktraces are not allowed on loop0 [ 545.342610][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 545.507007][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 545.656180][ T5741] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 545.766170][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 545.806753][ T5741] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 545.806775][ T5741] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 545.806789][ T5741] usb 6-1: config 0 has no interface number 0 [ 545.806821][ T5741] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 545.806842][ T5741] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.806862][ T5741] usb 6-1: config 0 interface 52 has no altsetting 0 [ 545.807992][ T5741] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 545.808020][ T5741] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 545.808045][ T5741] usb 6-1: Manufacturer: syz [ 545.858543][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 545.907480][ T5741] usb 6-1: config 0 descriptor?? [ 545.962640][ T5741] hub 6-1:0.52: bad descriptor, ignoring hub [ 545.962667][ T5741] hub 6-1:0.52: probe with driver hub failed with error -5 [ 546.078015][ T9490] netlink: 436 bytes leftover after parsing attributes in process `syz.2.1162'. [ 546.078093][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1162'. [ 546.393782][ T5741] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input13 [ 547.425223][ T31] usb 6-1: USB disconnect, device number 10 [ 547.522354][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.522441][ T10] usb 1-1: no configurations [ 547.522455][ T10] usb 1-1: can't read configurations, error -22 [ 548.017037][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'. [ 552.595859][ T9541] netlink: del zone limit has 4 unknown bytes [ 552.844553][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 552.914614][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 552.951486][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 552.995828][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 552.998485][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 552.998513][ T9] usb 5-1: config 0 has no interface number 0 [ 552.998557][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.998587][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 552.998610][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 552.998630][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 552.998650][ T9] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.021851][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 553.021925][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.021984][ T9] usb 5-1: Product: syz [ 553.022025][ T9] usb 5-1: Manufacturer: syz [ 553.022066][ T9] usb 5-1: SerialNumber: syz [ 553.155899][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'. [ 553.160319][ T9] usb 5-1: config 0 descriptor?? [ 553.432204][ T9] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 553.607599][ T9539] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1179'. [ 553.607628][ T9539] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 553.794632][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 554.193382][ T6207] usb 5-1: USB disconnect, device number 34 [ 554.703958][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 554.704308][ T10] usb 3-1: no configurations [ 554.704324][ T10] usb 3-1: can't read configurations, error -22 [ 555.579871][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.579945][ T9] usb 1-1: no configurations [ 555.579955][ T9] usb 1-1: can't read configurations, error -22 [ 555.978068][ T9588] overlayfs: failed to resolve './file1/file0': -2 [ 558.055723][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 559.840930][ T9615] netlink: del zone limit has 4 unknown bytes [ 560.114641][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 560.291460][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 560.293794][ T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 560.293822][ T10] usb 3-1: config 0 has no interface number 0 [ 560.293869][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.293895][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 560.293921][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 560.293949][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 560.293978][ T10] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.401820][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 560.401850][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.401870][ T10] usb 3-1: Product: syz [ 560.401885][ T10] usb 3-1: Manufacturer: syz [ 560.401901][ T10] usb 3-1: SerialNumber: syz [ 560.439812][ T10] usb 3-1: config 0 descriptor?? [ 560.524590][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 560.654799][ T9] usb 5-1: device descriptor read/64, error -71 [ 560.674135][ T10] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 560.894581][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 560.901841][ T9609] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1200'. [ 560.901866][ T9609] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 561.465920][ T9] usb 5-1: device