last executing test programs: 12m27.721557982s ago: executing program 1 (id=2897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r0, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}}}}}, 0x2e) 12m27.478848071s ago: executing program 1 (id=2899): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x0, 0xd, 0x100000}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') (async) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x35314241}}) pread64(r2, &(0x7f0000000100)=""/83, 0x53, 0x100) 12m27.341187363s ago: executing program 1 (id=2901): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x2070bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) 12m27.258795058s ago: executing program 1 (id=2902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240035b9000000000000"], 0x24}}, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0xb, @sliced={0x2d, [0xff, 0x1, 0x8a3, 0x9, 0x7, 0xff, 0x6, 0xe, 0x4, 0xa995, 0x9, 0xe, 0x8, 0xb274, 0xfb74, 0x3, 0x6, 0x316, 0x5162, 0x7, 0xa14d, 0x8001, 0x8, 0x4c, 0x8, 0xe, 0x8001, 0x10, 0x6, 0x1, 0xf, 0x97, 0xb79a, 0xd00, 0x8, 0xda, 0x0, 0x3, 0x5, 0x0, 0x40, 0x1, 0xed4, 0x6, 0x7, 0x8, 0x3, 0x94c], 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a63e6615a05c55745bb906e975d284d4a615555e08fff3ea5322ad2d5eab19978338dcf5c67ce7d811c917a97488ee8ad8844e4ad0a1d2f7fe1b1b5a7fad54bde2c54c39328bf4227d35fb7a3d674971691b29f8114779be00646ba4534"], 0x9c}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0xf2812000) socket(0x8, 0x800, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @empty, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYRES16]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) fanotify_init(0x4, 0x8003) 12m25.640356626s ago: executing program 1 (id=2911): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x4001, 0x800) r4 = eventfd2(0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x20}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff3423e57f654188a8000081"], 0x3a) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000880)='./file0\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r4, 0x7, 0x2, r3}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x7, 0x2, r4}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x7, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000480)={[0xcb, 0xd, 0x8, 0x6d, 0x2, 0x1002, 0x80000ef, 0x200, 0x7fffffffffffb, 0x8d, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbdf], 0x2000, 0x67a64fa265d6d617}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 12m24.684539333s ago: executing program 1 (id=2917): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) syz_clone(0x880000, &(0x7f0000000300)="b848bf3fbbc18170923f9b347cca133366bc840b425eb7c931fff8c438446a645b8c36be2f47159e0915426a907a8fdab824556263c8d3fcd9070f478fffe1ae7c443ab29d91d1175d6f7b08f36c7a9759feed801d2b39f6769fe89f8dbf21e6e507460572df33f23b9391954eb871209ed61a26ab9ff4cc1296fd2ab76a40d07bb3a9913e2768c2bd7a0d8ed3d1dcd7475f", 0xf, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)="4c8b9b81790808e3b00261bf8d2f6ac6d1539821128384a3d0d0fe4637527b9ae6879a92bdc431e321feebd6b5ddccdb38f94a768e26447659f53719040c3627cf55dff2665b8e648b88949fb26ff25cccc4936b38273b15134947509f382bcc1208") syz_usb_disconnect(0xffffffffffffffff) 12m9.621327244s ago: executing program 32 (id=2917): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) syz_clone(0x880000, &(0x7f0000000300)="b848bf3fbbc18170923f9b347cca133366bc840b425eb7c931fff8c438446a645b8c36be2f47159e0915426a907a8fdab824556263c8d3fcd9070f478fffe1ae7c443ab29d91d1175d6f7b08f36c7a9759feed801d2b39f6769fe89f8dbf21e6e507460572df33f23b9391954eb871209ed61a26ab9ff4cc1296fd2ab76a40d07bb3a9913e2768c2bd7a0d8ed3d1dcd7475f", 0xf, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000003c0)="4c8b9b81790808e3b00261bf8d2f6ac6d1539821128384a3d0d0fe4637527b9ae6879a92bdc431e321feebd6b5ddccdb38f94a768e26447659f53719040c3627cf55dff2665b8e648b88949fb26ff25cccc4936b38273b15134947509f382bcc1208") syz_usb_disconnect(0xffffffffffffffff) 10m2.959191327s ago: executing program 2 (id=3565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0xb, @sliced={0x2d, [0xff, 0x1, 0x8a3, 0x9, 0x7, 0xff, 0x6, 0xe, 0x4, 0xa995, 0x9, 0xe, 0x8, 0xb274, 0xfb74, 0x3, 0x6, 0x316, 0x5162, 0x7, 0xa14d, 0x8001, 0x8, 0x4c, 0x8, 0xe, 0x8001, 0x10, 0x6, 0x1, 0xf, 0x97, 0xb79a, 0xd00, 0x8, 0xda, 0x0, 0x3, 0x5, 0x0, 0x40, 0x1, 0xed4, 0x6, 0x7, 0x8, 0x3, 0x94c], 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000891800018008000100647570000c000280080001400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a63e6615a05c55745bb906e975d284d4a615555e08fff3ea5322ad2d5eab19978338dcf5c67ce7d811c917a97488ee8ad8844e4ad0a1d2f7fe1b1b5a7fad54bde2c54c39328bf4227d35fb7a3d674971691b29f8114779be00646ba4534"], 0x9c}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0xf2812000) socket(0x8, 0x800, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @empty, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYRES16]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) fanotify_init(0x4, 0x8003) 10m0.924444733s ago: executing program 2 (id=3580): r0 = socket$nl_generic(0x10, 0x3, 0x10) get_robust_list(0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) (async) get_robust_list(0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003e0007012bbd70fc800c000180080006000000000000000000000000fe425c3183cc13", @ANYRES32, @ANYBLOB="0800f3d7c54c33800800090095eb045ec55293ea02b85beecf5bd4d92851fb5387c654cebdbc565b8990d3610bbaa7c8374613feabda856a3a6f7b39b758c0509142b7619221640539c3f497f81aa9e3472cd2ceed0872eb9c84befe2e69ec41758934248adae461c0356d2d119d6220dce8f715a364fc2c807b350436011485af3fd5c61ff9c117f4d4b297946bdd2c18ff8f3643b3bc52d89788b4a91bdd1456fb573a41c6c4d84962cfa826224cdd227d0a8c28", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 10m0.803474987s ago: executing program 2 (id=3581): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x3, 0x1, &(0x7f0000000000)="f4", 0x9, 0xb, 0x10cf, 0x5500, 0xc336, 0x1, 0xf, 'syz1\x00'}) (fail_nth: 4) 10m0.320183866s ago: executing program 2 (id=3586): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f0000000600)=@can={0x1d, r1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000680)="72e78ed8ea182f07e208020b94c5a565b5b75c239f24de2af2254e6801ad10a504c9673fe476206c42f9c293c8f4685e969bb14f8d51f465f9700fe718eff6a8110229780c815ed8bd", 0x49}, {&(0x7f0000000780)}, {&(0x7f0000000800)="e5014e2bd2e809712aff71c8d6d9e430c0fb011744bf2a03a54319fc28ba5a5b459d62a1e3c871909ef8bc0ab372164efb9d72cdaba898571888a4f9ab33e67d27f16b848e92c4ab8e77f8a4aee2c5ba00f14447168477da7f46cec78ba1ba82afa722f98ef9786a5bc94acec93122d3b8bf00c49ff2f09958bd4efeb0adad7dc5b3b8ee27a79ba1baf07276499ec5aca13e69a14892ecc62ce4163811d461389a43e561bc24e2ca52cc094ed6f69f97675a8c8e4b3967e582e43066b8ce80315d1c312ea8cbbdca08a866d1d65e4236d49c8e7283e10a169cd68242e3565ce176f3", 0xe2}, {&(0x7f0000000900)="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", 0x580}], 0x4}}], 0x1, 0x2402c000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) 9m58.565615456s ago: executing program 2 (id=3598): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 9m58.318235955s ago: executing program 2 (id=3601): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}]}}) pipe2(&(0x7f0000000040), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}]}}) (async) 9m43.109571922s ago: executing program 33 (id=3601): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}]}}) pipe2(&(0x7f0000000040), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}]}}) (async) 2m26.005822702s ago: executing program 4 (id=5992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) 2m25.893224815s ago: executing program 4 (id=5993): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x14c42, 0x91) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x614b6437335d87af}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1c92, 0x0, 0x31435641, 0x0, 0x9, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRES32=r2], 0xfffffffffffffe90) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x804}}}, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKSSZGET(r1, 0x1268, &(0x7f00000002c0)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000", 0x3c}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d", 0x89}], 0x2}}], 0x1, 0x2090) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) accept$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000340)=0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 2m25.865732204s ago: executing program 4 (id=5994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x0, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x7f00000000000000) 2m25.591939314s ago: executing program 4 (id=5999): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000022c0)={0x322c, 0x3c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x5}, [@typed={0x7, 0xc3, 0x0, 0x0, @str='!*\x00'}, @typed={0x85, 0xd0, 0x0, 0x0, @binary="855b143cc38437f1d68fd4c6adefd81487f77e526307bac9a3604906d708ff9a8c8dd3e6a10688dec6f81e8bac62b6f0f7ced786c451818dde563e847972a37f5f4ef4c9ef516c84d5519a1cf90c0fca3f2be7b08d5f046905efee7ec15a7f02d1f630d06d309aa268da7bbcf5af658a774da23c10e54db731f2d24fe61c379c33"}, @typed={0x4, 0x14e}, @generic="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", @generic="4199", @generic="df4944c4d211c31916ebc6f85df7161dd02674a7a53058", @nested={0x10b2, 0x7, 0x0, 0x1, [@generic="19c76f2cec8fab4a47296b4b66537ce14ee072163548cb965e0d5f7493f42655abbc796c88e203a64720bd2bf2953f3688796f6c92fe0e8ac7445b45323cd058b76770235d3b47398fecf7ba0bfbd70c8a1b3b498011bc7cfe499dc55a180045616f71a2eaa8eb", @nested={0x4, 0xf2}, @typed={0x8, 0xb1, 0x0, 0x0, @uid=r8}, @generic="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", @generic="916e88683e49fb7dede12a57537bea1e20074bac06cddc7fab86ad012355888b839b323819c7b3d79a818c881473f39b9e3d1db668613a", @nested={0x4, 0x2d}]}, @nested={0x105c, 0x96, 0x0, 0x1, [@typed={0x14, 0xd7, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xaa}, @generic="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", @typed={0x4, 0x88}, @generic="8ffbfad01b16196ea4c96be36bbd75fe73d9190fba7f744354d2857f45b671625ac939f9c64945e93b501a397624305583c065da", @nested={0x4, 0x22}, @nested={0x4, 0x7c}]}, @generic="1705761dd34cdaa94ded6a0fc56db72dd5dfb0d3de511324ae5f7f61dcdff92622a0bb1239ca969137834a7cb6cc21579ecd81b7819553cdd08cb2cefefae39e", @nested={0x18, 0x13f, 0x0, 0x1, [@generic="f20c8fac666c1253684e7d1fde5108b0d8d38ea0"]}]}, 0x322c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x800000000}}], 0x18}}], 0x1, 0x40800) close(0x4) 2m25.146448808s ago: executing program 4 (id=6007): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x800000008, 0x20, 0x53, 0x20, 0x6d}, 0x48) io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f00000000c0)='-5', 0x2, 0x0, 0x0, 0x4}]) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000000000000008040000200000000000008000000000000000000000000e4ffffff44000500fc020000000000000000000000000000000000003c00000000000000fffcb5d1baabd855405ea63cab0000000200000004030000000000000000000001000000"], 0xfc}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8880b840e000) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000000)={&(0x7f0000000180)=""/217, 0xd9}) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xffffffffffffff83, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e, 0x0, 0xee01}}, [@migrate={0x50}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m24.916089281s ago: executing program 4 (id=6011): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000b5a000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x4000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) getpid() (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) mmap(&(0x7f0000b5a000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x4000) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) (async) close(r1) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) (async) 2m9.859911865s ago: executing program 34 (id=6011): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000b5a000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x4000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) getpid() (async) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) mmap(&(0x7f0000b5a000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x4000) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) (async) close(r1) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) (async) 4.988301031s ago: executing program 3 (id=6699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000200)=0x3, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x80800) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)="eaaaff1d7907ad89867672b8a6276954c57830fbb763faf03d5f9f01b1933c0d75865516570416f28c889290c6c66f", 0x2f) getsockopt$inet6_int(r1, 0x11, 0x68, 0x0, &(0x7f0000000140)) 4.867823219s ago: executing program 3 (id=6700): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x7) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r2, 0x1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0xf9, 0x4, 0x2, 0x2}}], 0x38}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x480800, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x529b43, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004040}, 0x24000010) bind$rds(r3, &(0x7f0000000440)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) 4.867516009s ago: executing program 3 (id=6701): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="0015"], 0x0, 0x0, 0x0, 0x0}) 3.515966831s ago: executing program 5 (id=6712): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000f5ff000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0xc800) 3.45178557s ago: executing program 5 (id=6713): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.355754571s ago: executing program 5 (id=6714): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x5, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x2, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x3, 0xf23, 0x6, 0xb, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8]}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x165001, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x10000000, 0x0, 0xfffffffffffffffa}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x5) 3.245729124s ago: executing program 5 (id=6715): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) bind$can_j1939(r0, &(0x7f0000001540)={0x1d, r1, 0xfffffffffffffffc, {0x0, 0x1}, 0x1fe}, 0x18) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f0000000600)=@can={0x1d, r1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000680)="72e78ed8ea182f07e208020b94c5a565b5b75c239f24de2af2254e6801ad10a504c9673fe476206c42f9c293c8f4685e969bb14f8d51f465f9700fe718eff6a8110229780c815ed8bd", 0x49}, {&(0x7f0000000780)="f9d82cd2e772d7c6f108a70819599a6596bb07740de6d7f52390ac4a6ab4d1afeddc05796108b0eb836a97384551c03245e859401bbb52d854edb339880134fd66e3b63a0359d016cc0a914e509eaf", 0x4f}, {&(0x7f0000000800)="e5014e2bd2e809712aff71c8d6d9e430c0fb011744bf2a03a54319fc28ba5a5b459d62a1e3c871909ef8bc0ab372164efb9d72cdaba898571888a4f9ab33e67d27f16b848e92c4ab8e77f8a4aee2c5ba00f14447168477da7f46cec78ba1ba82afa722f98ef9786a5bc94acec93122d3b8bf00c49ff2f09958bd4efeb0adad7dc5b3b8ee27a79ba1baf07276499ec5aca13e69a14892ecc62ce4163811d461389a43e561bc24e2ca52cc094ed6f69f97675a8c8e4b3967e582e43066b8ce80315d1c312ea8cbbdca08a866d1d65e4236d49c8e7283e10a169cd68242e3565ce176f3", 0xe2}, {&(0x7f0000000900)="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", 0x580}], 0x4}}], 0x1, 0x2402c000) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) 3.143707963s ago: executing program 3 (id=6716): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="4490", 0x2}], 0x1}}], 0x1, 0x2090) sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0x5000000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="d1ef1bb59f70ec9b719b1589c8f3d0678afd96", 0x13}, {&(0x7f00000017c0)="dad5b14f2f8f950502cf28805d8714f935c655d7ea96bc", 0x17}, {&(0x7f0000001800)="e9d7b200bf6ecf325e1a9c0dccd8c357998ad687717f392aab546e2ad010fb16c3120d5c20a62654dfa7da737faea449d323a40f6b39ce3ccea07331a90678979abfde57efde701f4c14b7897b8ef0530b2eecee7536d3c0186c646980b6c78eaf6f4d9d55d211f1d5a38fe9f95f95e72127a07b02bd5f5b3bcb265680ae107e6cf387fb56fca7ecd4e7257f1dc5a9ac14a40036a3f8675e691f6f6e9067617ffa6045157cf5b7562f68838b5e13843d24", 0xb1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="6c5b0b3e474f01bac640e7eb9064ec8e2ccac8b36c7d9ab464dc0bd7221bbae89e38ef0efc78f3e2f90e6236ad1ad1fb3dbd3e4fd8f2de84e526dfafb354837ff3958d97c8366471850ce9c14b83bb6e9a7c282a1d3e03cdfb675b61e1dbacc6ebcd08e105d4df684f2cd13262d10ffb8b0794f39b3e490416530423da29406a6a4b5a356dc898052883f1e54fd041e5a82247a4bbb784ce30ce321a2805b28d30", 0xa1}, {&(0x7f0000001b80)="66a7d24b8451d3e0201a73aaabe1e3fe371dfbf029efdbc2de3742c687d72207cab9988bc15b9e27135be8e1d84bbeb01ccf943eb163a18b6a02c752c829c5f24c", 0x41}, {&(0x7f0000001c00)="811e3e8966b4199496dc8329eca81fa24aedba0078949553b10b0df3cc25de83324cb3fb6672cbb763e260abad0adca5ab04cf5988b6c9a912e96ba01b3508998595bfad50323f42fa943adb8d0324801ae6efa1e38cda7fa68458db8fce3f84fe3c3ed16f", 0x65}], 0x3}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="5f97b46d7adb8b68ff35da0f147fef1c6c6c60db5c1fb54496a27c9eeb14cf97ceed1ac5e9d95d093d6400f4996e3c5f73fa7edad49015f697bdc1a17f731cd7b4e404954a2fbc069f73e9fa86cab27babb16a9004571326e20d84cb662973ba616c", 0x62}], 0x1}}], 0x4, 0x40000) 3.055583138s ago: executing program 3 (id=6717): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) bind$can_j1939(r0, &(0x7f0000001540)={0x1d, r1, 0xfffffffffffffffc, {0x0, 0x1}, 0x1fe}, 0x18) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f0000000600)=@can={0x1d, r1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000680)="72e78ed8ea182f07e208020b94c5a565b5b75c239f24de2af2254e6801ad10a504c9673fe476206c42f9c293c8f4685e969bb14f8d51f465f9700fe718eff6a8110229780c815ed8bd", 0x49}, {&(0x7f0000000780)="f9d82cd2e772d7c6f108a70819599a6596bb07740de6d7f52390ac4a6ab4d1afeddc05796108b0eb836a97384551c03245e859401bbb52d854edb339880134fd66e3b63a0359d016cc0a914e509eaf", 