last executing test programs: 23m42.717772052s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000900)=0x15) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 23m38.431204391s ago: executing program 3 (id=6): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) tkill(0x0, 0xb) 23m35.571449049s ago: executing program 3 (id=10): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) 23m33.899298936s ago: executing program 3 (id=13): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x48140, 0x0) io_setup(0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000006000000", @ANYRES8=r2], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x3}}, 0x20) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0)=r8, 0x12) 23m18.314482587s ago: executing program 32 (id=13): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x48140, 0x0) io_setup(0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000006000000", @ANYRES8=r2], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x3}}, 0x20) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0)=r8, 0x12) 20m0.758534667s ago: executing program 4 (id=286): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x4, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f0000000200)={0x1e0980001, 0x0, "bfdc1413ae000000e20000000000544700", 0x8, 0xfffffffffffffffc, 0xff, 0x6, 0x8000000, 0x0, 0x91, 0x3e, [0x2, 0x1, 0x3, 0x2]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x44c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x424, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x4}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0xd96}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "722462f44843f8cdcfbf7696dd6365334b1cbe5c04ec4a20d26cb4e720e8f7ca"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d7017e586d63d13a9f7154c6c73787ee6235425fe68152cc590cc603a60797a6"}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f793f1dc8368b9309484a83ed7029bd346e38b70e680c8162763c5539c1426d3"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "524ad0b1e0dceae5bea7c1b5029320e20f8d3b596df04ce932e5f6db615c1539"}, @WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9719d2edda23592449434336c7e9f3a89a1845fb283d61bcc291e3b774d85de0"}]}, {0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @remote, 0xfffffffd}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e050c75bb3599e01a1f0d47378bd76d943440925400018dabb4518b46d02f162"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "039265d561d14f4ab7e7b2034d7be9dc7fac6e631abbff146ea7e7dc25c38a08"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 19m57.440472477s ago: executing program 4 (id=291): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) io_uring_enter(r0, 0x627, 0x4c1, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 19m48.081106623s ago: executing program 4 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 19m47.457890519s ago: executing program 4 (id=302): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m42.214790367s ago: executing program 4 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r5, 0x81000000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, 0x0) 19m41.28145587s ago: executing program 4 (id=309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 19m24.410639209s ago: executing program 33 (id=309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 30.19281423s ago: executing program 6 (id=3960): socket(0x10, 0x803, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) open(0x0, 0x800, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.752406976s ago: executing program 6 (id=3962): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000100)={0x5, 0x0, @auto=[0x2f, 0x39, 0x13]}, 0xb, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000000500)='./binOerfs/bind\br0\x00P\xbf\xfe\xb5cY\xc2\xfb\x86\xe6\x98]\x9a,\xad\xce\x10)!\xa9\x8aU\x86\x19\xef3\b\xc2\xb9I\xb5\xfe?\x1d0\x8e\x94cU`\x16\xa8\xd3?\xac\x7f\xc0\x91p\xf7\x8ct\xa5\x16\x8e.\xbd\\\xba\xf7\x06\x80\r\xb7\xb2\x19\xab\x16\xfc7\x13\xd5\xe8f\xe0\xe3!\xc90\x10\x04\xc2e\'\xf6\xdb\xc5\x9a|\xecv\xef`\xab\xb3\xd8\xba\\\xa6\xf6\xa3]>d\x86\xd05\xb2\xc0\x9c\x12\xc6\x89\xe9t\n\x9c\x89R9%D\xf2\xcb\xbd\x82=\xc7\x06$\xfegM\x82\x9cU\xccV`\xed6\x06hx!\xd4Vw', 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, 0x0, 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xec48, 0x800, 0x2, 0x24a}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 29.58816306s ago: executing program 6 (id=3964): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 29.421757049s ago: executing program 6 (id=3965): socket(0x10, 0x803, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) open(0x0, 0x800, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.229986029s ago: executing program 6 (id=3968): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109"], 0x0) setxattr$incfs_size(0x0, &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) readv(r3, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) 29.079034852s ago: executing program 6 (id=3970): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}}, 0x20}}, 0x24008040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 21.466286607s ago: executing program 2 (id=3987): socket(0x10, 0x803, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.806725489s ago: executing program 2 (id=3989): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209b"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20.535469509s ago: executing program 2 (id=3991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19.472426798s ago: executing program 2 (id=3993): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0xd8000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)='dW'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 18.156421519s ago: executing program 2 (id=3997): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x10700, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x801}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB="0a000100aaaa"], 0x48}}, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}}, 0x24) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = semget$private(0x0, 0xa, 0xc0) semop(r7, &(0x7f0000000000)=[{0x4, 0x5, 0x1800}, {0x3, 0x6, 0x1000}, {0x1, 0x7fff, 0x1800}], 0x3) semop(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004240)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r8, 0x4008}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r8, 0x0) shutdown(r8, 0x0) 15.114462059s ago: executing program 2 (id=4007): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) pread64(r1, 0x0, 0x0, 0x5) accept(0xffffffffffffffff, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000) socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x10) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 12.796604394s ago: executing program 5 (id=4014): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) msgget(0x3, 0x213) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000240)=0x9, 0x4) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12.553650546s ago: executing program 5 (id=4015): syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/195, 0xc3}, {&(0x7f00000017c0)=""/114, 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000001e40)}}], 0x3, 0x40000000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 12.283989195s ago: executing program 5 (id=4018): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'bridge0\x00', 0x4}, 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$nl_generic(0x11, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x9}, 0x80, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x11000000}, 0x20000041) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) 10.840292282s ago: executing program 1 (id=4021): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 10.751665034s ago: executing program 1 (id=4022): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x80001, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8.060908892s ago: executing program 5 (id=4023): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = syz_io_uring_setup(0x136f, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaad03, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x40, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x5], 0xeeee8000, 0x400}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.851628703s ago: executing program 0 (id=4025): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.6695054s ago: executing program 1 (id=4026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000580)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.547923183s ago: executing program 1 (id=4027): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) readv(r3, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) 4.986531876s ago: executing program 5 (id=4028): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_012={0x1, 0x0, 0x9, 'a'}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000240)={0x2, 0xffffffff, 0x575b}) 4.839867052s ago: executing program 0 (id=4029): r0 = memfd_create(0x0, 0x3) write$binfmt_script(r0, &(0x7f0000000040), 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.69026824s ago: executing program 0 (id=4030): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, 0x8) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x62040) syz_usb_connect$uac1(0x0, 0x8a, 0x0, 0x0) 3.098031046s ago: executing program 5 (id=4031): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2.817781439s ago: executing program 1 (id=4032): openat$comedi(0xffffffffffffff9c, 0x0, 0x48140, 0x0) io_setup(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000006000000", @ANYRES8=r1], 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1.334045021s ago: executing program 0 (id=4033): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000"], 0x30}, 0x1400c0c0) 1.245825822s ago: executing program 0 (id=4034): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216", 0x3c}, {&(0x7f00000008c0)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5521f3a9d63ffde6682c5ecfe5012", 0x43}], 0x2, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x10043, 0x0) 1.169188545s ago: executing program 0 (id=4035): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000240)={0x1, 'bridge0\x00', 0x4}, 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$nl_generic(0x11, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x9}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x20000041) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) 442.803286ms ago: executing program 1 (id=4036): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000200)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002800)="ef0ba6063426720100", 0x9}], 0x1}}], 0x579, 0x20000010) 0s ago: executing program 34 (id=4007): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) pread64(r1, 0x0, 0x0, 0x5) accept(0xffffffffffffffff, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000) socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x10) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) kernel console output (not intermixed with test programs): 76.722777][T10379] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1276.723697][ T6151] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1276.753464][ T9954] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1276.773257][T10379] usb 1-1: USB disconnect, device number 127 [ 1276.831153][ T9954] usb 6-1: USB disconnect, device number 4 [ 1276.927985][ T6151] usbhid 3-1:0.0: can't add hid device: -71 [ 1276.928067][ T6151] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1276.948985][ T6151] usb 3-1: USB disconnect, device number 102 [ 1277.566385][ T6151] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1277.823668][ T6151] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1277.823696][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.823714][ T6151] usb 1-1: Product: syz [ 1277.823726][ T6151] usb 1-1: Manufacturer: syz [ 1277.823738][ T6151] usb 1-1: SerialNumber: syz [ 1278.351894][ T6151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1278.351960][ T6151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1278.404998][ T6151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1278.405061][ T6151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1278.440744][ T805] usb 2-1: USB disconnect, device number 96 [ 1278.459899][ T6151] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1278.511323][ T6151] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1278.531227][ T6151] usb 1-1: USB disconnect, device number 2 [ 1279.236149][ T5935] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1279.397685][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 1279.400230][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.486062][ T5935] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1279.486093][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.486161][ T5935] usb 3-1: Product: syz [ 1279.486176][ T5935] usb 3-1: Manufacturer: syz [ 1279.486191][ T5935] usb 3-1: SerialNumber: syz [ 1279.495541][ T5935] usb 3-1: config 0 descriptor?? [ 1279.545740][ T5935] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1280.231901][ T5935] gspca_sunplus: reg_r err -32 [ 1281.160043][T16451] sit1: entered allmulticast mode [ 1281.286363][ T5935] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1282.086911][ T10] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1282.118115][ T9954] usb 3-1: USB disconnect, device number 103 [ 1282.264030][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1282.264062][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.264085][ T10] usb 7-1: Product: syz [ 1282.264101][ T10] usb 7-1: Manufacturer: syz [ 1282.264116][ T10] usb 7-1: SerialNumber: syz [ 1282.569023][T15092] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1282.726108][T15092] usb 1-1: Using ep0 maxpacket: 16 [ 1282.731249][T15092] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1282.731279][T15092] usb 1-1: config 1 has no interface number 1 [ 1282.731327][T15092] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1282.731350][T15092] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1282.731378][T15092] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1282.734799][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1282.734868][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1282.735529][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1282.735582][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1282.747715][T15092] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1282.747766][T15092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.747787][T15092] usb 1-1: Product: syz [ 1282.747802][T15092] usb 1-1: Manufacturer: syz [ 1282.747816][T15092] usb 1-1: SerialNumber: syz [ 1282.785046][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1282.884565][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1283.250622][T15092] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1284.516023][T12723] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1284.658262][ T5935] usb 7-1: USB disconnect, device number 51 [ 1284.678622][T12723] usb 6-1: Using ep0 maxpacket: 32 [ 1284.680379][T12723] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.682151][T12723] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1284.682169][T12723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.682180][T12723] usb 6-1: Product: syz [ 1284.682187][T12723] usb 6-1: Manufacturer: syz [ 