descriptor read/64, error -71 [ 561.577467][ T9] usb usb5-port1: attempt power cycle [ 561.914635][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 561.935184][ T9] usb 5-1: device descriptor read/8, error -71 [ 562.174592][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 562.195275][ T9] usb 5-1: device descriptor read/8, error -71 [ 562.274582][ T821] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 562.313420][ T9] usb usb5-port1: unable to enumerate USB device [ 562.426057][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1212'. [ 562.426803][ T821] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 562.426831][ T821] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 562.426862][ T821] usb 1-1: config 0 has no interface number 0 [ 562.426982][ T821] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 562.427014][ T821] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.427045][ T821] usb 1-1: config 0 interface 52 has no altsetting 0 [ 562.428279][ T821] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 562.428308][ T821] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 562.428331][ T821] usb 1-1: Manufacturer: syz [ 562.500053][ T821] usb 1-1: config 0 descriptor?? [ 562.533921][ T821] hub 1-1:0.52: bad descriptor, ignoring hub [ 562.533961][ T821] hub 1-1:0.52: probe with driver hub failed with error -5 [ 562.897586][ T5727] usb 3-1: USB disconnect, device number 63 [ 562.950202][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.950289][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.431042][ T9652] 9p: Bad value for 'rfdno' [ 563.556682][ T821] usb 1-1: Can not set alternate setting to 1, error: -71 [ 563.556734][ T821] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 563.615546][ T821] usb 1-1: USB disconnect, device number 48 [ 565.884791][ T31] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 565.886700][ T5727] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 566.016313][ T31] usb 5-1: device descriptor read/64, error -71 [ 566.034691][ T5727] usb 3-1: Using ep0 maxpacket: 32 [ 566.036934][ T5727] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 566.039472][ T5727] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 566.039498][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 566.039518][ T5727] usb 3-1: Product: syz [ 566.039531][ T5727] usb 3-1: Manufacturer: syz [ 566.039548][ T5727] usb 3-1: SerialNumber: syz [ 566.105768][ T5727] usb 3-1: config 0 descriptor?? [ 566.107269][ T9683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.121990][ T5727] hub 3-1:0.0: bad descriptor, ignoring hub [ 566.122078][ T5727] hub 3-1:0.0: probe with driver hub failed with error -5 [ 566.284604][ T31] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 566.414553][ T31] usb 5-1: device descriptor read/64, error -71 [ 566.562642][ T31] usb usb5-port1: attempt power cycle [ 566.688924][ T5727] usb 3-1: USB disconnect, device number 64 [ 566.916986][ T31] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 566.938380][ T31] usb 5-1: device descriptor read/8, error -71 [ 567.194974][ T31] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 567.223945][ T31] usb 5-1: device descriptor read/8, error -71 [ 567.336111][ T31] usb usb5-port1: unable to enumerate USB device [ 567.774995][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 570.366869][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 570.514553][ T821] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 570.686263][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 570.693453][ T821] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 570.693480][ T821] usb 1-1: config 0 has no interface number 0 [ 570.693528][ T821] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 570.693556][ T821] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 570.719188][ T821] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 570.719221][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.719244][ T821] usb 1-1: Product: syz [ 570.719261][ T821] usb 1-1: Manufacturer: syz [ 570.719276][ T821] usb 1-1: SerialNumber: syz [ 570.791476][ T821] usb 1-1: config 0 descriptor?? [ 570.792313][ T9717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 570.792445][ T9717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 570.917371][ T9724] bond2: (slave dummy0): Releasing active interface [ 571.024773][ T9717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 571.024898][ T9717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 571.241044][ T821] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 571.449943][ T9717] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1242'. [ 571.525106][ T9736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1242'. [ 571.528860][ T9717] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1242'. [ 571.688981][ T9740] 9p: Bad value for 'rfdno' [ 572.482122][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 573.507307][ T821] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 573.507338][ T821] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 573.507649][ T821] asix 1-1:0.34: probe with driver asix failed with error -71 [ 573.562004][ T821] usb 1-1: USB disconnect, device number 49 [ 573.674973][ T820] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 573.816519][ T820] usb 6-1: device descriptor read/64, error -71 [ 574.052044][ T9729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.054681][ T820] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 574.194651][ T820] usb 6-1: device descriptor read/64, error -71 [ 574.315007][ T820] usb usb6-port1: attempt power cycle [ 574.764587][ T820] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 574.863224][ T820] usb 6-1: device descriptor read/8, error -71 [ 575.112155][ T820] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 575.127929][ T820] usb 6-1: device descriptor read/8, error -71 [ 575.245475][ T820] usb usb6-port1: unable to enumerate USB device [ 575.364615][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 575.532327][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 575.532361][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.617668][ T10] usb 1-1: config 0 descriptor?? [ 575.656273][ T10] cp210x 1-1:0.0: cp210x converter detected [ 575.949549][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 575.949589][ T10] cp210x 1-1:0.0: querying part number failed [ 575.988232][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 579.274666][ T9] usb 1-1: USB disconnect, device number 50 [ 579.462168][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 579.528052][ T9] cp210x 1-1:0.0: device disconnected [ 579.564625][ T31] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 579.695412][ T31] usb 3-1: device descriptor read/64, error -71 [ 579.818706][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 579.945848][ T31] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 580.094586][ T31] usb 3-1: device descriptor read/64, error -71 [ 580.226156][ T31] usb usb3-port1: attempt power cycle [ 580.594610][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 580.615694][ T31] usb 3-1: device descriptor read/8, error -71 [ 580.737403][ T9881] netlink: 'syz.0.1283': attribute type 10 has an invalid length. [ 580.737420][ T9881] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1283'. [ 581.024499][ T31] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 581.098553][ T31] usb 3-1: device descriptor read/8, error -71 [ 581.318070][ T31] usb usb3-port1: unable to enumerate USB device [ 581.829812][ T5623] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 582.408879][ T5623] Bluetooth: hci5: Injecting HCI hardware error event [ 582.415016][ T5621] Bluetooth: hci5: hardware error 0x00 [ 584.194526][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 585.276778][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 585.286043][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 585.286079][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 585.320913][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 585.320947][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.320970][ T10] usb 6-1: Product: syz [ 585.320987][ T10] usb 6-1: Manufacturer: syz [ 585.321003][ T10] usb 6-1: SerialNumber: syz [ 585.365617][ T10] usb 6-1: config 0 descriptor?? [ 585.406771][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 585.406825][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 585.565224][ T9910] fuse: Bad value for 'fd' [ 585.736891][ T5621] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 586.481148][ T10] em28xx 6-1:0.0: chip ID is em2874 [ 587.290423][ T31] usb 6-1: USB disconnect, device number 15 [ 587.314303][ T31] em28xx 6-1:0.0: Disconnecting em28xx [ 587.355208][ T821] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 587.378775][ T31] em28xx 6-1:0.0: Freeing device [ 587.509860][ T821] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 587.509892][ T821] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 587.509916][ T821] usb 1-1: config 0 has no interface number 0 [ 587.509964][ T821] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 587.509993][ T821] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.510023][ T821] usb 1-1: config 0 interface 52 has no altsetting 0 [ 587.513067][ T821] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 587.513097][ T821] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 587.513120][ T821] usb 1-1: Manufacturer: syz [ 587.590451][ T821] usb 1-1: config 0 descriptor?? [ 587.625265][ T821] hub 1-1:0.52: bad descriptor, ignoring hub [ 587.625305][ T821] hub 1-1:0.52: probe with driver hub failed with error -5 [ 589.051868][ T9942] netlink: 'syz.4.1300': attribute type 10 has an invalid length. [ 589.052556][ T9942] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1300'. [ 590.734660][ T821] usb 1-1: Can not set alternate setting to 1, error: -71 [ 590.734713][ T821] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 590.837229][ T821] usb 1-1: USB disconnect, device number 51 [ 590.975330][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 591.317466][ T9976] fuse: Bad value for 'user_id' [ 591.317487][ T9976] fuse: Bad value for 'user_id' [ 591.394532][ T821] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 591.413076][ T5741] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 