0x4f}, {&(0x7f0000000800)="e5014e2bd2e809712aff71c8d6d9e430c0fb011744bf2a03a54319fc28ba5a5b459d62a1e3c871909ef8bc0ab372164efb9d72cdaba898571888a4f9ab33e67d27f16b848e92c4ab8e77f8a4aee2c5ba00f14447168477da7f46cec78ba1ba82afa722f98ef9786a5bc94acec93122d3b8bf00c49ff2f09958bd4efeb0adad7dc5b3b8ee27a79ba1baf07276499ec5aca13e69a14892ecc62ce4163811d461389a43e561bc24e2ca52cc094ed6f69f97675a8c8e4b3967e582e43066b8ce80315d1c312ea8cbbdca08a866d1d65e4236d49c8e7283e10a169cd68242e3565ce176f3", 0xe2}, {&(0x7f0000000900)="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", 0x580}], 0x4}}], 0x1, 0x2402c000) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.419043523s ago: executing program 0 (id=6719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x0, [0x7, 0x3, 0x1000000000000003, 0x4, 0x5, 0xffffffff], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x78) 1.309954156s ago: executing program 0 (id=6720): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$media(&(0x7f0000000980), 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x14, 0x4) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001780)=@buf={0x29, &(0x7f0000001700)="28c359fa74fef8aaa47e0d2ec1b7b0e331d94e8c010c569599e412fc2e63d2e1f454b5a4e98edd5a2a"}) socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000005c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60064160af36508001ac00800020009000c00040004c00364bc24eab556a717251e6182f27f0051f60a84c9f46b5caf2fb5fd90fd6fc513d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.308889401s ago: executing program 0 (id=6721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf250300000014000300fe8000000000250000000000000000bb2900070073797374656d5f753a6f626a6563745f723a617564697463746c5f657865635f743a7330000000001400060076657468310000000000000000000000080004007f00010114000200"], 0xb0}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) 1.254240072s ago: executing program 6 (id=6722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.17212714s ago: executing program 0 (id=6723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x1000000, 0x0, 0x4010}, 0x0) 1.131174397s ago: executing program 0 (id=6724): memfd_create(0x0, 0x5) (async) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001540)='L', 0x1}], 0x2) (async) ioctl$FE_DISEQC_SEND_MASTER_CMD(r0, 0x40076f3f, &(0x7f0000000080)={"008000000080", 0x6}) 1.075599869s ago: executing program 0 (id=6725): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="0015"], 0x0, 0x0, 0x0, 0x0}) 1.065310556s ago: executing program 6 (id=6726): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x7000000) 923.97133ms ago: executing program 6 (id=6727): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(r2, 0x0, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0xffffffffffff0f00) 895.746251ms ago: executing program 6 (id=6728): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) 841.693419ms ago: executing program 6 (id=6729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0xa4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @random=0x4, 0x1, @void, @void, @val={0x3, 0x1, 0xb6}, @val={0x4, 0x6, {0x6, 0x6, 0x3, 0x8}}, @void, @val={0x5, 0x3, {0x32, 0xc0, 0x5}}, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x4, 0x0, {0x2, 0x1, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x7, 0xf}}, @void, @void, @val={0x76, 0x6, {0x1, 0xff, 0x1f, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf000000}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x21}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x26000800}, 0x0) 727.635616ms ago: executing program 6 (id=6730): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) bind$can_j1939(r0, &(0x7f0000001540)={0x1d, r1, 0xfffffffffffffffc, {0x0, 0x1}, 0x1fe}, 0x18) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f0000000600)=@can={0x1d, r1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000680)="72e78ed8ea182f07e208020b94c5a565b5b75c239f24de2af2254e6801ad10a504c9673fe476206c42f9c293c8f4685e969bb14f8d51f465f9700fe718eff6a8110229780c815ed8bd", 0x49}, {&(0x7f0000000780)="f9d82cd2e772d7c6f108a70819599a6596bb07740de6d7f52390ac4a6ab4d1afeddc05796108b0eb836a97384551c03245e859401bbb52d854edb339880134fd66e3b63a0359d016cc0a914e509eaf", 0x4f}, {&(0x7f0000000800)="e5014e2bd2e809712aff71c8d6d9e430c0fb011744bf2a03a54319fc28ba5a5b459d62a1e3c871909ef8bc0ab372164efb9d72cdaba898571888a4f9ab33e67d27f16b848e92c4ab8e77f8a4aee2c5ba00f14447168477da7f46cec78ba1ba82afa722f98ef9786a5bc94acec93122d3b8bf00c49ff2f09958bd4efeb0adad7dc5b3b8ee27a79ba1baf07276499ec5aca13e69a14892ecc62ce4163811d461389a43e561bc24e2ca52cc094ed6f69f97675a8c8e4b3967e582e43066b8ce80315d1c312ea8cbbdca08a866d1d65e4236d49c8e7283e10a169cd68242e3565ce176f3", 0xe2}, {&(0x7f0000000900)="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", 0x580}], 0x4}}], 0x1, 0x2402c000) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) 150.879013ms ago: executing program 5 (id=6731): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$media(&(0x7f0000000980), 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b4e, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001780)=@buf={0x29, &(0x7f0000001700)="28c359fa74fef8aaa47e0d2ec1b7b0e331d94e8c010c569599e412fc2e63d2e1f454b5a4e98edd5a2a"}) socket$pppl2tp(0x18, 0x1, 0x1) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000005c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60064160af36508001ac00800020009000c00040004c00364bc24eab556a717251e6182f27f0051f60a84c9f46b5caf2fb5fd90fd6fc513d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 41.400229ms ago: executing program 5 (id=6732): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x20040000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) 0s ago: executing program 3 (id=6733): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mlockall(0x3) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x2000)=nil, 0x5000) kernel console output (not intermixed with test programs): 9 has an invalid length. [ 1168.093463][ T9] usb 6-1: Product: syz [ 1168.097770][ T9] usb 6-1: Manufacturer: syz [ 1168.102509][T24844] netlink: 'syz.0.6455': attribute type 11 has an invalid length. [ 1168.110640][ T9] usb 6-1: SerialNumber: syz [ 1168.119040][T24844] netlink: 'syz.0.6455': attribute type 12 has an invalid length. [ 1168.129580][ T9] usb 6-1: config 0 descriptor?? [ 1168.137360][T24844] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6455'. [ 1168.265483][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1168.280313][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1168.291416][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1168.305104][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1168.321574][ T24] usb 4-1: USB disconnect, device number 21 [ 1168.368798][ T9] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 1168.391018][T18678] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1168.400687][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 1168.407543][T24847] netlink: 'syz.6.6456': attribute type 9 has an invalid length. [ 1168.410738][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 1168.417312][T24847] netlink: 'syz.6.6456': attribute type 11 has an invalid length. [ 1168.426760][ T9] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 1168.433493][T24847] netlink: 'syz.6.6456': attribute type 12 has an invalid length. [ 1168.444125][ T9] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1168.448599][T24847] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6456'. [ 1168.551053][T18678] usb 1-1: Using ep0 maxpacket: 32 [ 1168.558011][T18678] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1168.566575][T18678] usb 1-1: config 0 has no interface number 0 [ 1168.573211][T18678] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1168.584268][T18678] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1168.594329][T18678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.602742][T18678] usb 1-1: Product: syz [ 1168.606968][T18678] usb 1-1: Manufacturer: syz [ 1168.611759][T18678] usb 1-1: SerialNumber: syz [ 1168.619301][T18678] usb 1-1: config 0 descriptor?? [ 1168.711245][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1168.787314][ T5895] usb 6-1: USB disconnect, device number 54 [ 1168.822741][ T5895] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1168.834165][ T5895] keyspan 6-1:0.133: device disconnected [ 1168.861229][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1168.873989][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1168.882506][ T9] usb 7-1: config 0 has no interface number 0 [ 1168.894388][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1168.908615][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1168.919709][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.929223][ T9] usb 7-1: Product: syz [ 1168.934869][ T9] usb 7-1: Manufacturer: syz [ 1168.940607][ T9] usb 7-1: SerialNumber: syz [ 1168.959369][ T9] usb 7-1: config 0 descriptor?? [ 1169.249159][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1169.260731][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1169.619056][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1169.645644][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1169.680136][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1169.711912][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1169.760277][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1169.774306][T18678] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1169.800786][T18678] usb 1-1: USB disconnect, device number 119 [ 1169.971077][T24883] PM: Enabling pm_trace changes system date and time during resume. [ 1169.971077][T24883] PM: Correct system time has to be restored manually after resume. [ 1170.036239][T24885] netlink: 'syz.3.6466': attribute type 9 has an invalid length. [ 1170.044345][T24885] netlink: 'syz.3.6466': attribute type 11 has an invalid length. [ 1170.052820][T24885] netlink: 'syz.3.6466': attribute type 12 has an invalid length. [ 1170.061253][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1170.071192][T24885] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6466'. [ 1170.085251][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1170.098518][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1170.108476][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1170.121269][ T9] usb 7-1: USB disconnect, device number 32 [ 1170.252336][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1170.331051][T12266] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1170.403551][ T24] usb 6-1: device descriptor read/64, error -71 [ 1170.501087][T12266] usb 4-1: Using ep0 maxpacket: 32 [ 1170.508544][T12266] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1170.518186][T12266] usb 4-1: config 0 has no interface number 0 [ 1170.530116][T12266] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1170.541415][T12266] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1170.550653][T12266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.558907][T12266] usb 4-1: Product: syz [ 1170.570987][T12266] usb 4-1: Manufacturer: syz [ 1170.579385][T12266] usb 4-1: SerialNumber: syz [ 1170.591710][T12266] usb 4-1: config 0 descriptor?? [ 1170.632867][T24895] delete_channel: no stack [ 1170.641111][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1170.802118][ T24] usb 6-1: device descriptor read/64, error -71 [ 1170.912366][T24906] netlink: 'syz.6.6476': attribute type 9 has an invalid length. [ 1170.920300][T24906] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6476'. [ 1170.942703][ T24] usb usb6-port1: attempt power cycle [ 1171.191953][T24914] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6480'. [ 1171.201589][ T5915] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1171.221871][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1171.233325][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1171.311158][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1171.331964][ T24] usb 6-1: device descriptor read/8, error -71 [ 1171.371086][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 1171.378890][ T5915] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1171.387247][ T5915] usb 7-1: config 0 has no interface number 0 [ 1171.393555][ T5915] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1171.406934][ T5915] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1171.416226][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.424597][ T5915] usb 7-1: Product: syz [ 1171.428805][ T5915] usb 7-1: Manufacturer: syz [ 1171.433949][ T5915] usb 7-1: SerialNumber: syz [ 1171.441324][ T5915] usb 7-1: config 0 descriptor?? [ 1171.442043][T18678] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1171.456668][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1171.468584][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1171.478503][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1171.489186][T12266] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1171.571064][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1171.601201][T18678] usb 1-1: Using ep0 maxpacket: 32 [ 1171.601764][ T24] usb 6-1: device descriptor read/8, error -71 [ 1171.608481][T18678] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1171.621282][T18678] usb 1-1: config 0 has no interface number 0 [ 1171.627814][T18678] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1171.636983][T18678] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1171.646132][T18678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.654295][T18678] usb 1-1: Product: syz [ 1171.658727][T18678] usb 1-1: Manufacturer: syz [ 1171.663761][T18678] usb 1-1: SerialNumber: syz [ 1171.677359][T18678] usb 1-1: config 0 descriptor?? [ 1171.722028][ T24] usb usb6-port1: unable to enumerate USB device [ 1172.062262][ T5915] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1172.073441][ T5915] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1172.291225][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1172.305029][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1172.487207][ T5915] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1172.498418][ T5915] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1172.508178][ T5915] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1172.518508][ T5915] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1172.538108][ T5915] usb 7-1: USB disconnect, device number 33 [ 1172.720017][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1172.731928][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1172.743654][T18678] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1172.754128][T18678] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1172.765871][T18678] usb 1-1: USB disconnect, device number 120 [ 1173.075973][ T9] usb 4-1: USB disconnect, device number 22 [ 1173.281800][T24926] Bluetooth: hci6: Frame reassembly failed (-84) [ 1173.321103][ T170] Bluetooth: hci6: Frame reassembly failed (-84) [ 1173.594055][T24940] validate_nla: 5 callbacks suppressed [ 1173.594076][T24940] netlink: 'syz.5.6491': attribute type 9 has an invalid length. [ 1173.618159][T24940] netlink: 'syz.5.6491': attribute type 11 has an invalid length. [ 1173.639118][T24940] netlink: 'syz.5.6491': attribute type 12 has an invalid length. [ 1173.664189][T24940] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6491'. [ 1173.674376][T24945] netlink: 'syz.6.6493': attribute type 9 has an invalid length. [ 1173.682077][T24942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.690209][T24945] netlink: 'syz.6.6493': attribute type 11 has an invalid length. [ 1173.693496][T24942] FAULT_INJECTION: forcing a failure. [ 1173.693496][T24942] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.711299][T24942] CPU: 1 UID: 0 PID: 24942 Comm: syz.0.6492 Tainted: G L syzkaller #0 PREEMPT(full) [ 1173.711327][T24942] Tainted: [L]=SOFTLOCKUP [ 1173.711333][T24942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1173.711342][T24942] Call Trace: [ 1173.711348][T24942] [ 1173.711354][T24942] dump_stack_lvl+0xe8/0x150 [ 1173.711383][T24942] should_fail_ex+0x412/0x560 [ 1173.711404][T24942] should_failslab+0xa8/0x100 [ 1173.711422][T24942] __kmalloc_noprof+0xe8/0x760 [ 1173.711445][T24942] ? _iommufd_object_alloc+0x28/0x210 [ 1173.711468][T24942] _iommufd_object_alloc+0x28/0x210 [ 1173.711488][T24942] iommufd_device_bind+0x3b1/0x650 [ 1173.711513][T24942] iommufd_test+0x373b/0x6150 [ 1173.711538][T24942] ? __pfx_iommufd_test+0x10/0x10 [ 1173.711553][T24942] ? __lock_acquire+0x6b5/0x2cf0 [ 1173.711581][T24942] ? tomoyo_path_number_perm+0x219/0x630 [ 1173.711601][T24942] ? tomoyo_path_number_perm+0x219/0x630 [ 1173.711621][T24942] ? do_vfs_ioctl+0x1166/0x1530 [ 1173.711673][T24942] iommufd_fops_ioctl+0x4b5/0x5d0 [ 1173.711694][T24942] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1173.711717][T24942] ? __fget_files+0x2a/0x420 [ 1173.711741][T24942] ? __fget_files+0x2a/0x420 [ 1173.711762][T24942] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1173.711776][T24942] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1173.711802][T24942] __se_sys_ioctl+0xfc/0x170 [ 1173.711819][T24942] do_syscall_64+0x14d/0xf80 [ 1173.711834][T24942] ? trace_irq_disable+0x3b/0x150 [ 1173.711851][T24942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.711865][T24942] ? clear_bhb_loop+0x40/0x90 [ 1173.711883][T24942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.711898][T24942] RIP: 0033:0x7fd45219c799 [ 1173.711913][T24942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.711926][T24942] RSP: 002b:00007fd4530f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.711943][T24942] RAX: ffffffffffffffda RBX: 00007fd452415fa0 RCX: 00007fd45219c799 [ 1173.711954][T24942] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1173.711964][T24942] RBP: 00007fd4530f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.711973][T24942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1173.711982][T24942] R13: 