1284.682196][T12723] usb 6-1: SerialNumber: syz [ 1284.741606][T12723] usb 6-1: config 0 descriptor?? [ 1284.759170][T12723] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1285.356558][T12723] gspca_sunplus: reg_r err -32 [ 1286.366133][T12723] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1286.370238][T12723] usb 6-1: USB disconnect, device number 5 [ 1286.517688][ T5935] usb 1-1: USB disconnect, device number 3 [ 1289.246055][ T5935] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1289.396065][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 1289.397755][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.399527][ T5935] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1289.399545][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.399557][ T5935] usb 3-1: Product: syz [ 1289.399565][ T5935] usb 3-1: Manufacturer: syz [ 1289.399573][ T5935] usb 3-1: SerialNumber: syz [ 1289.402669][ T5935] usb 3-1: config 0 descriptor?? [ 1289.415850][ T5935] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1290.018400][ T5935] gspca_sunplus: reg_r err -32 [ 1290.215406][T15092] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1290.466045][T15092] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1290.466077][T15092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.466098][T15092] usb 1-1: Product: syz [ 1290.466109][T15092] usb 1-1: Manufacturer: syz [ 1290.466117][T15092] usb 1-1: SerialNumber: syz [ 1290.786040][ T6151] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1290.943772][T15092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1290.943837][T15092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1290.944959][T15092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1290.945014][T15092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1290.945796][T15092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1290.996199][ T5935] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1291.057064][ T6151] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1291.057095][ T6151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.057115][ T6151] usb 6-1: Product: syz [ 1291.057130][ T6151] usb 6-1: Manufacturer: syz [ 1291.057145][ T6151] usb 6-1: SerialNumber: syz [ 1291.064407][T15092] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1291.120877][T15092] usb 1-1: USB disconnect, device number 4 [ 1291.728092][ T6151] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1291.728154][ T6151] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1291.729854][ T6151] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1291.729905][ T6151] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1291.730644][ T6151] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1291.791450][ T6151] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1291.979305][T16584] input: syz0 as /devices/virtual/input/input30 [ 1292.036701][ T9954] usb 3-1: USB disconnect, device number 104 [ 1292.093324][T15092] usb 6-1: USB disconnect, device number 6 [ 1292.486056][T15092] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1292.638848][T15092] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.638905][T15092] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1292.638947][T15092] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1292.638960][T15092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.644587][T15092] usb 3-1: config 0 descriptor?? [ 1292.683207][T15092] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1295.056108][T12723] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1295.218422][T10781] usb 3-1: USB disconnect, device number 105 [ 1295.257281][T12723] usb 6-1: Using ep0 maxpacket: 32 [ 1295.262008][T12723] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.264613][T12723] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1295.264645][T12723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.264666][T12723] usb 6-1: Product: syz [ 1295.264681][T12723] usb 6-1: Manufacturer: syz [ 1295.264697][T12723] usb 6-1: SerialNumber: syz [ 1295.332764][T12723] usb 6-1: config 0 descriptor?? [ 1295.346731][T12723] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1295.671092][T16624] syzkaller0: entered promiscuous mode [ 1295.671373][T16624] syzkaller0: entered allmulticast mode [ 1295.681045][T16624] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1296.017496][T12723] gspca_sunplus: reg_r err -32 [ 1297.226043][T12723] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1297.228779][T12723] usb 6-1: USB disconnect, device number 7 [ 1297.756090][T10781] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1297.905983][T10781] usb 6-1: Using ep0 maxpacket: 16 [ 1297.910679][T10781] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1297.910699][T10781] usb 6-1: config 0 has no interface number 0 [ 1297.910726][T10781] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1297.910741][T10781] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1297.913540][T10781] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1297.913559][T10781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.913571][T10781] usb 6-1: Product: syz [ 1297.913579][T10781] usb 6-1: Manufacturer: syz [ 1297.913587][T10781] usb 6-1: SerialNumber: syz [ 1297.924269][T10781] usb 6-1: config 0 descriptor?? [ 1297.930243][T16643] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1297.930444][T16643] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1298.270019][T16643] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1298.270091][T16643] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1299.988514][T10781] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1300.248741][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.248830][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.594960][T10781] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -61 [ 1300.655140][T10781] asix 6-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1300.655376][T10781] asix 6-1:0.251: probe with driver asix failed with error -5 [ 1300.770024][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ab98000: rx timeout, send abort [ 1300.774495][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804ab98000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1300.884882][ T805] usb 6-1: USB disconnect, device number 8 [ 1301.063023][T16664] sit1: entered allmulticast mode [ 1301.616092][T10781] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1301.776055][T10781] usb 3-1: Using ep0 maxpacket: 32 [ 1301.964099][ T5950] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1301.989679][T10781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.011915][T10781] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1302.011945][T10781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.011965][T10781] usb 3-1: Product: syz [ 1302.011981][T10781] usb 3-1: Manufacturer: syz [ 1302.011997][T10781] usb 3-1: SerialNumber: syz [ 1302.063163][T10781] usb 3-1: config 0 descriptor?? [ 1302.093940][T10781] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1302.215237][ T5950] usb 7-1: Using ep0 maxpacket: 8 [ 1302.217904][ T5950] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1302.217931][ T5950] usb 7-1: config 179 has no interface number 0 [ 1302.217976][ T5950] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1302.218004][ T5950] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1302.218044][ T5950] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1302.218067][ T5950] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1302.218112][ T5950] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1302.218135][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.226018][T16668] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1302.881640][ T5935] usb 7-1: USB disconnect, device number 52 [ 1302.916533][T10781] gspca_sunplus: reg_r err -32 [ 1303.559295][T16697] binder: 16695:16697 ioctl 4018620d 0 returned -22 [ 1303.580799][T16697] binder: 16695:16697 ioctl c0306201 200000000300 returned -11 [ 1303.996139][T10781] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1304.566018][ T31] usb 3-1: USB disconnect, device number 106 [ 1307.527325][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1307.527367][ T37] audit: type=1326 audit(1768416088.389:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece647f749 code=0x7ffc0000 [ 1307.527833][ T37] audit: type=1326 audit(1768416088.389:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece647f749 code=0x7ffc0000 [ 1307.528097][ T37] audit: type=1326 audit(1768416088.399:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fece647f749 code=0x7ffc0000 [ 1307.528337][ T37] audit: type=1326 audit(1768416088.399:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece647f749 code=0x7ffc0000 [ 1307.528472][ T37] audit: type=1326 audit(1768416088.399:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece647f749 code=0x7ffc0000 [ 1307.528860][ T37] audit: type=1326 audit(1768416088.409:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fece647e1ff code=0x7ffc0000 [ 1307.529135][ T37] audit: type=1326 audit(1768416088.409:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece647f749 code=0x7ffc0000 [ 1307.529375][ T37] audit: type=1326 audit(1768416088.409:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16725 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece647f749 code=0x7ffc0000 [ 1308.896517][ T5946] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1309.055998][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 1309.058966][ T5946] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1309.058994][ T5946] usb 2-1: config 0 has no interface number 0 [ 1309.059040][ T5946] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1309.062152][ T5946] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1309.062182][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.062204][ T5946] usb 2-1: Product: syz [ 1309.062213][ T5946] usb 2-1: Manufacturer: syz [ 1309.062221][ T5946] usb 2-1: SerialNumber: syz [ 1309.097547][ T5946] usb 2-1: config 0 descriptor?? [ 1309.141601][ T5946] f81534 2-1:0.12: required endpoints missing [ 1309.251162][T16739] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1309.656798][T16743] binder: 16742:16743 ioctl 4018620d 0 returned -22 [ 1309.722943][T16743] binder: 16742:16743 ioctl c0306201 200000000300 returned -11 [ 1310.386093][ T5935] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1310.546059][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 1310.558507][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.560600][ T5935] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1310.560619][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.560631][ T5935] usb 6-1: Product: syz [ 1310.560640][ T5935] usb 6-1: Manufacturer: syz [ 1310.560648][ T5935] usb 6-1: SerialNumber: syz [ 1310.564925][ T5935] usb 6-1: config 0 descriptor?? [ 1310.569916][ T5935] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1311.427279][ T5935] gspca_sunplus: reg_r err -32 [ 1312.436097][ T5935] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1312.460777][ T5935] usb 6-1: USB disconnect, device number 9 [ 1312.577456][T12723] usb 2-1: USB disconnect, device number 97 [ 1313.346008][ T5946] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1313.394302][T16785] binder: 16784:16785 ioctl 4018620d 0 returned -22 [ 1313.424631][T16785] binder: 16784:16785 ioctl c0306201 200000000300 returned -11 [ 1313.495980][ T5946] usb 7-1: Using ep0 maxpacket: 16 [ 1313.526931][ T5946] usb 7-1: config 0 has no interfaces? [ 1313.526971][ T5946] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1313.526994][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.570000][ T5946] usb 7-1: config 0 descriptor?? [ 1313.868050][T12723] usb 7-1: USB disconnect, device number 53 [ 1314.074560][ T5935] hid_parser_main: 5 callbacks suppressed [ 1314.074582][ T5935] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1314.154269][ T5935] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1314.311734][T15236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1314.332729][T15236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1314.338854][T15236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1314.348705][T15236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1314.350808][T15236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1314.598179][T16793] fido_id[16793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1315.395100][T16805] bond1: option primary_reselect: invalid value (13) [ 1315.452462][T16805] bond1 (unregistering): Released all slaves [ 1316.152235][T16817] binder: BINDER_SET_CONTEXT_MGR already set [ 1316.152252][T16817] binder: 16815:16817 ioctl 4018620d 200000000040 returned -16 [ 1316.152934][T16792] chnl_net:caif_netlink_parms(): no params data found [ 1316.173198][T16817] binder: 16815:16817 ioctl c0306201 200000000300 returned -11 [ 1316.486109][T12721] Bluetooth: hci3: command tx timeout [ 1316.549789][ T5935] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1316.698080][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.698122][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1316.724469][ T5935] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1316.724525][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.724547][ T5935] usb 2-1: Product: syz [ 1316.724563][ T5935] usb 2-1: Manufacturer: syz [ 1316.724578][ T5935] usb 2-1: SerialNumber: syz [ 1316.755981][ T5950] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1316.784916][ T5935] usb 2-1: config 0 descriptor?? [ 1316.796994][T16828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3116'. [ 1316.797381][T16831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3116'. [ 1316.798164][T16792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.798296][T16792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.798515][T16792] bridge_slave_0: entered allmulticast mode [ 1316.804340][ T5935] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1316.854403][T16792] bridge_slave_0: entered promiscuous mode [ 1316.869261][T16792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.869384][T16792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.869620][T16792] bridge_slave_1: entered allmulticast mode [ 1316.873219][T16792] bridge_slave_1: entered promiscuous mode [ 1316.874389][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1316.926768][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1316.926799][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.926819][ T5950] usb 1-1: Product: syz [ 1316.926835][ T5950] usb 1-1: Manufacturer: syz [ 1316.926848][ T5950] usb 1-1: SerialNumber: syz [ 1316.981981][ T5935] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1317.297219][T16792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.323540][T16792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.462792][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1317.462835][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1317.517206][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1317.517240][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1317.517702][ T5950] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1317.641486][ T5950] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1317.666645][ T5950] usb 1-1: USB disconnect, device number 5 [ 1317.726101][ T5946] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1317.807335][T16792] team0: Port device team_slave_0 added [ 1317.823957][T16792] team0: Port device team_slave_1 added [ 1318.747007][T12721] Bluetooth: hci3: command tx timeout [ 1318.781664][ T5946] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1318.781745][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.781767][ T5946] usb 3-1: Product: syz [ 1318.781784][ T5946] usb 3-1: Manufacturer: syz [ 1318.781799][ T5946] usb 3-1: SerialNumber: syz [ 1318.942968][T16851] binder: BINDER_SET_CONTEXT_MGR already set [ 1318.942984][T16851] binder: 16850:16851 ioctl 4018620d 200000000040 returned -16 [ 1318.943904][T16851] binder: 16850:16851 ioctl c0306201 200000000300 returned -11 [ 1318.954162][T16792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.954181][T16792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.954208][T16792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.029035][T16792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.029053][T16792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.029126][T16792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.210156][T16857] input: syz0 as /devices/virtual/input/input31 [ 1319.289950][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1319.289987][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1319.292691][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1319.292728][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1319.293154][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1319.314545][ T5946] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1319.608219][ T5946] usb 2-1: USB disconnect, device number 98 [ 1319.865137][T16792] hsr_slave_0: entered promiscuous mode [ 1319.868856][T16792] hsr_slave_1: entered promiscuous mode [ 1319.884453][T16792] debugfs: 'hsr0' already exists in 'hsr' [ 1319.884486][T16792] Cannot create hsr debugfs directory [ 1320.511824][ T31] IPVS: starting estimator thread 0... [ 1320.536729][ T5935] usb 3-1: USB disconnect, device number 107 [ 1320.597164][T16871] IPVS: using max 10 ests per chain, 24000 per kthread [ 1320.856118][T12721] Bluetooth: hci3: command tx timeout [ 1321.768482][T16885] binder: BINDER_SET_CONTEXT_MGR already set [ 1321.768494][T16885] binder: 16884:16885 ioctl 4018620d 200000000040 returned -16 [ 1321.769482][T16885] binder: 16884:16885 ioctl c0306201 200000000300 returned -11 [ 1321.857094][ T5950] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1321.868435][T16792] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.056011][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 1322.061793][ T5950] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1322.061824][ T5950] usb 1-1: config 0 has no interface number 0 [ 1322.061875][ T5950] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1322.061904][ T5950] usb 1-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1322.065211][ T5950] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1322.065244][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.065267][ T5950] usb 1-1: Product: syz [ 1322.065284][ T5950] usb 1-1: Manufacturer: syz [ 1322.065301][ T5950] usb 1-1: SerialNumber: syz [ 1322.103542][ T5950] usb 1-1: config 0 descriptor?? [ 1322.107829][T16881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1322.115804][ T5950] asix 1-1:0.251: probe with driver asix failed with error -22 [ 1322.146775][T16890] program syz.1.3132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1322.502102][T16792] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.876674][T12721] Bluetooth: hci3: command tx timeout [ 1322.969745][T16792] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.993112][T16900] input: syz0 as /devices/virtual/input/input32 [ 1323.282352][T16792] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.566104][ T5946] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1323.721268][ T5946] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1323.721301][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.721322][ T5946] usb 2-1: Product: syz [ 1323.721336][ T5946] usb 2-1: Manufacturer: syz [ 1323.721352][ T5946] usb 2-1: SerialNumber: syz [ 1324.171384][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1324.171446][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1324.172376][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1324.172425][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1324.173027][ T5946] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1324.256921][ T5946] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1324.676999][ T6151] usb 1-1: USB disconnect, device number 6 [ 1324.804480][T16932] binder: 16931:16932 ioctl c0306201 0 returned -14 [ 1324.816903][T16932] binder: 16931:16932 ioctl c0306201 200000000300 returned -11 [ 1324.823856][T16792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1324.927946][T16792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1325.012909][T16792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1325.086428][T16792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1325.336080][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1325.464563][T16949] sit1: entered allmulticast mode [ 1325.724638][ T10] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1325.724986][ T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.725043][ T10] usb 1-1: config 8 has no interface number 0 [ 1325.725241][ T10] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1325.725305][ T10] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1325.725418][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1325.725481][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.736902][ T10] ir_toy 1-1:8.177: required endpoints not found [ 1326.719656][ T6151] usb 2-1: USB disconnect, device number 99 [ 1327.062076][T16792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.191672][T16792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.235136][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.237454][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.291854][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.291955][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.129081][T16792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.809488][ T37] audit: type=1326 audit(1768416109.629:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1328.810248][ T37] audit: type=1326 audit(1768416109.629:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1328.810649][ T37] audit: type=1326 audit(1768416109.639:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1328.810890][ T37] audit: type=1326 audit(1768416109.649:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1328.811129][ T37] audit: type=1326 audit(1768416109.649:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1328.811346][ T37] audit: type=1326 audit(1768416109.649:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0a536e1ff code=0x7ffc0000 [ 1328.811695][ T37] audit: type=1326 audit(1768416109.659:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1328.811868][ T37] audit: type=1326 audit(1768416109.659:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16969 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1329.845002][T12723] usb 1-1: USB disconnect, device number 7 [ 1329.930481][T16985] binder: 16983:16985 ioctl c0306201 0 returned -14 [ 1329.960412][T16985] binder: 16983:16985 ioctl c0306201 200000000300 returned -11 [ 1330.056106][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1330.097971][T16792] veth0_vlan: entered promiscuous mode [ 1330.119201][T16792] veth1_vlan: entered promiscuous mode [ 1330.165359][T16792] veth0_macvtap: entered promiscuous mode [ 1330.177805][T16792] veth1_macvtap: entered promiscuous mode [ 1330.372167][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.372210][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1330.392213][ T10] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1330.392246][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.392371][ T10] usb 2-1: Product: syz [ 1330.392386][ T10] usb 2-1: Manufacturer: syz [ 1330.392401][ T10] usb 2-1: SerialNumber: syz [ 1330.509298][ T10] usb 2-1: config 0 descriptor?? [ 1330.518290][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1330.536831][T16792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.552227][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1330.613168][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1330.649153][T16792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.793661][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.793924][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.793965][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.794000][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.676239][ T987] usb 2-1: USB disconnect, device number 100 [ 1331.738578][T13529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.738603][T13529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.143888][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.143911][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.706396][ T9954] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1332.866100][ T9954] usb 6-1: Using ep0 maxpacket: 32 [ 1332.869544][ T9954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.869579][ T9954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.869623][ T9954] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1332.869648][ T9954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.947986][ T9954] usb 6-1: config 0 descriptor?? [ 1332.963133][ T9954] hub 6-1:0.0: USB hub found [ 1333.390516][ T9954] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1333.605126][ T9954] usbhid 6-1:0.0: can't add hid device: -71 [ 1333.605229][ T9954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1333.649499][ T9954] usb 6-1: USB disconnect, device number 10 [ 1334.570499][T17038] binder: 17035:17038 ioctl c0306201 0 returned -14 [ 1334.587967][T17038] binder: 17035:17038 ioctl c0306201 200000000300 returned -11 [ 1335.606556][ T37] audit: type=1326 audit(1768416116.139:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1335.606616][ T37] audit: type=1326 audit(1768416116.139:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1335.606645][ T37] audit: type=1326 audit(1768416116.139:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1335.606668][ T37] audit: type=1326 audit(1768416116.139:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1335.606704][ T37] audit: type=1326 audit(1768416116.139:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1335.606727][ T37] audit: type=1326 audit(1768416116.139:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0a536e1ff code=0x7ffc0000 [ 1335.606752][ T37] audit: type=1326 audit(1768416116.139:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1335.606776][ T37] audit: type=1326 audit(1768416116.139:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17042 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a536f749 code=0x7ffc0000 [ 1335.904006][T17048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3166'. [ 1337.626383][T17069] bond1: option primary_reselect: invalid value (13) [ 1337.680104][T17069] bond1 (unregistering): Released all slaves [ 1339.152265][T17085] binder: 17084:17085 ioctl c0306201 200000000300 returned -11 [ 1339.443307][T17088] bond1: option primary_reselect: invalid value (13) [ 1339.469522][T17088] bond1 (unregistering): Released all slaves [ 1339.476111][T12723] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1339.814841][T12723] usb 3-1: Using ep0 maxpacket: 32 [ 1339.827070][T12723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.827106][T12723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.827146][T12723] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1339.827170][T12723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.855411][T12723] usb 3-1: config 0 descriptor?? [ 1339.863153][T12723] hub 3-1:0.0: USB hub found [ 1340.307921][T12723] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1340.516051][T12723] usbhid 3-1:0.0: can't add hid device: -71 [ 1340.516172][T12723] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1340.549648][T12723] usb 3-1: USB disconnect, device number 108 [ 1340.574519][ T31] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1340.743236][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.743282][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1340.770911][ T31] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1340.770943][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.770956][ T31] usb 7-1: Product: syz [ 1340.770964][ T31] usb 7-1: Manufacturer: syz [ 1340.770972][ T31] usb 7-1: SerialNumber: syz [ 1340.774216][ T31] usb 7-1: config 0 descriptor?? [ 1340.824198][ T31] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1340.867152][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1340.890540][ T31] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1342.608344][ T805] IPVS: starting estimator thread 0... [ 1342.718924][T17119] IPVS: using max 16 ests per chain, 38400 per kthread [ 1343.548295][T10781] usb 7-1: USB disconnect, device number 54 [ 1348.556437][T15236] Bluetooth: hci3: command 0x0405 tx timeout [ 1349.626185][T10781] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1349.784406][T10781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.784541][T10781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.784567][T10781] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1349.784611][T10781] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.784634][T10781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.889270][T10781] usb 2-1: config 0 descriptor?? [ 1350.327242][T10781] usbhid 2-1:0.0: can't add hid device: -71 [ 1350.327322][T10781] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1350.391188][T10781] usb 2-1: USB disconnect, device number 101 [ 1350.670667][T17187] sit1: entered allmulticast mode [ 1351.961511][T15236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1352.031380][T15236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1352.032872][T15236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1352.034702][T15236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1352.076750][T15236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1354.157210][T15236] Bluetooth: hci4: command tx timeout [ 1355.253273][T17226] netlink: 'syz.1.3201': attribute type 10 has an invalid length. [ 1355.253289][T17226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3201'. [ 1355.490584][T17226] team0: Port device geneve0 added [ 1355.575987][T10781] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1355.729836][T10781] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 1355.729866][T10781] usb 2-1: config 0 has no interface number 0 [ 1355.729899][T10781] usb 2-1: config 0 interface 82 has no altsetting 0 [ 1355.732445][T10781] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=22.6d [ 1355.732472][T10781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.732533][T10781] usb 2-1: Product: syz [ 1355.732549][T10781] usb 2-1: Manufacturer: syz [ 1355.732564][T10781] usb 2-1: SerialNumber: syz [ 1355.796765][T10781] usb 2-1: config 0 descriptor?? [ 1355.811360][T10781] quatech2 2-1:0.82: Quatech 2nd gen USB to Serial Driver converter detected [ 1356.014175][T10781] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1356.014265][T10781] quatech2 