last executing test programs: 2m26.797975326s ago: executing program 0 (id=1936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 2m26.612817735s ago: executing program 0 (id=1938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000104000000d440b0"], 0x0, 0x0, 0x0, 0x0}) 2m23.095335785s ago: executing program 0 (id=1944): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4140) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 2m21.755074261s ago: executing program 0 (id=1949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 2m21.587082794s ago: executing program 0 (id=1951): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 2m21.52253911s ago: executing program 0 (id=1952): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700fc010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048001) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x3, {0x0, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 2m6.486503404s ago: executing program 32 (id=1952): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700fc010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048001) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x3, {0x0, 0xff}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 11.531335528s ago: executing program 3 (id=2310): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="75d00021"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0xffffffffffffffc7, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8fa50f638facd57de499163"}, 0x8000000000000001, 0xfffffffffffffffe, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 11.236884053s ago: executing program 4 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x4000, 0x0, 0x940a, 0x1000007}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) 10.793975846s ago: executing program 2 (id=2312): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0xa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x80) getdents(r0, 0x0, 0x0) 10.774846092s ago: executing program 4 (id=2313): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x141800, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000000020102fffd0000000000000700000224000a800800014000000000080001400000000008000140"], 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="01002cbd7001008000003400000008007300000000000e0001006e6574"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x2, 0x0, 0x7000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4004001) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48082) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 10.275993302s ago: executing program 4 (id=2316): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0xea30, 0x6, 0x4000379ee6, 0x0, 0x8001, 0x7ff, 0x8a, 0x3, 0x100000000000006, 0x82, 0x3, 0x40000000000004, 0x9, 0x80000000000005, 0x2, 0xffffffffffffffff, 0xffffffff, 0x2, 0x9, 0x7, 0x200, 0x3, 0x11cb, 0x4, 0xd, 0x9}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004000) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56", 0x14) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r6, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r5, &(0x7f0000000340), 0x2d}]) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0xfffffffe}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x40, 0x0, 0x0, 0x861}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) accept$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x800, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008400}, 0x40820) 10.100888624s ago: executing program 2 (id=2317): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x3ff, 0x0, 'queue0\x00'}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, 0xffffffffffffffff, 0x7ac84000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1000000e, 0x0, 0xffffffff, 0x82, 0x0, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) write$P9_RGETATTR(r0, &(0x7f00000004c0)={0xa0, 0x19, 0x2, {0x1, {0x40, 0x6, 0x2}, 0x12, 0x0, 0x0, 0x400, 0x800000000041b, 0x5, 0xe645, 0x8000000000000000, 0x3b5, 0x5698, 0xb3bb, 0x7f, 0x0, 0x40, 0x9, 0xe4, 0x40, 0x9}}, 0xa0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="fb5a0c5a28", 0x5, 0xc0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4054, 0xff79, 0x0, 0x0}, &(0x7f0000000400)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0xfd, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x800000]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 9.975682116s ago: executing program 2 (id=2318): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0xfd}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0x3, 0xf4, 0x20, 0x4}, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x97, &(0x7f0000000380)=@string={0x97, 0x3, "209ef01f22f9094330e7bb9ad5e92cbd98d1f98f06d7d34b0a24a19a3f69197d44b1cb80fdc84fb872b2655aedc84e882570ecf6c1e7fb216401496d1ca1a97746d30c6f6013bc6c1714eecd1953365cdc724643d26accadd2a834e8f897d05e1d3f8567bd605587078e13825cc99218c2776ddb57e33733a11c835681b25ea9cf168b557783f1c18cb59bbaf7042b8d9762a38538"}}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000180)={0x8}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x4, 0x3, {0x4, 0x21}, 0x14, 0x1}) 8.520791298s ago: executing program 4 (id=2320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x0, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0xfffffffffffffe61) 8.290157107s ago: executing program 3 (id=2321): r0 = socket$packet(0x11, 0x2, 0x300) time(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x4, 0xe, 0x2, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000002c0)=0x1c, 0x4) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 7.854158302s ago: executing program 3 (id=2322): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800000001000010400000000000000000000ffff", @ANYRES32=r4, @ANYBLOB="421c0000000000004c002b8008000100", @ANYRES32, @ANYBLOB="080002"], 0x80}}, 0x4048050) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8042) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xfff3, 0x8}, {0xfffa, 0xffff}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}]}, 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000001400018006dad8fca7517d24210005004eaaddc9"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 6.772675194s ago: executing program 4 (id=2323): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f00000001c0), 0x0, 0xc9, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x9e, 0xc4, 0x5e, 0x20, 0x9fb, 0xebbe, 0x395d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xd, 0xa0}}]}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000003c0)={0x2c, 0xa, 0x3, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000"}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x492492492492539, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000540)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000080)="ce2ede98d4bde439a7931c4e260090a647151bacb721146be7ef4494578b05c18fc56c1571aa57d0f79d3c", 0x2b}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da241fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce", 0x5b}], 0x3, 0x0, 0x0, 0x2400c0a0}], 0x1, 0x48800) r9 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) 6.547041975s ago: executing program 2 (id=2324): syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) 6.415778366s ago: executing program 1 (id=2325): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0xa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x80) getdents(r0, 0x0, 0x0) 6.171404173s ago: executing program 1 (id=2326): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x3ff, 0x0, 'queue0\x00'}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, 0xffffffffffffffff, 0x7ac84000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1000000e, 0x0, 0xffffffff, 0x82, 0x0, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) write$P9_RGETATTR(r0, &(0x7f00000004c0)={0xa0, 0x19, 0x2, {0x1, {0x40, 0x6, 0x2}, 0x12, 0x0, 0x0, 0x400, 0x800000000041b, 0x5, 0xe645, 0x8000000000000000, 0x3b5, 0x5698, 0xb3bb, 0x7f, 0x0, 0x40, 0x9, 0xe4, 0x40, 0x9}}, 0xa0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="fb5a0c5a28", 0x5, 0xc0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4054, 0xff79, 0x0, 0x0}, &(0x7f0000000400)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0xfd, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x800000]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 6.036242933s ago: executing program 3 (id=2327): semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0xffff}], 0x1f4, 0x0) 5.986733972s ago: executing program 3 (id=2328): syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x2a440) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_usb_connect(0x4, 0x492, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xd2, 0x10, 0x91, 0xbf9e561f31bb4d1e, 0xbda, 0xffef, 0x591b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x480, 0x2, 0x1, 0x81, 0xd0, 0x32}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x46, 0x0, 0x62, 0x10, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x92, &(0x7f0000001040)=ANY=[@ANYBLOB="920362ea47e9f56a63c8c92edb5bf4601fabb49b37f82ffcc08eeee6aa694c076cc06f7bbbb4d2a9877209c54ae556d645766dd05522c4c115591983160bda554467557e06d9c5a6ac3ead7c63a62d3d1653d8b12313d71c3aa422b3d33f913e7c75940c825a3e804049a3f9e6413a97e97a87f8cfefb37a185be0f212e9fa32ef491408a64f00683d33c1310abe2efe27259116c61731c87f2555b618147675bd1f4fda1c90143379393410128419d616e9d97a5272ec8c621b8e17a55cd7deacf7a25ec0a347a3e5be4253cc4b757c72b889bf36c6559dbdef03cc0db8ec607d44c4c5793974ca2a9927c1486d9c36e99ca9b4918edf01204bbd05236d42520864ce27ff848244e99754a5e198410d6247a140c40fdeb5ff2c4b1a6f68526a59ed95d8d03fd83e619e5b7801dadb68dd9ce2416dcb20feaf383694f7e9"]}, {0xa7, &(0x7f0000000ec0)=@string={0xa7, 0x3, "ab4e47676b48fa8709d8874632b6ab33bdc9fa6c05412aa46f80e81b95dafd88f3861214b1483133d10311bcabd69e0925d97d1ee4819b04058a1b63bfb0d17086a6bb1e867b1e3ed19f69220b57f00c895bcb806c003a31322e61c6f0dbc93af4347c299eaaf5f1bc64ee0390d9791cec80889b1b30af60762239a2ebd4c94ed6bb1186d4ec9a134230bb72282b3439b181fe512ce3649807e5c5fe7b9f61f3ab488a0eb7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0f6}}]}) 5.954371015s ago: executing program 1 (id=2329): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="75d00021"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0xffffffffffffffc7, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8fa50f638facd57de499163"}, 0x8000000000000001, 0xfffffffffffffffe, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 5.072374192s ago: executing program 4 (id=2330): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) r7 = openat$null(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, 0x0, 0x4000000) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x4, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3f35e3b2, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x71, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x3, 0x0, 0x7}}]}}, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0), 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 4.74736923s ago: executing program 2 (id=2331): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x500}) recvfrom(r1, &(0x7f00000002c0)=""/187, 0xbb, 0x2102, &(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6600, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r7, 0x141601) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.725636158s ago: executing program 3 (id=2332): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xd0, 0xfd}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0x3, 0xf4, 0x20, 0x4}, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x2, &(0x7f0000000300)=@string={0x2}}, {0x97, &(0x7f0000000380)=@string={0x97, 0x3, "209ef01f22f9094330e7bb9ad5e92cbd98d1f98f06d7d34b0a24a19a3f69197d44b1cb80fdc84fb872b2655aedc84e882570ecf6c1e7fb216401496d1ca1a97746d30c6f6013bc6c1714eecd1953365cdc724643d26accadd2a834e8f897d05e1d3f8567bd605587078e13825cc99218c2776ddb57e33733a11c835681b25ea9cf168b557783f1c18cb59bbaf7042b8d9762a38538"}}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000180)={0x8}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x4, 0x3, {0x4, 0x21}, 0x14, 0x1}) 2.668875155s ago: executing program 1 (id=2333): openat$kvm(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8000008, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = io_uring_setup(0x45a6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r5 = dup(r4) fallocate(r5, 0x10, 0x0, 0x72000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 2.002898489s ago: executing program 2 (id=2334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91109d000000000095ea7b8312691589"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000b40)={0x21, r0, 0x3}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000b80)={0xffffffffffffffff, 0x2, 0x3, r4}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x5, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)={0x18, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000840)="1f98f4e72d8effdc1f8ff7d3ac051fd84309a95d9d90948127fadd5211c2665c6a99d85966da5d67daa0d9a9b434b7ff1481399368b80fe6a47080de2145363023bb350e0c3dea2ef6edf96800c450af3283987e6b4bb6dca543372ceb4daa8334177f898aef3e9c0282462f98393efca5a5f17a1b0627f45df50cb26bb6b441b06f5ca78aef1c0f994cc74380139cb95514a53adf0d5834e71761c3154fafb0e97fa7a192edf14cbaa528f0c308ed4e9c379cc6b1941d71f262427a89832902dd5b", 0xc2}, {&(0x7f00000002c0)="0b1eb5df9b1344bb964f8c9c7b3e15b08cefa8f4c7ded567b0b6e813cd8c92e2d36097", 0x23}], 0x2, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x94, 0x6, "5ec29f1e"}, @timestamp_prespec={0x44, 0x1c, 0xad, 0x3, 0x6, [{@local, 0x5}, {@multicast2, 0xfffffffb}, {@rand_addr=0x64010100, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0xd1, 0x3, 0x0, [{@private=0xa010101, 0x8b0}, {@multicast1, 0x6}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@multicast2, 0xe8}, {@private=0xa010100, 0x856e}, {@broadcast, 0x4}, {@private=0xa010102, 0xffff17ba}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@multicast1, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x168}, 0x4008844) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0xb0, 0x8}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xa}}}, 0x24}}, 0x0) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x161}, 0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) 258.484377ms ago: executing program 1 (id=2335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 0s ago: executing program 1 (id=2336): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0xffff0002, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x94) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) fcntl$setflags(r0, 