00007fd452416038 R14: 00007fd452415fa0 R15: 00007ffe3bbc6c28 [ 1173.712006][T24942] [ 1173.712101][T24945] netlink: 'syz.6.6493': attribute type 12 has an invalid length. [ 1173.802930][T24947] tmpfs: Bad value for 'nr_inodes' [ 1173.812172][T24945] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6493'. [ 1173.849450][T24947] syzkaller1: entered promiscuous mode [ 1173.984529][ T5915] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1173.995573][T24947] syzkaller1: entered allmulticast mode [ 1174.051137][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1174.135704][T24951] netlink: 'syz.0.6495': attribute type 9 has an invalid length. [ 1174.143812][T24951] netlink: 'syz.0.6495': attribute type 11 has an invalid length. [ 1174.152657][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1174.157831][T24951] netlink: 'syz.0.6495': attribute type 12 has an invalid length. [ 1174.166657][T24951] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6495'. [ 1174.178750][ T5915] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1174.187374][ T5915] usb 6-1: config 0 has no interface number 0 [ 1174.193626][ T5915] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1174.201236][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1174.209722][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1174.212329][ T5915] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1174.218990][ T9] usb 7-1: config 0 has no interface number 0 [ 1174.235382][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.235482][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1174.245595][ T5915] usb 6-1: Product: syz [ 1174.254309][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1174.254665][ T5915] usb 6-1: Manufacturer: syz [ 1174.265398][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.269266][ T5915] usb 6-1: SerialNumber: syz [ 1174.277901][ T9] usb 7-1: Product: syz [ 1174.286773][ T9] usb 7-1: Manufacturer: syz [ 1174.292138][ T9] usb 7-1: SerialNumber: syz [ 1174.296468][ T5915] usb 6-1: config 0 descriptor?? [ 1174.299621][ T9] usb 7-1: config 0 descriptor?? [ 1174.431026][T21490] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1174.581166][T21490] usb 1-1: Using ep0 maxpacket: 32 [ 1174.589650][T21490] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1174.597993][T21490] usb 1-1: config 0 has no interface number 0 [ 1174.605350][T21490] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1174.615884][T21490] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1174.625354][T21490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.633485][T21490] usb 1-1: Product: syz [ 1174.638303][T21490] usb 1-1: Manufacturer: syz [ 1174.643156][T21490] usb 1-1: SerialNumber: syz [ 1174.651167][T21490] usb 1-1: config 0 descriptor?? [ 1174.916646][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1174.921769][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1174.929826][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1174.939327][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1175.160348][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1175.161660][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1175.177509][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1175.185784][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1175.202701][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1175.212582][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1175.213643][ T5915] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1175.223565][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1175.237338][ T5915] usb 6-1: USB disconnect, device number 59 [ 1175.263638][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1175.275708][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1175.341048][ T5163] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1175.341070][ T5845] Bluetooth: hci6: command 0x1003 tx timeout [ 1175.488743][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1175.502043][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1175.513033][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1175.522969][T21490] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1175.537309][T21490] usb 1-1: USB disconnect, device number 121 [ 1175.759813][T24957] loop4: detected capacity change from 0 to 1 [ 1175.802076][T24957] Dev loop4: unable to read RDB block 1 [ 1175.807820][T24957] loop4: unable to read partition table [ 1175.814737][T24957] loop4: partition table beyond EOD, truncated [ 1175.821364][T24957] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 1175.916910][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6498'. [ 1176.080077][T24963] openvswitch: netlink: IPv4 tun info is not correct [ 1176.331305][T21490] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1176.486898][T24978] netlink: 'syz.5.6506': attribute type 9 has an invalid length. [ 1176.498284][T24978] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6506'. [ 1176.501155][T21490] usb 1-1: Using ep0 maxpacket: 8 [ 1176.535019][T21490] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1176.545085][T21490] usb 1-1: config 179 has no interface number 0 [ 1176.554153][T21490] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1176.565873][T21490] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1176.582088][T21490] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1176.593707][T21490] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1176.604046][T21490] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1176.618369][T21490] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1176.627508][T21490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.639491][T24965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1176.651446][T21490] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 1176.681235][T21490] usb 7-1: USB disconnect, device number 34 [ 1176.761328][ T5915] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1176.876121][T12266] usb 1-1: USB disconnect, device number 122 [ 1176.926004][T24965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6501'. [ 1176.943918][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1176.953966][ T5915] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1176.962657][ T5915] usb 6-1: config 0 has no interface number 0 [ 1176.968812][ T5915] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1176.978754][ T5915] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1176.988360][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.998814][ T5915] usb 6-1: Product: syz [ 1177.003181][ T5915] usb 6-1: Manufacturer: syz [ 1177.007845][ T5915] usb 6-1: SerialNumber: syz [ 1177.018321][ T5915] usb 6-1: config 0 descriptor?? [ 1177.118840][T24993] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6510'. [ 1177.371076][T12266] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1177.524220][T12266] usb 7-1: Using ep0 maxpacket: 32 [ 1177.540209][T12266] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1177.559177][T12266] usb 7-1: config 0 has no interface number 0 [ 1177.565708][T12266] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1177.576114][T12266] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1177.587138][T12266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.595430][T12266] usb 7-1: Product: syz [ 1177.600135][T12266] usb 7-1: Manufacturer: syz [ 1177.605050][T12266] usb 7-1: SerialNumber: syz [ 1177.605539][T24999] loop5: detected capacity change from 0 to 7 [ 1177.617449][T12266] usb 7-1: config 0 descriptor?? [ 1177.632562][ C0] blk_print_req_error: 11 callbacks suppressed [ 1177.632582][ C0] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.649653][ C0] buffer_io_error: 16 callbacks suppressed [ 1177.649675][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.667892][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1177.673555][ C0] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.682805][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1177.689461][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.701398][ C0] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.717716][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.726046][ C0] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.736833][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.746721][ C0] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.757506][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.765808][ C1] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.776910][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.786356][ C1] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.797319][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.805479][T19423] ldm_validate_partition_table(): Disk read failed. [ 1177.813787][ C1] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.824594][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.833273][ C0] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.844273][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.852597][ C1] critical medium error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1177.863346][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1177.872430][T19423] Dev loop5: unable to read RDB block 0 [ 1177.883542][T19423] loop5: unable to read partition table [ 1177.889635][T19423] loop5: partition table beyond EOD, truncated [ 1177.899740][T24999] ldm_validate_partition_table(): Disk read failed. [ 1177.909032][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1177.921050][T24999] Dev loop5: unable to read RDB block 0 [ 1177.925250][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1177.937376][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1177.937437][T24999] loop5: unable to read partition table [ 1177.947805][ T5915] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1177.954144][T24999] loop5: partition table beyond EOD, truncated [ 1177.969785][T24999] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 1177.971512][ T5915] usb 6-1: USB disconnect, device number 60 [ 1178.234657][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1178.246004][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1178.357371][T25010] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1178.463695][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1178.484887][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1178.494878][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1178.530074][T12266] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1178.556794][T12266] usb 7-1: USB disconnect, device number 35 [ 1178.621567][T21490] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1178.791359][T21490] usb 1-1: Using ep0 maxpacket: 32 [ 1178.799009][T21490] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1178.807510][T21490] usb 1-1: config 0 has no interface number 0 [ 1178.814864][T21490] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1178.826718][T21490] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1178.837577][T21490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.846210][T21490] usb 1-1: Product: syz [ 1178.850701][T21490] usb 1-1: Manufacturer: syz [ 1178.855632][T21490] usb 1-1: SerialNumber: syz [ 1178.864599][T21490] usb 1-1: config 0 descriptor?? [ 1179.001093][ T5895] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1179.056914][T25033] syzkaller1: entered promiscuous mode [ 1179.062534][T25033] syzkaller1: entered allmulticast mode [ 1179.174212][ T5895] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1179.201837][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.216303][ T5895] usb 6-1: config 0 descriptor?? [ 1179.226374][ T5895] cp210x 6-1:0.0: cp210x converter detected [ 1179.237214][T25035] misc userio: Invalid payload size [ 1179.483389][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1179.495394][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1179.602195][ T5844] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1179.628169][ T5895] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1179.645070][ T5895] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1179.706277][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1179.717609][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1179.727816][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1179.738086][T21490] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1179.763640][ T5844] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.774146][ T5844] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1179.784610][ T5844] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1179.794921][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.805434][ T5844] usb 7-1: config 0 descriptor?? [ 1179.838763][ T5844] usb 6-1: USB disconnect, device number 61 [ 1179.852310][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1179.864962][ T5844] cp210x 6-1:0.0: device disconnected [ 1180.497625][T25044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.504855][T25044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.561496][T25046] validate_nla: 8 callbacks suppressed [ 1180.561518][T25046] netlink: 'syz.5.6532': attribute type 9 has an invalid length. [ 1180.579866][T25046] netlink: 'syz.5.6532': attribute type 11 has an invalid length. [ 1180.587819][T25046] netlink: 'syz.5.6532': attribute type 12 has an invalid length. [ 1180.595975][T25046] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6532'. [ 1180.841016][ T5844] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1180.991057][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 1180.998716][ T5844] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1181.007572][ T5844] usb 6-1: config 0 has no interface number 0 [ 1181.013885][ T5844] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1181.021572][ T5163] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1181.022337][ T5845] Bluetooth: hci6: command 0x1003 tx timeout [ 1181.033227][ T5844] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1181.053765][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.064072][ T5844] usb 6-1: Product: syz [ 1181.068328][ T5844] usb 6-1: Manufacturer: syz [ 1181.073075][ T5844] usb 6-1: SerialNumber: syz [ 1181.085928][ T5844] usb 6-1: config 0 descriptor?? [ 1181.228382][T25052] netlink: 'syz.3.6534': attribute type 9 has an invalid length. [ 1181.237672][T25052] netlink: 'syz.3.6534': attribute type 11 has an invalid length. [ 1181.246027][T25052] netlink: 'syz.3.6534': attribute type 12 has an invalid length. [ 1181.254263][T25052] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6534'. [ 1181.369657][ T5915] usb 1-1: USB disconnect, device number 123 [ 1181.521122][ T5895] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1181.670983][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 1181.678147][ T5895] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1181.686472][ T5895] usb 4-1: config 0 has no interface number 0 [ 1181.692699][ T5895] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1181.703169][ T5895] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1181.706383][ T5844] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1181.712378][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.712405][ T5895] usb 4-1: Product: syz [ 1181.712421][ T5895] usb 4-1: Manufacturer: syz [ 1181.712435][ T5895] usb 4-1: SerialNumber: syz [ 1181.747520][ T5915] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1181.749087][ T5895] usb 4-1: config 0 descriptor?? [ 1181.760925][ T5844] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1181.910983][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 1181.918297][ T5915] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1181.925953][ T5915] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1181.937419][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1181.949992][ T5915] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1181.962080][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1181.974652][ T5844] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1181.988310][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1182.000104][ T5844] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1182.010336][ T5915] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1182.024130][ T5844] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1182.033935][ T5915] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1182.041435][ T5844] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1182.053160][ T5915] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1182.064818][ T5844] usb 6-1: USB disconnect, device number 62 [ 1182.074012][ T5915] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1182.085770][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1182.103323][ T5915] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.117659][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1182.129234][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1182.141906][ T5915] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1182.157538][ T5915] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1182.167093][ T5915] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1182.174652][ T5915] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1182.186012][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1182.198347][ T5915] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.210676][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1182.222337][ T5915] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1182.234272][ T5915] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1182.247865][ T5915] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1182.258615][ T5915] usb 1-1: string descriptor 0 read error: -22 [ 1182.265643][ T5915] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1182.275592][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.294185][ T5915] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1182.381607][ T5895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1182.393916][ T5895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1182.408350][ T5915] usb 7-1: USB disconnect, device number 36 [ 1182.502068][T25054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.518054][T25054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.549755][ T5844] usb 1-1: USB disconnect, device number 124 [ 1182.614575][ T5895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1182.648435][ T5895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1182.675750][ T5895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1182.689923][ T5895] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1182.733908][ T5895] usb 4-1: USB disconnect, device number 23 [ 1182.900974][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1182.990966][ T5844] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1183.062813][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1183.072805][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1183.083522][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1183.092849][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1183.104121][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1183.118255][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1183.127708][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1183.136988][ T9] usb 6-1: Product: syz [ 1183.144732][ T5844] usb 7-1: Invalid ep0 maxpacket: 64 [ 1183.146092][ T9] usb 6-1: Manufacturer: syz [ 1183.164872][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1183.172819][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1183.180676][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1183.201153][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1183.266714][T25072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.273993][T25072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.281055][ T5844] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 1183.363491][T25076] netlink: 'syz.3.6543': attribute type 9 has an invalid length. [ 1183.376295][ T5915] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1183.384935][T25076] netlink: 'syz.3.6543': attribute type 11 has an invalid length. [ 1183.387280][ T9] usb 6-1: USB disconnect, device number 63 [ 1183.393129][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1183.393154][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1183.393169][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1183.394713][T25076] netlink: 'syz.3.6543': attribute type 12 has an invalid length. [ 1183.434127][T25076] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6543'. [ 1183.461813][ T5844] usb 7-1: Invalid ep0 maxpacket: 64 [ 1183.467424][ T5844] usb usb7-port1: attempt power cycle [ 1183.546192][ T5915] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1183.555533][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.566039][ T5915] usb 1-1: config 0 descriptor?? [ 1183.574797][ T5915] cp210x 1-1:0.0: cp210x converter detected [ 1183.670999][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1183.812531][ T5844] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1183.821702][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1183.828865][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1183.837333][ T24] usb 4-1: config 0 has no interface number 0 [ 1183.843612][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1183.851739][ T5844] usb 7-1: Invalid ep0 maxpacket: 64 [ 1183.858799][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1183.868900][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.877102][ T24] usb 4-1: Product: syz [ 1183.881421][ T24] usb 4-1: Manufacturer: syz [ 1183.886140][ T24] usb 4-1: SerialNumber: syz [ 1183.894587][ T24] usb 4-1: config 0 descriptor?? [ 1183.976341][ T5915] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1183.985223][ T5844] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 1183.994113][ T5915] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1184.002284][ T5915] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1184.014527][ T5915] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1184.022055][ T5844] usb 7-1: Invalid ep0 maxpacket: 64 [ 1184.031150][ T5844] usb usb7-port1: unable to enumerate USB device [ 1184.038449][ T5915] usb 1-1: USB disconnect, device number 125 [ 1184.052314][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1184.063587][ T5915] cp210x 1-1:0.0: device disconnected [ 1184.382144][ T5915] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1184.509446][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1184.520567][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1184.539746][T25081] netlink: 'syz.0.6545': attribute type 9 has an invalid length. [ 1184.548007][T25081] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6545'. [ 1184.561161][ T5915] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1184.571047][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1184.580499][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.597714][ T5915] usb 6-1: config 0 descriptor?? [ 1184.732677][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1184.744741][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1184.754699][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1184.765153][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1184.775204][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1184.841315][ T5915] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1184.991005][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 1184.998164][ T5915] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1185.006650][ T5915] usb 1-1: config 0 has no interface number 0 [ 1185.012914][ T5915] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1185.023811][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1185.033081][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.041345][ T5915] usb 1-1: Product: syz [ 1185.045587][ T5915] usb 1-1: Manufacturer: syz [ 1185.050332][ T5915] usb 1-1: SerialNumber: syz [ 1185.057295][ T5915] usb 1-1: config 0 descriptor?? [ 1185.668958][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1185.680073][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1185.894748][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1185.911494][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1185.921531][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1185.933117][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1185.945467][ T5915] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1185.960259][ T5915] usb 1-1: USB disconnect, device number 126 [ 1186.208735][T25096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.215940][T25096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.277631][T25099] validate_nla: 2 callbacks suppressed [ 1186.277652][T25099] netlink: 'syz.6.6551': attribute type 9 has an invalid length. [ 1186.293804][T25099] netlink: 'syz.6.6551': attribute type 11 has an invalid length. [ 1186.302143][T25099] netlink: 'syz.6.6551': attribute type 12 has an invalid length. [ 1186.310551][T25099] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6551'. [ 1186.375188][ T5895] usb 4-1: USB disconnect, device number 24 [ 1186.449379][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 1186.449399][ T29] audit: type=1800 audit(1186.395:8106): pid=25101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6552" name="bus" dev="overlay" ino=2182 res=0 errno=0 [ 1186.571096][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1186.731078][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1186.736326][T18678] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 1186.747510][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1186.757231][ T9] usb 7-1: config 0 has no interface number 0 [ 1186.763620][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1186.772809][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1186.781976][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.789965][ T9] usb 7-1: Product: syz [ 1186.794167][ T9] usb 7-1: Manufacturer: syz [ 1186.798774][ T9] usb 7-1: SerialNumber: syz [ 1186.805616][ T9] usb 7-1: config 0 descriptor?? [ 1186.891081][ T5895] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1186.912726][T18678] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1186.921114][T18678] usb 1-1: config 0 has no interface number 0 [ 1186.928233][T18678] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1186.939657][T18678] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1186.949804][T18678] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1186.958944][T18678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.974103][T18678] usb 1-1: config 0 descriptor?? [ 1186.986264][T18678] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1187.053308][ T5895] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1187.063244][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.075355][ T5895] usb 4-1: config 0 descriptor?? [ 1187.085190][ T5895] cp210x 4-1:0.0: cp210x converter detected [ 1187.172024][T18678] usb 6-1: USB disconnect, device number 64 [ 1187.216282][T21490] usb 1-1: USB disconnect, device number 127 [ 1187.237411][T25103] iowarrior 1-1:0.1: Error -19 while submitting URB [ 1187.336754][T25111] tipc: Started in network mode [ 1187.342667][T25111] tipc: Node identity 4, cluster identity 4711 [ 1187.348915][T25111] tipc: Node number set to 4 [ 1187.428100][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1187.455589][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1187.490116][ T5895] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1187.508990][ T5895] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1187.522733][ T5895] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 1187.543181][ T5895] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1187.557683][ T5895] usb 4-1: USB disconnect, device number 25 [ 1187.604873][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1187.626218][ T5895] cp210x 4-1:0.0: device disconnected [ 1187.637532][T25117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.644932][T25117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.678646][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1187.699447][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1187.717260][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1187.728230][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1187.739108][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1187.756327][ T9] usb 7-1: USB disconnect, device number 41 [ 1187.770553][T25119] netlink: 'syz.5.6560': attribute type 9 has an invalid length. [ 1187.779919][T25119] netlink: 'syz.5.6560': attribute type 11 has an invalid length. [ 1187.789876][T25119] netlink: 'syz.5.6560': attribute type 12 has an invalid length. [ 1187.798459][T25119] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6560'. [ 1188.063403][ T5895] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1188.074583][T25123] netlink: 'syz.3.6562': attribute type 9 has an invalid length. [ 1188.083136][T25123] netlink: 'syz.3.6562': attribute type 11 has an invalid length. [ 1188.091977][T25123] netlink: 'syz.3.6562': attribute type 12 has an invalid length. [ 1188.100010][T25123] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6562'. [ 1188.221434][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1188.239501][ T5895] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1188.241074][ T5915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1188.248787][ T5895] usb 6-1: config 0 has no interface number 0 [ 1188.270787][ T5895] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1188.280064][ T5895] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1188.289702][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.298551][ T5895] usb 6-1: Product: syz [ 1188.304058][ T5895] usb 6-1: Manufacturer: syz [ 1188.308680][ T5895] usb 6-1: SerialNumber: syz [ 1188.318238][ T5895] usb 6-1: config 0 descriptor?? [ 1188.374795][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1188.401275][ T5915] usb 1-1: device descriptor read/64, error -71 [ 1188.511226][T21490] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1188.551055][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1188.558032][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1188.566958][ T9] usb 4-1: config 0 has no interface number 0 [ 1188.573217][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1188.582710][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1188.591886][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.600515][ T9] usb 4-1: Product: syz [ 1188.604864][ T9] usb 4-1: Manufacturer: syz [ 1188.609487][ T9] usb 4-1: SerialNumber: syz [ 1188.616826][ T9] usb 4-1: config 0 descriptor?? [ 1188.641118][ T5915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1188.664358][T21490] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1188.673510][T21490] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1188.682741][T21490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.693484][T21490] usb 7-1: config 0 descriptor?? [ 1188.771120][ T5915] usb 1-1: device descriptor read/64, error -71 [ 1188.881431][ T5915] usb usb1-port1: attempt power cycle [ 1188.927810][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1188.939934][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1189.154049][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1189.165046][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1189.176342][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1189.186702][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1189.196458][ T5895] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1189.222456][ T5915] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1189.231290][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1189.242544][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1189.254380][ T5915] usb 1-1: device descriptor read/8, error -71 [ 1189.455601][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1189.466564][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1189.476425][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1189.487823][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1189.498037][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1189.501905][ T5915] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1189.510662][ T9] usb 4-1: USB disconnect, device number 26 [ 1189.541466][ T5915] usb 1-1: device descriptor read/8, error -71 [ 1189.651714][ T5915] usb usb1-port1: unable to enumerate USB device [ 1190.241069][ T5915] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1190.390973][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 1190.399868][ T5915] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1190.409341][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.417613][ T5915] usb 4-1: Product: syz [ 1190.421981][ T5915] usb 4-1: Manufacturer: syz [ 1190.426608][ T5915] usb 4-1: SerialNumber: syz [ 1190.434039][ T5915] usb 4-1: config 0 descriptor?? [ 1190.643125][ T5915] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1190.772998][ T5895] usb 6-1: USB disconnect, device number 65 [ 1190.838034][T25134] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6565'. [ 1191.161156][ T5895] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1191.259144][ T5915] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1191.273962][ T5915] usb 4-1: USB disconnect, device number 27 [ 1191.303394][ T5895] usb 6-1: device descriptor read/64, error -71 [ 1191.340151][ T10] usb 7-1: USB disconnect, device number 42 [ 1191.438586][ T29] audit: type=1800 audit(1191.385:8107): pid=25148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6570" name="bus" dev="overlay" ino=2296 res=0 errno=0 [ 1191.555716][T25152] netlink: 'syz.0.6572': attribute type 9 has an invalid length. [ 1191.562344][ T5895] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1191.563922][T25152] netlink: 'syz.0.6572': attribute type 11 has an invalid length. [ 1191.585473][T25152] netlink: 'syz.0.6572': attribute type 12 has an invalid length. [ 1191.593421][T25152] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1191.711015][ T5895] usb 6-1: device descriptor read/64, error -71 [ 1191.791062][ T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1191.821448][ T5895] usb usb6-port1: attempt power cycle [ 1191.826424][T25154] netlink: 'syz.3.6573': attribute type 9 has an invalid length. [ 1191.834929][T25154] netlink: 'syz.3.6573': attribute type 11 has an invalid length. [ 1191.844079][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1191.851842][T25154] netlink: 'syz.3.6573': attribute type 12 has an invalid length. [ 1191.860919][T25154] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6573'. [ 1191.944280][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1191.953633][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.966141][ T10] usb 7-1: config 0 descriptor?? [ 1191.975100][ T10] cp210x 7-1:0.0: cp210x converter detected [ 1192.021134][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 1192.032535][ T5915] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1192.040809][ T5915] usb 1-1: config 0 has no interface number 0 [ 1192.047359][ T5915] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1192.057254][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1192.066507][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.074595][ T5915] usb 1-1: Product: syz [ 1192.078785][ T5915] usb 1-1: Manufacturer: syz [ 1192.084202][ T5915] usb 1-1: SerialNumber: syz [ 1192.091875][ T5915] usb 1-1: config 0 descriptor?? [ 1192.111158][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1192.161090][ T5895] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1192.182447][ T5895] usb 6-1: device descriptor read/8, error -71 [ 