2-1:0.82: probe with driver quatech2 failed with error -71 [ 1356.033808][T10781] usb 2-1: USB disconnect, device number 102 [ 1356.236003][T15236] Bluetooth: hci4: command tx timeout [ 1356.768773][T17197] chnl_net:caif_netlink_parms(): no params data found [ 1357.396053][ T6151] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1357.529625][T17197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.532002][T17197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.532247][T17197] bridge_slave_0: entered allmulticast mode [ 1357.545989][ T6151] usb 6-1: Using ep0 maxpacket: 8 [ 1357.577261][T17197] bridge_slave_0: entered promiscuous mode [ 1357.609696][T17197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.609865][T17197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.610413][T17197] bridge_slave_1: entered allmulticast mode [ 1357.639108][T17197] bridge_slave_1: entered promiscuous mode [ 1357.851980][ T6151] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1357.852837][ T6151] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1357.852874][ T6151] usb 6-1: can't read configurations, error -71 [ 1358.029994][T17197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.032322][T17197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.326917][T15236] Bluetooth: hci4: command tx timeout [ 1358.459356][T17273] netlink: 'syz.1.3215': attribute type 10 has an invalid length. [ 1358.459373][T17273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3215'. [ 1358.757180][ T6250] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1358.892535][T17197] team0: Port device team_slave_0 added [ 1358.908372][ T6250] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 1358.908391][ T6250] usb 2-1: config 0 has no interface number 0 [ 1358.908410][ T6250] usb 2-1: config 0 interface 82 has no altsetting 0 [ 1358.911008][ T6250] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=22.6d [ 1358.911038][ T6250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.911050][ T6250] usb 2-1: Product: syz [ 1358.911058][ T6250] usb 2-1: Manufacturer: syz [ 1358.911066][ T6250] usb 2-1: SerialNumber: syz [ 1358.917460][ T6250] usb 2-1: config 0 descriptor?? [ 1358.933895][ T6250] quatech2 2-1:0.82: Quatech 2nd gen USB to Serial Driver converter detected [ 1358.956252][T12723] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1358.992935][T17197] team0: Port device team_slave_1 added [ 1359.112518][T12723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.112553][T12723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.112577][T12723] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1359.112620][T12723] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1359.112741][T12723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.179087][T12723] usb 7-1: config 0 descriptor?? [ 1359.290801][ T6250] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1359.290930][ T6250] quatech2 2-1:0.82: probe with driver quatech2 failed with error -71 [ 1359.383621][ T6250] usb 2-1: USB disconnect, device number 103 [ 1359.543110][T17197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.543126][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.543143][T17197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.647236][T17197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.647254][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.647282][T17197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.722307][T12723] usbhid 7-1:0.0: can't add hid device: -71 [ 1359.722433][T12723] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1359.747065][T12723] usb 7-1: USB disconnect, device number 55 [ 1360.445963][T15236] Bluetooth: hci4: command tx timeout [ 1360.609102][T17197] hsr_slave_0: entered promiscuous mode [ 1360.610471][T17197] hsr_slave_1: entered promiscuous mode [ 1360.611363][T17197] debugfs: 'hsr0' already exists in 'hsr' [ 1360.611387][T17197] Cannot create hsr debugfs directory [ 1361.827359][ T5950] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1362.092183][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 1362.938219][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.938288][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.427142][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1364.431537][ T5950] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1364.431573][ T5950] usb 3-1: can't read configurations, error -71 [ 1366.372413][T17197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.736006][ T805] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1366.976576][ T805] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1366.976612][ T805] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1366.976657][ T805] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1366.976682][ T805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.986427][ T5935] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1367.672511][ T5935] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1367.672545][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.672567][ T5935] usb 6-1: Product: syz [ 1367.672583][ T5935] usb 6-1: Manufacturer: syz [ 1367.672599][ T5935] usb 6-1: SerialNumber: syz [ 1367.926141][ T805] usb 7-1: usb_control_msg returned -32 [ 1367.926192][ T805] usbtmc 7-1:16.0: can't read capabilities [ 1368.042066][T17197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.299004][ T6014] IPVS: starting estimator thread 0... [ 1368.368751][ T5935] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1368.368826][ T5935] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1368.375242][ T5935] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1368.375303][ T5935] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1368.378832][ T5935] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1368.386125][T17368] IPVS: using max 9 ests per chain, 21600 per kthread [ 1368.477213][ T5935] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1368.718860][T17197] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.757763][ T5935] usb 6-1: USB disconnect, device number 13 [ 1369.599859][T15092] usb 7-1: USB disconnect, device number 56 [ 1370.219033][ T6152] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1370.246038][ T6152] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1371.554723][T17197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1371.959107][T17197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1372.241536][T17197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1372.355964][T17197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1372.816056][T15092] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1372.928915][T17197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.966046][T15092] usb 6-1: Using ep0 maxpacket: 32 [ 1373.004073][T15092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.004108][T15092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.004220][T15092] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1373.004283][T15092] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.241082][T15092] usb 6-1: config 0 descriptor?? [ 1373.447752][T15092] hub 6-1:0.0: USB hub found [ 1373.485999][ T6151] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1374.772988][T15092] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1375.248355][ T6151] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1375.248435][ T6151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.248457][ T6151] usb 3-1: Product: syz [ 1375.248474][ T6151] usb 3-1: Manufacturer: syz [ 1375.248489][ T6151] usb 3-1: SerialNumber: syz [ 1375.252683][T17197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.276080][ T6490] Bluetooth: hci0: command 0x1003 tx timeout [ 1375.349121][T15236] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1376.733331][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.751344][ T6151] usb 3-1: can't set config #1, error -71 [ 1376.752301][T15092] usbhid 6-1:0.0: can't add hid device: -71 [ 1376.752381][T15092] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1376.757936][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.792580][ T6151] usb 3-1: USB disconnect, device number 111 [ 1376.844780][T15092] usb 6-1: USB disconnect, device number 14 [ 1376.956237][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.956369][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.746023][ T31] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1378.865792][T17197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.908386][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1378.908420][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1378.908465][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1378.908490][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.016077][ T6151] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1379.075677][T17197] veth0_vlan: entered promiscuous mode [ 1379.096285][T17197] veth1_vlan: entered promiscuous mode [ 1379.166027][ T6151] usb 6-1: Using ep0 maxpacket: 32 [ 1379.167949][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.167969][ T6151] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1379.167991][ T6151] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1379.168006][ T6151] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.169588][ T31] usb 3-1: usb_control_msg returned -32 [ 1379.169636][ T31] usbtmc 3-1:16.0: can't read capabilities [ 1379.181392][ T6151] usb 6-1: config 0 descriptor?? [ 1379.220886][ T6151] hub 6-1:0.0: USB hub found [ 1379.343527][T17197] veth0_macvtap: entered promiscuous mode [ 1379.359937][T17197] veth1_macvtap: entered promiscuous mode [ 1379.405967][ T6151] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1379.428781][T17197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.460350][T17197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.642521][T17444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.646514][T17444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.665290][T17444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.672087][T17444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.819903][ T6151] usbhid 6-1:0.0: can't add hid device: -71 [ 1379.820095][ T6151] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1379.840577][ T6151] usb 6-1: USB disconnect, device number 15 [ 1380.234923][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.234946][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.392462][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.392486][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.024763][T17508] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3265'. [ 1381.106074][ T5935] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1381.263625][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.263669][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1381.266018][ T5935] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1381.266048][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.266069][ T5935] usb 2-1: Product: syz [ 1381.266084][ T5935] usb 2-1: Manufacturer: syz [ 1381.266099][ T5935] usb 2-1: SerialNumber: syz [ 1381.277512][ T5935] usb 2-1: config 0 descriptor?? [ 1381.331721][T12723] usb 3-1: USB disconnect, device number 112 [ 1381.349091][ T5935] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1381.378795][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1381.391042][ T5935] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1381.570896][T17521] program syz.6.3268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1381.679963][ T6490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1381.732678][ T6490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1381.740450][ T6490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1381.750108][ T6490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1381.758408][ T6490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1382.799456][ T31] usb 2-1: USB disconnect, device number 104 [ 1383.370174][T17546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1383.411254][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'. [ 1383.837370][T15236] Bluetooth: hci0: command tx timeout [ 1384.145644][ T2993] Bluetooth: hci1: Frame reassembly failed (-84) [ 1384.145705][ T2993] Bluetooth: hci1: Frame reassembly failed (-84) [ 1385.263726][ T3545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.916244][ T6490] Bluetooth: hci0: command tx timeout [ 1386.156058][ T6490] Bluetooth: hci1: command 0x1003 tx timeout [ 1386.156095][T15236] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1386.422522][ T3545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.461731][T17597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3290'. [ 1386.942482][T17527] chnl_net:caif_netlink_parms(): no params data found [ 1387.263694][ T3545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.426024][ T6250] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1387.578139][ T6250] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.578188][ T6250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1387.580496][ T6250] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1387.580513][ T6250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.580525][ T6250] usb 2-1: Product: syz [ 1387.580533][ T6250] usb 2-1: Manufacturer: syz [ 1387.580541][ T6250] usb 2-1: SerialNumber: syz [ 1387.583682][ T6250] usb 2-1: config 0 descriptor?? [ 1387.661550][ T6250] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1387.672316][ T6250] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1387.724075][ T6250] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1387.833562][ T3545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.996024][ T6490] Bluetooth: hci0: command tx timeout [ 1388.492277][T17527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.504431][T17527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.504618][T17527] bridge_slave_0: entered allmulticast mode [ 1388.521463][T17527] bridge_slave_0: entered promiscuous mode [ 1388.534898][T17527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.550028][T17527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.550217][T17527] bridge_slave_1: entered allmulticast mode [ 1388.553593][T17527] bridge_slave_1: entered promiscuous mode [ 1389.257844][T17527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.275126][T17527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.597043][T17637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1389.744808][T17527] team0: Port device team_slave_0 added [ 1389.767658][T17527] team0: Port device team_slave_1 added [ 1389.840116][T17639] binder: 17638:17639 ioctl 4018620d 0 returned -22 [ 1389.841537][T17639] binder: 17638:17639 ioctl c0306201 200000000300 returned -11 [ 1390.076017][ T6490] Bluetooth: hci0: command tx timeout [ 1390.230558][ T3545] bridge_slave_1: left allmulticast mode [ 1390.230587][ T3545] bridge_slave_1: left promiscuous mode [ 1390.230858][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.338944][ T3545] bridge_slave_0: left allmulticast mode [ 1390.338968][ T3545] bridge_slave_0: left promiscuous mode [ 1390.339160][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.378536][T10781] usb 2-1: USB disconnect, device number 105 [ 1392.087550][T10781] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1392.259694][T10781] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 