591.494593][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 591.553298][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.553335][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.553444][ T821] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 591.553470][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.596729][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 591.596775][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 591.599313][ T5741] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 591.599342][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.599364][ T5741] usb 3-1: Product: syz [ 591.599380][ T5741] usb 3-1: Manufacturer: syz [ 591.599396][ T5741] usb 3-1: SerialNumber: syz [ 591.645388][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 591.668805][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.668832][ T43] usb 6-1: config 0 has no interfaces? [ 591.673027][ T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 591.673056][ T43] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 591.673078][ T43] usb 6-1: Product: syz [ 591.673093][ T43] usb 6-1: Manufacturer: syz [ 591.673786][ T821] usb 1-1: config 0 descriptor?? [ 591.726072][ T43] usb 6-1: config 0 descriptor?? [ 591.728607][ T5741] usb 3-1: config 0 descriptor?? [ 591.768729][ T5741] hub 3-1:0.0: bad descriptor, ignoring hub [ 591.768771][ T5741] hub 3-1:0.0: probe with driver hub failed with error -5 [ 591.807617][ T5741] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 592.080442][ T820] usb 3-1: USB disconnect, device number 69 [ 592.351531][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 592.351645][ T821] usbhid 1-1:0.0: can't add hid device: -32 [ 592.351731][ T821] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 592.381714][ T821] usb 1-1: USB disconnect, device number 52 [ 593.484601][ T821] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 593.647822][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 593.647848][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 593.650705][ T821] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 593.650726][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.650742][ T821] usb 1-1: Product: syz [ 593.650752][ T821] usb 1-1: Manufacturer: syz [ 593.650763][ T821] usb 1-1: SerialNumber: syz [ 593.719400][ T821] usb 1-1: config 0 descriptor?? [ 593.723184][ T821] hub 1-1:0.0: bad descriptor, ignoring hub [ 593.723247][ T821] hub 1-1:0.0: probe with driver hub failed with error -5 [ 593.761292][ T821] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 594.764084][ T820] usb 6-1: USB disconnect, device number 16 [ 595.664748][ T31] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 595.820711][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 595.820749][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 595.823209][ T31] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 595.823240][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.823263][ T31] usb 3-1: Product: syz [ 595.823278][ T31] usb 3-1: Manufacturer: syz [ 595.823295][ T31] usb 3-1: SerialNumber: syz [ 595.884278][ T31] usb 3-1: config 0 descriptor?? [ 595.900772][ T31] hub 3-1:0.0: bad descriptor, ignoring hub [ 595.900813][ T31] hub 3-1:0.0: probe with driver hub failed with error -5 [ 595.936639][ T31] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 596.258771][T10026] tipc: Started in network mode [ 596.258805][T10026] tipc: Node identity ac14140f, cluster identity 4711 [ 596.336901][T10026] tipc: New replicast peer: 255.255.255.255 [ 596.482740][T10026] tipc: Enabled bearer , priority 10 [ 597.494625][ T31] tipc: Node number set to 2886997007 [ 597.864631][ T820] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 598.031195][ T820] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 598.031234][ T820] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 598.031264][ T820] usb 6-1: config 0 interface 0 has no altsetting 0 [ 598.133206][ T820] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.133240][ T820] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.133262][ T820] usb 6-1: Product: syz [ 598.133277][ T820] usb 6-1: Manufacturer: syz [ 598.133293][ T820] usb 6-1: SerialNumber: syz [ 598.201371][ T820] usb 6-1: config 0 descriptor?? [ 598.382891][ T820] usb 6-1: selecting invalid altsetting 0 [ 598.648011][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.663048][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.668206][ T31] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 598.722728][ T5747] usb 3-1: USB disconnect, device number 70 [ 598.844565][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 598.853980][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 598.854048][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.854077][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.854117][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 598.854162][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 598.854188][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.976360][ T31] usb 5-1: config 0 descriptor?? [ 599.206061][T10049] binder: BINDER_SET_CONTEXT_MGR