0x2, 0x1) syz_usb_connect$hid(0xecd354649168cc25, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb6, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0x0, 0x7, 0x10, 0x9}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0xd8, &(0x7f0000000540)=@string={0xd8, 0x3, "dc57ad6c9c772009de9b2cb547d918265810efe7ef8219479291fb66b277b0bf4be336319d5372cd1f2a70464ef0267d03eace90f2640a317884b2ea35b3890e971c23c1cb0df0ceb90cdf797bbc2aa696b8a0fca1e96eecd766873cf9b84664cf753c5d165a15d0fe75f74bc034f8585e68ce8417732fa54059b376e78044fedf512d297c1daca7d7cfd50bf4cfd8bed5f2c62ba8d93659dded5a55860ca4146a5eaf9c76d67755f2340a20a2aa7683a32ecacd3b9ccd914168f7c04e6d1e6d5f79bda6db9e06fdca880868ea2caaf739ca1ef2f055"}}]}) openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) kernel console output (not intermixed with test programs): New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.469735][ T27] usb 2-1: Product: syz [ 909.476716][ T27] usb 2-1: Manufacturer: syz [ 909.484331][ T27] usb 2-1: SerialNumber: syz [ 909.498153][ T27] usb 2-1: config 0 descriptor?? [ 909.544450][ T786] usb 3-1: usb_control_msg returned -32 [ 909.565524][ T786] usbtmc 3-1:16.0: can't read capabilities [ 909.585012][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.615913][ T786] usb 3-1: USB disconnect, device number 84 [ 909.626783][ T5829] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 909.657196][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.717157][ T5829] usb 1-1: config 0 descriptor?? [ 909.752149][ T5829] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 909.939622][ T27] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 909.993047][ T27] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 910.002038][ T27] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 910.012576][ T27] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 910.023498][ T27] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 910.037340][ T27] usb 2-1: USB disconnect, device number 81 [ 910.058775][ T27] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 910.079627][ T27] keyspan 2-1:0.133: device disconnected [ 911.409206][ T5834] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 911.601685][ T5834] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 911.610568][ T5834] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 911.620557][ T5834] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 911.631902][ T5834] usb 2-1: config 220 has no interface number 2 [ 911.638546][ T5834] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 911.653023][ T5834] usb 2-1: config 220 interface 0 has no altsetting 0 [ 911.660353][ T5834] usb 2-1: config 220 interface 76 has no altsetting 0 [ 911.667346][ T5834] usb 2-1: config 220 interface 1 has no altsetting 0 [ 911.676691][ T5834] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 911.686160][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.695286][ T5834] usb 2-1: Product: syz [ 911.700103][ T5834] usb 2-1: Manufacturer: syz [ 911.704738][ T5834] usb 2-1: SerialNumber: syz [ 911.838952][ T5811] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 911.923779][ T5834] usb 2-1: selecting invalid altsetting 0 [ 911.942640][ T5834] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 911.950106][ T5834] usb 2-1: No valid video chain found. [ 911.964094][ T5834] usb 2-1: selecting invalid altsetting 0 [ 911.971032][ T5834] usbtest: probe of 2-1:220.1 failed with error -22 [ 911.990881][ T5834] usb 2-1: USB disconnect, device number 82 [ 912.042414][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 912.060589][ T27] usb 1-1: USB disconnect, device number 86 [ 912.083273][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 912.108734][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 912.124871][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 912.140585][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.155386][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 912.164910][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.387609][ T5811] usb 4-1: usb_control_msg returned -32 [ 912.397325][ T5811] usbtmc 4-1:16.0: can't read capabilities [ 912.414079][ T5811] usb 4-1: USB disconnect, device number 90 [ 912.499028][ T27] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 912.553585][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 912.698687][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 912.706674][ T27] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 912.717818][ T27] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 912.731272][ T27] usb 1-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 912.741101][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.752708][ T27] usb 1-1: Product: syz [ 912.757034][ T27] usb 1-1: Manufacturer: syz [ 912.762233][ T27] usb 1-1: SerialNumber: syz [ 912.781230][ T7590] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 912.986275][ T7590] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 913.001773][ T27] usb 1-1: USB disconnect, device number 87 [ 913.018784][ T7590] usb 3-1: config 0 has no interface number 0 [ 913.045795][ T7590] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 913.070041][ T7590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.082255][ T7590] usb 3-1: Product: syz [ 913.089166][ T7590] usb 3-1: Manufacturer: syz [ 913.094293][ T7590] usb 3-1: SerialNumber: syz [ 913.102588][ T7590] usb 3-1: config 0 descriptor?? [ 913.468304][ T5834] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 913.542418][ T7590] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 913.561405][ T7590] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 913.588078][ T7590] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 913.595968][ T7590] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 913.613630][ T7590] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 913.634593][ T7590] usb 3-1: USB disconnect, device number 85 [ 913.670195][ T7590] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 913.686178][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.715405][ T7590] keyspan 3-1:0.133: device disconnected [ 913.727977][ T5834] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 913.737171][ T5834] usb 4-1: config 1 has no interface number 1 [ 913.764775][ T5834] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 913.793333][ T5834] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 913.806361][ T5834] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 913.826181][ T5834] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 913.840256][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.858520][ T5834] usb 4-1: Product: syz [ 913.863038][ T5834] usb 4-1: Manufacturer: syz [ 913.868618][ T5834] usb 4-1: SerialNumber: syz [ 913.890093][T13345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 914.123628][T13345] Cannot find add_set index 0 as target [ 914.207065][ T5834] usb 4-1: USB disconnect, device number 91 [ 914.286955][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.358120][ T7590] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 914.547762][ T7590] usb 2-1: Using ep0 maxpacket: 8 [ 914.555429][ T7590] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 914.566891][ T7590] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 914.580303][ T7590] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 914.590973][ T7590] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.606363][ T7590] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 914.616137][ T7590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.657694][ T787] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 914.846587][ T7590] usb 2-1: usb_control_msg returned -32 [ 914.884536][ T7590] usbtmc 2-1:16.0: can't read capabilities [ 914.896073][ T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.919818][ T7590] usb 2-1: USB disconnect, device number 83 [ 914.930176][ T787] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 914.969688][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 914.987396][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.001366][ T787] usb 3-1: Product: syz [ 915.008689][ T787] usb 3-1: Manufacturer: syz [ 915.014738][ T787] usb 3-1: SerialNumber: syz [ 915.265647][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.347370][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.396220][ T787] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 915.441713][ T787] usb 3-1: USB disconnect, device number 86 [ 915.976835][ T5813] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 916.097143][ T5829] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 916.159442][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.182475][ T5813] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 916.192405][ T5813] usb 4-1: config 1 has no interface number 1 [ 916.203118][ T5813] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 916.216835][ T5813] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 918.110553][ T5813] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 918.145415][ T5829] usb 3-1: device descriptor read/all, error -71 [ 918.192173][ T5813] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.225390][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.281519][ T5813] usb 4-1: Product: syz [ 918.287479][ T5813] usb 4-1: Manufacturer: syz [ 918.302781][ T5813] usb 4-1: SerialNumber: syz [ 918.358936][T13390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 918.616087][T13390] Cannot find add_set index 0 as target [ 918.710370][ T5813] usb 4-1: USB disconnect, device number 92 [ 918.808776][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.139554][ T5813] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 921.344718][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 921.356478][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.398646][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.433192][ T5813] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 921.461280][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.489855][ T5813] usb 1-1: config 0 descriptor?? [ 921.502880][ T5813] hub 1-1:0.0: USB hub found [ 921.710879][ T5813] hub 1-1:0.0: 1 port detected [ 921.764085][ T5829] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 921.986563][ T5829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.006468][ T5829] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 922.019992][ T5829] usb 2-1: config 1 has no interface number 1 [ 922.028389][ T5829] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 922.047147][ T5829] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 922.059311][ T5829] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 922.079152][ T5829] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.092889][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.111810][ T5829] usb 2-1: Product: syz [ 922.126267][ T5829] usb 2-1: Manufacturer: syz [ 922.131538][ T5829] usb 2-1: SerialNumber: syz [ 922.142289][T13457] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 922.925977][T13457] Cannot find add_set index 0 as target [ 922.983303][ T5829] usb 2-1: USB disconnect, device number 84 [ 923.093093][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.128315][ T5809] usb 1-1: USB disconnect, device number 88 [ 923.897428][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1925'. [ 923.910890][T13470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1925'. [ 926.871396][ T5809] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 926.971332][ T5829] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 927.101473][ T5152] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 927.112038][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.131789][ T5809] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 927.141473][ T5809] usb 4-1: config 1 has no interface number 1 [ 927.147696][ T5809] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 927.161907][ T5809] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 927.173507][ T5809] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 927.186616][ T5809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 927.197365][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 927.204101][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.216254][ T5809] usb 4-1: Product: syz [ 927.222504][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.236218][ T5809] usb 4-1: Manufacturer: syz [ 927.241755][ T5809] usb 4-1: SerialNumber: syz [ 927.246695][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.283999][T13500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 927.311172][ T5152] usb 2-1: Using ep0 maxpacket: 32 [ 927.322912][ T5829] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 927.341887][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.358592][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.372607][ T5152] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 927.394316][ T5829] usb 1-1: config 0 descriptor?? [ 927.407313][ T5829] hub 1-1:0.0: USB hub found [ 927.412642][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.477934][ T5152] usb 2-1: config 0 descriptor?? [ 927.606324][ T5829] hub 1-1:0.0: 1 port detected [ 927.638758][T13500] Cannot find add_set index 0 as target [ 927.838006][ T5809] usb 4-1: USB disconnect, device number 93 [ 927.936364][ T5152] zydacron 0003:13EC:0006.000B: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 928.019763][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.432160][ T5834] usb 1-1: USB disconnect, device number 89 [ 930.505828][ T7590] usb 2-1: USB disconnect, device number 85 [ 930.854156][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'. [ 930.866239][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1947'. [ 931.733580][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.740109][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.968875][ T5811] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 932.078902][ T786] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 932.171963][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.188664][ T5811] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 932.197967][ T5811] usb 4-1: config 1 has no interface number 1 [ 932.279831][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 932.348609][ T5811] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 932.368699][ T5811] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 932.379745][ T5811] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 932.387119][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.393331][ T5811] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.410283][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.410308][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.418635][ T5811] usb 4-1: Product: syz [ 932.418657][ T5811] usb 4-1: Manufacturer: syz [ 932.418683][ T5811] usb 4-1: SerialNumber: syz [ 932.446774][ T786] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 932.456533][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.472482][ T786] usb 1-1: config 0 descriptor?? [ 932.914115][ T786] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 932.935599][ T786] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 933.957430][T13552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 934.174136][T13546] Cannot find add_set index 0 as target [ 934.222236][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 934.294553][ T5811] usb 4-1: USB disconnect, device number 94 [ 934.405032][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.947352][ T5811] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 935.157373][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 935.182272][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.196447][ T5811] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 935.221288][ T5811] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 935.231384][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.241538][ T5811] usb 3-1: Product: syz [ 935.246351][ T5811] usb 3-1: Manufacturer: syz [ 935.253016][ T5811] usb 3-1: SerialNumber: syz [ 935.261430][ T5811] usb 3-1: config 0 descriptor?? [ 935.290914][ T786] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 935.315317][ T786] ft260: probe of 0003:0403:6030.000C failed with error -71 [ 935.336985][ T786] usb 1-1: USB disconnect, device number 90 [ 935.530038][ T5811] usb 3-1: USB disconnect, device number 89 [ 935.875050][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 935.890271][T13589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1961'. [ 937.751346][T13597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 937.758213][T13597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 937.764898][T13597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 938.066750][T13606] ipip0: entered promiscuous mode [ 939.814933][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 939.821449][T13033] Bluetooth: hci3: command 0x0c1a tx timeout [ 939.827870][T13033] Bluetooth: hci2: command 0x0c1a tx timeout [ 940.914504][ T5829] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 941.060350][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 941.073278][T13634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1975'. [ 941.134420][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 941.144548][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.166165][ T5829] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 941.189490][ T5829] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 941.199778][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.229001][ T5829] usb 2-1: Product: syz [ 941.239169][ T5829] usb 2-1: Manufacturer: syz [ 941.253169][ T5829] usb 2-1: SerialNumber: syz [ 941.270333][ T5829] usb 2-1: config 0 descriptor?? [ 942.748169][ T5829] usb 2-1: USB disconnect, device number 86 [ 943.426163][T13653] loop5: detected capacity change from 0 to 7 [ 943.448280][T13653] Dev loop5: unable to read RDB block 7 [ 943.455401][T13653] loop5: unable to read partition table [ 943.463532][T13653] loop5: partition table beyond EOD, truncated [ 943.471064][T13653] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 945.371403][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 945.391593][T13678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1986'. [ 946.751724][ T5809] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 946.801476][ T5829] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 946.941326][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 946.949300][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.960139][ T5809] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.973914][ T5809] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 946.983505][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.003977][T13033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.014859][ T5809] usb 4-1: Product: syz [ 947.019264][T13033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 947.030880][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 947.038746][T13033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.038991][ T5809] usb 4-1: Manufacturer: syz [ 947.051732][ T5809] usb 4-1: SerialNumber: syz [ 947.054753][T13033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.058467][ T5829] usb 2-1: not running at top speed; connect to a high speed hub [ 947.065990][T13033] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 947.076210][ T5809] usb 4-1: config 0 descriptor?? [ 947.079153][T13033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.116965][ T5829] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.152847][ T5829] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 947.183719][ T5829] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 947.208958][ T5829] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 947.231225][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.241338][ T5829] usb 2-1: Product: syz [ 947.245744][ T5829] usb 2-1: Manufacturer: syz [ 947.250658][ T5829] usb 2-1: SerialNumber: syz [ 947.345548][T13689] chnl_net:caif_netlink_parms(): no params data found [ 948.942863][ T5829] usb 2-1: cannot find UAC_HEADER [ 948.959650][ T5813] usb 4-1: USB disconnect, device number 95 [ 949.027819][ T5829] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 949.115675][T13689] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.126757][T13689] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.134659][T13689] bridge_slave_0: entered allmulticast mode [ 949.143218][T13689] bridge_slave_0: entered promiscuous mode [ 949.148463][ T5829] usb 2-1: USB disconnect, device number 87 [ 949.152193][T13689] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.167268][T13033] Bluetooth: hci4: command tx timeout [ 949.194607][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.211100][T13689] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.218439][T13689] bridge_slave_1: entered allmulticast mode [ 949.237322][T13689] bridge_slave_1: entered promiscuous mode [ 949.285606][T13689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.299427][T13689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.357664][T13689] team0: Port device team_slave_0 added [ 949.375997][T13689] team0: Port device team_slave_1 added [ 949.478219][T13689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.486985][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.522109][T13689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.553618][T13689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.569323][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.637907][T13689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.853528][T13689] hsr_slave_0: entered promiscuous mode [ 949.887439][T13689] hsr_slave_1: entered promiscuous mode [ 949.926301][T13689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.934414][T13689] Cannot create hsr debugfs directory [ 949.951549][ T5834] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 950.310066][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 950.340546][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.371034][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.683222][ T5834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 950.712690][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.750234][ T5834] usb 2-1: config 0 descriptor?? [ 950.771791][ T5834] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 951.094187][T13689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 951.102181][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1997'. [ 951.117553][T13689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 951.130562][T13689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 951.138835][T13721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1997'. [ 951.153963][T13689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 951.239295][T13033] Bluetooth: hci4: command tx timeout [ 951.345078][T13689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.401083][T13689] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.429673][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.436944][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.448303][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.455830][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.806463][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 951.915367][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 951.927225][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 952.033196][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 952.043493][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 952.064739][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 952.180004][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 952.253259][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 952.313024][T13730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 952.497962][ T5813] usb 2-1: USB disconnect, device number 88 [ 952.688534][ T5152] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 952.689944][T13689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.084471][T13689] veth0_vlan: entered promiscuous mode [ 953.091344][ T5152] usb 4-1: Using ep0 maxpacket: 8 [ 953.105665][T13689] veth1_vlan: entered promiscuous mode [ 953.142620][ T5152] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 953.164681][T13689] veth0_macvtap: entered promiscuous mode [ 953.183210][T13689] veth1_macvtap: entered promiscuous mode [ 953.205455][T13689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.221277][ T5813] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 953.237007][ T5152] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 953.261884][ T5152] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=ca.77 [ 953.272200][T13689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.282409][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.293708][T13689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.305085][ T5152] usb 4-1: Product: syz [ 953.309627][T13689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.309637][ T5152] usb 4-1: Manufacturer: syz [ 953.322894][T13033] Bluetooth: hci4: command tx timeout [ 953.333373][T13689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.344779][ T5152] usb 4-1: SerialNumber: syz [ 953.346942][T13689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.366265][T13689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.448230][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 953.467759][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.481201][T13689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.511955][ T5813] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 953.524973][T13689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.544939][ T5813] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 953.556769][T13689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.578163][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.594969][T13689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.611289][ T5813] usb 2-1: Product: syz [ 953.620844][ T5813] usb 2-1: Manufacturer: syz [ 953.631368][T13689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.648083][ T5813] usb 2-1: SerialNumber: syz [ 953.660182][T13689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.677381][ T5813] usb 2-1: config 0 descriptor?? [ 953.706273][T13689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.764144][T13689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.783496][T13689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.813950][T13689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.834666][T13689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.046609][ T787] usb 2-1: USB disconnect, device number 89 [ 954.201816][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.210700][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.237038][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.247359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.447560][T13033] Bluetooth: hci4: command tx timeout [ 956.798655][ T786] usb 4-1: USB disconnect, device number 96 [ 956.901279][T13775] __nla_validate_parse: 10 callbacks suppressed [ 956.901299][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 956.939152][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2007'. [ 957.326146][ T7590] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 957.436333][ T786] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 957.540595][ T7590] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 957.576050][ T787] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 957.585373][ T7590] usb 4-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 957.612105][ T7590] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 957.633809][ T7590] usb 4-1: config 220 has no interface number 1 [ 957.636045][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 957.655979][ T7590] usb 4-1: config 220 interface 0 has no altsetting 0 [ 957.662821][ T7590] usb 4-1: config 220 interface 76 has no altsetting 0 [ 957.688252][ T7590] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 957.698113][ T7590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.707119][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.707588][ T7590] usb 4-1: Product: syz [ 957.728796][ T7590] usb 4-1: Manufacturer: syz [ 957.733503][ T7590] usb 4-1: SerialNumber: syz [ 957.744197][ T786] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 957.793902][ T786] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 957.808590][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.817495][ T786] usb 3-1: Product: syz [ 957.821971][ T786] usb 3-1: Manufacturer: syz [ 957.827560][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.827747][ T786] usb 3-1: SerialNumber: syz [ 957.858788][ T786] usb 3-1: config 0 descriptor?? [ 957.879168][ T787] usb 2-1: string descriptor 0 read error: -22 [ 957.898074][ T787] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 957.935944][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.983348][ T787] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 957.992806][ T7590] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 958.011687][ T7590] usb 4-1: No valid video chain found. [ 958.051535][ T7590] usb 4-1: USB disconnect, device number 97 [ 958.146092][ T5829] usb 3-1: USB disconnect, device number 90 [ 958.187744][ T5813] usb 2-1: USB disconnect, device number 90 [ 959.143754][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.176167][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.250608][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.275631][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.298066][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.341875][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.374427][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.418229][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 959.503958][T13816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 960.964323][ T5813] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 961.154326][ T5152] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 961.406549][ T5152] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 961.444180][ T5152] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 961.458887][ T5152] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 961.470517][ T5152] usb 2-1: config 220 has no interface number 1 [ 961.479451][ T5152] usb 2-1: config 220 interface 0 has no altsetting 0 [ 961.501759][ T5152] usb 2-1: config 220 interface 76 has no altsetting 0 [ 961.531431][ T5152] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 961.541118][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.552920][ T5152] usb 2-1: Product: syz [ 961.557492][ T5152] usb 2-1: Manufacturer: syz [ 961.562308][ T5152] usb 2-1: SerialNumber: syz [ 961.608364][T13838] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 961.619193][T13838] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 961.812372][ T5152] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 961.849762][ T5152] usb 2-1: No valid video chain found. [ 961.942588][ T5152] usb 2-1: USB disconnect, device number 91 [ 963.083387][ T786] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 963.273139][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 963.287095][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.318366][ T786] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 963.344892][ T786] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 963.377217][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.396268][ T786] usb 2-1: Product: syz [ 963.400661][ T786] usb 2-1: Manufacturer: syz [ 963.409582][ T786] usb 2-1: SerialNumber: syz [ 963.439345][ T786] usb 2-1: config 0 descriptor?? [ 963.575232][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 963.575249][ T28] audit: type=1326 audit(1772284625.600:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.634864][ T28] audit: type=1326 audit(1772284625.600:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.658194][ T28] audit: type=1326 audit(1772284625.650:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.694831][ T786] usb 2-1: USB disconnect, device number 92 [ 963.711985][ T28] audit: type=1326 audit(1772284625.650:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.760006][T13864] __nla_validate_parse: 11 callbacks suppressed [ 963.760020][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.782173][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.792136][ T28] audit: type=1326 audit(1772284625.650:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.840193][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.850919][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.864371][ T28] audit: type=1326 audit(1772284625.710:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.889235][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.898530][ T28] audit: type=1326 audit(1772284625.710:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.922350][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.933857][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.955765][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.972490][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 963.981773][ T28] audit: type=1326 audit(1772284625.710:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.981827][ T28] audit: type=1326 audit(1772284625.710:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 963.981870][ T28] audit: type=1326 audit(1772284625.710:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13850 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979fd9c799 code=0x7ffc0000 [ 964.057108][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 964.082601][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 964.138680][T13864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 964.254453][ T5813] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.265906][ T5813] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 964.275349][ T5813] usb 5-1: config 1 has no interface number 1 [ 964.283896][ T5813] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 964.297489][ T5813] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 964.329077][ T5813] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.367180][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.378623][ T5813] usb 5-1: Product: syz [ 964.385637][ T5813] usb 5-1: Manufacturer: syz [ 964.391005][ T5813] usb 5-1: SerialNumber: syz [ 964.432391][T13854] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 964.523078][ T27] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 964.742508][ T786] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 964.765842][ T5813] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 964.793620][ T5813] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 964.928258][ T5813] usb 5-1: USB disconnect, device number 3 [ 964.932383][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 964.974651][ T786] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 965.004965][ T8687] udevd[8687]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.022812][ T786] usb 2-1: config 0 has no interface number 0 [ 965.043978][ T786] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 965.059287][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.068464][ T786] usb 2-1: Product: syz [ 965.078296][ T786] usb 2-1: Manufacturer: syz [ 965.096035][ T786] usb 2-1: SerialNumber: syz [ 965.116854][ T786] usb 2-1: config 0 descriptor?? [ 965.292193][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.318362][ T27] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 965.338685][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.368539][ T786] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 965.383193][ T27] usb 3-1: config 0 descriptor?? [ 965.418334][ T27] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 965.422849][ T786] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 965.476505][ T786] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 965.515382][ T786] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 965.539275][ T786] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 965.789740][ T5152] usb 2-1: USB disconnect, device number 93 [ 965.800228][ T5152] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 965.890485][ T5152] keyspan 2-1:0.133: device disconnected [ 967.023287][T13886] netlink: 'syz.3.2040': attribute type 2 has an invalid length. [ 967.135335][T13889] IPVS: Error connecting to the multicast addr [ 968.274962][ T7590] usb 3-1: USB disconnect, device number 91 [ 968.467030][T13908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 968.920555][ T7590] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 969.182350][ T7590] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.260178][ T7590] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 969.290235][ T7590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.340959][ T7590] usb 2-1: config 0 descriptor?? [ 969.390448][ T7590] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 970.519975][ T7590] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 970.750489][ T7590] usb 3-1: Using ep0 maxpacket: 32 [ 970.789186][ T7590] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 970.861443][ T7590] usb 3-1: config 0 has no interface number 0 [ 970.867741][ T7590] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 970.881700][ T27] usb 2-1: USB disconnect, device number 94 [ 970.930504][ T7590] usb 3-1: config 0 interface 85 has no altsetting 0 [ 970.964357][ T7590] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 971.017122][ T7590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.047511][ T7590] usb 3-1: Product: syz [ 971.089675][ T7590] usb 3-1: Manufacturer: syz [ 971.139580][ T7590] usb 3-1: SerialNumber: syz [ 971.172769][ T7590] usb 3-1: config 0 descriptor?? [ 971.458515][T13932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.642880][T13932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.938952][ T5829] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 972.171030][ T5829] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 972.193573][ T7590] appletouch 3-1:0.85: Geyser mode initialized. [ 972.213806][ T5829] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 972.234100][ T5829] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 972.264498][ T5829] usb 2-1: config 220 has no interface number 2 [ 972.265856][ T7590] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input41 [ 972.312300][ T5829] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.363422][ T5829] usb 2-1: config 220 interface 0 has no altsetting 0 [ 972.383821][ T5829] usb 2-1: config 220 interface 76 has no altsetting 0 [ 972.434691][ T5829] usb 2-1: config 220 interface 1 has no altsetting 0 [ 972.477940][ T5829] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 972.521641][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.580919][ T5829] usb 2-1: Product: syz [ 972.595208][ T5829] usb 2-1: Manufacturer: syz [ 972.608624][ T5829] usb 2-1: SerialNumber: syz [ 972.671317][ T7590] usb 3-1: USB disconnect, device number 92 [ 972.689760][ T7590] appletouch 3-1:0.85: input: appletouch disconnected [ 972.713727][T13959] syzkaller0: entered promiscuous mode [ 972.730222][T13959] syzkaller0: entered allmulticast mode [ 972.847723][ T5829] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 972.855486][ T5829] usb 2-1: No valid video chain found. [ 972.877279][ T5829] usb 2-1: USB disconnect, device number 95 [ 973.410284][ T5829] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 973.638439][ T5829] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 973.646953][ T5829] usb 5-1: config 0 has no interface number 0 [ 973.690641][ T5829] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 973.708935][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.723013][ T5829] usb 5-1: Product: syz [ 973.727265][ T5829] usb 5-1: Manufacturer: syz [ 973.732207][ T5829] usb 5-1: SerialNumber: syz [ 973.744348][ T5829] usb 5-1: config 0 descriptor?? [ 973.974056][ T5829] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 974.014799][ T5829] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 974.109493][ T5829] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 974.119598][ T5829] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 974.144523][ T5829] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 974.301101][T13987] syzkaller0: entered promiscuous mode [ 974.306899][T13987] syzkaller0: entered allmulticast mode [ 974.390168][ T5829] usb 5-1: USB disconnect, device number 4 [ 974.417352][ T5829] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 974.446491][ T5829] keyspan 5-1:0.133: device disconnected [ 975.147409][ T5834] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 975.369117][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.445638][ T5834] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 975.488305][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.518282][ T5834] usb 4-1: config 0 descriptor?? [ 975.560952][ T5834] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 975.887051][ T5834] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 976.102395][ T5834] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 976.232016][ T5834] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 976.243725][ T5834] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 976.254292][ T5834] usb 2-1: config 220 has no interface number 2 [ 976.261563][ T5834] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 976.284337][ T5834] usb 2-1: config 220 interface 0 has no altsetting 0 [ 976.292940][ T5834] usb 2-1: config 220 interface 76 has no altsetting 0 [ 976.300889][ T5834] usb 2-1: config 220 interface 1 has no altsetting 0 [ 976.311190][ T5834] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 976.342034][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.370634][ T5834] usb 2-1: Product: syz [ 976.379998][ T5834] usb 2-1: Manufacturer: syz [ 976.454236][ T5834] usb 2-1: SerialNumber: syz [ 976.580196][T14011] syzkaller0: entered promiscuous mode [ 976.586122][T14011] syzkaller0: entered allmulticast mode [ 976.708206][ T5834] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 976.720211][ T5834] usb 2-1: No valid video chain found. [ 976.745343][ T5834] usb 2-1: USB disconnect, device number 96 [ 976.930445][T14019] __nla_validate_parse: 29 callbacks suppressed [ 976.930465][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 976.952504][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 976.965226][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 976.987869][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 977.007291][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 977.107888][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 977.153649][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 977.203377][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 977.229666][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 977.315941][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 977.416357][ T5834] usb 4-1: USB disconnect, device number 98 [ 977.488486][T14019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 981.739627][T14063] syzkaller0: entered promiscuous mode [ 981.763068][T14063] syzkaller0: entered allmulticast mode [ 982.745186][T14087] loop3: detected