1392.259723][T10781] usb 6-1: config 0 has no interface number 0 [ 1392.259759][T10781] usb 6-1: config 0 interface 82 has no altsetting 0 [ 1392.262881][T10781] usb 6-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=22.6d [ 1392.262911][T10781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.262932][T10781] usb 6-1: Product: syz [ 1392.262947][T10781] usb 6-1: Manufacturer: syz [ 1392.262964][T10781] usb 6-1: SerialNumber: syz [ 1392.318555][T10781] usb 6-1: config 0 descriptor?? [ 1392.347440][T10781] quatech2 6-1:0.82: Quatech 2nd gen USB to Serial Driver converter detected [ 1392.537909][T10781] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1392.538009][T10781] quatech2 6-1:0.82: probe with driver quatech2 failed with error -71 [ 1392.637166][T10781] usb 6-1: USB disconnect, device number 16 [ 1392.949342][T17665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3314'. [ 1393.057121][T17667] binder: 17666:17667 ioctl 4018620d 0 returned -22 [ 1393.057994][T17667] binder: 17666:17667 ioctl c0306201 200000000300 returned -11 [ 1393.787215][ T5905] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1393.959290][ T5905] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1393.959331][ T5905] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.959375][ T5905] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1393.959400][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.240799][ T5905] usb 6-1: usb_control_msg returned -32 [ 1394.240848][ T5905] usbtmc 6-1:16.0: can't read capabilities [ 1394.547571][ T1475] Bluetooth: hci1: Frame reassembly failed (-84) [ 1394.547764][ T1475] Bluetooth: hci1: Frame reassembly failed (-84) [ 1394.547925][ T1475] Bluetooth: hci1: Frame reassembly failed (-84) [ 1394.548061][ T1475] Bluetooth: hci1: Frame reassembly failed (-84) [ 1394.548228][ T1475] Bluetooth: hci1: Frame reassembly failed (-84) [ 1394.548398][ T1475] Bluetooth: hci1: Frame reassembly failed (-84) [ 1394.730756][ T8076] usb 6-1: USB disconnect, device number 17 [ 1395.286469][ T6250] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1395.497693][ T6250] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.497722][ T6250] usb 6-1: config 0 has no interfaces? [ 1395.500263][ T6250] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1395.500282][ T6250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.500294][ T6250] usb 6-1: Product: syz [ 1395.500302][ T6250] usb 6-1: Manufacturer: syz [ 1395.500311][ T6250] usb 6-1: SerialNumber: syz [ 1395.504304][ T6250] usb 6-1: config 0 descriptor?? [ 1395.744769][T17690] loop2: detected capacity change from 0 to 7 [ 1395.808249][T17375] Dev loop2: unable to read RDB block 7 [ 1395.808285][T17375] loop2: AHDI p1 p2 p3 p4 [ 1395.808316][T17375] loop2: partition table partially beyond EOD, truncated [ 1395.811716][T17375] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1395.811742][T17375] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1395.811757][T17375] loop2: p3 start 16777215 is beyond EOD, truncated [ 1395.864888][T17690] Dev loop2: unable to read RDB block 7 [ 1395.864923][T17690] loop2: AHDI p1 p2 p3 p4 [ 1395.864956][T17690] loop2: partition table partially beyond EOD, truncated [ 1395.865208][T17690] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1395.865229][T17690] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1395.865246][T17690] loop2: p3 start 16777215 is beyond EOD, truncated [ 1395.928002][ T5950] usb 6-1: USB disconnect, device number 18 [ 1396.118918][T17708] binder: 17707:17708 ioctl 4018620d 0 returned -22 [ 1396.120393][T17708] binder: 17707:17708 ioctl c0306201 200000000300 returned -11 [ 1396.186932][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.262240][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.298904][ T3545] bond0 (unregistering): Released all slaves [ 1396.337423][T17527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.337446][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.337476][T17527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.547740][T17693] syzkaller0: entered promiscuous mode [ 1396.547757][T17693] syzkaller0: entered allmulticast mode [ 1396.556932][ T6490] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1396.668065][T17527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.668082][T17527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.668108][T17527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.744191][ T3545] tipc: Left network mode [ 1397.723998][T17725] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3331'. [ 1398.046136][ T5905] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1398.125983][ T6250] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1398.227387][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 1398.229371][ T5905] usb 7-1: config 0 has no interfaces? [ 1398.229403][ T5905] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1398.229425][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.234682][ T5905] usb 7-1: config 0 descriptor?? [ 1398.308404][ T6250] usb 6-1: config 0 has no interfaces? [ 1398.310538][ T6250] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1398.310569][ T6250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.310589][ T6250] usb 6-1: Product: syz [ 1398.310600][ T6250] usb 6-1: Manufacturer: syz [ 1398.310609][ T6250] usb 6-1: SerialNumber: syz [ 1398.316987][ T6250] usb 6-1: config 0 descriptor?? [ 1398.413012][T17527] hsr_slave_0: entered promiscuous mode [ 1398.413904][T17527] hsr_slave_1: entered promiscuous mode [ 1398.414489][T17527] debugfs: 'hsr0' already exists in 'hsr' [ 1398.414506][T17527] Cannot create hsr debugfs directory [ 1398.533978][ T5905] usb 7-1: USB disconnect, device number 57 [ 1398.836277][ T8076] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1398.985915][ T8076] usb 2-1: Using ep0 maxpacket: 16 [ 1398.990800][ T8076] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1398.991156][ T8076] usb 2-1: config 0 has no interface number 0 [ 1398.991322][ T8076] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1398.991350][ T8076] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1399.055014][ T8076] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1399.055078][ T8076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.055140][ T8076] usb 2-1: Product: syz [ 1399.055211][ T8076] usb 2-1: Manufacturer: syz [ 1399.055228][ T8076] usb 2-1: SerialNumber: syz [ 1399.331758][ T8076] usb 2-1: config 0 descriptor?? [ 1399.418977][T17741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1399.449041][T17741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1400.623273][T17741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1400.639080][T17741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1400.969550][T15236] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1401.180591][ T8076] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1401.180634][ T8076] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 1401.181319][ T8076] asix 2-1:0.251: probe with driver asix failed with error -5 [ 1402.247833][ T987] usb 6-1: USB disconnect, device number 19 [ 1402.766362][ T8076] usb 2-1: USB disconnect, device number 106 [ 1402.885978][ T3545] hsr_slave_0: left promiscuous mode [ 1402.927265][ T3545] hsr_slave_1: left promiscuous mode [ 1402.928429][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1402.928466][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.979292][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.979312][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.321594][ T3545] veth1_macvtap: left promiscuous mode [ 1403.321657][ T3545] veth0_macvtap: left promiscuous mode [ 1403.321793][ T3545] veth1_vlan: left promiscuous mode [ 1403.321899][ T3545] veth0_vlan: left promiscuous mode [ 1404.065062][ T8076] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1404.081861][ T8076] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1404.488731][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 1406.466545][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 1406.767945][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 1409.899012][T17756] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1410.036179][T17761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1410.055411][T17770] syzkaller0: entered promiscuous mode [ 1410.055438][T17770] syzkaller0: entered allmulticast mode [ 1410.072865][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3346'. [ 1410.453290][T10379] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1410.656058][T10379] usb 6-1: Using ep0 maxpacket: 16 [ 1410.658422][T10379] usb 6-1: config 0 has no interfaces? [ 1410.658444][T10379] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1410.658457][T10379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.674826][T10379] usb 6-1: config 0 descriptor?? [ 1410.826045][ T6250] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1410.996044][ T6250] usb 2-1: Using ep0 maxpacket: 16 [ 1411.003226][ T6250] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1411.003243][ T6250] usb 2-1: config 0 has no interface number 0 [ 1411.003272][ T6250] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1411.003287][ T6250] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1411.009698][ T6250] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1411.009722][ T6250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.009733][ T6250] usb 2-1: Product: syz [ 1411.009741][ T6250] usb 2-1: Manufacturer: syz [ 1411.009750][ T6250] usb 2-1: SerialNumber: syz [ 1411.060025][ T6250] usb 2-1: config 0 descriptor?? [ 1411.061082][T17811] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1411.061197][T17811] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1411.213281][ T6152] usb 6-1: USB disconnect, device number 20 [ 1411.265546][T17811] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1411.265702][T17811] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1411.468002][ T6250] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1411.468035][ T6250] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 1411.468322][ T6250] asix 2-1:0.251: probe with driver asix failed with error -5 [ 1412.105981][ T5878] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1412.270991][ T5878] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.271020][ T5878] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1412.304227][ T5878] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1412.304246][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.304257][ T5878] usb 6-1: Product: syz [ 1412.304265][ T5878] usb 6-1: Manufacturer: syz [ 1412.304274][ T5878] usb 6-1: SerialNumber: syz [ 1412.399687][ T5878] usb 6-1: config 0 descriptor?? [ 1412.430538][ T5878] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1412.455188][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1412.489286][ T6490] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1412.517006][ T5878] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1412.616914][T17822] netlink: 'syz.6.3353': attribute type 12 has an invalid length. [ 1412.690072][ T3545] IPVS: stop unused estimator thread 0... [ 1413.017360][T10379] usb 6-1: USB disconnect, device number 21 [ 1413.221109][T10781] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1413.222679][T10781] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1413.489553][T17840] sit1: entered allmulticast mode [ 1413.602747][T17839] netlink: 'syz.5.3356': attribute type 12 has an invalid length. [ 1413.714980][T10781] usb 2-1: USB disconnect, device number 107 [ 1414.095069][T17844] hid-generic 0000:0000:0000.000F: pid 17844 passed too short report [ 1414.859967][ T5878] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1414.930041][ T6250] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1415.010084][ T5878] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.013027][ T5878] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1415.013056][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.013077][ T5878] usb 1-1: Product: syz [ 1415.013092][ T5878] usb 1-1: Manufacturer: syz [ 1415.013107][ T5878] usb 1-1: SerialNumber: syz [ 1415.076018][ T6250] usb 6-1: Using ep0 maxpacket: 16 [ 1415.078528][ T6250] usb 6-1: config 0 has no interfaces? [ 1415.078573][ T6250] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1415.078598][ T6250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.141162][ T6250] usb 6-1: config 0 descriptor?? [ 1415.266396][ T5878] usb 1-1: selecting invalid altsetting 1 [ 1415.266875][ T5878] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1415.267013][ T5878] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1415.299643][ T5878] usb 1-1: USB disconnect, device number 8 [ 1415.428528][ T6250] usb 6-1: USB disconnect, device number 22 [ 1415.452207][T17527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1415.497821][T17527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1415.541889][T17527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1415.572794][T17527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1415.995175][T17527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.090650][T17527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.119528][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.119665][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.156637][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.156807][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1416.317752][ T5878] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1416.433225][T17527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1416.460735][T10379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1416.479083][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 1416.484201][ T5878] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1416.484230][ T5878] usb 6-1: config 0 has no interface number 0 [ 1416.484274][ T5878] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1416.484300][ T5878] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1416.494661][ T5878] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1416.494692][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.494712][ T5878] usb 6-1: Product: syz [ 1416.494727][ T5878] usb 6-1: Manufacturer: syz [ 1416.494742][ T5878] usb 6-1: SerialNumber: syz [ 1416.530163][T10379] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1416.541699][ T5878] usb 6-1: config 0 descriptor?? [ 1416.543360][T17898] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1416.543507][T17898] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1416.751524][T17898] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1416.751649][T17898] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1416.976197][ T5878] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1416.976232][ T5878] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 1416.976527][ T5878] asix 6-1:0.251: probe with driver asix failed with error -5 [ 1417.249855][T17527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.366002][T10781] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1417.480415][T17527] veth0_vlan: entered promiscuous mode [ 1417.507361][T17527] veth1_vlan: entered promiscuous mode [ 1417.526404][T10781] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.526435][T10781] usb 7-1: config 0 has no interfaces? [ 1417.530696][T10781] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1417.530728][T10781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.530749][T10781] usb 7-1: Product: syz [ 1417.530765][T10781] usb 7-1: Manufacturer: syz [ 1417.530782][T10781] usb 7-1: SerialNumber: syz [ 1417.589033][T10781] usb 7-1: config 0 descriptor?? [ 1417.695727][T17527] veth0_macvtap: entered promiscuous mode [ 1417.742587][T17527] veth1_macvtap: entered promiscuous mode [ 1417.811916][ T6250] usb 7-1: USB disconnect, device number 58 [ 1417.863159][T17527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.881564][T17902] hid-generic 0000:0000:0000.0010: pid 17902 passed too short report [ 1417.935787][T17527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.027869][ T1229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.028117][ T1229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.028155][ T1229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.028190][ T1229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.537227][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.537258][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.745075][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.745099][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.062718][T10781] usb 6-1: USB disconnect, device number 23 [ 1419.106065][ T987] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1419.141494][T17954] netlink: 'syz.2.3270': attribute type 12 has an invalid length. [ 1419.141518][T17954] netlink: 'syz.2.3270': attribute type 29 has an invalid length. [ 1419.141534][T17954] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3270'. [ 1419.296057][ T987] usb 1-1: Using ep0 maxpacket: 16 [ 1419.298690][ T987] usb 1-1: config 0 has no interfaces? [ 1419.298726][ T987] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1419.298750][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.303862][ T987] usb 1-1: config 0 descriptor?? [ 1419.540466][T10781] usb 1-1: USB disconnect, device number 9 [ 1420.539020][T15236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1420.576616][T15236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1420.578202][T15236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1420.579445][T15236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1420.609748][T15236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1420.980205][T18004] program syz.0.3395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1422.356325][T18025] netlink: 'syz.0.3404': attribute type 6 has an invalid length. [ 1422.736488][T15236] Bluetooth: hci1: command tx timeout [ 1422.994959][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.094476][T18037] netlink: 'syz.2.3410': attribute type 12 has an invalid length. [ 1423.094500][T18037] netlink: 'syz.2.3410': attribute type 29 has an invalid length. [ 1423.094514][T18037] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3410'. [ 1423.122375][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.122446][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.407798][T18058] input: syz0 as /devices/virtual/input/input33 [ 1424.740790][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.796050][T15236] Bluetooth: hci1: command tx timeout [ 1424.907485][T18076] netlink: 'syz.5.3426': attribute type 12 has an invalid length. [ 1424.907510][T18076] netlink: 'syz.5.3426': attribute type 29 has an invalid length. [ 1424.907523][T18076] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3426'. [ 1425.308470][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.360494][T17989] chnl_net:caif_netlink_parms(): no params data found [ 1425.496171][ T8076] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1425.658627][ T8076] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1425.658661][ T8076] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1425.658705][ T8076] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1425.658729][ T8076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.800590][ T6152] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1425.871809][ T8076] usb 1-1: usb_control_msg returned -32 [ 1425.871859][ T8076] usbtmc 1-1:16.0: can't read capabilities [ 1425.880628][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.945983][ T6152] usb 3-1: Using ep0 maxpacket: 16 [ 1425.949820][ T6152] usb 3-1: config 0 has no interfaces? [ 1425.949859][ T6152] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1425.949884][ T6152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.954949][ T6152] usb 3-1: config 0 descriptor?? [ 1426.304735][ T6152] usb 3-1: USB disconnect, device number 113 [ 1426.628622][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.629526][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.629768][T17989] bridge_slave_0: entered allmulticast mode [ 1426.633700][T17989] bridge_slave_0: entered promiscuous mode [ 1426.640916][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.641104][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.641310][T17989] bridge_slave_1: entered allmulticast mode [ 1426.643973][T17989] bridge_slave_1: entered promiscuous mode [ 1426.876192][T15236] Bluetooth: hci1: command tx timeout [ 1426.906489][T18145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3456'. [ 1426.941928][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.958254][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.955949][ T6490] Bluetooth: hci1: command tx timeout [ 1429.763985][ T8076] usb 1-1: USB disconnect, device number 10 [ 1429.916100][ T6490] Bluetooth: hci2: command 0x1003 tx timeout [ 1429.949925][T15236] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1430.545983][ T8076] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1430.560790][T17989] team0: Port device team_slave_0 added [ 1430.569712][T17989] team0: Port device team_slave_1 added [ 1430.847716][ T8076] usb 1-1: Using ep0 maxpacket: 16 [ 1430.849975][ T8076] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1430.850001][ T8076] usb 1-1: config 0 has no interface number 0 [ 1430.850044][ T8076] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1430.850076][ T8076] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1430.852641][ T8076] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1430.852670][ T8076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.852692][ T8076] usb 1-1: Product: syz [ 1430.852707][ T8076] usb 1-1: Manufacturer: syz [ 1430.852722][ T8076] usb 1-1: SerialNumber: syz [ 1430.886215][ T987] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1430.951987][ T8076] usb 1-1: config 0 descriptor?? [ 1430.952889][T18171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1430.953002][T18171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1431.079149][ T987] usb 3-1: config 0 has no interfaces? [ 1431.083868][ T987] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1431.083951][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.083972][ T987] usb 3-1: Product: syz [ 1431.083986][ T987] usb 3-1: Manufacturer: syz [ 1431.084001][ T987] usb 3-1: SerialNumber: syz [ 1431.137234][ T987] usb 3-1: config 0 descriptor?? [ 1431.170878][T18171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1431.171002][T18171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1431.256009][T10379] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1431.352156][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1431.352169][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.352185][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.374790][ T8076] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1431.374825][ T8076] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 1431.375135][ T8076] asix 1-1:0.251: probe with driver asix failed with error -5 [ 1431.405917][T10379] usb 6-1: Using ep0 maxpacket: 16 [ 1431.457718][T10379] usb 6-1: config 0 has no interfaces? [ 1431.457756][T10379] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1431.457781][T10379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.497701][T10379] usb 6-1: config 0 descriptor?? [ 1431.603471][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.603488][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.603516][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.727582][T10379] usb 6-1: USB disconnect, device number 24 [ 1431.918895][ T71] bridge_slave_1: left allmulticast mode [ 1431.918925][ T71] bridge_slave_1: left promiscuous mode [ 1431.919223][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.997470][ T71] bridge_slave_0: left allmulticast mode [ 1431.997499][ T71] bridge_slave_0: left promiscuous mode [ 1431.997761][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.162993][ T987] usb 1-1: USB disconnect, device number 11 [ 1433.748173][ T987] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1434.076938][ T987] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1434.076971][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.076994][ T987] usb 1-1: Product: syz [ 1434.077009][ T987] usb 1-1: Manufacturer: syz [ 1434.077029][ T987] usb 1-1: SerialNumber: syz [ 1434.358794][ T71] team0: Port device geneve0 removed [ 1434.416030][ T6250] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1434.499628][ T987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1434.499696][ T987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1434.500755][ T987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1434.500815][ T987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1434.501696][ T987] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1434.586066][ T6250] usb 6-1: Using ep0 maxpacket: 16 [ 1434.587925][ T6250] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1434.587952][ T6250] usb 6-1: config 0 has no interface number 0 [ 1434.587988][ T6250] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1434.588003][ T6250] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1434.594105][ T6250] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1434.594124][ T6250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.594136][ T6250] usb 6-1: Product: syz [ 1434.594144][ T6250] usb 6-1: Manufacturer: syz [ 1434.594152][ T6250] usb 6-1: SerialNumber: syz [ 1434.668633][ T987] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1434.677277][ T6250] usb 6-1: config 0 descriptor?? [ 1434.678108][T18287] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1434.678248][T18287] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1434.905772][T18287] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1434.906049][T18287] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1435.337322][ T6250] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1435.337354][ T6250] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1435.337631][ T6250] asix 6-1:0.251: probe with driver asix failed with error -32 [ 1435.380090][ T6250] usb 6-1: USB disconnect, device number 25 [ 1435.990015][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.068727][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.118976][ T71] bond0 (unregistering): Released all slaves [ 1436.330881][T17989] hsr_slave_0: entered promiscuous mode [ 1436.332474][T17989] hsr_slave_1: entered promiscuous mode [ 1436.333633][T17989] debugfs: 'hsr0' already exists in 'hsr' [ 1436.333658][T17989] Cannot create hsr debugfs directory [ 1436.858925][ T5905] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1437.008354][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 1437.012069][ T5905] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1437.012097][ T5905] usb 6-1: config 0 has no interface number 0 [ 1437.012145][ T5905] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1437.012173][ T5905] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1437.014621][ T5905] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1437.014651][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.014673][ T5905] usb 6-1: Product: syz [ 1437.014688][ T5905] usb 6-1: Manufacturer: syz [ 1437.014703][ T5905] usb 6-1: SerialNumber: syz [ 1437.025576][ T5905] usb 6-1: config 0 descriptor?? [ 1437.046131][T18358] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1437.046264][T18358] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1437.271506][T18358] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1437.271633][T18358] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1437.351859][ T9954] usb 1-1: USB disconnect, device number 12 [ 1437.673248][ T5905] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1437.673279][ T5905] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1437.673583][ T5905] asix 6-1:0.251: probe with driver asix failed with error -32 [ 1437.725035][ T5905] usb 6-1: USB disconnect, device number 26 [ 1438.954638][ T71] tipc: Left network mode [ 1439.162313][ T9954] usb 3-1: USB disconnect, device number 114 [ 1439.706358][ T9954] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1439.858624][ T9954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.858678][ T9954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1439.861609][ T9954] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1439.861643][ T9954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.861666][ T9954] usb 3-1: Product: syz [ 1439.861681][ T9954] usb 3-1: Manufacturer: syz [ 1439.861697][ T9954] usb 3-1: SerialNumber: syz [ 1439.876022][ T9954] usb 3-1: config 0 descriptor?? [ 1439.889295][ T9954] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1439.898416][ T9954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1439.955623][ T9954] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1440.449038][T18404] sit1: entered allmulticast mode [ 1440.878088][ T6490] Bluetooth: hci3: command 0x0405 tx timeout [ 1440.986010][T10379] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1441.160102][T10379] usb 1-1: Using ep0 maxpacket: 16 [ 1441.162650][T10379] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1441.162680][T10379] usb 1-1: config 0 has no interface number 0 [ 1441.162725][T10379] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1441.162740][T10379] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1441.165195][T10379] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1441.165222][T10379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.165234][T10379] usb 1-1: Product: syz [ 1441.165241][T10379] usb 1-1: Manufacturer: syz [ 1441.165250][T10379] usb 1-1: SerialNumber: syz [ 1441.166049][ T6511] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1441.171277][T10379] usb 1-1: config 0 descriptor?? [ 1441.212646][T18445] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1441.212769][T18445] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1441.317976][ T6511] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 1441.318006][ T6511] usb 6-1: config 0 has no interface number 0 [ 1441.318033][ T6511] usb 6-1: config 0 interface 82 has no altsetting 0 [ 1441.320619][ T6511] usb 6-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=22.6d [ 1441.320638][ T6511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.320650][ T6511] usb 6-1: Product: syz [ 1441.320658][ T6511] usb 6-1: Manufacturer: syz [ 1441.320699][ T6511] usb 6-1: SerialNumber: syz [ 1441.330164][ T6511] usb 6-1: config 0 descriptor?? [ 1441.388800][ T6511] quatech2 6-1:0.82: Quatech 2nd gen USB to Serial Driver converter detected [ 1441.460597][T18445] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1441.460727][T18445] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1441.577388][ T6511] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1441.577569][ T6511] quatech2 6-1:0.82: probe with driver quatech2 failed with error -71 [ 1441.589260][ T6511] usb 6-1: USB disconnect, device number 27 [ 1441.786042][ T71] hsr_slave_0: left promiscuous mode [ 1441.807724][ T71] hsr_slave_1: left promiscuous mode [ 1441.809268][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.809353][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.847367][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.847395][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.887831][T10379] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1441.887864][T10379] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1441.888155][T10379] asix 1-1:0.251: probe with driver asix failed with error -32 [ 1441.902387][T10379] usb 1-1: USB disconnect, device number 13 [ 1442.058428][ T71] veth1_macvtap: left promiscuous mode [ 1442.058627][ T71] veth0_macvtap: left promiscuous mode [ 1442.058883][ T71] veth1_vlan: left promiscuous mode [ 1442.059052][ T71] veth0_vlan: left promiscuous mode [ 1443.002155][ T9954] usb 3-1: USB disconnect, device number 115 [ 1444.557926][T18549] mmap: syz.2.3625 (18549) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1445.385566][ T8076] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1445.626580][ T8076] usb 6-1: Using ep0 maxpacket: 16 [ 1445.636130][ T8076] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1445.636156][ T8076] usb 6-1: config 0 has no interface number 0 [ 1445.636201][ T8076] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1445.636225][ T8076] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1445.639350][ T8076] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1445.639369][ T8076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.639381][ T8076] usb 6-1: Product: syz [ 1445.639389][ T8076] usb 6-1: Manufacturer: syz [ 1445.639398][ T8076] usb 6-1: SerialNumber: syz [ 1445.706788][ T8076] usb 6-1: config 0 descriptor?? [ 1445.744728][T18560] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1445.744818][T18560] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1445.950320][T18560] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1445.950492][T18560] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1446.352813][ T8076] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1446.352845][ T8076] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1446.353127][ T8076] asix 6-1:0.251: probe with driver asix failed with error -32 [ 1446.420529][ T8076] usb 6-1: USB disconnect, device number 28 [ 1447.019925][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1448.640007][ T71] team0 (unregistering): Port device team_slave_1 removed [ 1449.016831][ T71] team0 (unregistering): Port device team_slave_0 removed [ 1452.600907][T18566] netlink: 'syz.0.3636': attribute type 12 has an invalid length. [ 1453.109117][ T6511] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1454.050801][ T6511] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1454.050833][ T6511] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.050855][ T6511] usb 3-1: Product: syz [ 1454.050869][ T6511] usb 3-1: Manufacturer: syz [ 1454.050885][ T6511] usb 3-1: SerialNumber: syz [ 1454.558061][ T6511] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1454.558126][ T6511] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1454.558775][ T6511] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1454.558829][ T6511] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1454.559599][ T6511] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1454.670086][ T6511] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1454.912030][T17989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1455.012352][T17989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1455.108598][T17989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1455.139564][T18854] binder: 18853:18854 ioctl c0306201 0 returned -14 [ 1455.178951][T17989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1455.260378][T18866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3768'. [ 1455.772481][T17989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.806031][ T6511] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1455.910170][T17989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.935373][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.943014][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.965955][ T6511] usb 1-1: Using ep0 maxpacket: 16 [ 1455.971205][ T6511] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1455.971233][ T6511] usb 1-1: config 0 has no interface number 0 [ 1455.971311][ T6511] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1455.971338][ T6511] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1456.019332][ T6511] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1456.019352][ T6511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.019363][ T6511] usb 1-1: Product: syz [ 1456.019371][ T6511] usb 1-1: Manufacturer: syz [ 1456.019380][ T6511] usb 1-1: SerialNumber: syz [ 1456.029178][ T71] IPVS: stop unused estimator thread 0... [ 1456.066375][ T6511] usb 1-1: config 0 descriptor?? [ 1456.067375][T18873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1456.067591][T18873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1456.084649][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.084800][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.275338][T18873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1456.275474][T18873] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1456.326777][T18895] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1456.680528][ T6511] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1456.680564][ T6511] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 1456.680805][ T6511] asix 1-1:0.251: probe with driver asix failed with error -61 [ 1456.695285][ T8076] usb 3-1: USB disconnect, device number 116 [ 1456.926339][T10781] usb 1-1: USB disconnect, device number 14 [ 1457.183392][T17989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.299017][T17989] veth0_vlan: entered promiscuous mode [ 1457.318377][T17989] veth1_vlan: entered promiscuous mode [ 1457.405103][T17989] veth0_macvtap: entered promiscuous mode [ 1457.438331][T17989] veth1_macvtap: entered promiscuous mode [ 1457.530400][T17989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.582446][T17989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.649385][ T3467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.653624][ T3467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.653746][ T3467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.653767][ T3467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.775326][T18948] input: syz0 as /devices/virtual/input/input34 [ 1458.146103][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.146116][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.235198][ T9950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.235221][ T9950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.592228][T18963] netlink: 'syz.0.3802': attribute type 12 has an invalid length. [ 1458.592252][T18963] netlink: 'syz.0.3802': attribute type 29 has an invalid length. [ 1458.592267][T18963] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3802'. [ 1458.777224][ T9954] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1458.846137][T18969] syz_tun: entered promiscuous mode [ 1458.846739][T18969] vlan2: entered promiscuous mode [ 1458.928764][ T9954] usb 2-1: config 0 has no interfaces? [ 1458.932266][ T9954] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1458.932285][ T9954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.932297][ T9954] usb 2-1: Product: syz [ 1458.932306][ T9954] usb 2-1: Manufacturer: syz [ 1458.932314][ T9954] usb 2-1: SerialNumber: syz [ 1459.022082][ T9954] usb 2-1: config 0 descriptor?? [ 1459.294005][ T8076] usb 2-1: USB disconnect, device number 108 [ 1459.966052][ T37] audit: type=1326 audit(1768416240.559:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb862d3f749 code=0x7ffc0000 [ 1459.966482][ T37] audit: type=1326 audit(1768416240.559:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb862d3f749 code=0x7ffc0000 [ 1459.966682][ T37] audit: type=1326 audit(1768416240.569:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb862d3f749 code=0x7ffc0000 [ 1459.966880][ T37] audit: type=1326 audit(1768416240.569:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb862d3f749 code=0x7ffc0000 [ 1459.967077][ T37] audit: type=1326 audit(1768416240.569:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb862d3f749 code=0x7ffc0000 [ 1459.967357][ T37] audit: type=1326 audit(1768416240.569:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb862d3e1ff code=0x7ffc0000 [ 1459.967562][ T37] audit: type=1326 audit(1768416240.569:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb862d3f749 code=0x7ffc0000 [ 1459.967923][ T37] audit: type=1326 audit(1768416240.579:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18983 comm="syz.0.3813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb862d3f749 code=0x7ffc0000 [ 1460.918146][T19001] netlink: 'syz.0.3817': attribute type 6 has an invalid length. [ 1461.235510][T19016] sit1: entered allmulticast mode [ 1461.295999][ T6511] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1461.469536][ T6511] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1461.469569][ T6511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.469591][ T6511] usb 6-1: Product: syz [ 1461.469606][ T6511] usb 6-1: Manufacturer: syz [ 1461.469621][ T6511] usb 6-1: SerialNumber: syz [ 1461.946312][ T6511] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1461.946375][ T6511] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1461.947877][ T6511] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1461.947932][ T6511] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1461.948701][ T6511] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1462.041059][ T6511] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1462.336521][ T8076] usb 6-1: USB disconnect, device number 29 [ 1463.866568][ T6152] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1464.111218][ T6152] usb 2-1: config 0 has no interfaces? [ 1464.118670][ T6152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1464.118696][ T6152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.118708][ T6152] usb 2-1: Product: syz [ 1464.118716][ T6152] usb 2-1: Manufacturer: syz [ 1464.118724][ T6152] usb 2-1: SerialNumber: syz [ 1464.123020][ T6152] usb 2-1: config 0 descriptor?? [ 1464.189901][T19056] netlink: 'syz.5.3838': attribute type 12 has an invalid length. [ 1464.189923][T19056] netlink: 'syz.5.3838': attribute type 29 has an invalid length. [ 1464.189938][T19056] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3838'. [ 1464.386708][T10379] usb 2-1: USB disconnect, device number 109 [ 1464.887530][T19076] netlink: 'syz.5.3848': attribute type 12 has an invalid length. [ 1464.887546][T19076] netlink: 'syz.5.3848': attribute type 29 has an invalid length. [ 1464.887554][T19076] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3848'. [ 1465.437376][T19091] netlink: 'syz.1.3852': attribute type 12 has an invalid length. [ 1465.437402][T19091] netlink: 'syz.1.3852': attribute type 29 has an invalid length. [ 1465.437417][T19091] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3852'. [ 1465.953606][T19107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1466.710849][T19125] netlink: 'syz.5.3865': attribute type 12 has an invalid length. [ 1467.756159][ T6152] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1467.907920][ T6152] usb 6-1: config 0 has no interfaces? [ 1467.910467][ T6152] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1467.910485][ T6152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.910497][ T6152] usb 6-1: Product: syz [ 1467.910505][ T6152] usb 6-1: Manufacturer: syz [ 1467.910513][ T6152] usb 6-1: SerialNumber: syz [ 1467.915189][ T6152] usb 6-1: config 0 descriptor?? [ 1468.138450][T10379] usb 6-1: USB disconnect, device number 30 [ 1468.729886][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3887'. [ 1468.917685][T19190] netlink: 'syz.2.3891': attribute type 12 has an invalid length. [ 1468.917708][T19190] netlink: 'syz.2.3891': attribute type 29 has an invalid length. [ 1468.917722][T19190] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1469.319660][ T6152] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1469.523155][ T6152] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1469.523190][ T6152] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.523220][ T6152] usb 1-1: config 8 has no interface number 0 [ 1469.523268][ T6152] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1469.523292][ T6152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.675980][ T6490] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1472.890154][T19208] input: syz0 as /devices/virtual/input/input35 [ 1473.547666][T19226] syz_tun: entered promiscuous mode [ 1473.547825][T19226] vlan2: entered promiscuous mode [ 1473.919848][ T805] usb 1-1: USB disconnect, device number 15 [ 1476.246482][ T6490] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1477.044210][ T6490] Bluetooth: hci4: command 0x0406 tx timeout [ 1479.003049][T19348] tipc: Started in network mode [ 1479.003087][T19348] tipc: Node identity 562a354c0ec4, cluster identity 4711 [ 1479.003854][T19348] tipc: Enabled bearer , priority 0 [ 1479.005570][T19348] syzkaller0: entered promiscuous mode [ 1479.005600][T19348] syzkaller0: entered allmulticast mode [ 1479.051944][T19348] tipc: Resetting bearer [ 1479.636353][T19346] tipc: Resetting bearer [ 1479.842994][T19346] tipc: Disabling bearer [ 1484.580972][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.581347][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.131172][ T6490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1486.146470][ T6490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1486.159882][ T6490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1486.161645][ T6490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1486.165297][ T6490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1486.527801][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1486.681424][T19438] netlink: 'syz.5.3978': attribute type 12 has an invalid length. [ 1487.215996][ T5905] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1487.375917][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 1487.377931][ T5905] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1487.377959][ T5905] usb 1-1: config 1 has no interface number 1 [ 1487.378007][ T5905] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1487.378030][ T5905] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1487.378074][ T5905] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1487.382822][ T5905] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1487.382853][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.382874][ T5905] usb 1-1: Product: syz [ 1487.382889][ T5905] usb 1-1: Manufacturer: syz [ 1487.382905][ T5905] usb 1-1: SerialNumber: syz [ 1488.469276][ T6490] Bluetooth: hci2: command tx timeout [ 1489.797267][ T2993] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.058553][ T5905] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1490.060582][ T5905] usb 1-1: failed to enable PITCH for EP 0x82 [ 1490.192218][ T5905] usb 1-1: USB disconnect, device number 16 [ 1490.396957][T19469] udevd[19469]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1490.417542][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3988'. [ 1490.476354][ T6490] Bluetooth: hci2: command tx timeout [ 1490.529322][ T2993] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.955750][T19491] binder: 19490:19491 ioctl c0306201 200000000300 returned -11 [ 1492.164556][T19493] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3994'. [ 1492.565866][ T6490] Bluetooth: hci2: command tx timeout [ 1493.618020][ T2993] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.669521][T19426] chnl_net:caif_netlink_parms(): no params data found [ 1494.636047][ T6490] Bluetooth: hci2: command tx timeout [ 1494.926681][ T2993] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.135098][T19531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1496.243792][T19544] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1496.546046][T10379] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1496.570572][T19426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.570940][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.571114][T19426] bridge_slave_0: entered allmulticast mode [ 1496.573643][T19426] bridge_slave_0: entered promiscuous mode [ 1496.619120][T19426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.619206][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.619391][T19426] bridge_slave_1: entered allmulticast mode [ 1496.623271][T19426] bridge_slave_1: entered promiscuous mode [ 1496.696429][ T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1496.741075][T10379] usb 3-1: config 0 has no interfaces? [ 1496.753711][T10379] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1496.753741][T10379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.753761][T10379] usb 3-1: Product: syz [ 1496.753776][T10379] usb 3-1: Manufacturer: syz [ 1496.753791][T10379] usb 3-1: SerialNumber: syz [ 1496.811273][T10379] usb 3-1: config 0 descriptor?? [ 1496.847583][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.847600][ T10] usb 6-1: config 0 has no interfaces? [ 1496.849545][ T10] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1496.849564][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.849575][ T10] usb 6-1: Product: syz [ 1496.849583][ T10] usb 6-1: Manufacturer: syz [ 1496.849591][ T10] usb 6-1: SerialNumber: syz [ 1496.886500][ T10] usb 6-1: config 0 descriptor?? [ 1497.226538][ T5935] usb 6-1: USB disconnect, device number 31 [ 1498.061293][T19426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.124032][T19426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.602943][T19426] team0: Port device team_slave_0 added [ 1498.670181][T19426] team0: Port device team_slave_1 added [ 1498.670426][ T2993] bridge_slave_1: left allmulticast mode [ 1498.670448][ T2993] bridge_slave_1: left promiscuous mode [ 1498.670695][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.747537][ T2993] bridge_slave_0: left allmulticast mode [ 1498.747558][ T2993] bridge_slave_0: left promiscuous mode [ 1498.747753][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.817110][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.876655][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1502.898204][ T2993] bond0 (unregistering): Released all slaves [ 1503.027726][T19575] netlink: 'syz.5.4018': attribute type 12 has an invalid length. [ 1503.247529][T19592] ip6gretap0: entered promiscuous mode [ 1503.247963][T19592] vlan2: entered promiscuous mode [ 1503.356450][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1503.507850][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.507895][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1503.510037][ T10] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1503.510065][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.510077][ T10] usb 6-1: Product: syz [ 1503.510085][ T10] usb 6-1: Manufacturer: syz [ 1503.510093][ T10] usb 6-1: SerialNumber: syz [ 1503.513828][ T10] usb 6-1: config 0 descriptor?? [ 1503.522210][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1503.528474][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1503.537134][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1503.556031][T12723] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1503.711288][T12723] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1503.711313][T12723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.711324][T12723] usb 1-1: Product: syz [ 1503.711333][T12723] usb 1-1: Manufacturer: syz [ 1503.711341][T12723] usb 1-1: SerialNumber: syz [ 1504.016399][ T10] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1504.132784][T12723] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1504.132848][T12723] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1504.179950][ T10] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.179989][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1504.180003][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.494546][T19426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.494558][T19426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.494575][T19426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.688550][T19426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.688568][T19426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.688597][T19426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.763744][T12723] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1505.763779][T12723] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1505.764308][T12723] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1505.827345][T12723] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1505.833793][T12723] usb 1-1: USB disconnect, device number 17 [ 1505.866589][ T2993] hsr_slave_0: left promiscuous mode [ 1505.907466][ T2993] hsr_slave_1: left promiscuous mode [ 1505.908548][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.908573][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.967553][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.967576][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1506.086317][ T2993] veth1_macvtap: left promiscuous mode [ 1506.086381][ T2993] veth0_macvtap: left promiscuous mode [ 1506.089239][ T2993] veth1_vlan: left promiscuous mode [ 1506.089377][ T2993] veth0_vlan: left promiscuous mode [ 1506.143385][T12723] usb 6-1: USB disconnect, device number 32 [ 1506.526123][T12723] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1506.684044][T12723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.684065][T12723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.684078][T12723] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1506.684102][T12723] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1506.684115][T12723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.745020][T12723] usb 6-1: config 0 descriptor?? [ 1507.122837][T15236] Bluetooth: hci0: command 0x0406 tx timeout [ 1507.272356][T12723] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1507.433340][T12723] usb 6-1: USB disconnect, device number 33 [ 1507.476034][T19622] fido_id[19622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1508.279961][ T6511] usb 2-1: USB disconnect, device number 110 [ 1508.325955][T12723] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1508.455944][T12723] usb 6-1: device descriptor read/64, error -71 [ 1509.917955][T12723] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1510.761178][T12723] usb 6-1: device descriptor read/64, error -71 [ 1510.876521][T12723] usb usb6-port1: attempt power cycle [ 1511.154314][T17527] ------------[ cut here ]------------ [ 1511.154333][T17527] WARNING: kernel/kcov.c:477 at kcov_task_exit+0xf5/0x160, CPU#1: syz-executor/17527 [ 1511.154383][T17527] Modules linked in: [ 1511.154426][T17527] CPU: 1 UID: 0 PID: 17527 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1511.154458][T17527] Tainted: [L]=SOFTLOCKUP [ 1511.154466][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.154491][T17527] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1511.154515][T17527] Code: 10 00 00 48 8b bb 90 00 00 00 e8 d6 25 51 00 48 89 df 5b 41 5e 41 5f e9 e9 c9 56 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 2b 64 14 09 48 89 df be 03 00 [ 1511.154533][T17527] RSP: 0018:ffffc9000fa87ae0 EFLAGS: 00010206 [ 1511.154550][T17527] RAX: a2692942009f3e00 RBX: ffff8880260f3600 RCX: 0000000000000000 [ 1511.154567][T17527] RDX: 000000001abf8f50 RSI: ffffffff8b3f5ac0 RDI: 00000000ffffffff [ 1511.154581][T17527] RBP: ffffc9000fa87c28 R08: ffffffff8ad41021 R09: ffffffff8d5ae940 [ 1511.154597][T17527] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: 1ffff110037ea4cd [ 1511.154614][T17527] R13: 0000000000000009 R14: ffff8880260f3608 R15: ffff888024c81e40 [ 1511.154628][T17527] FS: 0000555567f2a500(0000) GS:ffff888126dee000(0000) knlGS:0000000000000000 [ 1511.154647][T17527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1511.154662][T17527] CR2: 00007fba41660020 CR3: 000000003a7b4000 CR4: 00000000003526f0 [ 1511.154682][T17527] Call Trace: [ 1511.154695][T17527] [ 1511.154706][T17527] do_exit+0xd1/0x22f0 [ 1511.154744][T17527] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1511.154769][T17527] ? lockdep_hardirqs_on+0x7b/0x110 [ 1511.154794][T17527] ? __pfx_do_exit+0x10/0x10 [ 1511.154821][T17527] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1511.154850][T17527] ? reacquire_held_locks+0x104/0x190 [ 1511.154880][T17527] ? rt_spin_lock+0x1c1/0x3e0 [ 1511.154910][T17527] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1511.154946][T17527] do_group_exit+0x21c/0x2d0 [ 1511.154976][T17527] ? rt_spin_unlock+0x161/0x200 [ 1511.155007][T17527] get_signal+0x125d/0x1310 [ 1511.155051][T17527] arch_do_signal_or_restart+0x9a/0x7a0 [ 1511.155084][T17527] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1511.155104][T17527] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1511.155146][T17527] ? __pfx_fput_close_sync+0x10/0x10 [ 1511.155180][T17527] exit_to_user_mode_loop+0x87/0x4e0 [ 1511.155209][T17527] ? rcu_is_watching+0x15/0xb0 [ 1511.155232][T17527] do_syscall_64+0x2c1/0xf80 [ 1511.155254][T17527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.155276][T17527] ? trace_irq_disable+0x37/0x100 [ 1511.155298][T17527] ? clear_bhb_loop+0x60/0xb0 [ 1511.155324][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.155345][T17527] RIP: 0033:0x7fa66c9d5897 [ 1511.155371][T17527] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44 [ 1511.155390][T17527] RSP: 002b:00007ffd7d89baa0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 1511.155413][T17527] RAX: fffffffffffffe00 RBX: 0000000000000081 RCX: 00007fa66c9d5897 [ 1511.155430][T17527] RDX: 0000000040000000 RSI: 00007ffd7d89bb0c RDI: 00000000ffffffff [ 1511.155446][T17527] RBP: 00007ffd7d89bb0c R08: 0000000000000000 R09: 0000000000000000 [ 1511.155461][T17527] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000026 [ 1511.155480][T17527] R13: 0000555567f3d590 R14: 000000000016d746 R15: 00007ffd7d89bb60 [ 1511.155515][T17527] [ 1511.155534][T17527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1511.155553][T17527] CPU: 1 UID: 0 PID: 17527 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1511.155585][T17527] Tainted: [L]=SOFTLOCKUP [ 1511.155594][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.155607][T17527] Call Trace: [ 1511.155616][T17527] [ 1511.155625][T17527] vpanic+0x1e0/0x670 [ 1511.155659][T17527] panic+0xb9/0xc0 [ 1511.155687][T17527] ? __pfx_panic+0x10/0x10 [ 1511.155734][T17527] __warn+0x317/0x4b0 [ 1511.155761][T17527] ? kcov_task_exit+0xf5/0x160 [ 1511.155788][T17527] ? kcov_task_exit+0xf5/0x160 [ 1511.155806][T17527] __report_bug+0x288/0x500 [ 1511.155826][T17527] ? kcov_task_exit+0xf5/0x160 [ 1511.155850][T17527] ? __pfx___report_bug+0x10/0x10 [ 1511.155867][T17527] ? try_to_take_rt_mutex+0x840/0xb00 [ 1511.155897][T17527] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1511.155927][T17527] ? rt_spin_lock+0x1c1/0x3e0 [ 1511.155955][T17527] ? rt_spin_lock+0x1c1/0x3e0 [ 1511.155985][T17527] ? kcov_task_exit+0xf5/0x160 [ 1511.156007][T17527] report_bug+0x16a/0x220 [ 1511.156028][T17527] ? kcov_task_exit+0xf5/0x160 [ 1511.156046][T17527] ? kcov_task_exit+0xf7/0x160 [ 1511.156065][T17527] handle_bug+0x98/0x200 [ 1511.156090][T17527] exc_invalid_op+0x1a/0x50 [ 1511.156113][T17527] asm_exc_invalid_op+0x1a/0x20 [ 1511.156133][T17527] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1511.156154][T17527] Code: 10 00 00 48 8b bb 90 00 00 00 e8 d6 25 51 00 48 89 df 5b 41 5e 41 5f e9 e9 c9 56 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 2b 64 14 09 48 89 df be 03 00 [ 1511.156173][T17527] RSP: 0018:ffffc9000fa87ae0 EFLAGS: 00010206 [ 1511.156190][T17527] RAX: a2692942009f3e00 RBX: ffff8880260f3600 RCX: 0000000000000000 [ 1511.156206][T17527] RDX: 000000001abf8f50 RSI: ffffffff8b3f5ac0 RDI: 00000000ffffffff [ 1511.156221][T17527] RBP: ffffc9000fa87c28 R08: ffffffff8ad41021 R09: ffffffff8d5ae940 [ 1511.156236][T17527] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: 1ffff110037ea4cd [ 1511.156252][T17527] R13: 0000000000000009 R14: ffff8880260f3608 R15: ffff888024c81e40 [ 1511.156275][T17527] ? rt_spin_lock+0x1c1/0x3e0 [ 1511.156311][T17527] do_exit+0xd1/0x22f0 [ 1511.156341][T17527] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1511.156363][T17527] ? lockdep_hardirqs_on+0x7b/0x110 [ 1511.156387][T17527] ? __pfx_do_exit+0x10/0x10 [ 1511.156413][T17527] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1511.156440][T17527] ? reacquire_held_locks+0x104/0x190 [ 1511.156470][T17527] ? rt_spin_lock+0x1c1/0x3e0 [ 1511.156509][T17527] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1511.156542][T17527] do_group_exit+0x21c/0x2d0 [ 1511.156573][T17527] ? rt_spin_unlock+0x161/0x200 [ 1511.156601][T17527] get_signal+0x125d/0x1310 [ 1511.156647][T17527] arch_do_signal_or_restart+0x9a/0x7a0 [ 1511.156680][T17527] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1511.156701][T17527] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1511.156744][T17527] ? __pfx_fput_close_sync+0x10/0x10 [ 1511.156778][T17527] exit_to_user_mode_loop+0x87/0x4e0 [ 1511.156807][T17527] ? rcu_is_watching+0x15/0xb0 [ 1511.156831][T17527] do_syscall_64+0x2c1/0xf80 [ 1511.156854][T17527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.156876][T17527] ? trace_irq_disable+0x37/0x100 [ 1511.156898][T17527] ? clear_bhb_loop+0x60/0xb0 [ 1511.156925][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.156946][T17527] RIP: 0033:0x7fa66c9d5897 [ 1511.156966][T17527] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44 [ 1511.156986][T17527] RSP: 002b:00007ffd7d89baa0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 1511.157009][T17527] RAX: fffffffffffffe00 RBX: 0000000000000081 RCX: 00007fa66c9d5897 [ 1511.157026][T17527] RDX: 0000000040000000 RSI: 00007ffd7d89bb0c RDI: 00000000ffffffff [ 1511.157043][T17527] RBP: 00007ffd7d89bb0c R08: 0000000000000000 R09: 0000000000000000 [ 1511.157058][T17527] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000026 [ 1511.157073][T17527] R13: 0000555567f3d590 R14: 000000000016d746 R15: 00007ffd7d89bb60 [ 1511.157108][T17527] [ 1511.157498][T17527] Kernel Offset: disabled