already set [ 599.206074][T10049] binder: 10048:10049 ioctl 4018620d 200000000040 returned -16 [ 599.366753][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 599.366942][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 599.408385][ T31] usb 5-1: USB disconnect, device number 43 [ 599.999609][ T820] usb 6-1: USB disconnect, device number 17 [ 600.101439][ T5727] usb 1-1: USB disconnect, device number 53 [ 602.034557][ T820] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 602.184597][ T820] usb 6-1: Using ep0 maxpacket: 16 [ 602.187485][ T820] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 602.187533][ T820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.187563][ T820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.187589][ T820] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 602.187635][ T820] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 602.187662][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.307775][ T820] usb 6-1: config 0 descriptor?? [ 602.923355][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 603.002435][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 603.019446][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 603.052654][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 603.071314][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 604.125862][ T821] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 604.274586][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 604.276718][ T821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 604.276747][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.278151][ T820] usbhid 6-1:0.0: can't add hid device: -71 [ 604.278277][ T820] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 604.324443][ T820] usb 6-1: USB disconnect, device number 18 [ 604.330486][ T821] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 604.330517][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.330540][ T821] usb 5-1: Product: syz [ 604.330555][ T821] usb 5-1: Manufacturer: syz [ 604.330571][ T821] usb 5-1: SerialNumber: syz [ 604.589058][ T821] usb 5-1: config 0 descriptor?? [ 604.607103][ T821] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 604.607140][ T821] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 604.975339][T10106] syzkaller0: entered promiscuous mode [ 604.975369][T10106] syzkaller0: entered allmulticast mode [ 604.978800][T10108] tipc: Started in network mode [ 604.978829][T10108] tipc: Node identity eaea572b646c, cluster identity 4711 [ 604.997774][T10108] tipc: Enabled bearer , priority 0 [ 605.155058][T10118] tipc: Resetting bearer [ 605.189498][ T5623] Bluetooth: hci2: command tx timeout [ 605.208149][T10101] tipc: Resetting bearer [ 605.225425][ T821] em28xx 5-1:0.0: chip ID is em2874 [ 605.373877][T10101] tipc: Disabling bearer [ 605.437768][ T821] usb 5-1: USB disconnect, device number 44 [ 605.451173][ T821] em28xx 5-1:0.0: Disconnecting em28xx [ 605.485898][ T821] em28xx 5-1:0.0: Freeing device [ 605.869727][T10130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1364'. [ 605.885208][ T31] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 606.059134][ T31] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 606.059164][ T31] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 606.059186][ T31] usb 6-1: config 0 has no interface number 0 [ 606.059232][ T31] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 606.059261][ T31] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.059291][ T31] usb 6-1: config 0 interface 52 has no altsetting 0 [ 606.096729][ T31] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 606.096822][ T31] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 606.096878][ T31] usb 6-1: Manufacturer: syz [ 606.110037][ T31] usb 6-1: config 0 descriptor?? [ 606.163307][ T31] hub 6-1:0.52: bad descriptor, ignoring hub [ 606.163333][ T31] hub 6-1:0.52: probe with driver hub failed with error -5 [ 606.780958][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.782022][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.782233][T10088] bridge_slave_0: entered allmulticast mode [ 606.817429][T10088] bridge_slave_0: entered promiscuous mode [ 606.850070][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.850538][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.851169][T10088] bridge_slave_1: entered allmulticast mode [ 606.901337][T10088] bridge_slave_1: entered promiscuous mode [ 607.019556][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.081086][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.139313][T10149] loop8: detected capacity change from 0 to 7 [ 607.167368][T10149] Dev loop8: unable to read RDB block 7 [ 607.168755][T10149] loop8: unable to read partition table [ 607.172878][T10149] loop8: partition table beyond EOD, truncated [ 607.172981][T10149] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 607.264683][ T5623] Bluetooth: hci2: command tx timeout [ 607.357007][ T31] usb 6-1: Can not set alternate setting to 1, error: -71 [ 607.357058][ T31] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 607.418800][ T31] usb 6-1: USB disconnect, device number 19 [ 