1192.271013][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1192.278999][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1192.288022][ T9] usb 4-1: config 0 has no interface number 0 [ 1192.295369][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1192.306692][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1192.315989][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.324062][ T9] usb 4-1: Product: syz [ 1192.328253][ T9] usb 4-1: Manufacturer: syz [ 1192.333093][ T9] usb 4-1: SerialNumber: syz [ 1192.341408][ T9] usb 4-1: config 0 descriptor?? [ 1192.377193][ T10] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1192.387339][ T10] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1192.401300][ T10] cp210x 7-1:0.0: GPIO initialisation failed: -32 [ 1192.411995][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1192.421180][ T5895] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1192.430165][ T10] usb 7-1: USB disconnect, device number 43 [ 1192.442906][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1192.452768][ T10] cp210x 7-1:0.0: device disconnected [ 1192.458451][ T5895] usb 6-1: device descriptor read/8, error -71 [ 1192.571399][ T5895] usb usb6-port1: unable to enumerate USB device [ 1192.707388][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1192.719754][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1192.930625][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1192.962181][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1192.964337][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1192.982717][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1193.000379][ T5915] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1193.019486][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1193.019913][ T5915] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1193.047215][T25156] netlink: 'syz.6.6574': attribute type 9 has an invalid length. [ 1193.049805][ T5915] usb 1-1: USB disconnect, device number 6 [ 1193.064568][T25156] netlink: 'syz.6.6574': attribute type 11 has an invalid length. [ 1193.084090][T25156] netlink: 'syz.6.6574': attribute type 12 has an invalid length. [ 1193.093170][T25156] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6574'. [ 1193.246088][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1193.257224][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1193.267031][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1193.278598][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1193.288941][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1193.351079][ T10] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1193.511517][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1193.521949][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1193.530639][ T10] usb 7-1: config 0 has no interface number 0 [ 1193.537367][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1193.548220][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1193.565997][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.574253][ T10] usb 7-1: Product: syz [ 1193.579245][ T10] usb 7-1: Manufacturer: syz [ 1193.584087][ T10] usb 7-1: SerialNumber: syz [ 1193.593617][ T10] usb 7-1: config 0 descriptor?? [ 1193.851392][ T5915] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1193.900378][T25166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.907644][T25166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.023239][ T5915] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1194.036399][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1194.047310][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.067567][ T5915] usb 1-1: config 0 descriptor?? [ 1194.138259][T25172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.152951][T25172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.208691][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1194.220263][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1194.371278][ T9] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 1194.432740][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1194.446437][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1194.457648][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1194.468686][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1194.478655][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1194.490728][ T10] usb 7-1: USB disconnect, device number 44 [ 1194.547992][ T9] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 1194.557443][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.567677][ T9] usb 6-1: config 0 has no interface number 0 [ 1194.574078][ T9] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1194.583611][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.594593][ T9] usb 6-1: config 0 descriptor?? [ 1194.834294][T12266] usb 4-1: USB disconnect, device number 28 [ 1195.023044][ T9] cypress_m8 6-1:0.244: DeLorme Earthmate USB converter detected [ 1195.034060][ T9] earthmate ttyUSB0: required endpoint is missing [ 1195.064904][ T9] usb 6-1: USB disconnect, device number 70 [ 1195.077337][ T9] cypress_m8 6-1:0.244: device disconnected [ 1195.077684][T25184] netlink: 'syz.6.6584': attribute type 9 has an invalid length. [ 1195.094054][T25184] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6584'. [ 1195.261825][T12266] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1195.351068][ T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1195.442858][T12266] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1195.452133][T12266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.463438][T12266] usb 4-1: config 0 descriptor?? [ 1195.471458][T12266] cp210x 4-1:0.0: cp210x converter detected [ 1195.501435][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1195.508940][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1195.517648][ T10] usb 7-1: config 0 has no interface number 0 [ 1195.531021][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1195.547614][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1195.556970][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.566250][ T10] usb 7-1: Product: syz [ 1195.570476][ T10] usb 7-1: Manufacturer: syz [ 1195.575287][ T10] usb 7-1: SerialNumber: syz [ 1195.593125][ T10] usb 7-1: config 0 descriptor?? [ 1195.759824][T25192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.767109][T25192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.877753][T12266] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1195.886847][T12266] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1195.905086][T12266] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 1195.918700][T12266] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1195.933577][T12266] usb 4-1: USB disconnect, device number 29 [ 1195.948895][T12266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1195.959713][T12266] cp210x 4-1:0.0: device disconnected [ 1196.029224][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6589'. [ 1196.096452][T25200] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1196.216377][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1196.227909][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1196.361044][T12266] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1196.441257][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1196.458935][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1196.469733][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1196.482076][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1196.493231][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1196.507998][ T10] usb 7-1: USB disconnect, device number 45 [ 1196.522390][T12266] usb 6-1: Using ep0 maxpacket: 32 [ 1196.544731][T12266] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1196.558662][T12266] usb 6-1: config 0 has no interface number 0 [ 1196.565936][T12266] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1196.573812][T25205] validate_nla: 5 callbacks suppressed [ 1196.573825][T25205] netlink: 'syz.3.6592': attribute type 1 has an invalid length. [ 1196.575833][T12266] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1196.575863][T12266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.575881][T12266] usb 6-1: Product: syz [ 1196.575897][T12266] usb 6-1: Manufacturer: syz [ 1196.575910][T12266] usb 6-1: SerialNumber: syz [ 1196.593083][T12266] usb 6-1: config 0 descriptor?? [ 1196.694185][ T24] usb 1-1: USB disconnect, device number 7 [ 1196.808871][T25208] netlink: 'syz.3.6593': attribute type 9 has an invalid length. [ 1196.827271][T25208] netlink: 'syz.3.6593': attribute type 11 has an invalid length. [ 1196.845650][T25208] netlink: 'syz.3.6593': attribute type 12 has an invalid length. [ 1196.856670][T25208] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6593'. [ 1197.102279][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1197.268456][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1197.289592][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1197.309936][ T9] usb 4-1: config 0 has no interface number 0 [ 1197.316794][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1197.340094][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1197.350060][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.358472][ T9] usb 4-1: Product: syz [ 1197.363677][ T9] usb 4-1: Manufacturer: syz [ 1197.369182][ T9] usb 4-1: SerialNumber: syz [ 1197.381669][ T9] usb 4-1: config 0 descriptor?? [ 1197.561127][T21490] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1197.686611][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1197.697925][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1197.723374][T21490] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1197.732942][T21490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.745596][T21490] usb 7-1: config 0 descriptor?? [ 1197.756158][T21490] cp210x 7-1:0.0: cp210x converter detected [ 1197.891077][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1197.912597][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1197.926016][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1197.935895][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1197.947198][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1197.960119][T12266] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1197.974534][T12266] usb 6-1: USB disconnect, device number 71 [ 1198.043053][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1198.052445][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.063657][ T24] usb 1-1: config 0 descriptor?? [ 1198.073395][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1198.161005][T21490] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1198.169824][T21490] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1198.177950][T21490] cp210x 7-1:0.0: GPIO initialisation failed: -32 [ 1198.190156][T21490] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1198.200710][T21490] usb 7-1: USB disconnect, device number 46 [ 1198.217139][T21490] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1198.229236][T21490] cp210x 7-1:0.0: device disconnected [ 1198.399325][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1198.410505][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1198.421852][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1198.433879][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1198.444117][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1198.455088][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1198.465465][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1198.484232][ T9] usb 4-1: USB disconnect, device number 30 [ 1198.520029][T25233] delete_channel: no stack [ 1198.530429][T25233] delete_channel: no stack [ 1198.642368][T25238] netlink: 'syz.5.6604': attribute type 9 has an invalid length. [ 1198.650485][T25238] netlink: 'syz.5.6604': attribute type 11 has an invalid length. [ 1198.658867][T25238] netlink: 'syz.5.6604': attribute type 12 has an invalid length. [ 1198.666926][T25238] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6604'. [ 1198.908990][T25243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.916218][T25243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.924717][T12266] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1199.018240][T25245] netlink: 'syz.6.6607': attribute type 3 has an invalid length. [ 1199.036366][T25245] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6607'. [ 1199.111076][T12266] usb 6-1: Using ep0 maxpacket: 32 [ 1199.118112][T12266] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1199.127528][T12266] usb 6-1: config 0 has no interface number 0 [ 1199.134473][T12266] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1199.146798][T12266] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1199.156165][T12266] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.164704][T12266] usb 6-1: Product: syz [ 1199.169000][T12266] usb 6-1: Manufacturer: syz [ 1199.174129][T12266] usb 6-1: SerialNumber: syz [ 1199.182201][T12266] usb 6-1: config 0 descriptor?? [ 1199.270987][ T5915] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1199.361064][T19721] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1199.423054][ T5915] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1199.432963][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.445352][ T5915] usb 4-1: config 0 descriptor?? [ 1199.457145][ T5915] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1199.511041][T19721] usb 7-1: Using ep0 maxpacket: 32 [ 1199.519762][T19721] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1199.528230][T19721] usb 7-1: config 0 has no interface number 0 [ 1199.534786][T19721] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1199.547015][T19721] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1199.556677][T19721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.565360][T19721] usb 7-1: Product: syz [ 1199.569644][T19721] usb 7-1: Manufacturer: syz [ 1199.574448][T19721] usb 7-1: SerialNumber: syz [ 1199.582478][T19721] usb 7-1: config 0 descriptor?? [ 1199.590280][T25249] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1199.799921][T25249] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1199.867808][ T5915] gspca_cpia1: usb_control_msg 03, error -71 [ 1199.876465][ T5915] gspca_cpia1: usb_control_msg 01, error -71 [ 1199.882686][ T5915] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1199.894379][ T5915] usb 4-1: USB disconnect, device number 31 [ 1199.911193][ T24] usb 1-1: USB disconnect, device number 8 [ 1200.200505][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1200.212248][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1200.223182][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1200.234102][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1200.243923][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1200.254342][T12266] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1200.264435][T12266] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1200.277167][T12266] usb 6-1: USB disconnect, device number 72 [ 1200.422083][T25254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6610'. [ 1200.484278][T25256] netlink: 'syz.0.6611': attribute type 9 has an invalid length. [ 1200.492727][T25256] netlink: 'syz.0.6611': attribute type 11 has an invalid length. [ 1200.500717][T25258] syzkaller1: entered promiscuous mode [ 1200.501608][T25256] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1200.508045][T25258] syzkaller1: entered allmulticast mode [ 1200.614218][T19721] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1200.637856][T19721] asix 7-1:0.188: probe with driver asix failed with error -71 [ 1200.651963][T19721] usb 7-1: USB disconnect, device number 47 [ 1200.672261][T25260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6613'. [ 1200.762903][T21490] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1200.921060][T12266] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1200.931030][T21490] usb 1-1: Using ep0 maxpacket: 32 [ 1200.938370][T21490] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1200.946800][T21490] usb 1-1: config 0 has no interface number 0 [ 1200.953839][T21490] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1200.963409][T21490] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1200.972596][T21490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.980599][T21490] usb 1-1: Product: syz [ 1200.984817][T21490] usb 1-1: Manufacturer: syz [ 1200.990156][T21490] usb 1-1: SerialNumber: syz [ 1200.995030][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1201.005379][T21490] usb 1-1: config 0 descriptor?? [ 1201.073330][T12266] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1201.082700][T12266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.094484][T12266] usb 4-1: config 0 descriptor?? [ 1201.107960][T12266] cp210x 4-1:0.0: cp210x converter detected [ 1201.157363][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1201.184942][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.200719][ T10] usb 6-1: config 0 descriptor?? [ 1201.226051][ T10] cp210x 6-1:0.0: cp210x converter detected [ 1201.399814][T25268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.407106][T25268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.493769][T25270] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6617'. [ 1201.508707][T12266] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1201.520004][T12266] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 1201.528301][T12266] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1201.539756][T12266] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1201.629658][ T10] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1201.639346][ T10] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1201.647427][ T10] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 1201.658362][ T10] usb 6-1: cp210x converter now attached to ttyUSB1 [ 1201.674826][ T10] usb 6-1: USB disconnect, device number 73 [ 1201.690316][ T10] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1201.699288][ T10] cp210x 6-1:0.0: device disconnected [ 1201.741031][ T5895] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1201.892725][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1201.900755][ T5895] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1201.909435][ T5895] usb 7-1: config 0 has no interface number 0 [ 1201.917138][ T5895] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1201.926519][ T5895] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1201.935843][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.943967][ T5895] usb 7-1: Product: syz [ 1201.948267][ T5895] usb 7-1: Manufacturer: syz [ 1201.953032][ T5895] usb 7-1: SerialNumber: syz [ 1201.959810][ T5895] usb 7-1: config 0 descriptor?? [ 1202.019110][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1202.030114][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1202.072206][T25261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.082504][T25261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.242949][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1202.254143][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1202.265091][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1202.275621][T21490] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1202.286588][T21490] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1202.299269][T21490] usb 1-1: USB disconnect, device number 9 [ 1202.976763][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1202.987646][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1202.997343][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1203.009332][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1203.019223][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1203.045768][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c08e000: rx timeout, send abort [ 1203.056679][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1203.070523][ T5895] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1203.090206][ T5895] usb 7-1: USB disconnect, device number 48 [ 1203.284387][T12266] usb 4-1: USB disconnect, device number 32 [ 1203.306675][T12266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1203.324940][T12266] cp210x 4-1:0.0: device disconnected [ 1203.340762][T25281] validate_nla: 5 callbacks suppressed [ 1203.340811][T25281] netlink: 'syz.3.6621': attribute type 16 has an invalid length. [ 1203.361506][T21490] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1203.407306][T25284] netlink: 'syz.3.6622': attribute type 9 has an invalid length. [ 1203.415682][T25284] netlink: 'syz.3.6622': attribute type 11 has an invalid length. [ 1203.424583][T25284] netlink: 'syz.3.6622': attribute type 12 has an invalid length. [ 1203.432528][T25284] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1203.522906][T21490] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1203.534877][T21490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.545917][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c08f400: rx timeout, send abort [ 1203.554731][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c08e000: abort rx timeout. Force session deactivation [ 1203.573306][T21490] usb 6-1: config 0 descriptor?? [ 1203.595312][T21490] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1203.752806][T12266] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1203.774919][T25291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.782068][T25291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.913174][T12266] usb 4-1: Using ep0 maxpacket: 32 [ 1203.926665][T12266] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1203.935467][T12266] usb 4-1: config 0 has no interface number 0 [ 1203.942016][T12266] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1203.952298][T12266] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1203.962070][T12266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.970158][T12266] usb 4-1: Product: syz [ 1203.975123][T12266] usb 4-1: Manufacturer: syz [ 1203.979787][T12266] usb 4-1: SerialNumber: syz [ 1203.988637][T12266] usb 4-1: config 0 descriptor?? [ 1204.043434][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c08cc00: rx timeout, send abort [ 1204.052049][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c08cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1204.066863][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c08f400: abort rx timeout. Force session deactivation [ 1204.136271][T25297] netlink: 'syz.0.6628': attribute type 9 has an invalid length. [ 1204.141217][ T5915] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1204.150938][T25297] netlink: 'syz.0.6628': attribute type 11 has an invalid length. [ 1204.159598][T25297] netlink: 'syz.0.6628': attribute type 12 has an invalid length. [ 1204.169098][T25297] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6628'. [ 1204.313826][ T5915] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1204.323237][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.335107][ T5915] usb 7-1: config 0 descriptor?? [ 1204.343936][ T5915] cp210x 7-1:0.0: cp210x converter detected [ 1204.421295][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1204.591081][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 1204.598772][ T5895] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1204.607360][ T5895] usb 1-1: config 0 has no interface number 0 [ 1204.613629][ T5895] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1204.623456][ T5895] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1204.632639][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.641490][ T5895] usb 1-1: Product: syz [ 1204.645793][ T5895] usb 1-1: Manufacturer: syz [ 1204.650466][ T5895] usb 1-1: SerialNumber: syz [ 1204.658711][ T5895] usb 1-1: config 0 descriptor?? [ 1204.747282][ T5915] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1204.755844][ T5915] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1204.763746][ T5915] cp210x 7-1:0.0: GPIO initialisation failed: -121 [ 1204.778008][ T5915] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1204.960067][ T5915] usb 7-1: USB disconnect, device number 49 [ 1204.973041][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1204.982621][ T5915] cp210x 7-1:0.0: device disconnected [ 1205.004491][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1205.023435][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1205.034914][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1205.046180][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1205.057546][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1205.067929][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1205.078410][T12266] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1205.091370][T12266] usb 4-1: USB disconnect, device number 33 [ 1205.412824][T21490] usb 6-1: USB disconnect, device number 74 [ 1205.676175][T25305] netlink: 'syz.3.6632': attribute type 9 has an invalid length. [ 1205.677638][ T5895] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1205.697460][T25305] netlink: 'syz.3.6632': attribute type 11 has an invalid length. [ 1205.707947][T25305] netlink: 'syz.3.6632': attribute type 12 has an invalid length. [ 1205.718109][T25305] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6632'. [ 1205.725337][ T5895] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1205.917883][T25311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.925230][T25311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.958930][ T5895] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1205.971110][T12266] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1205.988856][ T5895] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1206.024213][ T5895] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1206.055052][ T5895] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1206.070411][ T5895] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1206.088159][ T5895] usb 1-1: USB disconnect, device number 10 [ 1206.141501][T12266] usb 4-1: Using ep0 maxpacket: 32 [ 1206.155024][T12266] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1206.166544][T12266] usb 4-1: config 0 has no interface number 0 [ 1206.172932][T12266] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1206.187888][T12266] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1206.205965][T12266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.216808][T12266] usb 4-1: Product: syz [ 1206.228715][T12266] usb 4-1: Manufacturer: syz [ 1206.234948][T12266] usb 4-1: SerialNumber: syz [ 1206.255343][T12266] usb 4-1: config 0 descriptor?? [ 1206.274430][ T5915] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1206.441146][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 1206.450215][ T5915] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1206.459641][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1206.468135][ T5915] usb 6-1: Product: syz [ 1206.472500][ T5915] usb 6-1: Manufacturer: syz [ 1206.478532][ T5915] usb 6-1: SerialNumber: syz [ 1206.486816][ T5915] usb 6-1: config 0 descriptor?? [ 1206.495021][ T5915] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1206.541046][ T5895] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1206.573363][T25321] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6639'. [ 1206.704075][ T5895] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1206.715176][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.727072][ T5895] usb 7-1: config 0 descriptor?? [ 1206.737177][ T5895] cp210x 7-1:0.0: cp210x converter detected [ 1206.842792][T19721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1206.948020][ T5915] gspca_sn9c2028: read1 error 0 [ 1207.020999][T19721] usb 1-1: Using ep0 maxpacket: 32 [ 1207.028680][T19721] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1207.037574][T19721] usb 1-1: config 0 has no interface number 0 [ 1207.043984][T19721] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1207.053503][T19721] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1207.062917][T19721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.071149][T19721] usb 1-1: Product: syz [ 1207.075486][T19721] usb 1-1: Manufacturer: syz [ 1207.080264][T19721] usb 1-1: SerialNumber: syz [ 1207.089676][T19721] usb 1-1: config 0 descriptor?? [ 1207.140211][ T5895] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1207.148933][ T5895] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1207.151017][ T5915] gspca_sn9c2028: read1 error -71 [ 1207.159083][ T5895] cp210x 7-1:0.0: GPIO initialisation failed: -121 [ 1207.164012][ T5915] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1207.185184][ T5915] usb 6-1: USB disconnect, device number 75 [ 1207.191634][ T5895] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1207.286312][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1207.298668][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1207.309129][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1207.322413][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1207.332612][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1207.344148][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1207.352685][ T5895] usb 7-1: USB disconnect, device number 50 [ 1207.354884][T12266] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1207.377754][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1207.380015][T12266] usb 4-1: USB disconnect, device number 34 [ 1207.404922][ T5895] cp210x 7-1:0.0: device disconnected [ 1208.109726][T25336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.117055][T25336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.127428][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1208.138435][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cf9b000: rx timeout, send abort [ 1208.165603][T12266] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1208.174965][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1208.187570][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1208.210314][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1208.227498][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1208.238977][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1208.249613][T19721] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1208.264368][T19721] usb 1-1: USB disconnect, device number 11 [ 1208.343026][T12266] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1208.352379][T12266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.364977][T12266] usb 4-1: config 0 descriptor?? [ 1208.377411][T12266] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1208.557795][T25345] validate_nla: 3 callbacks suppressed [ 1208.557830][T25345] netlink: 'syz.6.6648': attribute type 9 has an invalid length. [ 1208.572809][T25345] netlink: 'syz.6.6648': attribute type 11 has an invalid length. [ 1208.581116][T25345] netlink: 'syz.6.6648': attribute type 12 has an invalid length. [ 1208.590982][T25345] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6648'. [ 1208.629631][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cf98c00: rx timeout, send abort [ 1208.638484][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cf9b000: abort rx timeout. Force session deactivation [ 1208.744124][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6649'. [ 1208.841202][ T5895] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1208.951340][ T10] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1209.001076][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1209.009381][ T5895] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1209.017899][ T5895] usb 7-1: config 0 has no interface number 0 [ 1209.025249][ T5895] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1209.034859][ T5895] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1209.045021][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.054305][ T5895] usb 7-1: Product: syz [ 1209.058529][ T5895] usb 7-1: Manufacturer: syz [ 1209.063311][ T5895] usb 7-1: SerialNumber: syz [ 1209.070793][ T5895] usb 7-1: config 0 descriptor?? [ 1209.082594][T19721] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1209.111107][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1209.120140][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1209.131294][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1209.137935][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cf98c00: abort rx timeout. Force session deactivation [ 1209.140606][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.164369][ T10] usb 6-1: config 0 descriptor?? [ 1209.243374][T19721] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1209.252851][T19721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.267282][T19721] usb 1-1: config 0 descriptor?? [ 1209.276684][T19721] cp210x 1-1:0.0: cp210x converter detected [ 1209.381990][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1209.483799][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1209.495596][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1209.505357][ T5895] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1209.516031][ T5895] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1209.679846][T19721] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1209.688346][T19721] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1209.696851][T19721] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 1209.708269][T19721] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1209.790987][ T5895] usb 6-1: USB disconnect, device number 76 [ 1209.890505][T19721] usb 1-1: USB disconnect, device number 12 [ 1209.906463][T19721] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1209.915330][T19721] cp210x 1-1:0.0: device disconnected [ 1210.210423][T12266] usb 4-1: USB disconnect, device number 35 [ 1210.477658][T25361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.484918][T25361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.515730][T25363] netlink: 'syz.0.6655': attribute type 9 has an invalid length. [ 1210.526788][T25363] netlink: 'syz.0.6655': attribute type 11 has an invalid length. [ 1210.535199][T25363] netlink: 'syz.0.6655': attribute type 12 has an invalid length. [ 1210.556223][T25363] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6655'. [ 1210.685651][T25369] netlink: 'syz.5.6657': attribute type 9 has an invalid length. [ 1210.696705][T25369] netlink: 'syz.5.6657': attribute type 11 has an invalid length. [ 1210.705217][T25369] netlink: 'syz.5.6657': attribute type 12 has an invalid length. [ 1210.713096][T25369] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6657'. [ 1210.811034][T25250] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1210.923255][T25379] syzkaller1: entered promiscuous mode [ 1210.929081][T25379] syzkaller1: entered allmulticast mode [ 1210.968782][ T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1210.972397][T25250] usb 1-1: Using ep0 maxpacket: 32 [ 1210.984546][T25250] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1210.994041][T25250] usb 1-1: config 0 has no interface number 0 [ 1211.000296][T25250] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1211.009629][T25250] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1211.019035][T25250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.038856][T25250] usb 1-1: Product: syz [ 1211.043724][T25250] usb 1-1: Manufacturer: syz [ 1211.049558][T25250] usb 1-1: SerialNumber: syz [ 1211.060295][T25250] usb 1-1: config 0 descriptor?? [ 1211.131210][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1211.138345][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1211.147838][ T10] usb 6-1: config 0 has no interface number 0 [ 1211.155092][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1211.165336][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1211.175402][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.184861][ T10] usb 6-1: Product: syz [ 1211.189079][ T10] usb 6-1: Manufacturer: syz [ 1211.195479][ T10] usb 6-1: SerialNumber: syz [ 1211.203306][ T10] usb 6-1: config 0 descriptor?? [ 1211.310996][T12266] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1211.462728][T12266] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1211.472124][T12266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.482328][T25250] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1211.494300][T25250] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1211.506173][T12266] usb 4-1: config 0 descriptor?? [ 1211.511527][T25250] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1211.522737][T25250] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1211.532881][T12266] cp210x 4-1:0.0: cp210x converter detected [ 1211.574977][T25250] usb 7-1: USB disconnect, device number 51 [ 1211.614946][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1211.642927][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1211.669444][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1211.682566][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1211.850167][T25386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.857437][T25386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.945575][T12266] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1211.954494][T12266] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1211.962611][T12266] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1211.975580][T12266] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1212.157631][ T10] usb 4-1: USB disconnect, device number 36 [ 1212.168145][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1212.176877][ T10] cp210x 4-1:0.0: device disconnected [ 1212.940954][ T5895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1213.103741][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1213.113015][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.123648][ T5895] usb 4-1: config 0 descriptor?? [ 1213.134226][ T5895] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1213.519142][ T10] usb 1-1: USB disconnect, device number 13 [ 1213.716636][T25250] usb 6-1: USB disconnect, device number 77 [ 1213.815100][T25402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6671'. [ 1213.847166][T25402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6671'. [ 1213.859589][T25404] netlink: 'syz.5.6672': attribute type 9 has an invalid length. [ 1213.868043][T25404] netlink: 'syz.5.6672': attribute type 11 has an invalid length. [ 1213.877067][T25404] netlink: 'syz.5.6672': attribute type 12 has an invalid length. [ 1213.885880][T25404] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6672'. [ 1213.982198][ T5163] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1214.088748][T25410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.096055][T25410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.211632][T25250] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1214.268192][T25416] netlink: 'syz.0.6677': attribute type 9 has an invalid length. [ 1214.276129][T25416] netlink: 'syz.0.6677': attribute type 11 has an invalid length. [ 1214.284391][T25416] netlink: 'syz.0.6677': attribute type 12 has an invalid length. [ 1214.292430][T25416] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6677'. [ 1214.361131][T25250] usb 6-1: Using ep0 maxpacket: 32 [ 1214.368838][T25250] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1214.377367][T25250] usb 6-1: config 0 has no interface number 0 [ 1214.383713][T25250] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1214.393175][T25250] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1214.402400][T12266] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1214.410524][T25250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.420148][T25250] usb 6-1: Product: syz [ 1214.425035][T25250] usb 6-1: Manufacturer: syz [ 1214.429680][T25250] usb 6-1: SerialNumber: syz [ 1214.436884][T25250] usb 6-1: config 0 descriptor?? [ 1214.545057][T19721] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1214.573428][T12266] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1214.582879][T12266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.595689][T12266] usb 7-1: config 0 descriptor?? [ 1214.608202][T12266] cp210x 7-1:0.0: cp210x converter detected [ 1214.701116][T19721] usb 1-1: Using ep0 maxpacket: 32 [ 1214.709014][T19721] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1214.718398][T19721] usb 1-1: config 0 has no interface number 0 [ 1214.724981][T19721] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1214.734628][T19721] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1214.744072][T19721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.752398][T19721] usb 1-1: Product: syz [ 1214.756628][T19721] usb 1-1: Manufacturer: syz [ 1214.761464][T19721] usb 1-1: SerialNumber: syz [ 1214.770460][T19721] usb 1-1: config 0 descriptor?? [ 1214.846487][T25250] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1214.857497][T25250] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1214.867249][T25250] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1214.878152][T25250] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1214.954387][ T5895] usb 4-1: USB disconnect, device number 37 [ 1215.009167][T12266] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1215.019151][T12266] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1215.027673][T12266] cp210x 7-1:0.0: GPIO initialisation failed: -121 [ 1215.041774][T12266] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1215.179327][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1215.190288][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1215.200006][T19721] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1215.210698][T19721] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1215.226399][ T5895] usb 7-1: USB disconnect, device number 52 [ 1215.245495][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1215.255787][ T5895] cp210x 7-1:0.0: device disconnected [ 1215.491507][T25419] netlink: 'syz.3.6678': attribute type 9 has an invalid length. [ 1215.499447][T25419] netlink: 'syz.3.6678': attribute type 11 has an invalid length. [ 1215.507408][T25419] netlink: 'syz.3.6678': attribute type 12 has an invalid length. [ 1215.515608][T25419] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6678'. [ 1215.778517][T25423] syzkaller1: entered promiscuous mode [ 1215.785600][T19721] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1215.791914][T25423] syzkaller1: entered allmulticast mode [ 1215.914266][T25427] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1215.926686][T25427] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1215.950958][T19721] usb 4-1: Using ep0 maxpacket: 32 [ 1215.964200][T19721] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1215.982098][T19721] usb 4-1: config 0 has no interface number 0 [ 1215.994499][T25429] netlink: 'syz.6.6681': attribute type 2 has an invalid length. [ 1215.996801][T19721] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1216.005717][T25429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6681'. [ 1216.020062][T19721] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1216.029824][T19721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.038460][T19721] usb 4-1: Product: syz [ 1216.043620][T19721] usb 4-1: Manufacturer: syz [ 1216.048276][T19721] usb 4-1: SerialNumber: syz [ 1216.069481][T19721] usb 4-1: config 0 descriptor?? [ 1216.341115][ T5915] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1216.480143][T19721] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1216.492442][T19721] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1216.502793][T19721] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1216.513573][T19721] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1216.522031][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 1216.532645][ T5915] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1216.541452][ T5915] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1216.550119][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1216.560069][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1216.570051][ T5915] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1216.580094][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1216.594225][ T5915] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1216.603552][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.614478][ T5915] usb 7-1: config 0 descriptor?? [ 1216.832890][ T5915] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1216.868038][ T5895] usb 6-1: USB disconnect, device number 78 [ 1217.035177][ T5915] usb 7-1: USB disconnect, device number 53 [ 1217.049268][ T5915] usblp0: removed [ 1217.251035][ T5895] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1217.280062][ T9] usb 1-1: USB disconnect, device number 14 [ 1217.411274][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 1217.421010][ T5895] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1217.430353][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.439127][ T5895] usb 6-1: Product: syz [ 1217.444014][ T5895] usb 6-1: Manufacturer: syz [ 1217.448664][ T5895] usb 6-1: SerialNumber: syz [ 1217.458253][ T5895] usb 6-1: config 0 descriptor?? [ 1217.682468][ T5895] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1217.850982][ T5915] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1217.961054][T19721] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1218.014300][ T5915] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1218.023515][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.035994][ T5915] usb 7-1: config 0 descriptor?? [ 1218.053660][ T5915] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1218.133525][T19721] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1218.143492][T19721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.161259][T19721] usb 1-1: config 0 descriptor?? [ 1218.176034][T19721] cp210x 1-1:0.0: cp210x converter detected [ 1218.514536][ T9] usb 4-1: USB disconnect, device number 38 [ 1218.577245][T19721] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1218.588600][T19721] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1218.596791][T19721] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 1218.610634][T19721] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1218.667420][T25452] IPv6: NLM_F_CREATE should be specified when creating new route [ 1218.744738][T25455] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6691'. [ 1218.793092][ T10] usb 1-1: USB disconnect, device number 15 [ 1218.806857][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1218.815763][ T10] cp210x 1-1:0.0: device disconnected [ 1218.903835][ T5895] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1218.919256][ T5895] usb 6-1: USB disconnect, device number 79 [ 1219.001100][T19721] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1219.150983][T19721] usb 4-1: Using ep0 maxpacket: 32 [ 1219.157973][T19721] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1219.166828][T19721] usb 4-1: config 0 has no interface number 0 [ 1219.173656][T19721] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1219.183446][T19721] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1219.192612][T19721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.200659][T19721] usb 4-1: Product: syz [ 1219.204958][T19721] usb 4-1: Manufacturer: syz [ 1219.209592][T19721] usb 4-1: SerialNumber: syz [ 1219.217626][T19721] usb 4-1: config 0 descriptor?? [ 1219.339647][T25457] validate_nla: 3 callbacks suppressed [ 1219.339663][T25457] netlink: 'syz.0.6692': attribute type 9 has an invalid length. [ 1219.356059][T25457] netlink: 'syz.0.6692': attribute type 11 has an invalid length. [ 1219.364199][T25457] netlink: 'syz.0.6692': attribute type 12 has an invalid length. [ 1219.372556][T25457] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.6692'. [ 1219.476183][T25459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.483434][T25459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.621273][T12266] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1219.642176][T19721] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1219.653767][T19721] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1219.667112][T19721] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1219.679863][T19721] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1219.762793][T25467] netlink: 'syz.5.6697': attribute type 9 has an invalid length. [ 1219.772031][T25467] netlink: 'syz.5.6697': attribute type 11 has an invalid length. [ 1219.779907][T25467] netlink: 'syz.5.6697': attribute type 12 has an invalid length. [ 1219.787990][T25467] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6697'. [ 1219.811070][T12266] usb 1-1: Using ep0 maxpacket: 32 [ 1219.818080][T12266] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1219.826789][T12266] usb 1-1: config 0 has no interface number 0 [ 1219.834539][T12266] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1219.845475][T12266] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1219.855148][T12266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.863261][T12266] usb 1-1: Product: syz [ 1219.867477][T12266] usb 1-1: Manufacturer: syz [ 1219.872251][T12266] usb 1-1: SerialNumber: syz [ 1219.880502][ T5915] usb 7-1: USB disconnect, device number 54 [ 1219.888335][T12266] usb 1-1: config 0 descriptor?? [ 1220.040982][T25250] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1220.191041][T25250] usb 6-1: Using ep0 maxpacket: 32 [ 1220.197984][T25250] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1220.206619][T25250] usb 6-1: config 0 has no interface number 0 [ 1220.212979][T25250] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1220.223008][T25250] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1220.232163][T25250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.241557][T25250] usb 6-1: Product: syz [ 1220.245871][T25250] usb 6-1: Manufacturer: syz [ 1220.250515][T25250] usb 6-1: SerialNumber: syz [ 1220.258579][T25250] usb 6-1: config 0 descriptor?? [ 1220.301082][T12266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1220.312298][T12266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1220.322120][T12266] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1220.332806][T12266] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1220.668711][T25250] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1220.679683][T25250] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1220.689581][T12266] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1220.697524][T25250] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1220.708757][T25250] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1220.851094][T12266] usb 7-1: Using ep0 maxpacket: 16 [ 1220.859317][T12266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.871490][T12266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.881359][T12266] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1220.894495][T12266] usb 7-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1220.903706][T12266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.914290][T12266] usb 7-1: config 0 descriptor?? [ 1221.125553][T25471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.134541][T25471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.548123][T12266] usbhid 7-1:0.0: can't add hid device: -71 [ 1221.554369][T12266] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1221.566455][T12266] usb 7-1: USB disconnect, device number 55 [ 1221.754427][ T9] usb 4-1: USB disconnect, device number 39 [ 1222.100231][T25484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.107531][T25484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.201094][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1222.345658][ T5915] usb 1-1: USB disconnect, device number 16 [ 1222.382947][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1222.407661][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.437010][ T9] usb 4-1: config 0 descriptor?? [ 1222.448974][ T9] cp210x 4-1:0.0: cp210x converter detected [ 1222.474886][T25499] netlink: 'syz.6.6708': attribute type 9 has an invalid length. [ 1222.482963][T25499] netlink: 'syz.6.6708': attribute type 11 has an invalid length. [ 1222.490883][T25499] netlink: 'syz.6.6708': attribute type 12 has an invalid length. [ 1222.499455][T25499] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6708'. [ 1222.701132][ T5915] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1222.751032][T12266] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1222.776659][T25250] usb 6-1: USB disconnect, device number 80 [ 1222.849211][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1222.859898][ T9] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1222.871479][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1222.880284][ T9] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1222.892052][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.896275][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1222.911020][T12266] usb 7-1: Using ep0 maxpacket: 32 [ 1222.932715][ T5915] usb 1-1: config 0 descriptor?? [ 1222.956203][T12266] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1222.978668][T12266] usb 7-1: config 0 has no interface number 0 [ 1222.989240][ T5915] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1222.996323][T12266] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1223.007632][T12266] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1223.017765][T12266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.026513][T12266] usb 7-1: Product: syz [ 1223.031161][T12266] usb 7-1: Manufacturer: syz [ 1223.036099][T12266] usb 7-1: SerialNumber: syz [ 1223.044167][T12266] usb 7-1: config 0 descriptor?? [ 1223.063947][ T9] usb 4-1: USB disconnect, device number 40 [ 1223.076720][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1223.088310][ T9] cp210x 4-1:0.0: device disconnected [ 1223.114375][T25503] netlink: 10916 bytes leftover after parsing attributes in process `syz.5.6710'. [ 1223.125835][T25503] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1223.205079][T25506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.212306][T25506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.455634][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1223.467004][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1223.477267][T12266] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1223.488994][T12266] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1223.574133][T25514] netlink: 'syz.5.6715': attribute type 9 has an invalid length. [ 1223.584954][T25514] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6715'. [ 1223.681018][T25518] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.6717'. [ 1223.830942][ T5895] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1223.931085][T12266] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1223.981192][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1223.988682][ T5895] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1223.997819][ T5895] usb 6-1: config 0 has no interface number 0 [ 1224.004189][ T5895] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1224.013819][ T5895] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1224.023100][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.031773][ T5895] usb 6-1: Product: syz [ 1224.036001][ T5895] usb 6-1: Manufacturer: syz [ 1224.040638][ T5895] usb 6-1: SerialNumber: syz [ 1224.048803][ T5895] usb 6-1: config 0 descriptor?? [ 1224.081935][T12266] usb 4-1: Using ep0 maxpacket: 32 [ 1224.089028][T12266] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1224.097853][T12266] usb 4-1: config 0 has no interface number 0 [ 1224.105870][T12266] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1224.117229][T12266] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1224.126660][T12266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.135635][T12266] usb 4-1: Product: syz [ 1224.140235][T12266] usb 4-1: Manufacturer: syz [ 1224.145502][T12266] usb 4-1: SerialNumber: syz [ 1224.156080][T12266] usb 4-1: config 0 descriptor?? [ 1224.460514][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1224.471767][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1224.482852][ T5895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1224.493676][ T5895] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1224.566095][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1224.577313][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1224.587079][T12266] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1224.598975][T12266] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1224.785527][ T5915] usb 1-1: USB disconnect, device number 17 [ 1225.476335][T25533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6721'. [ 1225.499181][ T5895] usb 7-1: USB disconnect, device number 56 [ 1225.737032][T25546] validate_nla: 5 callbacks suppressed [ 1225.737052][T25546] netlink: 'syz.6.6726': attribute type 25 has an invalid length. [ 1225.752719][T25546] netlink: 'syz.6.6726': attribute type 3 has an invalid length. [ 1225.760509][T25546] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6726'. [ 1225.961285][ T5895] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1226.017437][T25554] netlink: 'syz.6.6730': attribute type 9 has an invalid length. [ 1226.027761][T25554] netlink: 'syz.6.6730': attribute type 11 has an invalid length. [ 1226.036522][T25554] netlink: 'syz.6.6730': attribute type 12 has an invalid length. [ 1226.044730][T25554] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.6730'. [ 1226.133719][ T5895] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1226.143820][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.154623][ T5895] usb 1-1: config 0 descriptor?? [ 1226.164571][ T5895] cp210x 1-1:0.0: cp210x converter detected [ 1226.300985][T21490] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1226.462310][T21490] usb 7-1: Using ep0 maxpacket: 32 [ 1226.469220][T21490] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1226.477932][T21490] usb 7-1: config 0 has no interface number 0 [ 1226.484419][T21490] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1226.494149][T21490] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1226.503337][T21490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.511717][T21490] usb 7-1: Product: syz [ 1226.515975][T21490] usb 7-1: Manufacturer: syz [ 1226.520595][T21490] usb 7-1: SerialNumber: syz [ 1226.528731][T21490] usb 7-1: config 0 descriptor?? [ 1226.566217][ T5895] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1226.575261][ T5895] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1226.580047][T12266] usb 6-1: USB disconnect, device number 81 [ 1226.583429][ T5895] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 1226.628821][ T5895] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1226.663566][T25556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.670979][T25556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.720981][ T30] INFO: task syz.4.6011:23526 blocked for more than 143 seconds. [ 1226.735728][ T30] Tainted: G L syzkaller #0 [ 1226.735782][ T5915] usb 4-1: USB disconnect, device number 41 [ 1226.759313][ T30] Blocked by coredump. [ 1226.773350][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1226.795837][ T30] task:syz.4.6011 state:D stack:24752 pid:23526 tgid:23526 ppid:21294 task_flags:0x40004c flags:0x00080000 [ 1226.808422][ T30] Call Trace: [ 1226.813130][ T30] [ 1226.813611][T25250] usb 1-1: USB disconnect, device number 18 [ 1226.816142][ T30] __schedule+0x1665/0x5590 [ 1226.827164][ T30] ? __pfx___schedule+0x10/0x10 [ 1226.834520][ T30] ? schedule+0x90/0x360 [ 1226.846487][ T30] schedule+0x164/0x360 [ 1226.859727][T25560] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6732'. [ 1226.874436][ T30] schedule_preempt_disabled+0x13/0x30 [ 1226.874891][T25250] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1226.885120][ T30] rwsem_down_read_slowpath+0x6d9/0x940 [ 1226.904261][T25250] cp210x 1-1:0.0: device disconnected [ 1226.909948][ T30] ? rwsem_down_read_slowpath+0x596/0x940 [ 1226.933091][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1226.953057][T21490] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1226.965723][ T30] ? do_futex+0x395/0x420 [ 1226.970643][ T30] down_read+0x99/0x2e0 [ 1226.975059][ T30] ? exit_mm+0x64/0x250 [ 1226.979438][T21490] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1226.989378][ T30] exit_mm+0x73/0x250 [ 1226.993648][ T30] ? unwind_deferred_task_exit+0x67/0xa0 [ 1226.999847][T21490] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1227.010454][ T30] do_exit+0x8b9/0x2490 [ 1227.014832][ T30] ? try_to_wake_up+0x7fc/0x1390 [ 1227.020356][T21490] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1227.028979][ T30] ? __pfx_do_exit+0x10/0x10 [ 1227.033742][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1227.042484][ T30] do_group_exit+0x21b/0x2d0 [ 1227.047370][ T30] __x64_sys_exit_group+0x3f/0x40 [ 1227.053017][ T30] x64_sys_call+0x221a/0x2240 [ 1227.059034][ T30] do_syscall_64+0x14d/0xf80 [ 1227.069805][ T30] ? trace_irq_disable+0x3b/0x150 [ 1227.080964][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.090551][ T30] ? clear_bhb_loop+0x40/0x90 [ 1227.095558][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.102526][ T30] RIP: 0033:0x7f9eb659c799 [ 1227.107078][ T30] RSP: 002b:00007ffea35813b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1227.115794][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f9eb659c799 [ 1227.124076][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 1227.132314][ T30] RBP: 0000000000001473 R08: 00007ffea3581847 R09: 000000000000000b [ 1227.140428][ T30] R10: 00007f9eb6815fa0 R11: 0000000000000246 R12: 0000000000000003 [ 1227.149045][ T30] R13: 00007f9eb681627c R14: 00007f9eb6816278 R15: 00007f9eb6816270 [ 1227.157547][ T30] [ 1227.161665][ T30] INFO: task syz.4.6011:23527 blocked for more than 143 seconds. [ 1227.170225][ T30] Tainted: G L syzkaller #0 [ 1227.183233][ T30] Blocked by coredump. [ 1227.187976][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1227.197244][ T30] task:syz.4.6011 state:D stack:25624 pid:23527 tgid:23526 ppid:21294 task_flags:0x40044c flags:0x00080000 [ 1227.210979][ T30] Call Trace: [ 1227.214402][ T30] [ 1227.217475][ T30] __schedule+0x1665/0x5590 [ 1227.222662][ T30] ? __pfx___schedule+0x10/0x10 [ 1227.227651][ T30] ? schedule+0x90/0x360 [ 1227.232280][ T30] schedule+0x164/0x360 [ 1227.236643][ T30] schedule_preempt_disabled+0x13/0x30 [ 1227.242679][ T30] rwsem_down_read_slowpath+0x6d9/0x940 [ 1227.248454][ T30] ? rwsem_down_read_slowpath+0x596/0x940 [ 1227.254740][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1227.261285][ T30] ? do_futex+0x395/0x420 [ 1227.265833][ T30] down_read+0x99/0x2e0 [ 1227.270776][ T30] ? exit_mm+0x64/0x250 [ 1227.275960][ T30] exit_mm+0x73/0x250 [ 1227.280151][ T30] ? unwind_deferred_task_exit+0x67/0xa0 [ 1227.286505][ T30] do_exit+0x8b9/0x2490 [ 1227.290805][ T30] ? __pfx_do_exit+0x10/0x10 [ 1227.296235][ T30] do_group_exit+0x21b/0x2d0 [ 1227.301235][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1227.308251][ T30] get_signal+0x1284/0x1330 [ 1227.314674][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 1227.320471][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1227.327334][ T30] exit_to_user_mode_loop+0x86/0x480 [ 1227.333155][ T30] ? rcu_is_watching+0x15/0xb0 [ 1227.349394][ T30] do_syscall_64+0x32d/0xf80 [ 1227.360929][ T30] ? trace_irq_disable+0x3b/0x150 [ 1227.372276][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.380568][ T30] ? clear_bhb_loop+0x40/0x90 [ 1227.386082][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.392625][ T30] RIP: 0033:0x7f9eb659c799 [ 1227.397177][ T30] RSP: 002b:00007f9eb736f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1227.406269][ T30] RAX: 00000000001a6d00 RBX: 00007f9eb6815fa0 RCX: 00007f9eb659c799 [ 1227.415988][ T30] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000001c4 [ 1227.425547][ T30] RBP: 00007f9eb6632c99 R08: 0000000000000286 R09: 0000000000000000 [ 1227.434065][ T30] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 1227.442850][ T30] R13: 00007f9eb6816038 R14: 00007f9eb6815fa0 R15: 00007ffea3581848 [ 1227.454140][ T30] [ 1227.457376][ T30] INFO: task syz.4.6011:23532 blocked for more than 144 seconds. [ 1227.466354][ T30] Tainted: G L syzkaller #0 [ 1227.474134][ T30] Blocked by coredump. [ 1227.478945][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1227.490686][ T30] task:syz.4.6011 state:D stack:29088 pid:23532 tgid:23526 ppid:21294 task_flags:0x40044c flags:0x00080000 [ 1227.504159][ T30] Call Trace: [ 1227.507576][ T30] [ 1227.512473][ T30] __schedule+0x1665/0x5590 [ 1227.517378][ T30] ? __pfx___schedule+0x10/0x10 [ 1227.522811][ T30] ? schedule+0x90/0x360 [ 1227.527499][ T30] schedule+0x164/0x360 [ 1227.532162][ T30] schedule_preempt_disabled+0x13/0x30 [ 1227.537809][ T30] rwsem_down_read_slowpath+0x6d9/0x940 [ 1227.543881][ T30] ? rwsem_down_read_slowpath+0x596/0x940 [ 1227.549779][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1227.556414][ T30] ? do_futex+0x395/0x420 [ 1227.563336][ T30] down_read+0x99/0x2e0 [ 1227.567573][ T30] ? exit_mm+0x64/0x250 [ 1227.572359][ T30] exit_mm+0x73/0x250 [ 1227.577299][ T30] ? unwind_deferred_task_exit+0x67/0xa0 [ 1227.583518][ T30] do_exit+0x8b9/0x2490 [ 1227.587817][ T30] ? __pfx_do_exit+0x10/0x10 [ 1227.593421][ T30] do_group_exit+0x21b/0x2d0 [ 1227.598134][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1227.603847][ T30] get_signal+0x1284/0x1330 [ 1227.608500][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 1227.615357][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1227.623490][ T30] exit_to_user_mode_loop+0x86/0x480 [ 1227.628905][ T30] ? rcu_is_watching+0x15/0xb0 [ 1227.634834][ T30] ret_from_fork+0x59d/0xb90 [ 1227.639596][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1227.646535][ T30] ? __switch_to+0xc7d/0x1450 [ 1227.651655][ T30] ret_from_fork_asm+0x1a/0x30 [ 1227.656570][ T30] [ 1227.660581][ T30] [ 1227.660581][ T30] Showing all locks held in the system: [ 1227.669927][ T30] 3 locks held by kworker/u8:1/13: [ 1227.680752][ T30] #0: ffff88813fe44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 1227.692475][ T30] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 1227.704364][ T30] #2: ffffffff8fff66c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1227.713845][ T30] 1 lock held by khungtaskd/30: [ 1227.719485][ T30] #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1227.730235][ T30] 2 locks held by getty/5604: [ 1227.737353][ T30] #0: ffff8880333640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1227.749046][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1227.761063][ T30] 1 lock held by syz.4.6011/23526: [ 1227.766232][ T30] #0: ffff8880779bf3b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 1227.775865][ T30] 1 lock held by syz.4.6011/23527: [ 1227.783774][ T30] #0: ffff8880779bf3b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 1227.793106][ T30] 1 lock held by syz.4.6011/23532: [ 1227.798444][ T30] #0: ffff8880779bf3b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 1227.808002][ T30] 2 locks held by syz.5.6732/25557: [ 1227.814937][ T30] #0: ffffffff8fff66c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1227.825097][ T30] #1: ffffffff8eb638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1227.836678][ T30] 3 locks held by syz.3.6733/25559: [ 1227.842394][ T30] [ 1227.864890][ T30] ============================================= [ 1227.864890][ T30] [ 1227.874321][ T30] NMI backtrace for cpu 0 [ 1227.874342][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.874367][ T30] Tainted: [L]=SOFTLOCKUP [ 1227.874375][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1227.874387][ T30] Call Trace: [ 1227.874395][ T30] [ 1227.874404][ T30] dump_stack_lvl+0xe8/0x150 [ 1227.874438][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1227.874465][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1227.874494][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1227.874520][ T30] sys_info+0x135/0x170 [ 1227.874547][ T30] watchdog+0x1002/0x1060 [ 1227.874579][ T30] ? watchdog+0x1da/0x1060 [ 1227.874607][ T30] kthread+0x388/0x470 [ 1227.874629][ T30] ? __pfx_watchdog+0x10/0x10 [ 1227.874647][ T30] ? __pfx_kthread+0x10/0x10 [ 1227.874671][ T30] ret_from_fork+0x51e/0xb90 [ 1227.874701][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1227.874722][ T30] ? __switch_to+0xc7d/0x1450 [ 1227.874745][ T30] ? __pfx_kthread+0x10/0x10 [ 1227.874768][ T30] ret_from_fork_asm+0x1a/0x30 [ 1227.874803][ T30] [ 1227.874811][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1227.995810][ C1] NMI backtrace for cpu 1 [ 1227.995832][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1227.995854][ C1] Tainted: [L]=SOFTLOCKUP [ 1227.995860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1227.995870][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1227.995899][ C1] Code: bd 91 02 e9 d3 f1 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 d2 29 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1227.995912][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1227.995929][ C1] RAX: 0000000000f7f8b3 RBX: ffffffff819bd46a RCX: 0000000080000001 [ 1227.995941][ C1] RDX: 0000000000000001 RSI: ffffffff8e25766a RDI: ffffffff8c4a6280 [ 1227.995951][ C1] RBP: ffffc90000197f10 R08: ffff8880b853399b R09: 1ffff110170a6733 [ 1227.995963][ C1] R10: dffffc0000000000 R11: ffffed10170a6734 R12: 0000000000000001 [ 1227.995974][ C1] R13: 1ffff11003bd8000 R14: 0000000000000001 R15: 1ffff11003bd8000 [ 1227.995985][ C1] FS: 0000000000000000(0000) GS:ffff888124ee1000(0000) knlGS:0000000000000000 [ 1227.995998][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1227.996009][ C1] CR2: 00007f8f695eb4b8 CR3: 000000003340c000 CR4: 00000000003526f0 [ 1227.996025][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1227.996035][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1227.996045][ C1] Call Trace: [ 1227.996052][ C1] [ 1227.996064][ C1] default_idle+0x9/0x20 [ 1227.996081][ C1] default_idle_call+0x72/0xb0 [ 1227.996098][ C1] do_idle+0x36a/0x5f0 [ 1227.996117][ C1] ? __pfx_do_idle+0x10/0x10 [ 1227.996136][ C1] cpu_startup_entry+0x43/0x60 [ 1227.996151][ C1] start_secondary+0x101/0x110 [ 1227.996171][ C1] common_startup_64+0x13e/0x147 [ 1227.996195][ C1] [ 1228.181814][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1228.188697][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.199388][ T30] Tainted: [L]=SOFTLOCKUP [ 1228.203717][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1228.213794][ T30] Call Trace: [ 1228.217088][ T30] [ 1228.220109][ T30] vpanic+0x56c/0xa60 [ 1228.224101][ T30] ? __pfx___schedule+0x10/0x10 [ 1228.228970][ T30] ? __pfx_vpanic+0x10/0x10 [ 1228.233481][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1228.239657][ T30] panic+0xc5/0xd0 [ 1228.243385][ T30] ? __pfx_panic+0x10/0x10 [ 1228.247805][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1228.253183][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1228.259435][ T30] watchdog+0x105b/0x1060 [ 1228.263846][ T30] ? watchdog+0x1da/0x1060 [ 1228.268275][ T30] kthread+0x388/0x470 [ 1228.272441][ T30] ? __pfx_watchdog+0x10/0x10 [ 1228.277336][ T30] ? __pfx_kthread+0x10/0x10 [ 1228.281940][ T30] ret_from_fork+0x51e/0xb90 [ 1228.286541][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1228.291657][ T30] ? __switch_to+0xc7d/0x1450 [ 1228.296344][ T30] ? __pfx_kthread+0x10/0x10 [ 1228.300951][ T30] ret_from_fork_asm+0x1a/0x30 [ 1228.305744][ T30] [ 1228.309151][ T30] Kernel Offset: disabled [ 1228.313493][ T30] Rebooting in 86400 seconds..