capacity change from 0 to 4096 [ 984.327081][T14089] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 984.578036][T14097] syzkaller0: entered promiscuous mode [ 984.586016][T14097] syzkaller0: entered allmulticast mode [ 985.072263][ T5813] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 985.114277][ T27] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 985.192829][T14108] __nla_validate_parse: 10 callbacks suppressed [ 985.192844][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.214030][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.232769][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.243084][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.255794][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.265859][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.285143][ T5813] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 985.302986][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.315265][ T5813] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 985.343264][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.354992][ T5813] usb 2-1: config 220 has no interface number 2 [ 985.362159][ T5813] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 985.393176][ T27] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 985.411666][ T27] usb 4-1: config 0 has no interface number 0 [ 985.420963][ T27] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 985.433484][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.446162][ T5813] usb 2-1: config 220 interface 0 has no altsetting 0 [ 985.464166][ T27] usb 4-1: Product: syz [ 985.476307][ T27] usb 4-1: Manufacturer: syz [ 985.483096][ T27] usb 4-1: SerialNumber: syz [ 985.498885][ T27] usb 4-1: config 0 descriptor?? [ 985.502513][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.513212][ T5813] usb 2-1: config 220 interface 76 has no altsetting 0 [ 985.523832][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 985.564954][ T5813] usb 2-1: config 220 interface 1 has no altsetting 0 [ 985.575709][T14108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 985.602113][ T5813] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 985.612142][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.620651][ T5813] usb 2-1: Product: syz [ 985.625105][ T5813] usb 2-1: Manufacturer: syz [ 985.630029][ T5813] usb 2-1: SerialNumber: syz [ 985.728284][ T27] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 985.751267][ T27] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 985.780642][ T27] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 985.800199][ T27] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 985.823206][ T27] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 985.865024][ T5813] usb 2-1: selecting invalid altsetting 0 [ 985.896764][ T5813] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 985.916787][ T5813] usb 2-1: No valid video chain found. [ 985.955857][ T5813] usb 2-1: selecting invalid altsetting 0 [ 985.969529][ T5813] usbtest: probe of 2-1:220.1 failed with error -22 [ 985.999386][ T5813] usb 2-1: USB disconnect, device number 97 [ 986.141529][ T7590] usb 4-1: USB disconnect, device number 99 [ 986.163936][ T7590] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 986.200599][ T7590] keyspan 4-1:0.133: device disconnected [ 986.505383][T14119] loop1: detected capacity change from 0 to 4096 [ 988.027952][T14120] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 988.424774][T14131] syzkaller0: entered promiscuous mode [ 988.445932][T14131] syzkaller0: entered allmulticast mode [ 989.378767][T14146] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 989.387685][T14146] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 989.672321][T14151] loop4: detected capacity change from 0 to 4096 [ 991.802181][T14152] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 992.339357][T14166] __nla_validate_parse: 8 callbacks suppressed [ 992.339375][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.365755][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.403685][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.432005][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.442422][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.496920][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.525745][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.596636][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.607787][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.623971][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 992.668640][ T5152] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 992.855155][T14166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 992.908483][ T5152] usb 2-1: Using ep0 maxpacket: 32 [ 992.921819][ T5152] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 992.955517][ T5152] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 992.976116][ T5152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.019733][ T5152] usb 2-1: config 0 descriptor?? [ 993.047541][ T5152] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 993.151150][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.157785][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.568178][ T27] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 993.770411][ T27] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 993.784866][ T27] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 993.804968][ T27] usb 4-1: config 220 has no interface number 2 [ 993.814654][ T27] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 993.837868][ T27] usb 4-1: config 220 interface 0 has no altsetting 0 [ 993.851662][ T27] usb 4-1: config 220 interface 76 has no altsetting 0 [ 993.871418][ T27] usb 4-1: config 220 interface 1 has no altsetting 0 [ 993.885712][ T27] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 993.903814][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.921594][ T27] usb 4-1: Product: syz [ 993.928388][ T27] usb 4-1: Manufacturer: syz [ 993.942594][ T27] usb 4-1: SerialNumber: syz [ 994.144889][T14186] loop2: detected capacity change from 0 to 4096 [ 994.186972][ T27] usb 4-1: selecting invalid altsetting 0 [ 994.345686][ T27] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 994.352967][ T27] usb 4-1: No valid video chain found. [ 994.364156][ T27] usb 4-1: selecting invalid altsetting 0 [ 994.370223][ T27] usbtest: probe of 4-1:220.1 failed with error -22 [ 994.399829][ T27] usb 4-1: USB disconnect, device number 100 [ 995.686337][T14187] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 995.761692][ T5811] usb 2-1: USB disconnect, device number 98 [ 996.749933][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 996.749951][ T28] audit: type=1326 audit(1772284658.797:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 996.870035][ T28] audit: type=1326 audit(1772284658.827:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 996.969501][ T28] audit: type=1326 audit(1772284658.827:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.053095][ T28] audit: type=1326 audit(1772284658.827:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.149983][ T28] audit: type=1326 audit(1772284658.827:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.172706][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.261041][ T28] audit: type=1326 audit(1772284658.837:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.326301][ T5811] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 997.369239][ T28] audit: type=1326 audit(1772284658.837:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.486536][ T28] audit: type=1326 audit(1772284658.837:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.526165][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 997.597396][ T28] audit: type=1326 audit(1772284658.837:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.647978][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.691937][ T28] audit: type=1326 audit(1772284659.047:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb81b9c799 code=0x7ffc0000 [ 997.733384][ T5811] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 997.846304][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.866947][ T5811] usb 5-1: config 0 descriptor?? [ 997.928189][ T5811] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 998.730135][T14221] loop3: detected capacity change from 0 to 4096 [ 999.637155][T14224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1000.194524][ T7590] usb 5-1: USB disconnect, device number 5 [ 1000.251136][T14231] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1000.260422][T14231] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1000.731874][T14239] __nla_validate_parse: 9 callbacks suppressed [ 1000.731895][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.790283][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.802675][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.820033][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.829995][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.882246][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.900977][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.939785][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.954690][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1000.972201][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1001.104790][T14239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.533638][T14248] loop5: detected capacity change from 0 to 7 [ 1001.557616][T14248] Dev loop5: unable to read RDB block 7 [ 1001.586476][T14248] loop5: unable to read partition table [ 1001.635845][T14248] loop5: partition table beyond EOD, truncated [ 1001.659157][T14248] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1001.998255][T14256] loop3: detected capacity change from 0 to 4096 [ 1002.945805][T14261] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1003.762933][ T5813] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1003.923370][ T5813] usb 3-1: device descriptor read/64, error -71 [ 1004.232676][ T5813] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1004.442579][ T5813] usb 3-1: device descriptor read/64, error -71 [ 1004.612719][ T5813] usb usb3-port1: attempt power cycle [ 1004.812813][ T5152] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1005.005224][ T5152] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1005.034377][ T5813] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1005.061479][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.082257][ T5152] usb 5-1: config 0 descriptor?? [ 1005.091634][ T5152] cp210x 5-1:0.0: cp210x converter detected [ 1005.099575][ T5813] usb 3-1: device descriptor read/8, error -71 [ 1005.372761][ T5813] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1005.422882][ T5813] usb 3-1: device descriptor read/8, error -71 [ 1005.499548][ T5152] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1005.582504][ T5813] usb usb3-port1: unable to enumerate USB device [ 1006.548972][T14287] loop5: detected capacity change from 0 to 7 [ 1006.559414][T14287] Dev loop5: unable to read RDB block 7 [ 1006.568110][T14287] loop5: unable to read partition table [ 1006.574512][T14287] loop5: partition table beyond EOD, truncated [ 1006.588603][T14287] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1007.041448][ T5811] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1007.231243][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 1007.243286][ T5811] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.254965][ T5811] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1007.266770][ T5811] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1007.286711][ T5811] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1007.296217][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.304436][ T5811] usb 3-1: Product: syz [ 1007.308992][ T5811] usb 3-1: Manufacturer: syz [ 1007.314108][ T5811] usb 3-1: SerialNumber: syz [ 1007.330887][ T5811] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1007.344810][ T5811] imon 3-1:155.0: unable to initialize intf0, err -19 [ 1007.352086][ T5811] imon:imon_probe: failed to initialize context! [ 1007.359603][ T5811] imon 3-1:155.0: unable to register, err -19 [ 1007.389818][ T5152] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1007.411201][ T5152] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1007.437568][ T5152] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1007.470863][ T5152] usb 5-1: USB disconnect, device number 6 [ 1007.489006][ T5152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1007.499073][ T5152] cp210x 5-1:0.0: device disconnected [ 1007.821038][T14302] __nla_validate_parse: 8 callbacks suppressed [ 1007.821060][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.837057][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.846549][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.868375][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.879494][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.898307][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.949825][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.969267][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.987505][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1007.997865][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1008.073160][T14302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1009.351720][ T5152] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1009.520213][ T5152] usb 4-1: device descriptor read/64, error -71 [ 1009.773417][ T5813] usb 3-1: USB disconnect, device number 97 [ 1009.810154][ T5152] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1009.969836][ T5152] usb 4-1: device descriptor read/64, error -71 [ 1010.100028][ T5152] usb usb4-port1: attempt power cycle [ 1010.530110][ T5152] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1010.587029][ T5152] usb 4-1: device descriptor read/8, error -71 [ 1010.862006][ T5152] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1010.954796][ T5152] usb 4-1: device descriptor read/8, error -71 [ 1011.100153][ T5152] usb usb4-port1: unable to enumerate USB device [ 1011.289127][ T27] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1011.399100][ T5811] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1011.483481][ T27] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1011.499711][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.521272][ T27] usb 2-1: config 0 descriptor?? [ 1011.544641][ T27] cp210x 2-1:0.0: cp210x