607.504038][T10088] team0: Port device team_slave_0 added [ 607.528689][T10088] team0: Port device team_slave_1 added [ 607.733766][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.733785][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.733816][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.810769][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.810787][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.810818][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.134625][ T5741] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 608.180022][T10088] hsr_slave_0: entered promiscuous mode [ 608.191903][T10088] hsr_slave_1: entered promiscuous mode [ 608.196346][T10088] debugfs: 'hsr0' already exists in 'hsr' [ 608.196415][T10088] Cannot create hsr debugfs directory [ 608.294740][ T5741] usb 6-1: Using ep0 maxpacket: 32 [ 608.303424][ T5741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.303453][ T5741] usb 6-1: config 0 has no interfaces? [ 608.335898][ T5741] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 608.335930][ T5741] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 608.335952][ T5741] usb 6-1: Product: syz [ 608.335968][ T5741] usb 6-1: Manufacturer: syz [ 608.403438][ T5741] usb 6-1: config 0 descriptor?? [ 608.479777][T10165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1375'. [ 608.962403][T10169] fuse: Bad value for 'fd' [ 609.344564][ T5623] Bluetooth: hci2: command tx timeout [ 609.512667][T10088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.955054][T10088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.794327][ T31] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 611.041446][ T821] usb 6-1: USB disconnect, device number 20 [ 611.102609][ T31] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 611.102642][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.160568][ T31] usb 1-1: config 0 descriptor?? [ 611.201042][ T31] cp210x 1-1:0.0: cp210x converter detected [ 611.414487][ T5623] Bluetooth: hci2: command tx timeout [ 611.415735][T10088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.482751][ T31] usb 1-1: cp210x converter now attached to ttyUSB0 [ 612.921259][T10088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.060786][ T5741] usb 1-1: USB disconnect, device number 54 [ 614.106966][ T5741] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 614.107784][ T5741] cp210x 1-1:0.0: device disconnected [ 615.089555][T10088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.134751][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.154255][T10088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.210458][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.211849][T10088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.260747][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.290489][T10088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 615.330169][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.490884][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.558015][T10088] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.592876][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.593004][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.638516][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.638633][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.695138][ T43] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 615.844556][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 615.847006][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 615.847039][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 615.889954][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.889986][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.890006][ T43] usb 1-1: Product: syz [ 615.890025][ T43] usb 1-1: Manufacturer: syz [ 615.890119][ T43] usb 1-1: SerialNumber: syz [ 615.957039][ T43] usb 1-1: config 0 descriptor?? [ 615.983060][ T43] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 617.974232][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.094216][T10088] veth0_vlan: entered promiscuous mode [ 618.110171][T10088] veth1_vlan: entered promiscuous mode [ 618.195609][T10088] veth0_macvtap: entered promiscuous mode [ 618.241311][T10088] veth1_macvtap: entered promiscuous mode [ 618.288112][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.485639][ T821] usb 1-1: USB disconnect, device number 55 [ 619.748523][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.841302][ T9325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.843323][ T9325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.843358][ T9325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.843391][ T9325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.537219][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.537250][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.621089][T10307] loop8: detected capacity change from 0 to 7 [ 623.633844][T10307] Dev loop8: unable to read RDB block 7 [ 623.633888][T10307] loop8: unable to read partition table [ 623.634110][T10307] loop8: partition table beyond EOD, truncated [ 623.634148][T10307] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 623.801654][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.801672][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.397685][ T37] INFO: task kworker/u8:13:1503 blocked for more than 144 seconds. [ 624.397712][ T37] Not tainted syzkaller #0 [ 624.397725][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.397735][ T37] task:kworker/u8:13 state:D stack:19168 pid:1503 tgid:1503 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 624.397798][ T37] Workqueue: netns cleanup_net [ 624.397935][ T37] Call Trace: [ 624.397944][ T37] [ 624.397958][ T37] __schedule+0x16ec/0x5620 [ 624.398062][ T37] ? __pfx___schedule+0x10/0x10 [ 624.398105][ T37] ? schedule+0x90/0x360 [ 624.398141][ T37] schedule+0x164/0x360 [ 624.398175][ T37] rxrpc_destroy_all_calls+0x44e/0x570 [ 624.398175][ T37] rxrpc_destroy_all_calls+0x44e/0x570 [ 624.398266][ T37] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 624.398304][ T37] ? __pfx_var_wake_function+0x10/0x10 [ 624.398364][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 624.398422][ T37] ? __timer_delete_sync+0x53e/0x610 [ 624.398479][ T37] rxrpc_exit_net+0x6f/0xc0 [ 624.398541][ T37] ops_undo_list+0x49f/0x940 [ 624.398576][ T37] ? rt_spin_unlock+0x180/0x200 [ 624.398606][ T37] ? __pfx_ops_undo_list+0x10/0x10 [ 624.398635][ T37] ? rt_spin_unlock+0x14f/0x200 [ 624.398665][ T37] ? idr_destroy+0x21b/0x2a0 [ 624.398719][ T37] ? rt_spin_unlock+0x160/0x200 [ 624.398750][ T37] cleanup_net+0x56e/0x800 [ 624.398785][ T37] ? __pfx_cleanup_net+0x10/0x10 [ 624.398825][ T37] ? process_scheduled_works+0xa70/0x1860 [ 624.398849][ T37] ? process_scheduled_works+0xa70/0x1860 [ 624.398877][ T37] process_scheduled_works+0xb5d/0x1860 [ 624.398936][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.398970][ T37] ? assign_work+0x3d5/0x5e0 [ 624.399000][ T37] worker_thread+0xa53/0xfc0 [ 624.399056][ T37] kthread+0x388/0x470 [ 624.399087][ T37] ? __pfx_worker_thread+0x10/0x10 [ 624.399112][ T37] ? __pfx_kthread+0x10/0x10 [ 624.399145][ T37] ret_from_fork+0x514/0xb70 [ 624.399174][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 624.399200][ T37] ? __switch_to+0xc79/0x1410 [ 624.399238][ T37] ? __pfx_kthread+0x10/0x10 [ 624.399271][ T37] ret_from_fork_asm+0x1a/0x30 [ 624.399317][ T37] [ 624.400323][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.400390][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.403182][ T37] [ 624.403182][ T37] Showing all locks held in the system: [ 624.403195][ T37] 1 lock held by khungtaskd/37: [ 624.403206][ T37] #0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 624.403276][ T37] 11 locks held by aoe_tx0/1338: [ 624.403287][ T37] 3 locks held by kworker/u8:13/1503: [ 624.403297][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 624.403341][ T37] #1: ffffc900067efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 624.403384][ T37] #2: ffffffff8f340fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 624.403450][ T37] 2 locks held by getty/5360: [ 624.403459][ T37] #0: ffff88823be7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 624.403562][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 624.403636][ T37] 1 lock held by syz-executor/5607: [ 624.403647][ T37] #0: ffff888040e90480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 624.403727][ T37] 1 lock held by syz-executor/5608: [ 624.403739][ T37] #0: ffff888061d54480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 624.403794][ T37] 2 locks held by kworker/0:8/6207: [ 624.403805][ T37] 4 locks held by syz-executor/7803: [ 624.403818][ T37] 1 lock held by udevd/10060: [ 624.403827][ T37] #0: ffff8880378de480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 624.403875][ T37] 1 lock held by syz-executor/10088: [ 624.403885][ T37] #0: ffff888064408480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 624.403940][ T37] 2 locks held by syz.4.1409/10279: [ 624.403951][ T37] [ 624.403956][ T37] ============================================= [ 624.403956][ T37] [ 624.403972][ T37] NMI backtrace for cpu 0 [ 624.403997][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 624.404022][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.404036][ T37] Call Trace: [ 624.404045][ T37] [ 624.404053][ T37] dump_stack_lvl+0xe8/0x150 [ 624.404080][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 624.404107][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 624.404136][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 624.404166][ T37] sys_info+0x135/0x170 [ 624.404266][ T37] watchdog+0xfd3/0x1030 [ 624.404323][ T37] ? watchdog+0x1c9/0x1030 [ 624.404357][ T37] kthread+0x388/0x470 [ 624.404389][ T37] ? __pfx_watchdog+0x10/0x10 [ 624.404412][ T37] ? __pfx_kthread+0x10/0x10 [ 624.404443][ T37] ret_from_fork+0x514/0xb70 [ 624.404471][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 624.404504][ T37] ? __switch_to+0xc79/0x1410 [ 624.404541][ T37] ? __pfx_kthread+0x10/0x10 [ 624.404573][ T37] ret_from_fork_asm+0x1a/0x30 [ 624.404616][ T37] [ 624.404675][ T37] Sending NMI from CPU 0 to CPUs 1: [ 624.404719][ C1] NMI backtrace for cpu 1 [ 624.404734][ C1] CPU: 1 UID: 0 PID: 1338 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 624.404755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.404771][ C1] RIP: 0010:unwind_next_frame+0x19b7/0x2550 [ 624.404798][ C1] Code: 89 da eb 3f 48 8d 5f 02 48 83 c7 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 a1 0a 00 00 48 89 f8 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 b3 0a 00 00 48 0f bf 03 49 01 c4 49 8d 56 40 4c 89 f7 [ 624.404815][ C1] RSP: 0018:ffffc9000619f1f8 EFLAGS: 00000a02 [ 624.404831][ C1] RAX: 0000000000000000 RBX: ffffffff90153e3a RCX: 0000000000000000 [ 624.404843][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90153e3b [ 624.404855][ C1] RBP: dffffc0000000000 R08: ffffc9000619f387 R09: 0000000000000000 [ 624.404869][ C1] R10: ffffc9000619f378 R11: fffff52000c33e71 R12: ffffc9000619f328 [ 624.404886][ C1] R13: 1ffff92000c33e67 R14: ffffc9000619f328 R15: 1ffffffff202a7c7 [ 624.404900][ C1] FS: 0000000000000000(0000) GS:ffff888126283000(0000) knlGS:0000000000000000 [ 624.404916][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.404928][ C1] CR2: 0000555584255a38 CR3: 000000003da72000 CR4: 00000000003526f0 [ 624.404945][ C1] Call Trace: [ 624.404951][ C1] [ 624.404962][ C1] ? unwind_next_frame+0xa6/0x2550 [ 624.404986][ C1] ? __unwind_start+0xf7/0x760 [ 624.405019][ C1] __unwind_start+0x5b8/0x760 [ 624.405044][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.405105][ C1] arch_stack_walk+0xe3/0x150 [ 624.405132][ C1] ? arch_stack_walk+0xe3/0x150 [ 624.405162][ C1] stack_trace_save+0xa9/0x100 [ 624.405182][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 624.405202][ C1] ? kfree+0x1c5/0x6c0 [ 624.405247][ C1] ? dev_hard_start_xmit+0x2df/0x860 [ 624.405316][ C1] ? sch_direct_xmit+0x251/0x4c0 [ 624.405361][ C1] ? __dev_queue_xmit+0x171e/0x3900 [ 624.405377][ C1] ? tx+0x6b/0x190 [ 624.405426][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 624.405486][ C1] kasan_save_track+0x3e/0x80 [ 624.405555][ C1] ? nsim_start_xmit+0x322/0xd50 [ 624.405619][ C1] kasan_save_free_info+0x46/0x50 [ 624.405644][ C1] __kasan_slab_free+0x5c/0x80 [ 624.405665][ C1] kmem_cache_free+0x187/0x6c0 [ 624.405705][ C1] ? nsim_start_xmit+0x322/0xd50 [ 624.405731][ C1] ? nsim_start_xmit+0xbb/0xd50 [ 624.405754][ C1] nsim_start_xmit+0x322/0xd50 [ 624.405778][ C1] ? nsim_start_xmit+0xbb/0xd50 [ 624.405803][ C1] ? dev_queue_xmit_nit+0x969/0xad0 [ 624.405827][ C1] ? __pfx_nsim_start_xmit+0x10/0x10 [ 624.405850][ C1] ? dev_queue_xmit_nit+0x2d/0xad0 [ 624.405880][ C1] dev_hard_start_xmit+0x2df/0x860 [ 624.405917][ C1] sch_direct_xmit+0x251/0x4c0 [ 624.405942][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 624.405964][ C1] ? rcu_needs_cpu+0x90/0xb0 [ 624.406034][ C1] ? rt_spin_trylock+0x13a/0x2b0 [ 624.406058][ C1] __dev_queue_xmit+0x171e/0x3900 [ 624.406076][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 624.406108][ C1] ? __dev_queue_xmit+0x2b3/0x3900 [ 624.406125][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 624.406157][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 624.406178][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 624.406199][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 624.406227][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 624.406311][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 624.406346][ C1] ? rt_spin_unlock+0x14f/0x200 [ 624.406369][ C1] ? rt_spin_unlock+0x160/0x200 [ 624.406392][ C1] tx+0x6b/0x190 [ 624.406415][ C1] ? __pfx_tx+0x10/0x10 [ 624.406437][ C1] kthread+0x1e0/0x3f0 [ 624.406458][ C1] ? lock_acquire+0x106/0x350 [ 624.406485][ C1] ? __pfx_kthread+0x10/0x10 [ 624.406508][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 624.406574][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 624.406601][ C1] kthread+0x388/0x470 [ 624.406623][ C1] ? __pfx_kthread+0x10/0x10 [ 624.406644][ C1] ? __pfx_kthread+0x10/0x10 [ 624.406668][ C1] ret_from_fork+0x514/0xb70 [ 624.406689][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 624.406709][ C1] ? __switch_to+0xc79/0x1410 [ 624.406737][ C1] ? __pfx_kthread+0x10/0x10 [ 624.406761][ C1] ret_from_fork_asm+0x1a/0x30 [ 624.406792][ C1] [ 624.493472][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 624.493496][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 624.493522][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.493536][ T37] Call Trace: [ 624.493545][ T37] [ 624.493555][ T37] vpanic+0x56c/0xa60 [ 624.493589][ T37] ? __pfx___schedule+0x10/0x10 [ 624.493620][ T37] ? __pfx_vpanic+0x10/0x10 [ 624.493657][ T37] panic+0xc5/0xd0 [ 624.493683][ T37] ? __pfx_panic+0x10/0x10 [ 624.493711][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 624.493750][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 624.493781][ T37] watchdog+0x102c/0x1030 [ 624.493813][ T37] ? watchdog+0x1c9/0x1030 [ 624.493844][ T37] kthread+0x388/0x470 [ 624.493875][ T37] ? __pfx_watchdog+0x10/0x10 [ 624.493899][ T37] ? __pfx_kthread+0x10/0x10 [ 624.493931][ T37] ret_from_fork+0x514/0xb70 [ 624.493961][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 624.493995][ T37] ? __switch_to+0xc79/0x1410 [ 624.494043][ T37] ? __pfx_kthread+0x10/0x10 [ 624.494076][ T37] ret_from_fork_asm+0x1a/0x30 [ 624.494121][ T37] [ 624.494831][ T37] Kernel Offset: disabled