converter detected [ 1011.594870][ T5811] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1011.606167][ T5811] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.627529][ T5811] usb 3-1: config 220 has no interface number 2 [ 1011.634566][ T5811] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1011.653949][ T5811] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1011.661372][ T5811] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1011.668499][ T5811] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1011.683288][ T5811] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1011.698209][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.715489][ T5811] usb 3-1: Product: syz [ 1011.720905][ T5811] usb 3-1: Manufacturer: syz [ 1011.725961][ T5811] usb 3-1: SerialNumber: syz [ 1011.959756][ T5811] usb 3-1: selecting invalid altsetting 0 [ 1011.968524][ T27] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1011.979854][ T5811] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1011.999671][ T5811] usb 3-1: No valid video chain found. [ 1012.023883][ T5811] usb 3-1: selecting invalid altsetting 0 [ 1012.035814][ T5811] usbtest: probe of 3-1:220.1 failed with error -22 [ 1012.062613][ T5811] usb 3-1: USB disconnect, device number 98 [ 1013.387617][T14353] __nla_validate_parse: 8 callbacks suppressed [ 1013.387656][T14353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 1013.613561][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 1013.871663][ T27] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1013.894845][ T27] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1013.957449][ T27] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1014.012927][ T27] usb 2-1: USB disconnect, device number 99 [ 1014.040711][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1014.061231][ T27] cp210x 2-1:0.0: device disconnected [ 1014.429062][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.445331][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.457242][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.495189][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.516248][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.527319][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.551088][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.619277][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1014.651586][T14367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1015.223199][T14379] loop1: detected capacity change from 0 to 4096 [ 1015.567602][ T5811] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1016.282410][T14383] CIFS: Unable to determine destination address [ 1016.705037][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1016.767749][ T5811] usb 5-1: not running at top speed; connect to a high speed hub [ 1016.794848][ T5811] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.846606][ T5811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1016.859483][ T5811] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1016.922083][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.956711][ T5811] usb 5-1: Product: syz [ 1016.970040][ T5811] usb 5-1: Manufacturer: syz [ 1016.993321][ T5811] usb 5-1: SerialNumber: syz [ 1017.257863][ T5811] usb 5-1: USB disconnect, device number 7 [ 1017.466174][ T27] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1017.586083][ T7590] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1017.672686][ T27] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1017.682196][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.695003][ T27] usb 3-1: config 0 descriptor?? [ 1017.703647][ T27] cp210x 3-1:0.0: cp210x converter detected [ 1017.812436][ T7590] usb 2-1: Using ep0 maxpacket: 32 [ 1017.830962][ T7590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.866005][ T7590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.889571][ T7590] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1017.913592][ T7590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.941605][ T7590] usb 2-1: config 0 descriptor?? [ 1017.953068][ T7590] hub 2-1:0.0: USB hub found [ 1018.114748][ T27] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1018.134462][ T27] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1018.192814][ T7590] hub 2-1:0.0: 1 port detected [ 1018.198747][ T27] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1018.224765][ T27] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1018.261866][ T27] usb 3-1: USB disconnect, device number 99 [ 1018.295068][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1018.344238][ T27] cp210x 3-1:0.0: device disconnected [ 1018.801753][ T7590] hub 2-1:0.0: activate --> -90 [ 1019.026294][ T5829] usb 2-1: USB disconnect, device number 100 [ 1019.865051][ T27] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1020.062391][ T27] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1020.073360][ T27] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.099229][ T27] usb 4-1: config 220 has no interface number 2 [ 1020.126679][ T27] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1020.189315][ T27] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1020.226283][ T27] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1020.281198][ T27] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1020.313354][ T27] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1020.331647][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.352091][ T27] usb 4-1: Product: syz [ 1020.383574][ T27] usb 4-1: Manufacturer: syz [ 1020.421315][ T27] usb 4-1: SerialNumber: syz [ 1020.702612][ T27] usb 4-1: selecting invalid altsetting 0 [ 1020.720861][ T27] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1020.728623][ T27] usb 4-1: No valid video chain found. [ 1020.778403][ T27] usb 4-1: selecting invalid altsetting 0 [ 1020.792703][ T27] usbtest: probe of 4-1:220.1 failed with error -22 [ 1020.821291][ T27] usb 4-1: USB disconnect, device number 105 [ 1021.019856][T14424] __nla_validate_parse: 10 callbacks suppressed [ 1021.019872][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.036251][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.068571][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.095669][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.119690][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.139031][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.149415][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.159578][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.176239][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.197464][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1021.281117][T14424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1021.854863][ T5811] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1022.057208][ T5811] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1022.087327][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.131148][ T5811] usb 4-1: config 0 descriptor?? [ 1022.175598][ T5811] cp210x 4-1:0.0: cp210x converter detected [ 1022.566862][ T5811] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1022.625149][ T5811] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1022.642967][ T5811] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1022.706407][ T5811] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1022.760147][ T5811] usb 4-1: USB disconnect, device number 106 [ 1022.806785][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1022.841204][ T5811] cp210x 4-1:0.0: device disconnected [ 1023.173320][T11889] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1023.364626][T11889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1023.393067][T11889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1023.433078][T11889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1023.474612][T11889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1023.516647][T11889] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1023.538266][T11889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.562961][T11889] usb 3-1: Product: syz [ 1023.573330][T11889] usb 3-1: Manufacturer: syz [ 1023.588897][T11889] usb 3-1: SerialNumber: syz [ 1023.640279][T11889] usb 3-1: config 0 descriptor?? [ 1023.676824][T11889] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1023.926594][T11889] scsi host1: usb-storage 3-1:0.0 [ 1023.980516][T11889] usb 3-1: USB disconnect, device number 100 [ 1024.112805][ T786] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1024.335353][ T786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1024.352432][ T786] usb 5-1: not running at top speed; connect to a high speed hub [ 1024.392202][ T786] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1024.400720][ T786] usb 5-1: config 0 has no interface number 0 [ 1024.421916][ T786] usb 5-1: New USB device found, idVendor=16d8, idProduct=7251, bcdDevice=2c.bc [ 1024.434626][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.444883][ T786] usb 5-1: Product: syz [ 1024.449301][ T786] usb 5-1: Manufacturer: syz [ 1024.454435][ T786] usb 5-1: SerialNumber: syz [ 1024.461935][ T786] usb 5-1: config 0 descriptor?? [ 1024.749735][ T786] usb 5-1: USB disconnect, device number 8 [ 1025.212592][ T7590] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1025.422212][ T7590] usb 3-1: Using ep0 maxpacket: 16 [ 1025.434684][ T7590] usb 3-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 1025.482100][ T7590] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1025.500471][ T7590] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 1025.513577][ T7590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.530257][ T7590] usb 3-1: Product: syz [ 1025.550701][ T7590] usb 3-1: Manufacturer: syz [ 1025.568970][ T7590] usb 3-1: SerialNumber: syz [ 1025.584305][ T7590] usb 3-1: config 0 descriptor?? [ 1026.003624][T11889] usb 3-1: USB disconnect, device number 101 [ 1027.123950][T14479] __nla_validate_parse: 10 callbacks suppressed [ 1027.123972][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.155450][ T5811] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1027.220904][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.266229][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.306741][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.357819][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.438868][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.532445][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.572657][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.619710][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.642066][ T5811] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1027.669695][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.687814][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 1027.700964][ T5811] usb 4-1: config 0 descriptor?? [ 1027.722382][ T5811] cp210x 4-1:0.0: cp210x converter detected [ 1027.817102][T14479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1028.109915][ T5811] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1028.121126][ T5811] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1028.143021][ T5811] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1028.162330][ T5811] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1028.196985][ T5811] usb 4-1: USB disconnect, device number 107 [ 1028.206805][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1028.216950][ T5811] cp210x 4-1:0.0: device disconnected [ 1028.560569][ T7590] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1028.852750][ T7590] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1028.889321][ T7590] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.926890][ T7590] usb 5-1: config 220 has no interface number 2 [ 1028.946977][ T7590] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1028.981047][ T7590] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1028.999178][ T7590] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1029.006589][ T7590] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1029.024710][ T7590] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1029.044701][ T7590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.063615][ T7590] usb 5-1: Product: syz [ 1029.073049][ T7590] usb 5-1: Manufacturer: syz [ 1029.085258][ T7590] usb 5-1: SerialNumber: syz [ 1029.230225][ T5152] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1029.330551][ T7590] usb 5-1: selecting invalid altsetting 0 [ 1029.340643][ T7590] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1029.347060][ T7590] usb 5-1: No valid video chain found. [ 1029.359867][ T7590] usb 5-1: selecting invalid altsetting 0 [ 1029.370830][ T7590] usbtest: probe of 5-1:220.1 failed with error -22 [ 1029.395252][ T7590] usb 5-1: USB disconnect, device number 9 [ 1029.420155][ T5152] usb 3-1: Using ep0 maxpacket: 32 [ 1029.454197][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.482890][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.509259][ T5152] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1029.537337][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.566612][ T5152] usb 3-1: config 0 descriptor?? [ 1030.000506][ T5152] usbhid 3-1:0.0: can't add hid device: -71 [ 1030.007344][ T5152] usbhid: probe of 3-1:0.0 failed with error -71 [ 1030.074411][ T5152] usb 3-1: USB disconnect, device number 102 [ 1031.015648][T14519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1033.068821][ T5152] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1033.328851][ T5152] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1033.362509][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.404208][ T5152] usb 3-1: config 0 descriptor?? [ 1033.435078][ T5152] cp210x 3-1:0.0: cp210x converter detected [ 1033.841809][ T5152] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1034.318462][ T7590] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1034.554454][ T7590] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.624409][ T7590] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1034.643118][ T7590] usb 4-1: config 1 has no interface number 1 [ 1034.666593][ T7590] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1034.707778][ T7590] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1034.755165][ T7590] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1034.781573][ T7590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.802083][ T7590] usb 4-1: Product: syz [ 1034.806406][ T7590] usb 4-1: Manufacturer: syz [ 1034.811265][ T7590] usb 4-1: SerialNumber: syz [ 1034.826034][T14541] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1035.118300][T14541] Cannot find add_set index 0 as target [ 1035.180085][ T7590] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1035.223457][ T7590] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1035.316280][ T7590] usb 4-1: USB disconnect, device number 108 [ 1035.468908][ T8661] udevd[8661]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1035.822161][ T5152] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1035.877014][ T5152] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1035.984203][ T5152] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1036.069470][ T5152] usb 3-1: USB disconnect, device number 103 [ 1036.125677][ T5152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1036.278517][ T5152] cp210x 3-1:0.0: device disconnected [ 1037.111362][T14565] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1037.120327][T14565] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1037.296260][ T7590] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1037.306326][ T5811] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1037.478639][ T7590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1037.491729][ T7590] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1037.502650][ T7590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1037.512784][ T7590] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1037.522918][ T5811] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1037.531381][ T5811] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.541872][ T5811] usb 2-1: config 220 has no interface number 2 [ 1037.548550][ T5811] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1037.562044][ T5811] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1037.569205][ T5811] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1037.576258][ T5811] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1037.584860][ T7590] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1037.594778][ T7590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.603976][ T7590] usb 5-1: Product: syz [ 1037.608441][ T7590] usb 5-1: Manufacturer: syz [ 1037.613401][ T7590] usb 5-1: SerialNumber: syz [ 1037.619979][ T5811] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1037.629622][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.638890][ T7590] usb 5-1: config 0 descriptor?? [ 1037.644342][ T5811] usb 2-1: Product: syz [ 1037.650041][ T7590] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1037.657179][ T5811] usb 2-1: Manufacturer: syz [ 1037.664271][ T5811] usb 2-1: SerialNumber: syz [ 1037.859400][ T7590] scsi host1: usb-storage 5-1:0.0 [ 1037.876160][ T7590] usb 5-1: USB disconnect, device number 10 [ 1037.909316][ T5811] usb 2-1: selecting invalid altsetting 0 [ 1037.932829][ T5811] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1037.945010][ T5811] usb 2-1: No valid video chain found. [ 1037.981918][ T5811] usb 2-1: selecting invalid altsetting 0 [ 1037.992539][ T5811] usbtest: probe of 2-1:220.1 failed with error -22 [ 1038.018904][ T5811] usb 2-1: USB disconnect, device number 101 [ 1038.115776][ T5152] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1038.297565][ T5152] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.315749][ T5152] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1038.324880][ T5152] usb 4-1: config 1 has no interface number 1 [ 1038.334561][ T5152] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1038.359175][ T5152] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1038.378194][ T5152] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1038.405250][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.429495][ T5152] usb 4-1: Product: syz [ 1038.444126][ T5152] usb 4-1: Manufacturer: syz [ 1038.449196][ T5813] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1038.471017][ T5152] usb 4-1: SerialNumber: syz [ 1038.496361][T14579] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1038.681078][ T5813] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1038.718658][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.728515][T14579] Cannot find add_set index 0 as target [ 1038.779907][ T5813] usb 3-1: config 0 descriptor?? [ 1038.800000][ T5152] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1038.828854][ T5813] cp210x 3-1:0.0: cp210x converter detected [ 1038.835853][ T5152] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1038.916061][ T5152] usb 4-1: USB disconnect, device number 109 [ 1039.092532][ T8687] udevd[8687]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.246750][ T5813] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1041.139010][ T5813] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1041.199051][ T5813] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1041.251682][ T5813] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1041.300530][ T5813] usb 3-1: USB disconnect, device number 104 [ 1041.337162][ T5813] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1041.372609][ T5813] cp210x 3-1:0.0: device disconnected [ 1041.514079][ T27] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1041.747892][ T27] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1041.775302][ T27] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1041.835938][ T27] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.850471][ T27] usb 5-1: config 220 has no interface number 2 [ 1041.859338][ T27] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1041.895690][ T27] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1041.933818][ T27] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1041.941143][ T27] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1041.959078][ T27] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1041.968899][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.984399][ T27] usb 5-1: Product: syz [ 1041.990996][ T27] usb 5-1: Manufacturer: syz [ 1041.996521][ T27] usb 5-1: SerialNumber: syz [ 1042.221903][ T27] usb 5-1: selecting invalid altsetting 0 [ 1042.238897][ T27] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1042.265950][ T27] usb 5-1: No valid video chain found. [ 1042.282814][ T27] usb 5-1: selecting invalid altsetting 0 [ 1042.289407][ T27] usbtest: probe of 5-1:220.1 failed with error -22 [ 1042.301076][ T27] usb 5-1: USB disconnect, device number 11 [ 1042.307359][ T7590] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1042.522272][ T7590] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.559811][ T7590] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1042.578012][ T7590] usb 3-1: config 1 has no interface number 1 [ 1042.599499][ T7590] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1042.633147][ T7590] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1042.666995][ T7590] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.681380][ T7590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.689658][ T7590] usb 3-1: Product: syz [ 1042.699745][ T7590] usb 3-1: Manufacturer: syz [ 1042.705848][ T7590] usb 3-1: SerialNumber: syz [ 1042.719023][T14631] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1042.959661][T14631] SET target dimension over the limit! [ 1042.983870][ T7590] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1043.004992][ T7590] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1043.096829][ T7590] usb 3-1: USB disconnect, device number 105 [ 1043.196619][ T8661] udevd[8661]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.293462][ T27] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1043.488454][ T27] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1043.523107][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.546554][ T27] usb 5-1: config 0 descriptor?? [ 1043.578702][ T27] cp210x 5-1:0.0: cp210x converter detected [ 1043.991328][ T27] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1044.352753][ T7590] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1044.557554][ T7590] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1044.574531][ T7590] usb 2-1: not running at top speed; connect to a high speed hub [ 1044.606459][ T7590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.632512][ T7590] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1044.669137][ T7590] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1044.681232][ T7590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.706000][ T7590] usb 2-1: Product: syz [ 1044.719235][ T7590] usb 2-1: Manufacturer: syz [ 1044.731589][ T7590] usb 2-1: SerialNumber: syz [ 1044.785893][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1044.809422][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1044.818677][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1044.819780][ T5767] syz_tun (unregistering): left allmulticast mode [ 1044.837514][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1044.847009][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1044.857039][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.992416][ T7590] usb 2-1: cannot find UAC_HEADER [ 1045.026743][ T7590] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1045.038950][ T7590] usb 2-1: USB disconnect, device number 102 [ 1045.073960][ T8675] udevd[8675]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1045.157245][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.181536][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.363872][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.375378][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.495054][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.516212][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.736357][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.787175][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.934441][T14660] chnl_net:caif_netlink_parms(): no params data found [ 1046.075673][ T27] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1046.173018][ T27] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1046.210927][ T27] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1046.362969][ T27] usb 5-1: USB disconnect, device number 12 [ 1046.403073][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1046.426501][ T27] cp210x 5-1:0.0: device disconnected [ 1046.935100][T14660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.954876][ T51] Bluetooth: hci0: command tx timeout [ 1046.990309][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.040311][T14660] bridge_slave_0: entered allmulticast mode [ 1047.106550][T14660] bridge_slave_0: entered promiscuous mode [ 1047.183143][T14660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.184788][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.184939][T14660] bridge_slave_1: entered allmulticast mode [ 1047.187434][T14660] bridge_slave_1: entered promiscuous mode [ 1047.347801][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.365966][T14695] __nla_validate_parse: 30 callbacks suppressed [ 1047.365986][T14695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'. [ 1047.495956][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.557599][T14660] team0: Port device team_slave_0 added [ 1047.915785][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 1048.024823][T14660] team0: Port device team_slave_1 added [ 1048.229151][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.260816][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.392672][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.550705][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.557966][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.597313][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.770437][ T5813] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1048.977242][T14660] hsr_slave_0: entered promiscuous mode [ 1048.993688][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1049.040578][T14660] hsr_slave_1: entered promiscuous mode [ 1049.041409][ T5813] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1049.088640][ T5813] usb 2-1: can't read configurations, error -71 [ 1049.088765][T14660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.131081][T14660] Cannot create hsr debugfs directory [ 1049.570294][ T5152] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1049.783069][ T5152] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1049.805429][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.830995][ T5152] usb 4-1: config 0 descriptor?? [ 1049.841321][ T5152] cp210x 4-1:0.0: cp210x converter detected [ 1050.268927][ T5152] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1050.594476][ T36] hsr_slave_0: left promiscuous mode [ 1050.636199][ T36] hsr_slave_1: left promiscuous mode [ 1050.670102][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.692034][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.707128][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.732339][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.767479][ T36] bridge_slave_1: left allmulticast mode [ 1050.791397][ T36] bridge_slave_1: left promiscuous mode [ 1050.800383][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.821303][ T36] bridge_slave_0: left allmulticast mode [ 1050.827370][ T36] bridge_slave_0: left promiscuous mode [ 1050.874160][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.982135][ T36] veth1_macvtap: left promiscuous mode [ 1050.991278][ T36] veth0_macvtap: left promiscuous mode [ 1050.997408][ T36] veth1_vlan: left promiscuous mode [ 1051.003466][ T36] veth0_vlan: left promiscuous mode [ 1051.742257][ T36] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1051.822042][T14750] usb usb8: usbfs: process 14750 (syz.4.2285) did not claim interface 0 before use [ 1052.175697][ T5152] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1052.192848][ T5152] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1052.211011][ T5152] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1052.265175][ T5152] usb 4-1: USB disconnect, device number 110 [ 1052.284676][ T5152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1052.304817][ T5152] cp210x 4-1:0.0: device disconnected [ 1052.698525][ T5811] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1052.907390][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 1052.922482][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.941104][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.963006][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1052.974083][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.993103][ T5811] usb 2-1: config 0 descriptor?? [ 1053.026532][ T5811] hub 2-1:0.0: bad descriptor, ignoring hub [ 1053.053853][ T5811] hub: probe of 2-1:0.0 failed with error -5 [ 1053.089819][ T5811] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1053.715813][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1053.928804][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1054.174557][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.445188][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.550730][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.557207][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.403664][ T5152] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1055.443076][ T36] bond0 (unregistering): Released all slaves [ 1055.587767][ T5829] usb 2-1: USB disconnect, device number 105 [ 1055.643354][ T5152] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1055.668078][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.696080][ T5152] usb 4-1: config 0 descriptor?? [ 1055.749647][ T5152] cp210x 4-1:0.0: cp210x converter detected [ 1056.004538][T14660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1056.051789][T14660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1056.085048][T14660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1056.101669][T14660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1056.208252][ T5152] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1056.309193][ T36] IPVS: stop unused estimator thread 0... [ 1056.405790][T14660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.495749][T14660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.520133][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.527496][T14777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.558302][ T7590] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1056.571758][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.579020][T14777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.749214][ T7590] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.759817][ T7590] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1056.780255][ T7590] usb 5-1: config 1 has no interface number 1 [ 1056.795903][ T7590] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1056.828838][ T7590] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1056.875025][ T7590] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1056.892160][ T7590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.914242][ T7590] usb 5-1: Product: syz [ 1056.925368][ T7590] usb 5-1: Manufacturer: syz [ 1056.954825][ T7590] usb 5-1: SerialNumber: syz [ 1056.996831][T14800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1057.225977][T14800] Cannot find add_set index 0 as target [ 1057.304053][ T7590] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1057.321994][T14660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.339653][ T7590] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1057.442687][ T7590] usb 5-1: USB disconnect, device number 13 [ 1057.538415][T14660] veth0_vlan: entered promiscuous mode [ 1057.576410][T14660] veth1_vlan: entered promiscuous mode [ 1057.619262][ T8687] udevd[8687]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.694453][T14660] veth0_macvtap: entered promiscuous mode [ 1057.732321][T14660] veth1_macvtap: entered promiscuous mode [ 1057.781319][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.801845][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.823249][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.861107][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.877913][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.904758][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.939905][T14660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.011719][ T5152] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1058.018668][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.055690][ T5152] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1058.063400][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.085814][ T5152] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1058.105777][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.144736][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.146374][ T5152] usb 4-1: USB disconnect, device number 111 [ 1058.183724][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.209162][ T5152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1058.215711][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.244267][ T5152] cp210x 4-1:0.0: device disconnected [ 1058.282172][T14660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.333769][T14660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.359057][T14660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.373651][T14660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.402608][T14660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.597200][ T786] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1058.681951][ T2885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.704159][ T2885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.794912][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.825417][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.839709][ T786] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1058.861620][ T786] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1058.904003][ T786] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.926138][ T786] usb 5-1: config 220 has no interface number 2 [ 1058.939631][ T786] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1058.987937][ T786] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1059.014553][ T786] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1059.039674][ T786] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1059.061989][ T786] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1059.073336][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.099963][ T786] usb 5-1: Product: syz [ 1059.113698][ T786] usb 5-1: Manufacturer: syz [ 1059.126850][ T786] usb 5-1: SerialNumber: syz [ 1059.369776][ T786] usb 5-1: selecting invalid altsetting 0 [ 1059.390887][ T786] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1059.408045][ T786] usb 5-1: No valid video chain found. [ 1059.445611][ T786] usb 5-1: selecting invalid altsetting 0 [ 1059.466788][ T786] usbtest: probe of 5-1:220.1 failed with error -22 [ 1059.512950][ T786] usb 5-1: USB disconnect, device number 14 [ 1059.705248][ T5829] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1059.920024][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 1059.932617][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.957460][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.012869][ T5829] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1060.022883][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.043182][ T5829] usb 2-1: config 0 descriptor?? [ 1060.066605][ T5829] hub 2-1:0.0: bad descriptor, ignoring hub [ 1060.081947][ T5829] hub: probe of 2-1:0.0 failed with error -5 [ 1060.091869][ T5829] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1062.288998][ T7590] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1062.514932][ T7590] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1062.551908][ T7590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.590712][ T7590] usb 4-1: config 0 descriptor?? [ 1062.614137][ T786] usb 2-1: USB disconnect, device number 106 [ 1062.644282][ T7590] cp210x 4-1:0.0: cp210x converter detected [ 1063.056608][ T7590] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1063.124369][ T5811] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1063.273488][ T27] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1063.313255][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 1063.329958][ T5811] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1063.340676][ T5811] usb 2-1: config 0 has no interface number 0 [ 1063.348696][ T5811] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1063.362930][ T5811] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1063.375718][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1063.385402][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.394684][ T5811] usb 2-1: Product: syz [ 1063.399096][ T5811] usb 2-1: Manufacturer: syz [ 1063.405988][ T5811] usb 2-1: SerialNumber: syz [ 1063.420037][ T5811] usb 2-1: config 0 descriptor?? [ 1063.463109][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 1063.484672][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1063.501552][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1063.513454][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1063.524625][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.538557][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1063.548020][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.776302][ T27] usb 5-1: GET_CAPABILITIES returned 0 [ 1063.787386][ T27] usbtmc 5-1:16.0: can't read capabilities [ 1063.868712][ T5811] appletouch 2-1:0.85: Failed to read mode from device. [ 1063.889294][ T5811] appletouch: probe of 2-1:0.85 failed with error -5 [ 1063.926000][ T5811] usb 2-1: USB disconnect, device number 107 [ 1064.030928][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1064.063031][ T27] usb 5-1: USB disconnect, device number 15 [ 1064.931055][ T7590] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1064.998746][ T7590] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1065.050114][ T7590] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1065.111816][ T7590] usb 4-1: USB disconnect, device number 112 [ 1065.129460][T14935] pimreg: entered allmulticast mode [ 1065.155396][ T7590] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1065.166181][T14936] pimreg: left allmulticast mode [ 1065.219510][ T7590] cp210x 4-1:0.0: device disconnected [ 1066.047562][T14940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1066.168080][T14941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1066.226975][T14940] netlink: 'syz.3.2322': attribute type 2 has an invalid length. [ 1066.255962][T14940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1067.091933][ T5152] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1067.181378][ T786] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1067.307908][ T5152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.318875][ T5152] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1067.343538][ T5152] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=39.5d [ 1067.358232][ T5152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.367461][ T5152] usb 5-1: Product: syz [ 1067.372409][ T5152] usb 5-1: Manufacturer: syz [ 1067.377045][ T5152] usb 5-1: SerialNumber: syz [ 1067.382286][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 1067.390704][ T5152] usb 5-1: config 0 descriptor?? [ 1067.398976][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.411097][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.430320][ T786] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1067.461429][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.482832][ T786] usb 3-1: config 0 descriptor?? [ 1067.513063][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2328'. [ 1067.568400][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2328'. [ 1067.631193][ T5152] usb 5-1: USB disconnect, device number 16 [ 1067.741176][ T7590] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1067.893183][ T786] usbhid 3-1:0.0: can't add hid device: -71 [ 1067.914618][ T786] usbhid: probe of 3-1:0.0 failed with error -71 [ 1067.930989][ T786] usb 3-1: USB disconnect, device number 106 [ 1067.936954][ T7590] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1067.949015][ T7590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.971275][ T7590] usb 2-1: config 0 descriptor?? [ 1067.992608][ T7590] cp210x 2-1:0.0: cp210x converter detected [ 1068.393917][ T7590] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1068.527385][T14965] dummy0: entered promiscuous mode [ 1068.550158][T14965] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1068.583033][T14965] hsr1: entered allmulticast mode [ 1068.621358][T14965] dummy0: entered allmulticast mode [ 1068.650808][T14965] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1068.659857][T14967] input: syz0 as /devices/virtual/input/input43 [ 1068.817832][T14970] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1069.404006][T14972] overlayfs: missing 'lowerdir' [ 1070.563411][ T7590] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1070.619489][ T7590] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1070.709903][ T7590] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1070.770955][ T7590] usb 2-1: USB disconnect, device number 108 [ 1070.801328][ T7590] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1070.829136][ T7590] cp210x 2-1:0.0: device disconnected [ 1072.036629][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'. [ 1072.062038][T14986] bridge_slave_1: left allmulticast mode [ 1072.353782][T14986] bridge_slave_1: left promiscuous mode [ 1072.362840][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.412778][T14986] bridge_slave_0: left allmulticast mode [ 1072.426362][T14986] bridge_slave_0: left promiscuous mode [ 1072.434578][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.567981][ T786] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1073.750792][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.790369][ T786] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1073.853762][ T786] usb 2-1: config 1 has no interface number 1 [ 1073.872730][ T786] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1073.905364][ T786] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1073.935139][ T786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.949956][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.970160][ T786] usb 2-1: Product: syz [ 1073.982545][ T786] usb 2-1: Manufacturer: syz [ 1073.993263][ T786] usb 2-1: SerialNumber: syz [ 1074.010753][T14993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1074.232112][T14993] SET target dimension over the limit! [ 1074.369327][ T786] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1074.388279][ T786] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1074.408745][T13554] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 1074.503384][ T786] usb 2-1: USB disconnect, device number 109 [ 1074.674942][ T8661] udevd[8661]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory